seo 0.2.10 → 0.2.13

package/dist/index.js

@@ -1,12 +1,12 @@
 import { createRequire as __seoCreateRequire } from 'node:module'; const require = __seoCreateRequire(import.meta.url);
-import { n as load, t as version } from "./package-92W1Zc-o.js";
+import { n as load, t as version } from "./package-B_swz2Xd.js";
 import { Headers, fetch as fetch$1 } from "undici";
-import { chmodSync, createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { chmodSync, createReadStream, createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { arch, homedir, platform, totalmem } from "node:os";
-import { basename, dirname, join } from "node:path";
+import { basename, dirname, extname, join, resolve } from "node:path";
 import { z } from "zod";
 import lockfile from "proper-lockfile";
-import crypto, { createHash, randomUUID, sign } from "node:crypto";
+import crypto, { createHash, randomBytes, randomUUID, sign } from "node:crypto";
 import http from "node:http";
 import open from "open";
 import Libsql from "libsql";
@@ -21,9 +21,9 @@ import { gunzipSync } from "node:zlib";
 import { execFile } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { promisify } from "node:util";
+import { mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import pino from "pino";
 import pretty from "pino-pretty";
-import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 //#region packages/core/src/errors.ts
 const errorMetadata = {
 	ACCESS_DENIED: {
@@ -83,12 +83,12 @@ var SeoError = class extends Error {
 		this.retryable = errorMetadata[code].retryable;
 	}
 };
-function errorMessage$2(error) {
+function errorMessage$3(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 function toSeoError(error) {
 	if (error instanceof SeoError) return error;
-	const message = errorMessage$2(error);
+	const message = errorMessage$3(error);
 	if (/not logged in/i.test(message)) return new SeoError("AUTH_REQUIRED", message);
 	if (/oauth client config.*missing|shared seo google app/i.test(message)) return new SeoError("AUTH_CONFIG_REQUIRED", message);
 	if (/invalid_grant|refresh token.*no longer valid/i.test(message)) return new SeoError("AUTH_EXPIRED", message);
@@ -145,6 +145,7 @@ function resolveSeoCliPaths(input = {}) {
 		configFile: join(configDir, "config.json"),
 		tokensFile: join(configDir, "tokens.json"),
 		oauthClientFile: join(configDir, "oauth-client.json"),
+		providerSecretsFile: join(configDir, "provider-secrets.json"),
 		telemetryStateFile: join(configDir, "telemetry.json"),
 		cacheDbFile: join(cacheDir, "cache.db")
 	};
@@ -231,6 +232,7 @@ const clientProfileSchema = z.object({
 	watchUrls: z.array(z.string()).default([]),
 	brandTerms: z.array(z.string()).default([]),
 	analytics: analyticsConnectionsSchema,
+	searchEngines: z.object({ bing: z.object({ siteUrl: z.string() }).optional() }).optional(),
 	reportDay: z.number().int().min(1).max(31).optional(),
 	technicalWeekday: z.number().int().min(0).max(7).optional(),
 	isDefault: z.boolean().optional(),
@@ -316,11 +318,11 @@ async function deleteKeyringPassword(service, account) {
 }
 //#endregion
 //#region packages/core/src/storage/config.ts
-const KEYRING_SERVICE = "seo";
-const PRIVATE_FILE_MODE = 384;
+const KEYRING_SERVICE$1 = "seo";
+const PRIVATE_FILE_MODE$1 = 384;
 function tightenConfigPermissions(path) {
 	try {
-		chmodSync(path, PRIVATE_FILE_MODE);
+		chmodSync(path, PRIVATE_FILE_MODE$1);
 	} catch (error) {
 		if (error.code !== "ENOENT") throw error;
 	}
@@ -334,7 +336,7 @@ function readConfig() {
 }
 function writeConfig(config) {
 	ensureSeoCliDirs();
-	writeJsonAtomic(getSeoCliPaths().configFile, configSchema.parse(config), PRIVATE_FILE_MODE);
+	writeJsonAtomic(getSeoCliPaths().configFile, configSchema.parse(config), PRIVATE_FILE_MODE$1);
 }
 function getKeyringAccount(tokens) {
 	return `google:${tokens.account_email}`;
@@ -354,7 +356,7 @@ function tokenMetadata(tokens) {
 }
 async function readKeyringTokens(tokens) {
 	const account = getKeyringAccount(tokens);
-	const [accessToken, refreshToken] = await Promise.all([getKeyringPassword(KEYRING_SERVICE, `${account}:access`), getKeyringPassword(KEYRING_SERVICE, `${account}:refresh`)]);
+	const [accessToken, refreshToken] = await Promise.all([getKeyringPassword(KEYRING_SERVICE$1, `${account}:access`), getKeyringPassword(KEYRING_SERVICE$1, `${account}:refresh`)]);
 	return {
 		accessToken: accessToken ?? void 0,
 		refreshToken: refreshToken ?? void 0
@@ -362,14 +364,14 @@ async function readKeyringTokens(tokens) {
 }
 async function writeKeyringTokens(tokens) {
 	const account = getKeyringAccount(tokens);
-	if (tokens.access_token) await setKeyringPassword(KEYRING_SERVICE, `${account}:access`, tokens.access_token);
-	else await deleteKeyringPassword(KEYRING_SERVICE, `${account}:access`);
-	if (tokens.refresh_token) await setKeyringPassword(KEYRING_SERVICE, `${account}:refresh`, tokens.refresh_token);
-	else await deleteKeyringPassword(KEYRING_SERVICE, `${account}:refresh`);
+	if (tokens.access_token) await setKeyringPassword(KEYRING_SERVICE$1, `${account}:access`, tokens.access_token);
+	else await deleteKeyringPassword(KEYRING_SERVICE$1, `${account}:access`);
+	if (tokens.refresh_token) await setKeyringPassword(KEYRING_SERVICE$1, `${account}:refresh`, tokens.refresh_token);
+	else await deleteKeyringPassword(KEYRING_SERVICE$1, `${account}:refresh`);
 }
 async function deleteKeyringTokens(tokens) {
 	const account = getKeyringAccount(tokens);
-	await Promise.all([deleteKeyringPassword(KEYRING_SERVICE, `${account}:access`), deleteKeyringPassword(KEYRING_SERVICE, `${account}:refresh`)]);
+	await Promise.all([deleteKeyringPassword(KEYRING_SERVICE$1, `${account}:access`), deleteKeyringPassword(KEYRING_SERVICE$1, `${account}:refresh`)]);
 }
 async function readTokens() {
 	ensureSeoCliDirs();
@@ -381,7 +383,7 @@ async function readTokens() {
 		const keyringTokens = await readKeyringTokens(parsed);
 		if (hasTokenSecrets(parsed)) {
 			await writeKeyringTokens(parsed);
-			writeJsonAtomic(getSeoCliPaths().tokensFile, tokenMetadata(parsed), PRIVATE_FILE_MODE);
+			writeJsonAtomic(getSeoCliPaths().tokensFile, tokenMetadata(parsed), PRIVATE_FILE_MODE$1);
 			return parsed;
 		}
 		return {
@@ -398,10 +400,10 @@ async function writeTokens(tokens) {
 	const parsed = tokenSchema.parse(tokens);
 	if (readConfig().security.useKeychain) try {
 		await writeKeyringTokens(parsed);
-		writeJsonAtomic(getSeoCliPaths().tokensFile, tokenMetadata(parsed), PRIVATE_FILE_MODE);
+		writeJsonAtomic(getSeoCliPaths().tokensFile, tokenMetadata(parsed), PRIVATE_FILE_MODE$1);
 		return;
 	} catch {}
-	writeJsonAtomic(getSeoCliPaths().tokensFile, parsed, PRIVATE_FILE_MODE);
+	writeJsonAtomic(getSeoCliPaths().tokensFile, parsed, PRIVATE_FILE_MODE$1);
 }
 async function deleteTokens() {
 	const tokens = await readTokens();
@@ -493,6 +495,12 @@ function getPrivacySnapshot() {
 			mode: fileMode(paths.oauthClientFile),
 			sizeBytes: sizeOf(paths.oauthClientFile)
 		},
+		{
+			label: "Provider secrets",
+			path: paths.providerSecretsFile,
+			mode: fileMode(paths.providerSecretsFile),
+			sizeBytes: sizeOf(paths.providerSecretsFile)
+		},
 		{
 			label: "Telemetry state",
 			path: paths.telemetryStateFile,
@@ -2524,6 +2532,43 @@ function extractCanonicalEvidence($, headers, baseUrl) {
 	return evidenceFromCandidates([...htmlCandidates($, baseUrl), ...headerCandidates(headers, baseUrl)]);
 }
 //#endregion
+//#region packages/core/src/extract/content-sketch.ts
+const SHINGLE_SIZE = 5;
+const MAX_HASHES = 32;
+function words(value) {
+	return value.normalize("NFKC").toLocaleLowerCase("en").match(/[\p{L}\p{N}]+/gu) ?? [];
+}
+function sampleIndexes(total, limit) {
+	if (total <= limit) return Array.from({ length: total }, (_, index) => index);
+	return Array.from({ length: limit }, (_, index) => Math.round(index * (total - 1) / (limit - 1)));
+}
+function digest(value) {
+	return createHash("sha256").update(value).digest("hex").slice(0, 16);
+}
+function contentSketch(value) {
+	const tokens = words(value);
+	const hashes = sampleIndexes(Math.max(0, tokens.length - SHINGLE_SIZE + 1), MAX_HASHES).map((index) => digest(tokens.slice(index, index + SHINGLE_SIZE).join(" ")));
+	return {
+		version: 1,
+		wordCount: tokens.length,
+		shingleSize: SHINGLE_SIZE,
+		sampledShingles: hashes.length,
+		hashes
+	};
+}
+function contentSketchCoverage(source, candidate) {
+	if (!source || source.hashes.length < 4) return null;
+	const targets = new Set(source.hashes);
+	const matched = /* @__PURE__ */ new Set();
+	const tokens = words(candidate);
+	for (let index = 0; index <= tokens.length - source.shingleSize; index += 1) {
+		const hash = digest(tokens.slice(index, index + source.shingleSize).join(" "));
+		if (targets.has(hash)) matched.add(hash);
+		if (matched.size === targets.size) break;
+	}
+	return Math.round(matched.size / targets.size * 1e3) / 1e3;
+}
+//#endregion
 //#region packages/core/src/extract/main-content.ts
 function readableError(error) {
 	return error instanceof Error ? error.message : String(error);
@@ -3141,6 +3186,48 @@ const SOCIAL_PROFILE_HOSTS = [
 	"x.com",
 	"youtube.com"
 ];
+const LOGIN_PATH_PATTERN = /(?:^|\/)(?:auth|login|log-in|signin|sign-in|sso)(?:\/|$)/iu;
+const LOGIN_TITLE_PATTERN = /\b(?:authenticate|log[ -]?in|sign[ -]?in)\b/iu;
+function softAuthenticationGate($, finalUrl, title) {
+	const passwordForms = $("form").toArray().filter((form) => $(form).find("input[type=\"password\" i]").length > 0);
+	if (passwordForms.length === 0) return void 0;
+	const pagePath = new URL(finalUrl).pathname;
+	const action = $(passwordForms[0]).attr("action");
+	const actionUrl = action ? httpUrl$1(action, finalUrl) : void 0;
+	const actionPath = actionUrl ? new URL(actionUrl).pathname : void 0;
+	const indicators = [
+		...LOGIN_PATH_PATTERN.test(pagePath) ? ["login-path"] : [],
+		...LOGIN_TITLE_PATTERN.test(title ?? "") ? ["login-title"] : [],
+		...LOGIN_PATH_PATTERN.test(actionPath ?? "") ? ["login-form-action"] : []
+	];
+	if (indicators.length === 0) return void 0;
+	return {
+		kind: "login-form",
+		indicators,
+		...actionPath ? { formActionPath: actionPath } : {}
+	};
+}
+function tabbedContent($) {
+	const groups = $("[role=\"tablist\" i]").length;
+	const panels = $("[role=\"tabpanel\" i]").toArray();
+	if (groups === 0 || panels.length === 0) return void 0;
+	const panelSketches = panels.slice(0, 12).map((panel) => {
+		const labelledBy = $(panel).attr("aria-labelledby");
+		const labelledElement = labelledBy ? $("[id]").toArray().find((element) => $(element).attr("id") === labelledBy) : void 0;
+		const label = safeText$1($(panel).attr("aria-label") ?? (labelledElement ? $(labelledElement).text() : void 0));
+		return {
+			...label ? { label: label.slice(0, 80) } : {},
+			sketch: contentSketch($(panel).text())
+		};
+	});
+	return {
+		groups,
+		panels: panels.length,
+		retainedPanels: panelSketches.length,
+		truncated: panels.length > panelSketches.length,
+		panelSketches
+	};
+}
 function safeText$1(value) {
 	const trimmed = value?.replace(/\s+/g, " ").trim();
 	return trimmed ? trimmed : void 0;
@@ -3157,7 +3244,7 @@ function absoluteUrl$2(value, base) {
 		return;
 	}
 }
-function httpUrl(value, base) {
+function httpUrl$1(value, base) {
 	const resolved = absoluteUrl$2(value, base);
 	if (!resolved) return void 0;
 	const protocol = new URL(resolved).protocol;
@@ -3309,14 +3396,14 @@ async function extractPage(fetchResult, extractor = "defuddle", dependencies = {
 	let invalidHreflangCount = 0;
 	for (const element of $("link[rel~=\"alternate\"][hreflang][href]").toArray()) {
 		const language = $(element).attr("hreflang") ?? "";
-		const href = httpUrl($(element).attr("href"), fetchResult.finalUrl);
+		const href = httpUrl$1($(element).attr("href"), fetchResult.finalUrl);
 		if (language && href) hreflang.push({
 			hreflang: language,
 			href
 		});
 		else invalidHreflangCount += 1;
 	}
-	const markdownAlternates = [...new Set($("head link[rel~=\"alternate\"][type][href]").toArray().filter((element) => $(element).attr("type")?.trim().toLowerCase() === "text/markdown").map((element) => httpUrl($(element).attr("href"), fetchResult.finalUrl)).filter((value) => Boolean(value)))].sort();
+	const markdownAlternates = [...new Set($("head link[rel~=\"alternate\"][type][href]").toArray().filter((element) => $(element).attr("type")?.trim().toLowerCase() === "text/markdown").map((element) => httpUrl$1($(element).attr("href"), fetchResult.finalUrl)).filter((value) => Boolean(value)))].sort();
 	const openGraph = Object.fromEntries($("meta[property^=\"og:\"]").toArray().map((element) => [$(element).attr("property") ?? "", $(element).attr("content") ?? ""]).filter(([key, value]) => key && value));
 	const twitter = Object.fromEntries($("meta[name^=\"twitter:\"]").toArray().map((element) => [$(element).attr("name") ?? "", $(element).attr("content") ?? ""]).filter(([key, value]) => key && value));
 	const structuredData = extractStructuredData($, fetchResult.finalUrl, { retainJsonLd: extractor !== "crawler" });
@@ -3367,10 +3454,11 @@ async function extractPage(fetchResult, extractor = "defuddle", dependencies = {
 		html: sanitizedContentHtml($, fetchResult.html, fetchResult.finalUrl)
 	}, extractor, dependencies);
 	const { text, excerpt } = content;
+	const title = safeText$1($("title").first().text());
 	return {
 		url: fetchResult.url,
 		finalUrl: fetchResult.finalUrl,
-		title: safeText$1($("title").first().text()),
+		title,
 		metaDescription: safeText$1($("meta[name=\"description\"]").attr("content")),
 		metaRobots,
 		xRobotsTag: safeText$1(headerValue$4(fetchResult.headers, "x-robots-tag")),
@@ -3390,7 +3478,10 @@ async function extractPage(fetchResult, extractor = "defuddle", dependencies = {
 			externalLinks: [...crawlerExternalLinks],
 			internalAnchorSamples,
 			externalAnchorSamples,
-			socialProfileLinks: [...socialProfileLinks]
+			socialProfileLinks: [...socialProfileLinks],
+			contentSketch: contentSketch(text),
+			softAuthenticationGate: softAuthenticationGate($, fetchResult.finalUrl, title),
+			tabbedContent: tabbedContent($)
 		} } : {},
 		markdownAlternates,
 		hreflang,
@@ -4735,7 +4826,7 @@ function urlInspectionQuotaDate(now) {
 function urlInspectionQuotaResetAt(now) {
 	return new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate() + 1));
 }
-function boundedLimit(value) {
+function boundedLimit$1(value) {
 	const limit = value ?? 2e3;
 	if (!Number.isInteger(limit) || limit < 1 || limit > 2e3) throw new SeoError("INVALID_INPUT", "URL Inspection daily limit must be an integer from 1 to 2000.");
 	return limit;
@@ -4768,7 +4859,7 @@ function reserveUrlInspectionQuota(input) {
 	const database = input.database ?? getDb();
 	const now = input.now ?? /* @__PURE__ */ new Date();
 	const nowMs = now.getTime();
-	const requestedLimit = boundedLimit(input.limit);
+	const requestedLimit = boundedLimit$1(input.limit);
 	const quotaDate = urlInspectionQuotaDate(now);
 	const resetAt = urlInspectionQuotaResetAt(now);
 	const result = database.transaction(() => {
@@ -6674,13 +6765,13 @@ function isLowActionabilityQuery(query) {
 //#endregion
 //#region packages/core/src/analyze/page-opportunities-selection.ts
 const DEFAULT_MIN_IMPRESSIONS$3 = 10;
-const DEFAULT_LIMIT$3 = 25;
-const MAX_LIMIT$3 = 100;
+const DEFAULT_LIMIT$4 = 25;
+const MAX_LIMIT$4 = 100;
 function integerInRange$2(value, fallback, minimum, maximum) {
 	if (value === void 0 || !Number.isFinite(value)) return fallback;
 	return Math.min(maximum, Math.max(minimum, Math.floor(value)));
 }
-function isHttpUrl$1(value) {
+function isHttpUrl$2(value) {
 	try {
 		const parsed = new URL(value);
 		return parsed.protocol === "http:" || parsed.protocol === "https:";
@@ -6702,7 +6793,7 @@ function isBrandRow(input) {
 function normalizePageOpportunityOptions(input) {
 	return {
 		minImpressions: integerInRange$2(input.minImpressions, DEFAULT_MIN_IMPRESSIONS$3, 1, Number.MAX_SAFE_INTEGER),
-		limit: integerInRange$2(input.limit, DEFAULT_LIMIT$3, 1, MAX_LIMIT$3)
+		limit: integerInRange$2(input.limit, DEFAULT_LIMIT$4, 1, MAX_LIMIT$4)
 	};
 }
 function selectTargetRows(input) {
@@ -6721,7 +6812,7 @@ function selectTargetRows(input) {
 	for (const row of input.rows) {
 		const query = row.keys[0]?.trim() ?? "";
 		const page = row.keys[1] ?? "";
-		if (row.keys.length < 2 || !query || !isHttpUrl$1(page) || !hasValidMetrics(row)) {
+		if (row.keys.length < 2 || !query || !isHttpUrl$2(page) || !hasValidMetrics(row)) {
 			selection.invalidRows++;
 			continue;
 		}
@@ -6757,7 +6848,7 @@ function selectTargetRows(input) {
 function selectBenchmarkRows$1(input) {
 	return input.rows.filter((row) => {
 		const query = row.keys[0]?.trim() ?? "";
-		return row.keys.length >= 2 && isHttpUrl$1(row.keys[1] ?? "") && hasValidMetrics(row) && row.position >= 1 && row.position <= 10 && Boolean(query) && !isLowActionabilityQuery(query) && !isBrandRow({
+		return row.keys.length >= 2 && isHttpUrl$2(row.keys[1] ?? "") && hasValidMetrics(row) && row.position >= 1 && row.position <= 10 && Boolean(query) && !isLowActionabilityQuery(query) && !isBrandRow({
 			query,
 			site: input.site,
 			brandTerms: input.brandTerms,
@@ -6939,7 +7030,7 @@ const defaultDependencies$15 = {
 	extract: extractPage,
 	now: () => /* @__PURE__ */ new Date()
 };
-function errorMessage$1(error) {
+function errorMessage$2(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 function unique$4(values) {
@@ -6960,7 +7051,7 @@ async function verifyPage(input) {
 		});
 		warnings.push(...fetched.warnings);
 	} catch (error) {
-		const reason = `Page fetch failed: ${errorMessage$1(error)}`;
+		const reason = `Page fetch failed: ${errorMessage$2(error)}`;
 		return {
 			verification: {
 				status: "failed",
@@ -6982,7 +7073,7 @@ async function verifyPage(input) {
 			warnings: unique$4(warnings)
 		};
 	} catch (error) {
-		const reason = `Page extraction failed: ${errorMessage$1(error)}`;
+		const reason = `Page extraction failed: ${errorMessage$2(error)}`;
 		return {
 			fetched,
 			verification: {
@@ -7623,6 +7714,8 @@ function markdownQuality(markdown, page) {
 	const codeFences = markdown.match(/^```/gmu)?.length ?? 0;
 	const wordCount = bodyWordCount(markdown);
 	const sourceWordCount = page.wordCount ?? 0;
+	const evaluatedPanels = (page.tabbedContent?.panelSketches ?? []).map((panel) => contentSketchCoverage(panel.sketch, markdown)).filter((coverage) => coverage !== null);
+	const retainedPanels = evaluatedPanels.filter((coverage) => coverage >= .6).length;
 	return {
 		frontmatterTitle: /^---[\s\S]*?^title:\s*.+$/mu.test(markdown),
 		h1Count: markdown.match(/^#\s+\S.+$/gmu)?.length ?? 0,
@@ -7639,7 +7732,15 @@ function markdownQuality(markdown, page) {
 		sourceWordCount,
 		wordRetentionRatio: sourceWordCount > 0 ? Math.round(wordCount / sourceWordCount * 1e3) / 1e3 : null,
 		introductoryCopyRetained: introProbe ? normalizedMarkdown.includes(introProbe) : null,
-		navigationOnly: bodyWordCount(markdown) < 25
+		navigationOnly: bodyWordCount(markdown) < 25,
+		contentSketchCoverage: contentSketchCoverage(page.contentSketch, markdown),
+		tabbedContent: {
+			detectedPanels: page.tabbedContent?.panels ?? 0,
+			evaluatedPanels: evaluatedPanels.length,
+			retainedPanels,
+			missingPanels: Math.max(0, evaluatedPanels.length - retainedPanels),
+			complete: evaluatedPanels.length === 0 ? null : retainedPanels === evaluatedPanels.length
+		}
 	};
 }
 function combinedSignal(timeoutMs, signal) {
@@ -7693,6 +7794,8 @@ async function fetchRepresentation(input) {
 				status: response.status,
 				contentType: response.headers.get("content-type") ?? void 0,
 				bytes: Buffer.byteLength(body),
+				characters: body.length,
+				estimatedTokens: Math.ceil(body.length / 4),
 				sha256: sha256(body),
 				canonicalUrl: link.find((entry) => entry.rel.includes("canonical"))?.url,
 				alternateUrl: link.find((entry) => entry.rel.includes("alternate") && entry.type === "text/markdown")?.url,
@@ -7751,11 +7854,15 @@ async function inspectMarkdownPage(input) {
 	if (explicit) observation.explicit = explicit.observation;
 	observation.negotiated = negotiated.observation;
 	observation.repeated = repeated.observation;
-	observation.explicitMatchesNegotiated = explicit?.observation.sha256 && negotiated.observation.sha256 ? explicit.observation.sha256 === negotiated.observation.sha256 : null;
-	const primary = explicit ?? negotiated;
-	observation.repeatedHashStable = primary.observation.sha256 && repeated.observation.sha256 ? primary.observation.sha256 === repeated.observation.sha256 : null;
-	observation.markdownCanonicalMatchesHtml = sameDocument(primary.observation.canonicalUrl, input.page.finalUrl);
-	if (primary.body) observation.quality = markdownQuality(primary.body, input.page);
+	const isMarkdown = (result) => result?.observation.status !== void 0 && result.observation.status >= 200 && result.observation.status < 300 && /^\s*text\/markdown\b/iu.test(result.observation.contentType ?? "");
+	const explicitMarkdown = isMarkdown(explicit) ? explicit : void 0;
+	const negotiatedMarkdown = isMarkdown(negotiated) ? negotiated : void 0;
+	const repeatedMarkdown = isMarkdown(repeated) ? repeated : void 0;
+	observation.explicitMatchesNegotiated = explicitMarkdown?.observation.sha256 && negotiatedMarkdown?.observation.sha256 ? explicitMarkdown.observation.sha256 === negotiatedMarkdown.observation.sha256 : null;
+	const primary = explicitMarkdown ?? negotiatedMarkdown;
+	observation.repeatedHashStable = primary?.observation.sha256 && repeatedMarkdown?.observation.sha256 ? primary.observation.sha256 === repeatedMarkdown.observation.sha256 : null;
+	observation.markdownCanonicalMatchesHtml = sameDocument(primary?.observation.canonicalUrl, input.page.finalUrl);
+	if (primary?.body) observation.quality = markdownQuality(primary.body, input.page);
 	return observation;
 }
 async function fetchText(input) {
@@ -7999,17 +8106,16 @@ async function inspectRouteManifest(input) {
 		const declared = Array.isArray(parsed.pages) ? parsed.pages : [];
 		const declaredHtmlRoutes = declared.map((page) => page.htmlPath).filter((path) => typeof path === "string").sort();
 		const declaredMarkdownRoutes = declared.map((page) => page.markdownPath).filter((path) => typeof path === "string").sort();
-		const crawledHtmlRoutes = new Set(input.pages.map((page) => new URL(page.finalUrl).pathname.replace(/\/$/u, "") || "/"));
-		const observedMarkdownRoutes = new Set(input.observations.flatMap((page) => page.advertisedUrls.map((value) => new URL(value).pathname)));
 		return {
 			url,
 			status: result.response.status,
 			valid: Array.isArray(parsed.pages),
 			declaredHtmlRoutes,
 			declaredMarkdownRoutes,
-			missingHtmlRoutes: declaredHtmlRoutes.filter((path) => !crawledHtmlRoutes.has(path.replace(/\/$/u, "") || "/")).sort(),
-			missingMarkdownRoutes: declaredMarkdownRoutes.filter((path) => !observedMarkdownRoutes.has(path)).sort(),
-			orphanMarkdownRoutes: [...observedMarkdownRoutes].filter((path) => !declaredMarkdownRoutes.includes(path)).sort()
+			missingHtmlRoutes: [],
+			missingMarkdownRoutes: [],
+			orphanMarkdownRoutes: [],
+			comparisonStatus: "partial"
 		};
 	} catch (error) {
 		return {
@@ -8020,6 +8126,7 @@ async function inspectRouteManifest(input) {
 			missingHtmlRoutes: [],
 			missingMarkdownRoutes: [],
 			orphanMarkdownRoutes: [],
+			comparisonStatus: "not-applicable",
 			error: safeError(error)
 		};
 	}
@@ -8063,9 +8170,7 @@ async function collectAgentDiscovery(input) {
 		}),
 		inspectRouteManifest({
 			...input,
-			origin,
-			pages,
-			observations
+			origin
 		}),
 		inspectAgentEndpoints({
 			...input,
@@ -8170,20 +8275,13 @@ async function collectAgentDiscovery(input) {
 	};
 }
 //#endregion
-//#region packages/core/src/analyze/crawler/agent-readiness.ts
-function check$1(section, input) {
+//#region packages/core/src/analyze/crawler/agent-readiness-markdown.ts
+function check$2(section, input) {
 	return {
 		section,
 		...input
 	};
 }
-function section$1(id, title, checks) {
-	return {
-		id,
-		title,
-		checks
-	};
-}
 function failedMarkdownUrls(discovery) {
 	return discovery.markdownAlternates.pages.filter((page) => {
 		const negotiatedOk = page.negotiated?.status === 200 && /^\s*text\/markdown\b/iu.test(page.negotiated.contentType ?? "") && page.negotiated.varyAccept;
@@ -8194,38 +8292,12 @@ function failedMarkdownUrls(discovery) {
 function qualityFailureUrls(discovery) {
 	return discovery.markdownAlternates.pages.filter((page) => {
 		const quality = page.quality;
-		if (!quality) return true;
