seo 0.4.1 → 0.5.0

package/dist/index.js

@@ -1,14 +1,14 @@
 import { createRequire as __seoCreateRequire } from 'node:module'; const require = __seoCreateRequire(import.meta.url);
-import { n as load, t as version } from "./package-CeYsRRpB.js";
+import { n as load, t as version } from "./package-CsRkLZGn.js";
 import { SEO_PROVIDER_API_VERSION } from "./provider-sdk.js";
 import crypto, { createHash, randomUUID, sign } from "node:crypto";
 import { z } from "zod";
-import { chmodSync, createReadStream, createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
-import { arch, homedir, platform, totalmem } from "node:os";
+import { arch, homedir, hostname, platform, totalmem } from "node:os";
 import { basename, dirname, extname, isAbsolute, join, relative, resolve } from "node:path";
+import open from "open";
+import { chmodSync, createReadStream, createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import lockfile from "proper-lockfile";
 import http from "node:http";
-import open from "open";
 import { Headers as Headers$1, fetch as fetch$1 } from "undici";
 import Libsql from "libsql";
 import { Parser } from "htmlparser2";
@@ -1596,6 +1596,327 @@ async function runAnalyticsReport(gfetch, propertyId, body, options) {
 	});
 }
 //#endregion
+//#region packages/core/src/bing/api.ts
+const BASE = "https://ssl.bing.com/webmaster/api.svc/json";
+const MAX_BYTES$1 = 8e6;
+function bingCall(auth, options) {
+	return async (method, params = {}) => {
+		const url = new URL(`${BASE}/${method}`);
+		for (const [name, value] of Object.entries(params)) url.searchParams.set(name, value);
+		const headers = { accept: "application/json" };
+		if ("apiKey" in auth) url.searchParams.set("apikey", auth.apiKey);
+		else headers.authorization = `Bearer ${await auth.accessToken()}`;
+		let response;
+		try {
+			response = await fetch(url, {
+				headers,
+				signal: AbortSignal.timeout(3e4)
+			});
+		} catch (error) {
+			throw new SeoError("OPTIONAL_PROVIDER_UNAVAILABLE", `Bing Webmaster did not respond: ${error instanceof Error ? error.message : String(error)}`);
+		}
+		if (!response.ok) {
+			const detail = (await response.text().catch(() => "")).slice(0, 200);
+			if (response.status === 401 || /invalidapikey/i.test(detail)) throw new SeoError("AUTH_REQUIRED", `Bing Webmaster rejected the sign-in. ${options.signIn}`);
+			if (response.status === 403 || /notauthorized/i.test(detail)) throw new SeoError("ACCESS_DENIED", "Bing Webmaster denied access to this site. It must be verified in the connected Bing account.");
+			if (/ThrottleIP/i.test(detail)) throw new SeoError("RATE_LIMITED", "Bing Webmaster is blocking requests from this network (ThrottleIP). Run the same report with the CLI on your own machine, where Bing answers.");
+			if (response.status === 429 || /throttle/i.test(detail)) throw new SeoError("RATE_LIMITED", "Bing Webmaster is limiting requests. Try again in a few minutes.");
+			throw new SeoError("OPTIONAL_PROVIDER_UNAVAILABLE", `Bing Webmaster answered ${response.status}. ${detail}`.trim());
+		}
+		return (await readJson(response, "Bing Webmaster", { maxBytes: MAX_BYTES$1 })).d;
+	};
+}
+//#endregion
+//#region packages/core/src/gsc/dates.ts
+const GSC_TIME_ZONE = "America/Los_Angeles";
+const GSC_FINAL_DATA_LAG_DAYS = 4;
+function dateInTimeZone(now, timeZone) {
+	const parts = Object.fromEntries(new Intl.DateTimeFormat("en-US", {
+		timeZone,
+		year: "numeric",
+		month: "2-digit",
+		day: "2-digit"
+	}).formatToParts(now).map((part) => [part.type, part.value]));
+	return new Date(Date.UTC(Number(parts.year), Number(parts.month) - 1, Number(parts.day)));
+}
+function shiftIsoDate(date, days) {
+	const value = /* @__PURE__ */ new Date(`${date}T00:00:00.000Z`);
+	value.setUTCDate(value.getUTCDate() + days);
+	return value.toISOString().slice(0, 10);
+}
+function latestFinalGscDate(now = /* @__PURE__ */ new Date()) {
+	const pacificToday = dateInTimeZone(now, GSC_TIME_ZONE);
+	pacificToday.setUTCDate(pacificToday.getUTCDate() - 4);
+	return pacificToday.toISOString().slice(0, 10);
+}
+function finalGscDateRange(days = 28, now = /* @__PURE__ */ new Date()) {
+	const endDate = latestFinalGscDate(now);
+	return {
+		startDate: shiftIsoDate(endDate, -(days - 1)),
+		endDate
+	};
+}
+//#endregion
+//#region packages/core/src/analyze/site-diagnostics/quick-wins-report-input.ts
+function integerOption$1(input) {
+	if (input.value === void 0) return input.fallback;
+	if (!Number.isInteger(input.value) || input.value < input.minimum || input.value > input.maximum) throw new SeoError("INVALID_INPUT", `${input.label} must be a whole number between ${input.minimum} and ${input.maximum}.`);
+	return input.value;
+}
+function defaultDateRange$2(days, now) {
+	return finalGscDateRange(days, now);
+}
+function explicitDateRange(input, maximumDays) {
+	if (!input.startDate && !input.endDate) return void 0;
+	if (!input.startDate || !input.endDate) throw new SeoError("INVALID_INPUT", "Start date and end date must be provided together.");
+	const pattern = /^\d{4}-\d{2}-\d{2}$/;
+	const start = /* @__PURE__ */ new Date(`${input.startDate}T00:00:00.000Z`);
+	const end = /* @__PURE__ */ new Date(`${input.endDate}T00:00:00.000Z`);
+	if (!pattern.test(input.startDate) || !pattern.test(input.endDate) || Number.isNaN(start.getTime()) || Number.isNaN(end.getTime()) || start.toISOString().slice(0, 10) !== input.startDate || end.toISOString().slice(0, 10) !== input.endDate || start > end) throw new SeoError("INVALID_INPUT", "Start date and end date must be valid YYYY-MM-DD values in ascending order.");
+	const days = Math.floor((end.getTime() - start.getTime()) / 864e5) + 1;
+	if (days > maximumDays) throw new SeoError("INVALID_INPUT", `Date range must not exceed ${maximumDays} days.`);
+	return {
+		range: {
+			startDate: input.startDate,
+			endDate: input.endDate
+		},
+		days
+	};
+}
+//#endregion
+//#region packages/core/src/analyze/site-diagnostics/decay-report-input.ts
+function decayNumberOption(input) {
+	const value = input.value ?? input.fallback;
+	if (!Number.isFinite(value) || value < input.minimum || value > input.maximum) throw new SeoError("INVALID_INPUT", `${input.label} must be between ${input.minimum} and ${input.maximum}.`);
+	return value;
+}
+function rangeDays$1(range) {
+	return Math.floor(((/* @__PURE__ */ new Date(`${range.endDate}T00:00:00.000Z`)).getTime() - (/* @__PURE__ */ new Date(`${range.startDate}T00:00:00.000Z`)).getTime()) / 864e5) + 1;
+}
+function dateString(date) {
+	return date.toISOString().slice(0, 10);
+}
+function subtractDays$1(value, days) {
+	const date = /* @__PURE__ */ new Date(`${value}T00:00:00.000Z`);
+	date.setUTCDate(date.getUTCDate() - days);
+	return dateString(date);
+}
+function priorYearDate(value) {
+	const source = /* @__PURE__ */ new Date(`${value}T00:00:00.000Z`);
+	const year = source.getUTCFullYear() - 1;
+	const month = source.getUTCMonth();
+	const day = source.getUTCDate();
+	const candidate = new Date(Date.UTC(year, month, day));
+	if (candidate.getUTCMonth() !== month) return dateString(new Date(Date.UTC(year, month + 1, 0)));
+	return dateString(candidate);
+}
+function subtractCalendarMonths(date, months) {
+	const day = date.getUTCDate();
+	const target = new Date(Date.UTC(date.getUTCFullYear(), date.getUTCMonth() - months, 1));
+	const lastDay = new Date(Date.UTC(target.getUTCFullYear(), target.getUTCMonth() + 1, 0)).getUTCDate();
+	target.setUTCDate(Math.min(day, lastDay));
+	return dateString(target);
+}
+function validateDecayRanges(input) {
+	const latestFinalDate = defaultDateRange$2(1, input.now).endDate;
+	if (input.current.endDate > latestFinalDate) throw new SeoError("INVALID_INPUT", `Decay end date must be ${latestFinalDate} or earlier so both GSC windows use final data.`);
+	const pacificToday = /* @__PURE__ */ new Date(`${latestFinalDate}T00:00:00.000Z`);
+	pacificToday.setUTCDate(pacificToday.getUTCDate() + 4);
+	const retentionStart = subtractCalendarMonths(pacificToday, 16);
+	if (input.previous.startDate < retentionStart) throw new SeoError("INVALID_INPUT", `Comparison range starts before Search Console's rolling 16-month API history (${retentionStart}). Choose a shorter range or use previously stored data.`);
+}
+function decayComparisonRange(current, comparison = "previous-period") {
+	const days = rangeDays$1(current);
+	if (comparison === "year-over-year") {
+		const endDate = priorYearDate(current.endDate);
+		return {
+			startDate: subtractDays$1(endDate, days - 1),
+			endDate
+		};
+	}
+	const endDate = subtractDays$1(current.startDate, 1);
+	return {
+		startDate: subtractDays$1(endDate, days - 1),
+		endDate
+	};
+}
+//#endregion
+//#region packages/core/src/updates/search-updates.ts
+function classifyUpdate(name, product) {
+	const lower = `${name} ${product}`.toLowerCase();
+	if (lower.includes("core")) return "core";
+	if (lower.includes("spam")) return "spam";
+	if (lower.includes("discover")) return "discover";
+	if (lower.includes("ranking")) return "ranking";
+	if (lower.includes("index")) return "indexing";
+	if (lower.includes("serving")) return "serving";
+	return "other";
+}
+function searchUpdatesFromIncidents(incidents, input = {}) {
+	const product = input.product?.toLowerCase();
+	return incidents.filter((incident) => !product || incident.service_name.toLowerCase() === product).map((incident) => {
+		const status = incident.end ? "complete" : incident.status_impact === "SERVICE_INFORMATION" ? "rolling-out" : "incident";
+		return {
+			id: incident.id,
+			name: incident.external_desc,
+			type: classifyUpdate(incident.external_desc, incident.service_name),
+			product: incident.service_name,
+			start: incident.begin,
+			end: incident.end,
+			status,
+			sourceUrl: `https://status.search.google.com/${incident.uri}`
