seo 0.13.0 → 0.13.2

package/dist/mcp.js

@@ -1,5 +1,5 @@
 import { createRequire as __seoCreateRequire } from 'node:module'; const require = __seoCreateRequire(import.meta.url);
-import { i as __toESM, n as version, r as __commonJSMin, t as load } from "./esm-BfNQ2FiC.js";
+import { i as __toESM, n as version, r as __commonJSMin, t as load } from "./esm-Dmtr8qrP.js";
 import { createHash, randomUUID, sign } from "node:crypto";
 import { ZodOptional, z } from "zod";
 import { arch, homedir, platform, tmpdir, totalmem } from "node:os";
@@ -6811,7 +6811,7 @@ var require_data = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	};
 }));
 //#endregion
-//#region node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/utils.js
+//#region node_modules/.pnpm/fast-uri@3.1.9/node_modules/fast-uri/lib/utils.js
 var require_utils = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	/** @type {(value: string) => boolean} */
 	const isUUID = RegExp.prototype.test.bind(/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu);
@@ -7105,6 +7105,38 @@ var require_utils = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		return output.join("");
 	}
 	/**
+	* Removes dot segments from the path of a relative reference (a path that does
+	* not start with "/") without changing what it resolves to against any base.
+	* Unlike `removeDotSegments`, leading ".." segments that cannot be collapsed
+	* are kept, the result never becomes root-relative, and a result that would be
+	* empty or start with an empty segment is prefixed with "." (an empty path
+	* means "same document" and a leading "//" would introduce an authority).
+	*
+	* @param {string} path
+	* @returns {string}
+	*/
+	function removeDotSegmentsRelative(path) {
+		if (path === "" || path[0] === "/") return removeDotSegments(path);
+		const segments = path.split("/");
+		const last = segments.length - 1;
+		/** @type {string[]} */
+		const output = [];
+		let trailingDirectory = false;
+		for (let i = 0; i <= last; i++) {
+			const segment = segments[i];
+			if (segment === "." || segment === "..") {
+				if (segment === "..") {
+					if (output.length !== 0 && output[output.length - 1] !== "..") output.pop();
+					else output.push("..");
+				}
+				trailingDirectory = i === last;
+			} else output.push(segment);
+		}
+		if (trailingDirectory && output[output.length - 1] !== "..") output.push("");
+		if (output.length === 0 || output[0] === "" || output[0].includes(":")) output.unshift(".");
+		return output.join("/");
+	}
+	/**
 	* Re-escape RFC 3986 gen-delims that must not appear literally in the host.
 	* After the URI regex parses, these characters cannot be literal in the host
 	* field, so any that appear after decoding came from percent-encoding and
@@ -7408,6 +7440,7 @@ var require_utils = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		encodeFragment,
 		escapePreservingEscapes,
 		removeDotSegments,
+		removeDotSegmentsRelative,
 		isIPv4,
 		isUUID,
 		normalizeIPv6,
@@ -7415,7 +7448,7 @@ var require_utils = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	};
 }));
 //#endregion
-//#region node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/schemes.js
+//#region node_modules/.pnpm/fast-uri@3.1.9/node_modules/fast-uri/lib/schemes.js
 var require_schemes = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const { isUUID } = require_utils();
 	const URN_REG = /^([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-./:;=@]|%[\da-f]{2})+)$/iu;
@@ -7599,20 +7632,26 @@ var require_schemes = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	};
 }));
 //#endregion
-//#region node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/index.js
+//#region node_modules/.pnpm/fast-uri@3.1.9/node_modules/fast-uri/index.js
 var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
+	const { normalizeIPv6, removeDotSegments, removeDotSegmentsRelative, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
 	const { SCHEMES, getSchemeHandler } = require_schemes();
 	const VALID_SCHEME = /^[A-Za-z][A-Za-z0-9+.-]*$/u;
 	const MALFORMED_SCHEME_ERROR = "URI scheme is malformed.";
+	const MALFORMED_HOST_ERROR = "URI host is malformed.";
+	const FORBIDDEN_DOMAIN_HOST_CHARACTER = /[\0-\x20"#/:<>?@[\\\]^`{|}\x7F]/u;
 	/**
+	* RFC 3986 section 3.1 does not allow percent-encoding in a scheme, so the
+	* scheme is validated as-is and never decoded. Decoding would let inert input
+	* such as `%6Aavascript:` become a live `javascript:` scheme.
