@particle-academy/google-ads-ui 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,17 @@
+# Changelog
+
+All notable changes to `@particle-academy/google-ads-ui`,
+`@particle-academy/google-ads-js`, `particle-academy/google-ads-php` and
+`fancy-google-ads`.
+
+## [0.1.0] - 2026-08-24
+
+### Added
+
+- List Google Ads customers directly accessible to an OAuth identity.
+- Send the required developer token alongside OAuth bearer authorization.
+- Support an optional manager customer header for manager-account access.
+- Model Google Ads' isolated test-account hierarchy.
+- Provide a deterministic fixture matching the v25 discovery response.
+
+[0.1.0]: https://github.com/Fancy-Friends/google-ads/releases/tag/v0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Particle Academy
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,101 @@
+# Google Ads
+
+Google Ads for [fancy-flow][flow] — as **four imported, versioned packages**, one
+per runtime. Not vendored source: a copy cannot be upgraded, and third-party APIs
+change.
+
+[flow]: https://github.com/Particle-Academy/fancy-flow
+
+| Runtime | Package | Install |
+|---|---|---|
+| Authoring surface (every host) | `@particle-academy/google-ads-ui` | `npm install @particle-academy/google-ads-ui` |
+| Node | `@particle-academy/google-ads-js` | `npm install @particle-academy/google-ads-js` |
+| PHP 8.4+ | `particle-academy/google-ads-php` | `composer require particle-academy/google-ads-php` |
+| Python 3.11+ | `fancy-google-ads` | `pip install fancy-google-ads` |
+
+The `ui` package is the editor surface and is React on every host — a PHP or
+Python project installs it *and* its own runtime package, and never the `js` one.
+
+## What it costs you
+
+One dependency: `@particle-academy/fancy-connector-core` (or
+`particle-academy/fancy-connector-core` on Composer), which the `js` and `php`
+packages pull in themselves. The Python package has **zero** runtime
+dependencies.
+
+**No Google Ads SDK.** Plain HTTP, deliberately: a vendor SDK is third-party code
+subject to the kit's full approval bar, and one per provider is hundreds of
+dependencies nobody is tracking.
+
+## Setting it up
+
+Everything below is generated from `provider/manifest.json`, so it cannot disagree with what the packages do.
+
+### Credentials
+
+A Google Ads connection holds 6 values.
+
+**Two kinds of value, and mixing them up matters.** A `provider` credential is ONE value for the whole installation — an OAuth app's client secret serves every connected account. An `account` credential is one per connected account. A host that stores the second where it stores the first lets one account's credentials reach another's.
+
+| Field | Scope | Secret | Where it comes from |
+|---|---|---|---|
+| **OAuth client ID** | per installation | not secret | The Google Cloud OAuth client shared by the installation. |
+| **OAuth client secret** | per installation | **secret** | The matching Google Cloud OAuth client secret. |
+| **Developer token** | per installation | **secret** | The 22-character Google Ads API developer token from the manager account's API Center. Google says to treat it like a password; one token identifies the installed application. |
+| **Access token** | per connected account | **secret** | The connected Google user's one-hour OAuth access token. |
+| **Refresh token** | per connected account | **secret** | The reusable offline token used to replace expired access tokens. |
+| **Manager customer ID** *(optional)* | per connected account | not secret | Optional. The manager account's 10-digit customer ID without hyphens. Required when the OAuth user reaches a client through that manager; omit it for direct access. |
+
+Every request carries `developer-token` and `login-customer-id` *(when set)* alongside the primary authorization, filled from the credentials above.
+
+### Authorising
+
+Google Ads uses OAuth2 (authorization_code). The package DECLARES the exchange; the HOST performs it — a consent screen needs a browser, a redirect URI and somewhere to persist the result, and all three belong to the host.
+
+- **Authorize URL** — https://accounts.google.com/o/oauth2/v2/auth
+- **Token URL** — https://oauth2.googleapis.com/token
+- **Scopes** — `https://www.googleapis.com/auth/adwords`
+- **Access token lifetime** — 3600 seconds (1 hours). A host that never refreshes works all afternoon and is broken by morning.
+
+The refresh tokens do **not** rotate: the same one is reusable, so a refresh may safely be retried and may run concurrently. Stated rather than assumed, because the opposite — a provider that spends the token and revokes the grant on a replay — looks identical until it happens.
+
+### The estate
+
+Google Ads has a test estate on the same host, reached with credentials from a SEPARATE test account you register. Selecting sandbox mode uses those credentials.
+
+> Use a dedicated Google Ads test manager and test client account. Test and production hierarchies cannot interact; test ads never serve or incur cost, but some features such as billing, conversion uploads and serving reports cannot be exercised there.
+
+## What it can do
+
+### Actions
+
+#### `customer_list_accessible` — Accessible Google Ads customers
+
+List Google Ads customer resource names directly accessible to the authenticated user. Manager-linked client accounts are not included; query the account hierarchy after choosing a directly accessible manager.
+
+`GET /v25/customers:listAccessibleCustomers` · reads only — safe to replay
+
+Takes no input.
+
+## Run it before you have credentials
+
+Every operation ships a **faker**, whether or not Google Ads has a sandbox. Set a
+node's mode to `fake` and it returns the shape Google Ads actually publishes — the
+same field names, deterministically — so you can wire the downstream nodes before
+touching an account, a key, or a network.
+
+## This repository is generated
+
+`provider/` is the source. Everything under `packages/` is emitted from it and
+**must not be hand-edited** — CI regenerates and diffs on every push, and the
+next protocol sync destroys anything it finds. See [`AGENTS.md`](AGENTS.md).
+
+## Two namespaces, which do not match on purpose
+
+The repo is `github.com/Fancy-Friends/google-ads`; the packages publish under
+`particle-academy`. Nothing derives one from the other — the names come from
+weaver's `friends.json` and nowhere else.
+
+## Licence
+
+MIT.

package/dist/index.cjs

@@ -0,0 +1,116 @@
+'use strict';
+
+var connectors = require('@particle-academy/fancy-flow/connectors');
+
+// src/service.ts
+var CONNECTOR_API_VERSION = 1;
+var GOOGLE_ADS_SERVICE = {
+  service: "google_ads",
+  serviceTitle: "Google Ads",
+  domain: "marketing",
+  sandbox: "separate-account"
+};
+var GOOGLE_ADS_CREDENTIALS = [
+  {
+    "key": "clientId",
+    "label": "OAuth client ID",
+    "scope": "provider",
+    "secret": false,
+    "help": "The Google Cloud OAuth client shared by the installation."
+  },
+  {
+    "key": "clientSecret",
+    "label": "OAuth client secret",
+    "scope": "provider",
+    "secret": true,
+    "help": "The matching Google Cloud OAuth client secret."