+		};
+	}).slice(0, input.limit ?? 25);
+}
+function findOverlappingSearchUpdates(input) {
+	const paddingMs = (input.paddingDays ?? 3) * 864e5;
+	const windowStart = new Date(input.startDate).getTime() - paddingMs;
+	const windowEnd = new Date(input.endDate).getTime() + paddingMs;
+	return input.updates.filter((update) => {
+		const updateStart = new Date(update.start).getTime();
+		const updateEnd = update.end ? new Date(update.end).getTime() : Date.now();
+		return updateStart <= windowEnd && updateEnd >= windowStart;
+	});
+}
+//#endregion
+//#region packages/core/src/commands/types.ts
+var CommandError = class extends Error {
+	code;
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+	}
+};
+const ADVICE_KEYS = /^(recommendations?|actions?|advice|suggested[A-Z]\w*|nextSteps?)$/;
+function factsOnly(value) {
+	if (Array.isArray(value)) return value.map(factsOnly);
+	if (value && typeof value === "object") return Object.fromEntries(Object.entries(value).filter(([key]) => !ADVICE_KEYS.test(key)).map(([key, child]) => [key, factsOnly(child)]));
+	return value;
+}
+function matchProperty(names, site) {
+	if (names.includes(site)) return site;
+	let host;
+	let origin;
+	try {
+		const url = new URL(site.includes("://") ? site : `https://${site.replace(/^sc-domain:/, "")}`);
+		host = url.hostname.replace(/^www\./, "");
+		origin = url.origin;
+	} catch {
+		return null;
+	}
+	const domain = names.filter((name) => name.startsWith("sc-domain:")).map((name) => name.slice(10)).filter((name) => host === name || host.endsWith(`.${name}`)).sort((a, b) => b.length - a.length)[0];
+	if (domain) return `sc-domain:${domain}`;
+	return names.find((name) => name === `${origin}/` || name === `${origin.replace("://", "://www.")}/` || name === `${origin.replace("://www.", "://")}/`) ?? null;
+}
+//#endregion
+//#region packages/core/src/commands/sites.ts
+async function readableSites(google, signIn) {
+	return (await listSearchConsoleSites(google, { signIn })).filter((entry) => entry.permissionLevel !== "siteUnverifiedUser").map((entry) => ({
+		siteUrl: entry.siteUrl,
+		permissionLevel: entry.permissionLevel ?? ""
+	})).sort((a, b) => a.siteUrl.localeCompare(b.siteUrl));
+}
+//#endregion
+//#region packages/core/src/commands/linked.ts
+const MAX_ROWS$1 = 1e5;
+const PERMISSION_RANK = {
+	siteOwner: 0,
+	siteFullUser: 1,
+	siteRestrictedUser: 2
+};
+function bingRouter(calls) {
+	if (calls.length === 0) return null;
+	const only = calls[0];
+	if (calls.length === 1 && only) return only;
+	let lists;
+	const sitesOf = () => {
+		lists ??= Promise.all(calls.map(async (call) => ({
+			call,
+			sites: await call("GetUserSites").then((data) => Array.isArray(data) ? data : []).catch(() => [])
+		})));
+		return lists;
+	};
+	return async (method, params = {}) => {
+		const all = await sitesOf();
+		if (method === "GetUserSites") return all.flatMap((item) => item.sites);
+		return (all.find((item) => item.sites.some((entry) => entry.IsVerified === true && entry.Url === params.siteUrl))?.call ?? only)(method, params);
+	};
+}
+var LinkedAccounts = class {
+	hint;
+	google;
+	bing;
+	sites = /* @__PURE__ */ new Map();
+	owners;
+	constructor(input, hint) {
+		this.hint = hint;
+		this.google = input.google.map((account) => ({
+			email: account.email,
+			google: bearerFetch(account.token)
+		}));
+		this.bing = bingRouter(input.bing);
+	}
+	accounts() {
+		return this.google.map((linked) => ({
+			email: linked.email,
+			google: linked.google
+		}));
+	}
+	sitesOf(linked) {
+		let found = this.sites.get(linked);
+		if (!found) {
+			found = readableSites(linked.google, this.hint.signIn);
+			this.sites.set(linked, found);
+		}
+		return found;
+	}
+	ownerMap() {
+		this.owners ??= (async () => {
+			const lists = await Promise.all(this.google.map(async (linked) => ({
+				linked,
+				sites: await this.sitesOf(linked).catch((error) => {
+					if (this.google.length === 1) throw error;
+					return [];
+				})
+			})));
+			const best = /* @__PURE__ */ new Map();
+			for (const { linked, sites } of lists) for (const site of sites) {
+				const rank = PERMISSION_RANK[site.permissionLevel] ?? 3;
+				const found = best.get(site.siteUrl);
+				if (!found || rank < found.rank) best.set(site.siteUrl, {
+					linked,
+					rank
+				});
+			}
+			return new Map([...best].map(([site, { linked }]) => [site, linked]));
+		})();
+		return this.owners;
+	}
+	async resolve(site) {
+		if (this.google.length === 0) throw new CommandError("NOT_CONNECTED", `No Google account is connected. ${this.hint.signIn}`);
+		const found = matchProperty([...(await this.ownerMap()).keys()], site);
+		if (found) return found;
+		throw new CommandError("NO_ACCESS", `None of the connected Google accounts (${this.google.map((linked) => linked.email).join(", ")}) has a Search Console property for ${site}. ${this.hint.addGoogle}`);
+	}
+	async owner(site) {
+		const owner = (await this.ownerMap()).get(await this.resolve(site));
+		if (!owner) throw new CommandError("NO_ACCESS", `No access to ${site}.`);
+		return owner;
+	}
+	searchAnalytics() {
+		return async (site, body) => searchAnalyticsRows((await this.owner(site)).google, site, {
+			...body,
+			maxRows: body.maxRows ?? body.rowLimit ?? MAX_ROWS$1
+		}, { signIn: this.hint.signIn });
+	}
+	async inspect(site, url) {
+		return inspectSearchConsoleUrl((await this.owner(site)).google, site, url, {
+			signIn: this.hint.signIn,
+			languageCode: "en-US"
+		});
+	}
+};
+//#endregion
 //#region packages/core/src/paths.ts
 let memoizedPaths;
 function defaultConfigDir(input) {
@@ -1692,6 +2013,189 @@ function fileSize(path) {
 	}
 }
 //#endregion
+//#region packages/core/src/storage/files.ts
+function ensureParentDir(path, mode = 448) {
+	mkdirSync(dirname(path), {
+		recursive: true,
+		mode
+	});
+}
+function readJsonFile(path) {
+	try {
+		return JSON.parse(readFileSync(path, "utf8"));
+	} catch {
+		return;
+	}
+}
+function writeJsonAtomic(path, data, mode) {
+	ensureParentDir(path);
+	const tmp = `${path}.${process.pid}.${Date.now()}.tmp`;
+	writeFileSync(tmp, JSON.stringify(data, null, 2), {
+		encoding: "utf8",
+		mode
+	});
+	chmodSync(tmp, mode);
+	renameSync(tmp, path);
+	chmodSync(path, mode);
+}
+function fileMode(path) {
+	try {
+		return `0${(statSync(path).mode & 511).toString(8)}`;
+	} catch {
+		return "missing";
+	}
+}
+function safeRemove(path) {
+	rmSync(path, {
+		recursive: true,
+		force: true
+	});
+}
+//#endregion
+//#region packages/core/src/cloud.ts
+const CLOUD_URL = "https://seoskill.dev";
+const PRIVATE = 384;
+const EARLY = 6e4;
+const linkFile = () => join(getSeoCliPaths().configDir, "cloud.json");
+const pendingFile = () => join(getSeoCliPaths().configDir, "cloud-login.json");
+function cloudToken() {
+	const fromEnv = process.env.SEO_TOKEN?.trim();
+	if (fromEnv) return fromEnv;
+	return readJsonFile(linkFile())?.token;
+}
+function cloudLinked() {
+	return Boolean(cloudToken());
+}
+const CLOUD_SIGN_IN = "Run `seo login` to link this machine to your seoskill.dev account again.";
+async function call$1(path, init = {}) {
+	const response = await fetch(`${CLOUD_URL}${path}`, {
+		...init,
+		headers: {
+			"content-type": "application/json",
+			...init.token ? { authorization: `Bearer ${init.token}` } : {}
+		}
+	}).catch(() => {
+		throw new SeoError("PROVIDER_UNAVAILABLE", `Could not reach ${CLOUD_URL}. Check the network and try again.`);
+	});
+	const body = await readJson(response, "seoskill.dev").catch(() => ({}));
+	return {
+		ok: response.ok,
+		status: response.status,
+		body
+	};
+}
+let credentials;
+function expiresSoon(value) {
+	return [...value.google, ...value.bing].some((item) => "expiresAt" in item && item.expiresAt - EARLY < Date.now());
+}
+async function cloudCredentials() {
+	const current = credentials ? await credentials.catch(() => null) : null;
+	if (current && !expiresSoon(current)) return current;
+	credentials = (async () => {
+		const token = cloudToken();
+		if (!token) throw new SeoError("AUTH_REQUIRED", notSignedIn());
+		const result = await call$1("/account/cli/credentials", { token });
+		if (result.status === 401) throw new SeoError("AUTH_EXPIRED", `This machine is not linked to a seoskill.dev account any more. ${CLOUD_SIGN_IN}`);
+		if (!result.ok) throw new SeoError("PROVIDER_UNAVAILABLE", `seoskill.dev returned ${result.status}. Try again in a minute.`);
+		return result.body;
+	})();
+	return credentials;
+}
+function notSignedIn() {
+	return "Not signed in. Run `seo login` to use your seoskill.dev account on this machine (it prints a link to approve), or `seo auth login` to sign in with Google on this machine only.";
+}
+function tokenOf(item, what) {
+	if ("error" in item) throw new SeoError("AUTH_EXPIRED", `${what}: ${item.error}`);
+	return item.token;
+}
+async function cloudGoogleToken(email) {
+	const { google, account } = await cloudCredentials();
+	const found = email ? google.find((item) => item.email.toLowerCase() === email.toLowerCase()) : google[0];
+	if (!found) throw new SeoError("AUTH_REQUIRED", email ? `${email} is not linked to your seoskill.dev account. Add it at ${account}#google.` : `No Google account is linked to your seoskill.dev account. Add one at ${account}#google.`);
+	return tokenOf(found, `Google sign-in for ${found.email}`);
+}
+async function cloudGoogleEmails() {
+	return (await cloudCredentials()).google.map((item) => item.email);
+}
+let linked;
+async function cloudAccountFor(site) {
+	if (!cloudLinked()) return void 0;
+	linked ??= cloudGoogleEmails().then((emails) => new LinkedAccounts({
+		google: emails.map((email) => ({
+			email,
+			token: () => cloudGoogleToken(email)
+		})),
+		bing: []
+	}, {
+		signIn: CLOUD_SIGN_IN,
+		addGoogle: "Add it on your seoskill.dev account page."