-		return !quality.frontmatterTitle || quality.h1Count !== 1 || !quality.codeFenceBalanced || quality.rawHtmlTags > 0 || quality.rawSvgTags > 0 || quality.rawScriptTags > 0 || quality.rawStyleTags > 0 || quality.navigationOnly || quality.repeatedLines > 0 || quality.wordRetentionRatio !== null && quality.wordRetentionRatio < .4;
+		if (!quality) return false;
+		return !quality.frontmatterTitle || quality.h1Count !== 1 || !quality.codeFenceBalanced || quality.rawHtmlTags > 0 || quality.rawSvgTags > 0 || quality.rawScriptTags > 0 || quality.rawStyleTags > 0 || quality.navigationOnly || quality.repeatedLines > 0 || quality.contentSketchCoverage !== null && quality.contentSketchCoverage !== void 0 && quality.contentSketchCoverage < .6 || quality.tabbedContent?.complete === false || quality.wordRetentionRatio !== null && quality.wordRetentionRatio < .4;
 	}).map((page) => page.htmlUrl);
 }
-function profileChecks(discovery) {
-	return [
-		"api",
-		"application",
-		"commerce"
-	].map((profile) => check$1("profile", {
-		id: `profile-${profile}`,
-		status: "notApplicable",
-		title: `${profile[0]?.toUpperCase()}${profile.slice(1)} checks are not applicable`,
-		plainEnglish: discovery.profileApplicability[profile].reason,
-		action: "Choose this profile only when the site exposes that capability publicly.",
-		evidence: {
-			profile,
-			selectedProfile: discovery.profile
-		}
-	}));
-}
-function summariseChecks(checks) {
-	const count = (status) => checks.filter((item) => item.status === status).length;
-	return {
-		checks: checks.length,
-		passed: count("pass"),
-		warnings: count("warning"),
-		failed: count("fail"),
-		unknown: count("unknown"),
-		information: count("info"),
-		notApplicable: count("notApplicable")
-	};
+function confirmedMarkdown(page) {
+	for (const response of [page.explicit, page.negotiated]) if (response?.status !== void 0 && response.status >= 200 && response.status < 300 && /^\s*text\/markdown\b/iu.test(response.contentType ?? "")) return response;
 }
 function markdownChecks(discovery) {
 	const markdown = discovery.markdownAlternates;
@@ -8235,12 +8307,28 @@ function markdownChecks(discovery) {
 	const explicitPages = markdown.pages.filter((page) => page.htmlAlternateUnique).length;
 	const coverageComplete = markdown.eligibleHtmlPages > 0 && markdown.evaluatedPages === markdown.eligibleHtmlPages;
 	const negotiationComplete = markdown.eligibleHtmlPages > 0 && negotiatedPages === markdown.eligibleHtmlPages && markdown.pages.every((page) => page.negotiated?.varyAccept) && markdown.pages.every((page) => !page.htmlAlternateUnique || page.explicitMatchesNegotiated === true);
-	const stable = markdown.eligibleHtmlPages > 0 && markdown.stableResponses === markdown.eligibleHtmlPages;
+	const stable = markdown.evaluatedPages > 0 && markdown.stableResponses === markdown.evaluatedPages;
 	const tokenHeaders = markdown.pages.filter((page) => {
-		return (page.explicit ?? page.negotiated)?.markdownTokens !== void 0 && (!page.explicit || !page.negotiated || page.explicit.markdownTokens === page.negotiated.markdownTokens);
+		return confirmedMarkdown(page)?.markdownTokens !== void 0 && (!page.explicit || !page.negotiated || page.explicit.markdownTokens === page.negotiated.markdownTokens);
 	}).length;
+	const sizedPages = markdown.pages.filter((page) => {
+		return confirmedMarkdown(page)?.characters !== void 0;
+	});
+	const largePages = sizedPages.filter((page) => {
+		return (confirmedMarkdown(page)?.characters ?? 0) > 5e4;
+	});
+	const veryLargePages = sizedPages.filter((page) => {
+		return (confirmedMarkdown(page)?.characters ?? 0) > 1e5;
+	});
+	const maxCharacters = Math.max(0, ...sizedPages.map((page) => confirmedMarkdown(page)?.characters ?? 0));
+	const maxEstimatedTokens = Math.max(0, ...sizedPages.map((page) => confirmedMarkdown(page)?.estimatedTokens ?? 0));
+	const parityPages = markdown.pages.filter((page) => page.quality?.contentSketchCoverage !== null && page.quality?.contentSketchCoverage !== void 0);
+	const parityFailures = parityPages.filter((page) => (page.quality?.contentSketchCoverage ?? 0) < .6);
+	const tabbedPages = markdown.pages.filter((page) => (page.quality?.tabbedContent?.detectedPanels ?? 0) > 0);
+	const tabFailures = tabbedPages.filter((page) => page.quality?.tabbedContent?.complete === false);
+	const tabUnknown = tabbedPages.filter((page) => page.quality?.tabbedContent?.complete === null);
 	return [
-		check$1("representations", {
+		check$2("representations", {
 			id: "markdown-coverage",
 			status: markdown.eligibleHtmlPages === 0 ? "unknown" : coverageComplete ? "pass" : "fail",
 			title: coverageComplete ? "Every successful HTML page has a Markdown representation" : "Markdown representation coverage is incomplete",
@@ -8254,17 +8342,62 @@ function markdownChecks(discovery) {
 			},
 			urls: failedUrls.slice(0, 25)
 		}),
-		check$1("representations", {
+		check$2("representations", {
 			id: "markdown-token-estimates",
-			status: markdown.evaluatedPages === 0 ? "unknown" : tokenHeaders === markdown.evaluatedPages ? "pass" : "warning",
+			status: markdown.evaluatedPages === 0 ? "unknown" : tokenHeaders === markdown.evaluatedPages ? "pass" : "info",
 			title: tokenHeaders === markdown.evaluatedPages ? "Every Markdown response includes a token estimate" : "Some Markdown responses are missing a stable token estimate",
 			plainEnglish: `${tokenHeaders} of ${markdown.evaluatedPages} evaluated pages returned X-Markdown-Tokens. Paired explicit and negotiated responses agreed where both existed. The value is an estimate, not an exact model-specific token count.`,
-			action: "Return a stable token estimate and keep it consistent when both explicit and negotiated responses exist.",
+			action: tokenHeaders === markdown.evaluatedPages ? "Keep the estimate stable when both explicit and negotiated responses exist." : "No change is required. X-Markdown-Tokens is optional; local size estimates are reported separately.",
 			urls: markdown.pages.filter((page) => {
-				return (page.explicit ?? page.negotiated)?.markdownTokens === void 0 || page.explicit !== void 0 && page.negotiated !== void 0 && page.explicit.markdownTokens !== page.negotiated.markdownTokens;
+				return confirmedMarkdown(page)?.markdownTokens === void 0 || page.explicit !== void 0 && page.negotiated !== void 0 && page.explicit.markdownTokens !== page.negotiated.markdownTokens;
 			}).map((page) => page.htmlUrl).slice(0, 25)
 		}),
-		check$1("representations", {
+		check$2("representations", {
+			id: "markdown-size",
+			status: sizedPages.length === 0 ? "unknown" : largePages.length === 0 ? "pass" : "warning",
+			title: sizedPages.length === 0 ? "Markdown size was not measured" : largePages.length === 0 ? "Markdown representations stay within the review threshold" : "Some Markdown representations are large enough to review",
+			plainEnglish: `${sizedPages.length} Markdown responses were measured locally. ${largePages.length} exceeded 50,000 characters and ${veryLargePages.length} exceeded 100,000 characters. These are processing-risk thresholds, not universal model limits.`,
+			action: largePages.length === 0 ? "Keep important content early and retain stable section structure as pages grow." : "Split genuinely separate topics, keep navigation and repeated chrome out of Markdown, and put the most useful content early. Do not remove necessary detail just to hit a threshold.",
+			evidence: {
+				measuredPages: sizedPages.length,
+				reviewThresholdCharacters: 5e4,
+				highRiskThresholdCharacters: 1e5,
+				largePages: largePages.length,
+				veryLargePages: veryLargePages.length,
+				maxCharacters,
+				maxEstimatedTokens,
+				heuristic: true
+			},
+			urls: largePages.map((page) => page.htmlUrl).slice(0, 25)
+		}),
+		check$2("representations", {
+			id: "markdown-content-parity",
+			status: parityPages.length === 0 ? "unknown" : parityFailures.length === 0 ? "pass" : "warning",
+			title: parityPages.length === 0 ? "HTML and Markdown content parity was not measured" : parityFailures.length === 0 ? "Markdown retains sampled content from the HTML document" : "Some Markdown responses may omit important HTML content",
+			plainEnglish: `${parityPages.length} pages were compared using bounded hashes sampled across the main HTML content. ${parityFailures.length} retained less than 60% of that sample. This detects likely omissions without storing full page bodies.`,
+			action: parityFailures.length === 0 ? "Keep the shared conversion path covered as templates and components change." : "Compare the affected HTML and Markdown around the missing sections, then fix the shared converter or component serialization.",
+			evidence: {
+				evaluatedPages: parityPages.length,
+				failedPages: parityFailures.length,
+				minimumCoverage: .6,
+				sampling: "bounded-content-shingles"
+			},
+			urls: parityFailures.map((page) => page.htmlUrl).slice(0, 25)
+		}),
+		check$2("representations", {
+			id: "markdown-tab-serialization",
+			status: tabbedPages.length === 0 ? "notApplicable" : tabFailures.length > 0 ? "warning" : tabUnknown.length > 0 ? "unknown" : "pass",
+			title: tabbedPages.length === 0 ? "No accessible tabbed content was detected" : tabFailures.length > 0 ? "Some tab panels are missing from Markdown" : tabUnknown.length > 0 ? "Some tab panels were too small to compare reliably" : "Markdown retains detected tab panels",
+			plainEnglish: tabbedPages.length === 0 ? "The crawled HTML did not contain ARIA tablists with tab panels, so this check does not apply." : `${tabbedPages.length} pages contained accessible tab panels. ${tabFailures.length} did not retain every evaluated panel in Markdown, and ${tabUnknown.length} had no panel large enough for a reliable comparison.`,
+			action: tabFailures.length === 0 ? tabUnknown.length > 0 ? "Review the affected page directly if the short tab labels or values are important to the document." : "Keep every panel serialized in document order even when only one tab is visible by default." : "Serialize all tab panels into the Markdown document with headings instead of exporting only the initially active panel.",
+			evidence: {
+				tabbedPages: tabbedPages.length,
+				failedPages: tabFailures.length,
+				unknownPages: tabUnknown.length
+			},
+			urls: [...tabFailures, ...tabUnknown].map((page) => page.htmlUrl).slice(0, 25)
+		}),
+		check$2("representations", {
 			id: "markdown-negotiation",
 			status: markdown.eligibleHtmlPages === 0 ? "unknown" : negotiationComplete && discovery.contentNegotiation.qZeroHonoured ? "pass" : "fail",
 			title: negotiationComplete && discovery.contentNegotiation.qZeroHonoured ? "Markdown content negotiation works across the site" : "Markdown content negotiation needs attention",
@@ -8278,16 +8411,16 @@ function markdownChecks(discovery) {
 			},
 			urls: failedUrls.slice(0, 25)
 		}),
-		check$1("representations", {
+		check$2("representations", {
 			id: "markdown-determinism",
-			status: markdown.eligibleHtmlPages === 0 ? "unknown" : stable ? "pass" : "fail",
+			status: markdown.evaluatedPages === 0 ? "unknown" : stable ? "pass" : "fail",
 			title: stable ? "Repeated Markdown responses are stable" : "Repeated Markdown responses changed during the audit",
-			plainEnglish: `${markdown.stableResponses} of ${markdown.eligibleHtmlPages} repeated Markdown responses kept the same SHA-256 digest.`,
+			plainEnglish: `${markdown.stableResponses} of ${markdown.evaluatedPages} repeated Markdown responses kept the same SHA-256 digest.`,
 			action: "Remove timestamps, random output, or other runtime rewriting that changes the same Markdown response between requests.",
 			evidence: { stableResponses: markdown.stableResponses },
 			urls: failedUrls.slice(0, 25)
 		}),
-		check$1("representations", {
+		check$2("representations", {
 			id: "markdown-quality",
 			status: markdown.evaluatedPages === 0 ? "unknown" : qualityUrls.length === 0 ? "pass" : "warning",
 			title: qualityUrls.length === 0 ? "Markdown keeps the useful document structure cleanly" : "Some Markdown alternatives need an extraction review",
@@ -8297,6 +8430,50 @@ function markdownChecks(discovery) {
 		})
 	];
 }
+//#endregion
+//#region packages/core/src/analyze/crawler/agent-readiness.ts
+function check$1(section, input) {
+	return {
+		section,
+		...input
+	};
+}
+function section$2(id, title, checks) {
+	return {
+		id,
+		title,
+		checks
+	};
+}
+function profileChecks(discovery) {
+	return [
+		"api",
+		"application",
+		"commerce"
+	].map((profile) => check$1("profile", {
+		id: `profile-${profile}`,
+		status: "notApplicable",
+		title: `${profile[0]?.toUpperCase()}${profile.slice(1)} checks are not applicable`,
+		plainEnglish: discovery.profileApplicability[profile].reason,
+		action: "Choose this profile only when the site exposes that capability publicly.",
+		evidence: {
+			profile,
+			selectedProfile: discovery.profile
+		}
+	}));
+}
+function summariseChecks(checks) {
+	const count = (status) => checks.filter((item) => item.status === status).length;
+	return {
+		checks: checks.length,
+		passed: count("pass"),
+		warnings: count("warning"),
+		failed: count("fail"),
+		unknown: count("unknown"),
+		information: count("info"),
+		notApplicable: count("notApplicable")
+	};
+}
 function contentSignalsCheck(discovery, robotsContentSignals) {
 	const signals = discovery.contentSignals;
 	const robotsDeclared = robotsContentSignals ?? [];
@@ -8397,8 +8574,8 @@ function discoveryChecks(discovery, robotsContentSignals) {
 		check$1("discovery", {
 			id: "route-manifest",
 			status: !discovery.routeManifest.valid ? "info" : discovery.routeManifest.missingHtmlRoutes.length === 0 && discovery.routeManifest.missingMarkdownRoutes.length === 0 && discovery.routeManifest.orphanMarkdownRoutes.length === 0 ? "pass" : "warning",
-			title: discovery.routeManifest.valid ? "The public route manifest agrees with the crawl" : "No public route manifest was available",
-			plainEnglish: discovery.routeManifest.valid ? `The manifest declared ${discovery.routeManifest.declaredHtmlRoutes.length} HTML routes and ${discovery.routeManifest.declaredMarkdownRoutes.length} Markdown routes. Missing or orphan routes are listed in the evidence.` : "A public route manifest is optional. Without one, this crawl cannot prove that no orphan Markdown files were deployed.",
+			title: discovery.routeManifest.valid ? "The public route manifest is valid" : "No public route manifest was available",
+			plainEnglish: discovery.routeManifest.valid ? `The manifest declared ${discovery.routeManifest.declaredHtmlRoutes.length} HTML routes and ${discovery.routeManifest.declaredMarkdownRoutes.length} Markdown routes. This bounded crawl did not treat unvisited routes as missing.` : "A public route manifest is optional. Without one, this crawl cannot prove that no orphan Markdown files were deployed.",
 			action: "Generate one deterministic route inventory from the build when exact HTML and Markdown parity matters.",
 			evidence: discovery.routeManifest
 		})
@@ -8529,25 +8706,42 @@ function accessChecks(report, discovery) {
 	const blocked = bots.filter((bot) => bot.allowed === false);
 	const robotsKnown = report.ai?.robotsTxt?.availability === "available" || report.ai?.robotsTxt?.availability === "absent";
 	const protocol = discovery.protocolVariants;
-	return [check$1("access", {
-		id: "crawler-access",
-		status: !robotsKnown ? "unknown" : blocked.length > 0 ? "warning" : "pass",
-		title: blocked.length ? "robots.txt blocks selected crawler tokens" : "No selected crawler token is blocked at the start URL",
-		plainEnglish: robotsKnown ? `${blocked.length} of ${bots.length} selected crawler tokens were blocked by the start URL robots.txt policy.` : "The robots.txt response was not stable enough to make a crawler-access claim.",
-		action: "Keep blocks intentional. A crawler token being allowed here does not prove that the service will crawl, index, or cite the site.",
-		evidence: {
-			availability: report.ai?.robotsTxt?.availability,
-			blocked,
-			botAccess: bots
-		}
-	}), check$1("access", {
-		id: "protocol-canonicalization",
-		status: protocol.http.permanentRedirectToHttps === true && protocol.hstsOnStartPage === true ? "pass" : protocol.http.permanentRedirectToHttps === null ? "unknown" : "warning",
-		title: protocol.http.permanentRedirectToHttps === true && protocol.hstsOnStartPage === true ? "HTTP redirects permanently to HTTPS and HTTPS sends HSTS" : "Protocol canonicalization needs attention or could not be proven",
-		plainEnglish: `The HTTP variant ${protocol.http.permanentRedirectToHttps === true ? "redirected permanently to HTTPS" : "did not produce a confirmed permanent HTTPS redirect"}. The HTTPS start page ${protocol.hstsOnStartPage ? "sent HSTS" : "did not provide confirmed HSTS evidence"}.`,
-		action: "Use one permanent HTTP-to-HTTPS redirect and send HSTS only after HTTPS is stable across the site.",
-		evidence: protocol
-	})];
+	const authenticationGates = report.issues.filter((issue) => issue.ruleId === "soft_authentication_gate");
+	const clientRenderedPages = report.issues.filter((issue) => issue.ruleId === "client_rendered_content");
+	return [
+		check$1("access", {
+			id: "crawler-access",
+			status: !robotsKnown ? "unknown" : blocked.length > 0 ? "warning" : "pass",
+			title: blocked.length ? "robots.txt blocks selected crawler tokens" : "No selected crawler token is blocked at the start URL",
+			plainEnglish: robotsKnown ? `${blocked.length} of ${bots.length} selected crawler tokens were blocked by the start URL robots.txt policy.` : "The robots.txt response was not stable enough to make a crawler-access claim.",
+			action: "Keep blocks intentional. A crawler token being allowed here does not prove that the service will crawl, index, or cite the site.",
+			evidence: {
+				availability: report.ai?.robotsTxt?.availability,
+				blocked,
+				botAccess: bots
+			}
+		}),
+		check$1("access", {
+			id: "public-content-access",
+			status: authenticationGates.length > 0 || clientRenderedPages.length > 0 ? "warning" : "pass",
+			title: authenticationGates.length > 0 || clientRenderedPages.length > 0 ? "Some public content may be difficult for constrained clients to reach" : "No login gate or empty initial document was detected",
+			plainEnglish: `${authenticationGates.length} crawled pages looked like login gates and ${clientRenderedPages.length} relied on JavaScript to replace an empty or near-empty initial document. These are general site-health observations reused here because they affect agents that do not maintain sessions or run JavaScript.`,
+			action: authenticationGates.length > 0 || clientRenderedPages.length > 0 ? "Make intended public content available without a session and include its important document content in the initial HTML or a complete server-generated representation." : "Keep important public content available without a session or client-side rendering requirement.",
+			evidence: {
+				authenticationGates: authenticationGates.length,
+				clientRenderedPages: clientRenderedPages.length
+			},
+			urls: [...authenticationGates, ...clientRenderedPages].map((issue) => issue.url).slice(0, 25)
+		}),
+		check$1("access", {
+			id: "protocol-canonicalization",
+			status: protocol.http.permanentRedirectToHttps === true && protocol.hstsOnStartPage === true ? "pass" : protocol.http.permanentRedirectToHttps === null ? "unknown" : "warning",
+			title: protocol.http.permanentRedirectToHttps === true && protocol.hstsOnStartPage === true ? "HTTP redirects permanently to HTTPS and HTTPS sends HSTS" : "Protocol canonicalization needs attention or could not be proven",
+			plainEnglish: `The HTTP variant ${protocol.http.permanentRedirectToHttps === true ? "redirected permanently to HTTPS" : "did not produce a confirmed permanent HTTPS redirect"}. The HTTPS start page ${protocol.hstsOnStartPage ? "sent HSTS" : "did not provide confirmed HSTS evidence"}.`,
+			action: "Use one permanent HTTP-to-HTTPS redirect and send HSTS only after HTTPS is stable across the site.",
+			evidence: protocol
+		})
+	];
 }
 function identityChecks(report) {
 	const types = new Set(report.pages.flatMap((page) => page.schemaTypes ?? []));
@@ -8615,19 +8809,19 @@ function agentReadiness(report) {
 			headline: "No agent-discovery evidence is stored in this crawl. Run a fresh focused check.",
 			profileApplicability: profiles,
 			summary: summariseChecks(checks),
-			sections: [section$1("collection", "Evidence collection", [missing]), section$1("profile", "Profile scope", scopeChecks)],
+			sections: [section$2("collection", "Evidence collection", [missing]), section$2("profile", "Profile scope", scopeChecks)],
 			checks,
 			topActions: [missing],
 			caveats: ["Not evaluated does not mean absent or broken.", "This report does not measure rankings, AI mentions, citations, or selection."]
 		};
 	}
 	const sections = [
-		section$1("profile", "Profile scope", profileChecks(discovery)),
-		section$1("access", "Crawler and protocol access", accessChecks(report, discovery)),
-		section$1("representations", "HTML and Markdown representations", markdownChecks(discovery)),
-		section$1("discovery", "Agent discovery files", discoveryChecks(discovery, report.ai?.robotsTxt?.contentSignals)),
-		section$1("endpoints", "Agent endpoints and auth discovery", endpointChecks(discovery)),
-		section$1("identity", "Identity evidence", identityChecks(report))
+		section$2("profile", "Profile scope", profileChecks(discovery)),
+		section$2("access", "Crawler and protocol access", accessChecks(report, discovery)),
+		section$2("representations", "HTML and Markdown representations", markdownChecks(discovery)),
+		section$2("discovery", "Agent discovery files", discoveryChecks(discovery, report.ai?.robotsTxt?.contentSignals)),
+		section$2("endpoints", "Agent endpoints and auth discovery", endpointChecks(discovery)),
+		section$2("identity", "Identity evidence", identityChecks(report))
 	];
 	const checks = sections.flatMap((item) => item.checks);
 	const actionable = checks.filter((item) => [
@@ -8814,7 +9008,7 @@ function status(score, maxScore) {
 	if (ratio >= .5) return "warning";
 	return "fail";
 }
-function section(id, title, checks) {
+function section$1(id, title, checks) {
 	return {
 		id,
 		title,
@@ -8872,7 +9066,7 @@ function aiReadiness(report) {
 	const blockedSnippets = restrictedSnippets.filter(({ control }) => control.status === "blocked");
 	const limitedSnippets = restrictedSnippets.filter(({ control }) => control.status === "limited");
 	const sections = [
-		section("agent-access", "Agent access", [
+		section$1("agent-access", "Agent access", [
 			check({
 				id: "robots-ai-bots",
 				section: "agent-access",
@@ -8915,7 +9109,7 @@ function aiReadiness(report) {
 				evidence: { resources: report.ai?.agentResources ?? [] }
 			})
 		]),
-		section("machine-readable", "Machine-readable signals", [check({
+		section$1("machine-readable", "Machine-readable signals", [check({
 			id: "llms-txt",
 			section: "machine-readable",
 			maxScore: 0,
@@ -8940,7 +9134,7 @@ function aiReadiness(report) {
 			action: invalidJsonLdPages.length ? "Fix invalid JSON-LD before relying on its structured-data claims." : "Use structured data only where it accurately represents the visible page and a supported use case.",
 			urls: invalidJsonLdPages.slice(0, 10).map((page) => page.finalUrl)
 		})]),
-		section("content-clarity", "Content clarity", [
+		section$1("content-clarity", "Content clarity", [
 			check({
 				id: "answerable-content",
 				section: "content-clarity",
@@ -8990,7 +9184,7 @@ function aiReadiness(report) {
 				action: "Set the html lang attribute so crawlers and assistive tech understand the page language."
 			})
 		]),
-		section("entity-signals", "Entity signals", [check({
+		section$1("entity-signals", "Entity signals", [check({
 			id: "entity-schema",
 			section: "entity-signals",
 			maxScore: 0,
@@ -9009,7 +9203,7 @@ function aiReadiness(report) {
 			plainEnglish: "Author and date signals help agents judge freshness and accountability.",
 			action: "Add visible authors, reviewed dates, and updated dates to content where trust and freshness matter."
 		})]),
-		section("technical-ux", "Technical UX", [
+		section$1("technical-ux", "Technical UX", [
 			check({
 				id: "snippet-controls",
 				section: "technical-ux",
@@ -9047,7 +9241,7 @@ function aiReadiness(report) {
 				action: "Fix 4xx/5xx pages, accidental noindex, and blocked internal URLs before expanding AI discovery work."
