seo 0.4.2 → 0.6.0

package/dist/mcp.js

@@ -1,13 +1,13 @@
 import { createRequire as __seoCreateRequire } from 'node:module'; const require = __seoCreateRequire(import.meta.url);
-import { i as __toESM, n as load, r as __commonJSMin, t as version } from "./package-D46BDwUk.js";
+import { i as __toESM, n as load, r as __commonJSMin, t as version } from "./package-CwLtPH6B.js";
 import { createHash, randomUUID, sign } from "node:crypto";
 import { ZodOptional, z } from "zod";
-import { chmodSync, createReadStream, existsSync, mkdirSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { arch, homedir, platform, totalmem } from "node:os";
 import { dirname, extname, isAbsolute, join, relative, resolve } from "node:path";
+import "open";
+import { chmodSync, createReadStream, existsSync, mkdirSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import lockfile from "proper-lockfile";
 import "node:http";
-import "open";
 import { Headers as Headers$1, fetch as fetch$1 } from "undici";
 import Libsql from "libsql";
 import { Parser } from "htmlparser2";
@@ -13665,6 +13665,16 @@ var GoogleApiError = class extends SeoError {
 		this.status = status;
 	}
 };
+function bearerFetch(token) {
+	return async (url, init) => fetch(url, {
+		...init,
+		headers: {
+			...init?.headers,
+			authorization: `Bearer ${await token()}`,
+			"content-type": "application/json"
+		}
+	});
+}
 async function failure(response, label, subject, options) {
 	const detail = (await response.text().catch(() => "")).slice(0, 300);
 	const status = response.status;
@@ -13728,6 +13738,18 @@ async function listSearchConsoleSites(gfetch, options) {
 		label: "Search Console"
 	})).siteEntry ?? [];
 }
+async function inspectSearchConsoleUrl(gfetch, site, url, options) {
+	return googleJson(gfetch, "https://searchconsole.googleapis.com/v1/urlInspection/index:inspect", {
+		...options,
+		label: "URL Inspection",
+		subject: url,
+		body: {
+			siteUrl: site,
+			inspectionUrl: url,
+			...options.languageCode ? { languageCode: options.languageCode } : {}
+		}
+	});
+}
 async function listAnalyticsAccounts(gfetch, options) {
 	return collectGa4AccountSummaries(async (pageToken) => {
 		const url = new URL("https://analyticsadmin.googleapis.com/v1beta/accountSummaries");
@@ -13750,323 +13772,1241 @@ async function runAnalyticsReport(gfetch, propertyId, body, options) {
 	});
 }
 //#endregion
-//#region packages/core/dist/paths.js
-let memoizedPaths;
-function defaultConfigDir(input) {
-	if (input.platform === "win32") return join(input.env.APPDATA ?? join(input.home, "AppData", "Roaming"), "seo", "Config");
-	return join(input.env.XDG_CONFIG_HOME ?? join(input.home, ".config"), "seo");
+//#region packages/core/dist/bing/api.js
+const BASE = "https://ssl.bing.com/webmaster/api.svc/json";
+const MAX_BYTES$2 = 8e6;
+function bingCall(auth, options) {
+	return async (method, params = {}) => {
+		const url = new URL(`${BASE}/${method}`);
+		for (const [name, value] of Object.entries(params)) url.searchParams.set(name, value);
+		const headers = { accept: "application/json" };
+		if ("apiKey" in auth) url.searchParams.set("apikey", auth.apiKey);
+		else headers.authorization = `Bearer ${await auth.accessToken()}`;
+		let response;
+		try {
+			response = await fetch(url, {
+				headers,
+				signal: AbortSignal.timeout(3e4)
+			});
+		} catch (error) {
+			throw new SeoError("OPTIONAL_PROVIDER_UNAVAILABLE", `Bing Webmaster did not respond: ${error instanceof Error ? error.message : String(error)}`);
+		}
+		if (!response.ok) {
+			const detail = (await response.text().catch(() => "")).slice(0, 200);
+			if (response.status === 401 || /invalidapikey/i.test(detail)) throw new SeoError("AUTH_REQUIRED", `Bing Webmaster rejected the sign-in. ${options.signIn}`);
+			if (response.status === 403 || /notauthorized/i.test(detail)) throw new SeoError("ACCESS_DENIED", "Bing Webmaster denied access to this site. It must be verified in the connected Bing account.");
+			if (/ThrottleIP/i.test(detail)) throw new SeoError("RATE_LIMITED", "Bing Webmaster is blocking requests from this network (ThrottleIP). Run the same report with the CLI on your own machine, where Bing answers.");
+			if (response.status === 429 || /throttle/i.test(detail)) throw new SeoError("RATE_LIMITED", "Bing Webmaster is limiting requests. Try again in a few minutes.");
+			throw new SeoError("OPTIONAL_PROVIDER_UNAVAILABLE", `Bing Webmaster answered ${response.status}. ${detail}`.trim());
+		}
+		return (await readJson(response, "Bing Webmaster", { maxBytes: MAX_BYTES$2 })).d;
+	};
 }
-function defaultCacheDir(input) {
-	if (input.platform === "darwin") return join(input.home, "Library", "Caches", "seo");
-	if (input.platform === "win32") return join(input.env.LOCALAPPDATA ?? join(input.home, "AppData", "Local"), "seo", "Cache");
-	return join(input.env.XDG_CACHE_HOME ?? join(input.home, ".cache"), "seo");
+function day(value) {
+	if (typeof value !== "string") return null;
+	const legacy = /^\/Date\((-?\d+)(?:[+-]\d{4})?\)\/$/.exec(value);
+	const date = legacy ? new Date(Number(legacy[1])) : new Date(value);
+	return Number.isNaN(date.getTime()) ? null : date.toISOString().slice(0, 10);
 }
-function defaultLogDir(input) {
-	if (input.platform === "darwin") return join(input.home, "Library", "Logs", "seo");
-	if (input.platform === "win32") return join(input.env.LOCALAPPDATA ?? join(input.home, "AppData", "Local"), "seo", "Log");
-	return join(input.env.XDG_STATE_HOME ?? join(input.home, ".local", "state"), "seo");
+const count$1 = (value) => typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : null;
+function list(data, label) {
+	if (!Array.isArray(data)) throw new SeoError("OPTIONAL_PROVIDER_UNAVAILABLE", `Bing Webmaster returned an invalid ${label}.`);
+	return data.filter((item) => Boolean(item) && typeof item === "object");
 }
-function resolvedPathOptions(input) {
-	return {
-		env: input.env ?? process.env,
-		home: input.home ?? homedir(),
-		platform: input.platform ?? process.platform
-	};
+async function listBingSites(call) {
+	return list(await call("GetUserSites"), "site list").filter((row) => typeof row.Url === "string").map((row) => ({
+		url: row.Url,
+		verified: row.IsVerified === true
+	})).sort((a, b) => a.url.localeCompare(b.url, "en"));
 }
-function resolveSeoCliPaths(input = {}) {
-	const options = resolvedPathOptions(input);
-	const configDir = options.env.SEO_CONFIG_DIR ?? defaultConfigDir(options);
-	const cacheDir = options.env.SEO_CACHE_DIR ?? defaultCacheDir(options);
+async function bingTraffic(call, site) {
+	const rows = [];
+	let invalidRows = 0;
+	for (const row of list(await call("GetRankAndTrafficStats", { siteUrl: site }), "traffic list")) {
+		const date = day(row.Date);
+		const clicks = count$1(row.Clicks);
+		const impressions = count$1(row.Impressions);
+		if (!date || clicks === null || impressions === null) {
+			invalidRows += 1;
+			continue;
+		}
+		rows.push({
+			date,
+			clicks,
+			impressions
+		});
+	}
+	rows.sort((a, b) => a.date.localeCompare(b.date, "en"));
 	return {
-		configDir,
-		cacheDir,
-		logDir: options.env.SEO_LOG_DIR ?? defaultLogDir(options),
-		providerPackagesDir: join(configDir, "providers"),
-		installedProviderPackagesFile: join(configDir, "provider-packages.json"),
-		configFile: join(configDir, "config.json"),
-		tokensFile: join(configDir, "tokens.json"),
-		oauthClientFile: join(configDir, "oauth-client.json"),
-		providerSecretsFile: join(configDir, "provider-secrets.json"),
-		telemetryStateFile: join(configDir, "telemetry.json"),
-		cacheDbFile: join(cacheDir, "cache.db")
+		rows,
+		invalidRows
 	};
 }
-function legacyMacConfigDir(input) {
-	const options = resolvedPathOptions(input);
-	if (options.platform !== "darwin" || options.env.SEO_CONFIG_DIR || options.env.XDG_CONFIG_HOME) return;
-	return join(options.home, "Library", "Preferences", "seo");
-}
-function migrateLegacyMacConfig(input = {}) {
-	const legacyDir = legacyMacConfigDir(input);
-	if (!legacyDir) return;
-	const paths = resolveSeoCliPaths(input);
-	if (!existsSync(legacyDir) || existsSync(paths.configDir)) return;
-	try {
-		mkdirSync(dirname(paths.configDir), {
-			recursive: true,
-			mode: 448
+async function keyed(call, method, params) {
+	const rows = [];
+	let invalidRows = 0;
+	for (const row of list(await call(method, params), "row list")) {
+		const date = day(row.Date);
+		const key = typeof row.Query === "string" ? row.Query.trim() : "";
+		const clicks = count$1(row.Clicks);
+		const impressions = count$1(row.Impressions);
+		const position = count$1(row.AvgImpressionPosition);
+		if (!date || !key || clicks === null || impressions === null) {
+			invalidRows += 1;
+			continue;
+		}
+		rows.push({
+			date,
+			key,
+			clicks,
+			impressions,
+			position
 		});
-		renameSync(legacyDir, paths.configDir);
-	} catch (error) {
-		const code = error.code;
-		if (code !== "EEXIST" && code !== "ENOENT") throw error;
 	}
+	rows.sort((a, b) => a.date.localeCompare(b.date, "en") || a.key.localeCompare(b.key, "en"));
+	return {
+		rows,
+		invalidRows
+	};
 }
-function getSeoCliPaths() {
-	if (memoizedPaths) return memoizedPaths;
-	memoizedPaths = resolveSeoCliPaths();
-	return memoizedPaths;
-}
-function ensureSeoCliDirs() {
-	const paths = getSeoCliPaths();
-	migrateLegacyMacConfig();
-	mkdirSync(paths.configDir, {
-		recursive: true,
-		mode: 448
-	});
-	mkdirSync(paths.cacheDir, {
-		recursive: true,
-		mode: 448
-	});
-	mkdirSync(paths.logDir, {
-		recursive: true,
-		mode: 448
-	});
-	mkdirSync(paths.providerPackagesDir, {
-		recursive: true,
-		mode: 448
-	});
-	return paths;
+const bingQueries = (call, site) => keyed(call, "GetQueryStats", { siteUrl: site });
+const bingPages = (call, site) => keyed(call, "GetPageStats", { siteUrl: site });
+function bingSiteFor(sites, target) {
+	const host = (value) => {
+		try {
+			return new URL(value.includes("://") ? value : `https://${value.replace(/^sc-domain:/, "")}`).hostname.replace(/^www\./, "");
+		} catch {
+			return null;
+		}
+	};
+	const wanted = host(target);
+	if (!wanted) return null;
+	return sites.filter((site) => host(site.url) === wanted).sort((a, b) => Number(b.verified) - Number(a.verified) || Number(b.url.startsWith("https://")) - Number(a.url.startsWith("https://")) || a.url.localeCompare(b.url, "en"))[0] ?? null;
 }
 //#endregion
-//#region packages/core/dist/types/auth.js
-const tokenSchema = z.object({
-	provider: z.literal("google"),
-	account_email: z.string().email().max(320),
-	scope: z.string().max(2e4),
-	token_type: z.string().max(100),
-	access_token: z.string().max(65536).optional(),
-	refresh_token: z.string().max(65536).optional(),
-	expires_at: z.number().int(),
-	obtained_at: z.number().int(),
-	client_source: z.enum(["shared", "byo"])
-});
-const tokenStoreSchema = z.object({
-	version: z.literal(2),
-	active_account: z.string().email(),
-	accounts: z.array(tokenSchema).min(1).max(50)
-}).superRefine((store, context) => {
-	const emails = store.accounts.map((tokens) => tokens.account_email.toLowerCase());
-	if (new Set(emails).size !== emails.length) context.addIssue({
-		code: "custom",
-		path: ["accounts"],
-		message: "Google account emails must be unique."
-	});
-	if (!emails.includes(store.active_account.toLowerCase())) context.addIssue({
-		code: "custom",
-		path: ["active_account"],
-		message: "The active Google account must exist in accounts."
-	});
-});
-//#endregion
-//#region packages/core/dist/providers/contracts.js
-const providerIdSchema = z.string().min(1).max(64).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/u);
-z.enum([
-	"keyword-metrics",
-	"keyword-discovery",
-	"serp-snapshot",
-	"domain-overview",
-	"ranked-keywords",
-	"relevant-pages",
-	"serp-competitors",
-	"link-summary",
-	"referring-domains",
-	"backlinks",
-	"domain-rating",
-	"local-search",
-	"ai-mentions",
-	"ai-prompt-observation"
-]);
-//#endregion
-//#region packages/core/dist/types/config.js
-const providerPreferenceSchema = z.enum(["cheap", "authoritative"]);
-z.enum(["google", "clicky"]);
-const analyticsExtensionIdSchema = z.string().min(1).max(64).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/u);
-const analyticsExtensionAccountSchema = z.record(z.string().min(1).max(64).regex(/^[A-Za-z][A-Za-z0-9-]*$/u).refine((value) => ![
-	"constructor",
-	"prototype",
-	"__proto__"
-].includes(value)), z.string().trim().min(1).max(1e3)).refine((value) => Object.keys(value).length <= 16, { message: "An analytics provider account can have at most 16 fields." });
-const providerConnectionAccountsSchema = z.record(providerIdSchema, analyticsExtensionAccountSchema).refine((value) => Object.keys(value).length <= 20, { message: "There can be at most 20 provider connection records." });
-const analyticsConnectionSchema = z.discriminatedUnion("provider", [
-	z.object({
-		provider: z.literal("google"),
-		propertyId: z.string(),
-		accountEmail: z.string().email().optional()
-	}),
-	z.object({
-		provider: z.literal("clicky"),
-		siteId: z.string().regex(/^\d{1,30}$/u)
-	}),
-	z.object({
-		provider: z.literal("extension"),
-		providerId: analyticsExtensionIdSchema,
-		account: analyticsExtensionAccountSchema
-	})
-]);
-const configSchema = z.looseObject({
-	providers: z.object({
-		dataForSeoLogin: z.string().optional(),
-		dataForSeoPassword: z.string().optional(),
-		prefer: providerPreferenceSchema.default("cheap"),
-		connections: providerConnectionAccountsSchema.optional()
-	}).default({ prefer: "cheap" }),
-	security: z.object({ useKeychain: z.boolean().default(true) }).default({ useKeychain: true }),
-	auth: z.object({
-		sharedClientId: z.string().optional(),
-		sharedClientSecret: z.string().optional()
-	}).default({})
-});
-//#endregion
-//#region packages/core/dist/storage/files.js
-function ensureParentDir(path, mode = 448) {
-	mkdirSync(dirname(path), {
-		recursive: true,
-		mode
-	});
-}
-function readJsonFile(path) {
-	try {
-		return JSON.parse(readFileSync(path, "utf8"));
-	} catch {
-		return;
-	}
-}
-function writeJsonAtomic(path, data, mode) {
-	ensureParentDir(path);
-	const tmp = `${path}.${process.pid}.${Date.now()}.tmp`;
-	writeFileSync(tmp, JSON.stringify(data, null, 2), {
-		encoding: "utf8",
-		mode
-	});
-	chmodSync(tmp, mode);
-	renameSync(tmp, path);
-	chmodSync(path, mode);
-}
-function safeRemove(path) {
-	rmSync(path, {
-		recursive: true,
-		force: true
-	});
-}
-let loadedKeyring;
-async function resolveKeyring() {
-	if (!loadedKeyring) loadedKeyring = import("@napi-rs/keyring/keytar.js").then((module) => module);
-	return loadedKeyring;
+//#region packages/core/dist/gsc/dates.js
+const GSC_TIME_ZONE = "America/Los_Angeles";
+function dateInTimeZone(now, timeZone) {
+	const parts = Object.fromEntries(new Intl.DateTimeFormat("en-US", {
+		timeZone,
+		year: "numeric",
+		month: "2-digit",
+		day: "2-digit"
+	}).formatToParts(now).map((part) => [part.type, part.value]));
+	return new Date(Date.UTC(Number(parts.year), Number(parts.month) - 1, Number(parts.day)));
 }
-async function getKeyringPassword(service, account) {
-	return (await resolveKeyring()).getPassword(service, account);
+function shiftIsoDate(date, days) {
+	const value = /* @__PURE__ */ new Date(`${date}T00:00:00.000Z`);
+	value.setUTCDate(value.getUTCDate() + days);
+	return value.toISOString().slice(0, 10);
 }
-async function setKeyringPassword(service, account, password) {
-	await (await resolveKeyring()).setPassword(service, account, password);
+function latestFinalGscDate(now = /* @__PURE__ */ new Date()) {
+	const pacificToday = dateInTimeZone(now, GSC_TIME_ZONE);
+	pacificToday.setUTCDate(pacificToday.getUTCDate() - 4);
+	return pacificToday.toISOString().slice(0, 10);
 }
-async function deleteKeyringPassword(service, account) {
-	return (await resolveKeyring()).deletePassword(service, account);
+function finalGscDateRange(days = 28, now = /* @__PURE__ */ new Date()) {
+	const endDate = latestFinalGscDate(now);
+	return {
+		startDate: shiftIsoDate(endDate, -(days - 1)),
+		endDate
+	};
 }
 //#endregion
-//#region packages/core/dist/storage/config.js
-const KEYRING_SERVICE$1 = "seo";
-const PRIVATE_FILE_MODE$1 = 384;
-function tightenConfigPermissions(path) {
-	try {
-		chmodSync(path, PRIVATE_FILE_MODE$1);
-	} catch (error) {
-		if (error.code !== "ENOENT") throw error;
-	}
+//#region packages/core/dist/analyze/site-diagnostics/quick-wins-report-input.js
+function integerOption$1(input) {
+	if (input.value === void 0) return input.fallback;
+	if (!Number.isInteger(input.value) || input.value < input.minimum || input.value > input.maximum) throw new SeoError("INVALID_INPUT", `${input.label} must be a whole number between ${input.minimum} and ${input.maximum}.`);
+	return input.value;
 }
-function readConfig() {
-	ensureSeoCliDirs();
-	const configFile = getSeoCliPaths().configFile;
-	tightenConfigPermissions(configFile);
-	const raw = readJsonFile(configFile);
-	return configSchema.parse(raw ?? {});
+function defaultDateRange$1(days, now) {
+	return finalGscDateRange(days, now);
 }
-function writeConfig(config) {
-	ensureSeoCliDirs();
-	writeJsonAtomic(getSeoCliPaths().configFile, configSchema.parse(config), PRIVATE_FILE_MODE$1);
+function explicitDateRange(input, maximumDays) {
+	if (!input.startDate && !input.endDate) return void 0;
+	if (!input.startDate || !input.endDate) throw new SeoError("INVALID_INPUT", "Start date and end date must be provided together.");
+	const pattern = /^\d{4}-\d{2}-\d{2}$/;
+	const start = /* @__PURE__ */ new Date(`${input.startDate}T00:00:00.000Z`);
+	const end = /* @__PURE__ */ new Date(`${input.endDate}T00:00:00.000Z`);
+	if (!pattern.test(input.startDate) || !pattern.test(input.endDate) || Number.isNaN(start.getTime()) || Number.isNaN(end.getTime()) || start.toISOString().slice(0, 10) !== input.startDate || end.toISOString().slice(0, 10) !== input.endDate || start > end) throw new SeoError("INVALID_INPUT", "Start date and end date must be valid YYYY-MM-DD values in ascending order.");