+	}));
+	const accounts = await linked;
+	if (accounts.google.length < 2) return accounts.google[0]?.email;
+	return (await accounts.owner(site)).email;
+}
+async function cloudBing() {
+	const { bing, account } = await cloudCredentials();
+	return bingRouter(bing.map((_, index) => bingCall({ accessToken: async () => {
+		const item = (await cloudCredentials()).bing[index];
+		if (!item) throw new SeoError("AUTH_EXPIRED", CLOUD_SIGN_IN);
+		return tokenOf(item, "Bing sign-in");
+	} }, { signIn: `Reconnect Bing at ${account}.` })));
+}
+async function cloudKeys() {
+	return (await cloudCredentials()).keys;
+}
+async function startCloudLogin() {
+	const result = await call$1("/account/cli/start", {
+		method: "POST",
+		body: JSON.stringify({ label: `seo on ${hostname().split(".")[0] || "this machine"}`.slice(0, 60) })
+	});
+	const { device, code, url, expiresIn } = result.body;
+	if (!result.ok || !device || !code || !url) throw new SeoError("PROVIDER_UNAVAILABLE", `seoskill.dev could not start a login (${result.status}). Try again.`);
+	const pending = {
+		device,
+		code,
+		url,
+		expiresAt: Date.now() + (expiresIn ?? 600) * 1e3
+	};
+	ensureSeoCliDirs();
+	writeJsonAtomic(pendingFile(), pending, PRIVATE);
+	return pending;
+}
+function pendingCloudLogin() {
+	const pending = readJsonFile(pendingFile());
+	if (!pending || pending.expiresAt < Date.now()) return null;
+	return pending;
+}
+async function finishCloudLogin() {
+	const pending = pendingCloudLogin();
+	if (!pending) return "expired";
+	const result = await call$1("/account/cli/token", {
+		method: "POST",
+		body: JSON.stringify({ device: pending.device })
+	});
+	if (result.body.error === "pending") return "pending";
+	safeRemove(pendingFile());
+	if (!result.ok || !result.body.token) return "expired";
+	writeJsonAtomic(linkFile(), { token: result.body.token }, PRIVATE);
+	credentials = void 0;
+	return "linked";
+}
+async function cloudLogout() {
+	const token = readJsonFile(linkFile())?.token;
+	if (!token) return false;
+	await call$1("/account/cli/logout", {
+		method: "POST",
+		token
+	}).catch(() => void 0);
+	safeRemove(linkFile());
+	credentials = void 0;
+	return true;
+}
+async function openCloudLink(url) {
+	await open(url).catch(() => void 0);
+}
+//#endregion
 //#region packages/core/src/types/auth.ts
 const tokenSchema = z.object({
 	provider: z.literal("google"),
@@ -1747,78 +2251,39 @@ const analyticsProviderSchema = z.enum(["google", "clicky"]);
 const analyticsExtensionIdSchema = z.string().min(1).max(64).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/u);
 const analyticsExtensionAccountSchema = z.record(z.string().min(1).max(64).regex(/^[A-Za-z][A-Za-z0-9-]*$/u).refine((value) => ![
 	"constructor",
-	"prototype",
-	"__proto__"
-].includes(value)), z.string().trim().min(1).max(1e3)).refine((value) => Object.keys(value).length <= 16, { message: "An analytics provider account can have at most 16 fields." });
-const providerConnectionAccountsSchema = z.record(providerIdSchema, analyticsExtensionAccountSchema).refine((value) => Object.keys(value).length <= 20, { message: "There can be at most 20 provider connection records." });
-const analyticsConnectionSchema = z.discriminatedUnion("provider", [
-	z.object({
-		provider: z.literal("google"),
-		propertyId: z.string(),
-		accountEmail: z.string().email().optional()
-	}),
-	z.object({
-		provider: z.literal("clicky"),
-		siteId: z.string().regex(/^\d{1,30}$/u)
-	}),
-	z.object({
-		provider: z.literal("extension"),
-		providerId: analyticsExtensionIdSchema,
-		account: analyticsExtensionAccountSchema
-	})
-]);
-const configSchema = z.looseObject({
-	providers: z.object({
-		dataForSeoLogin: z.string().optional(),
-		dataForSeoPassword: z.string().optional(),
-		prefer: providerPreferenceSchema.default("cheap"),
-		connections: providerConnectionAccountsSchema.optional()
-	}).default({ prefer: "cheap" }),
-	security: z.object({ useKeychain: z.boolean().default(true) }).default({ useKeychain: true }),
-	auth: z.object({
-		sharedClientId: z.string().optional(),
-		sharedClientSecret: z.string().optional()
-	}).default({})
-});
-//#endregion
-//#region packages/core/src/storage/files.ts
-function ensureParentDir(path, mode = 448) {
-	mkdirSync(dirname(path), {
-		recursive: true,
-		mode
-	});
-}
-function readJsonFile(path) {
-	try {
-		return JSON.parse(readFileSync(path, "utf8"));
-	} catch {
-		return;
-	}
-}
-function writeJsonAtomic(path, data, mode) {
-	ensureParentDir(path);
-	const tmp = `${path}.${process.pid}.${Date.now()}.tmp`;
-	writeFileSync(tmp, JSON.stringify(data, null, 2), {
-		encoding: "utf8",
-		mode
-	});
-	chmodSync(tmp, mode);
-	renameSync(tmp, path);
-	chmodSync(path, mode);
-}
-function fileMode(path) {
-	try {
-		return `0${(statSync(path).mode & 511).toString(8)}`;
-	} catch {
-		return "missing";
-	}
-}
-function safeRemove(path) {
-	rmSync(path, {
-		recursive: true,
-		force: true
-	});
-}
+	"prototype",
+	"__proto__"
+].includes(value)), z.string().trim().min(1).max(1e3)).refine((value) => Object.keys(value).length <= 16, { message: "An analytics provider account can have at most 16 fields." });
+const providerConnectionAccountsSchema = z.record(providerIdSchema, analyticsExtensionAccountSchema).refine((value) => Object.keys(value).length <= 20, { message: "There can be at most 20 provider connection records." });
+const analyticsConnectionSchema = z.discriminatedUnion("provider", [
+	z.object({
+		provider: z.literal("google"),
+		propertyId: z.string(),
+		accountEmail: z.string().email().optional()
+	}),
+	z.object({
+		provider: z.literal("clicky"),
+		siteId: z.string().regex(/^\d{1,30}$/u)
+	}),
+	z.object({
+		provider: z.literal("extension"),
+		providerId: analyticsExtensionIdSchema,
+		account: analyticsExtensionAccountSchema
+	})
+]);
+const configSchema = z.looseObject({
+	providers: z.object({
+		dataForSeoLogin: z.string().optional(),
+		dataForSeoPassword: z.string().optional(),
+		prefer: providerPreferenceSchema.default("cheap"),
+		connections: providerConnectionAccountsSchema.optional()
+	}).default({ prefer: "cheap" }),
+	security: z.object({ useKeychain: z.boolean().default(true) }).default({ useKeychain: true }),
+	auth: z.object({
+		sharedClientId: z.string().optional(),
+		sharedClientSecret: z.string().optional()
+	}).default({})
+});
 let loadedKeyring;
 async function resolveKeyring() {
 	if (!loadedKeyring) loadedKeyring = import("@napi-rs/keyring/keytar.js").then((module) => module);
@@ -2407,7 +2872,7 @@ async function exchangeGoogleCode(input, fetchImpl = fetch) {
 //#region packages/core/src/gsc/auth/authorized-client.ts
 const REFRESH_BUFFER_MS = 6e4;
 function authRequired(accountEmail) {
-	return new SeoError("AUTH_REQUIRED", accountEmail ? `Google account ${accountEmail} is not connected. Run \`seo auth login\` first.` : "Not logged in. Run `seo auth login` first.");
+	return new SeoError("AUTH_REQUIRED", accountEmail ? `Google account ${accountEmail} is not connected. Run \`seo auth login\` first.` : notSignedIn());
 }
 function authExpired() {
 	return new SeoError("AUTH_EXPIRED", "Google refresh token is no longer valid. Run `seo auth login` again.");
@@ -2506,6 +2971,18 @@ async function createGoogleAccessTokenClient(accountEmail) {
 			accountEmail: serviceAccount.clientEmail
 		}
 	};
+	if (cloudLinked()) {
+		const email = accountEmail ?? (await cloudGoogleEmails())[0] ?? "";
+		return {
+			client: { getAccessToken: () => cloudGoogleToken(email || void 0) },
+			mode: "cloud",
+			identity: email,
+			quotaIdentity: {
+				clientId: "seoskill.dev",
+				accountEmail: email
+			}
+		};
+	}
 	const { client, tokens } = await createAuthorizedClient(accountEmail);
 	const clientConfig = requireClientConfig(tokens);
 	return {
@@ -6696,7 +7173,7 @@ function inspectionResponseError(response, input) {
 }
 async function inspectUrl(input) {
 	const inspectionUrl = assertUrlMatchesGscProperty(input.siteUrl, input.inspectionUrl);
-	const { client, quotaIdentity } = await getAuthorized(input.accountEmail);
+	const { client, quotaIdentity } = await getAuthorized(input.accountEmail ?? await cloudAccountFor(input.siteUrl));
 	const reservation = reserveUrlInspectionQuota({
 		credentialKey: credentialKey(quotaIdentity),
 		property: input.siteUrl,
@@ -6746,36 +7223,6 @@ async function inspectUrl(input) {
 	return await readJson(response, "URL Inspection");
 }
 //#endregion
-//#region packages/core/src/gsc/dates.ts