+	*
 	* @param {string} scheme
 	* @returns {string}
 	*/
-	function decodeValidScheme(scheme) {
-		const decodedScheme = unescape(String(scheme));
-		if (!VALID_SCHEME.test(decodedScheme)) throw new TypeError(MALFORMED_SCHEME_ERROR);
-		return decodedScheme;
+	function validateScheme(scheme) {
+		const stringScheme = String(scheme);
+		if (!VALID_SCHEME.test(stringScheme)) throw new TypeError(MALFORMED_SCHEME_ERROR);
+		return stringScheme;
 	}
 	/**
 	* @template {import('./types/index').URIComponent|string} T
@@ -7640,6 +7679,7 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		const resolvedSchemeHandler = getSchemeHandler(options && options.scheme || resolved.scheme);
 		const resolvedHost = resolved.host;
 		const resolvedHostIsIP = resolvedHost !== void 0 && resolvedHost !== "" && (isIPv4(resolvedHost) || normalizeIPv6(resolvedHost).isIPV6);
+		if (hasForbiddenDomainHost(resolved, options || {}, resolvedSchemeHandler, resolvedHostIsIP)) throw new Error(MALFORMED_HOST_ERROR);
 		canonicalizeHost(resolved, options || {}, resolvedSchemeHandler, resolvedHostIsIP);
 		const encodedASCIIHost = resolvedHost && resolvedHost.indexOf("%") !== -1 && !/\P{ASCII}/u.test(resolvedHost);
 		if (resolved.error && !encodedASCIIHost) throw new Error(resolved.error);
@@ -7683,10 +7723,11 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				} else {
 					if (relative.path[0] === "/") target.path = removeDotSegments(relative.path);
 					else {
-						if ((base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0) && !base.path) target.path = "/" + relative.path;
+						const baseHasAuthority = base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0;
+						if (baseHasAuthority && !base.path) target.path = "/" + relative.path;
 						else if (!base.path) target.path = relative.path;
 						else target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative.path;
-						target.path = removeDotSegments(target.path);
+						target.path = base.scheme === void 0 && !baseHasAuthority && target.path[0] !== "/" ? removeDotSegmentsRelative(target.path) : removeDotSegments(target.path);
 					}
 					target.query = relative.query;
 				}
@@ -7734,17 +7775,18 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		};
 		const options = Object.assign({}, opts);
 		const uriTokens = [];
-		if (component.scheme) component.scheme = decodeValidScheme(component.scheme);
+		if (component.scheme) component.scheme = validateScheme(component.scheme);
 		const schemeHandler = getSchemeHandler(options.scheme || component.scheme);
 		if (schemeHandler && schemeHandler.serialize) schemeHandler.serialize(component, options);
 		const hasAuthority = component.userinfo !== void 0 || component.host !== void 0 || component.port !== void 0;
-		const pathNoScheme = !options.skipEscape && component.scheme === void 0 && !hasAuthority;
+		const schemelessReference = (component.scheme === void 0 || options.reference === "suffix") && !hasAuthority;
+		const pathNoScheme = !options.skipEscape && schemelessReference;
 		if (component.path !== void 0) {
 			if (!options.skipEscape) component.path = serializePathEncoding(component.path, pathNoScheme);
 			else component.path = normalizePercentEncoding(component.path);
 		}
 		if (options.reference !== "suffix" && component.scheme) {
-			component.scheme = decodeValidScheme(component.scheme);
+			component.scheme = validateScheme(component.scheme);
 			uriTokens.push(component.scheme, ":");
 		}
 		const authority = recomposeAuthority(component);
@@ -7755,8 +7797,8 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		}
 		if (component.path !== void 0) {
 			let s = component.path;
-			if (!options.absolutePath && (!schemeHandler || !schemeHandler.absolutePath)) s = removeDotSegments(s);
-			if (pathNoScheme) s = serializePathEncoding(s, true);
+			if (!options.absolutePath && (!schemeHandler || !schemeHandler.absolutePath)) s = schemelessReference && s[0] !== "/" ? removeDotSegmentsRelative(s) : removeDotSegments(s);
+			if (schemelessReference) s = serializePathEncoding(s, true);
 			if (authority === void 0 && s[0] === "/" && s[1] === "/") s = "/%2F" + s.slice(2);
 			uriTokens.push(s);
 		}
@@ -7820,15 +7862,50 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	* @returns {boolean} whether host conversion failed
 	*/
 	function canonicalizeHost(parsed, options, schemeHandler, isIP) {
-		if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && nonSimpleDomain(parsed.host)) try {
-			parsed.host = new URL("http://" + parsed.host).hostname;
-		} catch (e) {
-			parsed.error = parsed.error || "Host's domain name can not be converted to ASCII: " + e;
+		if (hasForbiddenDomainHost(parsed, options, schemeHandler, isIP)) {
+			parsed.error = parsed.error || MALFORMED_HOST_ERROR;
 			return true;
 		}
+		if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && nonSimpleDomain(parsed.host)) {
+			let url;
+			try {
+				url = new URL("http://" + parsed.host);
+			} catch (e) {
+				parsed.error = parsed.error || "Host's domain name can not be converted to ASCII: " + e;
+				return true;
+			}
+			if (!isHostOnlyURL(url)) {
+				parsed.error = parsed.error || MALFORMED_HOST_ERROR;
+				return true;
+			}
+			parsed.host = url.hostname;
+		}
 		return false;
 	}
 	/**
+	* Whether a domain host contains an ASCII character that RFC 3986 does not
+	* allow in a reg-name (unreserved, sub-delims, or pct-encoded). Such a host is
+	* rejected instead of being handed to the WHATWG URL parser, which would treat
+	* "@" as a userinfo delimiter (silently dropping the data before it) and strip
+	* TAB, LF, and CR. Non-ASCII characters remain allowed for IDNs.