+  },
+  {
+    "key": "developerToken",
+    "label": "Developer token",
+    "scope": "provider",
+    "secret": true,
+    "help": "The 22-character Google Ads API developer token from the manager account's API Center. Google says to treat it like a password; one token identifies the installed application."
+  },
+  {
+    "key": "accessToken",
+    "label": "Access token",
+    "scope": "account",
+    "secret": true,
+    "help": "The connected Google user's one-hour OAuth access token."
+  },
+  {
+    "key": "refreshToken",
+    "label": "Refresh token",
+    "scope": "account",
+    "secret": true,
+    "help": "The reusable offline token used to replace expired access tokens."
+  },
+  {
+    "key": "loginCustomerId",
+    "label": "Manager customer ID",
+    "scope": "account",
+    "secret": false,
+    "optional": true,
+    "help": "Optional. The manager account's 10-digit customer ID without hyphens. Required when the OAuth user reaches a client through that manager; omit it for direct access."
+  }
+];
+var GOOGLE_ADS_OAUTH = {
+  "flow": "authorization_code",
+  "authorizeUrl": "https://accounts.google.com/o/oauth2/v2/auth",
+  "tokenUrl": "https://oauth2.googleapis.com/token",
+  "scopes": [
+    "https://www.googleapis.com/auth/adwords"
+  ],
+  "accessTokenCredential": "accessToken",
+  "refreshTokenCredential": "refreshToken",
+  "refreshTokenRotates": false,
+  "accessTokenTtlSeconds": 3600
+};
+function googleAdsMeta(role, operation, docs) {
+  return { ...GOOGLE_ADS_SERVICE, role, operation, docs };
+}
+var GOOGLE_ADS_CUSTOMER_LIST_KIND = "@particle-academy/google_ads_customer_list";
+var GOOGLE_ADS_CUSTOMER_LIST_OPERATION = "customer_list_accessible";
+var GOOGLE_ADS_CUSTOMER_LIST_META = googleAdsMeta("action", "list directly accessible customers", "https://developers.google.com/google-ads/api/rest/reference/rest/v25/customers/listAccessibleCustomers");
+var GOOGLE_ADS_CUSTOMER_LIST_OUTPUT = [
+  {
+    "path": "data.resourceNames",
+    "type": "array",
+    "description": "Customer resource names in customers/{customer_id} form that the OAuth identity can access directly."
+  }
+];
+var googleAdsCustomerListKind = connectors.defineConnectorKind(GOOGLE_ADS_CUSTOMER_LIST_META, {
+  name: GOOGLE_ADS_CUSTOMER_LIST_KIND,
+  aliases: ["google_ads_customer_list"],
+  label: "Accessible Google Ads customers",
+  description: "List Google Ads customer resource names directly accessible to the authenticated user. Manager-linked client accounts are not included; query the account hierarchy after choosing a directly accessible manager.",
+  inputs: [{ id: "in" }],
+  outputs: [{ id: "out" }],
+  sideEffects: "none",
+  outputShape: GOOGLE_ADS_CUSTOMER_LIST_OUTPUT,
+  configSchema: [],
+  defaultConfig: {
+    "mode": "auto"
+  },
+  renderBody: ({ config }) => connectors.summarize(GOOGLE_ADS_CUSTOMER_LIST_META, config, "list directly accessible customers")
+});
+
+// src/index.ts
+var GOOGLE_ADS_KINDS = [
+  googleAdsCustomerListKind
+];
+
+exports.CONNECTOR_API_VERSION = CONNECTOR_API_VERSION;
+exports.GOOGLE_ADS_CREDENTIALS = GOOGLE_ADS_CREDENTIALS;
+exports.GOOGLE_ADS_CUSTOMER_LIST_KIND = GOOGLE_ADS_CUSTOMER_LIST_KIND;
+exports.GOOGLE_ADS_CUSTOMER_LIST_META = GOOGLE_ADS_CUSTOMER_LIST_META;
+exports.GOOGLE_ADS_CUSTOMER_LIST_OPERATION = GOOGLE_ADS_CUSTOMER_LIST_OPERATION;
+exports.GOOGLE_ADS_CUSTOMER_LIST_OUTPUT = GOOGLE_ADS_CUSTOMER_LIST_OUTPUT;
+exports.GOOGLE_ADS_KINDS = GOOGLE_ADS_KINDS;
+exports.GOOGLE_ADS_OAUTH = GOOGLE_ADS_OAUTH;
+exports.GOOGLE_ADS_SERVICE = GOOGLE_ADS_SERVICE;
+exports.googleAdsCustomerListKind = googleAdsCustomerListKind;
+exports.googleAdsMeta = googleAdsMeta;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/service.ts","../src/kinds/customer-list-accessible.ts","../src/index.ts"],"names":["defineConnectorKind","summarize"],"mappings":";;;;;AAmCO,IAAM,qBAAA,GAAwB;AAG9B,IAAM,kBAAA,GAAqB;AAAA,EAChC,OAAA,EAAS,YAAA;AAAA,EACT,YAAA,EAAc,YAAA;AAAA,EACd,MAAA,EAAQ,WAAA;AAAA,EACR,OAAA,EAAS;AACX;AA+BO,IAAM,sBAAA,GAAyB;AAAA,EACpC;AAAA,IACE,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,gBAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,iBAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,UAAA,EAAY,IAAA;AAAA,IACZ,MAAA,EAAQ;AAAA;AAEZ;AAoBO,IAAM,gBAAA,GAAmB;AAAA,EAC9B,MAAA,EAAQ,oBAAA;AAAA,EACR,cAAA,EAAgB,8CAAA;AAAA,EAChB,UAAA,EAAY,qCAAA;AAAA,EACZ,QAAA,EAAU;AAAA,IACR;AAAA,GACF;AAAA,EACA,uBAAA,EAAyB,aAAA;AAAA,EACzB,wBAAA,EAA0B,cAAA;AAAA,EAC1B,qBAAA,EAAuB,KAAA;AAAA,EACvB,uBAAA,EAAyB;AAC3B;AAGO,SAAS,aAAA,CACd,IAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,EAAE,GAAG,kBAAA,EAAoB,IAAA,EAAM,WAAW,IAAA,EAAK;AACxD;ACtIO,IAAM,6BAAA,GAAgC;AACtC,IAAM,kCAAA,GAAqC;AAE3C,IAAM,6BAAA,GAAgC,aAAA,CAAc,QAAA,EAAU,oCAAA,EAAsC,wGAAwG;AAU5M,IAAM,+BAAA,GAAiD;AAAA,EAC5D;AAAA,IACE,MAAA,EAAQ,oBAAA;AAAA,IACR,MAAA,EAAQ,OAAA;AAAA,IACR,aAAA,EAAe;AAAA;AAEnB;AAEO,IAAM,yBAAA,GAAgDA,+BAAoB,6BAAA,EAA+B;AAAA,EAC9G,IAAA,EAAM,6BAAA;AAAA,EACN,OAAA,EAAS,CAAC,0BAA0B,CAAA;AAAA,EACpC,KAAA,EAAO,iCAAA;AAAA,EACP,WAAA,EAAa,mNAAA;AAAA,EACb,MAAA,EAAQ,CAAC,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACrB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,OAAO,CAAA;AAAA,EACvB,WAAA,EAAa,MAAA;AAAA,EACb,WAAA,EAAa,+BAAA;AAAA,EACb,cAAc,EAAC;AAAA,EACf,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,GACV;AAAA,EACA,UAAA,EAAY,CAAC,EAAE,MAAA,OACbC,oBAAA,CAAU,6BAAA,EAA+B,QAAmC,oCAAoC;AACpH,CAAC;;;AClCM,IAAM,gBAAA,GAAyC;AAAA,EACpD;AACF","file":"index.cjs","sourcesContent":["/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_ads\n */\n\n/**\n * Google Ads's identity on the authoring surface, shared by every Google Ads\n * node.\n *\n * This file must import nothing from the js package: a PHP or Python project\n * installs the ui package and never that one, and the import would be a\n * dangling module the moment it did.\n *\n * ## The sandbox trap\n *\n * Use a dedicated Google Ads test manager and test client account. Test and\n * production hierarchies cannot interact; test ads never serve or incur cost,\n * but some features such as billing, conversion uploads and serving reports\n * cannot be exercised there.