+	const days = Math.floor((end.getTime() - start.getTime()) / 864e5) + 1;
+	if (days > maximumDays) throw new SeoError("INVALID_INPUT", `Date range must not exceed ${maximumDays} days.`);
+	return {
+		range: {
+			startDate: input.startDate,
+			endDate: input.endDate
+		},
+		days
+	};
 }
-function getKeyringAccount(tokens) {
-	return `google:${tokens.account_email}`;
+//#endregion
+//#region packages/core/dist/analyze/site-diagnostics/decay-report-input.js
+function decayNumberOption(input) {
+	const value = input.value ?? input.fallback;
+	if (!Number.isFinite(value) || value < input.minimum || value > input.maximum) throw new SeoError("INVALID_INPUT", `${input.label} must be between ${input.minimum} and ${input.maximum}.`);
+	return value;
 }
-function hasTokenSecrets(tokens) {
-	return Boolean(tokens.access_token || tokens.refresh_token);
+function rangeDays$1(range) {
+	return Math.floor(((/* @__PURE__ */ new Date(`${range.endDate}T00:00:00.000Z`)).getTime() - (/* @__PURE__ */ new Date(`${range.startDate}T00:00:00.000Z`)).getTime()) / 864e5) + 1;
 }
-function tokenMetadata(tokens) {
-	return {
-		...tokens,
-		access_token: void 0,
-		refresh_token: void 0
-	};
+function dateString(date) {
+	return date.toISOString().slice(0, 10);
 }
-function sameAccount(left, right) {
-	return left.toLowerCase() === right.toLowerCase();
+function subtractDays$1(value, days) {
+	const date = /* @__PURE__ */ new Date(`${value}T00:00:00.000Z`);
+	date.setUTCDate(date.getUTCDate() - days);
+	return dateString(date);
 }
-function parseTokenStore(raw) {
-	if (raw === void 0 || raw === null) return void 0;
-	const store = tokenStoreSchema.safeParse(raw);
-	if (store.success) return store.data;
-	const legacy = tokenSchema.safeParse(raw);
-	if (!legacy.success) return tokenStoreSchema.parse(raw);
-	return {
-		version: 2,
-		active_account: legacy.data.account_email,
-		accounts: [legacy.data]
-	};
+function priorYearDate(value) {
+	const source = /* @__PURE__ */ new Date(`${value}T00:00:00.000Z`);
+	const year = source.getUTCFullYear() - 1;
+	const month = source.getUTCMonth();
+	const day = source.getUTCDate();
+	const candidate = new Date(Date.UTC(year, month, day));
+	if (candidate.getUTCMonth() !== month) return dateString(new Date(Date.UTC(year, month + 1, 0)));
+	return dateString(candidate);
 }
-function readRawTokenStore() {
-	ensureSeoCliDirs();
-	return parseTokenStore(readJsonFile(getSeoCliPaths().tokensFile));
+function subtractCalendarMonths(date, months) {
+	const day = date.getUTCDate();
+	const target = new Date(Date.UTC(date.getUTCFullYear(), date.getUTCMonth() - months, 1));
+	const lastDay = new Date(Date.UTC(target.getUTCFullYear(), target.getUTCMonth() + 1, 0)).getUTCDate();
+	target.setUTCDate(Math.min(day, lastDay));
+	return dateString(target);
 }
-function writeTokenStore(store) {
-	writeJsonAtomic(getSeoCliPaths().tokensFile, tokenStoreSchema.parse(store), PRIVATE_FILE_MODE$1);
+function validateDecayRanges(input) {
+	const latestFinalDate = defaultDateRange$1(1, input.now).endDate;
+	if (input.current.endDate > latestFinalDate) throw new SeoError("INVALID_INPUT", `Decay end date must be ${latestFinalDate} or earlier so both GSC windows use final data.`);
+	const pacificToday = /* @__PURE__ */ new Date(`${latestFinalDate}T00:00:00.000Z`);
+	pacificToday.setUTCDate(pacificToday.getUTCDate() + 4);
+	const retentionStart = subtractCalendarMonths(pacificToday, 16);
+	if (input.previous.startDate < retentionStart) throw new SeoError("INVALID_INPUT", `Comparison range starts before Search Console's rolling 16-month API history (${retentionStart}). Choose a shorter range or use previously stored data.`);
 }
-async function readKeyringTokens(tokens) {
-	const account = getKeyringAccount(tokens);
-	const [accessToken, refreshToken] = await Promise.all([getKeyringPassword(KEYRING_SERVICE$1, `${account}:access`), getKeyringPassword(KEYRING_SERVICE$1, `${account}:refresh`)]);
+function decayComparisonRange(current, comparison = "previous-period") {
+	const days = rangeDays$1(current);
+	if (comparison === "year-over-year") {
+		const endDate = priorYearDate(current.endDate);
+		return {
+			startDate: subtractDays$1(endDate, days - 1),
+			endDate
+		};
+	}
+	const endDate = subtractDays$1(current.startDate, 1);
 	return {
-		accessToken: accessToken ?? void 0,
-		refreshToken: refreshToken ?? void 0
+		startDate: subtractDays$1(endDate, days - 1),
+		endDate
 	};
 }
-async function writeKeyringTokens(tokens) {
-	const account = getKeyringAccount(tokens);
-	if (tokens.access_token) await setKeyringPassword(KEYRING_SERVICE$1, `${account}:access`, tokens.access_token);
-	else await deleteKeyringPassword(KEYRING_SERVICE$1, `${account}:access`);
-	if (tokens.refresh_token) await setKeyringPassword(KEYRING_SERVICE$1, `${account}:refresh`, tokens.refresh_token);
-	else await deleteKeyringPassword(KEYRING_SERVICE$1, `${account}:refresh`);
-}
-async function deleteKeyringTokens(tokens) {
-	const account = getKeyringAccount(tokens);
-	await Promise.all([deleteKeyringPassword(KEYRING_SERVICE$1, `${account}:access`), deleteKeyringPassword(KEYRING_SERVICE$1, `${account}:refresh`)]);
+//#endregion
+//#region packages/core/dist/updates/search-updates.js
+function classifyUpdate(name, product) {
+	const lower = `${name} ${product}`.toLowerCase();
+	if (lower.includes("core")) return "core";
+	if (lower.includes("spam")) return "spam";
+	if (lower.includes("discover")) return "discover";
+	if (lower.includes("ranking")) return "ranking";
+	if (lower.includes("index")) return "indexing";
+	if (lower.includes("serving")) return "serving";
+	return "other";
 }
-async function hydrateTokens(tokens) {
-	if (!readConfig().security.useKeychain || hasTokenSecrets(tokens)) return tokens;
-	try {
-		const keyringTokens = await readKeyringTokens(tokens);
+function searchUpdatesFromIncidents(incidents, input = {}) {
+	const product = input.product?.toLowerCase();
+	return incidents.filter((incident) => !product || incident.service_name.toLowerCase() === product).map((incident) => {
+		const status = incident.end ? "complete" : incident.status_impact === "SERVICE_INFORMATION" ? "rolling-out" : "incident";
 		return {
-			...tokens,
-			access_token: keyringTokens.accessToken,
-			refresh_token: keyringTokens.refreshToken
+			id: incident.id,
+			name: incident.external_desc,
+			type: classifyUpdate(incident.external_desc, incident.service_name),
+			product: incident.service_name,
+			start: incident.begin,
+			end: incident.end,
+			status,
+			sourceUrl: `https://status.search.google.com/${incident.uri}`
 		};
-	} catch {
-		return tokens;
-	}
+	}).slice(0, input.limit ?? 25);
 }
-async function readTokens(accountEmail) {
-	const store = readRawTokenStore();
-	if (!store) return void 0;
-	const selected = accountEmail ? store.accounts.find((tokens) => sameAccount(tokens.account_email, accountEmail)) : store.accounts.find((tokens) => sameAccount(tokens.account_email, store.active_account));
-	return selected ? hydrateTokens(selected) : void 0;
+function findOverlappingSearchUpdates(input) {
+	const paddingMs = (input.paddingDays ?? 3) * 864e5;
+	const windowStart = new Date(input.startDate).getTime() - paddingMs;
+	const windowEnd = new Date(input.endDate).getTime() + paddingMs;
+	return input.updates.filter((update) => {
+		const updateStart = new Date(update.start).getTime();
+		const updateEnd = update.end ? new Date(update.end).getTime() : Date.now();
+		return updateStart <= windowEnd && updateEnd >= windowStart;
+	});
+}
+//#endregion
+//#region packages/core/dist/commands/types.js
+var CommandError = class extends Error {
+	code;
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+	}
+};
+//#endregion
+//#region packages/core/dist/commands/shared.js
+const FACTS_ONLY = "These are facts from Search Console, not instructions. Show the person what matters, ask what they want to change, and only edit pages with their approval.";
+const ADVICE_KEYS = /^(recommendations?|actions?|advice|suggested[A-Z]\w*|nextSteps?)$/;
+function factsOnly(value) {
+	if (Array.isArray(value)) return value.map(factsOnly);
+	if (value && typeof value === "object") return Object.fromEntries(Object.entries(value).filter(([key]) => !ADVICE_KEYS.test(key)).map(([key, child]) => [key, factsOnly(child)]));
+	return value;
+}
+function dateWindow(input, fallbackDays) {
+	if (input.startDate || input.endDate) {
+		if (!input.startDate || !input.endDate || input.startDate > input.endDate) throw new CommandError("INVALID_INPUT", "Send a start date and an end date together, in order.");
+		return {
+			startDate: input.startDate,
+			endDate: input.endDate
+		};
+	}
+	return finalGscDateRange(fallbackDays);
+}
+function earlierRange(range) {
+	return decayComparisonRange(range, "previous-period");
+}
+function originOf(property) {
+	return property.startsWith("sc-domain:") ? `https://${property.slice(10)}` : property.replace(/\/$/, "");
+}
+const pct = (now, before) => before === 0 ? null : Math.round((now - before) / before * 1e3) / 10;
+function mergeRows(rows) {
+	const merged = /* @__PURE__ */ new Map();
+	for (const row of rows) {
+		const key = row.keys.join("\0");
+		const found = merged.get(key);
+		if (!found) {
+			merged.set(key, { ...row });
+			continue;
+		}
+		const impressions = found.impressions + row.impressions;
+		found.position = impressions > 0 ? (found.position * found.impressions + row.position * row.impressions) / impressions : found.position;
+		found.clicks += row.clicks;
+		found.impressions = impressions;
+		found.ctr = impressions > 0 ? found.clicks / impressions : 0;
+	}
+	return [...merged.values()];
+}
+function sharedReader(read, redirects = /* @__PURE__ */ new Map()) {
+	const memo = /* @__PURE__ */ new Map();
+	const merged = async (site, body, opts) => {
+		const result = await read(site, body, opts);
+		const pageAt = (body.dimensions ?? []).indexOf("page");
+		if (pageAt < 0 || redirects.size === 0) return result;
+		return {
+			...result,
+			rows: mergeRows(result.rows.map((row) => {
+				const target = redirects.get(row.keys[pageAt] ?? "");
+				if (!target) return row;
+				const keys = [...row.keys];
+				keys[pageAt] = target;
+				return {
+					...row,
+					keys
+				};
+			}))
+		};
+	};
+	return (site, body, opts) => {
+		const key = JSON.stringify([site, body]);
+		let found = memo.get(key);
+		if (!found) {
+			found = merged(site, body, opts);
+			memo.set(key, found);
+		}
+		return found;
+	};
+}
+async function googleUpdates(window) {
+	if (!window) return [];
+	const incidents = await fetch("https://status.search.google.com/incidents.json", { signal: AbortSignal.timeout(8e3) }).then((response) => response.ok ? response.json() : null).catch(() => null);
+	if (!Array.isArray(incidents)) return "Google Search Status could not be read.";
+	return findOverlappingSearchUpdates({
+		updates: searchUpdatesFromIncidents(incidents, {
+			product: "Ranking",
+			limit: 50
+		}),
+		startDate: window.start,
+		endDate: window.end,
+		paddingDays: 3
+	});
+}
+function checkedDates(checked) {
+	const window = checked;
+	if (!window?.start || !window.end) return "in this window";
+	const dates = window.start === window.end ? window.start : `${window.start} to ${window.end}`;
+	return `within ${window.paddingDays ?? 3} days of ${dates}`;
+}
+function listOfUpdates(value, checked) {
+	if (typeof value === "string") return value;
+	if (!Array.isArray(value)) return null;
+	const where = checkedDates(checked);
+	if (value.length === 0) return `Google updates ${where}: none.`;
+	return `Google updates ${where} (timing only, not cause): ${value.map((update) => `${update.name} (${update.start.slice(0, 10)} to ${update.end?.slice(0, 10) ?? "ongoing"})`).join("; ")}.`;
+}
+function matchProperty(names, site) {
+	if (names.includes(site)) return site;
+	let host;
+	let origin;
+	try {
+		const url = new URL(site.includes("://") ? site : `https://${site.replace(/^sc-domain:/, "")}`);
+		host = url.hostname.replace(/^www\./, "");
+		origin = url.origin;
+	} catch {
+		return null;
+	}
+	const domain = names.filter((name) => name.startsWith("sc-domain:")).map((name) => name.slice(10)).filter((name) => host === name || host.endsWith(`.${name}`)).sort((a, b) => b.length - a.length)[0];
+	if (domain) return `sc-domain:${domain}`;
+	return names.find((name) => name === `${origin}/` || name === `${origin.replace("://", "://www.")}/` || name === `${origin.replace("://www.", "://")}/`) ?? null;
+}
+//#endregion
+//#region packages/core/dist/commands/present.js
+const LIST_KEYS = [
+	"items",
+	"rows",
+	"results",
+	"pages",
+	"urls",
+	"queries",
+	"keywords",
+	"opportunities",
+	"candidates",
+	"clusters",
+	"issues",
+	"domains",
+	"competitors",
+	"links"
+];
+const SKIP_KEYS = /* @__PURE__ */ new Set([
+	"caveats",
+	"warnings",
+	"recommendations",
+	"findings",
+	"sampleUrls",
+	"sampleQueries",
+	"omissions",
+	"dimensions",
+	"brand",
+	"pageChecks"
+]);
+const ID_COLUMNS = [
+	"metric",
+	"direction",
+	"changeDate",
+	"query",
+	"queryFlags",
+	"keyword",
+	"url",
+	"page",
+	"finalUrl",
+	"title",
+	"domain",
+	"target",
+	"check",
+	"rule",
+	"severity",
+	"status",
+	"urls",
+	"topPage"
+];
+const METRIC_COLUMNS = [
+	"percentChange",
+	"baselineMean",
+	"comparisonMean",
+	"clicks",
+	"impressions",
+	"ctr",
+	"position",
+	"previousClicks",
+	"clicksChange",
+	"searchVolume",
+	"volume",
+	"cpc",
+	"difficulty",
+	"rank",
+	"count",
+	"affectedUrls",
+	"score",
+	"priority.score"
+];
+const SUMMARY_ROWS = 10;
+const CELL_MAX = 80;
+const isObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isPrimitive = (value) => value === null || [
+	"string",
+	"number",
+	"boolean"
+].includes(typeof value);
+function mainList(report) {
+	const found = [];
+	const visit = (value, path, depth) => {
+		if (!isObject(value) || depth > 2) return;
+		for (const [key, child] of Object.entries(value)) {
+			if (SKIP_KEYS.has(key)) continue;
+			const childPath = path ? `${path}.${key}` : key;
+			if (Array.isArray(child) && child.length > 0 && child.every(isObject)) found.push({
+				path: childPath,
+				rows: child,
+				known: LIST_KEYS.includes(key)
+			});
+			else if (isObject(child)) visit(child, childPath, depth + 1);
+		}
+	};
+	visit(report, "", 0);
+	found.sort((a, b) => Number(b.known) - Number(a.known) || b.rows.length - a.rows.length || a.path.length - b.path.length);
+	return found[0] ?? null;
+}
+function flatten(row) {
+	const flat = {};
+	for (const [key, value] of Object.entries(row)) if (isPrimitive(value)) flat[key] = value;
+	else if (Array.isArray(value) && value.length && value.every(isPrimitive)) flat[key] = value.join(" ");
+	else if (isObject(value)) {
+		for (const [inner, innerValue] of Object.entries(value)) if (isPrimitive(innerValue)) flat[`${key}.${inner}`] = innerValue;
+	}
+	return flat;
+}
+function columnsFor(rows, max) {
+	const seen = /* @__PURE__ */ new Map();
+	for (const row of rows.slice(0, 50)) for (const [key, value] of Object.entries(row)) {
+		const entry = seen.get(key) ?? {
+			count: 0,
+			length: 0
+		};
+		entry.count++;
+		entry.length += String(value ?? "").length;
+		seen.set(key, entry);
+	}
+	const usable = [...seen].filter(([key, { count, length }]) => {
+		const average = length / count;
+		return ID_COLUMNS.includes(key) || average <= 60;
+	});
+	const rank = (key) => {
+		const id = ID_COLUMNS.indexOf(key);
+		if (id >= 0) return id;
+		const metric = METRIC_COLUMNS.indexOf(key);
+		if (metric >= 0) return 100 + metric;
+		return 1e3;
+	};
+	return usable.map(([key]) => key).filter((key) => !/(^|\.)(id|method|heuristic|estimatedClickLift|confidence|label)$|^site$/.test(key)).sort((a, b) => rank(a) - rank(b)).slice(0, max);
+}
+function cell(value, origin, max = CELL_MAX) {
+	if (value === null || value === void 0) return "";
+	let text = String(value);
+	if (origin && text.startsWith(origin)) text = text.slice(origin.length) || "/";
+	if (typeof value === "number" && !Number.isInteger(value)) {
+		const places = Math.abs(value) < 1 ? 1e3 : 100;
+		text = String(Math.round(value * places) / places);
+	}
+	text = text.replaceAll("|", "\\|").replaceAll("\n", " ");
+	return text.length > max ? `${text.slice(0, max - 1)}…` : text;
+}
+function table(rows, columns, origin, max = CELL_MAX) {
+	if (rows.length === 0 || columns.length === 0) return "";
+	return [columns.join(" | "), ...rows.map((row) => columns.map((key) => cell(row[key], origin, max)).join(" | "))].join("\n");
+}
+function findString(report, keys) {
+	for (const key of keys) {
+		const value = report[key];
+		if (typeof value === "string") return value;
+	}
+	return null;
+}
+function dateRange$1(report) {
+	const range = isObject(report.range) ? report.range : report;
+	const from = findString(range, [
+		"startDate",
+		"from",
+		"start"
+	]);
+	const to = findString(range, [
+		"endDate",
+		"to",
+		"end"
+	]);
+	return from && to ? `${from} to ${to}` : null;
+}
+function limitsOf(report) {
+	return [report.caveats, isObject(report.retainedEvidence) ? report.retainedEvidence.caveats : null].flatMap((list) => Array.isArray(list) ? list : []).filter((line) => typeof line === "string").filter((line) => !/^(Date window|Selection):/.test(line)).slice(0, 4).map((line) => line.length > 200 ? `${line.slice(0, 199)}…` : line);
+}
+function keyFacts(report) {
+	if (!isObject(report.summary)) return null;
+	const facts = Object.entries(report.summary).filter(([key, value]) => key !== "verdict" && isPrimitive(value) && value !== null).slice(0, 8).map(([key, value]) => `${key} ${cell(value, null)}`);
+	return facts.length ? facts.join(", ") : null;