 			})
 		]),
-		section("agent-content", "Agent content observations", [
+		section$1("agent-content", "Agent content observations", [
 			check({
 				id: "markdown-alternates",
 				section: "agent-content",
@@ -9087,7 +9281,7 @@ function aiReadiness(report) {
 				evidence: agentDiscovery?.profileApplicability
 			})
 		]),
-		section("crawl-completeness", "Crawl completeness", [check({
+		section$1("crawl-completeness", "Crawl completeness", [check({
 			id: "crawl-depth",
 			section: "crawl-completeness",
 			maxScore: 8,
@@ -10080,6 +10274,48 @@ const RULE_DEFINITIONS = [
 			suggestedCommands: ["seo crawl --sitemap-url <url> --health --json"]
 		}
 	},
+	{
+		id: "soft_authentication_gate",
+		title: "Page appears to be an authentication gate",
+		category: "response",
+		defaultSeverity: "medium",
+		whyItMatters: "The URL returned a successful HTML response, but the visible document looks like a login gate rather than the intended public page. Users and crawlers may receive a 200 response without the content they expected.",
+		howToFix: "Confirm whether authentication is intentional. Public URLs should return their public content without a login form. Protected URLs should use a clear 401 or 403 response where appropriate and should not appear in public sitemaps or internal crawl paths.",
+		impactIfIgnored: "A login page can be mistaken for the intended content, producing misleading crawl results and weak search or agent access.",
+		howToVerify: "Fetch the affected URL without a session and confirm it returns the intended public page, or a deliberate authentication status for protected content.",
+		agentHints: {
+			evidenceFields: ["page.softAuthenticationGate", "page.finalUrl"],
+			suggestedCommands: ["seo crawl <url> --max-pages 1 --json"]
+		}
+	},
+	{
+		id: "client_rendered_content",
+		title: "Important content requires JavaScript rendering",
+		category: "response",
+		defaultSeverity: "medium",
+		whyItMatters: "The raw HTML contained very little content and the useful document appeared only after JavaScript rendering. Some crawlers, agents, previews, and constrained clients do not run the page JavaScript.",
+		howToFix: "Render the important page content into the initial HTML, or publish a complete server-generated representation such as negotiated Markdown. Keep navigation, headings, canonicals, and indexability signals available without client execution.",
+		impactIfIgnored: "Clients that do not execute JavaScript may see an empty shell or miss important content and links.",
+		howToVerify: "Re-run the crawl and confirm the raw and rendered content observations contain the same important document content.",
+		agentHints: {
+			evidenceFields: ["page.fetchDiagnostics.rendering.documentDifference", "page.usedJs"],
+			suggestedCommands: ["seo crawl <url> --json"]
+		}
+	},
+	{
+		id: "soft_404",
+		title: "Unknown URLs return a successful response",
+		category: "response",
+		defaultSeverity: "high",
+		whyItMatters: "Known-nonexistent URLs returned a successful response or redirected to another successful page. Search engines and users cannot reliably distinguish missing content from a real page.",
+		howToFix: "Return 404 or 410 for missing URLs. If a replacement exists, redirect only the specific retired URL to its closest relevant replacement rather than sending every unknown path to a generic page.",
+		impactIfIgnored: "Missing URLs can remain in crawl queues, waste crawl attention, and create confusing search or monitoring evidence.",
+		howToVerify: "Request several known-nonexistent paths and confirm each returns 404 or 410 without redirecting to a generic successful page.",
+		agentHints: {
+			evidenceFields: ["report.siteChecks.soft404"],
+			suggestedCommands: ["seo crawl <url> --json"]
+		}
+	},
 	{
 		id: "client_error",
 		title: "Client error",
@@ -10569,6 +10805,8 @@ const RULE_RECOMMENDATIONS = {
 	x_robots_noindex: "review",
 	robots_blocked: "review",
 	crawler_access_blocked: "review",
+	soft_authentication_gate: "review",
+	client_rendered_content: "review",
 	orphan_page: "review",
 	redirected_url: "review",
 	slow_response: "review",
@@ -10662,6 +10900,28 @@ const WEAK_VALUABLE_INLINKS = 1;
 const QUERY_COVERAGE_MIN_IMPRESSIONS = 50;
 const QUERY_COVERAGE_MIN = .6;
 const OVERSIZED_IMAGE_CANDIDATE_LIMIT = 2e3;
+const EMPTY_INITIAL_HTML_CHARACTERS = 200;
+const SUBSTANTIVE_RENDERED_CHARACTERS = 500;
+function clientRenderedContentEvidence(page) {
+	const rendering = page.fetchDiagnostics?.rendering;
+	const difference = rendering?.documentDifference;
+	if (rendering?.status !== "rendered" || !difference?.changed.includes("content")) return;
+	const rawCharacters = difference.raw.content.characters;
+	const renderedCharacters = difference.rendered.content.characters;
+	if (rawCharacters >= EMPTY_INITIAL_HTML_CHARACTERS || renderedCharacters < SUBSTANTIVE_RENDERED_CHARACTERS || renderedCharacters < rawCharacters * 3) return;
+	return {
+		rawCharacters,
+		rawWords: difference.raw.content.wordCount,
+		renderedCharacters,
+		renderedWords: difference.rendered.content.wordCount,
+		changed: difference.changed,
+		thresholds: {
+			emptyInitialHtmlCharacters: EMPTY_INITIAL_HTML_CHARACTERS,
+			substantiveRenderedCharacters: SUBSTANTIVE_RENDERED_CHARACTERS,
+			minimumGrowthRatio: 3
+		}
+	};
+}
 function issue(ruleId, page, detail, evidence) {
 	const rule = explainRule(ruleId);
 	if (!rule) throw new Error(`Missing rule guidance for ${ruleId}`);
@@ -10876,6 +11136,9 @@ function auditCrawlPages(pages, opts = {}) {
 		}));
 		if (page.auditScope === "status") continue;
 		if (redirected) continue;
+		if (page.softAuthenticationGate) issues.push(issue("soft_authentication_gate", page, "A password form and login-specific page signals were observed.", page.softAuthenticationGate));
+		const renderedContent = clientRenderedContentEvidence(page);
+		if (renderedContent) issues.push(issue("client_rendered_content", page, "The raw response was an empty or near-empty shell.", renderedContent));
 		if (isHtmlPage(page) && (page.sizeBytes ?? 0) > LARGE_HTML_BYTES) issues.push(issue("large_html", page, `${Math.round((page.sizeBytes ?? 0) / 1024)} KB`, {
 			sizeBytes: page.sizeBytes,
 			thresholdBytes: LARGE_HTML_BYTES
@@ -11481,7 +11744,7 @@ function createCrawlReport(input) {
 	const requests = sortRequests(sanitizeTenantValue(input.requests ?? []));
 	const requestEvidenceStatus = input.requestEvidenceStatus ?? (input.requests ? "available" : "unavailable");
 	if (requestEvidenceStatus === "unavailable" && requests.length > 0) throw new Error("Unavailable request evidence cannot include request observations.");
-	const safeIssues = sanitizeIssues(input.issues ?? [...auditCrawlRequests(requests), ...auditCrawlPages(safePagesWithLinks, { startUrl: config.url })]);
+	const safeIssues = sanitizeIssues([...input.issues ?? [...auditCrawlRequests(requests), ...auditCrawlPages(safePagesWithLinks, { startUrl: config.url })], ...input.additionalIssues ?? []]);
 	const pages = safePagesWithLinks;
 	return {
 		id: input.id ?? crawlRunId(),
@@ -11510,6 +11773,7 @@ function createCrawlReport(input) {
 		...input.ai ? { ai: sanitizeTenantValue(input.ai) } : {},
 		...input.sitemapDiscovery ? { sitemapDiscovery: sanitizeTenantValue(input.sitemapDiscovery) } : {},
 		...input.externalLinkVerification ? { externalLinkVerification: sanitizeTenantValue(input.externalLinkVerification) } : {},
+		...input.siteChecks ? { siteChecks: sanitizeTenantValue(input.siteChecks) } : {},
 		...input.agentDiscovery ? { agentDiscovery: sanitizeTenantValue(input.agentDiscovery) } : {},
 		warnings: sanitizeMessages(input.warnings).sort(compareText$13),
 		caveats: sanitizeMessages(input.caveats).sort(compareText$13)
@@ -12079,6 +12343,75 @@ function observationFromPage(requestedUrl, page) {
 	};
 }
 //#endregion
+//#region packages/core/src/analyze/crawler/site-checks.ts
+const PROBE_COUNT = 2;
+function probeUrls(startUrl) {
+	const origin = new URL(startUrl).origin;
+	const seed = createHash("sha256").update(origin).digest("hex").slice(0, 12);
+	return Array.from({ length: PROBE_COUNT }, (_, index) => new URL(`/.well-known/seo-audit/not-found-${seed}-${index + 1}`, origin).toString());
+}
+function probeObservation(url, result) {
+	const request = result.request;
+	if (!request) return {
+		url,
+		error: result.warning ?? "No response evidence."
+	};
+	if (request.outcome === "response") return {
+		url,
+		status: request.status,
+		finalUrl: request.finalUrl,
+		redirected: request.finalUrl !== url,
+		accessBlocked: Boolean(request.accessBlock)
+	};
+	return {
+		url,
+		error: request.outcome === "failure" ? request.error : `Probe skipped: ${request.reason}`
+	};
+}
+async function collectCrawlSiteChecks(input) {
+	const probes = [];
+	for (const url of probeUrls(input.startUrl)) {
+		if (input.signal?.aborted) break;
+		const result = await input.fetchStatusPage(url, {
+			js: "off",
+			refresh: true,
+			timeoutMs: input.timeoutMs,
+			signal: input.signal,
+			writeCache: false,
+			respectRobots: input.respectRobots
+		});
+		probes.push(probeObservation(url, result));
+	}
+	const conclusive = probes.filter((probe) => probe.status !== void 0 && !probe.accessBlocked);
+	const successful = conclusive.filter((probe) => (probe.status ?? 0) >= 200 && (probe.status ?? 0) < 400);
+	const correctMissing = conclusive.filter((probe) => probe.status === 404 || probe.status === 410);
+	const status = conclusive.length !== PROBE_COUNT ? "unknown" : successful.length === PROBE_COUNT ? "warning" : correctMissing.length === PROBE_COUNT ? "pass" : "unknown";
+	const checks = { soft404: {
+		status,
+		probes,
+		probeLimit: PROBE_COUNT,
+		complete: probes.length === PROBE_COUNT
+	} };
+	if (status !== "warning") return {
+		checks,
+		issues: []
+	};
+	const rule = explainRule("soft_404");
+	if (!rule) throw new Error("Missing rule guidance for soft_404");
+	return {
+		checks,
+		issues: [{
+			ruleId: "soft_404",
+			title: rule.title,
+			category: rule.category,
+			severity: rule.defaultSeverity,
+			url: new URL("/", input.startUrl).toString(),
+			detail: `${successful.length} known-nonexistent paths returned a successful response or redirect.`,
+			evidence: checks.soft404
+		}]
+	};
+}
+//#endregion
 //#region packages/core/src/analyze/crawler/site-crawl-ai-signals.ts
 const MAX_AUXILIARY_RESPONSE_BYTES = 2 * 1024 * 1024;
 const AI_BOT_USER_AGENTS = [
@@ -12798,6 +13131,9 @@ async function crawlOne(url, opts = {}) {
 			mainContentHash: hashText(extracted.contentText),
 			textRatio: fetched.html.length ? Math.min(1, extracted.contentText.length / fetched.html.length) : void 0,
 			contentSample: truncate$1(extracted.contentText, 300),
+			contentSketch: crawlerEvidence.contentSketch,
+			softAuthenticationGate: crawlerEvidence.softAuthenticationGate,
+			tabbedContent: crawlerEvidence.tabbedContent,
 			lang: extracted.lang,
 			hasViewport: extracted.hasViewport,
 			isHttps: new URL(extracted.finalUrl).protocol === "https:",
@@ -14082,6 +14418,13 @@ async function crawlSite(input, dependencies) {
 			signal,
 			concurrency: Math.min(config.concurrency, 4)
 		}) : void 0;
+		const siteCheckResult = !healthStrategy && !cancelled && !stoppedForMemory ? await collectCrawlSiteChecks({
+			startUrl: config.url,
+			timeoutMs: config.timeoutMs,
+			fetchStatusPage: deps.fetchStatusPage,
+			respectRobots: config.respectRobots,
+			signal
+		}) : void 0;
 		for (const page of pages) {
 			if (!page.geo || !llmsTxt) continue;
 			page.geo = {
@@ -14107,6 +14450,10 @@ async function crawlSite(input, dependencies) {
 			} } : {},
 			...sitemapDiscovery ? { sitemapDiscovery } : {},
 			...externalLinkVerification ? { externalLinkVerification } : {},
+			...siteCheckResult ? {
+				siteChecks: siteCheckResult.checks,
+				additionalIssues: siteCheckResult.issues
+			} : {},
 			...agentDiscovery ? { agentDiscovery } : {},
 			status: reportStatus,
 			warnings,
@@ -15603,19 +15950,19 @@ function renderCrawlHtml(report, fixes = topFixes(report)) {
 	const reviews = reviewObservations(report);
 	const issueRows = report.issueGroups.map((group) => {
 		const rule = explainRule(group.ruleId);
-		return `<tr><td>${escapeHtml(group.severity)}</td><td>${escapeHtml(group.title)}</td><td>${group.count}</td><td>${escapeHtml(rule?.howToFix ?? "")}</td><td>${escapeHtml(group.sampleUrls[0] ?? "")}</td></tr>`;
+		return `<tr><td>${escapeHtml$1(group.severity)}</td><td>${escapeHtml$1(group.title)}</td><td>${group.count}</td><td>${escapeHtml$1(rule?.howToFix ?? "")}</td><td>${escapeHtml$1(group.sampleUrls[0] ?? "")}</td></tr>`;
 	}).join("\n");
-	const fixItems = fixes.slice(0, 10).map((fix) => `<li><strong>${escapeHtml(fix.title)}</strong><br>${escapeHtml(fix.howToFix)}<br><span>Verify: ${escapeHtml(fix.howToVerify)}</span><br><code>${escapeHtml(fix.verification.command)}</code></li>`).join("\n");
-	const reviewItems = reviews.slice(0, 10).map((observation) => `<li><strong>${escapeHtml(observation.title)}</strong><br>${escapeHtml(observation.howToFix)}<br><span>Check before scheduling work. ${escapeHtml(observation.howToVerify)}</span></li>`).join("\n");
-	const caveatItems = report.caveats.map((caveat) => `<li>${escapeHtml(caveat)}</li>`).join("\n");
-	const warningItems = report.warnings.map((warning) => `<li>${escapeHtml(warning)}</li>`).join("\n");
-	const accessItems = report.access.samples.map((sample) => `<li><strong>${escapeHtml(sample.url)}</strong><br>${escapeHtml(sample.evidence.guidance.summary)}<br>${escapeHtml(sample.evidence.guidance.recommendedAction)}<br><span>${escapeHtml(sample.evidence.guidance.securityNote)}</span></li>`).join("\n");
+	const fixItems = fixes.slice(0, 10).map((fix) => `<li><strong>${escapeHtml$1(fix.title)}</strong><br>${escapeHtml$1(fix.howToFix)}<br><span>Verify: ${escapeHtml$1(fix.howToVerify)}</span><br><code>${escapeHtml$1(fix.verification.command)}</code></li>`).join("\n");
+	const reviewItems = reviews.slice(0, 10).map((observation) => `<li><strong>${escapeHtml$1(observation.title)}</strong><br>${escapeHtml$1(observation.howToFix)}<br><span>Check before scheduling work. ${escapeHtml$1(observation.howToVerify)}</span></li>`).join("\n");
+	const caveatItems = report.caveats.map((caveat) => `<li>${escapeHtml$1(caveat)}</li>`).join("\n");
+	const warningItems = report.warnings.map((warning) => `<li>${escapeHtml$1(warning)}</li>`).join("\n");
+	const accessItems = report.access.samples.map((sample) => `<li><strong>${escapeHtml$1(sample.url)}</strong><br>${escapeHtml$1(sample.evidence.guidance.summary)}<br>${escapeHtml$1(sample.evidence.guidance.recommendedAction)}<br><span>${escapeHtml$1(sample.evidence.guidance.securityNote)}</span></li>`).join("\n");
 	return `<!doctype html>
 <html lang="en">
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>Crawl report for ${escapeHtml(report.config.url)}</title>
+  <title>Crawl report for ${escapeHtml$1(report.config.url)}</title>
   <style>
     body { color: #17202a; font: 15px/1.5 system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; margin: 32px; max-width: 1120px; }
     h1, h2 { line-height: 1.2; }
@@ -15631,10 +15978,10 @@ function renderCrawlHtml(report, fixes = topFixes(report)) {
 </head>
 <body>
   <h1>Crawl report</h1>
-  <p>${escapeHtml(report.config.url)}</p>
-  <p>Strategy: ${escapeHtml(report.config.strategy === "health" ? "sitemap health pass" : "full audit")}<br>Crawler: <code>${escapeHtml(report.access.crawler.userAgent)}</code></p>
+  <p>${escapeHtml$1(report.config.url)}</p>
+  <p>Strategy: ${escapeHtml$1(report.config.strategy === "health" ? "sitemap health pass" : "full audit")}<br>Crawler: <code>${escapeHtml$1(report.access.crawler.userAgent)}</code></p>
   <section class="summary">
-    <div class="metric"><span>Status</span><strong>${escapeHtml(report.status)}</strong></div>
+    <div class="metric"><span>Status</span><strong>${escapeHtml$1(report.status)}</strong></div>
     <div class="metric"><span>Documents</span><strong>${report.summary.totalPages}</strong></div>
     <div class="metric"><span>Requests</span><strong>${report.requestEvidenceStatus === "unavailable" ? "n/a" : report.requests.length}${report.requestEvidenceStatus === "partial" ? " (partial)" : ""}</strong></div>
     <div class="metric"><span>Discovered</span><strong>${report.summary.discoveredUrls}</strong></div>
@@ -15688,11 +16035,11 @@ function renderCrawlMarkdownTickets(report, fixes = topFixes(report)) {
 	if (reviews.length) lines.push("## Review observations", "", "These are not implementation tickets. Check the evidence before deciding whether to work on them.", "", ...reviews.slice(0, 10).flatMap((observation) => [`- ${observation.title} (${observation.severity}, ${observation.count} URL${observation.count === 1 ? "" : "s"}): ${observation.howToFix}`, `  - First URL: ${observation.sampleUrls[0] ?? "No sample URL recorded"}`]), "");
 	return `${lines.join("\n")}\n`;
 }
-function escapeHtml(value) {
+function escapeHtml$1(value) {
 	return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll("\"", "&quot;").replaceAll("'", "&#39;");
 }
 function escapeXml(value) {
-	return escapeHtml(value);
+	return escapeHtml$1(value);
 }
 //#endregion
 //#region packages/core/src/analyze/crawler/history-provenance.ts
@@ -16399,6 +16746,8 @@ const agentRepresentationResponseSchema = z.object({
 	status: z.number().int().optional(),
 	contentType: z.string().optional(),
 	bytes: z.number().int().nonnegative().optional(),
+	characters: z.number().int().nonnegative().optional(),
+	estimatedTokens: z.number().int().nonnegative().optional(),
 	sha256: z.string().optional(),
 	canonicalUrl: z.string().url().optional(),
 	alternateUrl: z.string().url().optional(),
@@ -16456,7 +16805,15 @@ const agentDiscoverySchema = z.object({
 				sourceWordCount: z.number().int().nonnegative(),
 				wordRetentionRatio: z.number().nonnegative().nullable(),
 				introductoryCopyRetained: z.boolean().nullable(),
-				navigationOnly: z.boolean()
+				navigationOnly: z.boolean(),
+				contentSketchCoverage: z.number().min(0).max(1).nullable().optional(),
+				tabbedContent: z.object({
+					detectedPanels: z.number().int().nonnegative(),
+					evaluatedPanels: z.number().int().nonnegative(),
+					retainedPanels: z.number().int().nonnegative(),
+					missingPanels: z.number().int().nonnegative(),
+					complete: z.boolean().nullable()
+				}).optional()
 			}).optional()
 		}))
 	}),
@@ -16475,6 +16832,11 @@ const agentDiscoverySchema = z.object({
 		missingHtmlRoutes: z.array(z.string()),
 		missingMarkdownRoutes: z.array(z.string()),
 		orphanMarkdownRoutes: z.array(z.string()),
+		comparisonStatus: z.enum([
+			"complete",
+			"partial",
+			"not-applicable"
+		]).optional(),
 		error: z.string().optional()
 	}),
 	agentSkills: z.object({
@@ -16580,6 +16942,25 @@ const agentDiscoverySchema = z.object({
 	warnings: z.array(z.string())
 });
 //#endregion
+//#region packages/core/src/analyze/crawler/site-checks-schema.ts
+const crawlSiteChecksSchema = z.object({ soft404: z.object({
+	status: z.enum([
+		"pass",
+		"warning",
+		"unknown"
+	]),
+	probes: z.array(z.object({
+		url: z.string().url(),
+		status: z.number().int().optional(),
+		finalUrl: z.string().url().optional(),
+		redirected: z.boolean().optional(),
+		accessBlocked: z.boolean().optional(),
+		error: z.string().optional()
+	})),
+	probeLimit: z.number().int().positive(),
+	complete: z.boolean()
+}) });
+//#endregion
 //#region packages/core/src/analyze/crawler/schemas.ts
 const crawlerRuleSeveritySchema = z.enum([
 	"low",
@@ -17009,6 +17390,34 @@ const crawlPageSnapshotSchema = z.object({
 	mainContentHash: z.string().optional(),
 	textRatio: z.number().min(0).max(1).optional(),
 	contentSample: z.string().optional(),
+	contentSketch: z.object({
+		version: z.literal(1),
+		wordCount: z.number().int().nonnegative(),
+		shingleSize: z.number().int().positive(),
+		sampledShingles: z.number().int().nonnegative(),
+		hashes: z.array(z.string())
+	}).optional(),
+	softAuthenticationGate: z.object({
+		kind: z.literal("login-form"),
+		indicators: z.array(z.string()),
+		formActionPath: z.string().optional()
+	}).optional(),
+	tabbedContent: z.object({
+		groups: z.number().int().positive(),
+		panels: z.number().int().positive(),
+		retainedPanels: z.number().int().nonnegative(),
+		truncated: z.boolean(),
+		panelSketches: z.array(z.object({
+			label: z.string().optional(),
+			sketch: z.object({
+				version: z.literal(1),
+				wordCount: z.number().int().nonnegative(),
+				shingleSize: z.number().int().positive(),
+				sampledShingles: z.number().int().nonnegative(),
+				hashes: z.array(z.string())
+			})
+		}))
+	}).optional(),
 	lang: z.string().optional(),
 	hasViewport: z.boolean().optional(),
 	isHttps: z.boolean().optional(),
@@ -17500,6 +17909,7 @@ const crawlReportBaseSchema = z.object({
 	ai: crawlAiSignalsSchema.optional(),
 	sitemapDiscovery: crawlSitemapDiscoverySchema.optional(),
 	externalLinkVerification: crawlExternalLinkVerificationSchema.optional(),
+	siteChecks: crawlSiteChecksSchema.optional(),
 	agentDiscovery: agentDiscoverySchema.optional(),
 	warnings: z.array(z.string()),
 	caveats: z.array(z.string())
@@ -17549,7 +17959,7 @@ function compareText$10(left, right) {
 	}
 	return leftPoints.length - rightPoints.length;
 }
-function boundedInteger$5(value, fallback, minimum, maximum) {
+function boundedInteger$6(value, fallback, minimum, maximum) {
 	if (value === void 0 || !Number.isFinite(value)) return fallback;
 	return Math.min(maximum, Math.max(minimum, Math.floor(value)));
 }
@@ -17626,8 +18036,8 @@ function initialSelection(sourceRows) {
 	};
 }
 function analyzeCtrUnderperformersFromRows(input) {
-	const minImpressions = boundedInteger$5(input.minImpressions, 200, 1, CTR_MAX_MIN_IMPRESSIONS);
-	const limit = boundedInteger$5(input.limit, 25, 1, 100);
+	const minImpressions = boundedInteger$6(input.minImpressions, 200, 1, CTR_MAX_MIN_IMPRESSIONS);
+	const limit = boundedInteger$6(input.limit, 25, 1, 100);
 	const selection = initialSelection(input.rows.length);
 	const benchmarkRows = aggregateCtrRows(input.rows, selection).filter((row) => {
 		const query = row.keys[0] ?? "";
@@ -18126,7 +18536,7 @@ function analyzeSegmentRows(input) {
 }
 //#endregion
 //#region packages/core/src/analyze/segment-impact-input.ts
-const DAY_MS$1 = 864e5;
+const DAY_MS$2 = 864e5;
 const MAX_WINDOW_DAYS = 240;
 function subtractDays$1(value, days) {
 	const date = /* @__PURE__ */ new Date(`${value}T00:00:00.000Z`);
@@ -18134,7 +18544,7 @@ function subtractDays$1(value, days) {
 	return date.toISOString().slice(0, 10);
 }
 function segmentRangeDays(range) {
-	return Math.floor((Date.parse(`${range.endDate}T00:00:00.000Z`) - Date.parse(`${range.startDate}T00:00:00.000Z`)) / DAY_MS$1) + 1;