+	*
+	* @param {import('./types/index').URIComponent} parsed
+	* @param {import('./types/index').Options} options
+	* @param {{ domainHost?: boolean }|undefined} schemeHandler
+	* @param {boolean} isIP
+	* @returns {boolean}
+	*/
+	function hasForbiddenDomainHost(parsed, options, schemeHandler, isIP) {
+		return Boolean(parsed.host && isIP === false && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && FORBIDDEN_DOMAIN_HOST_CHARACTER.test(parsed.host));
+	}
+	/**
+	* @param {URL} url
+	* @returns {boolean}
+	*/
+	function isHostOnlyURL(url) {
+		return url.username === "" && url.password === "" && url.port === "" && url.pathname === "/" && url.search === "" && url.hash === "" && url.hostname !== "";
+	}
+	/**
 	* @param {string} uri
 	* @param {import('./types/index').Options} [opts]
 	* @returns {{ parsed: import('./types/index').URIComponent, malformedAuthorityOrPort: boolean, malformedPercentEncoding: boolean, malformedSchemeSpecific: boolean, malformedHost: boolean, malformedScheme: boolean }}
@@ -7885,8 +7962,7 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			parsed.query = matches[7];
 			parsed.fragment = matches[8];
 			if (parsed.scheme !== void 0) {
-				const decodedScheme = unescape(parsed.scheme);
-				if (VALID_SCHEME.test(decodedScheme)) parsed.scheme = decodedScheme.toLowerCase();
+				if (VALID_SCHEME.test(parsed.scheme)) parsed.scheme = parsed.scheme.toLowerCase();
 				else {
 					parsed.error = parsed.error || MALFORMED_SCHEME_ERROR;
 					malformedScheme = true;
@@ -7909,7 +7985,7 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					malformedIPLiteral = hasIPLiteralBracket && (!bracketedIPLiteral || ipv6result.error === true);
 					parsed.host = isIP ? ipv6result.host : ipv6result.host.toLowerCase();
 					if (malformedIPLiteral) {
-						parsed.error = parsed.error || "URI host is malformed.";
+						parsed.error = parsed.error || MALFORMED_HOST_ERROR;
 						malformedAuthorityOrPort = true;
 					}
 				} else isIP = true;
@@ -7924,7 +8000,7 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			if (uri.indexOf("%") !== -1 && parsed.host !== void 0 && !malformedIPLiteral) {
 				let host = isIP ? parsed.host : normalizePercentEncoding(parsed.host, true);
 				if (!isIP) host = normalizePercentEncoding(host.toLowerCase());
-				parsed.host = reescapeHostDelimiters(host, isIP);
+				parsed.host = isIP || options.scheme !== "null" ? reescapeHostDelimiters(host, isIP) : host;
 			}
 			if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
 				if (parsed.path) parsed.path = normalizePathEncoding(parsed.path);
@@ -13560,6 +13636,44 @@ function agentActionsView(report, options = {}) {
 	};
 }
 //#endregion
+//#region packages/core/dist/providers/errors.js
+const PROVIDER_ERROR_CODES = {
+	configuration: "AUTH_CONFIG_REQUIRED",
+	authentication: "AUTH_CONFIG_REQUIRED",
+	"rate-limit": "RATE_LIMITED",
+	timeout: "PROVIDER_UNAVAILABLE",
+	"response-too-large": "PROVIDER_UNAVAILABLE",
+	"invalid-response": "PROVIDER_UNAVAILABLE",
+	"remote-error": "PROVIDER_UNAVAILABLE"
+};
+var ProviderError = class extends Error {
+	provider;
+	operation;
+	code;
+	status;
+	retryable;
+	constructor(input) {
+		super(input.message, { cause: input.cause });
+		this.name = "ProviderError";
+		this.provider = input.provider;
+		this.operation = input.operation;
+		this.code = input.code;
+		this.status = input.status ?? null;
+		this.retryable = input.retryable ?? false;
+	}
+	toJSON() {
+		return {
+			name: this.name,
+			provider: this.provider,
+			operation: this.operation,
+			code: this.code,
+			message: this.message,
+			status: this.status,
+			retryable: this.retryable
+		};
+	}
+};
+//#endregion
 //#region packages/core/dist/errors.js
 const errorMetadata = {
 	ACCESS_DENIED: {
@@ -13625,6 +13739,7 @@ function errorMessage$1(error) {
 function toSeoError(error) {
 	if (error instanceof SeoError) return error;
 	const message = errorMessage$1(error);
+	if (error instanceof ProviderError) return new SeoError(PROVIDER_ERROR_CODES[error.code], message);
 	if (/not logged in/i.test(message)) return new SeoError("AUTH_REQUIRED", message);
 	if (/oauth client config.*missing|shared seo google app/i.test(message)) return new SeoError("AUTH_CONFIG_REQUIRED", message);
 	if (/invalid_grant|refresh token.*no longer valid/i.test(message)) return new SeoError("AUTH_EXPIRED", message);
@@ -14408,15 +14523,18 @@ function factsOnly(value) {
 	if (value && typeof value === "object") return Object.fromEntries(Object.entries(value).filter(([key]) => !ADVICE_KEYS.test(key)).map(([key, child]) => [key, factsOnly(child)]));
 	return value;
 }
+function realIsoDate(value) {
+	return /^\d{4}-\d{2}-\d{2}$/.test(value) && (/* @__PURE__ */ new Date(`${value}T00:00:00Z`)).toISOString().startsWith(value);
+}