\n */\n\nimport type { ConnectorDomain, ConnectorMeta } from \"@particle-academy/fancy-flow/connectors\";\n\n/**\n * The connector API version this package was GENERATED against.\n *\n * A literal, never imported — an imported constant lets an upgrade rewrite the\n * very claim it exists to detect.\n */\nexport const CONNECTOR_API_VERSION = 1;\n\n/** The parts of a connector's identity that belong to the SERVICE, not the node. */\nexport const GOOGLE_ADS_SERVICE = {\n  service: \"google_ads\",\n  serviceTitle: \"Google Ads\",\n  domain: \"marketing\",\n  sandbox: \"separate-account\",\n} as const satisfies Pick<ConnectorMeta, \"service\" | \"serviceTitle\" | \"domain\" | \"sandbox\">;\n\n/**\n * Every connector domain weaver knows, pinned against fancy-flow's union.\n *\n * A closed set copied into three codebases stays correct only while something\n * MAKES it: this line fails to compile the moment weaver carries a value\n * fancy-flow does not, including the values no provider uses yet.\n */\nconst WEAVER_DOMAINS: readonly ConnectorDomain[] = [\n  \"payments\",\n  \"commerce\",\n  \"messaging\",\n  \"email\",\n  \"crm\",\n  \"support\",\n  \"storage\",\n  \"calendar\",\n  \"productivity\",\n  \"database\",\n  \"devtools\",\n  \"analytics\",\n  \"marketing\",\n  \"ai\",\n  \"forms\",\n  \"hr\",\n  \"geo\"\n];\nvoid WEAVER_DOMAINS;\n\n/** The credentials a Google Ads connection holds. */\nexport const GOOGLE_ADS_CREDENTIALS = [\n  {\n    \"key\": \"clientId\",\n    \"label\": \"OAuth client ID\",\n    \"scope\": \"provider\",\n    \"secret\": false,\n    \"help\": \"The Google Cloud OAuth client shared by the installation.\"\n  },\n  {\n    \"key\": \"clientSecret\",\n    \"label\": \"OAuth client secret\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The matching Google Cloud OAuth client secret.\"\n  },\n  {\n    \"key\": \"developerToken\",\n    \"label\": \"Developer token\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The 22-character Google Ads API developer token from the manager account's API Center. Google says to treat it like a password; one token identifies the installed application.\"\n  },\n  {\n    \"key\": \"accessToken\",\n    \"label\": \"Access token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"The connected Google user's one-hour OAuth access token.\"\n  },\n  {\n    \"key\": \"refreshToken\",\n    \"label\": \"Refresh token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"The reusable offline token used to replace expired access tokens.\"\n  },\n  {\n    \"key\": \"loginCustomerId\",\n    \"label\": \"Manager customer ID\",\n    \"scope\": \"account\",\n    \"secret\": false,\n    \"optional\": true,\n    \"help\": \"Optional. The manager account's 10-digit customer ID without hyphens. Required when the OAuth user reaches a client through that manager; omit it for direct access.\"\n  }\n] as const;\n\n/**\n * The OAuth2 exchange Google Ads requires — DECLARED here, performed by the\n * host.\n *\n * A consent screen needs a browser, a redirect URI and somewhere to persist\n * the result, and all three belong to the host; a package that ran the dance\n * itself would have to own a web server. So this says precisely enough for a\n * host to do it.\n *\n * The access token lasts 3600 seconds. A host that never refreshes will work\n * all afternoon and be broken by morning, which is why the lifetime is stated\n * rather than left to be discovered.\n *\n * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may\n * safely be retried and may run concurrently. That is stated rather than\n * assumed because the opposite — a provider that spends the token and revokes\n * the grant on a replay — looks identical until it happens.\n */\nexport const GOOGLE_ADS_OAUTH = {\n  \"flow\": \"authorization_code\",\n  \"authorizeUrl\": \"https://accounts.google.com/o/oauth2/v2/auth\",\n  \"tokenUrl\": \"https://oauth2.googleapis.com/token\",\n  \"scopes\": [\n    \"https://www.googleapis.com/auth/adwords\"\n  ],\n  \"accessTokenCredential\": \"accessToken\",\n  \"refreshTokenCredential\": \"refreshToken\",\n  \"refreshTokenRotates\": false,\n  \"accessTokenTtlSeconds\": 3600\n} as const;\n\n/** Build a Google Ads node's connector metadata from the operation it performs. */\nexport function googleAdsMeta(\n  role: ConnectorMeta[\"role\"],\n  operation: string,\n  docs: string,\n): ConnectorMeta {\n  return { ...GOOGLE_ADS_SERVICE, role, operation, docs };\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/customer-list-accessible.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/customer-list-accessible.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_ads\n */\n\n/**\n * Accessible Google Ads customers — List Google Ads customer resource names\n * directly accessible to the authenticated user. Manager-linked client\n * accounts are not included; query the account hierarchy after choosing a\n * directly accessible manager.\n *\n * https://developers.google.com/google-ads/api/rest/reference/rest/v25/customers/listAccessibleCustomers\n */\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { defineConnectorKind, summarize, type OutputField } from \"@particle-academy/fancy-flow/connectors\";\nimport { googleAdsMeta } from \"../service.js\";\n\nexport const GOOGLE_ADS_CUSTOMER_LIST_KIND = \"@particle-academy/google_ads_customer_list\";\nexport const GOOGLE_ADS_CUSTOMER_LIST_OPERATION = \"customer_list_accessible\";\n\nexport const GOOGLE_ADS_CUSTOMER_LIST_META = googleAdsMeta(\"action\", \"list directly accessible customers\", \"https://developers.google.com/google-ads/api/rest/reference/rest/v25/customers/listAccessibleCustomers\");\n\n/**\n * What this node emits — the \"ingredients\" a downstream node can reference.\n *\n * fancy-flow reads `outputShape` off the kind and offers it in the variable\n * picker, so declaring it is the whole of the work: an author configuring the\n * next node picks `{{ $json.data.id }}` off a list instead of typing a path\n * and hoping.