addashboard-cli 0.2.4

package/README.md

@@ -0,0 +1,48 @@
+# addashboard-cli
+
+広告ダッシュボード操作用の CLI。詳細な使い方・運用フローは社内マニュアル参照。
+
+## インストール
+
+Node.js 18+ が必要。
+
+```bash
+# 都度実行 (推奨)
+npx -y addashboard-cli@latest --help
+
+# あるいはグローバルインストール
+npm install -g addashboard-cli
+webgram --help
+```
+
+## ログイン
+
+```bash
+webgram auth login    # ブラウザで認証
+webgram auth whoami   # 状態確認
+webgram auth logout
+```
+
+## 主なコマンド
+
+```bash
+webgram list --platform <p> --resource <accounts|campaigns|resources> [--account-id <id>]
+webgram submit --platform <p> --json-file <path>                        # dry-run 既定
+webgram submit --platform <p> --json-file <path> --no-dry-run --yes    # 実入稿
+```
+
+`<p>` = 対応媒体 (`yda` / `meta` / `google` / `smartnews` / `bytedance`)。
+
+入稿ボディ JSON の雛形と必須フィールドは [`fixtures/README.md`](./fixtures/README.md)。
+
+## Skill として使う
+
+Claude Code / Codex CLI 用の `ad-ops` skill (広告運用スキル) を同梱。配置手順は [`skills/ad-ops/README.md`](./skills/ad-ops/README.md)。
+
+## 開発
+
+```bash
+npm install
+npm run build
+npm test
+```