+}
+function filteredLine(report) {
+	if (!isObject(report.selection)) return null;
+	const counts = Object.entries(report.selection).filter(([key, value]) => typeof value === "number" && value > 0 && !/(source|aggregated|valid|eligible|returned|total|groups|days)/i.test(key)).map(([key, value]) => `${key} ${value}`);
+	return counts.length ? `Filtered out: ${counts.join(", ")}.` : null;
+}
+function findingsFirst(report) {
+	const last = Object.keys(report).filter((key) => /suppress|omitted|excluded/i.test(key));
+	if (!last.length) return report;
+	const out = {};
+	for (const [key, value] of Object.entries(report)) if (!last.includes(key)) out[key] = value;
+	for (const key of last) out[key] = report[key];
+	return out;
+}
+function presentReport(input) {
+	const { report, headline, origin } = input;
+	if (!report) return {
+		text: headline,
+		data: null
+	};
+	if (input.detail === "full") {
+		const ordered = findingsFirst(report);
+		return {
+			text: `${headline}\n\n${JSON.stringify(ordered)}`,
+			data: ordered
+		};
+	}
+	const list = mainList(report);
+	const flat = list ? list.rows.map(flatten) : [];
+	const head = [
+		input.label,
+		input.range ?? dateRange$1(report),
+		findString(report, ["dataStatus"])
+	].filter(Boolean).join(" · ");
+	const facts = keyFacts(report);
+	const limits = limitsOf(report);
+	if (input.detail === "rows") {
+		const page = flat.slice(input.offset, input.offset + input.limit);
+		const columns = columnsFor(flat, 14);
+		const end = input.offset + page.length;
+		return {
+			text: [
+				head,
+				list ? `${list.path}: rows ${input.offset + 1} to ${end} of ${flat.length}.` : "This report has no list of rows. Use detail \"full\".",
+				table(page, columns, origin),
+				end < flat.length ? `Next page: ${input.more("rows", end)}` : ""
+			].filter(Boolean).join("\n\n"),
+			data: {
+				path: list?.path ?? null,
+				total: flat.length,
+				offset: input.offset,
+				columns,
+				rows: page
+			}
+		};
+	}
+	const shown = flat.slice(0, Math.min(input.limit, SUMMARY_ROWS));
+	const columns = columnsFor(flat, 8);
+	return {
+		text: [
+			head,
+			headline,
+			facts ? `Facts: ${facts}.` : "",
+			...input.notes ?? [],
+			flat.length < 5 ? filteredLine(report) : null,
+			list ? `${list.path} (${shown.length} of ${flat.length} shown):\n${table(shown, columns, origin)}` : "",
+			limits.length ? `Limits:\n${limits.map((line) => `- ${line}`).join("\n")}` : "",
+			`More: ${shown.length < flat.length ? `${input.more("rows", shown.length)} for more rows, or ` : ""}${input.more("full")} for every field.`
+		].filter(Boolean).join("\n\n"),
+		data: {
+			summary: isObject(report.summary) ? report.summary : null,
+			path: list?.path ?? null,
+			total: flat.length,
+			columns,
+			rows: shown,
+			limits
+		}
+	};
+}
+function preview(report, origin, rows) {
+	const list = mainList(report);
+	if (!list) return {
+		total: 0,
+		text: ""
+	};
+	const flat = list.rows.map(flatten);
+	return {
+		total: flat.length,
+		text: table(flat.slice(0, rows), columnsFor(flat, 6), origin)
+	};
+}
+//#endregion
+//#region packages/core/dist/commands/sites.js
+async function readableSites(google, signIn) {
+	return (await listSearchConsoleSites(google, { signIn })).filter((entry) => entry.permissionLevel !== "siteUnverifiedUser").map((entry) => ({
+		siteUrl: entry.siteUrl,
+		permissionLevel: entry.permissionLevel ?? ""
+	})).sort((a, b) => a.siteUrl.localeCompare(b.siteUrl));
+}
+const hostOf$1 = (value) => {
+	try {
+		return new URL(value.includes("://") ? value : `https://${value.replace(/^sc-domain:/, "")}`).hostname.replace(/^www\./, "");
+	} catch {
+		return value;
+	}
+};
+async function runSites(input) {
+	const named = input.accounts.length > 1;
+	const [google, bing] = await Promise.all([Promise.all(input.accounts.map(async (account) => {
+		const [properties, analytics] = await Promise.all([readableSites(account.google, input.signIn).catch((error) => error instanceof Error ? error : new Error(String(error))), listAnalyticsAccounts(account.google, { signIn: input.signIn }).catch(() => null)]);
+		return {
+			email: account.email,
+			properties,
+			analytics
+		};
+	})), input.bing ? listBingSites(input.bing).catch((error) => error instanceof Error ? error : new Error(String(error))) : Promise.resolve(null)]);
+	const bingSites = Array.isArray(bing) ? bing.filter((site) => site.verified) : [];
+	const bingByHost = new Map(bingSites.map((site) => [hostOf$1(site.url), site]));
+	const properties = google.flatMap((account) => account.properties instanceof Error ? [] : account.properties.map((property) => ({
+		...property,
+		...named ? { account: account.email ?? "" } : {},
+		...Array.isArray(bing) ? { bing: bingByHost.get(hostOf$1(property.siteUrl))?.url ?? "" } : {}
+	})));
+	const googleHosts = new Set(properties.map((property) => hostOf$1(property.siteUrl)));
+	const bingOnly = bingSites.filter((site) => !googleHosts.has(hostOf$1(site.url)));
+	const failed = google.filter((account) => account.properties instanceof Error);
+	const analytics = google.flatMap((account) => (account.analytics ?? []).flatMap((summary) => summary.propertySummaries.map((property) => ({
+		property: property.property.replace("properties/", ""),
+		name: property.displayName ?? "",
+		account: summary.displayName ?? "",
+		...named ? { signIn: account.email ?? "" } : {}
+	}))));
+	const research = [["dataforseo", "x-dataforseo-login"], ["ahrefs", "x-ahrefs-key"]].filter(([, name]) => input.keys.get(name ?? "")).map(([provider]) => provider);
+	const columns = [
+		"siteUrl",
+		"permissionLevel",
+		...named ? ["account"] : [],
+		...Array.isArray(bing) ? ["bing"] : []
+	];
+	return {
+		text: [
+			named ? `Google accounts: ${input.accounts.map((account) => account.email).join(", ")}.` : null,
+			`Search Console properties (${properties.length}):`,
+			properties.length ? table(properties, columns, null) : "None. These Google sign-ins have no Search Console access, so the reports cannot run.",
+			...failed.map((account) => `${account.email ?? "Google"}: could not list properties. ${account.properties.message}`),
+			analytics.length ? `Google Analytics properties (${analytics.length}):\n${table(analytics, [
+				"property",
+				"name",
+				"account",
+				...named ? ["signIn"] : []
+			], null)}` : "Google Analytics: no properties readable with these sign-ins.",
+			input.bing === void 0 ? null : bing === null ? "Bing Webmaster: not connected." : bing instanceof Error ? `Bing Webmaster: could not list sites. ${bing.message}` : bingOnly.length ? `Bing Webmaster sites with no Search Console property here (${bingOnly.length}): ${bingOnly.map((site) => site.url).join(", ")}.` : `Bing Webmaster: ${bingSites.length} verified sites; the bing column shows each one.`,
+			`Research keys: ${research.length ? research.join(", ") : "none"}.`,
+			input.clicky?.length ? `Clicky sites (seo_data with source "clicky"): ${input.clicky.join(", ")}.` : null,
+			`Add a Google account${input.bing === void 0 ? "" : ", Bing"} or a key: ${input.connect}`,
+			"Next: seo_report with a site."
+		].filter(Boolean).join("\n\n"),
+		data: {
+			searchConsole: properties,
+			googleAnalytics: analytics,
+			bing: Array.isArray(bing) ? bingSites : null,
+			research,
+			clicky: input.clicky ?? []
+		}
+	};
+}
+//#endregion
+//#region packages/core/dist/commands/linked.js
+const MAX_ROWS$1 = 1e5;
+const PERMISSION_RANK = {
+	siteOwner: 0,
+	siteFullUser: 1,
+	siteRestrictedUser: 2
+};
+function bingRouter(calls) {
+	if (calls.length === 0) return null;
+	const only = calls[0];
+	if (calls.length === 1 && only) return only;
+	let lists;
+	const sitesOf = () => {
+		lists ??= Promise.all(calls.map(async (call) => ({
+			call,
+			sites: await call("GetUserSites").then((data) => Array.isArray(data) ? data : []).catch(() => [])
+		})));
+		return lists;
+	};
+	return async (method, params = {}) => {
+		const all = await sitesOf();
+		if (method === "GetUserSites") return all.flatMap((item) => item.sites);
+		return (all.find((item) => item.sites.some((entry) => entry.IsVerified === true && entry.Url === params.siteUrl))?.call ?? only)(method, params);
+	};
+}
+var LinkedAccounts = class {
+	hint;
+	google;
+	bing;
+	sites = /* @__PURE__ */ new Map();
+	owners;
+	constructor(input, hint) {
+		this.hint = hint;
+		this.google = input.google.map((account) => ({
+			email: account.email,
+			google: bearerFetch(account.token)
+		}));
+		this.bing = bingRouter(input.bing);
+	}
+	accounts() {
+		return this.google.map((linked) => ({
+			email: linked.email,
+			google: linked.google
+		}));
+	}
+	sitesOf(linked) {
+		let found = this.sites.get(linked);
+		if (!found) {
+			found = readableSites(linked.google, this.hint.signIn);
+			this.sites.set(linked, found);
+		}
+		return found;
+	}
+	ownerMap() {
+		this.owners ??= (async () => {
+			const lists = await Promise.all(this.google.map(async (linked) => ({
+				linked,
+				sites: await this.sitesOf(linked).catch((error) => {
+					if (this.google.length === 1) throw error;
+					return [];
+				})
+			})));
+			const best = /* @__PURE__ */ new Map();
+			for (const { linked, sites } of lists) for (const site of sites) {
+				const rank = PERMISSION_RANK[site.permissionLevel] ?? 3;
+				const found = best.get(site.siteUrl);
+				if (!found || rank < found.rank) best.set(site.siteUrl, {
+					linked,
+					rank
+				});
+			}
+			return new Map([...best].map(([site, { linked }]) => [site, linked]));
+		})();
+		return this.owners;
+	}
+	async resolve(site) {
+		if (this.google.length === 0) throw new CommandError("NOT_CONNECTED", `No Google account is connected. ${this.hint.signIn}`);
+		const found = matchProperty([...(await this.ownerMap()).keys()], site);
+		if (found) return found;
+		throw new CommandError("NO_ACCESS", `None of the connected Google accounts (${this.google.map((linked) => linked.email).join(", ")}) has a Search Console property for ${site}. ${this.hint.addGoogle}`);
+	}
+	async owner(site) {
+		const owner = (await this.ownerMap()).get(await this.resolve(site));
+		if (!owner) throw new CommandError("NO_ACCESS", `No access to ${site}.`);
+		return owner;
+	}
+	searchAnalytics() {
+		return async (site, body) => searchAnalyticsRows((await this.owner(site)).google, site, {
+			...body,
+			maxRows: body.maxRows ?? body.rowLimit ?? MAX_ROWS$1
+		}, { signIn: this.hint.signIn });
+	}
+	async inspect(site, url) {
+		return inspectSearchConsoleUrl((await this.owner(site)).google, site, url, {
+			signIn: this.hint.signIn,
+			languageCode: "en-US"
+		});
+	}
+};
+//#endregion
+//#region packages/core/dist/paths.js
+let memoizedPaths;
+function defaultConfigDir(input) {
+	if (input.platform === "win32") return join(input.env.APPDATA ?? join(input.home, "AppData", "Roaming"), "seo", "Config");
+	return join(input.env.XDG_CONFIG_HOME ?? join(input.home, ".config"), "seo");
+}
+function defaultCacheDir(input) {
+	if (input.platform === "darwin") return join(input.home, "Library", "Caches", "seo");
+	if (input.platform === "win32") return join(input.env.LOCALAPPDATA ?? join(input.home, "AppData", "Local"), "seo", "Cache");
+	return join(input.env.XDG_CACHE_HOME ?? join(input.home, ".cache"), "seo");
+}
+function defaultLogDir(input) {
+	if (input.platform === "darwin") return join(input.home, "Library", "Logs", "seo");
+	if (input.platform === "win32") return join(input.env.LOCALAPPDATA ?? join(input.home, "AppData", "Local"), "seo", "Log");
+	return join(input.env.XDG_STATE_HOME ?? join(input.home, ".local", "state"), "seo");
+}
+function resolvedPathOptions(input) {
+	return {
+		env: input.env ?? process.env,
+		home: input.home ?? homedir(),
+		platform: input.platform ?? process.platform
+	};
+}
+function resolveSeoCliPaths(input = {}) {
+	const options = resolvedPathOptions(input);
+	const configDir = options.env.SEO_CONFIG_DIR ?? defaultConfigDir(options);
+	const cacheDir = options.env.SEO_CACHE_DIR ?? defaultCacheDir(options);
+	return {
+		configDir,
+		cacheDir,
+		logDir: options.env.SEO_LOG_DIR ?? defaultLogDir(options),
+		providerPackagesDir: join(configDir, "providers"),
+		installedProviderPackagesFile: join(configDir, "provider-packages.json"),
+		configFile: join(configDir, "config.json"),
+		tokensFile: join(configDir, "tokens.json"),
+		oauthClientFile: join(configDir, "oauth-client.json"),
+		providerSecretsFile: join(configDir, "provider-secrets.json"),
+		telemetryStateFile: join(configDir, "telemetry.json"),
+		cacheDbFile: join(cacheDir, "cache.db")
+	};
+}
+function legacyMacConfigDir(input) {
+	const options = resolvedPathOptions(input);
+	if (options.platform !== "darwin" || options.env.SEO_CONFIG_DIR || options.env.XDG_CONFIG_HOME) return;
+	return join(options.home, "Library", "Preferences", "seo");
+}
+function migrateLegacyMacConfig(input = {}) {
+	const legacyDir = legacyMacConfigDir(input);
+	if (!legacyDir) return;
+	const paths = resolveSeoCliPaths(input);
+	if (!existsSync(legacyDir) || existsSync(paths.configDir)) return;
+	try {
+		mkdirSync(dirname(paths.configDir), {
+			recursive: true,
+			mode: 448
+		});
+		renameSync(legacyDir, paths.configDir);
+	} catch (error) {
+		const code = error.code;
+		if (code !== "EEXIST" && code !== "ENOENT") throw error;
+	}
+}
+function getSeoCliPaths() {
+	if (memoizedPaths) return memoizedPaths;
+	memoizedPaths = resolveSeoCliPaths();
+	return memoizedPaths;
+}
+function ensureSeoCliDirs() {
+	const paths = getSeoCliPaths();
+	migrateLegacyMacConfig();
+	mkdirSync(paths.configDir, {
+		recursive: true,
+		mode: 448
+	});
+	mkdirSync(paths.cacheDir, {
+		recursive: true,
+		mode: 448
+	});
+	mkdirSync(paths.logDir, {
+		recursive: true,
+		mode: 448
+	});
+	mkdirSync(paths.providerPackagesDir, {
+		recursive: true,
+		mode: 448
+	});
+	return paths;
+}
+//#endregion
+//#region packages/core/dist/storage/files.js
+function ensureParentDir(path, mode = 448) {
+	mkdirSync(dirname(path), {
+		recursive: true,
+		mode
+	});
+}
+function readJsonFile(path) {
+	try {
+		return JSON.parse(readFileSync(path, "utf8"));
+	} catch {
+		return;
+	}
+}
+function writeJsonAtomic(path, data, mode) {
+	ensureParentDir(path);
+	const tmp = `${path}.${process.pid}.${Date.now()}.tmp`;
+	writeFileSync(tmp, JSON.stringify(data, null, 2), {
+		encoding: "utf8",
+		mode
+	});
+	chmodSync(tmp, mode);
+	renameSync(tmp, path);
+	chmodSync(path, mode);
+}
+function safeRemove(path) {
+	rmSync(path, {
+		recursive: true,
+		force: true
+	});
+}
+//#endregion
+//#region packages/core/dist/cloud.js
+const CLOUD_URL = "https://seoskill.dev";
+const EARLY = 6e4;
+const linkFile = () => join(getSeoCliPaths().configDir, "cloud.json");
+function cloudToken() {
+	const fromEnv = process.env.SEO_TOKEN?.trim();
+	if (fromEnv) return fromEnv;
+	return readJsonFile(linkFile())?.token;
+}
+function cloudLinked() {
+	return Boolean(cloudToken());
+}
+const CLOUD_SIGN_IN = "Run `seo login` to link this machine to your seoskill.dev account again.";
+async function call$1(path, init = {}) {
+	const response = await fetch(`${CLOUD_URL}${path}`, {
+		...init,
+		headers: {
+			"content-type": "application/json",
+			...init.token ? { authorization: `Bearer ${init.token}` } : {}
+		}
+	}).catch(() => {
+		throw new SeoError("PROVIDER_UNAVAILABLE", `Could not reach ${CLOUD_URL}. Check the network and try again.`);
+	});
+	const body = await readJson(response, "seoskill.dev").catch(() => ({}));
+	return {
+		ok: response.ok,
+		status: response.status,
+		body
+	};
+}
+let credentials;
+function expiresSoon(value) {
+	return [...value.google, ...value.bing].some((item) => "expiresAt" in item && item.expiresAt - EARLY < Date.now());
+}
+async function cloudCredentials(options = {}) {
+	const current = credentials ? await credentials.catch(() => null) : null;
+	if (current && !expiresSoon(current) && !options.refreshClicky) return current;
+	credentials = (async () => {
+		const token = cloudToken();
+		if (!token) throw new SeoError("AUTH_REQUIRED", notSignedIn());
+		const result = await call$1(`/account/cli/credentials${options.refreshClicky ? "?clicky=refresh" : ""}`, { token });
+		if (result.status === 401) throw new SeoError("AUTH_EXPIRED", `This machine is not linked to a seoskill.dev account any more. ${CLOUD_SIGN_IN}`);
+		if (!result.ok) throw new SeoError("PROVIDER_UNAVAILABLE", `seoskill.dev returned ${result.status}. Try again in a minute.`);
+		return result.body;
+	})();
+	return credentials;
+}
+function notSignedIn() {
+	return "Not signed in. Run `seo login` to use your seoskill.dev account on this machine (it prints a link to approve), or `seo auth login` to sign in with Google on this machine only.";
+}
+function tokenOf(item, what) {
+	if ("error" in item) throw new SeoError("AUTH_EXPIRED", `${what}: ${item.error}`);
+	return item.token;
+}
+async function cloudGoogleToken(email) {
+	const { google, account } = await cloudCredentials();
+	const found = email ? google.find((item) => item.email.toLowerCase() === email.toLowerCase()) : google[0];
+	if (!found) throw new SeoError("AUTH_REQUIRED", email ? `${email} is not linked to your seoskill.dev account. Add it at ${account}#google.` : `No Google account is linked to your seoskill.dev account. Add one at ${account}#google.`);
+	return tokenOf(found, `Google sign-in for ${found.email}`);
+}
+async function cloudGoogleEmails() {
+	return (await cloudCredentials()).google.map((item) => item.email);
+}
+let linked;
+async function cloudAccountFor(site) {
+	if (!cloudLinked()) return void 0;
+	linked ??= cloudGoogleEmails().then((emails) => new LinkedAccounts({
+		google: emails.map((email) => ({
+			email,
+			token: () => cloudGoogleToken(email)
+		})),
+		bing: []
+	}, {
+		signIn: CLOUD_SIGN_IN,
+		addGoogle: "Add it on your seoskill.dev account page."