\n */\nexport const GOOGLE_ADS_CUSTOMER_LIST_OUTPUT: OutputField[] = [\n  {\n    \"path\": \"data.resourceNames\",\n    \"type\": \"array\",\n    \"description\": \"Customer resource names in customers/{customer_id} form that the OAuth identity can access directly.\"\n  }\n];\n\nexport const googleAdsCustomerListKind: NodeKindDefinition = defineConnectorKind(GOOGLE_ADS_CUSTOMER_LIST_META, {\n  name: GOOGLE_ADS_CUSTOMER_LIST_KIND,\n  aliases: [\"google_ads_customer_list\"],\n  label: \"Accessible Google Ads customers\",\n  description: \"List Google Ads customer resource names directly accessible to the authenticated user. Manager-linked client accounts are not included; query the account hierarchy after choosing a directly accessible manager.\",\n  inputs: [{ id: \"in\" }],\n  outputs: [{ id: \"out\" }],\n  sideEffects: \"none\",\n  outputShape: GOOGLE_ADS_CUSTOMER_LIST_OUTPUT,\n  configSchema: [],\n  defaultConfig: {\n    \"mode\": \"auto\"\n  },\n  renderBody: ({ config }) =>\n    summarize(GOOGLE_ADS_CUSTOMER_LIST_META, config as Record<string, unknown>, \"list directly accessible customers\"),\n});\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_ads\n */\n\n/**\n * Google Ads's node kinds for fancy-flow.\n *\n * Install this on every host. The TypeScript executors live in the js\n * package's `./flow` subpath; PHP and Python hosts run their own and need only\n * this.\n */\n\nexport * from \"./service.js\";\nexport * from \"./kinds/customer-list-accessible.js\";\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { googleAdsCustomerListKind } from \"./kinds/customer-list-accessible.js\";\n\n/** Every Google Ads kind, for a host that registers the lot. */\nexport const GOOGLE_ADS_KINDS: NodeKindDefinition[] = [\n  googleAdsCustomerListKind,\n];\n"]}

package/dist/index.d.cts

@@ -0,0 +1,150 @@
+import * as _particle_academy_fancy_flow_connectors from '@particle-academy/fancy-flow/connectors';
+import { ConnectorMeta, OutputField } from '@particle-academy/fancy-flow/connectors';
+import { NodeKindDefinition } from '@particle-academy/fancy-flow/engine';
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/manifest.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/manifest.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- google_ads
+ */
+/**
+ * Google Ads's identity on the authoring surface, shared by every Google Ads
+ * node.
+ *
+ * This file must import nothing from the js package: a PHP or Python project
+ * installs the ui package and never that one, and the import would be a
+ * dangling module the moment it did.
+ *
+ * ## The sandbox trap
+ *
+ * Use a dedicated Google Ads test manager and test client account. Test and
+ * production hierarchies cannot interact; test ads never serve or incur cost,
+ * but some features such as billing, conversion uploads and serving reports
+ * cannot be exercised there.
+ */
+
+/**
+ * The connector API version this package was GENERATED against.
+ *
+ * A literal, never imported — an imported constant lets an upgrade rewrite the
+ * very claim it exists to detect.
+ */
+declare const CONNECTOR_API_VERSION = 1;
+/** The parts of a connector's identity that belong to the SERVICE, not the node. */
+declare const GOOGLE_ADS_SERVICE: {
+    readonly service: "google_ads";
+    readonly serviceTitle: "Google Ads";
+    readonly domain: "marketing";
+    readonly sandbox: "separate-account";
+};
+/** The credentials a Google Ads connection holds. */
+declare const GOOGLE_ADS_CREDENTIALS: readonly [{
+    readonly key: "clientId";
+    readonly label: "OAuth client ID";
+    readonly scope: "provider";
+    readonly secret: false;
+    readonly help: "The Google Cloud OAuth client shared by the installation.";
+}, {
+    readonly key: "clientSecret";
+    readonly label: "OAuth client secret";
+    readonly scope: "provider";
+    readonly secret: true;
+    readonly help: "The matching Google Cloud OAuth client secret.";
+}, {
+    readonly key: "developerToken";
+    readonly label: "Developer token";
+    readonly scope: "provider";
+    readonly secret: true;
+    readonly help: "The 22-character Google Ads API developer token from the manager account's API Center. Google says to treat it like a password; one token identifies the installed application.";
+}, {
+    readonly key: "accessToken";
+    readonly label: "Access token";
+    readonly scope: "account";
+    readonly secret: true;
+    readonly help: "The connected Google user's one-hour OAuth access token.";
+}, {
+    readonly key: "refreshToken";
+    readonly label: "Refresh token";
+    readonly scope: "account";
+    readonly secret: true;
+    readonly help: "The reusable offline token used to replace expired access tokens.";
+}, {
+    readonly key: "loginCustomerId";
+    readonly label: "Manager customer ID";
+    readonly scope: "account";
+    readonly secret: false;
+    readonly optional: true;
+    readonly help: "Optional. The manager account's 10-digit customer ID without hyphens. Required when the OAuth user reaches a client through that manager; omit it for direct access.";
+}];
+/**
+ * The OAuth2 exchange Google Ads requires — DECLARED here, performed by the
+ * host.
+ *
+ * A consent screen needs a browser, a redirect URI and somewhere to persist
+ * the result, and all three belong to the host; a package that ran the dance
+ * itself would have to own a web server. So this says precisely enough for a
+ * host to do it.
+ *
+ * The access token lasts 3600 seconds. A host that never refreshes will work
+ * all afternoon and be broken by morning, which is why the lifetime is stated
+ * rather than left to be discovered.
+ *
+ * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may
+ * safely be retried and may run concurrently. That is stated rather than
+ * assumed because the opposite — a provider that spends the token and revokes
+ * the grant on a replay — looks identical until it happens.