package/dist/commands/ads.js

@@ -0,0 +1,139 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ALLOWED_RESOURCES = exports.ALLOWED_PLATFORMS = void 0;
+exports.resolvePath = resolvePath;
+exports.runList = runList;
+const apiClient_1 = require("../lib/apiClient");
+exports.ALLOWED_PLATFORMS = ['meta', 'yda', 'google', 'smartnews', 'bytedance'];
+exports.ALLOWED_RESOURCES = ['accounts', 'campaigns', 'resources'];
+/**
+ * v5 §5.2: platform × resource → backend エンドポイント解決テーブル。
+ *
+ * 対応: meta (T-01), yda (T-02), google (T-03), smartnews (T-04), bytedance (T-05)。
+ *
+ * yda + campaigns に --campaign-id を指定した場合は /yda/campaign-import に振り分ける
+ * (Codex PR #41 #2: --campaign-id flag が無視されていた問題の解消)。
+ * SmartNews は creative リソースが ad に埋込まれる仕様のため、resources は未対応。
+ * bytedance は T-05 で accounts / campaigns / resources GET を追加 (accounts は
+ * ApiConnection.selectedAccounts 由来、campaigns / resources は TikTok Marketing API v1.3 実叩き)。
+ */
+function resolvePath(input) {
+    const { platform, resource, accountId, campaignId } = input;
+    if (!exports.ALLOWED_PLATFORMS.includes(platform)) {
+        throw new Error(`unknown platform: ${platform} (allowed: ${exports.ALLOWED_PLATFORMS.join(', ')})`);
+    }
+    if (!exports.ALLOWED_RESOURCES.includes(resource)) {
+        throw new Error(`unknown resource: ${resource} (allowed: ${exports.ALLOWED_RESOURCES.join(', ')})`);
+    }
+    if (platform === 'meta') {
+        if (resource === 'accounts')
+            return { path: '/api/submission/meta/accounts', query: {} };
+        if (resource === 'campaigns') {
+            if (!accountId)
+                throw new Error('--account-id が必要です (meta + campaigns)');
+            return { path: '/api/submission/meta/campaigns', query: { accountId } };
+        }
+        if (resource === 'resources') {
+            if (!accountId)
+                throw new Error('--account-id が必要です (meta + resources)');
+            return { path: '/api/submission/meta/resources', query: { accountId } };
+        }
+    }
+    if (platform === 'yda') {
+        if (resource === 'accounts')
+            return { path: '/api/submission/yda/accounts', query: {} };
+        if (resource === 'campaigns') {
+            if (!accountId)
+                throw new Error('--account-id が必要です (yda + campaigns)');
+            if (campaignId) {
+                return { path: '/api/submission/yda/campaign-import', query: { accountId, campaignId } };
+            }
+            return { path: '/api/submission/yda/campaigns', query: { accountId } };
+        }
+        if (resource === 'resources') {
+            if (!accountId)
+                throw new Error('--account-id が必要です (yda + resources)');
+            return { path: '/api/submission/yda/resources', query: { accountId } };
+        }
+    }
+    if (platform === 'google') {
+        if (resource === 'accounts')
+            return { path: '/api/submission/google/accounts', query: {} };
+        if (resource === 'campaigns') {
+            if (!accountId)
+                throw new Error('--account-id が必要です (google + campaigns)');
+            return { path: '/api/submission/google/campaigns', query: { accountId } };
+        }
+        if (resource === 'resources') {
+            if (!accountId)
+                throw new Error('--account-id が必要です (google + resources)');
+            return { path: '/api/submission/google/resources', query: { accountId } };
+        }
+    }
+    if (platform === 'smartnews') {
+        if (resource === 'accounts')
+            return { path: '/api/submission/smartnews/accounts', query: {} };
+        if (resource === 'campaigns') {
+            if (!accountId)
+                throw new Error('--account-id が必要です (smartnews + campaigns)');
+            return { path: '/api/submission/smartnews/campaigns', query: { accountId } };
+        }
+        if (resource === 'resources') {
+            throw new Error('smartnews + resources は未対応です (SmartNews v3 は creative を ad に埋込むため独立リソースなし)');
+        }
+    }
+    if (platform === 'bytedance') {
+        if (resource === 'accounts')
+            return { path: '/api/submission/bytedance/accounts', query: {} };
+        if (resource === 'campaigns') {
+            if (!accountId)
+                throw new Error('--account-id が必要です (bytedance + campaigns)');
+            return { path: '/api/submission/bytedance/campaigns', query: { accountId } };
+        }
+        if (resource === 'resources') {
+            if (!accountId)
+                throw new Error('--account-id が必要です (bytedance + resources)');
+            return { path: '/api/submission/bytedance/resources', query: { accountId } };
+        }
+    }
+    throw new Error(`unsupported: ${platform} + ${resource}`);
+}
+/**
+ * webgram list の本体動作。
+ * 副作用は HTTP GET のみ（標準出力には触らない＝CLI ラッパー側で整形）。
+ */
+async function runList(input) {
+    let resolved;
+    try {
+        resolved = resolvePath({
+            platform: input.platform,
+            resource: input.resource,
+            accountId: input.accountId,
+            campaignId: input.campaignId,
+        });
+    }
+    catch (e) {
+        return { ok: false, error: e.message };
+    }
+    let client;
+    try {
+        client = (input.clientFactory ?? apiClient_1.buildAuthedApiClient)(input.store);
+    }
+    catch (e) {
+        return { ok: false, error: e.message };
+    }
+    try {
+        const res = await client.get(resolved.path, { params: resolved.query });
+        return { ok: true, data: res.data };
+    }
+    catch (err) {
+        const status = err?.response?.status;
+        if (status === 401)
+            return { ok: false, error: 'unauthorized' };
+        const msg = err?.response?.data?.error
+            ?? err.message
+            ?? 'network_error';
+        return { ok: false, error: msg };
+    }
+}
+//# sourceMappingURL=ads.js.map