+	}));
+	const accounts = await linked;
+	if (accounts.google.length < 2) return accounts.google[0]?.email;
+	return (await accounts.owner(site)).email;
+}
+async function cloudBing() {
+	const { bing, account } = await cloudCredentials();
+	return bingRouter(bing.map((_, index) => bingCall({ accessToken: async () => {
+		const item = (await cloudCredentials()).bing[index];
+		if (!item) throw new SeoError("AUTH_EXPIRED", CLOUD_SIGN_IN);
+		return tokenOf(item, "Bing sign-in");
+	} }, { signIn: `Reconnect Bing at ${account}.` })));
+}
+async function cloudKeys() {
+	return (await cloudCredentials()).keys;
+}
+//#endregion
+//#region packages/core/dist/types/auth.js
+const tokenSchema = z.object({
+	provider: z.literal("google"),
+	account_email: z.string().email().max(320),
+	scope: z.string().max(2e4),
+	token_type: z.string().max(100),
+	access_token: z.string().max(65536).optional(),
+	refresh_token: z.string().max(65536).optional(),
+	expires_at: z.number().int(),
+	obtained_at: z.number().int(),
+	client_source: z.enum(["shared", "byo"])
+});
+const tokenStoreSchema = z.object({
+	version: z.literal(2),
+	active_account: z.string().email(),
+	accounts: z.array(tokenSchema).min(1).max(50)
+}).superRefine((store, context) => {
+	const emails = store.accounts.map((tokens) => tokens.account_email.toLowerCase());
+	if (new Set(emails).size !== emails.length) context.addIssue({
+		code: "custom",
+		path: ["accounts"],
+		message: "Google account emails must be unique."
+	});
+	if (!emails.includes(store.active_account.toLowerCase())) context.addIssue({
+		code: "custom",
+		path: ["active_account"],
+		message: "The active Google account must exist in accounts."
+	});
+});
+//#endregion
+//#region packages/core/dist/providers/contracts.js
+const providerIdSchema = z.string().min(1).max(64).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/u);
+z.enum([
+	"keyword-metrics",
+	"keyword-discovery",
+	"serp-snapshot",
+	"domain-overview",
+	"ranked-keywords",
+	"relevant-pages",
+	"serp-competitors",
+	"link-summary",
+	"referring-domains",
+	"backlinks",
+	"domain-rating",
+	"local-search",
+	"ai-mentions",
+	"ai-prompt-observation"
+]);
+//#endregion
+//#region packages/core/dist/types/config.js
+const providerPreferenceSchema = z.enum(["cheap", "authoritative"]);
+z.enum(["google", "clicky"]);
+const analyticsExtensionIdSchema = z.string().min(1).max(64).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/u);
+const analyticsExtensionAccountSchema = z.record(z.string().min(1).max(64).regex(/^[A-Za-z][A-Za-z0-9-]*$/u).refine((value) => ![
+	"constructor",
+	"prototype",
+	"__proto__"
+].includes(value)), z.string().trim().min(1).max(1e3)).refine((value) => Object.keys(value).length <= 16, { message: "An analytics provider account can have at most 16 fields." });
+const providerConnectionAccountsSchema = z.record(providerIdSchema, analyticsExtensionAccountSchema).refine((value) => Object.keys(value).length <= 20, { message: "There can be at most 20 provider connection records." });
+const analyticsConnectionSchema = z.discriminatedUnion("provider", [
+	z.object({
+		provider: z.literal("google"),
+		propertyId: z.string(),
+		accountEmail: z.string().email().optional()
+	}),
+	z.object({
+		provider: z.literal("clicky"),
+		siteId: z.string().regex(/^\d{1,30}$/u)
+	}),
+	z.object({
+		provider: z.literal("extension"),
+		providerId: analyticsExtensionIdSchema,
+		account: analyticsExtensionAccountSchema
+	})
+]);
+const configSchema = z.looseObject({
+	providers: z.object({
+		dataForSeoLogin: z.string().optional(),
+		dataForSeoPassword: z.string().optional(),
+		prefer: providerPreferenceSchema.default("cheap"),
+		connections: providerConnectionAccountsSchema.optional()
+	}).default({ prefer: "cheap" }),
+	security: z.object({ useKeychain: z.boolean().default(true) }).default({ useKeychain: true }),
+	auth: z.object({
+		sharedClientId: z.string().optional(),
+		sharedClientSecret: z.string().optional()
+	}).default({})
+});
+let loadedKeyring;
+async function resolveKeyring() {
+	if (!loadedKeyring) loadedKeyring = import("@napi-rs/keyring/keytar.js").then((module) => module);
+	return loadedKeyring;
+}
+async function getKeyringPassword(service, account) {
+	return (await resolveKeyring()).getPassword(service, account);
+}
+async function setKeyringPassword(service, account, password) {
+	await (await resolveKeyring()).setPassword(service, account, password);
+}
+async function deleteKeyringPassword(service, account) {
+	return (await resolveKeyring()).deletePassword(service, account);
+}
+//#endregion
+//#region packages/core/dist/storage/config.js
+const KEYRING_SERVICE$1 = "seo";
+const PRIVATE_FILE_MODE$1 = 384;
+function tightenConfigPermissions(path) {
+	try {
+		chmodSync(path, PRIVATE_FILE_MODE$1);
+	} catch (error) {
+		if (error.code !== "ENOENT") throw error;
+	}
+}
+function readConfig() {
+	ensureSeoCliDirs();
+	const configFile = getSeoCliPaths().configFile;
+	tightenConfigPermissions(configFile);
+	const raw = readJsonFile(configFile);
+	return configSchema.parse(raw ?? {});
+}
+function writeConfig(config) {
+	ensureSeoCliDirs();
+	writeJsonAtomic(getSeoCliPaths().configFile, configSchema.parse(config), PRIVATE_FILE_MODE$1);
+}
+function getKeyringAccount(tokens) {
+	return `google:${tokens.account_email}`;
+}
+function hasTokenSecrets(tokens) {
+	return Boolean(tokens.access_token || tokens.refresh_token);
+}
+function tokenMetadata(tokens) {
+	return {
+		...tokens,
+		access_token: void 0,
+		refresh_token: void 0
+	};
+}
+function sameAccount(left, right) {
+	return left.toLowerCase() === right.toLowerCase();
+}
+function parseTokenStore(raw) {
+	if (raw === void 0 || raw === null) return void 0;
+	const store = tokenStoreSchema.safeParse(raw);
+	if (store.success) return store.data;
+	const legacy = tokenSchema.safeParse(raw);
+	if (!legacy.success) return tokenStoreSchema.parse(raw);
+	return {
+		version: 2,
+		active_account: legacy.data.account_email,
+		accounts: [legacy.data]
+	};
+}
+function readRawTokenStore() {
+	ensureSeoCliDirs();
+	return parseTokenStore(readJsonFile(getSeoCliPaths().tokensFile));
+}
+function writeTokenStore(store) {
+	writeJsonAtomic(getSeoCliPaths().tokensFile, tokenStoreSchema.parse(store), PRIVATE_FILE_MODE$1);
+}
+async function readKeyringTokens(tokens) {
+	const account = getKeyringAccount(tokens);
+	const [accessToken, refreshToken] = await Promise.all([getKeyringPassword(KEYRING_SERVICE$1, `${account}:access`), getKeyringPassword(KEYRING_SERVICE$1, `${account}:refresh`)]);
+	return {
+		accessToken: accessToken ?? void 0,
+		refreshToken: refreshToken ?? void 0
+	};
+}
+async function writeKeyringTokens(tokens) {
+	const account = getKeyringAccount(tokens);
+	if (tokens.access_token) await setKeyringPassword(KEYRING_SERVICE$1, `${account}:access`, tokens.access_token);
+	else await deleteKeyringPassword(KEYRING_SERVICE$1, `${account}:access`);
+	if (tokens.refresh_token) await setKeyringPassword(KEYRING_SERVICE$1, `${account}:refresh`, tokens.refresh_token);
+	else await deleteKeyringPassword(KEYRING_SERVICE$1, `${account}:refresh`);
+}
+async function deleteKeyringTokens(tokens) {
+	const account = getKeyringAccount(tokens);
+	await Promise.all([deleteKeyringPassword(KEYRING_SERVICE$1, `${account}:access`), deleteKeyringPassword(KEYRING_SERVICE$1, `${account}:refresh`)]);
+}
+async function hydrateTokens(tokens) {
+	if (!readConfig().security.useKeychain || hasTokenSecrets(tokens)) return tokens;
+	try {
+		const keyringTokens = await readKeyringTokens(tokens);
+		return {
+			...tokens,
+			access_token: keyringTokens.accessToken,
+			refresh_token: keyringTokens.refreshToken
+		};
+	} catch {
+		return tokens;
+	}
+}
+async function readTokens(accountEmail) {
+	const store = readRawTokenStore();
+	if (!store) return void 0;
+	const selected = accountEmail ? store.accounts.find((tokens) => sameAccount(tokens.account_email, accountEmail)) : store.accounts.find((tokens) => sameAccount(tokens.account_email, store.active_account));
+	return selected ? hydrateTokens(selected) : void 0;
 }
 async function writeTokens(tokens, options = {}) {
 	ensureSeoCliDirs();
@@ -14401,7 +15341,7 @@ async function requestGoogleAccessToken(input, fetchImpl = fetch) {
 //#region packages/core/dist/gsc/auth/authorized-client.js
 const REFRESH_BUFFER_MS = 6e4;
 function authRequired(accountEmail) {
-	return new SeoError("AUTH_REQUIRED", accountEmail ? `Google account ${accountEmail} is not connected. Run \`seo auth login\` first.` : "Not logged in. Run `seo auth login` first.");
+	return new SeoError("AUTH_REQUIRED", accountEmail ? `Google account ${accountEmail} is not connected. Run \`seo auth login\` first.` : notSignedIn());
 }
 function authExpired() {
 	return new SeoError("AUTH_EXPIRED", "Google refresh token is no longer valid. Run `seo auth login` again.");
@@ -14494,6 +15434,18 @@ async function createGoogleAccessTokenClient(accountEmail) {
 			accountEmail: serviceAccount.clientEmail
 		}
 	};
+	if (cloudLinked()) {
+		const email = accountEmail ?? (await cloudGoogleEmails())[0] ?? "";
+		return {
+			client: { getAccessToken: () => cloudGoogleToken(email || void 0) },
+			mode: "cloud",
+			identity: email,
+			quotaIdentity: {
+				clientId: "seoskill.dev",
+				accountEmail: email
+			}
+		};
+	}
 	const { client, tokens } = await createAuthorizedClient(accountEmail);
 	const clientConfig = requireClientConfig(tokens);
 	return {
@@ -18327,7 +19279,7 @@ function inspectionResponseError(response, input) {
 }
 async function inspectUrl(input) {
 	const inspectionUrl = assertUrlMatchesGscProperty(input.siteUrl, input.inspectionUrl);
-	const { client, quotaIdentity } = await getAuthorized(input.accountEmail);
+	const { client, quotaIdentity } = await getAuthorized(input.accountEmail ?? await cloudAccountFor(input.siteUrl));
 	const reservation = reserveUrlInspectionQuota({
 		credentialKey: credentialKey(quotaIdentity),
 		property: input.siteUrl,
@@ -18377,35 +19329,6 @@ async function inspectUrl(input) {
 	return await readJson(response, "URL Inspection");
 }
 //#endregion
-//#region packages/core/dist/gsc/dates.js
-const GSC_TIME_ZONE = "America/Los_Angeles";
-function dateInTimeZone(now, timeZone) {
-	const parts = Object.fromEntries(new Intl.DateTimeFormat("en-US", {
-		timeZone,
-		year: "numeric",
-		month: "2-digit",
-		day: "2-digit"
-	}).formatToParts(now).map((part) => [part.type, part.value]));
-	return new Date(Date.UTC(Number(parts.year), Number(parts.month) - 1, Number(parts.day)));
-}
-function shiftIsoDate(date, days) {
-	const value = /* @__PURE__ */ new Date(`${date}T00:00:00.000Z`);
-	value.setUTCDate(value.getUTCDate() + days);
-	return value.toISOString().slice(0, 10);
-}
-function latestFinalGscDate(now = /* @__PURE__ */ new Date()) {
-	const pacificToday = dateInTimeZone(now, GSC_TIME_ZONE);
-	pacificToday.setUTCDate(pacificToday.getUTCDate() - 4);
-	return pacificToday.toISOString().slice(0, 10);
-}
-function finalGscDateRange(days = 28, now = /* @__PURE__ */ new Date()) {
-	const endDate = latestFinalGscDate(now);
-	return {
-		startDate: shiftIsoDate(endDate, -(days - 1)),
-		endDate
-	};
-}
-//#endregion
 //#region packages/core/dist/gsc/client/search-analytics.js
 function searchDateRange(days) {
 	return finalGscDateRange(days);
@@ -18414,7 +19337,7 @@ function resolveSearchDateWindow(input = 28) {
 	return typeof input === "number" ? searchDateRange(input) : input;
 }
 async function querySearchAnalytics(site, body, opts = {}) {
-	const { client, identity } = await getAuthorized(opts.accountEmail);
+	const { client, identity } = await getAuthorized(opts.accountEmail ?? await cloudAccountFor(site));
 	const db = getDb();
 	const queryHash = hashKey([
 		site,
@@ -18573,12 +19496,21 @@ async function queryPagesTopQueriesBatch(site, pageUrls, range = 28) {
 //#endregion
 //#region packages/core/dist/gsc/client/sites.js
 async function listSites(_refresh = false, accountEmail) {
-	const { client } = await getAuthorized(accountEmail);
-	const entries = await listSearchConsoleSites(googleFetchFor(client), LOCAL_SIGN_IN);
+	const entries = !accountEmail && cloudLinked() ? await allCloudSites() : await listSearchConsoleSites(googleFetchFor((await getAuthorized(accountEmail)).client), LOCAL_SIGN_IN);
 	const insert = getDb().prepare("INSERT OR REPLACE INTO sites (site_url, display_name, permission, added_at, is_default) VALUES (?, ?, ?, ?, COALESCE((SELECT is_default FROM sites WHERE site_url = ?), 0))");
 	for (const site of entries) insert.run(site.siteUrl, site.siteUrl, site.permissionLevel ?? null, Date.now(), site.siteUrl);
 	return entries;
 }
+async function allCloudSites() {
+	const lists = await Promise.all((await cloudGoogleEmails()).map(async (email) => listSearchConsoleSites(googleFetchFor((await getAuthorized(email)).client), LOCAL_SIGN_IN)));
+	const best = /* @__PURE__ */ new Map();
+	const rank = (site) => PERMISSION_RANK[site.permissionLevel ?? ""] ?? 3;
+	for (const site of lists.flat()) {
+		const found = best.get(site.siteUrl);
+		if (!found || rank(site) < rank(found)) best.set(site.siteUrl, site);
+	}
+	return [...best.values()];
+}
 //#endregion
 //#region packages/core/dist/analyze/page-technical-signals.js
 function normalizePageUrl(value) {
@@ -19270,7 +20202,7 @@ function jaccard(a, b) {
 	const union = /* @__PURE__ */ new Set([...setA, ...setB]);
 	return union.size === 0 ? 0 : intersection.length / union.size;
 }
-function defaultDateRange$1(days = 28, now = /* @__PURE__ */ new Date()) {
+function defaultDateRange(days = 28, now = /* @__PURE__ */ new Date()) {
 	return finalGscDateRange(days, now);
 }
 //#endregion
@@ -20319,7 +21251,7 @@ function reportCaveats$1(input) {
 async function pageOpportunitiesReport(input, dependencies = defaultDependencies$12) {
 	const url = assertUrlMatchesGscProperty(input.site, input.url);
 	const days = reportDays$1(input.days);
-	const range = defaultDateRange$1(days);
+	const range = defaultDateRange(days);
 	const targetResult = await dependencies.searchAnalytics(input.site, {
 		...range,
 		dimensions: ["query", "page"],
@@ -23369,37 +24301,10 @@ function collectCrawlAiSignals(input) {
 	]);
 }
 //#endregion
-//#region packages/core/dist/analyze/site-diagnostics/quick-wins-report-input.js
-function integerOption$1(input) {
-	if (input.value === void 0) return input.fallback;
-	if (!Number.isInteger(input.value) || input.value < input.minimum || input.value > input.maximum) throw new SeoError("INVALID_INPUT", `${input.label} must be a whole number between ${input.minimum} and ${input.maximum}.`);
-	return input.value;
-}
-function defaultDateRange(days, now) {
-	return finalGscDateRange(days, now);
-}
-function explicitDateRange(input, maximumDays) {
-	if (!input.startDate && !input.endDate) return void 0;
-	if (!input.startDate || !input.endDate) throw new SeoError("INVALID_INPUT", "Start date and end date must be provided together.");
-	const pattern = /^\d{4}-\d{2}-\d{2}$/;
-	const start = /* @__PURE__ */ new Date(`${input.startDate}T00:00:00.000Z`);
-	const end = /* @__PURE__ */ new Date(`${input.endDate}T00:00:00.000Z`);
-	if (!pattern.test(input.startDate) || !pattern.test(input.endDate) || Number.isNaN(start.getTime()) || Number.isNaN(end.getTime()) || start.toISOString().slice(0, 10) !== input.startDate || end.toISOString().slice(0, 10) !== input.endDate || start > end) throw new SeoError("INVALID_INPUT", "Start date and end date must be valid YYYY-MM-DD values in ascending order.");
-	const days = Math.floor((end.getTime() - start.getTime()) / 864e5) + 1;
-	if (days > maximumDays) throw new SeoError("INVALID_INPUT", `Date range must not exceed ${maximumDays} days.`);
-	return {
-		range: {
-			startDate: input.startDate,
-			endDate: input.endDate
-		},
-		days
-	};
-}
-//#endregion
 //#region packages/core/dist/analyze/crawler/site-crawl-providers.js
 function crawlMetricsWindow(now) {
 	return {
-		...defaultDateRange(28, now),
+		...defaultDateRange$1(28, now),
 		days: 28
 	};
 }
@@ -24728,6 +25633,9 @@ async function storedSiteKeys() {
 		source: credential.source
 	};
 }
+async function readClickySiteKeys() {
+	return (await storedSiteKeys()).siteKeys;
+}
 async function readClickySiteKey(siteIdValue, input = {}) {
 	const siteId = normalizeClickySiteId(siteIdValue);
 	const environmentKey = (input.env ?? process.env)[CLICKY_SITEKEY_ENV]?.trim();
@@ -26813,7 +27721,7 @@ async function ctrUnderperformersReportWith(input, dependencies) {
 		label: "Days"
 	});
 	const now = dependencies.now();
-	const range = explicitRange?.range ?? defaultDateRange(days, now);
+	const range = explicitRange?.range ?? defaultDateRange$1(days, now);
 	const source = await dependencies.searchAnalytics(input.site, {
 		...range,
 		dimensions: ["query", "page"],
@@ -27255,7 +28163,7 @@ function analyzeSegmentRows(input) {
 //#region packages/core/dist/analyze/segment-impact-input.js