+ */
+declare const GOOGLE_ADS_OAUTH: {
+    readonly flow: "authorization_code";
+    readonly authorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth";
+    readonly tokenUrl: "https://oauth2.googleapis.com/token";
+    readonly scopes: readonly ["https://www.googleapis.com/auth/adwords"];
+    readonly accessTokenCredential: "accessToken";
+    readonly refreshTokenCredential: "refreshToken";
+    readonly refreshTokenRotates: false;
+    readonly accessTokenTtlSeconds: 3600;
+};
+/** Build a Google Ads node's connector metadata from the operation it performs. */
+declare function googleAdsMeta(role: ConnectorMeta["role"], operation: string, docs: string): ConnectorMeta;
+
+declare const GOOGLE_ADS_CUSTOMER_LIST_KIND = "@particle-academy/google_ads_customer_list";
+declare const GOOGLE_ADS_CUSTOMER_LIST_OPERATION = "customer_list_accessible";
+declare const GOOGLE_ADS_CUSTOMER_LIST_META: _particle_academy_fancy_flow_connectors.ConnectorMeta;
+/**
+ * What this node emits — the "ingredients" a downstream node can reference.
+ *
+ * fancy-flow reads `outputShape` off the kind and offers it in the variable
+ * picker, so declaring it is the whole of the work: an author configuring the
+ * next node picks `{{ $json.data.id }}` off a list instead of typing a path
+ * and hoping.
+ */
+declare const GOOGLE_ADS_CUSTOMER_LIST_OUTPUT: OutputField[];
+declare const googleAdsCustomerListKind: NodeKindDefinition;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/manifest.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/manifest.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- google_ads
+ */
+/**
+ * Google Ads's node kinds for fancy-flow.
+ *
+ * Install this on every host. The TypeScript executors live in the js
+ * package's `./flow` subpath; PHP and Python hosts run their own and need only
+ * this.
+ */
+
+/** Every Google Ads kind, for a host that registers the lot. */
+declare const GOOGLE_ADS_KINDS: NodeKindDefinition[];
+
+export { CONNECTOR_API_VERSION, GOOGLE_ADS_CREDENTIALS, GOOGLE_ADS_CUSTOMER_LIST_KIND, GOOGLE_ADS_CUSTOMER_LIST_META, GOOGLE_ADS_CUSTOMER_LIST_OPERATION, GOOGLE_ADS_CUSTOMER_LIST_OUTPUT, GOOGLE_ADS_KINDS, GOOGLE_ADS_OAUTH, GOOGLE_ADS_SERVICE, googleAdsCustomerListKind, googleAdsMeta };

package/dist/index.d.ts

@@ -0,0 +1,150 @@
+import * as _particle_academy_fancy_flow_connectors from '@particle-academy/fancy-flow/connectors';
+import { ConnectorMeta, OutputField } from '@particle-academy/fancy-flow/connectors';
+import { NodeKindDefinition } from '@particle-academy/fancy-flow/engine';
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/manifest.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/manifest.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- google_ads
+ */
+/**
+ * Google Ads's identity on the authoring surface, shared by every Google Ads
+ * node.
+ *
+ * This file must import nothing from the js package: a PHP or Python project
+ * installs the ui package and never that one, and the import would be a
+ * dangling module the moment it did.
+ *
+ * ## The sandbox trap
+ *
+ * Use a dedicated Google Ads test manager and test client account. Test and
+ * production hierarchies cannot interact; test ads never serve or incur cost,
+ * but some features such as billing, conversion uploads and serving reports
+ * cannot be exercised there.
+ */
+
+/**
+ * The connector API version this package was GENERATED against.
+ *
+ * A literal, never imported — an imported constant lets an upgrade rewrite the
+ * very claim it exists to detect.
+ */
+declare const CONNECTOR_API_VERSION = 1;
+/** The parts of a connector's identity that belong to the SERVICE, not the node. */
+declare const GOOGLE_ADS_SERVICE: {
+    readonly service: "google_ads";
+    readonly serviceTitle: "Google Ads";
+    readonly domain: "marketing";
+    readonly sandbox: "separate-account";
+};
+/** The credentials a Google Ads connection holds. */
+declare const GOOGLE_ADS_CREDENTIALS: readonly [{
+    readonly key: "clientId";
+    readonly label: "OAuth client ID";
+    readonly scope: "provider";
+    readonly secret: false;
+    readonly help: "The Google Cloud OAuth client shared by the installation.";
+}, {
+    readonly key: "clientSecret";
+    readonly label: "OAuth client secret";
+    readonly scope: "provider";
+    readonly secret: true;
+    readonly help: "The matching Google Cloud OAuth client secret.";
+}, {
+    readonly key: "developerToken";
+    readonly label: "Developer token";
+    readonly scope: "provider";
+    readonly secret: true;
+    readonly help: "The 22-character Google Ads API developer token from the manager account's API Center. Google says to treat it like a password; one token identifies the installed application.";
+}, {
+    readonly key: "accessToken";
+    readonly label: "Access token";
+    readonly scope: "account";
+    readonly secret: true;
+    readonly help: "The connected Google user's one-hour OAuth access token.";
+}, {
+    readonly key: "refreshToken";
+    readonly label: "Refresh token";
+    readonly scope: "account";
+    readonly secret: true;
+    readonly help: "The reusable offline token used to replace expired access tokens.";
+}, {
+    readonly key: "loginCustomerId";
+    readonly label: "Manager customer ID";
+    readonly scope: "account";
+    readonly secret: false;
+    readonly optional: true;
+    readonly help: "Optional. The manager account's 10-digit customer ID without hyphens. Required when the OAuth user reaches a client through that manager; omit it for direct access.";
+}];
+/**
+ * The OAuth2 exchange Google Ads requires — DECLARED here, performed by the
+ * host.
+ *
+ * A consent screen needs a browser, a redirect URI and somewhere to persist
+ * the result, and all three belong to the host; a package that ran the dance
+ * itself would have to own a web server. So this says precisely enough for a
+ * host to do it.
+ *
+ * The access token lasts 3600 seconds. A host that never refreshes will work
+ * all afternoon and be broken by morning, which is why the lifetime is stated
+ * rather than left to be discovered.
+ *
+ * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may
+ * safely be retried and may run concurrently. That is stated rather than
+ * assumed because the opposite — a provider that spends the token and revokes
+ * the grant on a replay — looks identical until it happens.
+ */
+declare const GOOGLE_ADS_OAUTH: {
+    readonly flow: "authorization_code";
+    readonly authorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth";
+    readonly tokenUrl: "https://oauth2.googleapis.com/token";
+    readonly scopes: readonly ["https://www.googleapis.com/auth/adwords"];
+    readonly accessTokenCredential: "accessToken";
+    readonly refreshTokenCredential: "refreshToken";
+    readonly refreshTokenRotates: false;
+    readonly accessTokenTtlSeconds: 3600;
+};
+/** Build a Google Ads node's connector metadata from the operation it performs. */
+declare function googleAdsMeta(role: ConnectorMeta["role"], operation: string, docs: string): ConnectorMeta;
+
+declare const GOOGLE_ADS_CUSTOMER_LIST_KIND = "@particle-academy/google_ads_customer_list";
+declare const GOOGLE_ADS_CUSTOMER_LIST_OPERATION = "customer_list_accessible";
+declare const GOOGLE_ADS_CUSTOMER_LIST_META: _particle_academy_fancy_flow_connectors.ConnectorMeta;
+/**
+ * What this node emits — the "ingredients" a downstream node can reference.