package/dist/commands/ads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ads.js","sourceRoot":"","sources":["../../src/commands/ads.ts"],"names":[],"mappings":";;;AA0BA,kCAgFC;AAsBD,0BA+BC;AA9JD,gDAAwD;AAM3C,QAAA,iBAAiB,GAAe,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AACpF,QAAA,iBAAiB,GAAe,CAAC,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AAOpF;;;;;;;;;;GAUG;AACH,SAAgB,WAAW,CAAC,KAK3B;IACC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAE5D,IAAI,CAAC,yBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,cAAc,yBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,yBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,cAAc,yBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,IAAI,QAAQ,KAAK,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,+BAA+B,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACzF,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACzE,OAAO,EAAE,IAAI,EAAE,gCAAgC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACzE,OAAO,EAAE,IAAI,EAAE,gCAAgC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,IAAI,QAAQ,KAAK,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,8BAA8B,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACxF,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACxE,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,EAAE,IAAI,EAAE,qCAAqC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC;YAC3F,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,+BAA+B,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;QACzE,CAAC;QACD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACxE,OAAO,EAAE,IAAI,EAAE,+BAA+B,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,QAAQ,KAAK,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,iCAAiC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC3F,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC3E,OAAO,EAAE,IAAI,EAAE,kCAAkC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;QAC5E,CAAC;QACD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC3E,OAAO,EAAE,IAAI,EAAE,kCAAkC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,IAAI,QAAQ,KAAK,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,oCAAoC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC9F,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC9E,OAAO,EAAE,IAAI,EAAE,qCAAqC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;QAC/E,CAAC;QACD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,IAAI,QAAQ,KAAK,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,oCAAoC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC9F,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC9E,OAAO,EAAE,IAAI,EAAE,qCAAqC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;QAC/E,CAAC;QACD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC9E,OAAO,EAAE,IAAI,EAAE,qCAAqC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,gBAAgB,QAAQ,MAAM,QAAQ,EAAE,CAAC,CAAC;AAC5D,CAAC;AAkBD;;;GAGG;AACI,KAAK,UAAU,OAAO,CAAC,KAAgB;IAC5C,IAAI,QAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,QAAQ,GAAG,WAAW,CAAC;YACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,gCAAoB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAI,GAA0C,EAAE,QAAQ,EAAE,MAAM,CAAC;QAC7E,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAChE,MAAM,GAAG,GAAI,GAAoD,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK;eAClF,GAAa,CAAC,OAAO;eACtB,eAAe,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACnC,CAAC;AACH,CAAC"}

package/dist/commands/auth.js

@@ -0,0 +1,75 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runLogin = runLogin;
+exports.runWhoami = runWhoami;
+exports.runLogout = runLogout;
+const axios_1 = __importDefault(require("axios"));
+/**
+ * webgram auth login のコア動作。
+ * 副作用は credentialStore.save のみ（標準出力には触らない＝CLI ラッパー側で整形）。
+ */
+async function runLogin(input) {
+    try {
+        const res = await axios_1.default.post(`${input.endpoint}/api/auth/cli/token`, { username: input.username, password: input.password }, { timeout: 15000, headers: { 'Content-Type': 'application/json' } });
+        const { access_token, refresh_token, expires_in } = res.data ?? {};
+        if (!access_token || !refresh_token) {
+            return { ok: false, error: 'invalid_response' };
+        }
+        const expiresAt = new Date(Date.now() + (expires_in ?? 3600) * 1000).toISOString();
+        const creds = {
+            endpoint: input.endpoint,
+            accessToken: access_token,
+            refreshToken: refresh_token,
+            expiresAt,
+        };
+        input.store.save(creds);
+        return { ok: true, email: input.username };
+    }
+    catch (err) {
+        const code = err?.response?.data?.error ?? 'network_error';
+        return { ok: false, error: code };
+    }
+}
+/**
+ * webgram auth whoami のコア動作。
+ * credentials.json から access_token を取り出して /api/auth/me を叩く。
+ */
+async function runWhoami(input) {
+    const creds = input.store.load();
+    if (!creds)
+        return { ok: false, error: 'not_logged_in' };
+    try {
+        const res = await axios_1.default.get(`${creds.endpoint}/api/auth/me`, {
+            timeout: 15000,
+            headers: { Authorization: `Bearer ${creds.accessToken}` },
+        });
+        return { ok: true, user: res.data };
+    }
+    catch (err) {
+        const status = err?.response?.status;
+        if (status === 401)
+            return { ok: false, error: 'unauthorized' };
+        return { ok: false, error: 'network_error' };
+    }
+}
+/**
+ * webgram auth logout のコア動作。
+ * サーバー側 revoke を best-effort で叩き、ローカルの credentials.json は確実に削除する。
+ */
+async function runLogout(input) {
+    const creds = input.store.load();
+    if (!creds)
+        return { ok: true }; // 未ログインでも idempotent
+    try {
+        await axios_1.default.post(`${creds.endpoint}/api/auth/cli/revoke`, { refresh_token: creds.refreshToken }, { timeout: 15000, headers: { 'Content-Type': 'application/json' } });
+    }
+    catch {
+        // revoke 失敗してもローカルは消す（ユーザー視点の logout は確定させる）
+    }
+    input.store.clear();
+    return { ok: true };
+}
+//# sourceMappingURL=auth.js.map