 function dateWindow(input, fallbackDays) {
-	if (input.startDate || input.endDate) {
-		if (!input.startDate || !input.endDate || input.startDate > input.endDate) throw new CommandError("INVALID_INPUT", "Send a start date and an end date together, in order.");
-		return {
-			startDate: input.startDate,
-			endDate: input.endDate
-		};
-	}
-	return finalGscDateRange(fallbackDays);
+	if (!input.startDate && !input.endDate) return finalGscDateRange(fallbackDays);
+	const endDate = input.endDate ?? latestFinalGscDate();
+	const startDate = input.startDate ?? shiftIsoDate(endDate, 1 - fallbackDays);
+	if (!realIsoDate(startDate) || !realIsoDate(endDate) || startDate > endDate) throw new CommandError("INVALID_INPUT", `Send real YYYY-MM-DD dates with the start before the end (got ${startDate} to ${endDate}).`);
+	return {
+		startDate,
+		endDate
+	};
 }
 function earlierRange(range) {
 	return decayComparisonRange(range, "previous-period");
@@ -14500,20 +14618,38 @@ function listOfUpdates(value, checked) {
 	if (value.length === 0) return `Google updates ${where}: none.`;
 	return `Google updates ${where} (timing only, not cause): ${value.map((update) => `${update.name} (${update.start.slice(0, 10)} to ${update.end?.slice(0, 10) ?? "ongoing"})`).join("; ")}.`;
 }
+function readable(names, who = "it") {
+	if (!names.length) return `Search Console properties ${who} can read: none.`;
+	const more = names.length > 20 ? `, and ${names.length - 20} more` : "";
+	return `Search Console properties ${who} can read: ${names.slice(0, 20).join(", ")}${more}.`;
+}
 function matchProperty(names, site) {
-	if (names.includes(site)) return site;
-	let host;
-	let origin;
+	const value = site.trim();
+	if (names.includes(value)) return value;
+	let url;
 	try {
-		const url = new URL(site.includes("://") ? site : `https://${site.replace(/^sc-domain:/, "")}`);
-		host = url.hostname.replace(/^www\./, "");
-		origin = url.origin;
+		url = new URL(value.includes("://") ? value : `https://${value.replace(/^sc-domain:/i, "")}`);
 	} catch {
 		return null;
 	}
-	const domain = names.filter((name) => name.startsWith("sc-domain:")).map((name) => name.slice(10)).filter((name) => host === name || host.endsWith(`.${name}`)).sort((a, b) => b.length - a.length)[0];
-	if (domain) return `sc-domain:${domain}`;
-	return names.find((name) => name === `${origin}/` || name === `${origin.replace("://", "://www.")}/` || name === `${origin.replace("://www.", "://")}/`) ?? null;
+	const bare = (name) => name.replace(/^www\./, "");
+	const host = bare(url.hostname);
+	const domain = names.filter((name) => name.startsWith("sc-domain:")).filter((name) => {
+		const own = name.slice(10);
+		return own.startsWith("www.") ? bare(own) === host : host === own || host.endsWith(`.${own}`);
+	}).sort((a, b) => b.length - a.length || a.localeCompare(b))[0];
+	if (domain) return domain;
+	const schemes = value.includes("://") ? [url.protocol] : ["https:", "http:"];
+	return names.map((name) => {
+		try {
+			return {
+				name,
+				url: new URL(name)
+			};
+		} catch {
+			return null;
+		}
+	}).filter((entry) => entry !== null && schemes.includes(entry.url.protocol) && bare(entry.url.hostname) === host && `${url.pathname}/`.startsWith(entry.url.pathname)).sort((a, b) => b.url.pathname.length - a.url.pathname.length || schemes.indexOf(a.url.protocol) - schemes.indexOf(b.url.protocol) || Number(b.url.hostname === url.hostname) - Number(a.url.hostname === url.hostname) || a.name.localeCompare(b.name))[0]?.name ?? null;
 }
 //#endregion
 //#region packages/core/dist/commands/present.js
@@ -14935,9 +15071,10 @@ var LinkedAccounts = class {
 	}
 	async resolve(site) {
 		if (this.google.length === 0) throw new CommandError("NOT_CONNECTED", `No Google account is connected. ${this.hint.signIn}`);
-		const found = matchProperty([...(await this.ownerMap()).keys()], site);
+		const names = await this.properties();
+		const found = matchProperty(names, site);
 		if (found) return found;
-		throw new CommandError("NO_ACCESS", `None of the connected Google accounts (${this.google.map((linked) => linked.email).join(", ")}) has a Search Console property for ${site}. ${this.hint.addGoogle}`);
+		throw new CommandError("NO_ACCESS", `None of the connected Google accounts (${this.google.map((linked) => linked.email).join(", ")}) has a Search Console property for ${site}. ${readable(names, "they")} ${this.hint.addGoogle}`);
 	}
 	async owner(site) {
 		const owner = (await this.ownerMap()).get(await this.resolve(site));
@@ -15286,6 +15423,10 @@ function classify(error) {
 		errorCategory: "crawl_timeout",
 		failureReason: "crawl_timeout"
 	};
+	const provider = signals.find((signal) => signal.name === "ProviderError");
+	const providerCode = PROVIDER_ERROR_CODES[provider?.code];
+	const fromProvider = providerCode && PRODUCT_FAILURES[providerCode];