+ *
+ * fancy-flow reads `outputShape` off the kind and offers it in the variable
+ * picker, so declaring it is the whole of the work: an author configuring the
+ * next node picks `{{ $json.data.id }}` off a list instead of typing a path
+ * and hoping.
+ */
+declare const GOOGLE_ADS_CUSTOMER_LIST_OUTPUT: OutputField[];
+declare const googleAdsCustomerListKind: NodeKindDefinition;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/manifest.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/manifest.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- google_ads
+ */
+/**
+ * Google Ads's node kinds for fancy-flow.
+ *
+ * Install this on every host. The TypeScript executors live in the js
+ * package's `./flow` subpath; PHP and Python hosts run their own and need only
+ * this.
+ */
+
+/** Every Google Ads kind, for a host that registers the lot. */
+declare const GOOGLE_ADS_KINDS: NodeKindDefinition[];
+
+export { CONNECTOR_API_VERSION, GOOGLE_ADS_CREDENTIALS, GOOGLE_ADS_CUSTOMER_LIST_KIND, GOOGLE_ADS_CUSTOMER_LIST_META, GOOGLE_ADS_CUSTOMER_LIST_OPERATION, GOOGLE_ADS_CUSTOMER_LIST_OUTPUT, GOOGLE_ADS_KINDS, GOOGLE_ADS_OAUTH, GOOGLE_ADS_SERVICE, googleAdsCustomerListKind, googleAdsMeta };

package/dist/index.js

@@ -0,0 +1,104 @@
+import { defineConnectorKind, summarize } from '@particle-academy/fancy-flow/connectors';
+
+// src/service.ts
+var CONNECTOR_API_VERSION = 1;
+var GOOGLE_ADS_SERVICE = {
+  service: "google_ads",
+  serviceTitle: "Google Ads",
+  domain: "marketing",
+  sandbox: "separate-account"
+};
+var GOOGLE_ADS_CREDENTIALS = [
+  {
+    "key": "clientId",
+    "label": "OAuth client ID",
+    "scope": "provider",
+    "secret": false,
+    "help": "The Google Cloud OAuth client shared by the installation."
+  },
+  {
+    "key": "clientSecret",
+    "label": "OAuth client secret",
+    "scope": "provider",
+    "secret": true,
+    "help": "The matching Google Cloud OAuth client secret."
+  },
+  {
+    "key": "developerToken",
+    "label": "Developer token",
+    "scope": "provider",
+    "secret": true,
+    "help": "The 22-character Google Ads API developer token from the manager account's API Center. Google says to treat it like a password; one token identifies the installed application."
+  },
+  {
+    "key": "accessToken",
+    "label": "Access token",
+    "scope": "account",
+    "secret": true,
+    "help": "The connected Google user's one-hour OAuth access token."
+  },
+  {
+    "key": "refreshToken",
+    "label": "Refresh token",
+    "scope": "account",
+    "secret": true,
+    "help": "The reusable offline token used to replace expired access tokens."
+  },
+  {
+    "key": "loginCustomerId",
+    "label": "Manager customer ID",
+    "scope": "account",
+    "secret": false,
+    "optional": true,
+    "help": "Optional. The manager account's 10-digit customer ID without hyphens. Required when the OAuth user reaches a client through that manager; omit it for direct access."
+  }
+];
+var GOOGLE_ADS_OAUTH = {
+  "flow": "authorization_code",
+  "authorizeUrl": "https://accounts.google.com/o/oauth2/v2/auth",
+  "tokenUrl": "https://oauth2.googleapis.com/token",
+  "scopes": [
+    "https://www.googleapis.com/auth/adwords"
+  ],
+  "accessTokenCredential": "accessToken",
+  "refreshTokenCredential": "refreshToken",
+  "refreshTokenRotates": false,
+  "accessTokenTtlSeconds": 3600
+};
+function googleAdsMeta(role, operation, docs) {
+  return { ...GOOGLE_ADS_SERVICE, role, operation, docs };
+}
+var GOOGLE_ADS_CUSTOMER_LIST_KIND = "@particle-academy/google_ads_customer_list";
+var GOOGLE_ADS_CUSTOMER_LIST_OPERATION = "customer_list_accessible";
+var GOOGLE_ADS_CUSTOMER_LIST_META = googleAdsMeta("action", "list directly accessible customers", "https://developers.google.com/google-ads/api/rest/reference/rest/v25/customers/listAccessibleCustomers");
+var GOOGLE_ADS_CUSTOMER_LIST_OUTPUT = [
+  {
+    "path": "data.resourceNames",
+    "type": "array",
+    "description": "Customer resource names in customers/{customer_id} form that the OAuth identity can access directly."