-const GSC_TIME_ZONE = "America/Los_Angeles";
-const GSC_FINAL_DATA_LAG_DAYS = 4;
-function dateInTimeZone(now, timeZone) {
-	const parts = Object.fromEntries(new Intl.DateTimeFormat("en-US", {
-		timeZone,
-		year: "numeric",
-		month: "2-digit",
-		day: "2-digit"
-	}).formatToParts(now).map((part) => [part.type, part.value]));
-	return new Date(Date.UTC(Number(parts.year), Number(parts.month) - 1, Number(parts.day)));
-}
-function shiftIsoDate(date, days) {
-	const value = /* @__PURE__ */ new Date(`${date}T00:00:00.000Z`);
-	value.setUTCDate(value.getUTCDate() + days);
-	return value.toISOString().slice(0, 10);
-}
-function latestFinalGscDate(now = /* @__PURE__ */ new Date()) {
-	const pacificToday = dateInTimeZone(now, GSC_TIME_ZONE);
-	pacificToday.setUTCDate(pacificToday.getUTCDate() - 4);
-	return pacificToday.toISOString().slice(0, 10);
-}
-function finalGscDateRange(days = 28, now = /* @__PURE__ */ new Date()) {
-	const endDate = latestFinalGscDate(now);
-	return {
-		startDate: shiftIsoDate(endDate, -(days - 1)),
-		endDate
-	};
-}
-//#endregion
 //#region packages/core/src/gsc/client/search-analytics.ts
 function searchDateRange(days) {
 	return finalGscDateRange(days);
@@ -6784,7 +7231,7 @@ function resolveSearchDateWindow(input = 28) {
 	return typeof input === "number" ? searchDateRange(input) : input;
 }
 async function querySearchAnalytics(site, body, opts = {}) {
-	const { client, identity } = await getAuthorized(opts.accountEmail);
+	const { client, identity } = await getAuthorized(opts.accountEmail ?? await cloudAccountFor(site));
 	const db = getDb();
 	const queryHash = hashKey([
 		site,
@@ -6943,12 +7390,21 @@ async function queryPagesTopQueriesBatch(site, pageUrls, range = 28) {
 //#endregion
 //#region packages/core/src/gsc/client/sites.ts
 async function listSites(_refresh = false, accountEmail) {
-	const { client } = await getAuthorized(accountEmail);
-	const entries = await listSearchConsoleSites(googleFetchFor(client), LOCAL_SIGN_IN);
+	const entries = !accountEmail && cloudLinked() ? await allCloudSites() : await listSearchConsoleSites(googleFetchFor((await getAuthorized(accountEmail)).client), LOCAL_SIGN_IN);
 	const insert = getDb().prepare("INSERT OR REPLACE INTO sites (site_url, display_name, permission, added_at, is_default) VALUES (?, ?, ?, ?, COALESCE((SELECT is_default FROM sites WHERE site_url = ?), 0))");
 	for (const site of entries) insert.run(site.siteUrl, site.siteUrl, site.permissionLevel ?? null, Date.now(), site.siteUrl);
 	return entries;
 }
+async function allCloudSites() {
+	const lists = await Promise.all((await cloudGoogleEmails()).map(async (email) => listSearchConsoleSites(googleFetchFor((await getAuthorized(email)).client), LOCAL_SIGN_IN)));
+	const best = /* @__PURE__ */ new Map();
+	const rank = (site) => PERMISSION_RANK[site.permissionLevel ?? ""] ?? 3;
+	for (const site of lists.flat()) {
+		const found = best.get(site.siteUrl);
+		if (!found || rank(site) < rank(found)) best.set(site.siteUrl, site);
+	}
+	return [...best.values()];
+}
 //#endregion
 //#region packages/core/src/analyze/page-technical-signals.ts
 function normalizePageUrl(value) {
@@ -7654,7 +8110,7 @@ function jaccard(a, b) {
 	const union = /* @__PURE__ */ new Set([...setA, ...setB]);
 	return union.size === 0 ? 0 : intersection.length / union.size;
 }
-function defaultDateRange$2(days = 28, now = /* @__PURE__ */ new Date()) {
+function defaultDateRange$1(days = 28, now = /* @__PURE__ */ new Date()) {
 	return finalGscDateRange(days, now);
 }
 //#endregion
@@ -8746,7 +9202,7 @@ function reportCaveats$1(input) {
 async function pageOpportunitiesReport(input, dependencies = defaultDependencies$12) {
 	const url = assertUrlMatchesGscProperty(input.site, input.url);
 	const days = reportDays$1(input.days);
-	const range = defaultDateRange$2(days);
+	const range = defaultDateRange$1(days);
 	const targetResult = await dependencies.searchAnalytics(input.site, {
 		...range,
 		dimensions: ["query", "page"],
@@ -12725,37 +13181,10 @@ function collectCrawlAiSignals(input) {
 	]);
 }
 //#endregion
-//#region packages/core/src/analyze/site-diagnostics/quick-wins-report-input.ts
-function integerOption$1(input) {
-	if (input.value === void 0) return input.fallback;
-	if (!Number.isInteger(input.value) || input.value < input.minimum || input.value > input.maximum) throw new SeoError("INVALID_INPUT", `${input.label} must be a whole number between ${input.minimum} and ${input.maximum}.`);
-	return input.value;
-}
-function defaultDateRange$1(days, now) {
-	return finalGscDateRange(days, now);
-}
-function explicitDateRange(input, maximumDays) {
-	if (!input.startDate && !input.endDate) return void 0;
-	if (!input.startDate || !input.endDate) throw new SeoError("INVALID_INPUT", "Start date and end date must be provided together.");
-	const pattern = /^\d{4}-\d{2}-\d{2}$/;
-	const start = /* @__PURE__ */ new Date(`${input.startDate}T00:00:00.000Z`);
-	const end = /* @__PURE__ */ new Date(`${input.endDate}T00:00:00.000Z`);
-	if (!pattern.test(input.startDate) || !pattern.test(input.endDate) || Number.isNaN(start.getTime()) || Number.isNaN(end.getTime()) || start.toISOString().slice(0, 10) !== input.startDate || end.toISOString().slice(0, 10) !== input.endDate || start > end) throw new SeoError("INVALID_INPUT", "Start date and end date must be valid YYYY-MM-DD values in ascending order.");
-	const days = Math.floor((end.getTime() - start.getTime()) / 864e5) + 1;
-	if (days > maximumDays) throw new SeoError("INVALID_INPUT", `Date range must not exceed ${maximumDays} days.`);
-	return {
-		range: {
-			startDate: input.startDate,
-			endDate: input.endDate
-		},
-		days
-	};
-}
-//#endregion
 //#region packages/core/src/analyze/crawler/site-crawl-providers.ts
 function crawlMetricsWindow(now) {
 	return {
-		...defaultDateRange$1(28, now),
+		...defaultDateRange$2(28, now),
 		days: 28
 	};
 }
@@ -16279,7 +16708,7 @@ async function ctrUnderperformersReportWith(input, dependencies) {
 		label: "Days"
 	});
 	const now = dependencies.now();
-	const range = explicitRange?.range ?? defaultDateRange$1(days, now);
+	const range = explicitRange?.range ?? defaultDateRange$2(days, now);
 	const source = await dependencies.searchAnalytics(input.site, {
 		...range,
 		dimensions: ["query", "page"],
@@ -16721,7 +17150,7 @@ function analyzeSegmentRows(input) {
 //#region packages/core/src/analyze/segment-impact-input.ts
 const DAY_MS = 864e5;
 const MAX_WINDOW_DAYS = 240;
-function subtractDays$1(value, days) {
+function subtractDays(value, days) {
 	const date = /* @__PURE__ */ new Date(`${value}T00:00:00.000Z`);
 	date.setUTCDate(date.getUTCDate() - days);
 	return date.toISOString().slice(0, 10);
@@ -16730,9 +17159,9 @@ function segmentRangeDays(range) {
 	return Math.floor((Date.parse(`${range.endDate}T00:00:00.000Z`) - Date.parse(`${range.startDate}T00:00:00.000Z`)) / DAY_MS) + 1;
 }
 function segmentComparisonRange(after, compareDays) {
-	const endDate = subtractDays$1(after.startDate, 1);
+	const endDate = subtractDays(after.startDate, 1);
 	return {
-		startDate: subtractDays$1(endDate, compareDays - 1),
+		startDate: subtractDays(endDate, compareDays - 1),
 		endDate
 	};
 }
@@ -16740,7 +17169,7 @@ function validateSegmentRanges(input) {
 	const before = explicitDateRange(input.before, MAX_WINDOW_DAYS);
 	const after = explicitDateRange(input.after, MAX_WINDOW_DAYS);
 	if (!before || !after) throw new SeoError("INVALID_INPUT", "Both segment ranges are required.");
-	if (subtractDays$1(input.after.startDate, 1) !== input.before.endDate) throw new SeoError("INVALID_INPUT", "Segment comparison windows must be adjacent.");
+	if (subtractDays(input.after.startDate, 1) !== input.before.endDate) throw new SeoError("INVALID_INPUT", "Segment comparison windows must be adjacent.");
 	if (before.days !== after.days) throw new SeoError("INVALID_INPUT", "Segment comparison windows must have equal lengths.");
 	return {
 		beforeDays: before.days,
@@ -16755,7 +17184,7 @@ function resolveSegmentRanges(input) {
 		maximum: MAX_WINDOW_DAYS,
 		label: "days"
 	});
-	const after = explicitDateRange(input, MAX_WINDOW_DAYS)?.range ?? defaultDateRange$1(days, input.now);
+	const after = explicitDateRange(input, MAX_WINDOW_DAYS)?.range ?? defaultDateRange$2(days, input.now);
 	const compareDays = integerOption$1({
 		value: input.compareDays,
 		fallback: segmentRangeDays(after),