 const DAY_MS = 864e5;
 const MAX_WINDOW_DAYS = 240;
-function subtractDays$1(value, days) {
+function subtractDays(value, days) {
 	const date = /* @__PURE__ */ new Date(`${value}T00:00:00.000Z`);
 	date.setUTCDate(date.getUTCDate() - days);
 	return date.toISOString().slice(0, 10);
@@ -27264,9 +28172,9 @@ function segmentRangeDays(range) {
 	return Math.floor((Date.parse(`${range.endDate}T00:00:00.000Z`) - Date.parse(`${range.startDate}T00:00:00.000Z`)) / DAY_MS) + 1;
 }
 function segmentComparisonRange(after, compareDays) {
-	const endDate = subtractDays$1(after.startDate, 1);
+	const endDate = subtractDays(after.startDate, 1);
 	return {
-		startDate: subtractDays$1(endDate, compareDays - 1),
+		startDate: subtractDays(endDate, compareDays - 1),
 		endDate
 	};
 }
@@ -27278,7 +28186,7 @@ function resolveSegmentRanges(input) {
 		maximum: MAX_WINDOW_DAYS,
 		label: "days"
 	});
-	const after = explicitDateRange(input, MAX_WINDOW_DAYS)?.range ?? defaultDateRange(days, input.now);
+	const after = explicitDateRange(input, MAX_WINDOW_DAYS)?.range ?? defaultDateRange$1(days, input.now);
 	const compareDays = integerOption$1({
 		value: input.compareDays,
 		fallback: segmentRangeDays(after),
@@ -27297,63 +28205,6 @@ function validateSegmentSite(site) {
 	if (!site.trim()) throw new SeoError("INVALID_INPUT", "site must not be empty.");
 }
 //#endregion
-//#region packages/core/dist/analyze/site-diagnostics/decay-report-input.js
-function decayNumberOption(input) {
-	const value = input.value ?? input.fallback;
-	if (!Number.isFinite(value) || value < input.minimum || value > input.maximum) throw new SeoError("INVALID_INPUT", `${input.label} must be between ${input.minimum} and ${input.maximum}.`);
-	return value;
-}
-function rangeDays$1(range) {
-	return Math.floor(((/* @__PURE__ */ new Date(`${range.endDate}T00:00:00.000Z`)).getTime() - (/* @__PURE__ */ new Date(`${range.startDate}T00:00:00.000Z`)).getTime()) / 864e5) + 1;
-}
-function dateString(date) {
-	return date.toISOString().slice(0, 10);
-}
-function subtractDays(value, days) {
-	const date = /* @__PURE__ */ new Date(`${value}T00:00:00.000Z`);
-	date.setUTCDate(date.getUTCDate() - days);
-	return dateString(date);
-}
-function priorYearDate(value) {
-	const source = /* @__PURE__ */ new Date(`${value}T00:00:00.000Z`);
-	const year = source.getUTCFullYear() - 1;
-	const month = source.getUTCMonth();
-	const day = source.getUTCDate();
-	const candidate = new Date(Date.UTC(year, month, day));
-	if (candidate.getUTCMonth() !== month) return dateString(new Date(Date.UTC(year, month + 1, 0)));
-	return dateString(candidate);
-}
-function subtractCalendarMonths(date, months) {
-	const day = date.getUTCDate();
-	const target = new Date(Date.UTC(date.getUTCFullYear(), date.getUTCMonth() - months, 1));
-	const lastDay = new Date(Date.UTC(target.getUTCFullYear(), target.getUTCMonth() + 1, 0)).getUTCDate();
-	target.setUTCDate(Math.min(day, lastDay));
-	return dateString(target);
-}
-function validateDecayRanges(input) {
-	const latestFinalDate = defaultDateRange(1, input.now).endDate;
-	if (input.current.endDate > latestFinalDate) throw new SeoError("INVALID_INPUT", `Decay end date must be ${latestFinalDate} or earlier so both GSC windows use final data.`);
-	const pacificToday = /* @__PURE__ */ new Date(`${latestFinalDate}T00:00:00.000Z`);
-	pacificToday.setUTCDate(pacificToday.getUTCDate() + 4);
-	const retentionStart = subtractCalendarMonths(pacificToday, 16);
-	if (input.previous.startDate < retentionStart) throw new SeoError("INVALID_INPUT", `Comparison range starts before Search Console's rolling 16-month API history (${retentionStart}). Choose a shorter range or use previously stored data.`);
-}
-function decayComparisonRange(current, comparison = "previous-period") {
-	const days = rangeDays$1(current);
-	if (comparison === "year-over-year") {
-		const endDate = priorYearDate(current.endDate);
-		return {
-			startDate: subtractDays(endDate, days - 1),
-			endDate
-		};
-	}
-	const endDate = subtractDays(current.startDate, 1);
-	return {
-		startDate: subtractDays(endDate, days - 1),
-		endDate
-	};
-}
-//#endregion
 //#region packages/core/dist/analyze/segment-impact-fallback.js
 function unavailableSegmentImpactReport(input) {
 	const days = segmentRangeDays(input.after);
@@ -29173,7 +30024,7 @@ async function cannibalReportWith(input, dependencies) {
 	});
 	const now = dependencies.now();
 	const explicit = explicitDateRange(input, 548);
-	const range = explicit?.range ?? defaultDateRange(days, now);
+	const range = explicit?.range ?? defaultDateRange$1(days, now);
 	const rangeDays = explicit?.days ?? days;
 	const requestBase = {
 		...range,
@@ -29631,7 +30482,7 @@ async function decayingReportWith(input, dependencies) {
 	});
 	const now = dependencies.now();
 	const explicit = explicitDateRange(input, 548);
-	const currentRange = explicit?.range ?? defaultDateRange(days, now);
+	const currentRange = explicit?.range ?? defaultDateRange$1(days, now);
 	const comparison = input.comparison ?? "previous-period";
 	const previousRange = decayComparisonRange(currentRange, comparison);
 	validateDecayRanges({
@@ -30104,7 +30955,7 @@ async function quickWinsReportWith(input, dependencies) {
 		label: "Verification limit"
 	});
 	const generatedAt = dependencies.now().toISOString();
-	const range = explicitRange?.range ?? defaultDateRange(days, new Date(generatedAt));
+	const range = explicitRange?.range ?? defaultDateRange$1(days, new Date(generatedAt));
 	const source = await dependencies.searchAnalytics(input.site, {
 		...range,
 		dimensions: ["query", "page"],
@@ -30528,7 +31379,7 @@ function reportDays(value) {
 	if (!Number.isInteger(value) || value < 1 || value > MAX_DAYS) throw new SeoError("INVALID_INPUT", `Days must be a whole number between 1 and ${MAX_DAYS}.`);
 	return value;
 }
-function dateRange$1(days, now) {
+function dateRange(days, now) {
 	return finalGscDateRange(days, now);
 }
 function verifiedRecommendation(coverage) {
@@ -30568,7 +31419,7 @@ async function strikingDistanceWith(input, dependencies) {
 	const explicitRange = explicitDateRange(input, MAX_DAYS);
 	const days = explicitRange?.days ?? reportDays(input.days);
 	const generatedAt = dependencies.now().toISOString();
-	const range = explicitRange?.range ?? dateRange$1(days, new Date(generatedAt));
+	const range = explicitRange?.range ?? dateRange(days, new Date(generatedAt));
 	const result = await dependencies.searchAnalytics(input.site, {
 		...range,
 		dimensions: ["query", "page"],
@@ -30680,44 +31531,6 @@ function strikingDistance(input, dependencies = defaultDependencies$5) {
 	return strikingDistanceWith(input, dependencies);
 }
 //#endregion
-//#region packages/core/dist/updates/search-updates.js
-function classifyUpdate(name, product) {
-	const lower = `${name} ${product}`.toLowerCase();
-	if (lower.includes("core")) return "core";
-	if (lower.includes("spam")) return "spam";
-	if (lower.includes("discover")) return "discover";
-	if (lower.includes("ranking")) return "ranking";
-	if (lower.includes("index")) return "indexing";
-	if (lower.includes("serving")) return "serving";
-	return "other";
-}
-function searchUpdatesFromIncidents(incidents, input = {}) {
-	const product = input.product?.toLowerCase();
-	return incidents.filter((incident) => !product || incident.service_name.toLowerCase() === product).map((incident) => {
-		const status = incident.end ? "complete" : incident.status_impact === "SERVICE_INFORMATION" ? "rolling-out" : "incident";
-		return {
-			id: incident.id,
-			name: incident.external_desc,
-			type: classifyUpdate(incident.external_desc, incident.service_name),
-			product: incident.service_name,
-			start: incident.begin,
-			end: incident.end,
-			status,
-			sourceUrl: `https://status.search.google.com/${incident.uri}`
-		};
-	}).slice(0, input.limit ?? 25);
-}
-function findOverlappingSearchUpdates(input) {
-	const paddingMs = (input.paddingDays ?? 3) * 864e5;
-	const windowStart = new Date(input.startDate).getTime() - paddingMs;
-	const windowEnd = new Date(input.endDate).getTime() + paddingMs;
-	return input.updates.filter((update) => {
-		const updateStart = new Date(update.start).getTime();
-		const updateEnd = update.end ? new Date(update.end).getTime() : Date.now();
-		return updateStart <= windowEnd && updateEnd >= windowStart;
-	});
-}
-//#endregion
 //#region packages/core/dist/updates/search-status.js
 const INCIDENTS_URL = "https://status.search.google.com/incidents.json";
 async function fetchSearchStatusIncidents() {
@@ -31094,7 +31907,7 @@ async function trafficAnomalyWith(input, dependencies) {
 	const range = input.startDate && input.endDate ? {
 		startDate: input.startDate,
 		endDate: input.endDate
-	} : defaultDateRange$1(days, dependencies.now());
+	} : defaultDateRange(days, dependencies.now());
 	const result = await dependencies.searchAnalytics(input.site, {
 		...range,
 		dimensions: ["date"],
@@ -31186,7 +31999,7 @@ function fallbackRange(input) {
 	return input.startDate && input.endDate ? {
 		startDate: input.startDate,
 		endDate: input.endDate
-	} : defaultDateRange$1(input.days ?? 28);
+	} : defaultDateRange(input.days ?? 28);
 }
 function emptyAnomaly(input) {
 	return {
@@ -31391,7 +32204,7 @@ function emptyStriking(input) {
 	return {
 		site: input.site,
 		generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-		range: defaultDateRange$1(input.days ?? 28),
+		range: defaultDateRange(input.days ?? 28),
 		rangeDays: input.days ?? 28,
 		source: {
 			provider: "google-search-console",
@@ -33306,7 +34119,7 @@ function rowMetrics(row) {
 }
 async function linkRecover(input) {
 	const days = input.days ?? 90;
-	const range = defaultDateRange$1(days);
+	const range = defaultDateRange(days);
 	const result = await querySearchAnalytics(input.site, {
 		...range,
 		dimensions: ["page"],
@@ -34467,7 +35280,7 @@ async function queryClusterReport(input) {
 		maximum: 548,
 		label: "days"
 	});
-	const range = defaultDateRange$1(days);
+	const range = defaultDateRange(days);
 	const filters = input.scope ? [{
 		groupType: "and",
 		filters: [{
@@ -35649,7 +36462,7 @@ async function refreshPrioritiesWorkflow(input) {
 		verifyContent: input.verifyContent ?? true,
 		verifyLimit: input.verifyContent === false ? void 0 : input.verifyLimit ?? Math.min(input.limit ?? 5, 5)
 	});
-	const range = defaultDateRange$1(input.days ?? 28);
+	const range = defaultDateRange(input.days ?? 28);
 	const analytics = await fetchLandingPageValues({
 		connection: input.analyticsConnection,
 		propertyId: input.googleAnalyticsPropertyId,
@@ -35951,666 +36764,221 @@ function buildActions(input) {
 	});
 	if (queryWinners > 0 && queryLosers === 0) actions.push({
 		title: "Expand winning query angles",
-		action: "The returned query split contains positive movers and no negative movers. Use that query wording to improve internal anchors and supporting copy on related pages.",
-		confidence: "medium"
-	});
-	return actions;
-}
-function sameDirectionItems(items, direction) {
-	return items.filter((item) => direction === "winner" ? item.clickDelta > 0 : item.clickDelta < 0);
-}
-function movementRows(input) {
-	const grouped = /* @__PURE__ */ new Map();
-	for (const item of input.items) {
-		const signature = templateForUrl(item.key, input.clusters);
-		if (signature === "/") continue;
-		const cluster = input.clusters.find((item) => item.signature === signature);
-		const existing = grouped.get(signature) ?? {
-			cluster,
-			signature,
-			items: [],
-			clickDelta: 0,
-			impressionDelta: 0
-		};
-		existing.items.push(item);
-		existing.clickDelta += item.clickDelta;
-		existing.impressionDelta += item.impressionDelta;
-		grouped.set(signature, existing);
-	}
-	return [...grouped.values()];
-}
-function clusterCommonTerms(cluster) {
-	if (!cluster) return [];
-	return [...new Set(cluster.shape.variableSegments.flatMap((segment) => segment.tokenExamples))].slice(0, 6);
-}
-function templateMovementForDirection(input) {
-	return movementRows({
-		items: sameDirectionItems(input.items, input.direction),
-		clusters: input.clusters
-	}).map((row) => {
-		const movement = Math.abs(row.clickDelta);
-		const movementShare = input.totalMovement ? movement / input.totalMovement : 0;
-		if (row.items.length < 3 || movementShare < .2) return void 0;
-		const confidence = row.items.length >= 10 && movementShare >= .35 && input.segmentCoverage.limitedRows === 0 && !input.segmentCoverage.sourcePossiblyTruncated ? "high" : "medium";
-		const directionWord = input.direction === "winner" ? "gained" : "lost";
-		const commonTerms = clusterCommonTerms(row.cluster);
-		const termText = commonTerms.length ? ` Common URL terms: ${commonTerms.join(", ")}.` : "";
-		return {
-			signature: row.signature,
-			direction: input.direction,
-			confidence,
-			urlCount: row.items.length,
-			clickDelta: Number(row.clickDelta.toFixed(3)),
-			impressionDelta: Number(row.impressionDelta.toFixed(3)),
-			movementShare: Number(movementShare.toFixed(3)),
-			movementShareScope: "returned-directional-page-click-movement",
-			confidenceScope: "pattern-within-returned-matched-retained-page-segments",
-			segmentCoverage: input.segmentCoverage,
-			commonTerms,
-			sampleUrls: row.items.slice(0, 5).map((item) => item.key),
-			summary: `${row.signature} ${directionWord} ${formatMagnitude(row.clickDelta)} clicks across ${row.items.length} moved URLs (${formatPercent(movementShare)} of returned ${input.direction} page click movement). Coverage: ${input.segmentCoverage.returnedRows} of ${input.segmentCoverage.eligibleRows} eligible matched retained page rows returned under result limit ${input.segmentCoverage.resultLimit}.${termText}`
-		};
-	}).filter((item) => Boolean(item)).sort((a, b) => Math.abs(b.clickDelta) - Math.abs(a.clickDelta) || b.urlCount - a.urlCount || compareText(a.signature, b.signature));
-}
-function inferTemplateMovement(pageSegment) {
-	const movedPages = [...pageSegment.winners, ...pageSegment.losers].filter((item) => item.key.startsWith("http")).filter((item) => Math.abs(item.clickDelta) > 0).sort((left, right) => Math.abs(right.clickDelta) - Math.abs(left.clickDelta) || compareText(left.key, right.key));
-	if (movedPages.length < 6) return [];
-	const clusters = clusterPseoTemplates(movedPages.map((item) => item.key), {
-		minUrls: 3,
-		minShare: .15,
-		limit: 20
-	}).filter((cluster) => cluster.signature !== "/" && cluster.urlCount >= 3);
-	if (!clusters.length) return [];
-	const winnerMovement = pageSegment.winners.reduce((sum, item) => sum + Math.max(0, item.clickDelta), 0);
-	const loserMovement = Math.abs(pageSegment.losers.reduce((sum, item) => sum + Math.min(0, item.clickDelta), 0));
-	return [...templateMovementForDirection({
-		direction: "winner",
-		items: movedPages,
-		clusters,
-		totalMovement: winnerMovement,
-		segmentCoverage: pageSegment.coverage
-	}), ...templateMovementForDirection({
-		direction: "loser",
-		items: movedPages,
-		clusters,
-		totalMovement: loserMovement,
-		segmentCoverage: pageSegment.coverage
-	})].slice(0, 6);
-}
-async function updatePostmortemWorkflow(input, dependencies = {}) {
-	const limit = input.limit ?? 20;
-	const runUpdateCorrelation = dependencies.updateCorrelation ?? updateCorrelation;
-	const runSegmentImpact = dependencies.segmentImpact ?? segmentImpact;
-	const [update, page, query, device, country] = await Promise.all([
-		runUpdateCorrelation(input),
-		runSegmentImpact({
-			...input,
-			dimension: "page",
-			limit
-		}),
-		runSegmentImpact({
-			...input,
-			dimension: "query",
-			limit
-		}),
-		runSegmentImpact({
-			...input,
-			dimension: "device",
-			limit
-		}),
-		runSegmentImpact({
-			...input,
-			dimension: "country",
-			limit
-		})
-	]);
-	const segments = {
-		page: splitSegments(page),
-		query: splitSegments(query),
-		device: splitSegments(device),
-		country: splitSegments(country)
-	};
-	const insights = [
-		insightForSegment("page", segments.page),
-		insightForSegment("query", segments.query),
-		insightForSegment("device", segments.device),
-		insightForSegment("country", segments.country)
-	];
-	const templateMovement = inferTemplateMovement(segments.page);
-	const segmentStepStatus = [
-		segments.page,
-		segments.query,
-		segments.device,
-		segments.country
-	].every((segment) => segment.dataStatus === "empty" || segment.dataStatus === "unavailable") ? "skipped" : "completed";
-	return workflowReport({
-		workflow: "update-postmortem",
-		site: input.site,
-		summary: buildSummary({
-			update,
-			insights
-		}),
-		steps: [{
-			tool: "seo_update_correlate",
-			status: "completed",
-			summary: `Cause not established. ${update.summary}`
-		}, {
-			tool: "seo_segment_impact",
-			status: segmentStepStatus,
-			summary: insights.map((insight) => insight.summary).join(" ")
-		}],
-		actions: buildActions({
-			update,
-			segments,