+  }
+];
+var googleAdsCustomerListKind = defineConnectorKind(GOOGLE_ADS_CUSTOMER_LIST_META, {
+  name: GOOGLE_ADS_CUSTOMER_LIST_KIND,
+  aliases: ["google_ads_customer_list"],
+  label: "Accessible Google Ads customers",
+  description: "List Google Ads customer resource names directly accessible to the authenticated user. Manager-linked client accounts are not included; query the account hierarchy after choosing a directly accessible manager.",
+  inputs: [{ id: "in" }],
+  outputs: [{ id: "out" }],
+  sideEffects: "none",
+  outputShape: GOOGLE_ADS_CUSTOMER_LIST_OUTPUT,
+  configSchema: [],
+  defaultConfig: {
+    "mode": "auto"
+  },
+  renderBody: ({ config }) => summarize(GOOGLE_ADS_CUSTOMER_LIST_META, config, "list directly accessible customers")
+});
+
+// src/index.ts
+var GOOGLE_ADS_KINDS = [
+  googleAdsCustomerListKind
+];
+
+export { CONNECTOR_API_VERSION, GOOGLE_ADS_CREDENTIALS, GOOGLE_ADS_CUSTOMER_LIST_KIND, GOOGLE_ADS_CUSTOMER_LIST_META, GOOGLE_ADS_CUSTOMER_LIST_OPERATION, GOOGLE_ADS_CUSTOMER_LIST_OUTPUT, GOOGLE_ADS_KINDS, GOOGLE_ADS_OAUTH, GOOGLE_ADS_SERVICE, googleAdsCustomerListKind, googleAdsMeta };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/service.ts","../src/kinds/customer-list-accessible.ts","../src/index.ts"],"names":[],"mappings":";;;AAmCO,IAAM,qBAAA,GAAwB;AAG9B,IAAM,kBAAA,GAAqB;AAAA,EAChC,OAAA,EAAS,YAAA;AAAA,EACT,YAAA,EAAc,YAAA;AAAA,EACd,MAAA,EAAQ,WAAA;AAAA,EACR,OAAA,EAAS;AACX;AA+BO,IAAM,sBAAA,GAAyB;AAAA,EACpC;AAAA,IACE,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,gBAAA;AAAA,IACP,OAAA,EAAS,iBAAA;AAAA,IACT,OAAA,EAAS,UAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,cAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,IAAA;AAAA,IACV,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,KAAA,EAAO,iBAAA;AAAA,IACP,OAAA,EAAS,qBAAA;AAAA,IACT,OAAA,EAAS,SAAA;AAAA,IACT,QAAA,EAAU,KAAA;AAAA,IACV,UAAA,EAAY,IAAA;AAAA,IACZ,MAAA,EAAQ;AAAA;AAEZ;AAoBO,IAAM,gBAAA,GAAmB;AAAA,EAC9B,MAAA,EAAQ,oBAAA;AAAA,EACR,cAAA,EAAgB,8CAAA;AAAA,EAChB,UAAA,EAAY,qCAAA;AAAA,EACZ,QAAA,EAAU;AAAA,IACR;AAAA,GACF;AAAA,EACA,uBAAA,EAAyB,aAAA;AAAA,EACzB,wBAAA,EAA0B,cAAA;AAAA,EAC1B,qBAAA,EAAuB,KAAA;AAAA,EACvB,uBAAA,EAAyB;AAC3B;AAGO,SAAS,aAAA,CACd,IAAA,EACA,SAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,EAAE,GAAG,kBAAA,EAAoB,IAAA,EAAM,WAAW,IAAA,EAAK;AACxD;ACtIO,IAAM,6BAAA,GAAgC;AACtC,IAAM,kCAAA,GAAqC;AAE3C,IAAM,6BAAA,GAAgC,aAAA,CAAc,QAAA,EAAU,oCAAA,EAAsC,wGAAwG;AAU5M,IAAM,+BAAA,GAAiD;AAAA,EAC5D;AAAA,IACE,MAAA,EAAQ,oBAAA;AAAA,IACR,MAAA,EAAQ,OAAA;AAAA,IACR,aAAA,EAAe;AAAA;AAEnB;AAEO,IAAM,yBAAA,GAAgD,oBAAoB,6BAAA,EAA+B;AAAA,EAC9G,IAAA,EAAM,6BAAA;AAAA,EACN,OAAA,EAAS,CAAC,0BAA0B,CAAA;AAAA,EACpC,KAAA,EAAO,iCAAA;AAAA,EACP,WAAA,EAAa,mNAAA;AAAA,EACb,MAAA,EAAQ,CAAC,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACrB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,OAAO,CAAA;AAAA,EACvB,WAAA,EAAa,MAAA;AAAA,EACb,WAAA,EAAa,+BAAA;AAAA,EACb,cAAc,EAAC;AAAA,EACf,aAAA,EAAe;AAAA,IACb,MAAA,EAAQ;AAAA,GACV;AAAA,EACA,UAAA,EAAY,CAAC,EAAE,MAAA,OACb,SAAA,CAAU,6BAAA,EAA+B,QAAmC,oCAAoC;AACpH,CAAC;;;AClCM,IAAM,gBAAA,GAAyC;AAAA,EACpD;AACF","file":"index.js","sourcesContent":["/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_ads\n */\n\n/**\n * Google Ads's identity on the authoring surface, shared by every Google Ads\n * node.\n *\n * This file must import nothing from the js package: a PHP or Python project\n * installs the ui package and never that one, and the import would be a\n * dangling module the moment it did.\n *\n * ## The sandbox trap\n *\n * Use a dedicated Google Ads test manager and test client account. Test and\n * production hierarchies cannot interact; test ads never serve or incur cost,\n * but some features such as billing, conversion uploads and serving reports\n * cannot be exercised there.\n */\n\nimport type { ConnectorDomain, ConnectorMeta } from \"@particle-academy/fancy-flow/connectors\";\n\n/**\n * The connector API version this package was GENERATED against.\n *\n * A literal, never imported — an imported constant lets an upgrade rewrite the\n * very claim it exists to detect.\n */\nexport const CONNECTOR_API_VERSION = 1;\n\n/** The parts of a connector's identity that belong to the SERVICE, not the node. */\nexport const GOOGLE_ADS_SERVICE = {\n  service: \"google_ads\",\n  serviceTitle: \"Google Ads\",\n  domain: \"marketing\",\n  sandbox: \"separate-account\",\n} as const satisfies Pick<ConnectorMeta, \"service\" | \"serviceTitle\" | \"domain\" | \"sandbox\">;\n\n/**\n * Every connector domain weaver knows, pinned against fancy-flow's union.\n *\n * A closed set copied into three codebases stays correct only while something\n * MAKES it: this line fails to compile the moment weaver carries a value\n * fancy-flow does not, including the values no provider uses yet.\n */\nconst WEAVER_DOMAINS: readonly ConnectorDomain[] = [\n  \"payments\",\n  \"commerce\",\n  \"messaging\",\n  \"email\",\n  \"crm\",\n  \"support\",\n  \"storage\",\n  \"calendar\",\n  \"productivity\",\n  \"database\",\n  \"devtools\",\n  \"analytics\",\n  \"marketing\",\n  \"ai\",\n  \"forms\",\n  \"hr\",\n  \"geo\"\n];\nvoid WEAVER_DOMAINS;\n\n/** The credentials a Google Ads connection holds. */\nexport const GOOGLE_ADS_CREDENTIALS = [\n  {\n    \"key\": \"clientId\",\n    \"label\": \"OAuth client ID\",\n    \"scope\": \"provider\",\n    \"secret\": false,\n    \"help\": \"The Google Cloud OAuth client shared by the installation.\"\n  },\n  {\n    \"key\": \"clientSecret\",\n    \"label\": \"OAuth client secret\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The matching Google Cloud OAuth client secret.\"\n  },\n  {\n    \"key\": \"developerToken\",\n    \"label\": \"Developer token\",\n    \"scope\": \"provider\",\n    \"secret\": true,\n    \"help\": \"The 22-character Google Ads API developer token from the manager account's API Center. Google says to treat it like a password; one token identifies the installed application.\"\n  },\n  {\n    \"key\": \"accessToken\",\n    \"label\": \"Access token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"The connected Google user's one-hour OAuth access token.\"\n  },\n  {\n    \"key\": \"refreshToken\",\n    \"label\": \"Refresh token\",\n    \"scope\": \"account\",\n    \"secret\": true,\n    \"help\": \"The reusable offline token used to replace expired access tokens.