+	return Math.floor((Date.parse(`${range.endDate}T00:00:00.000Z`) - Date.parse(`${range.startDate}T00:00:00.000Z`)) / DAY_MS$2) + 1;
 }
 function segmentComparisonRange(after, compareDays) {
 	const endDate = subtractDays$1(after.startDate, 1);
@@ -18761,13 +19171,13 @@ const MINIMUM_PAGE_SHARE = .1;
 const MINIMUM_PAGE_IMPRESSIONS = 10;
 const MAXIMUM_DOMINANT_SHARE = .8;
 const MAX_SUPPRESSIONS = 100;
-function boundedInteger$4(value, fallback, minimum, maximum) {
+function boundedInteger$5(value, fallback, minimum, maximum) {
 	if (value === void 0 || !Number.isFinite(value)) return fallback;
 	return Math.min(maximum, Math.max(minimum, Math.floor(value)));
 }
 function analyzeCannibalRows(input) {
-	const minImpressions = boundedInteger$4(input.minImpressions, 50, 0, 1e9);
-	const limit = boundedInteger$4(input.limit, 25, 1, 100);
+	const minImpressions = boundedInteger$5(input.minImpressions, 50, 0, 1e9);
+	const limit = boundedInteger$5(input.limit, 25, 1, 100);
 	const selection = {
 		sourceRows: input.rows.length,
 		invalidRows: 0,
@@ -19549,7 +19959,7 @@ function groupQuickWins(items) {
 }
 //#endregion
 //#region packages/core/src/analyze/site-diagnostics/quick-wins-analysis-primitives.ts
-function boundedInteger$3(value, fallback, minimum, maximum) {
+function boundedInteger$4(value, fallback, minimum, maximum) {
 	if (value === void 0 || !Number.isFinite(value)) return fallback;
 	return Math.min(maximum, Math.max(minimum, Math.floor(value)));
 }
@@ -19670,12 +20080,12 @@ function roundedSum(values) {
 //#region packages/core/src/analyze/site-diagnostics/quick-wins-analysis.ts
 const DEFAULT_MIN_IMPRESSIONS$2 = 200;
 const MAX_MIN_IMPRESSIONS$2 = 1e9;
-const DEFAULT_LIMIT$2 = 25;
-const MAX_LIMIT$2 = 100;
+const DEFAULT_LIMIT$3 = 25;
+const MAX_LIMIT$3 = 100;
 const FALLBACK_SOURCE = "builtin_position_ctr_curve_v1";
 function analyzeQuickWinsFromRows(input) {
-	const minImpressions = boundedInteger$3(input.minImpressions, DEFAULT_MIN_IMPRESSIONS$2, 0, MAX_MIN_IMPRESSIONS$2);
-	const limit = boundedInteger$3(input.limit, DEFAULT_LIMIT$2, 1, MAX_LIMIT$2);
+	const minImpressions = boundedInteger$4(input.minImpressions, DEFAULT_MIN_IMPRESSIONS$2, 0, MAX_MIN_IMPRESSIONS$2);
+	const limit = boundedInteger$4(input.limit, DEFAULT_LIMIT$3, 1, MAX_LIMIT$3);
 	const selected = selectBenchmarkRows(input);
 	const benchmarkContext = createCtrBenchmarkContext(selected.rows, {
 		samplePopulation: "all_qualified_url_samples",
@@ -20016,7 +20426,7 @@ function compareText$5(left, right) {
 	}
 	return leftPoints.length - rightPoints.length;
 }
-function isHttpUrl(value) {
+function isHttpUrl$1(value) {
 	try {
 		const parsed = new URL(value);
 		return parsed.protocol === "http:" || parsed.protocol === "https:";
@@ -20025,7 +20435,7 @@ function isHttpUrl(value) {
 	}
 }
 function isValidStrikingDistanceRow(row, query, url) {
-	return Boolean(query) && isHttpUrl(url) && Number.isFinite(row.clicks) && Number.isFinite(row.impressions) && Number.isFinite(row.ctr) && Number.isFinite(row.position) && row.clicks >= 0 && row.impressions > 0 && row.clicks <= row.impressions && row.ctr >= 0 && row.ctr <= 1 && row.position > 0;
+	return Boolean(query) && isHttpUrl$1(url) && Number.isFinite(row.clicks) && Number.isFinite(row.impressions) && Number.isFinite(row.ctr) && Number.isFinite(row.position) && row.clicks >= 0 && row.impressions > 0 && row.clicks <= row.impressions && row.ctr >= 0 && row.ctr <= 1 && row.position > 0;
 }
 function isStrikingDistanceBrandRow(input) {
 	return shouldExcludeBrandQuery({
@@ -20115,8 +20525,8 @@ function groupStrikingDistanceItems(items) {
 //#region packages/core/src/analyze/striking-distance-analysis.ts
 const DEFAULT_MIN_IMPRESSIONS$1 = 100;
 const MAX_MIN_IMPRESSIONS$1 = 1e9;
-const DEFAULT_LIMIT$1 = 25;
-const MAX_LIMIT$1 = 100;
+const DEFAULT_LIMIT$2 = 25;
+const MAX_LIMIT$2 = 100;
 function integerInRange$1(value, fallback, minimum, maximum) {
 	if (value === void 0 || !Number.isFinite(value)) return fallback;
 	return Math.min(maximum, Math.max(minimum, Math.floor(value)));
@@ -20158,7 +20568,7 @@ function selectRows(input) {
 }
 function analyzeStrikingDistanceRows(input) {
 	const minImpressions = integerInRange$1(input.minImpressions, DEFAULT_MIN_IMPRESSIONS$1, 0, MAX_MIN_IMPRESSIONS$1);
-	const limit = integerInRange$1(input.limit, DEFAULT_LIMIT$1, 1, MAX_LIMIT$1);
+	const limit = integerInRange$1(input.limit, DEFAULT_LIMIT$2, 1, MAX_LIMIT$2);
 	const selected = selectRows({
 		...input,
 		minImpressions
@@ -20232,7 +20642,7 @@ const defaultDependencies$7 = {
 	verifyContent: verifyQueryContent,
 	now: () => /* @__PURE__ */ new Date()
 };
-function boundedInteger$2(value, fallback, minimum, maximum) {
+function boundedInteger$3(value, fallback, minimum, maximum) {
 	if (value === void 0 || !Number.isFinite(value)) return fallback;
 	return Math.min(maximum, Math.max(minimum, Math.floor(value)));
 }
@@ -20296,7 +20706,7 @@ async function strikingDistance(input, dependencies = defaultDependencies$7) {
 		brandTerms: input.brandTerms,
 		includeBrand: input.includeBrand
 	});
-	const verifyLimit = boundedInteger$2(input.verifyLimit, DEFAULT_VERIFY_LIMIT, 0, analysis.limit);
+	const verifyLimit = boundedInteger$3(input.verifyLimit, DEFAULT_VERIFY_LIMIT, 0, analysis.limit);
 	const verificationRequested = input.verifyContent === true || input.verifyContent !== false && input.verifyLimit !== void 0;
 	const attempted = verificationRequested ? Math.min(verifyLimit, analysis.items.length) : 0;
 	const items = await Promise.all(analysis.items.map(async (item, index) => {
@@ -20485,7 +20895,7 @@ function standardDeviation(values) {
 function toFixedNumber(value, digits = 3) {
 	return Number(value.toFixed(digits));
 }
-function percentChange(baseline, comparison) {
+function percentChange$1(baseline, comparison) {
 	if (!baseline) return comparison ? null : 0;
 	return (comparison - baseline) / baseline * 100;
 }
@@ -20671,7 +21081,7 @@ function analyzeTrafficAnomalyRows(input) {
 		const outsideFlatBaseline = zScore === null && comparisonMean !== baselineMean;
 		const significant = outsideFlatBaseline || zScore !== null && Math.abs(zScore) >= 2;
 		const direction = significant ? comparisonMean < baselineMean ? "drop" : "spike" : "normal";
-		const relativeChange = percentChange(baselineMean, comparisonMean);
+		const relativeChange = percentChange$1(baselineMean, comparisonMean);
 		return {
 			site: input.site,
 			metric,
@@ -21730,7 +22140,7 @@ function dateShift(date, days) {
 }
 //#endregion
 //#region packages/core/src/analyze/experiments/measurement/window.ts
-const DAY_MS = 864e5;
+const DAY_MS$1 = 864e5;
 function exactDate(value, label) {
 	const pattern = /^\d{4}-\d{2}-\d{2}$/;
 	const parsed = /* @__PURE__ */ new Date(`${value}T00:00:00.000Z`);
@@ -21745,7 +22155,7 @@ function boundedDays(value, fallback, label) {
 function calendarDays(startDate, endDate) {
 	const start = (/* @__PURE__ */ new Date(`${startDate}T00:00:00.000Z`)).getTime();
 	const end = (/* @__PURE__ */ new Date(`${endDate}T00:00:00.000Z`)).getTime();
-	return Math.floor((end - start) / DAY_MS) + 1;
+	return Math.floor((end - start) / DAY_MS$1) + 1;
 }
 function subtractCalendarMonths(value, months) {
 	const source = /* @__PURE__ */ new Date(`${value}T00:00:00.000Z`);
@@ -22293,7 +22703,7 @@ function internalLinksVerdict(input) {
 function uniqueInternalLinksWarnings(warnings) {
 	return [...new Map(warnings.map((warning) => [`${warning.stage}\u0000${warning.url}\u0000${warning.code}\u0000${warning.message}`, warning])).values()];
 }
-function errorMessage(error) {
+function errorMessage$1(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 function acceptedAlias(site, value) {
@@ -22343,7 +22753,7 @@ async function verifyInternalLinkTarget(input) {
 				stage: "target-fetch",
 				url: input.targetUrl,
 				code: "fetch-failed",
-				message: errorMessage(error)
+				message: errorMessage$1(error)
 			}]
 		};
 	}
@@ -22364,7 +22774,7 @@ async function verifyInternalLinkTarget(input) {
 				stage: "target-extract",
 				url: input.targetUrl,
 				code: "extract-failed",
-				message: errorMessage(error)
+				message: errorMessage$1(error)
 			}]
 		};
 	}
@@ -22427,7 +22837,7 @@ async function verifyInternalLinkCandidate(input) {
 				stage: "source-fetch",
 				url: input.candidate.sourceUrl,
 				code: "fetch-failed",
-				message: errorMessage(error)
+				message: errorMessage$1(error)
 			}]
 		};
 	}
@@ -22445,7 +22855,7 @@ async function verifyInternalLinkCandidate(input) {
 				stage: "source-fetch",
 				url: input.candidate.sourceUrl,
 				code: "fetch-failed",
-				message: errorMessage(error)
+				message: errorMessage$1(error)
 			}]
 		};
 	}
@@ -22459,7 +22869,7 @@ async function verifyInternalLinkCandidate(input) {
 				stage: "source-extract",
 				url: input.candidate.sourceUrl,
 				code: "extract-failed",
-				message: errorMessage(error)
+				message: errorMessage$1(error)
 			}]
 		};
 	}
@@ -23270,7 +23680,7 @@ function compareText$3(left, right) {
 	}
 	return leftPoints.length - rightPoints.length;
 }
-function boundedInteger$1(value, fallback, maximum) {
+function boundedInteger$2(value, fallback, maximum) {
 	if (value === void 0 || !Number.isFinite(value)) return fallback;
 	return Math.min(maximum, Math.max(1, Math.trunc(value)));
 }
@@ -23463,10 +23873,10 @@ function caveats(input) {
 	return items;
 }
 function analyzeIndexCoverageSignals(input) {
-	const itemLimit = boundedInteger$1(input.limits?.itemsPerSection, DEFAULT_ITEMS_PER_SECTION, MAX_ITEMS_PER_SECTION);
-	const clusterLimit = boundedInteger$1(input.limits?.templateClusters, DEFAULT_TEMPLATE_LIMIT, MAX_TEMPLATE_LIMIT);
-	const clusterSamples = boundedInteger$1(input.limits?.templateSamples, DEFAULT_TEMPLATE_SAMPLES, MAX_TEMPLATE_SAMPLES);
-	const minUrls = boundedInteger$1(input.templateThresholds?.minUrls, DEFAULT_TEMPLATE_MIN_URLS, Number.MAX_SAFE_INTEGER);
+	const itemLimit = boundedInteger$2(input.limits?.itemsPerSection, DEFAULT_ITEMS_PER_SECTION, MAX_ITEMS_PER_SECTION);
+	const clusterLimit = boundedInteger$2(input.limits?.templateClusters, DEFAULT_TEMPLATE_LIMIT, MAX_TEMPLATE_LIMIT);
+	const clusterSamples = boundedInteger$2(input.limits?.templateSamples, DEFAULT_TEMPLATE_SAMPLES, MAX_TEMPLATE_SAMPLES);
+	const minUrls = boundedInteger$2(input.templateThresholds?.minUrls, DEFAULT_TEMPLATE_MIN_URLS, Number.MAX_SAFE_INTEGER);
 	const requestedMinShare = input.templateThresholds?.minShare;
 	const minShare = Number.isFinite(requestedMinShare) ? Math.min(1, Math.max(0, requestedMinShare ?? DEFAULT_TEMPLATE_MIN_SHARE)) : DEFAULT_TEMPLATE_MIN_SHARE;
 	const crawl = crawlInput(input.crawl);
@@ -27241,16 +27651,16 @@ function benchmarkDetails(benchmark) {
 		positiveUrlSamples: benchmark.positiveUrlSamples
 	};
 }
-function boundedInteger(input) {
+function boundedInteger$1(input) {
 	const value = Number.isFinite(input.value) ? input.value ?? 0 : input.fallback;
 	return Math.min(input.maximum ?? Number.POSITIVE_INFINITY, Math.max(1, Math.floor(value)));
 }
 function analyzeQueryClustersFromRows(input) {
-	const minImpressions = boundedInteger({
+	const minImpressions = boundedInteger$1({
 		value: input.minImpressions,
 		fallback: 25
 	});
-	const limit = boundedInteger({
+	const limit = boundedInteger$1({
 		value: input.limit,
 		fallback: 25,
 		maximum: 100
@@ -27892,8 +28302,8 @@ function reportPresentation(report) {
 //#region packages/core/src/analyze/second-page-analysis.ts
 const DEFAULT_MIN_IMPRESSIONS = 50;
 const MAX_MIN_IMPRESSIONS = 1e9;
-const DEFAULT_LIMIT = 10;
-const MAX_LIMIT = 100;
+const DEFAULT_LIMIT$1 = 10;
+const MAX_LIMIT$1 = 100;
 function integerInRange(value, fallback, minimum, maximum) {
 	if (value === void 0 || !Number.isFinite(value)) return fallback;
 	return Math.min(maximum, Math.max(minimum, Math.floor(value)));
@@ -27980,7 +28390,7 @@ function compareItems(left, right) {
 }
 function analyzeSecondPageRows(input) {
 	const minImpressions = integerInRange(input.minImpressions, DEFAULT_MIN_IMPRESSIONS, 0, MAX_MIN_IMPRESSIONS);
-	const limit = integerInRange(input.limit, DEFAULT_LIMIT, 1, MAX_LIMIT);
+	const limit = integerInRange(input.limit, DEFAULT_LIMIT$1, 1, MAX_LIMIT$1);
 	const selection = {
 		sourceRows: input.rows.length,
 		invalidRows: 0,
@@ -29515,15 +29925,911 @@ async function updatePostmortemWorkflow(input, dependencies = {}) {
 	});
 }
 //#endregion
-//#region packages/core/src/clients.ts
-function googleAnalyticsPropertyId(client) {
-	return client?.analytics.google?.propertyId;
-}
-function slug(value) {
-	return value.toLowerCase().replace(/^https?:\/\//, "").replace(/^sc-domain:/, "").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 60);
+//#region packages/core/src/bing/analysis.ts
+const DAY_MS = 864e5;
+const DEFAULT_COMPARISON_DAYS = 28;
+const WEEKLY_PERIODS = 4;
+const OPPORTUNITY_MIN_IMPRESSIONS = 20;
+const OPPORTUNITY_MIN_POSITION = 4;
+const OPPORTUNITY_MAX_POSITION = 20;
+const RESULT_LIMIT = 10;
+function dateOffset(date, days) {
+	return new Date(Date.parse(`${date}T00:00:00Z`) + days * DAY_MS).toISOString().slice(0, 10);
+}
+function percentChange(previous, current) {
+	if (previous === 0) return null;
+	return round((current - previous) / previous * 100);
+}
+function round(value, digits = 3) {
+	const factor = 10 ** digits;
+	return Math.round(value * factor) / factor;
+}
+function trafficPeriod(byDate, startDate, endDate, expectedDays) {
+	let clicks = 0;
+	let impressions = 0;
+	let observedDays = 0;
+	for (const [date, row] of byDate) {
+		if (date < startDate || date > endDate) continue;
+		observedDays += 1;
+		clicks += row.clicks;
+		impressions += row.impressions;
+	}
+	return {
+		startDate,
+		endDate,
+		expectedDays,
+		observedDays,
+		missingDays: Math.max(0, expectedDays - observedDays),
+		clicks,
+		impressions,
+		ctr: impressions ? round(clicks / impressions * 100) : null
+	};
 }
-function uniqueStrings(values = []) {
-	return [...new Set(values.map((value) => value.trim()).filter(Boolean))];
+function analyzeBingTraffic(rows, comparisonDays = DEFAULT_COMPARISON_DAYS) {
+	if (!rows.length) return void 0;
+	const byDate = /* @__PURE__ */ new Map();
+	for (const row of rows) {
+		const existing = byDate.get(row.date) ?? {
+			clicks: 0,
+			impressions: 0
+		};
+		existing.clicks += row.clicks;
+		existing.impressions += row.impressions;
+		byDate.set(row.date, existing);
+	}
+	const latestDate = [...byDate.keys()].sort().at(-1);
+	if (!latestDate) return void 0;
+	const currentStart = dateOffset(latestDate, -(comparisonDays - 1));
+	const previousEnd = dateOffset(currentStart, -1);
+	const previousStart = dateOffset(previousEnd, -(comparisonDays - 1));
+	const current = trafficPeriod(byDate, currentStart, latestDate, comparisonDays);
+	const previous = trafficPeriod(byDate, previousStart, previousEnd, comparisonDays);
+	return {
+		comparisonDays,
+		current,
+		previous,
+		changes: {
+			clicks: current.clicks - previous.clicks,
+			clicksPercent: percentChange(previous.clicks, current.clicks),
+			impressions: current.impressions - previous.impressions,
+			impressionsPercent: percentChange(previous.impressions, current.impressions),
+			ctrPercentagePoints: current.ctr === null || previous.ctr === null ? null : round(current.ctr - previous.ctr)
+		}
+	};
+}
+const CRAWL_FIELDS = [
+	"crawledPages",
+	"inIndex",
+	"inLinks",
+	"crawlErrors",
+	"code4xx",
+	"code5xx",
+	"blockedByRobotsTxt",
+	"connectionTimeout",
+	"dnsFailures",
+	"containsMalware"
+];
+function analyzeBingCrawl(rows, comparisonDays = DEFAULT_COMPARISON_DAYS) {
+	const ordered = [...rows].sort((a, b) => a.date.localeCompare(b.date, "en"));
+	const current = ordered.at(-1);
+	if (!current) return void 0;
+	const targetDate = dateOffset(current.date, -comparisonDays);
+	const previous = ordered.filter((row) => row.date <= targetDate).at(-1);
+	const changes = {};
+	if (!previous) return {
+		comparisonDays,
+		targetDate,
+		current,
+		previous: void 0,
+		changes
+	};
+	for (const field of CRAWL_FIELDS) {
+		const currentValue = current[field];
+		const previousValue = previous[field];
+		if (typeof currentValue !== "number" || typeof previousValue !== "number") continue;
+		changes[field] = {
+			previous: previousValue,
+			current: currentValue,
+			absolute: currentValue - previousValue,
+			percent: percentChange(previousValue, currentValue)
+		};
+	}
+	return {
+		comparisonDays,
+		targetDate,
+		current,
+		previous,
+		changes
+	};
+}
+function aggregateDimensions(rows, dates) {
+	const values = /* @__PURE__ */ new Map();
+	for (const row of rows) {
+		if (!dates.has(row.date)) continue;
+		const item = values.get(row.value) ?? {
+			clicks: 0,
+			impressions: 0,
+			clickPositionTotal: 0,
+			clickPositionWeight: 0,
+			impressionPositionTotal: 0,
+			impressionPositionWeight: 0,
+			observedDates: /* @__PURE__ */ new Set()
+		};
+		item.clicks += row.clicks;
+		item.impressions += row.impressions;
+		item.observedDates.add(row.date);
+		if (row.avgClickPosition !== void 0 && row.clicks > 0) {
+			const weight = row.clicks;
+			item.clickPositionTotal += row.avgClickPosition * weight;
+			item.clickPositionWeight += weight;
+		}
+		if (row.avgImpressionPosition !== void 0 && row.impressions > 0) {
+			const weight = row.impressions;
+			item.impressionPositionTotal += row.avgImpressionPosition * weight;
+			item.impressionPositionWeight += weight;
+		}
+		values.set(row.value, item);
+	}
+	return new Map([...values].map(([value, item]) => [value, {
+		value,
+		observedWeeks: item.observedDates.size,
+		clicks: item.clicks,
+		impressions: item.impressions,
+		avgClickPosition: item.clickPositionWeight ? round(item.clickPositionTotal / item.clickPositionWeight) : null,
+		avgImpressionPosition: item.impressionPositionWeight ? round(item.impressionPositionTotal / item.impressionPositionWeight) : null
+	}]));
+}
+function compareValue(a, b) {
+	return a.value.localeCompare(b.value, "en");
+}
+function analyzeBingDimensions(rows, kind) {
+	const dates = [...new Set(rows.map((row) => row.date))].sort().reverse();
+	const currentDates = dates.slice(0, WEEKLY_PERIODS);
+	const previousDates = dates.slice(WEEKLY_PERIODS, WEEKLY_PERIODS * 2);
+	const current = aggregateDimensions(rows, new Set(currentDates));
+	const previous = aggregateDimensions(rows, new Set(previousDates));
+	const matchedValues = [...current.keys()].filter((value) => previous.has(value));
+	const comparableValues = currentDates.length === WEEKLY_PERIODS && previousDates.length === WEEKLY_PERIODS ? matchedValues.filter((value) => {
+		const currentValue = current.get(value);
+		const previousValue = previous.get(value);
+		return currentValue?.observedWeeks === WEEKLY_PERIODS && previousValue?.observedWeeks === WEEKLY_PERIODS;
+	}) : [];
+	const movements = comparableValues.map((value) => {
+		const currentValue = current.get(value);
+		const previousValue = previous.get(value);
+		return {
+			value,
+			current: currentValue,
+			previous: previousValue,
+			changes: {
+				clicks: currentValue.clicks - previousValue.clicks,
+				clicksPercent: percentChange(previousValue.clicks, currentValue.clicks),
+				impressions: currentValue.impressions - previousValue.impressions,
+				impressionsPercent: percentChange(previousValue.impressions, currentValue.impressions)
+			}
+		};
+	}).sort((a, b) => Math.abs(b.changes.clicks) - Math.abs(a.changes.clicks) || Math.abs(b.changes.impressions) - Math.abs(a.changes.impressions) || compareValue(a, b)).slice(0, RESULT_LIMIT);
+	const opportunities = [...current.values()].filter((row) => row.impressions >= OPPORTUNITY_MIN_IMPRESSIONS && row.avgImpressionPosition !== null && row.avgImpressionPosition >= OPPORTUNITY_MIN_POSITION && row.avgImpressionPosition <= OPPORTUNITY_MAX_POSITION).sort((a, b) => b.impressions - a.impressions || b.clicks - a.clicks || compareValue(a, b)).slice(0, RESULT_LIMIT);
+	return {
+		kind,
+		sourceSemantics: "Bing weekly top-list evidence. Missing dimensions are unknown, not zero. Movements require observation in every week of both periods.",
+		periods: {
+			weeksPerPeriod: WEEKLY_PERIODS,
+			currentDates,
+			previousDates
+		},
+		coverage: {
+			sourceRows: rows.length,
+			currentDimensions: current.size,
+			previousDimensions: previous.size,
+			matchedDimensions: matchedValues.length,
+			comparableDimensions: comparableValues.length,
+			incompleteMatchedDimensions: matchedValues.length - comparableValues.length,
+			currentOnlyDimensions: [...current.keys()].filter((value) => !previous.has(value)).length,
+			previousOnlyDimensions: [...previous.keys()].filter((value) => !current.has(value)).length
+		},
+		thresholds: {
+			heuristic: true,
+			opportunityMinImpressions: OPPORTUNITY_MIN_IMPRESSIONS,
+			opportunityPositionRange: [OPPORTUNITY_MIN_POSITION, OPPORTUNITY_MAX_POSITION],
+			resultLimit: RESULT_LIMIT
+		},
+		movements,
+		opportunities
+	};
+}
+const bingAnalysisDefaults = {
+	comparisonDays: DEFAULT_COMPARISON_DAYS,
+	weeklyPeriods: WEEKLY_PERIODS,
+	resultLimit: RESULT_LIMIT
+};
+//#endregion
+//#region packages/core/src/bing/client.ts
+const DEFAULT_BASE_URL = "https://ssl.bing.com/webmaster/api.svc/json";
+const MAX_RESPONSE_BYTES$1 = 2e6;
+const MAX_STAT_ROWS = 400;
+const MAX_DIMENSION_ROWS = 8e3;
+const MAX_LINK_ROWS = 200;
+function bingDate(value) {
+	if (typeof value !== "string") return void 0;
+	const legacy = /^\/Date\((-?\d+)(?:[+-]\d{4})?\)\/$/.exec(value);
+	const date = legacy ? new Date(Number(legacy[1])) : new Date(value);
+	return Number.isNaN(date.getTime()) ? void 0 : date.toISOString().slice(0, 10);
+}
+function nonnegativeNumber(value) {
+	return typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : void 0;
+}
+function positionNumber(value) {
+	if (value === void 0 || value === null || value === -1) return { valid: true };
+	const number = nonnegativeNumber(value);
+	return number === void 0 ? { valid: false } : {
+		valid: true,
+		value: number
+	};
+}
+function isHttpUrl(value) {
+	if (typeof value !== "string" || value.length > 2e3) return false;
+	try {
+		const url = new URL(value);
+		return url.protocol === "http:" || url.protocol === "https:";
+	} catch {
+		return false;
+	}
+}
+function boundedRows(rows, invalidRows, limit = MAX_STAT_ROWS) {
+	const capped = rows.length > limit;
+	return {
+		rows: capped ? rows.slice(-limit) : rows,
+		invalidRows,
+		capped,
+		returnedRows: rows.length
+	};
+}
+function dimensionValue(value, kind) {
+	if (typeof value !== "string") return void 0;
+	const normalized = value.trim();
+	if (!normalized || normalized.length > 2e3) return void 0;
+	if (kind === "page" && !isHttpUrl(normalized)) return void 0;
+	return normalized;
+}
+function errorMessage(body) {
+	try {
+		const parsed = JSON.parse(body);
+		return typeof parsed.Message === "string" ? parsed.Message : void 0;
+	} catch {
+		return;