+	if (fromProvider) return fromProvider;
 	for (const code of codes) {
 		const product = PRODUCT_FAILURES[code];
 		if (product) return product;
@@ -20540,7 +20681,7 @@ async function queryPagesTopQueriesBatch(site, pageUrls, range = 28) {
 }
 //#endregion
 //#region packages/core/dist/gsc/client/sites.js
-async function listSites(_refresh = false, accountEmail) {
+async function listSites$1(_refresh = false, accountEmail) {
 	const entries = !accountEmail && cloudLinked() ? await allCloudSites() : await listSearchConsoleSites(googleFetchFor((await getAuthorized(accountEmail)).client), LOCAL_SIGN_IN);
 	writeToCache((database) => {
 		const insert = database.prepare("INSERT OR REPLACE INTO sites (site_url, display_name, permission, added_at, is_default) VALUES (?, ?, ?, ?, COALESCE((SELECT is_default FROM sites WHERE site_url = ?), 0))");
@@ -26618,35 +26759,6 @@ async function fetchSitemapUrls(input) {
 	};
 }
 //#endregion
-//#region packages/core/dist/providers/errors.js
-var ProviderError = class extends Error {
-	provider;
-	operation;
-	code;
-	status;
-	retryable;
-	constructor(input) {
-		super(input.message, { cause: input.cause });
-		this.name = "ProviderError";
-		this.provider = input.provider;
-		this.operation = input.operation;
-		this.code = input.code;
-		this.status = input.status ?? null;
-		this.retryable = input.retryable ?? false;
-	}
-	toJSON() {
-		return {
-			name: this.name,
-			provider: this.provider,
-			operation: this.operation,
-			code: this.code,
-			message: this.message,
-			status: this.status,
-			retryable: this.retryable
-		};
-	}
-};
-//#endregion
 //#region packages/core/dist/providers/cache.js
 function stableValue(value) {
 	if (Array.isArray(value)) return value.map(stableValue);
@@ -33081,7 +33193,7 @@ function analyzeTrafficAnomalyRows(input) {
 	const comparisonStart = shiftIsoDate(input.endDate, -(input.recentDays - 1));
 	const baselineEnd = shiftIsoDate(comparisonStart, -1);
 	const baselineExpectedDays = calendarDays(input.startDate, baselineEnd);
-	if (comparisonStart < input.startDate || baselineExpectedDays < 14) throw new SeoError("INSUFFICIENT_DATA", "The requested calendar range does not contain at least 14 baseline days before the comparison window.");
+	if (comparisonStart < input.startDate || baselineExpectedDays < 14) throw new SeoError("INSUFFICIENT_DATA", `The date range needs at least ${input.recentDays + 14} days: 14 baseline days before the last ${input.recentDays}. Send a longer range, or leave the dates out for the default.`);
 	const aggregated = aggregateDailyRows({
 		rows: input.rows,
 		startDate: input.startDate,
@@ -33089,7 +33201,7 @@ function analyzeTrafficAnomalyRows(input) {
 	});
 	const baselineRows = aggregated.rows.filter((row) => (row.keys[0] ?? "") <= baselineEnd);
 	const comparisonRows = aggregated.rows.filter((row) => (row.keys[0] ?? "") >= comparisonStart);
-	if (baselineRows.length < 14 || comparisonRows.length < 3) throw new SeoError("INSUFFICIENT_DATA", `Not enough observed daily GSC data for anomaly detection (${baselineRows.length} baseline days and ${comparisonRows.length} comparison days).`);
+	if (baselineRows.length < 14 || comparisonRows.length < 3) throw new SeoError("INSUFFICIENT_DATA", `Not enough daily Search Console data to look for a drop: ${baselineRows.length} baseline days and ${comparisonRows.length} comparison days, and it needs 14 and 3. The site may be new or get too few clicks for daily rows.`);
 	const metrics = ["clicks", "impressions"];
 	const stepCaveats = [];
 	const anomalies = metrics.map((metric) => {
@@ -39434,25 +39546,64 @@ function need(headers, provider) {
 	if (values.some((value) => !value)) throw new CommandError("NO_KEY", `No ${provider} key. Hosted MCP: save it at https://seoskill.dev/account#keys. CLI and local MCP: run \`seo login\` to use the account's keys, or \`seo providers ${provider} connect\`.`);
 	return values;
 }
+const TASK_TIMEOUT_MS = 6e4;
+const READ_TIMEOUT_MS = 3e4;
+const RETRY_DELAY_MS = 250;
+const retryStatus = (status) => status === 429 || status >= 500;
 async function call(provider, request) {
-	const response = await fetch(request);
-	if (response.ok) return response;
-	const text = (await response.text()).slice(0, 300);
-	throw new CommandError(response.status === 401 || response.status === 403 ? "NO_KEY" : "PROVIDER_ERROR", `${provider} answered ${response.status}. ${text}`);
+	const read = request.method === "GET";
+	const timeoutMs = read ? READ_TIMEOUT_MS : TASK_TIMEOUT_MS;
+	for (let attempt = 1;; attempt += 1) {
+		const last = attempt === 2;
+		let response;
+		try {
+			response = await fetch(request.clone(), { signal: AbortSignal.timeout(timeoutMs) });
+		} catch (error) {
+			if (read && !last) {
+				await wait(RETRY_DELAY_MS);