\"\n  },\n  {\n    \"key\": \"loginCustomerId\",\n    \"label\": \"Manager customer ID\",\n    \"scope\": \"account\",\n    \"secret\": false,\n    \"optional\": true,\n    \"help\": \"Optional. The manager account's 10-digit customer ID without hyphens. Required when the OAuth user reaches a client through that manager; omit it for direct access.\"\n  }\n] as const;\n\n/**\n * The OAuth2 exchange Google Ads requires — DECLARED here, performed by the\n * host.\n *\n * A consent screen needs a browser, a redirect URI and somewhere to persist\n * the result, and all three belong to the host; a package that ran the dance\n * itself would have to own a web server. So this says precisely enough for a\n * host to do it.\n *\n * The access token lasts 3600 seconds. A host that never refreshes will work\n * all afternoon and be broken by morning, which is why the lifetime is stated\n * rather than left to be discovered.\n *\n * Its refresh tokens do NOT rotate: the same one is reusable, so a refresh may\n * safely be retried and may run concurrently. That is stated rather than\n * assumed because the opposite — a provider that spends the token and revokes\n * the grant on a replay — looks identical until it happens.\n */\nexport const GOOGLE_ADS_OAUTH = {\n  \"flow\": \"authorization_code\",\n  \"authorizeUrl\": \"https://accounts.google.com/o/oauth2/v2/auth\",\n  \"tokenUrl\": \"https://oauth2.googleapis.com/token\",\n  \"scopes\": [\n    \"https://www.googleapis.com/auth/adwords\"\n  ],\n  \"accessTokenCredential\": \"accessToken\",\n  \"refreshTokenCredential\": \"refreshToken\",\n  \"refreshTokenRotates\": false,\n  \"accessTokenTtlSeconds\": 3600\n} as const;\n\n/** Build a Google Ads node's connector metadata from the operation it performs. */\nexport function googleAdsMeta(\n  role: ConnectorMeta[\"role\"],\n  operation: string,\n  docs: string,\n): ConnectorMeta {\n  return { ...GOOGLE_ADS_SERVICE, role, operation, docs };\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/customer-list-accessible.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/customer-list-accessible.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_ads\n */\n\n/**\n * Accessible Google Ads customers — List Google Ads customer resource names\n * directly accessible to the authenticated user. Manager-linked client\n * accounts are not included; query the account hierarchy after choosing a\n * directly accessible manager.\n *\n * https://developers.google.com/google-ads/api/rest/reference/rest/v25/customers/listAccessibleCustomers\n */\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { defineConnectorKind, summarize, type OutputField } from \"@particle-academy/fancy-flow/connectors\";\nimport { googleAdsMeta } from \"../service.js\";\n\nexport const GOOGLE_ADS_CUSTOMER_LIST_KIND = \"@particle-academy/google_ads_customer_list\";\nexport const GOOGLE_ADS_CUSTOMER_LIST_OPERATION = \"customer_list_accessible\";\n\nexport const GOOGLE_ADS_CUSTOMER_LIST_META = googleAdsMeta(\"action\", \"list directly accessible customers\", \"https://developers.google.com/google-ads/api/rest/reference/rest/v25/customers/listAccessibleCustomers\");\n\n/**\n * What this node emits — the \"ingredients\" a downstream node can reference.\n *\n * fancy-flow reads `outputShape` off the kind and offers it in the variable\n * picker, so declaring it is the whole of the work: an author configuring the\n * next node picks `{{ $json.data.id }}` off a list instead of typing a path\n * and hoping.\n */\nexport const GOOGLE_ADS_CUSTOMER_LIST_OUTPUT: OutputField[] = [\n  {\n    \"path\": \"data.resourceNames\",\n    \"type\": \"array\",\n    \"description\": \"Customer resource names in customers/{customer_id} form that the OAuth identity can access directly.\"\n  }\n];\n\nexport const googleAdsCustomerListKind: NodeKindDefinition = defineConnectorKind(GOOGLE_ADS_CUSTOMER_LIST_META, {\n  name: GOOGLE_ADS_CUSTOMER_LIST_KIND,\n  aliases: [\"google_ads_customer_list\"],\n  label: \"Accessible Google Ads customers\",\n  description: \"List Google Ads customer resource names directly accessible to the authenticated user. Manager-linked client accounts are not included; query the account hierarchy after choosing a directly accessible manager.\",\n  inputs: [{ id: \"in\" }],\n  outputs: [{ id: \"out\" }],\n  sideEffects: \"none\",\n  outputShape: GOOGLE_ADS_CUSTOMER_LIST_OUTPUT,\n  configSchema: [],\n  defaultConfig: {\n    \"mode\": \"auto\"\n  },\n  renderBody: ({ config }) =>\n    summarize(GOOGLE_ADS_CUSTOMER_LIST_META, config as Record<string, unknown>, \"list directly accessible customers\"),\n});\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- google_ads\n */\n\n/**\n * Google Ads's node kinds for fancy-flow.\n *\n * Install this on every host. The TypeScript executors live in the js\n * package's `./flow` subpath; PHP and Python hosts run their own and need only\n * this.\n */\n\nexport * from \"./service.js\";\nexport * from \"./kinds/customer-list-accessible.js\";\n\nimport type { NodeKindDefinition } from \"@particle-academy/fancy-flow/engine\";\nimport { googleAdsCustomerListKind } from \"./kinds/customer-list-accessible.js\";\n\n/** Every Google Ads kind, for a host that registers the lot. */\nexport const GOOGLE_ADS_KINDS: NodeKindDefinition[] = [\n  googleAdsCustomerListKind,\n];\n"]}

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "@particle-academy/google-ads-ui",
+  "version": "0.1.0",
+  "description": "Google Ads's authoring surface for fancy-flow — the node kinds, their config schemas and their declared output shapes. React on every host; carries no executor.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Fancy-Friends/google-ads.git"
+  },
+  "homepage": "https://github.com/Fancy-Friends/google-ads#readme",
+  "bugs": "https://github.com/Fancy-Friends/google-ads/issues",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "lint": "tsc --noEmit",
+    "test": "node --import tsx --test tests/*.test.ts",
+    "prepublishOnly": "tsup"
+  },
+  "dependencies": {},
+  "peerDependencies": {
+    "@particle-academy/fancy-flow": ">=0.48.0 <2.0"
+  },
+  "devDependencies": {
+    "@particle-academy/fancy-flow": ">=0.48.0 <2.0",
+    "@types/node": "^26.2.0",
+    "tsup": "^8.5.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.8.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "google_ads",
+    "marketing",
+    "connector",
+    "fancy-flow",
+    "fancy-ui",
+    "particle-academy"
+  ],
+  "license": "MIT",
+  "sideEffects": false,
+  "engines": {
+    "node": ">=22"
+  }
+}