+	}
+}
+var BingWebmasterClient = class {
+	credentials;
+	authentication;
+	baseUrl;
+	fetchImpl;
+	timeoutMs;
+	constructor(credentials, options = {}) {
+		this.credentials = credentials;
+		if (!(credentials.apiKey?.trim() || credentials.accessToken?.trim())) throw new SeoError("AUTH_REQUIRED", "Bing Webmaster credentials are empty.");
+		this.authentication = credentials.apiKey ? "api-key" : "oauth";
+		this.baseUrl = (options.baseUrl ?? DEFAULT_BASE_URL).replace(/\/$/, "");
+		this.fetchImpl = options.fetchImpl ?? publicHttpFetch;
+		this.timeoutMs = options.timeoutMs ?? 3e4;
+	}
+	async request(method, params = {}) {
+		const url = new URL(`${this.baseUrl}/${method}`);
+		for (const [key, value] of Object.entries(params)) url.searchParams.set(key, value);
+		if (this.credentials.apiKey) url.searchParams.set("apikey", this.credentials.apiKey);
+		let response;
+		try {
+			response = await this.fetchImpl(url.toString(), {
+				headers: {
+					accept: "application/json",
+					...this.credentials.accessToken ? { authorization: `Bearer ${this.credentials.accessToken}` } : {}
+				},
+				signal: AbortSignal.timeout(this.timeoutMs)
+			});
+		} catch (error) {
+			if (error instanceof SeoError) throw error;
+			throw new SeoError("PROVIDER_UNAVAILABLE", `Bing Webmaster did not respond: ${error instanceof Error ? error.message : String(error)}`);
+		}
+		const body = await readBoundedResponseText(response, MAX_RESPONSE_BYTES$1, "Bing Webmaster response");
+		if (!response.ok) {
+			const message = errorMessage(body);
+			if (response.status === 401 || /invalidapikey|unauthorized/i.test(message ?? "")) throw new SeoError("AUTH_REQUIRED", "Bing Webmaster rejected the saved credential. Run `seo providers bing connect` again.");
+			if (response.status === 403) throw new SeoError("ACCESS_DENIED", "Bing Webmaster denied access to this site. Check that it is verified for the connected account.");
+			if (response.status === 429) throw new SeoError("RATE_LIMITED", "Bing Webmaster rate limited this request. Try again later.");
+			throw new SeoError("PROVIDER_UNAVAILABLE", `Bing Webmaster request failed with HTTP ${response.status}${message ? ` (${message})` : ""}.`);
+		}
+		try {
+			return JSON.parse(body).d;
+		} catch {
+			throw new SeoError("PROVIDER_UNAVAILABLE", "Bing Webmaster returned invalid JSON.");
+		}
+	}
+	async listSites() {
+		const data = await this.request("GetUserSites");
+		if (!Array.isArray(data)) throw new SeoError("PROVIDER_UNAVAILABLE", "Bing Webmaster returned an invalid site list.");
+		const sites = [];
+		let invalidRows = 0;
+		for (const item of data) {
+			if (!item || typeof item !== "object") {
+				invalidRows += 1;
+				continue;
+			}
+			const row = item;
+			if (typeof row.Url !== "string" || typeof row.IsVerified !== "boolean") {
+				invalidRows += 1;
+				continue;
+			}
+			sites.push({
+				url: row.Url,
+				isVerified: row.IsVerified
+			});
+		}
+		sites.sort((a, b) => a.url.localeCompare(b.url, "en"));
+		return {
+			sites,
+			invalidRows
+		};
+	}
+	async getTraffic(siteUrl) {
+		const data = await this.request("GetRankAndTrafficStats", { siteUrl });
+		if (!Array.isArray(data)) throw new SeoError("PROVIDER_UNAVAILABLE", "Bing Webmaster returned invalid traffic statistics.");
+		const rows = [];
+		let invalidRows = 0;
+		for (const item of data) {
+			if (!item || typeof item !== "object") {
+				invalidRows += 1;
+				continue;
+			}
+			const row = item;
+			const date = bingDate(row.Date);
+			const clicks = nonnegativeNumber(row.Clicks);
+			const impressions = nonnegativeNumber(row.Impressions);
+			if (!date || clicks === void 0 || impressions === void 0) {
+				invalidRows += 1;
+				continue;
+			}
+			rows.push({
+				date,
+				clicks,
+				impressions
+			});
+		}
+		rows.sort((a, b) => a.date.localeCompare(b.date, "en") || a.clicks - b.clicks || a.impressions - b.impressions);
+		return boundedRows(rows, invalidRows);
+	}
+	async getCrawlStats(siteUrl) {
+		const data = await this.request("GetCrawlStats", { siteUrl });
+		if (!Array.isArray(data)) throw new SeoError("PROVIDER_UNAVAILABLE", "Bing Webmaster returned invalid crawl statistics.");
+		const fieldMap = {
+			AllOtherCodes: "allOtherCodes",
+			BlockedByRobotsTxt: "blockedByRobotsTxt",
+			Code2xx: "code2xx",
+			Code301: "code301",
+			Code302: "code302",
+			Code4xx: "code4xx",
+			Code5xx: "code5xx",
+			ConnectionTimeout: "connectionTimeout",
+			ContainsMalware: "containsMalware",
+			CrawledPages: "crawledPages",
+			CrawlErrors: "crawlErrors",
+			DnsFailures: "dnsFailures",
+			InIndex: "inIndex",
+			InLinks: "inLinks"
+		};
+		const rows = [];
+		let invalidRows = 0;
+		for (const item of data) {
+			if (!item || typeof item !== "object") {
+				invalidRows += 1;
+				continue;
+			}
+			const source = item;
+			const date = bingDate(source.Date);
+			if (!date) {
+				invalidRows += 1;
+				continue;
+			}
+			const row = { date };
+			let invalid = false;
+			for (const [providerField, field] of Object.entries(fieldMap)) {
+				const value = source[providerField];
+				if (value === void 0 || value === null) continue;
+				const number = nonnegativeNumber(value);
+				if (number === void 0) {
+					invalid = true;
+					break;
+				}
+				row[field] = number;
+			}
+			if (invalid) {
+				invalidRows += 1;
+				continue;
+			}
+			rows.push(row);
+		}
+		rows.sort((a, b) => a.date.localeCompare(b.date, "en"));
+		return boundedRows(rows, invalidRows);
+	}
+	async getQueryStats(siteUrl) {
+		return this.getDimensionStats("GetQueryStats", siteUrl, "query");
+	}
+	async getPageStats(siteUrl) {
+		return this.getDimensionStats("GetPageStats", siteUrl, "page");
+	}
+	async getDimensionStats(method, siteUrl, kind) {
+		const data = await this.request(method, { siteUrl });
+		if (!Array.isArray(data)) throw new SeoError("PROVIDER_UNAVAILABLE", `Bing Webmaster returned invalid ${kind} statistics.`);
+		const rows = [];
+		let invalidRows = 0;
+		for (const item of data) {
+			if (!item || typeof item !== "object") {
+				invalidRows += 1;
+				continue;
+			}
+			const source = item;
+			const date = bingDate(source.Date);
+			const value = dimensionValue(source.Query, kind);
+			const clicks = nonnegativeNumber(source.Clicks);
+			const impressions = nonnegativeNumber(source.Impressions);
+			const clickPosition = positionNumber(source.AvgClickPosition);
+			const impressionPosition = positionNumber(source.AvgImpressionPosition);
+			if (!date || !value || clicks === void 0 || impressions === void 0 || !clickPosition.valid || !impressionPosition.valid) {
+				invalidRows += 1;
+				continue;
+			}
+			rows.push({
+				date,
+				value,
+				clicks,
+				impressions,
+				avgClickPosition: clickPosition.value,
+				avgImpressionPosition: impressionPosition.value
+			});
+		}
+		rows.sort((a, b) => a.date.localeCompare(b.date, "en") || a.value.localeCompare(b.value, "en"));
+		return boundedRows(rows, invalidRows, MAX_DIMENSION_ROWS);
+	}
+	async getLinkCounts(siteUrl, page) {
+		const data = await this.request("GetLinkCounts", {
+			siteUrl,
+			page: String(page)
+		});
+		if (!data || typeof data !== "object") throw new SeoError("PROVIDER_UNAVAILABLE", "Bing Webmaster returned invalid link counts.");
+		const response = data;
+		if (!Array.isArray(response.Links)) throw new SeoError("PROVIDER_UNAVAILABLE", "Bing Webmaster returned invalid link counts.");
+		const rows = [];
+		let invalidRows = 0;
+		for (const item of response.Links) {
+			if (!item || typeof item !== "object") {
+				invalidRows += 1;
+				continue;
+			}
+			const row = item;
+			const count = nonnegativeNumber(row.Count);
+			if (!isHttpUrl(row.Url) || count === void 0) {
+				invalidRows += 1;
+				continue;
+			}
+			rows.push({
+				url: row.Url,
+				count
+			});
+		}
+		rows.sort((a, b) => b.count - a.count || a.url.localeCompare(b.url, "en"));
+		return linkPage(rows, response.TotalPages, invalidRows);
+	}
+	async getUrlLinks(siteUrl, link, page) {
+		const data = await this.request("GetUrlLinks", {
+			siteUrl,
+			link,
+			page: String(page)
+		});
+		if (!data || typeof data !== "object") throw new SeoError("PROVIDER_UNAVAILABLE", "Bing Webmaster returned invalid referring links.");
+		const response = data;
+		if (!Array.isArray(response.Details)) throw new SeoError("PROVIDER_UNAVAILABLE", "Bing Webmaster returned invalid referring links.");
+		const rows = [];
+		let invalidRows = 0;
+		for (const item of response.Details) {
+			if (!item || typeof item !== "object") {
+				invalidRows += 1;
+				continue;
+			}
+			const row = item;
+			if (!isHttpUrl(row.Url)) {
+				invalidRows += 1;
+				continue;
+			}
+			rows.push({
+				url: row.Url,
+				anchorText: typeof row.AnchorText === "string" && row.AnchorText.trim() ? row.AnchorText.trim() : void 0
+			});
+		}
+		rows.sort((a, b) => a.url.localeCompare(b.url, "en") || (a.anchorText ?? "").localeCompare(b.anchorText ?? "", "en"));
+		return linkPage(rows, response.TotalPages, invalidRows);
+	}
+};
+function linkPage(rows, totalPagesValue, invalidRows) {
+	const totalPages = nonnegativeNumber(totalPagesValue);
+	if (totalPages === void 0 || !Number.isInteger(totalPages)) throw new SeoError("PROVIDER_UNAVAILABLE", "Bing Webmaster returned invalid link pagination.");
+	const capped = rows.length > MAX_LINK_ROWS;
+	return {
+		rows: capped ? rows.slice(0, MAX_LINK_ROWS) : rows,
+		totalPages,
+		invalidRows,
+		capped,
+		returnedRows: rows.length
+	};
+}
+//#endregion
+//#region packages/core/src/storage/provider-secrets.ts
+const KEYRING_SERVICE = "seo";
+const PRIVATE_FILE_MODE = 384;
+function account(name) {
+	return `provider:${name}`;
+}
+function readFile$1() {
+	return readJsonFile(getSeoCliPaths().providerSecretsFile) ?? {
+		version: 1,
+		secrets: {}
+	};
+}
+function writeFile$1(file) {
+	const path = getSeoCliPaths().providerSecretsFile;
+	if (Object.keys(file.secrets).length === 0) {
+		safeRemove(path);
+		return;
+	}
+	writeJsonAtomic(path, file, PRIVATE_FILE_MODE);
+}
+function deleteFileSecret(name) {
+	const file = readFile$1();
+	if (!(name in file.secrets)) return;
+	delete file.secrets[name];
+	writeFile$1(file);
+}
+async function readProviderSecret(input) {
+	const environment = input.env ?? process.env;
+	const environmentValue = input.envVar ? environment[input.envVar]?.trim() : void 0;
+	if (environmentValue) return {
+		value: environmentValue,
+		source: "environment"
+	};
+	if (readConfig().security.useKeychain) try {
+		const value = await getKeyringPassword(KEYRING_SERVICE, account(input.name));
+		if (value) return {
+			value,
+			source: "keychain"
+		};
+	} catch {}
+	const value = readFile$1().secrets[input.name];
+	return value ? {
+		value,
+		source: "file"
+	} : void 0;
+}
+async function writeProviderSecret(name, value) {
+	const normalized = value.trim();
+	if (!normalized) throw new Error("Provider secret cannot be empty.");
+	if (readConfig().security.useKeychain) try {
+		await setKeyringPassword(KEYRING_SERVICE, account(name), normalized);
+		deleteFileSecret(name);
+		return "keychain";
+	} catch {}
+	const file = readFile$1();
+	file.secrets[name] = normalized;
+	writeFile$1(file);
+	return "file";
+}
+async function deleteProviderSecret(name) {
+	await deleteKeyringPassword(KEYRING_SERVICE, account(name)).catch(() => false);
+	deleteFileSecret(name);
+}
+//#endregion
+//#region packages/core/src/bing/credentials.ts
+const BING_API_KEY_SECRET = "bing-api-key";
+const BING_API_KEY_ENV = "SEO_BING_API_KEY";
+async function createBingWebmasterClient(input = {}) {
+	const secret = await readProviderSecret({
+		name: BING_API_KEY_SECRET,
+		envVar: BING_API_KEY_ENV,
+		env: input.env
+	});
+	if (!secret) throw new SeoError("AUTH_REQUIRED", "Bing Webmaster is not connected. Run `seo providers bing connect`, or set SEO_BING_API_KEY for this process.");
+	return {
+		client: new BingWebmasterClient({ apiKey: secret.value }),
+		credentialSource: secret.source
+	};
+}
+//#endregion
+//#region packages/core/src/bing/overview.ts
+const DAILY_OUTPUT_ROWS = 14;
+function message(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+function range(rows) {
+	return rows.length ? {
+		startDate: rows[0]?.date ?? "",
+		endDate: rows.at(-1)?.date ?? ""
+	} : void 0;
+}
+function dailyOutput(data) {
+	const rows = data.rows.slice(-14);
+	return {
+		...data,
+		rows,
+		retainedRows: data.rows.length,
+		outputSelection: {
+			strategy: "most-recent",
+			availableRows: data.rows.length,
+			returnedRows: rows.length,
+			omittedRows: Math.max(0, data.rows.length - rows.length)
+		}
+	};
+}
+async function section(work, options) {
+	try {
+		const data = await work();
+		const reasons = [
+			...data.invalidRows ? [`${data.invalidRows} invalid provider rows were excluded.`] : [],
+			...data.capped ? [`The provider response exceeded the ${options.rowLimit}-row limit.`] : [],
+			...options.sourceWarning ? [options.sourceWarning] : []
+		];
+		return reasons.length ? {
+			status: "partial",
+			data,
+			warning: reasons.join(" ")
+		} : {
+			status: "complete",
+			data
+		};
+	} catch (error) {
+		if (error instanceof SeoError && (error.code === "AUTH_REQUIRED" || error.code === "ACCESS_DENIED")) throw error;
+		return {
+			status: "unavailable",
+			warning: message(error)
+		};
+	}
+}
+function changeFinding(input) {
+	return {
+		code: input.code,
+		severity: "warning",
+		title: input.title,
+		evidence: {
+			current: input.current,
+			previous: input.previous,
+			absoluteChange: input.absolute,
+			percentChange: input.percent,
+			currentDate: input.dates.current,
+			previousDate: input.dates.previous
+		},
+		interpretation: input.interpretation,
+		verification: input.verification
+	};
+}
+function buildFindings(input) {
+	const findings = [];
+	const traffic = input.traffic;
+	if (traffic && traffic.current.observedDays === traffic.current.expectedDays && traffic.previous.observedDays === traffic.previous.expectedDays && (traffic.changes.clicksPercent !== null && Math.abs(traffic.changes.clicksPercent) >= 10 || traffic.changes.impressionsPercent !== null && Math.abs(traffic.changes.impressionsPercent) >= 10)) {
+		const metric = traffic.changes.clicksPercent !== null && Math.abs(traffic.changes.clicksPercent) >= 10 ? "clicks" : "impressions";
+		const declined = traffic.changes[metric] < 0;
+		findings.push({
+			code: `bing_${metric}_${declined ? "declined" : "increased"}`,
+			severity: declined ? "warning" : "info",
+			title: `Bing ${metric} ${declined ? "declined" : "increased"} in the latest complete period`,
+			evidence: {
+				currentClicks: traffic.current.clicks,
+				previousClicks: traffic.previous.clicks,
+				clicksChange: traffic.changes.clicks,
+				clicksPercentChange: traffic.changes.clicksPercent,
+				currentImpressions: traffic.current.impressions,
+				previousImpressions: traffic.previous.impressions,
+				impressionsChange: traffic.changes.impressions,
+				impressionsPercentChange: traffic.changes.impressionsPercent,
+				ctrPercentagePointChange: traffic.changes.ctrPercentagePoints,
+				currentRange: {
+					startDate: traffic.current.startDate,
+					endDate: traffic.current.endDate
+				},
+				previousRange: {
+					startDate: traffic.previous.startDate,
+					endDate: traffic.previous.endDate
+				}
+			},
+			interpretation: "This is a Bing-observed traffic change. It does not establish the cause or describe Google traffic.",
+			verification: "Review the query and page evidence for the same dates, then compare current pages and crawl health before changing content."
+		});
+	}
+	const crawl = input.crawl;
+	if (crawl?.previous) {
+		const dates = {
+			current: crawl.current.date,
+			previous: crawl.previous.date
+		};
+		const errors = crawl.changes.crawlErrors;
+		if (errors && errors.absolute >= Math.max(10, Math.ceil(errors.previous * .5))) findings.push(changeFinding({
+			code: "bing_crawl_errors_increased",
+			title: "Bing crawl errors increased",
+			...errors,
+			dates,
+			interpretation: "Bing reported more crawl errors in its latest daily snapshot. The count may include URLs outside the current sitemap.",
+			verification: "Run the fast sitemap health check, inspect Bing crawl issue samples, then audit any affected URLs directly."
+		}));
+		const code4xx = crawl.changes.code4xx;
+		if (code4xx && code4xx.absolute >= Math.max(10, Math.ceil(code4xx.previous * .5))) findings.push(changeFinding({
+			code: "bing_4xx_increased",
+			title: "Bing-observed 4xx responses increased",
+			...code4xx,
+			dates,
+			interpretation: "Bing encountered more 4xx responses. Intentional removals and obsolete discovered URLs can contribute to this count.",
+			verification: "Inspect Bing crawl issue URLs and recover or redirect only URLs that should still exist or retain search value."
+		}));
+		const code5xx = crawl.changes.code5xx;
+		if (code5xx && code5xx.current > 0 && code5xx.absolute > 0) findings.push(changeFinding({
+			code: "bing_5xx_increased",
+			title: "Bing-observed server errors increased",
+			...code5xx,
+			dates,
+			interpretation: "Bing encountered more server errors in the latest snapshot. Even a small increase deserves a live check.",
+			verification: "Check current server logs and run targeted URL audits before treating the provider count as an active outage."
+		}));
+	}
+	for (const [kind, analysis] of [["query", input.queries], ["page", input.pages]]) {
+		if (!analysis?.opportunities.length) continue;
+		findings.push({
+			code: `bing_${kind}_opportunities`,
+			severity: "review",
+			title: `${analysis.opportunities.length} Bing ${kind} opportunities need review`,
+			evidence: {
+				retainedOpportunities: analysis.opportunities.length,
+				currentDimensions: analysis.coverage.currentDimensions,
+				matchedDimensions: analysis.coverage.matchedDimensions,
+				comparableDimensions: analysis.coverage.comparableDimensions,
+				thresholds: analysis.thresholds
+			},
+			interpretation: "These are high-impression top-list entries currently observed around positions 4 to 20. The threshold is a prioritization heuristic, not a search-engine rule.",
+			verification: kind === "query" ? "Check intent and the ranking page before changing copy or creating content." : "Audit the selected page and its matching queries before changing internal links, titles, or content."
+		});
+	}
+	return findings;
+}
+async function bingWebmasterOverview(input) {
+	if (!input.site.trim()) throw new SeoError("INVALID_INPUT", "Pass a Bing Webmaster site URL.");
+	const resolved = input.client ? {
+		client: input.client,
+		credentialSource: input.credentialSource ?? "environment"
+	} : await createBingWebmasterClient();
+	const observedAt = (/* @__PURE__ */ new Date()).toISOString();
+	const topListWarning = "Bing returns weekly top-list rows, so dimensions missing from a period remain unknown.";
+	const [traffic, crawl, queries, pages] = await Promise.all([
+		section(() => resolved.client.getTraffic(input.site), { rowLimit: 400 }),
+		section(() => resolved.client.getCrawlStats(input.site), { rowLimit: 400 }),
+		section(() => resolved.client.getQueryStats(input.site), {
+			rowLimit: 8e3,
+			sourceWarning: topListWarning
+		}),
+		section(() => resolved.client.getPageStats(input.site), {
+			rowLimit: 8e3,
+			sourceWarning: topListWarning
+		})
+	]);
+	const statuses = [
+		traffic.status,
+		crawl.status,
+		queries.status,
+		pages.status
+	];
+	const dataStatus = statuses.every((status) => status === "complete") ? "complete" : statuses.every((status) => status === "unavailable") ? "unavailable" : "partial";
+	const trafficAnalysis = traffic.status === "unavailable" ? void 0 : analyzeBingTraffic(traffic.data.rows);
+	const crawlAnalysis = crawl.status === "unavailable" ? void 0 : analyzeBingCrawl(crawl.data.rows);
+	const queryAnalysis = queries.status === "unavailable" ? void 0 : analyzeBingDimensions(queries.data.rows, "query");
+	const pageAnalysis = pages.status === "unavailable" ? void 0 : analyzeBingDimensions(pages.data.rows, "page");
+	const findings = buildFindings({
+		traffic: trafficAnalysis,
+		crawl: crawlAnalysis,
+		queries: queryAnalysis,
+		pages: pageAnalysis
+	});
+	return {
+		schemaVersion: 2,
+		site: input.site,
+		generatedAt: observedAt,
+		dataStatus,
+		summary: {
+			findings: findings.length,
+			warnings: findings.filter((finding) => finding.severity === "warning").length,
+			reviewItems: findings.filter((finding) => finding.severity === "review").length
+		},
+		findings,
+		outputBudget: {
+			maxFindings: 6,
+			maxDailyRowsPerSection: DAILY_OUTPUT_ROWS,
+			maxDailyRowsTotal: DAILY_OUTPUT_ROWS * 2,
+			maxDimensionItemsPerList: 10,
+			maxDimensionItemsTotal: 40
+		},
+		provenance: {
+			provider: "bing-webmaster",
+			authentication: resolved.client.authentication,
+			credentialSource: resolved.credentialSource,
+			observedAt,
+			cached: false,
+			rowLimits: {
+				traffic: 400,
+				crawl: 400,
+				queries: 8e3,
+				pages: 8e3
+			},
+			methods: [
+				"GetRankAndTrafficStats",
+				"GetCrawlStats",
+				"GetQueryStats",
+				"GetPageStats"
+			]
+		},
+		traffic: traffic.status === "unavailable" ? traffic : {
+			...traffic,
+			data: {
+				...dailyOutput(traffic.data),
+				range: range(traffic.data.rows),
+				clicks: traffic.data.rows.reduce((total, row) => total + row.clicks, 0),
+				impressions: traffic.data.rows.reduce((total, row) => total + row.impressions, 0),
+				analysis: trafficAnalysis
+			}
+		},
+		crawl: crawl.status === "unavailable" ? crawl : {
+			...crawl,
+			data: {
+				...dailyOutput(crawl.data),
+				range: range(crawl.data.rows),
+				latest: crawl.data.rows.at(-1),
+				analysis: crawlAnalysis
+			}
+		},
+		queries: queries.status === "unavailable" ? queries : {
+			...queries,
+			data: {
+				returnedRows: queries.data.returnedRows,
+				retainedRows: queries.data.rows.length,
+				invalidRows: queries.data.invalidRows,
+				capped: queries.data.capped,
+				range: range(queries.data.rows),
+				analysis: queryAnalysis
+			}
+		},
+		pages: pages.status === "unavailable" ? pages : {
+			...pages,
+			data: {
+				returnedRows: pages.data.returnedRows,
+				retainedRows: pages.data.rows.length,
+				invalidRows: pages.data.invalidRows,
+				capped: pages.data.capped,
+				range: range(pages.data.rows),
+				analysis: pageAnalysis
+			}
+		},
+		caveats: [
+			"Bing reports its own observed search and crawl evidence. It is not a complete view of every search engine.",
+			"The inIndex field is provider-reported crawl statistics, not independent proof that a URL is indexed.",
+			"Query and page movements include only dimensions observed in every weekly top list in both periods. Missing entries are not treated as zero.",
+			"Opportunity thresholds prioritize review. They are heuristics, not search-engine requirements."