package/dist/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":";;;;;AAoBA,4BA2BC;AAgBD,8BAeC;AAcD,8BAeC;AA3GD,kDAA0B;AAgB1B;;;GAGG;AACI,KAAK,UAAU,QAAQ,CAAC,KAAiB;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,eAAK,CAAC,IAAI,CAC1B,GAAG,KAAK,CAAC,QAAQ,qBAAqB,EACtC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EACtD,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACpE,CAAC;QAEF,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACnE,IAAI,CAAC,YAAY,IAAI,CAAC,aAAa,EAAE,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QAClD,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACnF,MAAM,KAAK,GAAgB;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,aAAa;YAC3B,SAAS;SACV,CAAC;QACF,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GACP,GAAoD,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,eAAe,CAAC;QAClG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAYD;;;GAGG;AACI,KAAK,UAAU,SAAS,CAAC,KAAkB;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IAEzD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,cAAc,EAAE;YAC3D,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE,EAAE;SAC1D,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAI,GAA0C,EAAE,QAAQ,EAAE,MAAM,CAAC;QAC7E,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IAC/C,CAAC;AACH,CAAC;AAUD;;;GAGG;AACI,KAAK,UAAU,SAAS,CAAC,KAAkB;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,qBAAqB;IAEtD,IAAI,CAAC;QACH,MAAM,eAAK,CAAC,IAAI,CACd,GAAG,KAAK,CAAC,QAAQ,sBAAsB,EACvC,EAAE,aAAa,EAAE,KAAK,CAAC,YAAY,EAAE,EACrC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACpE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACpB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/commands/authDevice.js

@@ -0,0 +1,110 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDeviceLogin = runDeviceLogin;
+const axios_1 = __importDefault(require("axios"));
+const DEFAULT_INTERVAL_SEC = 5;
+const DEFAULT_EXPIRES_SEC = 1800; // ~30 分
+function defaultSleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+/**
+ * 非対話環境（Claude Code 等）向けの Google device flow ログイン。
+ *
+ * サーバー（/api/auth/cli/google/device/start）で device code を取得し、
+ * ユーザーに verification_url と user_code を提示 → ユーザーがブラウザで許可 →
+ * サーバー（/device/poll）が client_secret を使って token 交換を代行し、
+ * 完了すると access/refresh を得て保存する。CLI は client_secret を一切扱わない。
+ * device_code は Google のワンタイム値なのでメモリ保持のみ（保存しない）。
+ */
+async function runDeviceLogin(input) {
+    const sleep = input.sleep ?? defaultSleep;
+    const log = input.log ?? ((m) => console.log(m)); // eslint-disable-line no-console
+    const now = input.now ?? (() => Date.now());
+    // 1. device code 取得（サーバー代行）
+    let start;
+    try {
+        const res = await axios_1.default.post(`${input.endpoint}/api/auth/cli/google/device/start`, {}, { timeout: 15000, headers: { 'Content-Type': 'application/json' } });
+        start = res.data ?? {};
+    }
+    catch (err) {
+        const status = err?.response?.status;
+        if (status === 404) {
+            return {
+                ok: false,
+                error: 'device_not_configured: サーバー側で device flow が無効（sso_disabled）です。' +
+                    '管理者に GOOGLE_SSO_DEVICE_CLIENT_ID / GOOGLE_SSO_DEVICE_CLIENT_SECRET の設定を依頼してください',
+            };
+        }
+        return { ok: false, error: 'device_start_failed' };
+    }
+    const { device_code, user_code, verification_url } = start;
+    if (!device_code || !user_code || !verification_url) {
+        return { ok: false, error: 'device_start_failed' };
+    }
+    let intervalSec = typeof start.interval === 'number' && start.interval > 0 ? start.interval : DEFAULT_INTERVAL_SEC;
+    const expiresSec = typeof start.expires_in === 'number' && start.expires_in > 0 ? start.expires_in : DEFAULT_EXPIRES_SEC;
+    const deadline = now() + expiresSec * 1000;
+    // 2. ユーザーに案内（user_code を目立たせる）
+    log('');
+    log('────────────────────────────────────────────');
+    log('  Google でログインしてください（ブラウザ操作が必要です）');
+    log('');
+    log(`  1. ブラウザで次の URL を開く:  ${verification_url}`);
+    log(`  2. 次のコードを入力して許可:`);
+    log('');
+    log(`        ┌─────────────────┐`);
+    log(`        │   ${user_code}   │`);
+    log(`        └─────────────────┘`);
+    log('');
+    log('  許可が完了すると自動でログインが続行されます…');
+    log('────────────────────────────────────────────');
+    log('');
+    // 3. poll ループ
+    for (;;) {
+        if (now() >= deadline) {
+            return { ok: false, error: 'timeout' };
+        }
+        await sleep(intervalSec * 1000);
+        let poll;
+        try {
+            const res = await axios_1.default.post(`${input.endpoint}/api/auth/cli/google/device/poll`, { device_code }, { timeout: 15000, headers: { 'Content-Type': 'application/json' } });
+            poll = res.data ?? {};
+        }
+        catch {
+            // poll のネットワークエラーはリトライ扱い（サーバーは正常系を 200 で返す設計）
+            continue;
+        }
+        switch (poll.status) {
+            case 'pending':
+                continue;
+            case 'slow_down':
+                intervalSec += 5;
+                continue;
+            case 'denied':
+                return { ok: false, error: 'access_denied' };
+            case 'expired':
+                return { ok: false, error: 'expired' };
+            case 'complete': {
+                if (!poll.access_token || !poll.refresh_token) {
+                    return { ok: false, error: 'invalid_response' };
+                }
+                const expiresAt = new Date(now() + (poll.expires_in ?? 3600) * 1000).toISOString();
+                const creds = {
+                    endpoint: input.endpoint,
+                    accessToken: poll.access_token,
+                    refreshToken: poll.refresh_token,
+                    expiresAt,
+                };
+                input.store.save(creds);
+                return { ok: true };
+            }
+            case 'error':
+            default:
+                return { ok: false, error: poll.reason ?? 'poll_failed' };
+        }
+    }
+}
+//# sourceMappingURL=authDevice.js.map