@@ -16774,63 +17203,6 @@ function validateSegmentSite(site) {
 	if (!site.trim()) throw new SeoError("INVALID_INPUT", "site must not be empty.");
 }
 //#endregion
-//#region packages/core/src/analyze/site-diagnostics/decay-report-input.ts
-function decayNumberOption(input) {
-	const value = input.value ?? input.fallback;
-	if (!Number.isFinite(value) || value < input.minimum || value > input.maximum) throw new SeoError("INVALID_INPUT", `${input.label} must be between ${input.minimum} and ${input.maximum}.`);
-	return value;
-}
-function rangeDays$1(range) {
-	return Math.floor(((/* @__PURE__ */ new Date(`${range.endDate}T00:00:00.000Z`)).getTime() - (/* @__PURE__ */ new Date(`${range.startDate}T00:00:00.000Z`)).getTime()) / 864e5) + 1;
-}
-function dateString(date) {
-	return date.toISOString().slice(0, 10);
-}
-function subtractDays(value, days) {
-	const date = /* @__PURE__ */ new Date(`${value}T00:00:00.000Z`);
-	date.setUTCDate(date.getUTCDate() - days);
-	return dateString(date);
-}
-function priorYearDate(value) {
-	const source = /* @__PURE__ */ new Date(`${value}T00:00:00.000Z`);
-	const year = source.getUTCFullYear() - 1;
-	const month = source.getUTCMonth();
-	const day = source.getUTCDate();
-	const candidate = new Date(Date.UTC(year, month, day));
-	if (candidate.getUTCMonth() !== month) return dateString(new Date(Date.UTC(year, month + 1, 0)));
-	return dateString(candidate);
-}
-function subtractCalendarMonths(date, months) {
-	const day = date.getUTCDate();
-	const target = new Date(Date.UTC(date.getUTCFullYear(), date.getUTCMonth() - months, 1));
-	const lastDay = new Date(Date.UTC(target.getUTCFullYear(), target.getUTCMonth() + 1, 0)).getUTCDate();
-	target.setUTCDate(Math.min(day, lastDay));
-	return dateString(target);
-}
-function validateDecayRanges(input) {
-	const latestFinalDate = defaultDateRange$1(1, input.now).endDate;
-	if (input.current.endDate > latestFinalDate) throw new SeoError("INVALID_INPUT", `Decay end date must be ${latestFinalDate} or earlier so both GSC windows use final data.`);
-	const pacificToday = /* @__PURE__ */ new Date(`${latestFinalDate}T00:00:00.000Z`);
-	pacificToday.setUTCDate(pacificToday.getUTCDate() + 4);
-	const retentionStart = subtractCalendarMonths(pacificToday, 16);
-	if (input.previous.startDate < retentionStart) throw new SeoError("INVALID_INPUT", `Comparison range starts before Search Console's rolling 16-month API history (${retentionStart}). Choose a shorter range or use previously stored data.`);
-}
-function decayComparisonRange(current, comparison = "previous-period") {
-	const days = rangeDays$1(current);
-	if (comparison === "year-over-year") {
-		const endDate = priorYearDate(current.endDate);
-		return {
-			startDate: subtractDays(endDate, days - 1),
-			endDate
-		};
-	}
-	const endDate = subtractDays(current.startDate, 1);
-	return {
-		startDate: subtractDays(endDate, days - 1),
-		endDate
-	};
-}
-//#endregion
 //#region packages/core/src/analyze/segment-impact-fallback.ts
 function unavailableSegmentImpactReport(input) {
 	const days = segmentRangeDays(input.after);
@@ -18691,7 +19063,7 @@ async function cannibalReportWith(input, dependencies) {
 	});
 	const now = dependencies.now();
 	const explicit = explicitDateRange(input, 548);
-	const range = explicit?.range ?? defaultDateRange$1(days, now);
+	const range = explicit?.range ?? defaultDateRange$2(days, now);
 	const rangeDays = explicit?.days ?? days;
 	const requestBase = {
 		...range,
@@ -19149,7 +19521,7 @@ async function decayingReportWith(input, dependencies) {
 	});
 	const now = dependencies.now();
 	const explicit = explicitDateRange(input, 548);
-	const currentRange = explicit?.range ?? defaultDateRange$1(days, now);
+	const currentRange = explicit?.range ?? defaultDateRange$2(days, now);
 	const comparison = input.comparison ?? "previous-period";
 	const previousRange = decayComparisonRange(currentRange, comparison);
 	validateDecayRanges({
@@ -19622,7 +19994,7 @@ async function quickWinsReportWith(input, dependencies) {
 		label: "Verification limit"
 	});
 	const generatedAt = dependencies.now().toISOString();
-	const range = explicitRange?.range ?? defaultDateRange$1(days, new Date(generatedAt));
+	const range = explicitRange?.range ?? defaultDateRange$2(days, new Date(generatedAt));
 	const source = await dependencies.searchAnalytics(input.site, {
 		...range,
 		dimensions: ["query", "page"],
@@ -20046,7 +20418,7 @@ function reportDays(value) {
 	if (!Number.isInteger(value) || value < 1 || value > MAX_DAYS) throw new SeoError("INVALID_INPUT", `Days must be a whole number between 1 and ${MAX_DAYS}.`);
 	return value;
 }
-function dateRange$1(days, now) {
+function dateRange(days, now) {
 	return finalGscDateRange(days, now);
 }
 function verifiedRecommendation(coverage) {
@@ -20086,7 +20458,7 @@ async function strikingDistanceWith(input, dependencies) {
 	const explicitRange = explicitDateRange(input, MAX_DAYS);
 	const days = explicitRange?.days ?? reportDays(input.days);
 	const generatedAt = dependencies.now().toISOString();
-	const range = explicitRange?.range ?? dateRange$1(days, new Date(generatedAt));
+	const range = explicitRange?.range ?? dateRange(days, new Date(generatedAt));
 	const result = await dependencies.searchAnalytics(input.site, {
 		...range,
 		dimensions: ["query", "page"],
@@ -20198,44 +20570,6 @@ function strikingDistance(input, dependencies = defaultDependencies$5) {
 	return strikingDistanceWith(input, dependencies);
 }
 //#endregion
-//#region packages/core/src/updates/search-updates.ts
-function classifyUpdate(name, product) {
-	const lower = `${name} ${product}`.toLowerCase();
-	if (lower.includes("core")) return "core";
-	if (lower.includes("spam")) return "spam";
-	if (lower.includes("discover")) return "discover";
-	if (lower.includes("ranking")) return "ranking";
-	if (lower.includes("index")) return "indexing";
-	if (lower.includes("serving")) return "serving";
-	return "other";
-}
-function searchUpdatesFromIncidents(incidents, input = {}) {
-	const product = input.product?.toLowerCase();
-	return incidents.filter((incident) => !product || incident.service_name.toLowerCase() === product).map((incident) => {
-		const status = incident.end ? "complete" : incident.status_impact === "SERVICE_INFORMATION" ? "rolling-out" : "incident";
-		return {
-			id: incident.id,
-			name: incident.external_desc,
-			type: classifyUpdate(incident.external_desc, incident.service_name),
-			product: incident.service_name,
-			start: incident.begin,
-			end: incident.end,
-			status,
-			sourceUrl: `https://status.search.google.com/${incident.uri}`
-		};
-	}).slice(0, input.limit ?? 25);
-}
-function findOverlappingSearchUpdates(input) {
-	const paddingMs = (input.paddingDays ?? 3) * 864e5;
-	const windowStart = new Date(input.startDate).getTime() - paddingMs;
-	const windowEnd = new Date(input.endDate).getTime() + paddingMs;
-	return input.updates.filter((update) => {
-		const updateStart = new Date(update.start).getTime();
-		const updateEnd = update.end ? new Date(update.end).getTime() : Date.now();
-		return updateStart <= windowEnd && updateEnd >= windowStart;
-	});
-}
-//#endregion
 //#region packages/core/src/updates/search-status.ts
 const INCIDENTS_URL = "https://status.search.google.com/incidents.json";
 async function fetchSearchStatusIncidents() {
@@ -20612,7 +20946,7 @@ async function trafficAnomalyWith(input, dependencies) {
 	const range = input.startDate && input.endDate ? {
 		startDate: input.startDate,
 		endDate: input.endDate
-	} : defaultDateRange$2(days, dependencies.now());
+	} : defaultDateRange$1(days, dependencies.now());
 	const result = await dependencies.searchAnalytics(input.site, {
 		...range,
 		dimensions: ["date"],
@@ -20704,7 +21038,7 @@ function fallbackRange(input) {
 	return input.startDate && input.endDate ? {
 		startDate: input.startDate,
 		endDate: input.endDate
-	} : defaultDateRange$2(input.days ?? 28);
+	} : defaultDateRange$1(input.days ?? 28);
 }
 function emptyAnomaly(input) {
 	return {
@@ -20909,7 +21243,7 @@ function emptyStriking(input) {
 	return {
 		site: input.site,
 		generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-		range: defaultDateRange$2(input.days ?? 28),
+		range: defaultDateRange$1(input.days ?? 28),
 		rangeDays: input.days ?? 28,
 		source: {
 			provider: "google-search-console",
@@ -22826,7 +23160,7 @@ function rowMetrics(row) {
 }
 async function linkRecover(input) {
 	const days = input.days ?? 90;