-			templateMovement
-		}),
-		output: {
-			update,
-			insights,
-			templateMovement,
-			segments
-		}
-	});
-}
-//#endregion
-//#region packages/core/dist/bing/api.js
-const BASE = "https://ssl.bing.com/webmaster/api.svc/json";
-const MAX_BYTES$1 = 8e6;
-function bingCall(auth, options) {
-	return async (method, params = {}) => {
-		const url = new URL(`${BASE}/${method}`);
-		for (const [name, value] of Object.entries(params)) url.searchParams.set(name, value);
-		const headers = { accept: "application/json" };
-		if ("apiKey" in auth) url.searchParams.set("apikey", auth.apiKey);
-		else headers.authorization = `Bearer ${await auth.accessToken()}`;
-		let response;
-		try {
-			response = await fetch(url, {
-				headers,
-				signal: AbortSignal.timeout(3e4)
-			});
-		} catch (error) {
-			throw new SeoError("OPTIONAL_PROVIDER_UNAVAILABLE", `Bing Webmaster did not respond: ${error instanceof Error ? error.message : String(error)}`);
-		}
-		if (!response.ok) {
-			const detail = (await response.text().catch(() => "")).slice(0, 200);
-			if (response.status === 401 || /invalidapikey/i.test(detail)) throw new SeoError("AUTH_REQUIRED", `Bing Webmaster rejected the sign-in. ${options.signIn}`);
-			if (response.status === 403 || /notauthorized/i.test(detail)) throw new SeoError("ACCESS_DENIED", "Bing Webmaster denied access to this site. It must be verified in the connected Bing account.");
-			if (/ThrottleIP/i.test(detail)) throw new SeoError("RATE_LIMITED", "Bing Webmaster is blocking requests from this network (ThrottleIP). Run the same report with the CLI on your own machine, where Bing answers.");
-			if (response.status === 429 || /throttle/i.test(detail)) throw new SeoError("RATE_LIMITED", "Bing Webmaster is limiting requests. Try again in a few minutes.");
-			throw new SeoError("OPTIONAL_PROVIDER_UNAVAILABLE", `Bing Webmaster answered ${response.status}. ${detail}`.trim());
-		}
-		return (await readJson(response, "Bing Webmaster", { maxBytes: MAX_BYTES$1 })).d;
-	};
-}
-function day(value) {
-	if (typeof value !== "string") return null;
-	const legacy = /^\/Date\((-?\d+)(?:[+-]\d{4})?\)\/$/.exec(value);
-	const date = legacy ? new Date(Number(legacy[1])) : new Date(value);
-	return Number.isNaN(date.getTime()) ? null : date.toISOString().slice(0, 10);
-}
-const count = (value) => typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : null;
-function list(data, label) {
-	if (!Array.isArray(data)) throw new SeoError("OPTIONAL_PROVIDER_UNAVAILABLE", `Bing Webmaster returned an invalid ${label}.`);
-	return data.filter((item) => Boolean(item) && typeof item === "object");
-}
-async function listBingSites(call) {
-	return list(await call("GetUserSites"), "site list").filter((row) => typeof row.Url === "string").map((row) => ({
-		url: row.Url,
-		verified: row.IsVerified === true
-	})).sort((a, b) => a.url.localeCompare(b.url, "en"));
-}
-async function bingTraffic(call, site) {
-	const rows = [];
-	let invalidRows = 0;
-	for (const row of list(await call("GetRankAndTrafficStats", { siteUrl: site }), "traffic list")) {
-		const date = day(row.Date);
-		const clicks = count(row.Clicks);
-		const impressions = count(row.Impressions);
-		if (!date || clicks === null || impressions === null) {
-			invalidRows += 1;
-			continue;
-		}
-		rows.push({
-			date,
-			clicks,
-			impressions
-		});
-	}
-	rows.sort((a, b) => a.date.localeCompare(b.date, "en"));
-	return {
-		rows,
-		invalidRows
-	};
-}
-async function keyed(call, method, params) {
-	const rows = [];
-	let invalidRows = 0;
-	for (const row of list(await call(method, params), "row list")) {
-		const date = day(row.Date);
-		const key = typeof row.Query === "string" ? row.Query.trim() : "";
-		const clicks = count(row.Clicks);
-		const impressions = count(row.Impressions);
-		const position = count(row.AvgImpressionPosition);
-		if (!date || !key || clicks === null || impressions === null) {
-			invalidRows += 1;
-			continue;
-		}
-		rows.push({
-			date,
-			key,
-			clicks,
-			impressions,
-			position
-		});
-	}
-	rows.sort((a, b) => a.date.localeCompare(b.date, "en") || a.key.localeCompare(b.key, "en"));
-	return {
-		rows,
-		invalidRows
-	};
-}
-const bingQueries = (call, site) => keyed(call, "GetQueryStats", { siteUrl: site });
-const bingPages = (call, site) => keyed(call, "GetPageStats", { siteUrl: site });
-function bingSiteFor(sites, target) {
-	const host = (value) => {
-		try {
-			return new URL(value.includes("://") ? value : `https://${value.replace(/^sc-domain:/, "")}`).hostname.replace(/^www\./, "");
-		} catch {
-			return null;
-		}
-	};
-	const wanted = host(target);
-	if (!wanted) return null;
-	return sites.filter((site) => host(site.url) === wanted).sort((a, b) => Number(b.verified) - Number(a.verified) || Number(b.url.startsWith("https://")) - Number(a.url.startsWith("https://")) || a.url.localeCompare(b.url, "en"))[0] ?? null;
-}
-//#endregion
-//#region packages/core/dist/commands/present.js
-const LIST_KEYS = [
-	"items",
-	"rows",
-	"results",
-	"pages",
-	"urls",
-	"queries",
-	"keywords",
-	"opportunities",
-	"candidates",
-	"clusters",
-	"issues",
-	"domains",
-	"competitors",
-	"links"
-];
-const SKIP_KEYS = /* @__PURE__ */ new Set([
-	"caveats",
-	"warnings",
-	"recommendations",
-	"findings",
-	"sampleUrls",
-	"sampleQueries",
-	"omissions",
-	"dimensions",
-	"brand",
-	"pageChecks"
-]);
-const ID_COLUMNS = [
-	"metric",
-	"direction",
-	"changeDate",
-	"query",
-	"queryFlags",
-	"keyword",
-	"url",
-	"page",
-	"finalUrl",
-	"title",
-	"domain",
-	"target",
-	"check",
-	"rule",
-	"severity",
-	"status",
-	"urls",
-	"topPage"
-];
-const METRIC_COLUMNS = [
-	"percentChange",
-	"baselineMean",
-	"comparisonMean",
-	"clicks",
-	"impressions",
-	"ctr",
-	"position",
-	"previousClicks",
-	"clicksChange",
-	"searchVolume",
-	"volume",
-	"cpc",
-	"difficulty",
-	"rank",
-	"count",
-	"affectedUrls",
-	"score",
-	"priority.score"
-];
-const SUMMARY_ROWS = 10;
-const CELL_MAX = 80;
-const isObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-const isPrimitive = (value) => value === null || [
-	"string",
-	"number",
-	"boolean"
-].includes(typeof value);
-function mainList(report) {
-	const found = [];
-	const visit = (value, path, depth) => {
-		if (!isObject(value) || depth > 2) return;
-		for (const [key, child] of Object.entries(value)) {
-			if (SKIP_KEYS.has(key)) continue;
-			const childPath = path ? `${path}.${key}` : key;
-			if (Array.isArray(child) && child.length > 0 && child.every(isObject)) found.push({
-				path: childPath,
-				rows: child,
-				known: LIST_KEYS.includes(key)
-			});
-			else if (isObject(child)) visit(child, childPath, depth + 1);
-		}
-	};
-	visit(report, "", 0);
-	found.sort((a, b) => Number(b.known) - Number(a.known) || b.rows.length - a.rows.length || a.path.length - b.path.length);
-	return found[0] ?? null;
-}
-function flatten(row) {
-	const flat = {};
-	for (const [key, value] of Object.entries(row)) if (isPrimitive(value)) flat[key] = value;
-	else if (Array.isArray(value) && value.length && value.every(isPrimitive)) flat[key] = value.join(" ");
-	else if (isObject(value)) {
-		for (const [inner, innerValue] of Object.entries(value)) if (isPrimitive(innerValue)) flat[`${key}.${inner}`] = innerValue;
-	}
-	return flat;
-}
-function columnsFor(rows, max) {
-	const seen = /* @__PURE__ */ new Map();
-	for (const row of rows.slice(0, 50)) for (const [key, value] of Object.entries(row)) {
-		const entry = seen.get(key) ?? {
-			count: 0,
-			length: 0
-		};
-		entry.count++;
-		entry.length += String(value ?? "").length;
-		seen.set(key, entry);
-	}
-	const usable = [...seen].filter(([key, { count, length }]) => {
-		const average = length / count;
-		return ID_COLUMNS.includes(key) || average <= 60;
-	});
-	const rank = (key) => {
-		const id = ID_COLUMNS.indexOf(key);
-		if (id >= 0) return id;
-		const metric = METRIC_COLUMNS.indexOf(key);
-		if (metric >= 0) return 100 + metric;
-		return 1e3;
-	};
-	return usable.map(([key]) => key).filter((key) => !/(^|\.)(id|method|heuristic|estimatedClickLift|confidence|label)$|^site$/.test(key)).sort((a, b) => rank(a) - rank(b)).slice(0, max);
-}
-function cell(value, origin, max = CELL_MAX) {
-	if (value === null || value === void 0) return "";
-	let text = String(value);
-	if (origin && text.startsWith(origin)) text = text.slice(origin.length) || "/";
-	if (typeof value === "number" && !Number.isInteger(value)) {
-		const places = Math.abs(value) < 1 ? 1e3 : 100;
-		text = String(Math.round(value * places) / places);
-	}
-	text = text.replaceAll("|", "\\|").replaceAll("\n", " ");
-	return text.length > max ? `${text.slice(0, max - 1)}…` : text;
+		action: "The returned query split contains positive movers and no negative movers. Use that query wording to improve internal anchors and supporting copy on related pages.",
+		confidence: "medium"
+	});
+	return actions;
 }
-function table(rows, columns, origin, max = CELL_MAX) {
-	if (rows.length === 0 || columns.length === 0) return "";
-	return [columns.join(" | "), ...rows.map((row) => columns.map((key) => cell(row[key], origin, max)).join(" | "))].join("\n");
+function sameDirectionItems(items, direction) {
+	return items.filter((item) => direction === "winner" ? item.clickDelta > 0 : item.clickDelta < 0);
 }
-function findString(report, keys) {
-	for (const key of keys) {
-		const value = report[key];
-		if (typeof value === "string") return value;
+function movementRows(input) {
+	const grouped = /* @__PURE__ */ new Map();
+	for (const item of input.items) {
+		const signature = templateForUrl(item.key, input.clusters);
+		if (signature === "/") continue;
+		const cluster = input.clusters.find((item) => item.signature === signature);
+		const existing = grouped.get(signature) ?? {
+			cluster,
+			signature,
+			items: [],
+			clickDelta: 0,
+			impressionDelta: 0
+		};
+		existing.items.push(item);
+		existing.clickDelta += item.clickDelta;
+		existing.impressionDelta += item.impressionDelta;
+		grouped.set(signature, existing);
 	}
-	return null;
-}
-function dateRange(report) {
-	const range = isObject(report.range) ? report.range : report;
-	const from = findString(range, [
-		"startDate",
-		"from",
-		"start"
-	]);
-	const to = findString(range, [
-		"endDate",
-		"to",
-		"end"
-	]);
-	return from && to ? `${from} to ${to}` : null;
-}
-function limitsOf(report) {
-	return [report.caveats, isObject(report.retainedEvidence) ? report.retainedEvidence.caveats : null].flatMap((list) => Array.isArray(list) ? list : []).filter((line) => typeof line === "string").filter((line) => !/^(Date window|Selection):/.test(line)).slice(0, 4).map((line) => line.length > 200 ? `${line.slice(0, 199)}…` : line);
-}
-function keyFacts(report) {
-	if (!isObject(report.summary)) return null;
-	const facts = Object.entries(report.summary).filter(([key, value]) => key !== "verdict" && isPrimitive(value) && value !== null).slice(0, 8).map(([key, value]) => `${key} ${cell(value, null)}`);
-	return facts.length ? facts.join(", ") : null;
-}
-function filteredLine(report) {
-	if (!isObject(report.selection)) return null;
-	const counts = Object.entries(report.selection).filter(([key, value]) => typeof value === "number" && value > 0 && !/(source|aggregated|valid|eligible|returned|total|groups|days)/i.test(key)).map(([key, value]) => `${key} ${value}`);
-	return counts.length ? `Filtered out: ${counts.join(", ")}.` : null;
+	return [...grouped.values()];
 }
-function findingsFirst(report) {
-	const last = Object.keys(report).filter((key) => /suppress|omitted|excluded/i.test(key));
-	if (!last.length) return report;
-	const out = {};
-	for (const [key, value] of Object.entries(report)) if (!last.includes(key)) out[key] = value;
-	for (const key of last) out[key] = report[key];
-	return out;
+function clusterCommonTerms(cluster) {
+	if (!cluster) return [];
+	return [...new Set(cluster.shape.variableSegments.flatMap((segment) => segment.tokenExamples))].slice(0, 6);
 }
-function presentReport(input) {
-	const { report, headline, origin } = input;
-	if (!report) return {
-		text: headline,
-		data: null
-	};
-	if (input.detail === "full") {
-		const ordered = findingsFirst(report);
-		return {
-			text: `${headline}\n\n${JSON.stringify(ordered)}`,
-			data: ordered
-		};
-	}
-	const list = mainList(report);
-	const flat = list ? list.rows.map(flatten) : [];
-	const head = [
-		input.label,
-		input.range ?? dateRange(report),
-		findString(report, ["dataStatus"])
-	].filter(Boolean).join(" · ");
-	const facts = keyFacts(report);
-	const limits = limitsOf(report);
-	if (input.detail === "rows") {
-		const page = flat.slice(input.offset, input.offset + input.limit);
-		const columns = columnsFor(flat, 14);
-		const end = input.offset + page.length;
+function templateMovementForDirection(input) {
+	return movementRows({
+		items: sameDirectionItems(input.items, input.direction),
+		clusters: input.clusters
+	}).map((row) => {
+		const movement = Math.abs(row.clickDelta);
+		const movementShare = input.totalMovement ? movement / input.totalMovement : 0;
+		if (row.items.length < 3 || movementShare < .2) return void 0;
+		const confidence = row.items.length >= 10 && movementShare >= .35 && input.segmentCoverage.limitedRows === 0 && !input.segmentCoverage.sourcePossiblyTruncated ? "high" : "medium";
+		const directionWord = input.direction === "winner" ? "gained" : "lost";
+		const commonTerms = clusterCommonTerms(row.cluster);
+		const termText = commonTerms.length ? ` Common URL terms: ${commonTerms.join(", ")}.` : "";
 		return {
-			text: [
-				head,
-				list ? `${list.path}: rows ${input.offset + 1} to ${end} of ${flat.length}.` : "This report has no list of rows. Use detail \"full\".",
-				table(page, columns, origin),
-				end < flat.length ? `Next page: ${input.more("rows", end)}` : ""
-			].filter(Boolean).join("\n\n"),
-			data: {
-				path: list?.path ?? null,
-				total: flat.length,
-				offset: input.offset,
-				columns,
-				rows: page
-			}
+			signature: row.signature,
+			direction: input.direction,
+			confidence,
+			urlCount: row.items.length,
+			clickDelta: Number(row.clickDelta.toFixed(3)),
+			impressionDelta: Number(row.impressionDelta.toFixed(3)),
+			movementShare: Number(movementShare.toFixed(3)),
+			movementShareScope: "returned-directional-page-click-movement",
+			confidenceScope: "pattern-within-returned-matched-retained-page-segments",
+			segmentCoverage: input.segmentCoverage,
+			commonTerms,
+			sampleUrls: row.items.slice(0, 5).map((item) => item.key),
+			summary: `${row.signature} ${directionWord} ${formatMagnitude(row.clickDelta)} clicks across ${row.items.length} moved URLs (${formatPercent(movementShare)} of returned ${input.direction} page click movement). Coverage: ${input.segmentCoverage.returnedRows} of ${input.segmentCoverage.eligibleRows} eligible matched retained page rows returned under result limit ${input.segmentCoverage.resultLimit}.${termText}`
 		};
-	}
-	const shown = flat.slice(0, Math.min(input.limit, SUMMARY_ROWS));
-	const columns = columnsFor(flat, 8);
-	return {
-		text: [
-			head,
-			headline,
-			facts ? `Facts: ${facts}.` : "",
-			...input.notes ?? [],
-			flat.length < 5 ? filteredLine(report) : null,
-			list ? `${list.path} (${shown.length} of ${flat.length} shown):\n${table(shown, columns, origin)}` : "",
-			limits.length ? `Limits:\n${limits.map((line) => `- ${line}`).join("\n")}` : "",
-			`More: ${shown.length < flat.length ? `${input.more("rows", shown.length)} for more rows, or ` : ""}${input.more("full")} for every field.`
-		].filter(Boolean).join("\n\n"),
-		data: {
-			summary: isObject(report.summary) ? report.summary : null,
-			path: list?.path ?? null,
-			total: flat.length,
-			columns,
-			rows: shown,
-			limits
-		}
-	};
+	}).filter((item) => Boolean(item)).sort((a, b) => Math.abs(b.clickDelta) - Math.abs(a.clickDelta) || b.urlCount - a.urlCount || compareText(a.signature, b.signature));
 }
-function preview(report, origin, rows) {
-	const list = mainList(report);
-	if (!list) return {
-		total: 0,
-		text: ""
-	};
-	const flat = list.rows.map(flatten);
-	return {
-		total: flat.length,
-		text: table(flat.slice(0, rows), columnsFor(flat, 6), origin)
+function inferTemplateMovement(pageSegment) {
+	const movedPages = [...pageSegment.winners, ...pageSegment.losers].filter((item) => item.key.startsWith("http")).filter((item) => Math.abs(item.clickDelta) > 0).sort((left, right) => Math.abs(right.clickDelta) - Math.abs(left.clickDelta) || compareText(left.key, right.key));
+	if (movedPages.length < 6) return [];
+	const clusters = clusterPseoTemplates(movedPages.map((item) => item.key), {
+		minUrls: 3,
+		minShare: .15,
+		limit: 20
+	}).filter((cluster) => cluster.signature !== "/" && cluster.urlCount >= 3);
+	if (!clusters.length) return [];
+	const winnerMovement = pageSegment.winners.reduce((sum, item) => sum + Math.max(0, item.clickDelta), 0);