+				continue;
+			}
+			throw new CommandError("PROVIDER_ERROR", error.name === "TimeoutError" ? `${provider} did not answer within ${timeoutMs / 1e3} seconds.` : `${provider} could not be reached: ${error.message}`);
+		}
+		if (response.ok) return response;
+		if (retryStatus(response.status) && !last) {
+			await response.body?.cancel();
+			await wait(RETRY_DELAY_MS);
+			continue;
+		}
+		const text = (await response.text()).slice(0, 300);
+		throw new CommandError(response.status === 401 || response.status === 403 ? "NO_KEY" : response.status === 429 ? "RATE_LIMITED" : "PROVIDER_ERROR", `${provider} answered ${response.status}. ${text}`);
+	}
 }
+const wait = (ms) => new Promise((done) => setTimeout(done, ms));
 function requireInput(input) {
 	const needsKeywords = input.action === "keyword_metrics" || input.action === "serp";
 	if (needsKeywords && input.keywords.length === 0) throw new CommandError("INVALID_INPUT", `${input.action} needs keywords.`);
 	if (!needsKeywords && !input.target) throw new CommandError("INVALID_INPUT", `${input.action} needs a target domain or URL.`);
 }
+async function eachKeyword(keywords, missed, rowsFor) {
+	const rows = [];
+	let failure;
+	for (const keyword of keywords) try {
+		rows.push(...await rowsFor(keyword));
+	} catch (error) {
+		if (error instanceof CommandError && error.code === "NO_KEY") throw error;
+		failure ??= error;
+		missed.push(keyword);
+	}
+	if (missed.length === keywords.length) throw failure;
+	return rows;
+}
 async function research(provider, headers, input) {
 	requireInput(input);
 	const keys = need(headers, provider);
 	if (provider === "dataforseo") return dataForSeo(keys, input);
+	const missed = [];
 	return {
-		rows: await ahrefs(keys[0] ?? "", input),
+		rows: await ahrefs(keys[0] ?? "", input, missed),
 		costUsd: null,
-		partial: false
+		partial: false,
+		missed
 	};
 }
 function countryName(code) {
@@ -39518,12 +39669,14 @@ const PARTIAL = 40106;
 async function dataForSeo(keys, input) {
 	const spent = {
 		cost: 0,
-		partial: false
+		partial: false,
+		missed: []
 	};
 	return {
 		rows: await dataForSeoRows(keys, input, spent),
 		costUsd: Math.round(spent.cost * 1e4) / 1e4,
-		partial: spent.partial
+		partial: spent.partial,
+		missed: spent.missed
 	};
 }
 async function dataForSeoRows(keys, input, spent) {
@@ -39565,28 +39718,20 @@ async function dataForSeoRows(keys, input, spent) {
 		keyword_difficulty: "keyword_data.keyword_properties.keyword_difficulty",
 		main_intent: "keyword_data.search_intent_info.main_intent"
 	}));
-	if (input.action === "serp") {
-		const rows = [];
-		for (const keyword of input.keywords.slice(0, 5)) {
-			const items = await post("v3/serp/google/organic/live/advanced", {
-				keyword,
-				depth: Math.min(input.limit, 100)
-			});
-			for (const item of items) {
-				if (item.type !== "organic") continue;
-				rows.push({
-					keyword,
-					...pick(item, {
-						position: "rank_absolute",
-						url: "url",
-						domain: "domain",
-						title: "title"
-					})
-				});
-			}
-		}
-		return rows;
-	}
+	if (input.action === "serp") return eachKeyword(input.keywords.slice(0, 5), spent.missed, async (keyword) => {
+		return (await post("v3/serp/google/organic/live/advanced", {
+			keyword,
+			depth: Math.min(input.limit, 100)
+		})).filter((item) => item.type === "organic").map((item) => ({
+			keyword,
+			...pick(item, {
+				position: "rank_absolute",
+				url: "url",
+				domain: "domain",
+				title: "title"
+			})
+		}));
+	});
 	if (input.action === "backlinks") return (await post("v3/backlinks/referring_domains/live", {
 		target: bareTarget(input.target),
 		limit: input.limit,
@@ -39615,7 +39760,7 @@ function isPage(target) {
 function bareTarget(target) {
 	return target.replace(/^https?:\/\//, "").replace(/\/$/, "");
 }
-async function ahrefs(key, input) {
+async function ahrefs(key, input, missed) {
 	const get = async (path, params) => {
 		const url = new URL(`https://api.ahrefs.com/v3/${path}`);
 		for (const [name, value] of Object.entries(params)) url.searchParams.set(name, value);
@@ -39639,22 +39784,17 @@ async function ahrefs(key, input) {
 		limit: String(input.limit),
 		order_by: "sum_traffic:desc"
 	})).keywords ?? [];
-	if (input.action === "serp") {
-		const rows = [];
-		for (const keyword of input.keywords.slice(0, 5)) {
-			const data = await get("serp-overview/serp-overview", {
-				select: "position,type,url,title,domain_rating,traffic,keywords",
-				keyword,
-				country: input.country,
-				top_positions: String(Math.min(input.limit, 100))
-			});
-			for (const row of data.positions ?? []) rows.push({
-				keyword,
-				...row
-			});
-		}
-		return rows;
-	}
+	if (input.action === "serp") return eachKeyword(input.keywords.slice(0, 5), missed, async (keyword) => {