-	const range = defaultDateRange$2(days);
+	const range = defaultDateRange$1(days);
 	const result = await querySearchAnalytics(input.site, {
 		...range,
 		dimensions: ["page"],
@@ -23990,7 +24324,7 @@ async function queryClusterReport(input) {
 		maximum: 548,
 		label: "days"
 	});
-	const range = defaultDateRange$2(days);
+	const range = defaultDateRange$1(days);
 	const filters = input.scope ? [{
 		groupType: "and",
 		filters: [{
@@ -25309,7 +25643,7 @@ async function refreshPrioritiesWorkflow(input) {
 		verifyContent: input.verifyContent ?? true,
 		verifyLimit: input.verifyContent === false ? void 0 : input.verifyLimit ?? Math.min(input.limit ?? 5, 5)
 	});
-	const range = defaultDateRange$2(input.days ?? 28);
+	const range = defaultDateRange$1(input.days ?? 28);
 	const analytics = await fetchLandingPageValues({
 		connection: input.analyticsConnection,
 		propertyId: input.googleAnalyticsPropertyId,
@@ -25840,67 +26174,6 @@ async function detectBrandTerms(input) {
 		candidates: ranked
 	};
 }
-//#endregion
-//#region packages/core/src/bing/api.ts
-const BASE = "https://ssl.bing.com/webmaster/api.svc/json";
-const MAX_BYTES$1 = 8e6;
-function bingCall(auth, options) {
-	return async (method, params = {}) => {
-		const url = new URL(`${BASE}/${method}`);
-		for (const [name, value] of Object.entries(params)) url.searchParams.set(name, value);
-		const headers = { accept: "application/json" };
-		if ("apiKey" in auth) url.searchParams.set("apikey", auth.apiKey);
-		else headers.authorization = `Bearer ${await auth.accessToken()}`;
-		let response;
-		try {
-			response = await fetch(url, {
-				headers,
-				signal: AbortSignal.timeout(3e4)
-			});
-		} catch (error) {
-			throw new SeoError("OPTIONAL_PROVIDER_UNAVAILABLE", `Bing Webmaster did not respond: ${error instanceof Error ? error.message : String(error)}`);
-		}
-		if (!response.ok) {
-			const detail = (await response.text().catch(() => "")).slice(0, 200);
-			if (response.status === 401 || /invalidapikey/i.test(detail)) throw new SeoError("AUTH_REQUIRED", `Bing Webmaster rejected the sign-in. ${options.signIn}`);
-			if (response.status === 403 || /notauthorized/i.test(detail)) throw new SeoError("ACCESS_DENIED", "Bing Webmaster denied access to this site. It must be verified in the connected Bing account.");
-			if (/ThrottleIP/i.test(detail)) throw new SeoError("RATE_LIMITED", "Bing Webmaster is blocking requests from this network (ThrottleIP). Run the same report with the CLI on your own machine, where Bing answers.");
-			if (response.status === 429 || /throttle/i.test(detail)) throw new SeoError("RATE_LIMITED", "Bing Webmaster is limiting requests. Try again in a few minutes.");
-			throw new SeoError("OPTIONAL_PROVIDER_UNAVAILABLE", `Bing Webmaster answered ${response.status}. ${detail}`.trim());
-		}
-		return (await readJson(response, "Bing Webmaster", { maxBytes: MAX_BYTES$1 })).d;
-	};
-}
-//#endregion
-//#region packages/core/src/commands/types.ts
-var CommandError = class extends Error {
-	code;
-	constructor(code, message) {
-		super(message);
-		this.code = code;
-	}
-};
-const ADVICE_KEYS = /^(recommendations?|actions?|advice|suggested[A-Z]\w*|nextSteps?)$/;
-function factsOnly(value) {
-	if (Array.isArray(value)) return value.map(factsOnly);
-	if (value && typeof value === "object") return Object.fromEntries(Object.entries(value).filter(([key]) => !ADVICE_KEYS.test(key)).map(([key, child]) => [key, factsOnly(child)]));
-	return value;
-}
-function matchProperty(names, site) {
-	if (names.includes(site)) return site;
-	let host;
-	let origin;
-	try {
-		const url = new URL(site.includes("://") ? site : `https://${site.replace(/^sc-domain:/, "")}`);
-		host = url.hostname.replace(/^www\./, "");
-		origin = url.origin;
-	} catch {
-		return null;
-	}
-	const domain = names.filter((name) => name.startsWith("sc-domain:")).map((name) => name.slice(10)).filter((name) => host === name || host.endsWith(`.${name}`)).sort((a, b) => b.length - a.length)[0];
-	if (domain) return `sc-domain:${domain}`;
-	return names.find((name) => name === `${origin}/` || name === `${origin.replace("://", "://www.")}/` || name === `${origin.replace("://www.", "://")}/`) ?? null;
-}
 const DIMENSIONS = [
 	"query",
 	"page",
@@ -26038,12 +26311,6 @@ const SECTIONS = {
 };
 const SECTION_IDS = Object.keys(SECTIONS);
 //#endregion
-//#region packages/core/src/commands/research-providers.ts
-const KEY_HEADERS = {
-	dataforseo: "X-DataForSEO-Login and X-DataForSEO-Password",
-	ahrefs: "X-Ahrefs-Key"
-};
-//#endregion
 //#region packages/core/src/commands/research.ts
 const RESEARCH_ACTIONS = [
 	"keyword_metrics",
@@ -26104,7 +26371,7 @@ z.object({}), `${Object.entries(SECTIONS).map(([id, text]) => `- ${id}: ${text}`
 }), `${LOST_PAGES_RULE}`, z.object({
 	site,
 	...dates
-}), `${Object.entries(KEY_HEADERS).map(([provider, header]) => `${provider} ${header}`).join("; ")}`, z.object({
+}), z.object({
 	provider: z.enum(RESEARCH_PROVIDERS),
 	action: z.enum(RESEARCH_ACTIONS),
 	keywords: z.array(z.string().min(1)).max(100).default([]),
@@ -26332,15 +26599,29 @@ function nodeCommandDeps(options) {
 		bingConnect: LOCAL_BING_CONNECT
 	};
 }
-const LOCAL_BING_CONNECT = "Run `seo providers bing connect` with an API key from Bing Webmaster Tools (Settings, API access).";
+const LOCAL_BING_CONNECT = "Connect Bing on your seoskill.dev account and run `seo login`, or run `seo providers bing connect` with an API key from Bing Webmaster Tools (Settings, API access).";
 let bing;
 function localBing() {
-	bing ??= readBingApiKey().catch(() => void 0).then((key) => key ? bingCall({ apiKey: key.apiKey }, { signIn: LOCAL_BING_CONNECT }) : null);
+	bing ??= readBingApiKey().catch(() => void 0).then((key) => key ? bingCall({ apiKey: key.apiKey }, { signIn: LOCAL_BING_CONNECT }) : cloudLinked() ? cloudBing() : null);
 	return bing;
 }
+async function localAccounts() {
+	if (!cloudLinked()) return [{
+		email: null,
+		google: await localGoogleFetch()
+	}];
+	return (await cloudGoogleEmails()).map((email) => ({
+		email,
+		google: bearerFetch(() => cloudGoogleToken(email))
+	}));
+}
 async function localResearchKeys() {
-	const [dataForSeo, ahrefs] = await Promise.all([readDataForSeoCredentials().catch(() => void 0), readAhrefsApiKey().catch(() => void 0)]);
-	const keys = new Headers();
+	const [dataForSeo, ahrefs, saved] = await Promise.all([
+		readDataForSeoCredentials().catch(() => void 0),
+		readAhrefsApiKey().catch(() => void 0),
+		cloudLinked() ? cloudKeys().catch(() => ({})) : {}
+	]);
+	const keys = new Headers(saved);
 	if (dataForSeo) {
 		keys.set("x-dataforseo-login", dataForSeo.login);
 		keys.set("x-dataforseo-password", dataForSeo.password);
@@ -28653,6 +28934,6 @@ function isoDate(daysAgo = 0) {
 	return date.toISOString().slice(0, 10);
 }
 //#endregion
-export { AHREFS_API_KEY_ENV, AHREFS_API_KEY_SECRET, AI_REFERRAL_SOURCES, AI_REFERRAL_SOURCES_VERSION, ANALYTICS_PROVIDER_IDS, AUDIT_PAGE_RULE_IDS, AhrefsClient, BING_API_KEY_ENV, BING_API_KEY_SECRET, BROWSER_USER_AGENT, CANNIBAL_MAXIMUM_DOMINANT_SHARE, CANNIBAL_MINIMUM_PAGE_SHARE, CLICKY_SITEKEY_ENV, CLICKY_SITE_KEYS_SECRET, CRAWL_SKIP_REASONS, CTR_DEFAULT_LIMIT, CTR_MAX_LIMIT, CTR_MAX_MIN_IMPRESSIONS, DATAFORSEO_CREDENTIAL_SECRET, DATAFORSEO_LOGIN_ENV, DATAFORSEO_PASSWORD_ENV, DEFAULT_SEARCH_CONSOLE_EXPORT_ROW_LIMIT, DEFAULT_UNREACHED_PAGE_LIMIT, DataForSeoClient, GSC_FINAL_DATA_LAG_DAYS, GSC_TIME_ZONE, GoogleApiError, INCIDENTS_URL, INTERNAL_LINK_LEXICAL_TARGET_LIMIT, INTERNAL_LINK_MATCH_EVIDENCE_LIMIT, JsonFileStorageAdapter, LOCAL_BING_CONNECT, LOCAL_SIGN_IN, LOG_MAX_AGE_MS, LOG_MAX_FILE_BYTES, LOG_MAX_TOTAL_BYTES, LocalCredentialsProvider, MANAGED_PROVIDER_SECRET_NAMES, MAX_CRAWL_CONCURRENCY, MAX_CRAWL_DEPTH, MAX_CRAWL_PAGES, MAX_CRAWL_TIMEOUT_MS, MAX_SEARCH_CONSOLE_EXPORT_FILES, MAX_SEARCH_CONSOLE_EXPORT_ROW_LIMIT, PROVIDER_SECRET_NAMES, ProviderError, ProviderExtensionRegistry, RESEARCH_IMPORT_COLUMN_KEYS, ResponseSizeLimitError, SEO_CRAWLER_IDENTITY, SEO_CRAWLER_TOKEN, SEO_CRAWLER_USER_AGENT, SEO_PROVIDER_API_VERSION, SEO_VERSION, SERP_TITLE_REFERENCE_WIDTH_PX, SERP_TITLE_WIDTH_PROFILE, STEP_CHANGE_RULES, SeoError, ServiceAccountAccessTokenClient, SessionLedger, TELEMETRY_AGENTS, TELEMETRY_ENDPOINT, TELEMETRY_ERROR_CATEGORIES, TELEMETRY_EVENTS, TELEMETRY_FAILURE_CONTEXTS, TELEMETRY_FAILURE_REASONS, TELEMETRY_NOTICE, TELEMETRY_OPERATIONS, TELEMETRY_REPORTS, TELEMETRY_SCHEMA