+	const loserMovement = Math.abs(pageSegment.losers.reduce((sum, item) => sum + Math.min(0, item.clickDelta), 0));
+	return [...templateMovementForDirection({
+		direction: "winner",
+		items: movedPages,
+		clusters,
+		totalMovement: winnerMovement,
+		segmentCoverage: pageSegment.coverage
+	}), ...templateMovementForDirection({
+		direction: "loser",
+		items: movedPages,
+		clusters,
+		totalMovement: loserMovement,
+		segmentCoverage: pageSegment.coverage
+	})].slice(0, 6);
+}
+async function updatePostmortemWorkflow(input, dependencies = {}) {
+	const limit = input.limit ?? 20;
+	const runUpdateCorrelation = dependencies.updateCorrelation ?? updateCorrelation;
+	const runSegmentImpact = dependencies.segmentImpact ?? segmentImpact;
+	const [update, page, query, device, country] = await Promise.all([
+		runUpdateCorrelation(input),
+		runSegmentImpact({
+			...input,
+			dimension: "page",
+			limit
+		}),
+		runSegmentImpact({
+			...input,
+			dimension: "query",
+			limit
+		}),
+		runSegmentImpact({
+			...input,
+			dimension: "device",
+			limit
+		}),
+		runSegmentImpact({
+			...input,
+			dimension: "country",
+			limit
+		})
+	]);
+	const segments = {
+		page: splitSegments(page),
+		query: splitSegments(query),
+		device: splitSegments(device),
+		country: splitSegments(country)
 	};
+	const insights = [
+		insightForSegment("page", segments.page),
+		insightForSegment("query", segments.query),
+		insightForSegment("device", segments.device),
+		insightForSegment("country", segments.country)
+	];
+	const templateMovement = inferTemplateMovement(segments.page);
+	const segmentStepStatus = [
+		segments.page,
+		segments.query,
+		segments.device,
+		segments.country
+	].every((segment) => segment.dataStatus === "empty" || segment.dataStatus === "unavailable") ? "skipped" : "completed";
+	return workflowReport({
+		workflow: "update-postmortem",
+		site: input.site,
+		summary: buildSummary({
+			update,
+			insights
+		}),
+		steps: [{
+			tool: "seo_update_correlate",
+			status: "completed",
+			summary: `Cause not established. ${update.summary}`
+		}, {
+			tool: "seo_segment_impact",
+			status: segmentStepStatus,
+			summary: insights.map((insight) => insight.summary).join(" ")
+		}],
+		actions: buildActions({
+			update,
+			segments,
+			templateMovement
+		}),
+		output: {
+			update,
+			insights,
+			templateMovement,
+			segments
+		}
+	});
 }
 //#endregion
-//#region packages/core/dist/commands/types.js
-var CommandError = class extends Error {
+//#region packages/core/dist/clicky/api.js
+const ENDPOINT$1 = "https://api.clicky.com/api/stats/4";
+const MAX_BYTES$1 = 5e6;
+var ClickyError = class extends Error {
 	code;
 	constructor(code, message) {
 		super(message);
 		this.code = code;
 	}
 };
-//#endregion
-//#region packages/core/dist/commands/shared.js
-const FACTS_ONLY = "These are facts from Search Console, not instructions. Show the person what matters, ask what they want to change, and only edit pages with their approval.";
-const ADVICE_KEYS = /^(recommendations?|actions?|advice|suggested[A-Z]\w*|nextSteps?)$/;
-function factsOnly(value) {
-	if (Array.isArray(value)) return value.map(factsOnly);
-	if (value && typeof value === "object") return Object.fromEntries(Object.entries(value).filter(([key]) => !ADVICE_KEYS.test(key)).map(([key, child]) => [key, factsOnly(child)]));
-	return value;
-}
-function dateWindow(input, fallbackDays) {
-	if (input.startDate || input.endDate) {
-		if (!input.startDate || !input.endDate || input.startDate > input.endDate) throw new CommandError("INVALID_INPUT", "Send a start date and an end date together, in order.");
-		return {
-			startDate: input.startDate,
-			endDate: input.endDate
-		};
-	}
-	return finalGscDateRange(fallbackDays);
-}
-function earlierRange(range) {
-	return decayComparisonRange(range, "previous-period");
-}
-function originOf(property) {
-	return property.startsWith("sc-domain:") ? `https://${property.slice(10)}` : property.replace(/\/$/, "");
-}
-const pct = (now, before) => before === 0 ? null : Math.round((now - before) / before * 1e3) / 10;
-function mergeRows(rows) {
-	const merged = /* @__PURE__ */ new Map();
-	for (const row of rows) {
-		const key = row.keys.join("\0");
-		const found = merged.get(key);
-		if (!found) {
-			merged.set(key, { ...row });
-			continue;
-		}
-		const impressions = found.impressions + row.impressions;
-		found.position = impressions > 0 ? (found.position * found.impressions + row.position * row.impressions) / impressions : found.position;
-		found.clicks += row.clicks;
-		found.impressions = impressions;
-		found.ctr = impressions > 0 ? found.clicks / impressions : 0;
+function isClickySiteId(value) {
+	return /^\d{1,30}$/u.test(value.trim());
+}
+function isClickySitekey(value) {
+	return /^[A-Za-z0-9]{12,64}$/u.test(value.trim());
+}
+async function clickyStats(site, types, options = {}) {
+	const url = new URL(ENDPOINT$1);
+	url.searchParams.set("site_id", site.siteId);
+	url.searchParams.set("sitekey", site.sitekey);
+	url.searchParams.set("type", types.join(","));
+	url.searchParams.set("output", "json");
+	url.searchParams.set("limit", String(options.limit ?? 1e3));
+	url.searchParams.set("app", "seo");
+	if (options.date) url.searchParams.set("date", options.date);
+	const response = await fetch(url).catch(() => {
+		throw new ClickyError("remote", "Could not reach Clicky. Try again.");
+	});
+	if (!response.ok) throw new ClickyError("remote", `Clicky returned ${response.status}.`);
+	const groups = await readJson(response, "Clicky", { maxBytes: MAX_BYTES$1 });
+	if (!Array.isArray(groups)) throw new ClickyError("remote", "Clicky returned invalid data.");
+	const failed = groups.find((group) => typeof group?.error === "string");
+	if (failed?.error) throw /sitekey|site id|authenticat|permission/iu.test(failed.error) ? new ClickyError("auth", `Clicky rejected site ID ${site.siteId} or its sitekey.`) : new ClickyError("remote", `Clicky: ${failed.error.slice(0, 200)}`);
+	const out = {};
+	for (const type of types) out[type] = [];
+	for (const group of groups) {
+		if (!group?.type || !(group.type in out)) continue;
+		for (const date of group.dates ?? []) for (const item of date.items ?? []) if (item && typeof item === "object") out[group.type]?.push(item);
 	}
-	return [...merged.values()];
-}
-function sharedReader(read, redirects = /* @__PURE__ */ new Map()) {
-	const memo = /* @__PURE__ */ new Map();
-	const merged = async (site, body, opts) => {
-		const result = await read(site, body, opts);
-		const pageAt = (body.dimensions ?? []).indexOf("page");
-		if (pageAt < 0 || redirects.size === 0) return result;
-		return {
-			...result,
-			rows: mergeRows(result.rows.map((row) => {
-				const target = redirects.get(row.keys[pageAt] ?? "");
-				if (!target) return row;
-				const keys = [...row.keys];
-				keys[pageAt] = target;
-				return {
-					...row,
-					keys
-				};
-			}))
-		};
-	};
-	return (site, body, opts) => {
-		const key = JSON.stringify([site, body]);
-		let found = memo.get(key);
-		if (!found) {
-			found = merged(site, body, opts);
-			memo.set(key, found);
-		}
-		return found;
-	};
+	return out;
 }
-async function googleUpdates(window) {
-	if (!window) return [];
-	const incidents = await fetch("https://status.search.google.com/incidents.json", { signal: AbortSignal.timeout(8e3) }).then((response) => response.ok ? response.json() : null).catch(() => null);
-	if (!Array.isArray(incidents)) return "Google Search Status could not be read.";
-	return findOverlappingSearchUpdates({
-		updates: searchUpdatesFromIncidents(incidents, {
-			product: "Ranking",
-			limit: 50
-		}),
-		startDate: window.start,
-		endDate: window.end,
-		paddingDays: 3
+async function clickyDomain(site) {
+	const { pages } = await clickyStats(site, ["pages"], {
+		date: "last-30-days",
+		limit: 1
 	});
-}
-function checkedDates(checked) {
-	const window = checked;
-	if (!window?.start || !window.end) return "in this window";
-	const dates = window.start === window.end ? window.start : `${window.start} to ${window.end}`;
-	return `within ${window.paddingDays ?? 3} days of ${dates}`;
-}
-function listOfUpdates(value, checked) {
-	if (typeof value === "string") return value;
-	if (!Array.isArray(value)) return null;
-	const where = checkedDates(checked);
-	if (value.length === 0) return `Google updates ${where}: none.`;
-	return `Google updates ${where} (timing only, not cause): ${value.map((update) => `${update.name} (${update.start.slice(0, 10)} to ${update.end?.slice(0, 10) ?? "ongoing"})`).join("; ")}.`;
-}
-function matchProperty(names, site) {
-	if (names.includes(site)) return site;
-	let host;
-	let origin;
+	const url = pages?.find((item) => item.url)?.url;
+	if (!url) return null;
 	try {
-		const url = new URL(site.includes("://") ? site : `https://${site.replace(/^sc-domain:/, "")}`);
-		host = url.hostname.replace(/^www\./, "");
-		origin = url.origin;
+		return new URL(url).hostname.replace(/^www\./u, "");
 	} catch {
 		return null;
 	}
-	const domain = names.filter((name) => name.startsWith("sc-domain:")).map((name) => name.slice(10)).filter((name) => host === name || host.endsWith(`.${name}`)).sort((a, b) => b.length - a.length)[0];
-	if (domain) return `sc-domain:${domain}`;
-	return names.find((name) => name === `${origin}/` || name === `${origin.replace("://", "://www.")}/` || name === `${origin.replace("://www.", "://")}/`) ?? null;
 }
 function rowsText(input) {
 	const total = input.rows.length;
@@ -36796,8 +37164,8 @@ async function runAnalyticsRows(input, google, options) {
 //#endregion
 //#region packages/core/dist/commands/bing.js
 const BING_LIMITS = ["Bing and Google count clicks, impressions and positions their own way. Their numbers sit side by side here and are never added together.", "Bing lists only its top queries and pages, grouped by week. A query or page missing from Bing’s list is unknown, not zero."];
-const LOCAL_BING = "Bing data runs on the person’s machine with the CLI: connect a Bing Webmaster API key once with `npx -y seo providers bing connect`, then run `npx -y seo report --site <site> --section bing --json`.";
-const NO_BING_HERE = "Bing: not included here, so these totals show Google only. Some sites get most of their search visits from Bing; run `npx -y seo report --site <site> --section bing --json` with the CLI to see them.";
+const LOCAL_BING = `Bing blocks the hosted server, so Bing data comes from the CLI on a machine. If you have a shell, link the CLI to the same account once: run \`npx -y seo login\`, show the person the link it prints, and after they approve it run \`npx -y seo login\` again. \`npx -y seo\` commands then use the same Google accounts, Bing and keys. Connect Bing on the account page if it is not connected, then run \`npx -y seo report --site <site> --section bing --json\`.`;
+const NO_BING_HERE = "Bing: not included here, so these totals show Google only. Some sites get most of their search visits from Bing; the CLI reads them with the same account: `npx -y seo login` once, then `npx -y seo report --site <site> --section bing --json`.";
 const BING_HOME = "https://www.bing.com/webmasters";
 const noBingData = (site) => `Bing has no data for ${site} yet. Newly added or newly verified sites take a few days to show data in Bing Webmaster Tools.`;
 const sitesSeen = /* @__PURE__ */ new WeakMap();
@@ -37014,6 +37382,161 @@ async function runBingRows(input, deps) {
 	};
 }
 //#endregion
+//#region packages/core/dist/commands/clicky.js
+const CLICKY_KEY_PREFIX = "x-clicky-";
+function clickySites(keys) {
+	const sites = [];
+	for (const [name, value] of keys) {
+		if (!name.startsWith("x-clicky-")) continue;
+		const siteId = name.slice(9);
+		if (!isClickySiteId(siteId)) continue;
+		let sitekey = value.trim();
+		let domain = null;
+		let account = false;
+		if (sitekey.startsWith("{")) try {
+			const parsed = JSON.parse(sitekey);
+			sitekey = typeof parsed.sitekey === "string" ? parsed.sitekey : "";
+			domain = typeof parsed.domain === "string" ? parsed.domain : null;
+			account = parsed.account === true;
+		} catch {
+			continue;
+		}
+		if (isClickySitekey(sitekey)) sites.push({
+			siteId,
+			sitekey,
+			domain,
+			account
+		});
+	}
+	return sites.sort((left, right) => left.siteId < right.siteId ? -1 : left.siteId > right.siteId ? 1 : 0);
+}
+const clickyLabel = (site) => site.domain ? `${site.siteId} (${site.domain})` : site.siteId;
+function hostOf(value) {
+	const text = value.trim().toLowerCase().replace(/^sc-domain:/u, "");
+	try {
+		return new URL(text.includes("://") ? text : `https://${text}`).hostname.replace(/^www\./u, "");
+	} catch {
+		return text;
+	}
+}
+async function pickClickySite(saved, target, connect, refresh) {
+	const host = hostOf(target);
+	const match = (site) => site.siteId === target.trim() || site.domain === host;
+	let sites = saved;
+	if (!sites.some(match) && refresh) sites = await refresh() ?? sites;
+	if (!sites.length) throw new CommandError("NO_KEY", `No Clicky site is saved. Add your Clicky account, or one site's ID and sitekey (Clicky, Preferences, Info): ${connect}`);
+	const found = sites.find(match);
+	if (found) return found;
+	if (!isClickySiteId(target)) {
+		for (const site of sites.filter((item) => !item.domain).slice(0, 10)) site.domain = await clickyDomain(site).catch(() => null);
+		const named = sites.find(match);
+		if (named) return named;
+	}
+	throw new CommandError("NO_ACCESS", `No saved Clicky site matches ${target}. Saved Clicky sites: ${sites.map(clickyLabel).join(", ")}. Pass one of these site IDs, or add the site: ${connect}`);
+}
+const DAY = 864e5;
+const isoDay = (time) => new Date(time).toISOString().slice(0, 10);
+function clickyRange(input) {
+	if (!input.startDate && !input.endDate) {
+		const end = Date.now() - DAY;
+		return {
+			startDate: isoDay(end - 27 * DAY),
+			endDate: isoDay(end)
+		};
+	}
+	const start = Date.parse(`${input.startDate}T00:00:00Z`);
+	const end = Date.parse(`${input.endDate}T00:00:00Z`);
+	if (!input.startDate || !input.endDate || !(start <= end)) throw new CommandError("INVALID_INPUT", "Send a start date and an end date together, in order.");
+	if ((end - start) / DAY + 1 > 31) throw new CommandError("INVALID_INPUT", "Clicky reads at most 31 days at a time. Send a shorter range.");
+	return {
+		startDate: input.startDate,
+		endDate: input.endDate
+	};
+}
+const count = (item) => {
+	const value = Number(item.value);
+	return Number.isSafeInteger(value) && value >= 0 ? value : null;
+};
+const totals = (items) => items.map((item) => ({
+	name: item.title ?? "",
+	visits: count(item)
+})).filter((item) => Boolean(item.name) && item.visits !== null);
+const line = (items) => {
+	const top = items.slice(0, 10).map((item) => `${item.name} ${item.visits}`);
+	const rest = items.slice(10);
+	if (rest.length) top.push(`${rest.length} others ${rest.reduce((sum, item) => sum + item.visits, 0)}`);
+	return top.join("; ");
+};
+const LIMIT = 1e3;
+async function runClickyRows(input, keys, options) {
+	const refresh = options.refresh;
+	const site = await pickClickySite(clickySites(keys), input.site, options.connect, refresh && (async () => {
+		const fresh = await refresh().catch(() => null);
+		return fresh && clickySites(fresh);
+	}));
+	const range = clickyRange(input);
+	const offset = input.offset ?? 0;
+	const stats = await clickyStats(site, [
+		"pages-entrance",
+		"traffic-sources",
+		"searches-engines"
+	], {
+		date: `${range.startDate},${range.endDate}`,
+		limit: LIMIT
+	}).catch((error) => {
+		if (error instanceof ClickyError) throw new CommandError(error.code === "auth" ? "NO_ACCESS" : "PROVIDER_ERROR", error.code === "auth" ? `${error.message} Save it again: ${options.connect}` : error.message);
+		throw error;
+	});
+	const entrances = stats["pages-entrance"] ?? [];
+	const visitsByPage = /* @__PURE__ */ new Map();
+	for (const item of entrances) {
+		const visits = count(item);
+		if (visits === null || !item.url) continue;
+		let page;
+		try {
+			page = new URL(item.url).pathname;
+		} catch {
+			continue;
+		}
+		visitsByPage.set(page, (visitsByPage.get(page) ?? 0) + visits);
+	}
+	const rows = [...visitsByPage].map(([page, visits]) => ({
+		page,
+		visits
+	})).sort((left, right) => right.visits - left.visits || (left.page < right.page ? -1 : left.page > right.page ? 1 : 0));
+	const sources = totals(stats["traffic-sources"] ?? []);
+	const engines = totals(stats["searches-engines"] ?? []);
+	const notes = [
+		"Visits by landing page from every source, as Clicky counts them, in the Clicky site’s time zone. Clicky does not split landing pages by source.",
+		sources.length ? `Traffic sources (visits): ${line(sources)}.` : "Traffic sources: none in this range.",
+		engines.length ? `Search engines (visits): ${line(engines)}.` : "Search engines: none in this range."