+		]
+	};
+}
+//#endregion
+//#region packages/core/src/clients.ts
+function googleAnalyticsPropertyId(client) {
+	return client?.analytics.google?.propertyId;
+}
+function bingWebmasterSiteUrl(client) {
+	return client?.searchEngines?.bing?.siteUrl;
+}
+function slug(value) {
+	return value.toLowerCase().replace(/^https?:\/\//, "").replace(/^sc-domain:/, "").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 60);
+}
+function uniqueStrings(values = []) {
+	return [...new Set(values.map((value) => value.trim()).filter(Boolean))];
 }
 function deriveId(input) {
 	const id = slug(input.id ?? input.name ?? input.siteUrl);
@@ -29556,6 +30862,7 @@ function saveClient(input) {
 			siteUrl: input.siteUrl
 		})),
 		analytics: input.analytics ?? existing?.analytics ?? {},
+		searchEngines: input.searchEngines ?? existing?.searchEngines,
 		reportDay: input.reportDay ?? existing?.reportDay,
 		technicalWeekday: input.technicalWeekday ?? existing?.technicalWeekday,
 		isDefault: input.isDefault ?? existing?.isDefault,
@@ -29571,6 +30878,19 @@ function saveClient(input) {
 	writeConfig(config);
 	return client;
 }
+function setClientBingSite(idOrName, siteUrl) {
+	const client = getClient(idOrName);
+	if (!client) throw new Error(`Client not found: ${idOrName}`);
+	return saveClient({
+		id: client.id,
+		name: client.name,
+		siteUrl: client.siteUrl,
+		searchEngines: {
+			...client.searchEngines,
+			bing: { siteUrl }
+		}
+	});
+}
 function deleteClient(idOrName) {
 	const config = readConfig();
 	const client = getClient(idOrName);
@@ -29678,6 +30998,151 @@ async function runDoctor(dependencies = {}) {
 	};
 }
 //#endregion
+//#region packages/core/src/export/report-html.ts
+function escapeHtml(value) {
+	return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll("\"", "&quot;").replaceAll("'", "&#39;");
+}
+function safeHttpUrl(value) {
+	try {
+		const url = new URL(value);
+		return url.protocol === "http:" || url.protocol === "https:" ? url.toString() : void 0;
+	} catch {
+		return;
+	}
+}
+function siteMarkup(site) {
+	const safeUrl = safeHttpUrl(site);
+	const label = escapeHtml(site);
+	return safeUrl ? `<a href="${escapeHtml(safeUrl)}" rel="noreferrer">${label}</a>` : label;
+}
+function list(items) {
+	if (items.length === 0) return "<p class=\"empty\">No items to report.</p>";
+	return `<ul>${items.map((item) => `<li>${escapeHtml(item)}</li>`).join("")}</ul>`;
+}
+function reportSections(report) {
+	return report.sections.map((section) => `<section class="panel">
+        <h2>${escapeHtml(section.title)}</h2>
+        ${list(section.bullets)}
+      </section>`).join("");
+}
+function additionalSections(sections) {
+	return sections.map((section) => `<section class="panel">
+        <h2>${escapeHtml(section.title)}</h2>
+        ${section.summary ? `<p>${escapeHtml(section.summary)}</p>` : ""}
+        ${list(section.items)}
+      </section>`).join("");
+}
+function priorities(report) {
+	if (report.priorities.length === 0) return "<p class=\"empty\">No evidence-backed priorities were found.</p>";
+	return `<ol class="priorities">${report.priorities.map((priority) => `<li>
+        <div class="priority-heading">
+          <strong>${escapeHtml(priority.title)}</strong>
+          <span class="confidence">${escapeHtml(priority.confidence)} confidence</span>
+        </div>
+        <p>${escapeHtml(priority.action)}</p>
+      </li>`).join("")}</ol>`;
+}
+function analystEvidence(report) {
+	const skipped = report.diagnosis.skippedSections ?? [];
+	const attempts = report.changeMeasurementAttempts;
+	return `<section class="panel analyst-only">
+    <h2>Evidence coverage</h2>
+    <dl class="facts">
+      <div><dt>Data status</dt><dd>${escapeHtml(report.dataStatus)}</dd></div>
+      <div><dt>Generated</dt><dd>${escapeHtml(report.generatedAt)}</dd></div>
+      <div><dt>Saved changes checked</dt><dd>${attempts.length}</dd></div>
+      <div><dt>Unavailable sections</dt><dd>${skipped.length}</dd></div>
+    </dl>
+    ${skipped.length ? `<h3>Unavailable sections</h3>${list(skipped.map((section) => "reason" in section && typeof section.reason === "string" ? `${section.section}: ${section.reason}` : section.section))}` : ""}
+  </section>`;
+}
+const styles = `
+  :root { color-scheme: light; font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; color: #17211b; background: #f2f4ef; }
+  * { box-sizing: border-box; }
+  body { margin: 0; line-height: 1.55; }
+  a { color: inherit; text-decoration-color: #ff5b35; text-underline-offset: 0.18em; }
+  main { width: min(980px, calc(100% - 32px)); margin: 32px auto 64px; }
+  header { padding: clamp(28px, 6vw, 64px); color: #f9fbf7; background: #17211b; border-radius: 20px; }
+  .eyebrow { margin: 0 0 12px; color: #ff7958; font-size: 0.78rem; font-weight: 800; letter-spacing: 0.12em; text-transform: uppercase; }
+  h1 { max-width: 760px; margin: 0; font-size: clamp(2rem, 5vw, 4rem); line-height: 1.02; letter-spacing: -0.04em; }
+  header .headline { max-width: 760px; margin: 24px 0 0; font-size: clamp(1.05rem, 2vw, 1.3rem); color: #d9e1d9; }
+  .meta { display: flex; flex-wrap: wrap; gap: 10px 22px; margin-top: 28px; color: #b9c5ba; font-size: 0.9rem; }
+  .status { display: inline-flex; width: fit-content; margin-top: 22px; padding: 6px 10px; border: 1px solid #4f6153; border-radius: 999px; font-size: 0.8rem; font-weight: 700; text-transform: capitalize; }
+  .panel { margin-top: 20px; padding: clamp(22px, 4vw, 38px); background: #fff; border: 1px solid #dfe4dc; border-radius: 16px; box-shadow: 0 8px 30px rgba(23, 33, 27, 0.05); }
+  h2 { margin: 0 0 16px; font-size: clamp(1.25rem, 3vw, 1.65rem); letter-spacing: -0.02em; }
+  h3 { margin: 26px 0 10px; font-size: 1rem; }
+  p { margin: 0 0 14px; }
+  ul, ol { margin: 0; padding-left: 1.25rem; }
+  li + li { margin-top: 10px; }
+  .priorities { list-style: none; padding: 0; counter-reset: priority; }
+  .priorities > li { counter-increment: priority; padding: 18px 0 18px 52px; position: relative; border-top: 1px solid #e6eae4; }
+  .priorities > li:first-child { border-top: 0; padding-top: 4px; }
+  .priorities > li::before { content: counter(priority); position: absolute; left: 0; top: 16px; display: grid; width: 34px; height: 34px; place-items: center; border-radius: 50%; color: #17211b; background: #ff7958; font-weight: 800; }
+  .priorities > li:first-child::before { top: 2px; }
+  .priority-heading { display: flex; flex-wrap: wrap; align-items: baseline; justify-content: space-between; gap: 8px 20px; }
+  .confidence { color: #647067; font-size: 0.82rem; text-transform: capitalize; }
+  .priorities p { margin: 8px 0 0; color: #3e4941; }
+  .facts { display: grid; grid-template-columns: repeat(auto-fit, minmax(180px, 1fr)); gap: 12px; margin: 0; }
+  .facts div { padding: 14px; background: #f5f7f3; border-radius: 10px; }
+  dt { color: #647067; font-size: 0.78rem; font-weight: 700; text-transform: uppercase; }
+  dd { margin: 4px 0 0; font-weight: 700; }
+  details summary { cursor: pointer; font-weight: 750; }
+  details ul { margin-top: 14px; }
+  .empty { color: #647067; font-style: italic; }
+  footer { margin-top: 26px; color: #647067; font-size: 0.8rem; text-align: center; }
+  @media print { :root { background: #fff; } main { width: 100%; margin: 0; } header, .panel { break-inside: avoid; box-shadow: none; } header { border-radius: 0; } }
+`;
+function renderReportHtml(input) {
+	const report = input.report;
+	const view = input.view ?? "client";
+	const title = input.title ?? "SEO report";
+	const evidenceNotesOpen = report.dataStatus !== "complete" ? " open" : "";
+	const analyst = view === "analyst" ? analystEvidence(report) : "";
+	return `<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <meta name="robots" content="noindex,nofollow">
+  <title>${escapeHtml(title)}: ${escapeHtml(report.site)}</title>
+  <style>${styles}</style>
+</head>
+<body>
+  <main>
+    <header>
+      <p class="eyebrow">${escapeHtml(title)}</p>
+      <h1>${siteMarkup(report.site)}</h1>
+      <p class="headline">${escapeHtml(report.headline)}</p>
+      <div class="meta">
+        <span>${escapeHtml(report.period.startDate)} to ${escapeHtml(report.period.endDate)}</span>
+        <span>Generated ${escapeHtml(report.generatedAt.slice(0, 10))}</span>
+        <span>${escapeHtml(view)} view</span>
+      </div>
+      <span class="status">${escapeHtml(report.dataStatus)} data</span>
+    </header>
+
+    <section class="panel">
+      <h2>Priorities</h2>
+      ${priorities(report)}
+    </section>
+
+    ${reportSections(report)}
+    ${additionalSections(input.additionalSections ?? [])}
+    ${analyst}
+
+    <section class="panel">
+      <details${evidenceNotesOpen}>
+        <summary>Evidence notes and limitations</summary>
+        ${list(report.caveats)}
+      </details>
+    </section>
+
+    <footer>Generated locally from observed report evidence.</footer>
+  </main>
+</body>
+</html>`;
+}
+//#endregion
 //#region packages/core/src/export/update-postmortem.ts
 const HEADERS = {
 	summary: [
@@ -29988,60 +31453,779 @@ function updatePostmortemCsvFiles(report) {
 			headers: [...HEADERS.segment],
 			rows: postmortemSegmentRows(report, dimension)
 		})),
-		...[
-			"page",
-			"query",
-			"device",
-			"country"
-		].map((dimension) => ({
-			filename: `postmortem-segment-${dimension}-unmatched.csv`,
-			headers: [...HEADERS.unmatchedSegment],
-			rows: postmortemUnmatchedSegmentRows(report, dimension)
-		}))
-	];
+		...[
+			"page",
+			"query",
+			"device",
+			"country"
+		].map((dimension) => ({
+			filename: `postmortem-segment-${dimension}-unmatched.csv`,
+			headers: [...HEADERS.unmatchedSegment],
+			rows: postmortemUnmatchedSegmentRows(report, dimension)
+		}))
+	];
+}
+//#endregion
+//#region packages/core/src/ga4/matching.ts
+function hostnameFromUrl(value) {
+	try {
+		const url = new URL(value);
+		if (url.protocol !== "http:" && url.protocol !== "https:") return void 0;
+		return url.hostname.toLowerCase().replace(/\.$/, "") || void 0;
+	} catch {
+		return;
+	}
+}
+function domainFromProperty(value) {
+	if (!value.startsWith("sc-domain:")) return void 0;
+	const domain = value.slice(10).trim().toLowerCase();
+	if (!domain || /[/:]/.test(domain)) return void 0;
+	return domain.replace(/\.$/, "") || void 0;
+}
+function matchForSite(site, streamHostname) {
+	const domain = domainFromProperty(site);
+	if (domain) return streamHostname === domain || streamHostname.endsWith(`.${domain}`) ? "domain" : void 0;
+	return hostnameFromUrl(site) === streamHostname ? "hostname" : void 0;
+}
+function matchGa4WebStreams(site, candidates) {
+	return candidates.flatMap((candidate) => {
+		const defaultUri = candidate.stream.webStreamData?.defaultUri;
+		if (!defaultUri) return [];
+		const hostname = hostnameFromUrl(defaultUri);
+		if (!hostname) return [];
+		const match = matchForSite(site, hostname);
+		if (!match) return [];
+		return [{
+			...candidate,
+			defaultUri,
+			hostname,
+			match
+		}];
+	});
+}
+function ga4MatchReason(match, site) {
+	const stream = match.stream.displayName ?? match.defaultUri;
+	const location = match.match === "domain" ? "is inside" : "matches";
+	return `Matched Google Analytics web stream ${stream} (${match.defaultUri}): its hostname ${location} ${site}.`;
+}
+//#endregion
+//#region packages/core/src/indexnow/types.ts
+const INDEXNOW_ENDPOINT = "https://api.indexnow.org/indexnow";
+const INDEXNOW_MAX_URLS = 1e3;
+const INDEXNOW_KEY_ENV = "SEO_INDEXNOW_KEY";
+const INDEXNOW_KEYS_SECRET = "indexnow-keys";
+//#endregion
+//#region packages/core/src/indexnow/keys.ts
+const KEY_PATTERN = /^[A-Za-z0-9-]{8,128}$/;
+function isPrivateHost(hostname) {
+	const host = hostname.toLowerCase().replace(/^\[|\]$/g, "");
+	if (host === "localhost" || host.endsWith(".localhost") || host.includes(":")) return true;
+	const octets = host.split(".").map(Number);
+	if (octets.length !== 4 || octets.some((value) => !Number.isInteger(value))) return false;
+	const [first, second] = octets;
+	return first === 0 || first === 10 || first === 127 || first === 100 && second !== void 0 && second >= 64 && second <= 127 || first === 169 && second === 254 || first === 172 && second !== void 0 && second >= 16 && second <= 31 || first === 192 && second === 0 || first === 192 && second === 168 || first === 198 && (second === 18 || second === 19) || first !== void 0 && first >= 224;
+}
+function parseIndexNowSite(value) {
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		throw new SeoError("INVALID_INPUT", "IndexNow site must be a valid URL.");
+	}
+	if (!["http:", "https:"].includes(url.protocol) || !url.hostname) throw new SeoError("INVALID_INPUT", "IndexNow site must use HTTP or HTTPS.");
+	if (url.username || url.password) throw new SeoError("INVALID_INPUT", "IndexNow site URLs cannot contain credentials.");
+	if (isPrivateHost(url.hostname)) throw new SeoError("INVALID_INPUT", "IndexNow requires a public site host.");
+	return url;
+}
+function validateIndexNowKey(value) {
+	const key = value.trim();
+	if (!KEY_PATTERN.test(key)) throw new SeoError("INVALID_INPUT", "IndexNow keys must contain 8 to 128 letters, numbers, or hyphens.");
+	return key;
+}
+function createIndexNowKey() {
+	return randomBytes(16).toString("hex");
+}
+function createIndexNowKeyRecord(input) {
+	const site = parseIndexNowSite(input.site);
+	const key = validateIndexNowKey(input.key ?? createIndexNowKey());
+	const keyLocation = input.keyLocation ? parseIndexNowSite(input.keyLocation) : new URL(`/${key}.txt`, site.origin);
+	if (keyLocation.hostname.toLowerCase() !== site.hostname.toLowerCase()) throw new SeoError("INVALID_INPUT", "IndexNow key location must use the same host as the site.");
+	return {
+		host: site.hostname.toLowerCase(),
+		key,
+		keyLocation: keyLocation.toString(),
+		createdAt: (input.now ?? /* @__PURE__ */ new Date()).toISOString()
+	};
+}
+function validateIndexNowKeyRecord(record) {
+	const createdAt = new Date(record.createdAt);
+	if (Number.isNaN(createdAt.getTime())) throw new SeoError("INVALID_INPUT", "IndexNow key record has an invalid creation date.");
+	const normalized = createIndexNowKeyRecord({
+		site: record.keyLocation,
+		key: record.key,
+		keyLocation: record.keyLocation,
+		now: createdAt
+	});
+	if (normalized.host !== record.host.toLowerCase()) throw new SeoError("INVALID_INPUT", "IndexNow key record host does not match its key location.");
+	return normalized;
+}
+function emptyKeys() {
+	return {
+		version: 1,
+		sites: {}
+	};
+}
+function parseSavedKeys(value) {
+	try {
+		const parsed = JSON.parse(value);
+		if (parsed.version !== 1 || !parsed.sites || typeof parsed.sites !== "object" || Array.isArray(parsed.sites)) throw new Error("invalid shape");
+		const sites = {};
+		for (const [host, value] of Object.entries(parsed.sites)) {
+			if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("invalid key record");
+			const record = validateIndexNowKeyRecord(value);
+			if (record.host !== host) throw new Error("invalid host mapping");
+			sites[host] = record;
+		}
+		return {
+			version: 1,
+			sites
+		};
+	} catch {
+		throw new SeoError("AUTH_REQUIRED", "Saved IndexNow keys are invalid. Run `seo indexnow setup` again.");
+	}
+}
+async function readSavedKeys() {
+	const saved = await readProviderSecret({ name: INDEXNOW_KEYS_SECRET });
+	if (!saved) return { keys: emptyKeys() };
+	return {
+		keys: parseSavedKeys(saved.value),
+		source: saved.source
+	};
+}
+async function saveIndexNowKey(record) {
+	const normalized = validateIndexNowKeyRecord(record);
+	const { keys } = await readSavedKeys();
+	keys.sites[normalized.host] = normalized;
+	return writeProviderSecret(INDEXNOW_KEYS_SECRET, JSON.stringify(keys));
+}
+async function resolveIndexNowKey(input) {
+	const site = parseIndexNowSite(input.site);
+	const environmentKey = (input.env ?? process.env)[INDEXNOW_KEY_ENV]?.trim();
+	if (environmentKey) return {
+		record: createIndexNowKeyRecord({
+			site: site.origin,
+			key: environmentKey
+		}),
+		source: "environment"
+	};
+	const { keys, source } = await readSavedKeys();
+	const record = keys.sites[site.hostname.toLowerCase()];
+	if (!record || !source) throw new SeoError("AUTH_REQUIRED", `IndexNow is not set up for ${site.hostname}. Run \`seo indexnow setup --site ${site.origin} --output <public-directory>\`, or set SEO_INDEXNOW_KEY for this process.`);
+	return {
+		record: validateIndexNowKeyRecord(record),
+		source
+	};
+}
+async function listIndexNowKeys() {
+	const { keys } = await readSavedKeys();
+	return Object.values(keys.sites).map(({ key: _key, ...record }) => record).sort((a, b) => a.host < b.host ? -1 : a.host > b.host ? 1 : 0);
+}
+async function removeIndexNowKey(siteValue) {
+	const site = parseIndexNowSite(siteValue);
+	const { keys } = await readSavedKeys();
+	const host = site.hostname.toLowerCase();
+	if (!keys.sites[host]) return false;
+	delete keys.sites[host];
+	if (Object.keys(keys.sites).length === 0) await deleteProviderSecret(INDEXNOW_KEYS_SECRET);
+	else await writeProviderSecret(INDEXNOW_KEYS_SECRET, JSON.stringify(keys));
+	return true;
+}
+//#endregion
+//#region packages/core/src/indexnow/client.ts
+function uniqueUrls(values, host) {
+	if (values.length === 0) throw new SeoError("INVALID_INPUT", "Pass at least one URL to IndexNow.");
+	if (values.length > 1e3) throw new SeoError("INVALID_INPUT", `IndexNow submissions are limited to ${INDEXNOW_MAX_URLS} URLs per run.`);
+	const urls = /* @__PURE__ */ new Set();
+	for (const value of values) {
+		const url = parseIndexNowSite(value);
+		if (url.toString().length > 2e3) throw new SeoError("INVALID_INPUT", "IndexNow URLs cannot exceed 2,000 characters.");
+		if (url.hostname.toLowerCase() !== host) throw new SeoError("INVALID_INPUT", `Every IndexNow URL must belong to ${host}.`);
+		url.hash = "";
+		urls.add(url.toString());
+	}
+	return [...urls].sort((a, b) => a < b ? -1 : a > b ? 1 : 0);
+}
+async function verifyIndexNowKey(input) {
+	const record = validateIndexNowKeyRecord(input.record);
+	const keyLocation = parseIndexNowSite(record.keyLocation);
+	let response;
+	try {
+		response = await (input.fetchImpl ?? publicHttpFetch)(keyLocation.toString(), {
+			headers: { accept: "text/plain" },
+			redirect: "manual",
+			signal: AbortSignal.timeout(input.timeoutMs ?? 15e3)
+		});
+	} catch (error) {
+		throw new SeoError("PROVIDER_UNAVAILABLE", `IndexNow key verification failed: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	const body = await readBoundedResponseText(response, 512, "IndexNow key file");
+	return {
+		verified: response.ok && body.trim() === record.key,
+		status: response.status,
+		keyLocation: keyLocation.toString()
+	};
+}
+function indexNowFailure(status) {
+	if (status === 403) return new SeoError("ACCESS_DENIED", "IndexNow could not validate the key. Confirm the public key file contains the saved key.");
+	if (status === 429) return new SeoError("RATE_LIMITED", "IndexNow rate limited this submission. Wait before trying again.");
+	if (status === 400 || status === 422) return new SeoError("INVALID_INPUT", `IndexNow rejected the submission with HTTP ${status}. Check the URL host and key configuration.`);
+	return new SeoError("PROVIDER_UNAVAILABLE", `IndexNow submission failed with HTTP ${status}.`);
+}
+async function submitIndexNow(input) {
+	const record = validateIndexNowKeyRecord(input.record);
+	const urls = uniqueUrls(input.urls, record.host);
+	const keyLocation = parseIndexNowSite(record.keyLocation);
+	const base = {
+		schemaVersion: 1,
+		generatedAt: (input.now ?? /* @__PURE__ */ new Date()).toISOString(),
+		endpoint: INDEXNOW_ENDPOINT,
+		host: record.host,
+		keyLocation: keyLocation.toString(),
+		submittedUrls: urls.length,
+		caveats: ["IndexNow confirms receipt, not crawling, indexing, ranking, or traffic.", "Submit URLs only after they are added, updated, or deleted."]
+	};
+	if (input.dryRun) return {
+		...base,
+		dryRun: true,
+		status: "validated"
+	};
+	const verification = await verifyIndexNowKey({
+		record,
+		fetchImpl: input.fetchImpl
+	});
+	if (!verification.verified) throw new SeoError("ACCESS_DENIED", `IndexNow key verification failed at ${verification.keyLocation} with HTTP ${verification.status}. Deploy the generated key file before submitting URLs.`);
+	let response;
+	try {
+		response = await (input.fetchImpl ?? publicHttpFetch)(INDEXNOW_ENDPOINT, {
+			method: "POST",
+			headers: {
+				accept: "application/json",
+				"content-type": "application/json; charset=utf-8"
+			},
+			body: JSON.stringify({
+				host: record.host,
+				key: record.key,
+				keyLocation: keyLocation.toString(),
+				urlList: urls
+			}),
+			signal: AbortSignal.timeout(3e4)
+		});
+	} catch (error) {
+		throw new SeoError("PROVIDER_UNAVAILABLE", `IndexNow did not respond: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	await readBoundedResponseText(response, 64e3, "IndexNow response");
+	if (response.status !== 200 && response.status !== 202) throw indexNowFailure(response.status);
+	return {
+		...base,
+		dryRun: false,
+		status: response.status === 200 ? "submitted" : "pending-validation",
+		responseStatus: response.status
+	};
+}
+//#endregion
+//#region packages/core/src/links/normalize.ts
+const FIELD_ALIASES = {
+	sourceUrl: [
+		"sourceurl",
+		"source",
+		"referringurl",
+		"referringpage",
+		"fromurl"
+	],
+	targetUrl: [
+		"targeturl",
+		"target",
+		"destinationurl",
+		"destination",
+		"tourl"
+	],
+	anchorText: ["anchortext", "anchor"],
+	firstSeenAt: ["firstseenat", "firstseen"],
+	lastSeenAt: ["lastseenat", "lastseen"],
+	nofollow: ["nofollow", "isnofollow"]
+};
+function key(value) {
+	return value.toLowerCase().replaceAll(/[^a-z0-9]/g, "");
+}
+function valueFor(row, field) {
+	const aliases = new Set(FIELD_ALIASES[field]);
+	for (const [name, value] of Object.entries(row)) if (aliases.has(key(name))) return value;
+}
+function httpUrl(value) {
+	if (typeof value !== "string" || !value.trim() || value.trim().length > 2e3) return;
+	try {
+		const url = new URL(value.trim());
+		return url.protocol === "http:" || url.protocol === "https:" ? url : void 0;
+	} catch {
+		return;
+	}
+}
+function optionalString(value) {
+	return typeof value === "string" && value.trim() ? value.trim().slice(0, 1e3) : void 0;
+}
+function optionalBoolean(value) {
+	if (typeof value === "boolean") return value;
+	if (typeof value !== "string") return void 0;
+	if (/^(true|yes|1)$/i.test(value.trim())) return true;
+	if (/^(false|no|0)$/i.test(value.trim())) return false;
+}
+function normalizeLinkEvidenceRow(raw) {
+	const source = httpUrl(valueFor(raw, "sourceUrl"));
+	const target = httpUrl(valueFor(raw, "targetUrl"));
+	if (!source || !target) return void 0;
+	return {
+		sourceUrl: source.toString(),
+		sourceDomain: source.hostname.toLowerCase(),
+		targetUrl: target.toString(),
+		anchorText: optionalString(valueFor(raw, "anchorText")),
+		firstSeenAt: optionalString(valueFor(raw, "firstSeenAt")),
+		lastSeenAt: optionalString(valueFor(raw, "lastSeenAt")),
+		nofollow: optionalBoolean(valueFor(raw, "nofollow"))
+	};
+}
+function linkEvidenceKey(row) {
+	return `${row.sourceUrl}\u0000${row.targetUrl}\u0000${row.anchorText ?? ""}`;
+}
+function compareLinkEvidence(a, b) {
+	return a.targetUrl.localeCompare(b.targetUrl, "en") || a.sourceUrl.localeCompare(b.sourceUrl, "en") || (a.anchorText ?? "").localeCompare(b.anchorText ?? "", "en");
+}
+//#endregion
+//#region packages/core/src/links/bing.ts
+const MAX_COUNT_PAGES = 5;
+const DEFAULT_TARGET_LIMIT = 20;
+const MAX_TARGET_LIMIT = 50;
+const DEFAULT_DETAIL_PAGES = 1;
+const MAX_DETAIL_PAGES = 3;
+const DEFAULT_ROW_LIMIT$2 = 500;
+const MAX_ROW_LIMIT$2 = 1e3;
+const MAX_CONCURRENCY = 3;
+function integer(value, fallback, max, name) {
+	const resolved = value ?? fallback;
+	if (!Number.isInteger(resolved) || resolved < 1 || resolved > max) throw new SeoError("INVALID_INPUT", `${name} must be between 1 and ${max}.`);
+	return resolved;
+}
+async function mapConcurrent(values, concurrency, work) {
+	const output = new Array(values.length);
+	let next = 0;
+	async function worker() {
+		while (next < values.length) {
+			const index = next;
+			next += 1;
+			const value = values[index];
+			if (value !== void 0) output[index] = await work(value);
+		}
+	}
+	await Promise.all(Array.from({ length: Math.min(concurrency, values.length) }, () => worker()));
+	return output;
+}
+async function targetDetails(input) {
+	const rows = [];
+	let requestedPages = 0;
+	let invalidRows = 0;
+	let returnedRows = 0;
+	let partial = false;
+	let totalPages = 0;
+	for (let page = 0; page < input.pages; page += 1) {
+		requestedPages += 1;
+		let response;
+		try {
+			response = await input.client.getUrlLinks(input.site, input.target.url, page);
+		} catch (error) {
+			if (error instanceof SeoError && (error.code === "AUTH_REQUIRED" || error.code === "ACCESS_DENIED")) throw error;
+			return {
+				rows,
+				requestedPages,
+				invalidRows,
+				returnedRows,
+				partial: true,
+				failed: true
+			};
+		}
+		invalidRows += response.invalidRows;
+		returnedRows += response.returnedRows;
+		rows.push(...response.rows);
+		totalPages = response.totalPages;
+		partial ||= response.capped;
+		if (page + 1 >= response.totalPages || response.rows.length === 0) break;
+	}
+	partial ||= requestedPages < totalPages;
+	return {
+		rows,
+		requestedPages,
+		invalidRows,
+		returnedRows,
+		partial,
+		failed: false
+	};
+}
+async function collectBingLinkEvidence(input) {
+	if (!input.site.trim()) throw new SeoError("INVALID_INPUT", "Pass a Bing Webmaster site URL.");
+	const targetLimit = integer(input.targetLimit, DEFAULT_TARGET_LIMIT, MAX_TARGET_LIMIT, "Bing link target limit");
+	const detailPages = integer(input.detailPagesPerTarget, DEFAULT_DETAIL_PAGES, MAX_DETAIL_PAGES, "Bing detail page limit");
+	const rowLimit = integer(input.rowLimit, DEFAULT_ROW_LIMIT$2, MAX_ROW_LIMIT$2, "Bing link row limit");
+	const client = input.client ?? (await createBingWebmasterClient()).client;
+	const countRows = [];
+	let countPagesRequested = 0;
+	let invalidRows = 0;
+	let countInvalidRows = 0;
+	let countRowsReturned = 0;
+	let partial = false;
+	let totalCountPages = 0;
+	for (let page = 0; page < MAX_COUNT_PAGES; page += 1) {
+		const response = await client.getLinkCounts(input.site, page);
+		countPagesRequested += 1;
+		invalidRows += response.invalidRows;
+		countInvalidRows += response.invalidRows;
+		countRowsReturned += response.returnedRows;
+		countRows.push(...response.rows);
+		totalCountPages = response.totalPages;
+		partial ||= response.capped;
+		if (countRows.length >= targetLimit || page + 1 >= response.totalPages || response.rows.length === 0) break;
+	}
+	partial ||= countPagesRequested < totalCountPages;
+	const countsByUrl = /* @__PURE__ */ new Map();
+	for (const row of countRows) countsByUrl.set(row.url, Math.max(row.count, countsByUrl.get(row.url) ?? 0));
+	const counts = [...countsByUrl].map(([url, count]) => ({
+		url,
+		count
+	}));
+	counts.sort((a, b) => b.count - a.count || a.url.localeCompare(b.url, "en"));
+	const selectedTargets = counts.slice(0, targetLimit);
+	partial ||= counts.length > targetLimit;
+	const details = await mapConcurrent(selectedTargets, MAX_CONCURRENCY, async (target) => targetDetails({