+		return ((await get("serp-overview/serp-overview", {
+			select: "position,type,url,title,domain_rating,traffic,keywords",
+			keyword,
+			country: input.country,
+			top_positions: String(Math.min(input.limit, 100))
+		})).positions ?? []).map((row) => ({
+			keyword,
+			...row
+		}));
+	});
 	if (input.action === "backlinks") return (await get("site-explorer/refdomains", {
 		select: "domain,domain_rating,links_to_target,dofollow_links,first_seen,last_seen",
 		target: input.target,
@@ -42376,7 +42516,7 @@ async function runResearch(input, keys, options) {
 	const offset = input.offset ?? 0;
 	const language = input.provider === "dataforseo" ? dataForSeoLanguage(country) : null;
 	if (input.action === "ai_answers") throw new CommandError("INVALID_INPUT", "ai_answers runs on its own.");
-	const { rows: found, costUsd, partial } = await research(input.provider, keys, {
+	const { rows: found, costUsd, partial, missed } = await research(input.provider, keys, {
 		action: input.action,
 		keywords: input.keywords ?? [],
 		target,
@@ -42402,6 +42542,7 @@ async function runResearch(input, keys, options) {
 				`${input.provider} estimates, in the provider’s own units.`,
 				...costUsd !== null ? [`DataForSEO cost: $${costUsd}.`] : [],
 				...partial ? ["Partial: DataForSEO could not fetch some pages of results, so rows may be missing."] : [],
+				...missed.length ? [`Partial: ${input.provider} failed for ${missed.join(", ")}, so those keywords have no rows. Ask for them again.`] : [],
 				...note ? [note] : [],
 				...hasTargetDr ? [`${bareDomain(target)} domain_rating: ${targetDr}.`] : [],
 				...rated.added || hasTargetDr ? [DR_ATTRIBUTION] : []
@@ -42419,6 +42560,7 @@ async function runResearch(input, keys, options) {
 			leftOut: note,
 			costUsd,
 			partial,
+			missedKeywords: missed,
 			total: rated.rows.length,
 			offset,
 			rows: rated.rows.slice(offset, offset + 50)
@@ -42673,10 +42815,10 @@ function markdownText(markdown, url) {
 	return `Main content as Markdown (live page${markdown.truncated ? `, cut to ${markdown.markdown.length.toLocaleString("en-US")} of ${markdown.characters.toLocaleString("en-US")} characters` : ""}):\n\n${markdown.markdown}`;
 }
 async function runCompare(input, deps) {
-	if (!/^\d{4}-\d{2}-\d{2}$/.test(input.date)) throw new CommandError("INVALID_INPUT", "The date must be YYYY-MM-DD.");
+	if (!realIsoDate(input.date)) throw new CommandError("INVALID_INPUT", "The date must be a real day as YYYY-MM-DD.");
 	const last = latestFinalGscDate(deps.now?.() ?? /* @__PURE__ */ new Date());
 	const daysAfter = Math.round((Date.parse(last) - Date.parse(input.date)) / 864e5) + 1;
-	if (daysAfter < 3) throw new CommandError("INVALID_INPUT", `Search Console has final data to ${last}. Use a date at least 3 days before that.`);
+	if (daysAfter < 3) throw new CommandError("INVALID_INPUT", `Search Console has final data to ${last}, and a comparison needs 3 days after the change. The latest date that works is ${shiftIsoDate(last, -2)}.`);
 	const days = Math.min(28, daysAfter);
 	const after = {
 		startDate: input.date,
@@ -43048,8 +43190,15 @@ function weekMarkdown(data) {
 	out.push("", "## Ask your agent", "", "Paste this into your agent:", "", "```", prompt, "```");
 	return out.join("\n");
 }
-async function runAllSites(deps) {
+async function runAllSites(deps, sites) {
 	const data = deps.week ? await deps.week() : null;
+	if (!data && sites) {
+		const list = await sites();
+		return {
+			text: `No site given. Pick one below and send it: ${deps.call("report", { site: "<site>" })}. The summary of every site is for accounts in the weekly site audit beta.\n\n${list.text}`,
+			data: list.data
+		};
+	}
 	if (!data) throw new CommandError("INVALID_INPUT", `No site given. Name one: ${deps.call("report", { site: "<site>" })}. The summary of every site is for accounts in the weekly site audit beta.`);
 	const startMs = Date.parse(`${data.start}T00:00:00Z`);
 	const endMs = Date.parse(`${data.end}T00:00:00Z`) + DAY_MS;
@@ -43065,8 +43214,8 @@ async function runAllSites(deps) {
 //#region packages/core/dist/commands/tools.js
 const site = z.string().min(1).describe("Search Console property or site, such as sc-domain:example.com, https://example.com/ or example.com.");
 const dates = {
-	start_date: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional().describe("YYYY-MM-DD. Optional; send with end_date."),
-	end_date: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional().describe("YYYY-MM-DD. Optional; send with start_date.")
+	start_date: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional().describe("YYYY-MM-DD. Optional; without end_date it runs to the latest final day."),
+	end_date: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional().describe("YYYY-MM-DD. Optional.")