package/dist/commands/authDevice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authDevice.js","sourceRoot":"","sources":["../../src/commands/authDevice.ts"],"names":[],"mappings":";;;;;AA0CA,wCA4GC;AAtJD,kDAA0B;AA0B1B,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,mBAAmB,GAAG,IAAI,CAAC,CAAC,QAAQ;AAE1C,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,cAAc,CAAC,KAAuB;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,YAAY,CAAC;IAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iCAAiC;IAC3F,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAE5C,4BAA4B;IAC5B,IAAI,KAMH,CAAC;IACF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,eAAK,CAAC,IAAI,CAC1B,GAAG,KAAK,CAAC,QAAQ,mCAAmC,EACpD,EAAE,EACF,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACpE,CAAC;QACF,KAAK,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAI,GAA0C,EAAE,QAAQ,EAAE,MAAM,CAAC;QAC7E,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EACH,gEAAgE;oBAChE,iFAAiF;aACpF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC;IAC3D,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,WAAW,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACnH,MAAM,UAAU,GAAG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACzH,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC;IAE3C,+BAA+B;IAC/B,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,8CAA8C,CAAC,CAAC;IACpD,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACzC,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,0BAA0B,gBAAgB,EAAE,CAAC,CAAC;IAClD,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC1B,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,6BAA6B,CAAC,CAAC;IACnC,GAAG,CAAC,eAAe,SAAS,MAAM,CAAC,CAAC;IACpC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IACnC,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACjC,GAAG,CAAC,8CAA8C,CAAC,CAAC;IACpD,GAAG,CAAC,EAAE,CAAC,CAAC;IAER,cAAc;IACd,SAAS,CAAC;QACR,IAAI,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;QAEhC,IAAI,IAA8G,CAAC;QACnH,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,eAAK,CAAC,IAAI,CAC1B,GAAG,KAAK,CAAC,QAAQ,kCAAkC,EACnD,EAAE,WAAW,EAAE,EACf,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACpE,CAAC;YACF,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;YAC9C,SAAS;QACX,CAAC;QAED,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,SAAS;gBACZ,SAAS;YACX,KAAK,WAAW;gBACd,WAAW,IAAI,CAAC,CAAC;gBACjB,SAAS;YACX,KAAK,QAAQ;gBACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;YAC/C,KAAK,SAAS;gBACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YACzC,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;oBAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;gBAClD,CAAC;gBACD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBACnF,MAAM,KAAK,GAAgB;oBACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,WAAW,EAAE,IAAI,CAAC,YAAY;oBAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;oBAChC,SAAS;iBACV,CAAC;gBACF,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YACD,KAAK,OAAO,CAAC;YACb;gBACE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9D,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/authGoogle.js