+		client,
+		site: input.site,
+		target,
+		pages: detailPages
+	}));
+	const rows = [];
+	const keys = /* @__PURE__ */ new Set();
+	let duplicateRows = 0;
+	let detailPagesRequested = 0;
+	let detailInvalidRows = 0;
+	let detailRowsReturned = 0;
+	let failedTargets = 0;
+	for (const [index, detail] of details.entries()) {
+		const target = selectedTargets[index];
+		if (!target) continue;
+		detailPagesRequested += detail.requestedPages;
+		if (detail.failed) failedTargets += 1;
+		invalidRows += detail.invalidRows;
+		detailInvalidRows += detail.invalidRows;
+		detailRowsReturned += detail.returnedRows;
+		partial ||= detail.partial;
+		for (const source of detail.rows) {
+			if (rows.length >= rowLimit) {
+				partial = true;
+				break;
+			}
+			const row = normalizeLinkEvidenceRow({
+				sourceUrl: source.url,
+				targetUrl: target.url,
+				anchorText: source.anchorText
+			});
+			if (!row) {
+				invalidRows += 1;
+				continue;
+			}
+			const key = linkEvidenceKey(row);
+			if (keys.has(key)) {
+				duplicateRows += 1;
+				continue;
+			}
+			keys.add(key);
+			rows.push(row);
+		}
+	}
+	rows.sort(compareLinkEvidence);
+	return {
+		rows,
+		targetCounts: selectedTargets.map((target) => ({
+			targetUrl: target.url,
+			providerReportedLinks: target.count,
+			observedLinks: rows.filter((row) => row.targetUrl === target.url).length
+		})),
+		provenance: {
+			provider: "bing-webmaster",
+			observedAt: (/* @__PURE__ */ new Date()).toISOString(),
+			cached: false,
+			suppliedRows: detailRowsReturned + detailInvalidRows,
+			validRows: rows.length,
+			invalidRows,
+			duplicateRows,
+			capped: partial,
+			rowLimit,
+			completeness: partial ? "partial" : "unknown",
+			providerRequests: {
+				methods: ["GetLinkCounts", "GetUrlLinks"],
+				targetPagesRequested: countPagesRequested,
+				detailPagesRequested,
+				maxConcurrentRequests: MAX_CONCURRENCY
+			},
+			providerCoverage: {
+				targetCountRows: {
+					returnedRows: countRowsReturned,
+					retainedRows: counts.length,
+					invalidRows: countInvalidRows
+				},
+				detailRows: {
+					returnedRows: detailRowsReturned,
+					retainedRows: rows.length,
+					invalidRows: detailInvalidRows
+				}
+			}
+		},
+		warnings: [
+			...countRowsReturned === 0 ? ["Bing returned no target-link rows. This does not prove that the site has no links."] : [],
+			...partial ? ["Bing link evidence was bounded by provider pagination, failed requests, or report limits."] : [],
+			...failedTargets ? [`${failedTargets} target detail request${failedTargets === 1 ? "" : "s"} failed while other evidence was retained.`] : []
+		]
+	};
 }
 //#endregion
-//#region packages/core/src/ga4/matching.ts
-function hostnameFromUrl(value) {
+//#region packages/core/src/links/import.ts
+const DEFAULT_ROW_LIMIT$1 = 1e4;
+const MAX_ROW_LIMIT$1 = 1e5;
+const MAX_STREAM_BYTES = 5e7;
+const MAX_JSON_BYTES = 1e7;
+const MAX_CELL_BYTES = 1e6;
+function formatFor$1(path, explicit) {
+	if (explicit) return explicit;
+	const extension = extname(path).toLowerCase();
+	if (extension === ".csv") return "csv";
+	if (extension === ".jsonl" || extension === ".ndjson") return "jsonl";
+	if (extension === ".json") return "json";
+	throw new SeoError("INVALID_INPUT", "Link imports must be CSV, JSON, JSONL, or NDJSON.");
+}
+function boundedRowLimit(value) {
+	const limit = value ?? DEFAULT_ROW_LIMIT$1;
+	if (!Number.isInteger(limit) || limit < 1 || limit > MAX_ROW_LIMIT$1) throw new SeoError("INVALID_INPUT", `Link import row limit must be between 1 and ${MAX_ROW_LIMIT$1}.`);
+	return limit;
+}
+async function* csvRecords(path, byteLimit, progress) {
+	const stream = createReadStream(path, { encoding: "utf8" });
+	let record = [];
+	let field = "";
+	let quoted = false;
+	let pendingQuote = false;
+	for await (const chunk of stream) {
+		progress.bytesRead += Buffer.byteLength(chunk);
+		if (progress.bytesRead > byteLimit) {
+			stream.destroy();
+			throw new SeoError("INVALID_INPUT", `Link import exceeds the ${byteLimit}-byte streaming limit.`);
+		}
+		for (const character of chunk) {
+			if (pendingQuote) {
+				if (character === "\"") {
+					field += "\"";
+					pendingQuote = false;
+					continue;
+				}
+				quoted = false;
+				pendingQuote = false;
+			}
+			if (quoted) if (character === "\"") pendingQuote = true;
+			else field += character;
+			else if (character === "\"" && field.length === 0) quoted = true;
+			else if (character === ",") {
+				record.push(field);
+				field = "";
+			} else if (character === "\n") {
+				record.push(field.replace(/\r$/, ""));
+				field = "";
+				if (record.some((value) => value.length > 0)) yield record;
+				record = [];
+			} else field += character;
+			if (Buffer.byteLength(field) > MAX_CELL_BYTES) {
+				stream.destroy();
+				throw new SeoError("INVALID_INPUT", `Link import contains a cell larger than ${MAX_CELL_BYTES} bytes.`);
+			}
+		}
+	}
+	if (quoted && !pendingQuote) throw new SeoError("INVALID_INPUT", "Link CSV contains an unclosed quote.");
+	if (field || record.length) {
+		record.push(field.replace(/\r$/, ""));
+		if (record.some((value) => value.length > 0)) yield record;
+	}
+}
+async function* jsonlRecords(path, byteLimit, progress) {
+	const stream = createReadStream(path, { encoding: "utf8" });
+	let remainder = "";
+	for await (const chunk of stream) {
+		progress.bytesRead += Buffer.byteLength(chunk);
+		if (progress.bytesRead > byteLimit) {
+			stream.destroy();
+			throw new SeoError("INVALID_INPUT", `Link import exceeds the ${byteLimit}-byte streaming limit.`);
+		}
+		remainder += chunk;
+		let newline = remainder.indexOf("\n");
+		while (newline >= 0) {
+			const line = remainder.slice(0, newline).trim();
+			remainder = remainder.slice(newline + 1);
+			if (line) yield parseObject(line);
+			newline = remainder.indexOf("\n");
+		}
+		if (Buffer.byteLength(remainder) > MAX_CELL_BYTES) {
+			stream.destroy();
+			throw new SeoError("INVALID_INPUT", `Link import contains a line larger than ${MAX_CELL_BYTES} bytes.`);
+		}
+	}
+	if (remainder.trim()) yield parseObject(remainder);
+}
+function parseObject(value) {
 	try {
-		const url = new URL(value);
-		if (url.protocol !== "http:" && url.protocol !== "https:") return void 0;
-		return url.hostname.toLowerCase().replace(/\.$/, "") || void 0;
+		const parsed = JSON.parse(value);
+		if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("not an object");
+		return parsed;
 	} catch {
-		return;
+		throw new SeoError("INVALID_INPUT", "Link JSONL must contain one JSON object per line.");
+	}
+}
+function rowFromCsv(headers, values) {
+	return Object.fromEntries(headers.map((header, index) => [header, values[index]]));
+}
+async function importLinkEvidence(input) {
+	const path = resolve(input.file);
+	const file = await stat(path).catch(() => void 0);
+	if (!file?.isFile()) throw new SeoError("INVALID_INPUT", `Link import file was not found: ${path}`);
+	const format = formatFor$1(path, input.format);
+	const rowLimit = boundedRowLimit(input.rowLimit);
+	if (format === "json" && file.size > MAX_JSON_BYTES) throw new SeoError("INVALID_INPUT", `JSON link imports are limited to ${MAX_JSON_BYTES} bytes. Use CSV or JSONL for larger files.`);
+	const progress = { bytesRead: 0 };
+	let records;
+	if (format === "csv") {
+		const csv = csvRecords(path, MAX_STREAM_BYTES, progress);
+		const first = await csv.next();
+		const headers = (Array.isArray(first.value) ? first.value : []).map((value, index) => index === 0 ? value.replace(/^\uFEFF/, "") : value);
+		if (!headers.length) throw new SeoError("INVALID_INPUT", "Link CSV has no header row.");
+		records = (async function* () {
+			for await (const values of csv) yield rowFromCsv(headers, values);
+		})();
+	} else if (format === "jsonl") records = jsonlRecords(path, MAX_STREAM_BYTES, progress);
+	else {
+		const body = await readFile(path, "utf8");
+		progress.bytesRead = Buffer.byteLength(body);
+		let parsed;
+		try {
+			parsed = JSON.parse(body);
+		} catch {
+			throw new SeoError("INVALID_INPUT", "Link JSON is not valid JSON.");
+		}
+		if (!Array.isArray(parsed)) throw new SeoError("INVALID_INPUT", "Link JSON must be an array of objects.");
+		records = (async function* () {
+			for (const row of parsed) yield row && typeof row === "object" && !Array.isArray(row) ? row : {};
+		})();
 	}
+	const rows = [];
+	const keys = /* @__PURE__ */ new Set();
+	let suppliedRows = 0;
+	let invalidRows = 0;
+	let duplicateRows = 0;
+	let capped = false;
+	for await (const raw of records) {
+		if (suppliedRows >= rowLimit) {
+			capped = true;
+			break;
+		}
+		suppliedRows += 1;
+		const row = normalizeLinkEvidenceRow(raw);
+		if (!row) {
+			invalidRows += 1;
+			continue;
+		}
+		const key = linkEvidenceKey(row);
+		if (keys.has(key)) {
+			duplicateRows += 1;
+			continue;
+		}
+		keys.add(key);
+		rows.push(row);
+	}
+	rows.sort(compareLinkEvidence);
+	const observedAt = (/* @__PURE__ */ new Date()).toISOString();
+	return {
+		rows,
+		targetCounts: [],
+		provenance: {
+			provider: `${format}-import`,
+			observedAt,
+			cached: false,
+			suppliedRows,
+			validRows: rows.length,
+			invalidRows,
+			duplicateRows,
+			capped,
+			rowLimit,
+			completeness: capped ? "partial" : "unknown",
+			file: {
+				path,
+				format,
+				bytesRead: progress.bytesRead,
+				fileBytes: file.size
+			}
+		},
+		warnings: capped ? [`Import stopped after ${rowLimit} rows. The file contains more data.`] : []
+	};
 }
-function domainFromProperty(value) {
-	if (!value.startsWith("sc-domain:")) return void 0;
-	const domain = value.slice(10).trim().toLowerCase();
-	if (!domain || /[/:]/.test(domain)) return void 0;
-	return domain.replace(/\.$/, "") || void 0;
-}
-function matchForSite(site, streamHostname) {
-	const domain = domainFromProperty(site);
-	if (domain) return streamHostname === domain || streamHostname.endsWith(`.${domain}`) ? "domain" : void 0;
-	return hostnameFromUrl(site) === streamHostname ? "hostname" : void 0;
+//#endregion
+//#region packages/core/src/links/report.ts
+const DEFAULT_OUTPUT_LIMIT = 100;
+const MAX_OUTPUT_LIMIT = 500;
+function boundedLimit(value) {
+	const limit = value ?? DEFAULT_OUTPUT_LIMIT;
+	if (!Number.isInteger(limit) || limit < 1 || limit > MAX_OUTPUT_LIMIT) throw new SeoError("INVALID_INPUT", `Link report limit must be between 1 and ${MAX_OUTPUT_LIMIT}.`);
+	return limit;
 }
-function matchGa4WebStreams(site, candidates) {
-	return candidates.flatMap((candidate) => {
-		const defaultUri = candidate.stream.webStreamData?.defaultUri;
-		if (!defaultUri) return [];
-		const hostname = hostnameFromUrl(defaultUri);
-		if (!hostname) return [];
-		const match = matchForSite(site, hostname);
-		if (!match) return [];
-		return [{
-			...candidate,
-			defaultUri,
-			hostname,
-			match
-		}];
-	});
+function targetCounts(rows) {
+	const counts = /* @__PURE__ */ new Map();
+	for (const row of rows) counts.set(row.targetUrl, (counts.get(row.targetUrl) ?? 0) + 1);
+	return [...counts].map(([targetUrl, observedLinks]) => ({
+		targetUrl,
+		observedLinks
+	})).sort((a, b) => b.observedLinks - a.observedLinks || a.targetUrl.localeCompare(b.targetUrl, "en"));
 }
-function ga4MatchReason(match, site) {
-	const stream = match.stream.displayName ?? match.defaultUri;
-	const location = match.match === "domain" ? "is inside" : "matches";
-	return `Matched Google Analytics web stream ${stream} (${match.defaultUri}): its hostname ${location} ${site}.`;
+function linkEvidenceReport(input) {
+	const limit = boundedLimit(input.limit);
+	const rows = input.evidence.rows.slice(0, limit);
+	const domains = new Set(input.evidence.rows.map((row) => row.sourceDomain));
+	const observedTargets = targetCounts(input.evidence.rows);
+	const counts = input.evidence.targetCounts.length ? input.evidence.targetCounts : observedTargets;
+	return {
+		schemaVersion: 1,
+		generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		dataStatus: input.evidence.provenance.completeness === "complete" ? "complete" : "partial",
+		summary: {
+			observedLinks: input.evidence.rows.length,
+			referringDomains: domains.size,
+			targetPages: new Set(input.evidence.rows.map((row) => row.targetUrl)).size,
+			providerTargetPages: counts.length
+		},
+		provenance: input.evidence.provenance,
+		selection: {
+			availableRows: input.evidence.rows.length,
+			returnedRows: rows.length,
+			omittedRows: Math.max(0, input.evidence.rows.length - rows.length),
+			limit
+		},
+		targetCounts: counts.slice(0, 100),
+		links: rows,
+		warnings: input.evidence.warnings,
+		caveats: [
+			"This is bounded provider or imported evidence, not a complete backlink index.",
+			"A missing link is not proof that no link exists, and an observed link is not a quality or ranking verdict.",
+			"Referring-domain counts describe the retained rows only."
+		]
+	};
 }
 //#endregion
 //#region packages/core/src/storage/log-retention.ts
@@ -30418,6 +32602,472 @@ var JsonFileStorageAdapter = class {
 };
 const localCredentialsProvider = new LocalCredentialsProvider();
 //#endregion
+//#region packages/core/src/server-logs/parse.ts
+const MONTHS = {
+	Jan: 0,
+	Feb: 1,
+	Mar: 2,
+	Apr: 3,
+	May: 4,
+	Jun: 5,
+	Jul: 6,
+	Aug: 7,
+	Sep: 8,
+	Oct: 9,
+	Nov: 10,
+	Dec: 11
+};
+const CRAWLERS = [
+	{
+		family: "Googlebot",
+		category: "search",
+		patterns: ["googlebot", "google-inspectiontool"]
+	},
+	{
+		family: "Bingbot",
+		category: "search",
+		patterns: ["bingbot", "bingpreview"]
+	},
+	{
+		family: "Applebot",
+		category: "search",
+		patterns: ["applebot"]
+	},
+	{
+		family: "DuckDuckBot",
+		category: "search",
+		patterns: ["duckduckbot"]
+	},
+	{
+		family: "YandexBot",
+		category: "search",
+		patterns: ["yandexbot"]
+	},
+	{
+		family: "Baiduspider",
+		category: "search",
+		patterns: ["baiduspider"]
+	},
+	{
+		family: "PetalBot",
+		category: "search",
+		patterns: ["petalbot"]
+	},
+	{
+		family: "OpenAI",
+		category: "ai",
+		patterns: [
+			"gptbot",
+			"chatgpt-user",
+			"oai-searchbot"
+		]
+	},
+	{
+		family: "Anthropic",
+		category: "ai",
+		patterns: [
+			"claudebot",
+			"claude-searchbot",
+			"claude-user"
+		]
+	},
+	{
+		family: "Perplexity",
+		category: "ai",
+		patterns: ["perplexitybot", "perplexity-user"]
+	},
+	{
+		family: "Amazonbot",
+		category: "ai",
+		patterns: ["amazonbot"]
+	},
+	{
+		family: "Bytespider",
+		category: "ai",
+		patterns: ["bytespider"]
+	},
+	{
+		family: "CCBot",
+		category: "ai",
+		patterns: ["ccbot"]
+	},
+	{
+		family: "Cohere",
+		category: "ai",
+		patterns: ["cohere-ai"]
+	}
+];
+const COMBINED_LOG = /^\S+\s+\S+\s+\S+\s+\[([^\]]+)]\s+"([^"\s]+)\s+([^"\s]+)(?:\s+[^"\s]+)?"\s+(\d{3})\s+(\d+|-)\s*(?:"[^"]*"\s+"([^"]*)")?\s*$/;
+function classifyCrawler(userAgent) {
+	if (!userAgent) return void 0;
+	const value = userAgent.toLowerCase();
+	const match = CRAWLERS.find((crawler) => crawler.patterns.some((pattern) => value.includes(pattern)));
+	return match ? {
+		family: match.family,
+		category: match.category
+	} : void 0;
+}
+function logTimestamp(value) {
+	const match = /^(\d{2})\/([A-Z][a-z]{2})\/(\d{4}):(\d{2}):(\d{2}):(\d{2}) ([+-])(\d{2})(\d{2})$/.exec(value);
+	if (!match) return void 0;
+	const month = MONTHS[match[2] ?? ""];
+	if (month === void 0) return void 0;
+	const utc = Date.UTC(Number(match[3]), month, Number(match[1]), Number(match[4]), Number(match[5]), Number(match[6]));
+	const offsetMinutes = Number(match[8]) * 60 + Number(match[9]);
+	const adjusted = utc + (match[7] === "+" ? -1 : 1) * offsetMinutes * 6e4;
+	const date = new Date(adjusted);
+	return Number.isNaN(date.getTime()) ? void 0 : date.toISOString();
+}
+function normalizedPath(value) {
+	if (typeof value !== "string" || value.length < 1 || value.length > 2e3) return;
+	try {
+		if (value.startsWith("/")) return new URL(value, "https://server-log.invalid").pathname;
+		const url = new URL(value);
+		return ["http:", "https:"].includes(url.protocol) ? url.pathname : void 0;
+	} catch {
+		return;
+	}
+}
+function normalizedMethod(value) {
+	if (typeof value !== "string" || !/^[A-Za-z]{1,16}$/.test(value)) return;
+	return value.toUpperCase();
+}
+function normalizedStatus(value) {
+	const status = typeof value === "number" ? value : Number(value);
+	return Number.isInteger(status) && status >= 100 && status <= 599 ? status : void 0;
+}
+function normalizedBytes(value) {
+	if (value === void 0 || value === null || value === "" || value === "-") return;
+	const bytes = typeof value === "number" ? value : Number(value);
+	return Number.isSafeInteger(bytes) && bytes >= 0 ? bytes : void 0;
+}
+function record(input) {
+	let timestamp;
+	if (typeof input.timestamp === "string") {
+		const date = new Date(input.timestamp);
+		if (!Number.isNaN(date.getTime())) timestamp = date.toISOString();
+	}
+	const method = normalizedMethod(input.method);
+	const path = normalizedPath(input.path);
+	const status = normalizedStatus(input.status);
+	if (!timestamp || !method || !path || status === void 0) return void 0;
+	const userAgent = typeof input.userAgent === "string" && input.userAgent.length <= 2e3 ? input.userAgent : void 0;
+	return {
+		timestamp,
+		method,
+		path,
+		status,
+		bytes: normalizedBytes(input.bytes),
+		userAgent,
+		crawler: classifyCrawler(userAgent)
+	};
+}
+function parseCombinedLogLine(line) {
+	const match = COMBINED_LOG.exec(line);
+	if (!match) return void 0;
+	const timestamp = logTimestamp(match[1] ?? "");
+	if (!timestamp) return void 0;
+	return record({
+		timestamp,
+		method: match[2],
+		path: match[3],
+		status: match[4],
+		bytes: match[5],
+		userAgent: match[6]
+	});
+}
+function firstValue(value, names) {
+	for (const name of names) if (value[name] !== void 0) return value[name];
+}
+function parseJsonLogLine(line) {
+	let value;
+	try {
+		value = JSON.parse(line);
+	} catch {
+		return;
+	}
+	if (!value || typeof value !== "object" || Array.isArray(value)) return;
+	const row = value;
+	return record({
+		timestamp: firstValue(row, [
+			"timestamp",
+			"time",
+			"datetime",
+			"@timestamp"
+		]),
+		method: firstValue(row, [
+			"method",
+			"requestMethod",
+			"http_method"
+		]),
+		path: firstValue(row, [
+			"path",
+			"url",
+			"requestUri",
+			"request_uri"
+		]),
+		status: firstValue(row, [
+			"status",
+			"statusCode",
+			"status_code"
+		]),
+		bytes: firstValue(row, [
+			"bytes",
+			"bodyBytesSent",
+			"body_bytes_sent"
+		]),
+		userAgent: firstValue(row, [
+			"userAgent",
+			"user_agent",
+			"httpUserAgent",
+			"http_user_agent"
+		])
+	});
+}
+function emptyStatusBreakdown() {
+	return {
+		success: 0,
+		redirect: 0,
+		clientError: 0,
+		serverError: 0,
+		other: 0
+	};
+}
+function addStatus(breakdown, status) {
+	if (status >= 200 && status < 300) breakdown.success += 1;
+	else if (status >= 300 && status < 400) breakdown.redirect += 1;
+	else if (status >= 400 && status < 500) breakdown.clientError += 1;
+	else if (status >= 500) breakdown.serverError += 1;
+	else breakdown.other += 1;
+}
+//#endregion
+//#region packages/core/src/server-logs/import.ts
+const DEFAULT_ROW_LIMIT = 1e6;
+const MAX_ROW_LIMIT = 1e7;
+const DEFAULT_PATH_LIMIT = 25e3;
+const MAX_PATH_LIMIT = 1e5;
+const BYTE_LIMIT = 1e9;
+const MAX_LINE_BYTES = 65536;
+function boundedInteger(value, fallback, maximum, label) {
+	const result = value ?? fallback;
+	if (!Number.isInteger(result) || result < 1 || result > maximum) throw new SeoError("INVALID_INPUT", `${label} must be between 1 and ${maximum}.`);
+	return result;
+}
+function formatFor(path, explicit) {
+	if (explicit) return explicit;
+	const extension = extname(path).toLowerCase();
+	return [".jsonl", ".ndjson"].includes(extension) ? "jsonl" : "combined";
+}
+async function* lines(path, progress) {
+	const stream = createReadStream(path, {
+		encoding: "utf8",
+		highWaterMark: 64 * 1024
+	});
+	let remainder = "";
+	let discarding = false;
+	for await (const chunk of stream) {
+		const remainingBytes = BYTE_LIMIT - progress.bytesRead;
+		if (remainingBytes <= 0) {
+			progress.bytesCapped = true;
+			break;
+		}
+		const chunkBytes = Buffer.byteLength(chunk);
+		const accepted = chunkBytes > remainingBytes ? Buffer.from(chunk).subarray(0, remainingBytes).toString("utf8") : chunk;
+		progress.bytesRead += Buffer.byteLength(accepted);
+		if (chunkBytes > remainingBytes) progress.bytesCapped = true;
+		remainder += accepted;
+		let newline = remainder.indexOf("\n");
+		while (newline >= 0) {
+			const line = remainder.slice(0, newline).replace(/\r$/, "");
+			remainder = remainder.slice(newline + 1);
+			if (discarding || Buffer.byteLength(line) > MAX_LINE_BYTES) {
+				yield { tooLong: true };
+				discarding = false;
+			} else if (line.trim()) yield { line };
+			newline = remainder.indexOf("\n");
+		}
+		if (Buffer.byteLength(remainder) > MAX_LINE_BYTES) {
+			remainder = "";
+			discarding = true;
+		}
+		if (progress.bytesCapped) break;
+	}
+	if (discarding || Buffer.byteLength(remainder) > MAX_LINE_BYTES) yield { tooLong: true };
+	else if (remainder.trim()) yield { line: remainder.replace(/\r$/, "") };
+}
+function compareCrawler(a, b) {
+	return b.requests - a.requests || a.family.localeCompare(b.family, "en");
+}
+function compareCrawlerPath(a, b) {
+	return b.requests - a.requests || a.family.localeCompare(b.family, "en") || a.path.localeCompare(b.path, "en");
+}
+function updatePeriod(timestamp, period) {
+	if (!period.firstSeenAt || timestamp < period.firstSeenAt) period.firstSeenAt = timestamp;
+	if (!period.lastSeenAt || timestamp > period.lastSeenAt) period.lastSeenAt = timestamp;
+}
+function newCrawler(record) {
+	const crawler = record.crawler;
+	if (!crawler) throw new Error("Crawler evidence is required.");
+	return {
+		family: crawler.family,
+		category: crawler.category,
+		requests: 0,
+		lastSeenAt: record.timestamp,
+		...emptyStatusBreakdown()
+	};
+}
+function newCrawlerPath(record) {
+	return {
+		...newCrawler(record),
+		path: record.path
+	};
+}
+async function importServerLog(input) {
+	const path = resolve(input.file);
+	const file = await stat(path).catch(() => void 0);
+	if (!file?.isFile()) throw new SeoError("INVALID_INPUT", `Server log was not found: ${path}`);
+	const format = formatFor(path, input.format);
+	const rowLimit = boundedInteger(input.rowLimit, DEFAULT_ROW_LIMIT, MAX_ROW_LIMIT, "Server log row limit");
+	const pathLimit = boundedInteger(input.pathLimit, DEFAULT_PATH_LIMIT, MAX_PATH_LIMIT, "Server log path limit");
+	const parse = format === "jsonl" ? parseJsonLogLine : parseCombinedLogLine;
+	const progress = {
+		bytesRead: 0,
+		bytesCapped: false
+	};
+	const period = {};
+	const statusCodes = /* @__PURE__ */ new Map();
+	const crawlers = /* @__PURE__ */ new Map();
+	const crawlerPaths = /* @__PURE__ */ new Map();
+	let suppliedRows = 0;
+	let parsedRows = 0;
+	let invalidRows = 0;
+	let crawlerRows = 0;
+	let responseBytes = 0;
+	let rowsCapped = false;
+	let pathsCapped = false;
+	let untrackedCrawlerPathRows = 0;
+	for await (const item of lines(path, progress)) {
+		if (suppliedRows >= rowLimit) {
+			rowsCapped = true;
+			break;
+		}
+		suppliedRows += 1;
+		const parsed = item.line ? parse(item.line) : void 0;
+		if (!parsed) {
+			invalidRows += 1;
+			continue;
+		}
+		parsedRows += 1;
+		responseBytes += parsed.bytes ?? 0;
+		updatePeriod(parsed.timestamp, period);
+		statusCodes.set(parsed.status, (statusCodes.get(parsed.status) ?? 0) + 1);
+		if (!parsed.crawler) continue;
+		crawlerRows += 1;
+		const crawler = crawlers.get(parsed.crawler.family) ?? newCrawler(parsed);
+		crawler.requests += 1;
+		if (parsed.timestamp > crawler.lastSeenAt) crawler.lastSeenAt = parsed.timestamp;
+		addStatus(crawler, parsed.status);
+		crawlers.set(parsed.crawler.family, crawler);
+		const key = `${parsed.crawler.family}\u0000${parsed.path}`;
+		let crawlerPath = crawlerPaths.get(key);
+		if (!crawlerPath && crawlerPaths.size >= pathLimit) {
+			pathsCapped = true;
+			untrackedCrawlerPathRows += 1;
+			continue;
+		}
+		crawlerPath ??= newCrawlerPath(parsed);
+		crawlerPath.requests += 1;
+		if (parsed.timestamp > crawlerPath.lastSeenAt) crawlerPath.lastSeenAt = parsed.timestamp;
+		addStatus(crawlerPath, parsed.status);
+		crawlerPaths.set(key, crawlerPath);
+	}
+	const fileReadCompletely = !rowsCapped && !progress.bytesCapped && progress.bytesRead >= file.size;
+	const completeness = fileReadCompletely && invalidRows === 0 && !pathsCapped ? "complete" : "partial";
+	const warnings = [];
+	if (rowsCapped) warnings.push(`Analysis stopped after ${rowLimit} rows.`);
+	if (progress.bytesCapped) warnings.push(`Analysis stopped after ${BYTE_LIMIT} input bytes.`);
+	if (invalidRows) warnings.push(`${invalidRows} malformed or unsupported rows were skipped.`);
+	if (pathsCapped) warnings.push(`Crawler path tracking stopped at ${pathLimit} unique crawler and path pairs. Overall crawler and status totals still include later valid rows.`);
+	return {
+		summary: {
+			suppliedRows,
+			parsedRows,
+			invalidRows,
+			crawlerRows,
+			nonCrawlerRows: parsedRows - crawlerRows,
+			responseBytes,
+			...period
+		},
+		statusCodes: [...statusCodes].map(([status, requests]) => ({
+			status,
+			requests
+		})).sort((a, b) => a.status - b.status),
+		crawlers: [...crawlers.values()].sort(compareCrawler),
+		crawlerPaths: [...crawlerPaths.values()].sort(compareCrawlerPath),
+		provenance: {
+			source: "local-server-log",
+			observedAt: (/* @__PURE__ */ new Date()).toISOString(),
+			cached: false,
+			file: {
+				path,
+				format,
+				bytesRead: progress.bytesRead,
+				fileBytes: file.size
+			},
+			limits: {
+				rowLimit,
+				pathLimit,
+				byteLimit: BYTE_LIMIT,
+				maxLineBytes: MAX_LINE_BYTES
+			},
+			coverage: {
+				fileReadCompletely,
+				rowsCapped,
+				bytesCapped: progress.bytesCapped,
+				pathsCapped,
+				untrackedCrawlerPathRows
+			},
+			completeness
+		},
+		warnings
+	};
+}
+//#endregion
+//#region packages/core/src/server-logs/report.ts
+const DEFAULT_LIMIT = 100;
+const MAX_LIMIT = 500;
+function outputLimit(value) {
+	const limit = value ?? DEFAULT_LIMIT;
+	if (!Number.isInteger(limit) || limit < 1 || limit > MAX_LIMIT) throw new SeoError("INVALID_INPUT", `Server log output limit must be between 1 and ${MAX_LIMIT}.`);
+	return limit;
+}
+function serverLogReport(input) {
+	const limit = outputLimit(input.limit);
+	const crawlerPaths = input.evidence.crawlerPaths.slice(0, limit);
+	return {
+		schemaVersion: 1,
+		generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		dataStatus: input.evidence.provenance.completeness,
+		summary: input.evidence.summary,
+		statusCodes: input.evidence.statusCodes,
+		crawlers: input.evidence.crawlers,
+		crawlerPaths,
+		selection: {
+			availableCrawlerPaths: input.evidence.crawlerPaths.length,
+			returnedCrawlerPaths: crawlerPaths.length,
+			omittedCrawlerPaths: Math.max(0, input.evidence.crawlerPaths.length - crawlerPaths.length),
+			limit
+		},
+		provenance: input.evidence.provenance,
+		warnings: input.evidence.warnings,
+		caveats: [
+			"Crawler families are identified from user-agent strings, which can be missing or spoofed.",
+			"This report describes only the supplied log file and cannot prove that every server or time period is represented.",
+			"Crawler path rankings describe retained path aggregates when the path limit is reached."