 };
 const detail = {
 	detail: z.enum([
@@ -43085,6 +43234,14 @@ const DATA_SOURCES = [
 function tool(spec) {
 	return spec;
 }
+const listSites = async (surface) => runSites({
+	accounts: await surface.accounts(),
+	keys: await surface.keys(),
+	clicky: clickySites(await surface.keys()).map(clickyLabel),
+	signIn: surface.signIn,
+	bing: surface.deps.bing ? await surface.deps.bing() : void 0,
+	connect: surface.connect
+});
 const SHARED_TOOLS = [
 	tool({
 		name: "seo_sites",
@@ -43092,20 +43249,13 @@ const SHARED_TOOLS = [
 		title: "List sites",
 		description: "Lists the Search Console and Google Analytics properties the connected Google accounts can read, the Bing Webmaster site for each, and which research keys are set. Call it first.",
 		input: z.object({}),
-		run: async (surface) => runSites({
-			accounts: await surface.accounts(),
-			keys: await surface.keys(),
-			clicky: clickySites(await surface.keys()).map(clickyLabel),
-			signIn: surface.signIn,
-			bing: surface.deps.bing ? await surface.deps.bing() : void 0,
-			connect: surface.connect
-		})
+		run: listSites
 	}),
 	tool({
 		name: "seo_report",
 		command: "report",
 		title: "Search Console report",
-		description: `Start here. Without site: a short summary of every site in the person's weekly site audit (beta) for last week, with what needs a look and the next step for each, ending with the site to ask about next; an account outside that beta must send site. With site: the main report for that Search Console property, the overview plus each section's row count and top rows. With site and section: that section's rows; page sections also check their top 20 URLs live. Sections:\n${Object.entries(SECTIONS).map(([id, text]) => `- ${id}: ${text}`).join("\n")}`,
+		description: `Start here. Without site: a short summary of every site in the person's weekly site audit (beta) for last week, with what needs a look and the next step for each, ending with the site to ask about next; an account outside that beta gets its site list to pick from. With site: the main report for that Search Console property, the overview plus each section's row count and top rows. With site and section: that section's rows; page sections also check their top 20 URLs live. Sections:\n${Object.entries(SECTIONS).map(([id, text]) => `- ${id}: ${text}`).join("\n")}`,
 		input: z.object({
 			site: site.optional().describe("Leave it out for the summary of every audited site (weekly site audit beta). Otherwise a Search Console property or site, such as sc-domain:example.com, https://example.com/ or example.com."),
 			section: z.enum(SECTION_IDS).optional().describe("Optional, needs site. Leave it out first; then ask for one section."),
@@ -43118,7 +43268,7 @@ const SHARED_TOOLS = [
 					site: "<site>",
 					section: input.section
 				})}.`);
-				return runAllSites(surface.deps);
+				return runAllSites(surface.deps, () => listSites(surface));
 			}
 			const target = input.site;
 			const resolved = await surface.resolveSite(target).catch((error) => error instanceof Error ? error : new Error(String(error)));
@@ -43674,8 +43824,9 @@ async function localRefreshClicky() {
 	return localResearchKeys();
 }
 async function resolveLocalSite(site, options = {}) {
-	const found = matchProperty((await listSites(options.refresh, options.account)).map((entry) => entry.siteUrl), site);
-	if (!found) throw new CommandError("NO_ACCESS", `This Google login has no Search Console property for ${site}. Run \`seo sites\` to list the properties it can read.`);
+	const names = (await listSites$1(options.refresh, options.account)).map((entry) => entry.siteUrl);
+	const found = matchProperty(names, site);
+	if (!found) throw new CommandError("NO_ACCESS", `This Google login has no Search Console property for ${site}. ${readable(names)}`);
 	return found;
 }
 const ERROR_CODES = {
@@ -43683,6 +43834,7 @@ const ERROR_CODES = {
 	NOT_CONNECTED: "AUTH_REQUIRED",
 	NO_ACCESS: "PROPERTY_NOT_FOUND",
 	NO_KEY: "AUTH_CONFIG_REQUIRED",
+	NO_DATA: "INSUFFICIENT_DATA",
 	RATE_LIMITED: "RATE_LIMITED",
 	GOOGLE_ERROR: "PROVIDER_UNAVAILABLE",
 	PROVIDER_ERROR: "PROVIDER_UNAVAILABLE"
@@ -46607,13 +46759,20 @@ const REMOVED_REPORT_IDS = {
 	"server-log-analysis": null,
 	"technical-watch": "seo crawl"
 };
-function activeReport(id) {
+const REPORT_ALIASES = {
+	cannibalization: "cannibalisation",
+	"content-decay": "decaying-pages",
+	"low-ctr": "ctr-underperformers",
+	"traffic-drop": "traffic-anomaly"
+};
+function activeReport(name) {
+	const id = REPORT_ALIASES[name] ?? name;
 	if (Object.hasOwn(REMOVED_REPORT_IDS, id)) {
 		const replacement = REMOVED_REPORT_IDS[id];
 		throw new SeoError("INVALID_INPUT", replacement ? `The ${id} report was removed. Use \`${replacement}\` instead.` : `The ${id} report was removed. Run \`seo help\` for the commands.`);
 	}
 	const report = getReportDefinition(id);
-	if (!report) throw new SeoError("INVALID_INPUT", `Unknown report: ${id}.`);
+	if (!report) throw new SeoError("INVALID_INPUT", `Unknown report: ${id}. Reports: ${listReportDefinitions().map((item) => item.id).join(", ")}.`);
 	return report;
 }
 function listReports(category) {