_VERSION, TELEMETRY_TIMEOUT_MS, agentActionsView, aiReferralSourceForValue, aiReferralsReport, analyticsConnectionLabel, analyticsConnectionProviderId, analyticsConnectionSchema, analyticsProviderDetails, analyticsProviderSchema, analyzeAiReferralRows, analyzeCannibalImportRows, analyzeCannibalRows, analyzeCtrUnderperformersFromRows, analyzeDecay, analyzeIndexCoverageSignals, analyzeInternalLinksFromRows, analyzePageOpportunitiesFromRows, analyzeQueryClustersFromRows, analyzeQuickWinsFromRows, analyzeSecondPageRows, analyzeSegmentRows, analyzeStrikingDistanceRows, analyzeTrafficAnomalyRows, assertCrawlConfigLimits, assertUrlMatchesGscProperty, auditCrawlPages, auditCrawlRequests, auditPage, authStatus, bearerFetch, boundedSitemapInventory, buildAgentFindings, buildQueryClusterReportFromRows, buildTelemetryPayload, cannibalImportReport, cannibalReport, cannibalReportWith, changeWindow, checkDatabaseReadiness, classifyTelemetryFailure, clearCache, clusterQueryRows, combineRobotsValues, compareSegmentRows, configSchema, contentCoverageRecommendation, contentCoverageType, contentOptimizationFromPageOpportunities, contentOptimizationReport, countLabel, crawlConfigHash, crawlConfigSchema, crawlDefinitionId, crawlFixToQueueItem, crawlImplementationQueueWorkflow, crawlIssueGroupSchema, crawlIssueSchema, crawlOne, crawlPageSnapshotSchema, crawlReportSchema, crawlReportSummarySchema, crawlRequestObservationSchema, crawlRunId, crawlSite, crawlSkipImpact, crawlSkipReasonCountsFromRecord, crawlStatusOnly, crawlTopFixSchema, crawlerJsonSchemas, crawlerRuleCategorySchema, crawlerRuleIdSchema, crawlerRuleInfoSchema, crawlerRuleRecommendationSchema, crawlerRuleSeveritySchema, crawlerSchemas, createAuthorizedClient, createCrawlReport, createCtrBenchmarkContext, createGoogleAccessTokenClient, createLogger, createPageRenderer, ctrUnderperformersReport, ctrUnderperformersReportWith, decayClusterDrafts, decayComparisonRange, decayingReport, decayingReportWith, deleteAhrefsApiKey, deleteBingApiKey, deleteClickySiteKey, deleteDataForSeoCredentials, deleteManagedProviderSecrets, deleteProviderExtensionAccount, deleteProviderExtensionCredentials, deleteProviderSecret, deleteTokens, deriveBrandTerms, describeInstalledProviderExtension, detectBrandTerms, detectTelemetryAgent, diagnoseCsvFiles, diagnoseProperty, diagnosePropertyWorkflow, effectiveRobotsDirectives, effectiveSnippetControl, ensurePrivateDatabaseFiles, ensureSeoCliDirs, estimateSerpTitleWidth, expectedCtrForPosition, explainRule, fetchCruxFieldData, fetchPage, fetchPageStatus, fetchSearchStatusIncidents, fetchSitemapUrls, fileSize, finalGscDateRange, findOverlappingSearchUpdates, formatRelativeExpiry, ga4MatchReason, ga4PropertyIdFromName, ga4ReportQualityWarnings, ga4RequestCanUseCache, ga4RowsToObjects, getAuthModeStatus, getCacheStats, getClientConfig, getDb, getPrivacySnapshot, getSeoCliPaths, getServiceAccountConfig, getServiceAccountStatus, getTelemetryStatus, getTokenStorageStatus, googleJson, groupCrawlIssues, hasMetaRobotsDirective, hasRule, hasXRobotsDirective, hashKey, indexCoverageSignals, inferTemplateMovement, initializeTelemetry, inspectProviderPackage, inspectSearchConsoleUrl, inspectUrl, installProviderPackage, installedProviderPackageSchema, installedProviderPackagesSchema, internalLinksReport, interpretUpdateCorrelation, isBrandQuery, isSkippableReportError, isTelemetryCi, isTelemetryOperation, isTelemetryReport, isoDate, isoWeek, latestFinalGscDate, linkRecover, linkRecoverRecommendation, listAnalyticsAccounts, listGa4AccountSummaries, listGa4DataStreams, listGoogleAccounts, listInstalledProviderExtensions, listRules, listSearchConsoleSites, listSearchUpdates, listSites, loadInstalledProviderExtensions, loadProviderExtensions, loadProviderPackage, loadSearchConsoleExport, localBing, localCredentialsProvider, localError, localGoogleFetch, localResearchKeys, loginWithLoopback, makeRunId, matchGa4WebStreams, measureCoverage, metaRobotsDirectives, migrateLegacyMacConfig, missingOAuthClientMessage, missingSharedClientLoginMessage, nodeCommandDeps, normalizeBrandText, normalizeClickySiteId, normalizeClickySiteKey, normalizeCrawlConfig, normalizeCrawlSkipReasonCounts, normalizeForCoverage, normalizeHttpUrl, normalizeJavaScriptRenderingMode, normalizeLoadedCrawlReport, normalizeProviderExtensionAccount, normalizedResearchColumnName, noteCacheWrite, pageEvidenceRecommendation, pageOpportunitiesReport, parseOlderThan, performanceAudit, performanceReportIsCacheable, plural, providerCapabilitySchema, providerConnectionFieldSchema, providerExactVersionSchema, providerExtensionIdSchema, providerIdSchema, providerIntegritySchema, providerKindSchema, providerPackageManifestSchema, providerPackageNameSchema, providerPreferenceSchema, providerRegistrationSchema, providerRequestJson, providerRequestText, pruneLogs, publicHttpFetch, queryClusterReport, queryClusterTokens, queryContentCoverageFromPage, queryContentFieldsFromPage, queryFieldCoverage, queryOpportunityRecommendation, queryPageMetrics, queryPageTopQuery, queryPagesMetrics, queryPagesMetricsBatch, queryPagesTopQueries, queryPagesTopQueriesBatch, querySearchAnalytics, quickWinsCsvRows, quickWinsReport, quickWinsReportWith, readAhrefsApiKey, readAllTokens, readBingApiKey, readBoundedResponseText, readClickySiteKey, readConfig, readDataForSeoCredentials, readInstalledProviderPackages, readJson, readJsonOrUndefined, readOauthClient, readProviderExtensionAccount, readProviderExtensionCredentials, readProviderSecret, readTokens, recommendationForRule, reconcileExportPagesWithCrawl, redirectTrace, refreshAuthToken, refreshPrioritiesCsvFiles, refreshPrioritiesWorkflow, registrableDomain, removeInstalledProviderPackage, renderCrawlCsv, renderCrawlHtml, renderCrawlJunit, renderCrawlMarkdownTickets, renderCrawlPagesCsv, renderCrawlPretty, renderCsv, renderPresentationTablesMarkdown, renderWorkflowMarkdown, reportNarrative, requestHeaders, requirePageVerification, researchImportColumns, resetSeoData, resolveLocalSite, resolveSegmentRanges, resolveSeoCliPaths, reviewObservations, roundedPosition, runAnalyticsProviderLandingPages, runAnalyticsReport, runDoctor, runGa4Report, runProviderExtensionAction, runtimeForProvider, safeProviderAdapterError, saveInstalledProviderPackage, searchAnalyticsRows, searchUpdatesFromIncidents, secondPage, secondPageWith, segmentComparisonRange, segmentImpact, segmentRangeDays, seoErrorEnvelope, sessionSourceInListFilter, setActiveGoogleAccount, setTelemetryEnabled, setTokenStorageMode, shiftIsoDate, shouldExcludeBrandQuery, strikingDistance, strikingDistanceWith, summarizeCrawlReport, pageTechnicalSignals as technicalPageSignals, telemetryErrorCategory, toSeoError, tokenSchema, tokenStoreSchema, topFixes, trackTelemetryCommandFailed, trackTelemetryReportComplete, trackTelemetryReportFailed, trackTelemetryReportStart, trackTelemetrySetupComplete, trafficAnomaly, trafficAnomalyWith, unavailableSegmentImpactReport, unicodeTokens, uninstallProviderExtension, updateCorrelation, updatePostmortemCsvFiles, updatePostmortemWorkflow, validateResearchImportColumnSources, verifyAnalyticsProvider, verifyProviderExtension, verifyQueryContent, verifyQueryContentWith, withAgentReportContract, workflowPresentation, writeAhrefsApiKey, writeBingApiKey, writeClickySiteKey, writeConfig, writeDataForSeoCredentials, writeInstalledProviderPackages, writeOauthClient, writeProviderExtensionAccount, writeProviderExtensionCredentials, writeProviderSecret, writeTokens, xRobotsDirectives };