+		]
+	};
+}
+//#endregion
 //#region packages/core/src/telemetry.ts
 const TELEMETRY_ENDPOINT = "https://seoskill.dev/api/t";
 const TELEMETRY_SCHEMA_VERSION = 1;
@@ -30455,6 +33105,7 @@ const TELEMETRY_REPORTS = [
 	"ai-search-scorecard",
 	"audit-page",
 	"audit-urls",
+	"bing-webmaster-overview",
 	"cannibalisation",
 	"community-intent",
 	"compare-crawls",
@@ -30473,6 +33124,8 @@ const TELEMETRY_REPORTS = [
 	"index-monitor",
 	"index-watch",
 	"internal-links",
+	"link-evidence",
+	"server-log-analysis",
 	"link-recovery",
 	"crawl-history",
 	"crawler-rules",
@@ -30814,6 +33467,6 @@ function isoDate(daysAgo = 0) {
 	return date.toISOString().slice(0, 10);
 }
 //#endregion
-export { AI_REFERRAL_SOURCES, AI_REFERRAL_SOURCES_VERSION, AI_SEARCH_SCORECARD_METHODOLOGY_ID, AI_SEARCH_SCORECARD_METHODOLOGY_VERSION, AUDIT_PAGE_RULE_IDS, AUTOMATIC_BASELINE_SITE_RETENTION, AUTOMATIC_BASELINE_TOTAL_RETENTION, BROWSER_USER_AGENT, CANNIBAL_MAXIMUM_DOMINANT_SHARE, CANNIBAL_MINIMUM_PAGE_SHARE, CRAWL_REPORT_STORAGE_VERSION, CRAWL_RUN_RETENTION, CRAWL_SKIP_REASONS, CTR_DEFAULT_LIMIT, CTR_DEFAULT_MIN_IMPRESSIONS, CTR_MAX_LIMIT, CTR_MAX_MIN_IMPRESSIONS, DataForSeoProvider, GSC_FINAL_DATA_LAG_DAYS, GSC_TIME_ZONE, INDEX_WATCH_ATTEMPT_RETENTION, INTERNAL_LINK_LEXICAL_TARGET_LIMIT, INTERNAL_LINK_MATCH_EVIDENCE_LIMIT, JsonFileStorageAdapter, LINK_RECOVER_RUN_RETENTION, LOG_MAX_AGE_MS, LOG_MAX_FILE_BYTES, LOG_MAX_TOTAL_BYTES, LocalCredentialsProvider, MAX_CRAWL_CONCURRENCY, MAX_CRAWL_DEPTH, MAX_CRAWL_PAGES, MAX_CRAWL_TIMEOUT_MS, OKF_DEFAULT_CONCEPTS, OKF_MAX_CONCEPTS, REPORT_BASELINE_MAX_AGE_MS, REPORT_BASELINE_MAX_DEPTH, REPORT_BASELINE_MAX_PAGES, ResponseSizeLimitError, SCORECARD_CHECK_WEIGHTS, SCORECARD_STATUS_CREDIT, SEO_CRAWLER_IDENTITY, SEO_CRAWLER_TOKEN, SEO_CRAWLER_USER_AGENT, SEO_VERSION, SERP_TITLE_REFERENCE_WIDTH_PX, SERP_TITLE_WIDTH_PROFILE, SemrushProvider, SeoError, ServiceAccountAccessTokenClient, SessionLedger, TELEMETRY_AGENTS, TELEMETRY_ENDPOINT, TELEMETRY_ERROR_CATEGORIES, TELEMETRY_EVENTS, TELEMETRY_NOTICE, TELEMETRY_REPORTS, TELEMETRY_SCHEMA_VERSION, TELEMETRY_TIMEOUT_MS, affectedUrls, agentReadiness, aiPromptsForQuery, aiReadiness, aiReferralSourceForValue, aiReferralsReport, aiSearchScorecard, allocateIndexUrlsToProperties, analyticsConnectionsSchema, analyzeAiReferralRows, analyzeCannibalRows, analyzeCtrUnderperformersFromRows, analyzeDecay, analyzeIndexCoverageSignals, analyzeInternalLinksFromRows, analyzePageOpportunitiesFromRows, analyzeQueryClustersFromRows, analyzeQuickWinsFromRows, analyzeSecondPageRows, analyzeSegmentRows, analyzeStrikingDistanceRows, analyzeTrafficAnomalyRows, assertCrawlConfigLimits, assertUrlMatchesGscProperty, attachCrawlRecommendations, auditCrawlPages, auditCrawlRequests, auditLlmsTxt, auditPage, authStatus, boundedSitemapInventory, buildOkfBundle, buildPseoAuditReportFromRows, buildTelemetryPayload, cannibalReport, changeMeasurementCsvRows, checkDatabaseReadiness, classifyCommunityIntent, clearCache, clientProfileSchema, clusterPseoTemplates, clusterQueryRows, collectAgentDiscovery, combineRobotsValues, communityIntentReport, compareCrawlPages, compareCrawlReports, compareSegmentRows, configSchema, contentCoverageRecommendation, contentCoverageType, contentOptimizationFromPageOpportunities, contentOptimizationReport, countLabel, crawlConfigHash, crawlConfigSchema, crawlDefinitionId, crawlDiff, crawlFixToQueueItem, crawlImplementationQueueWorkflow, crawlIssueGroupSchema, crawlIssueSchema, crawlOne, crawlPageSnapshotSchema, crawlReportSchema, crawlReportStore, crawlReportSummarySchema, crawlRequestObservationSchema, crawlRunId, crawlSite, crawlSkipImpact, crawlSkipReasonCountsFromRecord, crawlStatusOnly, crawlTopFixSchema, crawlerJsonSchemas, crawlerRuleCategorySchema, crawlerRuleIdSchema, crawlerRuleInfoSchema, crawlerRuleRecommendationSchema, crawlerRuleSeveritySchema, crawlerSchemas, createAuthorizedClient, createContentGroup, createCrawlReport, createCtrBenchmarkContext, createGoogleAccessTokenClient, createLogger, createPageRenderer, ctrUnderperformersReport, decayClusterDrafts, decayComparisonRange, decayingReport, deleteChange, deleteClient, deleteContentGroup, deleteCrawlReport, deleteTokens, deriveBrandTerms, detectBrandTerms, detectTelemetryAgent, diagnoseCsvFiles, diagnoseProperty, diagnosePropertyWorkflow, effectiveRobotsDirectives, effectiveSnippetControl, ensureSeoCliDirs, entityReadiness, estimateSerpTitleWidth, expectedCtrForPosition, explainOkfValidation, explainRule, fetchCruxFieldData, fetchPage, fetchPageStatus, fetchSearchStatusIncidents, fetchSitemapUrls, fetchText, fileSize, finalGscDateRange, findOverlappingSearchUpdates, formatRelativeExpiry, ga4MatchReason, ga4PropertyIdFromName, ga4ReportQualityWarnings, ga4RequestCanUseCache, ga4RowsToObjects, generateLlmsTxt, geoGaps, geoGapsReport, getAuthModeStatus, getCacheStats, getChange, getClient, getClientConfig, getContentGroup, getDb, getKeywordProvider, getPreviousRun, getPrivacySnapshot, getRepeatedLinkRecoverUrls, getRunPages, getSeoCliPaths, getServiceAccountConfig, getServiceAccountStatus, getTelemetryStatus, getTokenStorageStatus, googleAnalyticsPropertyId, groupCrawlIssues, hasMetaRobotsDirective, hasRule, hasXRobotsDirective, hashKey, indexCoveragePlan, indexCoverageSignals, indexMonitor, indexWatch, inferPseoTemplate, inferTemplateMovement, initializeTelemetry, insertCrawlRun, insertLinkRecoverRun, inspectUrl, internalLinksReport, interpretUpdateCorrelation, isBrandQuery, isCompatibleTechnicalBaseline, isCurrentTechnicalBaseline, isEntityEvidenceSchemaType, isSiteIdentitySchemaType, isSkippableReportError, isTelemetryCi, isTelemetryReport, isoDate, isoWeek, latestCrawlReport, latestCrawlSummaries, latestFinalGscDate, latestIndexWatchSummary, latestLinkRecoverSummary, linkEntries, linkRecover, linkRecoverRecommendation, listChanges, listClients, listContentGroups, listCrawlReports, listGa4AccountSummaries, listGa4DataStreams, listRules, listSearchUpdates, listSites, loadCrawlReport, localCredentialsProvider, loginWithLoopback, makeRunId, matchGa4WebStreams, measureChange, measureCoverage, metaRobotsDirectives, migrateLegacyMacConfig, missingOAuthClientMessage, missingSharedClientLoginMessage, monitoringStatus, monthlyReport, monthlyReportWorkflow, narrativeCsvFiles, normalizeCrawlConfig, normalizeCrawlSkipReasonCounts, normalizeForCoverage, normalizeHttpUrl, normalizeJavaScriptRenderingMode, normalizeLoadedCrawlReport, noteCacheWrite, okfConceptLimit, pageEvidenceRecommendation, pageOpportunitiesReport, parseOlderThan, parsePseoPath, performanceAudit, performanceReportIsCacheable, planDueIndexUrls, planIndexCoverageFromUrls, plural, propertyMatchesUrl, providerPreferenceSchema, pruneIndexWatchSnapshots, pruneLogs, pseoAuditOptions, pseoAuditReport, pseoCsvFiles, pseoIndexStatus, pseoPresentation, publicHttpFetch, queryClusterReport, queryClusterTokens, queryContentCoverageFromPage, queryContentFieldsFromPage, queryFieldCoverage, queryOpportunityRecommendation, queryPageMetrics, queryPageTopQuery, queryPagesMetrics, queryPagesMetricsBatch, queryPagesTopQueries, queryPagesTopQueriesBatch, querySearchAnalytics, quickWinsCsvRows, quickWinsReport, readBoundedResponseText, readConfig, readOauthClient, readTokens, recommendCrawlDiffItem, recommendationForRule, recordChange, redirectTrace, refreshAuthToken, refreshPrioritiesCsvFiles, refreshPrioritiesWorkflow, renderCrawlCsv, renderCrawlHtml, renderCrawlJunit, renderCrawlMarkdownTickets, renderCrawlPagesCsv, renderCrawlPretty, renderCsv, renderPresentationTablesMarkdown, renderPseoMarkdown, renderWorkflowMarkdown, reportNarrative, reportPresentation, requestHeaders, resolveSegmentRanges, resolveSeoCliPaths, resolveTechnicalBaseline, reviewObservations, roundedPosition, runDoctor, runGa4Report, safeError, saveClient, saveCrawlReport, secondPage, segmentComparisonRange, segmentImpact, segmentRangeDays, selectAffectedUrls, selectDueIndexUrls, seoErrorEnvelope, seoToAiQueryReport, sessionSourceInListFilter, setDefaultClient, setTelemetryEnabled, setTokenStorageMode, shiftIsoDate, shouldExcludeBrandQuery, siteSchema, sqliteCrawlReportStore, strikingDistance, summarizeCrawlReport, pageTechnicalSignals as technicalPageSignals, technicalWatchWorkflow, telemetryErrorCategory, templateForUrl, toSeoError, tokenSchema, topCrawlRecommendations, topFixes, trackTelemetryReportComplete, trackTelemetryReportFailed, trackTelemetryReportStart, trackTelemetrySetupComplete, trafficAnomaly, unavailableSegmentImpactReport, unicodeTokens, updateCorrelation, updatePostmortemCsvFiles, updatePostmortemWorkflow, validateOkfFiles, verifyQueryContent, workflowPresentation, writeConfig, writeOauthClient, writeTokens, xRobotsDirectives };
+export { AI_REFERRAL_SOURCES, AI_REFERRAL_SOURCES_VERSION, AI_SEARCH_SCORECARD_METHODOLOGY_ID, AI_SEARCH_SCORECARD_METHODOLOGY_VERSION, AUDIT_PAGE_RULE_IDS, AUTOMATIC_BASELINE_SITE_RETENTION, AUTOMATIC_BASELINE_TOTAL_RETENTION, BING_API_KEY_ENV, BING_API_KEY_SECRET, BROWSER_USER_AGENT, BingWebmasterClient, CANNIBAL_MAXIMUM_DOMINANT_SHARE, CANNIBAL_MINIMUM_PAGE_SHARE, CRAWL_REPORT_STORAGE_VERSION, CRAWL_RUN_RETENTION, CRAWL_SKIP_REASONS, CTR_DEFAULT_LIMIT, CTR_DEFAULT_MIN_IMPRESSIONS, CTR_MAX_LIMIT, CTR_MAX_MIN_IMPRESSIONS, DataForSeoProvider, GSC_FINAL_DATA_LAG_DAYS, GSC_TIME_ZONE, INDEXNOW_ENDPOINT, INDEXNOW_KEYS_SECRET, INDEXNOW_KEY_ENV, INDEXNOW_MAX_URLS, INDEX_WATCH_ATTEMPT_RETENTION, INTERNAL_LINK_LEXICAL_TARGET_LIMIT, INTERNAL_LINK_MATCH_EVIDENCE_LIMIT, JsonFileStorageAdapter, LINK_RECOVER_RUN_RETENTION, LOG_MAX_AGE_MS, LOG_MAX_FILE_BYTES, LOG_MAX_TOTAL_BYTES, LocalCredentialsProvider, MAX_CRAWL_CONCURRENCY, MAX_CRAWL_DEPTH, MAX_CRAWL_PAGES, MAX_CRAWL_TIMEOUT_MS, OKF_DEFAULT_CONCEPTS, OKF_MAX_CONCEPTS, REPORT_BASELINE_MAX_AGE_MS, REPORT_BASELINE_MAX_DEPTH, REPORT_BASELINE_MAX_PAGES, ResponseSizeLimitError, SCORECARD_CHECK_WEIGHTS, SCORECARD_STATUS_CREDIT, SEO_CRAWLER_IDENTITY, SEO_CRAWLER_TOKEN, SEO_CRAWLER_USER_AGENT, SEO_VERSION, SERP_TITLE_REFERENCE_WIDTH_PX, SERP_TITLE_WIDTH_PROFILE, SemrushProvider, SeoError, ServiceAccountAccessTokenClient, SessionLedger, TELEMETRY_AGENTS, TELEMETRY_ENDPOINT, TELEMETRY_ERROR_CATEGORIES, TELEMETRY_EVENTS, TELEMETRY_NOTICE, TELEMETRY_REPORTS, TELEMETRY_SCHEMA_VERSION, TELEMETRY_TIMEOUT_MS, addStatus, affectedUrls, agentReadiness, aiPromptsForQuery, aiReadiness, aiReferralSourceForValue, aiReferralsReport, aiSearchScorecard, allocateIndexUrlsToProperties, analyticsConnectionsSchema, analyzeAiReferralRows, analyzeBingCrawl, analyzeBingDimensions, analyzeBingTraffic, analyzeCannibalRows, analyzeCtrUnderperformersFromRows, analyzeDecay, analyzeIndexCoverageSignals, analyzeInternalLinksFromRows, analyzePageOpportunitiesFromRows, analyzeQueryClustersFromRows, analyzeQuickWinsFromRows, analyzeSecondPageRows, analyzeSegmentRows, analyzeStrikingDistanceRows, analyzeTrafficAnomalyRows, assertCrawlConfigLimits, assertUrlMatchesGscProperty, attachCrawlRecommendations, auditCrawlPages, auditCrawlRequests, auditLlmsTxt, auditPage, authStatus, bingAnalysisDefaults, bingWebmasterOverview, bingWebmasterSiteUrl, boundedSitemapInventory, buildOkfBundle, buildPseoAuditReportFromRows, buildTelemetryPayload, cannibalReport, changeMeasurementCsvRows, checkDatabaseReadiness, classifyCommunityIntent, classifyCrawler, clearCache, clientProfileSchema, clusterPseoTemplates, clusterQueryRows, collectAgentDiscovery, collectBingLinkEvidence, combineRobotsValues, communityIntentReport, compareCrawlPages, compareCrawlReports, compareLinkEvidence, compareSegmentRows, configSchema, contentCoverageRecommendation, contentCoverageType, contentOptimizationFromPageOpportunities, contentOptimizationReport, countLabel, crawlConfigHash, crawlConfigSchema, crawlDefinitionId, crawlDiff, crawlFixToQueueItem, crawlImplementationQueueWorkflow, crawlIssueGroupSchema, crawlIssueSchema, crawlOne, crawlPageSnapshotSchema, crawlReportSchema, crawlReportStore, crawlReportSummarySchema, crawlRequestObservationSchema, crawlRunId, crawlSite, crawlSkipImpact, crawlSkipReasonCountsFromRecord, crawlStatusOnly, crawlTopFixSchema, crawlerJsonSchemas, crawlerRuleCategorySchema, crawlerRuleIdSchema, crawlerRuleInfoSchema, crawlerRuleRecommendationSchema, crawlerRuleSeveritySchema, crawlerSchemas, createAuthorizedClient, createBingWebmasterClient, createContentGroup, createCrawlReport, createCtrBenchmarkContext, createGoogleAccessTokenClient, createIndexNowKey, createIndexNowKeyRecord, createLogger, createPageRenderer, ctrUnderperformersReport, decayClusterDrafts, decayComparisonRange, decayingReport, deleteChange, deleteClient, deleteContentGroup, deleteCrawlReport, deleteProviderSecret, deleteTokens, deriveBrandTerms, detectBrandTerms, detectTelemetryAgent, diagnoseCsvFiles, diagnoseProperty, diagnosePropertyWorkflow, effectiveRobotsDirectives, effectiveSnippetControl, emptyStatusBreakdown, ensureSeoCliDirs, entityReadiness, estimateSerpTitleWidth, expectedCtrForPosition, explainOkfValidation, explainRule, fetchCruxFieldData, fetchPage, fetchPageStatus, fetchSearchStatusIncidents, fetchSitemapUrls, fetchText, fileSize, finalGscDateRange, findOverlappingSearchUpdates, formatRelativeExpiry, ga4MatchReason, ga4PropertyIdFromName, ga4ReportQualityWarnings, ga4RequestCanUseCache, ga4RowsToObjects, generateLlmsTxt, geoGaps, geoGapsReport, getAuthModeStatus, getCacheStats, getChange, getClient, getClientConfig, getContentGroup, getDb, getKeywordProvider, getPreviousRun, getPrivacySnapshot, getRepeatedLinkRecoverUrls, getRunPages, getSeoCliPaths, getServiceAccountConfig, getServiceAccountStatus, getTelemetryStatus, getTokenStorageStatus, googleAnalyticsPropertyId, groupCrawlIssues, hasMetaRobotsDirective, hasRule, hasXRobotsDirective, hashKey, importLinkEvidence, importServerLog, indexCoveragePlan, indexCoverageSignals, indexMonitor, indexWatch, inferPseoTemplate, inferTemplateMovement, initializeTelemetry, insertCrawlRun, insertLinkRecoverRun, inspectUrl, internalLinksReport, interpretUpdateCorrelation, isBrandQuery, isCompatibleTechnicalBaseline, isCurrentTechnicalBaseline, isEntityEvidenceSchemaType, isSiteIdentitySchemaType, isSkippableReportError, isTelemetryCi, isTelemetryReport, isoDate, isoWeek, latestCrawlReport, latestCrawlSummaries, latestFinalGscDate, latestIndexWatchSummary, latestLinkRecoverSummary, linkEntries, linkEvidenceKey, linkEvidenceReport, linkRecover, linkRecoverRecommendation, listChanges, listClients, listContentGroups, listCrawlReports, listGa4AccountSummaries, listGa4DataStreams, listIndexNowKeys, listRules, listSearchUpdates, listSites, loadCrawlReport, localCredentialsProvider, loginWithLoopback, makeRunId, matchGa4WebStreams, measureChange, measureCoverage, metaRobotsDirectives, migrateLegacyMacConfig, missingOAuthClientMessage, missingSharedClientLoginMessage, monitoringStatus, monthlyReport, monthlyReportWorkflow, narrativeCsvFiles, normalizeCrawlConfig, normalizeCrawlSkipReasonCounts, normalizeForCoverage, normalizeHttpUrl, normalizeJavaScriptRenderingMode, normalizeLinkEvidenceRow, normalizeLoadedCrawlReport, noteCacheWrite, okfConceptLimit, pageEvidenceRecommendation, pageOpportunitiesReport, parseCombinedLogLine, parseIndexNowSite, parseJsonLogLine, parseOlderThan, parsePseoPath, performanceAudit, performanceReportIsCacheable, planDueIndexUrls, planIndexCoverageFromUrls, plural, propertyMatchesUrl, providerPreferenceSchema, pruneIndexWatchSnapshots, pruneLogs, pseoAuditOptions, pseoAuditReport, pseoCsvFiles, pseoIndexStatus, pseoPresentation, publicHttpFetch, queryClusterReport, queryClusterTokens, queryContentCoverageFromPage, queryContentFieldsFromPage, queryFieldCoverage, queryOpportunityRecommendation, queryPageMetrics, queryPageTopQuery, queryPagesMetrics, queryPagesMetricsBatch, queryPagesTopQueries, queryPagesTopQueriesBatch, querySearchAnalytics, quickWinsCsvRows, quickWinsReport, readBoundedResponseText, readConfig, readOauthClient, readProviderSecret, readTokens, recommendCrawlDiffItem, recommendationForRule, recordChange, redirectTrace, refreshAuthToken, refreshPrioritiesCsvFiles, refreshPrioritiesWorkflow, removeIndexNowKey, renderCrawlCsv, renderCrawlHtml, renderCrawlJunit, renderCrawlMarkdownTickets, renderCrawlPagesCsv, renderCrawlPretty, renderCsv, renderPresentationTablesMarkdown, renderPseoMarkdown, renderReportHtml, renderWorkflowMarkdown, reportNarrative, reportPresentation, requestHeaders, resolveIndexNowKey, resolveSegmentRanges, resolveSeoCliPaths, resolveTechnicalBaseline, reviewObservations, roundedPosition, runDoctor, runGa4Report, safeError, saveClient, saveCrawlReport, saveIndexNowKey, secondPage, segmentComparisonRange, segmentImpact, segmentRangeDays, selectAffectedUrls, selectDueIndexUrls, seoErrorEnvelope, seoToAiQueryReport, serverLogReport, sessionSourceInListFilter, setClientBingSite, setDefaultClient, setTelemetryEnabled, setTokenStorageMode, shiftIsoDate, shouldExcludeBrandQuery, siteSchema, sqliteCrawlReportStore, strikingDistance, submitIndexNow, summarizeCrawlReport, pageTechnicalSignals as technicalPageSignals, technicalWatchWorkflow, telemetryErrorCategory, templateForUrl, toSeoError, tokenSchema, topCrawlRecommendations, topFixes, trackTelemetryReportComplete, trackTelemetryReportFailed, trackTelemetryReportStart, trackTelemetrySetupComplete, trafficAnomaly, unavailableSegmentImpactReport, unicodeTokens, updateCorrelation, updatePostmortemCsvFiles, updatePostmortemWorkflow, validateIndexNowKey, validateIndexNowKeyRecord, validateOkfFiles, verifyIndexNowKey, verifyQueryContent, workflowPresentation, writeConfig, writeOauthClient, writeProviderSecret, writeTokens, xRobotsDirectives };
 
 //# sourceMappingURL=index.js.map