+	];
+	if (entrances.length >= LIMIT) notes.push(`Clicky returned its ${LIMIT}-row limit; pages past it are missing, not zero.`);
+	return {
+		text: rowsText({
+			title: `Clicky site ${clickyLabel(site)}: landing pages, ${range.startDate} to ${range.endDate}.`,
+			rows,
+			offset,
+			limit: 50,
+			detail: input.detail ?? "summary",
+			notes,
+			more: options.call
+		}),
+		data: {
+			siteId: site.siteId,
+			domain: site.domain,
+			range,
+			metric: "visits",
+			sources,
+			searchEngines: engines,
+			capped: entrances.length >= LIMIT,
+			total: rows.length,
+			offset,
+			rows: rows.slice(offset, offset + 50)
+		}
+	};
+}
+//#endregion
 //#region packages/core/dist/commands/domain-rating.js
 const DR_ATTRIBUTION = "domain_rating: Domain Rating by Ahrefs (https://ahrefs.com/).";
 const ENDPOINT = "https://api.ahrefs.com/v3/public/domain-rating-free";
@@ -37239,7 +37762,7 @@ function nextFor(section, call) {
 		"second-page": `Next: ${call("page")} for one page’s queries and live facts.`,
 		"content-decay": `Next: ${call("index")} for pages that lost most of their clicks; ${call("page")} to see which queries moved.`,
 		cannibalization: `Next: ${call("page")} on each competing URL to see Google’s chosen canonical.`,
-		"traffic-drop": `Next: ${call("compare")} with the date the drop started, for the pages and queries that moved.`,
+		"traffic-drop": `Next: ${call("compare")} with the date the drop started, for the pages and queries that moved; ${call("index")} for pages that lost almost all their clicks and their index status.`,
 		bing: `Next: ${call("data", { source: "bing" })} for every Bing row; ${call("page")} for one page.`
 	}[section];
 }
@@ -37614,13 +38137,9 @@ function runReport$1(input, deps) {
 }
 //#endregion
 //#region packages/core/dist/commands/research-providers.js
-const KEY_HEADERS = {
-	dataforseo: "X-DataForSEO-Login and X-DataForSEO-Password",
-	ahrefs: "X-Ahrefs-Key"
-};
 function need(headers, provider) {
 	const values = provider === "dataforseo" ? [headers.get("x-dataforseo-login"), headers.get("x-dataforseo-password")] : [headers.get("x-ahrefs-key")];
-	if (values.some((value) => !value)) throw new CommandError("NO_KEY", `No ${provider} key. Hosted MCP: save it at https://seoskill.dev/account#keys or send the ${KEY_HEADERS[provider]} header. CLI and local MCP: run \`seo providers ${provider} connect\`.`);
+	if (values.some((value) => !value)) throw new CommandError("NO_KEY", `No ${provider} key. Hosted MCP: save it at https://seoskill.dev/account#keys. CLI and local MCP: run \`seo login\` to use the account's keys, or \`seo providers ${provider} connect\`.`);
 	return values;
 }
 async function call(provider, request) {
@@ -38033,7 +38552,39 @@ const LOST_SHARE = .2;
 const MIN_LOST = 3;
 const CHECKED = 20;
 const INSPECTED = 10;
-const LOST_PAGES_RULE = `Pages that had at least ${MIN_LOST} clicks in the previous 28 days and kept ${LOST_SHARE * 100}% or less of them in the last 28 days, with a live check of the top ${CHECKED} and Google’s index status for the top ${INSPECTED}.`;
+const SITE_WIDE_MIN = 5;
+function indexSummary(inspected, home) {
+	const known = inspected.filter((item) => item?.verdict != null);
+	const indexed = known.filter((item) => item.verdict === "PASS").length;
+	const coverage = /* @__PURE__ */ new Map();
+	for (const item of known) {
+		if (item.verdict === "PASS") continue;
+		const state = item.coverage ?? item.verdict ?? "unknown";
+		coverage.set(state, (coverage.get(state) ?? 0) + 1);
+	}
+	const notIndexed = known.length - indexed;
+	const homeIndexed = home?.status?.verdict ? home.status.verdict === "PASS" : null;
+	const siteWide = notIndexed >= SITE_WIDE_MIN && notIndexed * 2 > known.length && homeIndexed;
+	const byCoverage = [...coverage].sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).map(([state, count]) => ({
+		state,
+		count
+	}));
+	return {
+		text: (known.length ? [`Index status of the ${known.length} inspected pages: ${indexed} indexed, ${notIndexed} not indexed${byCoverage.length ? ` (${byCoverage.map((item) => `${item.count} ${item.state}`).join("; ")})` : ""}.${home && homeIndexed !== null ? ` Home page ${home.url}: ${homeIndexed ? "indexed" : `not indexed (${home.status?.coverage ?? home.status?.verdict})`}.` : ""}`, siteWide ? `Site-wide pattern: ${notIndexed} of ${known.length} inspected pages are not in Google's index, but the home page is. This points to the whole site, not single pages. It does not show the cause.` : null] : []).filter(Boolean).join("\n"),
+		data: {
+			inspected: known.length,
+			indexed,
+			notIndexed,
+			byCoverage,
+			homePage: home && homeIndexed !== null ? {
+				url: home.url,
+				indexed: homeIndexed
+			} : null,
+			siteWide: Boolean(siteWide)
+		}
+	};
+}
+const LOST_PAGES_RULE = `Pages that had at least ${MIN_LOST} clicks in the previous 28 days and kept ${LOST_SHARE * 100}% or less of them in the last 28 days, with a live check of the top ${CHECKED} and Google’s index status for the top ${INSPECTED} and the home page.`;
 async function runLostPages(input, deps) {
 	const range = dateWindow(input, 28);
 	const before = earlierRange(range);
@@ -38051,7 +38602,17 @@ async function runLostPages(input, deps) {
 		clicks: current.get(row.keys[0]) ?? 0
 	})).filter((row) => row.clicks <= row.previous_clicks * LOST_SHARE).sort((a, b) => b.previous_clicks - b.clicks - (a.previous_clicks - a.clicks) || a.url.localeCompare(b.url));
 	const top = lost.slice(0, CHECKED);
-	const [facts, indexed] = await Promise.all([deps.checkPages(top.map((row) => row.url)), Promise.all(top.slice(0, INSPECTED).map((row) => deps.inspect(input.site, row.url)))]);
+	const homeUrl = top[0] ? `${new URL(top[0].url).origin}/` : null;
+	const [facts, indexed, homeStatus] = await Promise.all([
+		deps.checkPages(top.map((row) => row.url)),
+		Promise.all(top.slice(0, INSPECTED).map((row) => deps.inspect(input.site, row.url))),
+		homeUrl && !top.slice(0, INSPECTED).some((row) => row.url === homeUrl) ? deps.inspect(input.site, homeUrl).catch(() => null) : null
+	]);
+	const homeIndex = top.slice(0, INSPECTED).findIndex((row) => row.url === homeUrl);
+	const summary = indexSummary(homeIndex >= 0 ? indexed.filter((_, index) => index !== homeIndex) : indexed, homeUrl ? {
+		url: homeUrl,
+		status: homeIndex >= 0 ? indexed[homeIndex] ?? null : homeStatus
+	} : null);
 	const rows = top.map((row, index) => ({
 		...row,
 		status: facts[index]?.status ?? null,
@@ -38067,6 +38628,7 @@ async function runLostPages(input, deps) {
 			`Pages that lost their clicks on ${input.site}: ${range.startDate} to ${range.endDate} against ${before.startDate} to ${before.endDate}.`,
 			`${lost.length} pages kept ${LOST_SHARE * 100}% or less of at least ${MIN_LOST} clicks${lost.length > CHECKED ? `; the top ${CHECKED} by clicks lost are shown` : ""}.`,
 			rows.length ? table(rows, Object.keys(rows[0] ?? {}), originOf(input.site)) : "No pages lost their clicks.",
+			summary.text,
 			"Live checks are fetched now with no redirects followed. Index status is from URL Inspection; Google allows about 2,000 inspections a day per property.",
 			temporaryRedirectNote(rows),
 			`Next: ${deps.call("page")} for one URL; ${deps.call("report", {
@@ -38080,84 +38642,12 @@ async function runLostPages(input, deps) {
 			comparisonRange: before,
 			rule: LOST_PAGES_RULE,
 			lostPages: lost.length,
+			index: summary.data,
 			pages: rows
 		}
 	};
 }
 //#endregion
-//#region packages/core/dist/commands/sites.js
-async function readableSites(google, signIn) {
-	return (await listSearchConsoleSites(google, { signIn })).filter((entry) => entry.permissionLevel !== "siteUnverifiedUser").map((entry) => ({
-		siteUrl: entry.siteUrl,
-		permissionLevel: entry.permissionLevel ?? ""
-	})).sort((a, b) => a.siteUrl.localeCompare(b.siteUrl));
-}
-const hostOf = (value) => {
-	try {
-		return new URL(value.includes("://") ? value : `https://${value.replace(/^sc-domain:/, "")}`).hostname.replace(/^www\./, "");
-	} catch {
-		return value;
-	}
-};
-async function runSites(input) {
-	const named = input.accounts.length > 1;
-	const [google, bing] = await Promise.all([Promise.all(input.accounts.map(async (account) => {
-		const [properties, analytics] = await Promise.all([readableSites(account.google, input.signIn).catch((error) => error instanceof Error ? error : new Error(String(error))), listAnalyticsAccounts(account.google, { signIn: input.signIn }).catch(() => null)]);
-		return {
-			email: account.email,
-			properties,
-			analytics
-		};
-	})), input.bing ? listBingSites(input.bing).catch((error) => error instanceof Error ? error : new Error(String(error))) : Promise.resolve(null)]);
-	const bingSites = Array.isArray(bing) ? bing.filter((site) => site.verified) : [];
-	const bingByHost = new Map(bingSites.map((site) => [hostOf(site.url), site]));
-	const properties = google.flatMap((account) => account.properties instanceof Error ? [] : account.properties.map((property) => ({
-		...property,
-		...named ? { account: account.email ?? "" } : {},
-		...Array.isArray(bing) ? { bing: bingByHost.get(hostOf(property.siteUrl))?.url ?? "" } : {}
-	})));
-	const googleHosts = new Set(properties.map((property) => hostOf(property.siteUrl)));
-	const bingOnly = bingSites.filter((site) => !googleHosts.has(hostOf(site.url)));
-	const failed = google.filter((account) => account.properties instanceof Error);
-	const analytics = google.flatMap((account) => (account.analytics ?? []).flatMap((summary) => summary.propertySummaries.map((property) => ({
-		property: property.property.replace("properties/", ""),
-		name: property.displayName ?? "",
-		account: summary.displayName ?? "",
-		...named ? { signIn: account.email ?? "" } : {}
-	}))));
-	const research = [["dataforseo", "x-dataforseo-login"], ["ahrefs", "x-ahrefs-key"]].filter(([, name]) => input.keys.get(name ?? "")).map(([provider]) => provider);
-	const columns = [
-		"siteUrl",
-		"permissionLevel",
-		...named ? ["account"] : [],
-		...Array.isArray(bing) ? ["bing"] : []
-	];
-	return {
-		text: [
-			named ? `Google accounts: ${input.accounts.map((account) => account.email).join(", ")}.` : null,
-			`Search Console properties (${properties.length}):`,
-			properties.length ? table(properties, columns, null) : "None. These Google sign-ins have no Search Console access, so the reports cannot run.",
-			...failed.map((account) => `${account.email ?? "Google"}: could not list properties. ${account.properties.message}`),
-			analytics.length ? `Google Analytics properties (${analytics.length}):\n${table(analytics, [
-				"property",
-				"name",
-				"account",
-				...named ? ["signIn"] : []
-			], null)}` : "Google Analytics: no properties readable with these sign-ins.",
-			input.bing === void 0 ? null : bing === null ? "Bing Webmaster: not connected." : bing instanceof Error ? `Bing Webmaster: could not list sites. ${bing.message}` : bingOnly.length ? `Bing Webmaster sites with no Search Console property here (${bingOnly.length}): ${bingOnly.map((site) => site.url).join(", ")}.` : `Bing Webmaster: ${bingSites.length} verified sites; the bing column shows each one.`,
-			`Research keys: ${research.length ? research.join(", ") : "none"}.`,
-			`Add a Google account${input.bing === void 0 ? "" : ", Bing"} or a key: ${input.connect}`,
-			"Next: seo_report with a site."
-		].filter(Boolean).join("\n\n"),
-		data: {
-			searchConsole: properties,
-			googleAnalytics: analytics,
-			bing: Array.isArray(bing) ? bingSites : null,
-			research
-		}
-	};
-}
-//#endregion
 //#region packages/core/dist/commands/telemetry-report.js
 const SECTION_REPORTS = {
 	overview: "search-performance-overview",
@@ -38205,9 +38695,9 @@ const detail = {
 const DATA_SOURCES = [
 	"search_console",
 	"google_analytics",
-	"bing"
+	"bing",
+	"clicky"
 ];
-const LOCAL_ANALYTICS = "Clicky and other analytics run on the person’s machine with the CLI and a provider package: `npx -y seo providers install @seoskill/clicky-provider`, connect it once with `seo providers connect clicky`, then `npx -y seo analytics clicky report --json`. `seo providers list` shows installed providers.";
 function tool(spec) {
 	return spec;
 }
@@ -38221,6 +38711,7 @@ const SHARED_TOOLS = [
 		run: async (surface) => runSites({
 			accounts: await surface.accounts(),
 			keys: await surface.keys(),
+			clicky: clickySites(await surface.keys()).map(clickyLabel),
 			signIn: surface.signIn,
 			bing: surface.deps.bing ? await surface.deps.bing() : void 0,
 			connect: surface.connect
@@ -38300,7 +38791,7 @@ const SHARED_TOOLS = [
 		name: "seo_research",
 		command: "research",
 		title: "Keyword, competitor and backlink data",
-		description: `Data from the person’s own DataForSEO or Ahrefs account, which costs them credits. Key headers on the hosted server: ${Object.entries(KEY_HEADERS).map(([provider, header]) => `${provider} ${header}`).join("; ")}. Actions: ${RESEARCH_HELP}`,
+		description: `Data from the person’s own DataForSEO or Ahrefs account, which costs them credits. It uses the key the person saved on their seoskill.dev account (or on this machine for the CLI). Actions: ${RESEARCH_HELP}`,
 		input: z.object({
 			provider: z.enum(RESEARCH_PROVIDERS),
 			action: z.enum(RESEARCH_ACTIONS),
@@ -38318,10 +38809,10 @@ const SHARED_TOOLS = [
 		name: "seo_data",
 		command: "data",
 		title: "Raw rows",
-		description: `Raw rows for questions the report does not answer. search_console (default): rows for any dimensions, each with the previous period and the change; page and query narrow to rows whose URL or query contains that text. google_analytics: landing pages for visits from search, with Google Analytics’ own metric names. bing: Bing Webmaster query or page rows (first dimension) for the same site, by week. ${LOCAL_ANALYTICS}`,
+		description: `Raw rows for questions the report does not answer. search_console (default): rows for any dimensions, each with the previous period and the change; page and query narrow to rows whose URL or query contains that text. google_analytics: landing pages for visits from search, with Google Analytics’ own metric names. bing: Bing Webmaster query or page rows (first dimension) for the same site, by week. clicky: landing-page visits, traffic sources and search engines from a Clicky site the person saved (site is its domain or Clicky site ID; at most 31 days).`,
 		input: z.object({
 			source: z.enum(DATA_SOURCES).default("search_console"),
-			site: z.string().min(1).describe("search_console and bing: the property or site. google_analytics: numeric property id from seo_sites."),
+			site: z.string().min(1).describe("search_console and bing: the property or site. google_analytics: numeric property id from seo_sites. clicky: the site or its Clicky site ID."),
 			dimensions: z.array(z.enum(DIMENSIONS)).max(4).default(["query"]).describe("search_console; bing uses the first, query or page."),
 			page: z.string().min(1).optional().describe("search_console only: URL text, such as /blog/."),
 			query: z.string().min(1).optional().describe("search_console only: query text."),
@@ -38329,6 +38820,17 @@ const SHARED_TOOLS = [
 			...detail
 		}),
 		run: async (surface, input) => {
+			if (input.source === "clicky") return runClickyRows({
+				site: input.site,
+				startDate: input.start_date,
+				endDate: input.end_date,
+				detail: input.detail,
+				offset: input.offset
+			}, await surface.keys(), {
+				connect: surface.connect,
+				call: (offset) => `seo_data with source "clicky", site "${input.site}", detail "rows", offset ${offset}`,
+				refresh: surface.refreshClicky
+			});
 			if (input.source === "bing") return runBingRows({
 				site: input.site,
 				dimension: input.dimensions[0] === "page" ? "page" : "query",
@@ -38372,10 +38874,10 @@ async function runSharedTool(tool, surface, input) {
 	if (!parsed.success) throw new CommandError("INVALID_INPUT", parsed.error.issues.map((issue) => `${issue.path.join(".") || "input"}: ${issue.message}`).join("; "));
 	return tool.run(surface, parsed.data);
 }
-const MCP_INSTRUCTIONS = `SEO Skill reads the person's own Search Console, Google Analytics, Bing Webmaster Tools and optional keyword and analytics accounts, and returns facts with their dates and limits. It gives no advice.
+const MCP_INSTRUCTIONS = `SEO Skill reads the person's own Search Console, Google Analytics, Bing Webmaster Tools, Clicky and optional keyword accounts, and returns facts with their dates and limits. It gives no advice.
 1. seo_sites: the properties the connected accounts can read.
 2. seo_report: the main report. Run it without a section first; it shows the overview and every section's count and top rows. Then ask for the one section you need.
-3. seo_page for one URL, seo_compare for before and after a date, seo_index for pages that lost their clicks, seo_research for keyword, competitor and backlink data from the person's own DataForSEO or Ahrefs key, seo_data for raw rows.
+3. seo_page for one URL, seo_compare for before and after a date, seo_index for pages that lost their clicks, seo_research for keyword, competitor and backlink data from the DataForSEO or Ahrefs key the person saved, seo_data for raw rows, including Google Analytics, Bing and Clicky.
 Show the person the facts that matter, for example in a table or a small dashboard, and decide with them what to change. Do not edit pages without their approval.`;
 const mcpCall = (command, args) => {
 	const name = `seo_${command.replace("-", "_")}`;
@@ -38585,15 +39087,34 @@ function nodeCommandDeps(options) {
 		bingConnect: LOCAL_BING_CONNECT
 	};
 }
-const LOCAL_BING_CONNECT = "Run `seo providers bing connect` with an API key from Bing Webmaster Tools (Settings, API access).";
+const LOCAL_BING_CONNECT = "Connect Bing on your seoskill.dev account and run `seo login`, or run `seo providers bing connect` with an API key from Bing Webmaster Tools (Settings, API access).";
 let bing;
 function localBing() {
-	bing ??= readBingApiKey().catch(() => void 0).then((key) => key ? bingCall({ apiKey: key.apiKey }, { signIn: LOCAL_BING_CONNECT }) : null);
+	bing ??= readBingApiKey().catch(() => void 0).then((key) => key ? bingCall({ apiKey: key.apiKey }, { signIn: LOCAL_BING_CONNECT }) : cloudLinked() ? cloudBing() : null);
 	return bing;
 }
+async function localAccounts() {
+	if (!cloudLinked()) return [{
+		email: null,
+		google: await localGoogleFetch()
+	}];
+	return (await cloudGoogleEmails()).map((email) => ({
+		email,
+		google: bearerFetch(() => cloudGoogleToken(email))
+	}));
+}
 async function localResearchKeys() {
-	const [dataForSeo, ahrefs] = await Promise.all([readDataForSeoCredentials().catch(() => void 0), readAhrefsApiKey().catch(() => void 0)]);
-	const keys = new Headers();
+	const [dataForSeo, ahrefs, clicky, saved] = await Promise.all([
+		readDataForSeoCredentials().catch(() => void 0),
+		readAhrefsApiKey().catch(() => void 0),
+		readClickySiteKeys().catch(() => ({})),
+		cloudLinked() ? cloudKeys().catch(() => ({})) : {}
+	]);
+	const keys = new Headers(saved);
+	for (const [siteId, sitekey] of Object.entries(clicky)) {
+		const name = `${CLICKY_KEY_PREFIX}${siteId}`;
+		if (!keys.has(name)) keys.set(name, sitekey);
+	}
 	if (dataForSeo) {
 		keys.set("x-dataforseo-login", dataForSeo.login);
 		keys.set("x-dataforseo-password", dataForSeo.password);
@@ -38601,6 +39122,11 @@ async function localResearchKeys() {
 	if (ahrefs?.apiKey) keys.set("x-ahrefs-key", ahrefs.apiKey);
 	return keys;
 }
+async function localRefreshClicky() {
+	if (!cloudLinked()) return null;
+	await cloudCredentials({ refreshClicky: true });
+	return localResearchKeys();
+}
 async function resolveLocalSite(site, options = {}) {
 	const found = matchProperty((await listSites(options.refresh, options.account)).map((entry) => entry.siteUrl), site);
 	if (!found) throw new CommandError("NO_ACCESS", `This Google login has no Search Console property for ${site}. Run \`seo sites\` to list the properties it can read.`);
@@ -42117,13 +42643,11 @@ function registerSharedTools(server, options = {}) {
 		deps: nodeCommandDeps({ call: mcpCall }),
 		resolveSite: (site) => resolveLocalSite(site),
 		keys: localResearchKeys,
+		refreshClicky: localRefreshClicky,
 		drKey: null,
-		accounts: async () => [{
-			email: null,
-			google: await localGoogleFetch()
-		}],
+		accounts: localAccounts,
 		signIn: LOCAL_SIGN_IN.signIn,
-		connect: "run `seo auth login` for Google, `seo providers bing connect` for Bing, and `seo providers dataforseo connect` or `seo providers ahrefs connect` for keys."
+		connect: "run `seo login` to use your seoskill.dev account (Google, Bing and keys in one place), or `seo auth login`, `seo providers bing connect` and `seo providers dataforseo connect` or `seo providers ahrefs connect` on this machine only."
 	};
 	for (const shared of SHARED_TOOLS) server.registerTool(shared.name, {
 		title: shared.title,