+export { AHREFS_API_KEY_ENV, AHREFS_API_KEY_SECRET, AI_REFERRAL_SOURCES, AI_REFERRAL_SOURCES_VERSION, ANALYTICS_PROVIDER_IDS, AUDIT_PAGE_RULE_IDS, AhrefsClient, BING_API_KEY_ENV, BING_API_KEY_SECRET, BROWSER_USER_AGENT, CANNIBAL_MAXIMUM_DOMINANT_SHARE, CANNIBAL_MINIMUM_PAGE_SHARE, CLICKY_SITEKEY_ENV, CLICKY_SITE_KEYS_SECRET, CLOUD_SIGN_IN, CLOUD_URL, CRAWL_SKIP_REASONS, CTR_DEFAULT_LIMIT, CTR_MAX_LIMIT, CTR_MAX_MIN_IMPRESSIONS, DATAFORSEO_CREDENTIAL_SECRET, DATAFORSEO_LOGIN_ENV, DATAFORSEO_PASSWORD_ENV, DEFAULT_SEARCH_CONSOLE_EXPORT_ROW_LIMIT, DEFAULT_UNREACHED_PAGE_LIMIT, DataForSeoClient, GSC_FINAL_DATA_LAG_DAYS, GSC_TIME_ZONE, GoogleApiError, INCIDENTS_URL, INTERNAL_LINK_LEXICAL_TARGET_LIMIT, INTERNAL_LINK_MATCH_EVIDENCE_LIMIT, JsonFileStorageAdapter, LOCAL_BING_CONNECT, LOCAL_SIGN_IN, LOG_MAX_AGE_MS, LOG_MAX_FILE_BYTES, LOG_MAX_TOTAL_BYTES, LocalCredentialsProvider, MANAGED_PROVIDER_SECRET_NAMES, MAX_CRAWL_CONCURRENCY, MAX_CRAWL_DEPTH, MAX_CRAWL_PAGES, MAX_CRAWL_TIMEOUT_MS, MAX_SEARCH_CONSOLE_EXPORT_FILES, MAX_SEARCH_CONSOLE_EXPORT_ROW_LIMIT, PROVIDER_SECRET_NAMES, ProviderError, ProviderExtensionRegistry, RESEARCH_IMPORT_COLUMN_KEYS, ResponseSizeLimitError, SEO_CRAWLER_IDENTITY, SEO_CRAWLER_TOKEN, SEO_CRAWLER_USER_AGENT, SEO_PROVIDER_API_VERSION, SEO_VERSION, SERP_TITLE_REFERENCE_WIDTH_PX, SERP_TITLE_WIDTH_PROFILE, STEP_CHANGE_RULES, SeoError, ServiceAccountAccessTokenClient, SessionLedger, TELEMETRY_AGENTS, TELEMETRY_ENDPOINT, TELEMETRY_ERROR_CATEGORIES, TELEMETRY_EVENTS, TELEMETRY_FAILURE_CONTEXTS, TELEMETRY_FAILURE_REASONS, TELEMETRY_NOTICE, TELEMETRY_OPERATIONS, TELEMETRY_REPORTS, TELEMETRY_SCHEMA_VERSION, TELEMETRY_TIMEOUT_MS, agentActionsView, aiReferralSourceForValue, aiReferralsReport, analyticsConnectionLabel, analyticsConnectionProviderId, analyticsConnectionSchema, analyticsProviderDetails, analyticsProviderSchema, analyzeAiReferralRows, analyzeCannibalImportRows, analyzeCannibalRows, analyzeCtrUnderperformersFromRows, analyzeDecay, analyzeIndexCoverageSignals, analyzeInternalLinksFromRows, analyzePageOpportunitiesFromRows, analyzeQueryClustersFromRows, analyzeQuickWinsFromRows, analyzeSecondPageRows, analyzeSegmentRows, analyzeStrikingDistanceRows, analyzeTrafficAnomalyRows, assertCrawlConfigLimits, assertUrlMatchesGscProperty, auditCrawlPages, auditCrawlRequests, auditPage, authStatus, bearerFetch, boundedSitemapInventory, buildAgentFindings, buildQueryClusterReportFromRows, buildTelemetryPayload, cannibalImportReport, cannibalReport, cannibalReportWith, changeWindow, checkDatabaseReadiness, classifyTelemetryFailure, clearCache, cloudAccountFor, cloudBing, cloudCredentials, cloudGoogleEmails, cloudGoogleToken, cloudKeys, cloudLinked, cloudLogout, clusterQueryRows, combineRobotsValues, compareSegmentRows, configSchema, contentCoverageRecommendation, contentCoverageType, contentOptimizationFromPageOpportunities, contentOptimizationReport, countLabel, crawlConfigHash, crawlConfigSchema, crawlDefinitionId, crawlFixToQueueItem, crawlImplementationQueueWorkflow, crawlIssueGroupSchema, crawlIssueSchema, crawlOne, crawlPageSnapshotSchema, crawlReportSchema, crawlReportSummarySchema, crawlRequestObservationSchema, crawlRunId, crawlSite, crawlSkipImpact, crawlSkipReasonCountsFromRecord, crawlStatusOnly, crawlTopFixSchema, crawlerJsonSchemas, crawlerRuleCategorySchema, crawlerRuleIdSchema, crawlerRuleInfoSchema, crawlerRuleRecommendationSchema, crawlerRuleSeveritySchema, crawlerSchemas, createAuthorizedClient, createCrawlReport, createCtrBenchmarkContext, createGoogleAccessTokenClient, createLogger, createPageRenderer, ctrUnderperformersReport, ctrUnderperformersReportWith, decayClusterDrafts, decayComparisonRange, decayingReport, decayingReportWith, deleteAhrefsApiKey, deleteBingApiKey, deleteClickySiteKey, deleteDataForSeoCredentials, deleteManagedProviderSecrets, deleteProviderExtensionAccount, deleteProviderExtensionCredentials, deleteProviderSecret, deleteTokens, deriveBrandTerms, describeInstalledProviderExtension, detectBrandTerms, detectTelemetryAgent, diagnoseCsvFiles, diagnoseProperty, diagnosePropertyWorkflow, effectiveRobotsDirectives, effectiveSnippetControl, ensurePrivateDatabaseFiles, ensureSeoCliDirs, estimateSerpTitleWidth, expectedCtrForPosition, explainRule, fetchCruxFieldData, fetchPage, fetchPageStatus, fetchSearchStatusIncidents, fetchSitemapUrls, fileSize, finalGscDateRange, findOverlappingSearchUpdates, finishCloudLogin, formatRelativeExpiry, ga4MatchReason, ga4PropertyIdFromName, ga4ReportQualityWarnings, ga4RequestCanUseCache, ga4RowsToObjects, getAuthModeStatus, getCacheStats, getClientConfig, getDb, getPrivacySnapshot, getSeoCliPaths, getServiceAccountConfig, getServiceAccountStatus, getTelemetryStatus, getTokenStorageStatus, googleJson, groupCrawlIssues, hasMetaRobotsDirective, hasRule, hasXRobotsDirective, hashKey, indexCoverageSignals, inferTemplateMovement, initializeTelemetry, inspectProviderPackage, inspectSearchConsoleUrl, inspectUrl, installProviderPackage, installedProviderPackageSchema, installedProviderPackagesSchema, internalLinksReport, interpretUpdateCorrelation, isBrandQuery, isSkippableReportError, isTelemetryCi, isTelemetryOperation, isTelemetryReport, isoDate, isoWeek, latestFinalGscDate, linkRecover, linkRecoverRecommendation, listAnalyticsAccounts, listGa4AccountSummaries, listGa4DataStreams, listGoogleAccounts, listInstalledProviderExtensions, listRules, listSearchConsoleSites, listSearchUpdates, listSites, loadInstalledProviderExtensions, loadProviderExtensions, loadProviderPackage, loadSearchConsoleExport, localAccounts, localBing, localCredentialsProvider, localError, localGoogleFetch, localResearchKeys, loginWithLoopback, makeRunId, matchGa4WebStreams, measureCoverage, metaRobotsDirectives, migrateLegacyMacConfig, missingOAuthClientMessage, missingSharedClientLoginMessage, nodeCommandDeps, normalizeBrandText, normalizeClickySiteId, normalizeClickySiteKey, normalizeCrawlConfig, normalizeCrawlSkipReasonCounts, normalizeForCoverage, normalizeHttpUrl, normalizeJavaScriptRenderingMode, normalizeLoadedCrawlReport, normalizeProviderExtensionAccount, normalizedResearchColumnName, notSignedIn, noteCacheWrite, openCloudLink, pageEvidenceRecommendation, pageOpportunitiesReport, parseOlderThan, pendingCloudLogin, performanceAudit, performanceReportIsCacheable, plural, providerCapabilitySchema, providerConnectionFieldSchema, providerExactVersionSchema, providerExtensionIdSchema, providerIdSchema, providerIntegritySchema, providerKindSchema, providerPackageManifestSchema, providerPackageNameSchema, providerPreferenceSchema, providerRegistrationSchema, providerRequestJson, providerRequestText, pruneLogs, publicHttpFetch, queryClusterReport, queryClusterTokens, queryContentCoverageFromPage, queryContentFieldsFromPage, queryFieldCoverage, queryOpportunityRecommendation, queryPageMetrics, queryPageTopQuery, queryPagesMetrics, queryPagesMetricsBatch, queryPagesTopQueries, queryPagesTopQueriesBatch, querySearchAnalytics, quickWinsCsvRows, quickWinsReport, quickWinsReportWith, readAhrefsApiKey, readAllTokens, readBingApiKey, readBoundedResponseText, readClickySiteKey, readConfig, readDataForSeoCredentials, readInstalledProviderPackages, readJson, readJsonOrUndefined, readOauthClient, readProviderExtensionAccount, readProviderExtensionCredentials, readProviderSecret, readTokens, recommendationForRule, reconcileExportPagesWithCrawl, redirectTrace, refreshAuthToken, refreshPrioritiesCsvFiles, refreshPrioritiesWorkflow, registrableDomain, removeInstalledProviderPackage, renderCrawlCsv, renderCrawlHtml, renderCrawlJunit, renderCrawlMarkdownTickets, renderCrawlPagesCsv, renderCrawlPretty, renderCsv, renderPresentationTablesMarkdown, renderWorkflowMarkdown, reportNarrative, requestHeaders, requirePageVerification, researchImportColumns, resetSeoData, resolveLocalSite, resolveSegmentRanges, resolveSeoCliPaths, reviewObservations, roundedPosition, runAnalyticsProviderLandingPages, runAnalyticsReport, runDoctor, runGa4Report, runProviderExtensionAction, runtimeForProvider, safeProviderAdapterError, saveInstalledProviderPackage, searchAnalyticsRows, searchUpdatesFromIncidents, secondPage, secondPageWith, segmentComparisonRange, segmentImpact, segmentRangeDays, seoErrorEnvelope, sessionSourceInListFilter, setActiveGoogleAccount, setTelemetryEnabled, setTokenStorageMode, shiftIsoDate, shouldExcludeBrandQuery, startCloudLogin, strikingDistance, strikingDistanceWith, summarizeCrawlReport, pageTechnicalSignals as technicalPageSignals, telemetryErrorCategory, toSeoError, tokenSchema, tokenStoreSchema, topFixes, trackTelemetryCommandFailed, trackTelemetryReportComplete, trackTelemetryReportFailed, trackTelemetryReportStart, trackTelemetrySetupComplete, trafficAnomaly, trafficAnomalyWith, unavailableSegmentImpactReport, unicodeTokens, uninstallProviderExtension, updateCorrelation, updatePostmortemCsvFiles, updatePostmortemWorkflow, validateResearchImportColumnSources, verifyAnalyticsProvider, verifyProviderExtension, verifyQueryContent, verifyQueryContentWith, withAgentReportContract, workflowPresentation, writeAhrefsApiKey, writeBingApiKey, writeClickySiteKey, writeConfig, writeDataForSeoCredentials, writeInstalledProviderPackages, writeOauthClient, writeProviderExtensionAccount, writeProviderExtensionCredentials, writeProviderSecret, writeTokens, xRobotsDirectives };
 
 //# sourceMappingURL=index.js.map