@@ -0,0 +1,196 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runGoogleLogin = runGoogleLogin;
+const http_1 = __importDefault(require("http"));
+const crypto_1 = __importDefault(require("crypto"));
+const child_process_1 = require("child_process");
+const axios_1 = __importDefault(require("axios"));
+const AUTH_ENDPOINT = 'https://accounts.google.com/o/oauth2/v2/auth';
+const ALLOWED_HD = process.env.WEBGRAM_GOOGLE_HD || 'webgram.jp';
+const CALLBACK_TIMEOUT_MS = 5 * 60 * 1000; // 5 分
+const RESULT_HTML = '<!doctype html><html lang="ja"><head><meta charset="utf-8">' +
+    '<title>webgram CLI</title></head><body style="font-family:sans-serif;padding:2rem">' +
+    '<h2>ログインが完了しました。</h2><p>ターミナルに戻ってください。</p></body></html>';
+/**
+ * OS のデフォルトブラウザで URL を開く。失敗しても throw せず false を返す
+ * （呼び出し側で URL を手動オープン誘導する）。
+ */
+function openBrowser(url) {
+    try {
+        let cmd;
+        let args;
+        if (process.platform === 'darwin') {
+            cmd = 'open';
+            args = [url];
+        }
+        else if (process.platform === 'win32') {
+            // start は cmd の組み込みコマンド。空タイトル引数 "" を挟むと URL の & 等で崩れにくい
+            cmd = 'cmd';
+            args = ['/c', 'start', '', url];
+        }
+        else {
+            cmd = 'xdg-open';
+            args = [url];
+        }
+        const child = (0, child_process_1.spawn)(cmd, args, { stdio: 'ignore', detached: true });
+        child.on('error', () => {
+            /* spawn 失敗は無視（戻り値では拾えないので呼び出し側は URL 表示も併用する） */
+        });
+        child.unref();
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * webgram auth login（Google loopback flow）のコア動作。
+ *
+ * ローカル 127.0.0.1 の一時ポートで受け口を立て、ブラウザで Google 認可 →
+ * 認可コード + PKCE code_verifier + redirect_uri を ad-dashboard の
+ * POST /api/auth/cli/google に渡す。Google との code→token 交換は
+ * サーバーが client_secret を使って実行する（CLI には secret を一切持たせない）。
+ * サーバー発行の access/refresh を得て保存する。
+ *
+ * クライアント ID は公開情報のため CLI に焼き込まず、
+ * input.clientId > env WEBGRAM_GOOGLE_CLIENT_ID > サーバー取得（/google/config）の順で解決する。
+ */
+async function runGoogleLogin(input) {
+    let clientId = input.clientId || process.env.WEBGRAM_GOOGLE_CLIENT_ID;
+    // どちらも無ければサーバーからクライアント ID を取得（単一情報源＝サーバー env）
+    if (!clientId) {
+        try {
+            const cfgRes = await axios_1.default.get(`${input.endpoint}/api/auth/cli/google/config`, {
+                timeout: 15000,
+            });
+            clientId = cfgRes.data?.clientId;
+        }
+        catch {
+            /* 取得失敗（404 sso_disabled 等）は下の未設定エラーで扱う */
+        }
+    }
+    if (!clientId) {
+        return {
+            ok: false,
+            error: 'google_client_not_configured: Google クライアント ID が取得できませんでした。' +
+                'サーバー側で SSO が無効（sso_disabled）の可能性があります。' +
+                '管理者に GOOGLE_SSO_CLI_CLIENT_ID / GOOGLE_SSO_CLI_CLIENT_SECRET の設定を依頼してください',
+        };
+    }
+    // PKCE + state
+    const codeVerifier = crypto_1.default.randomBytes(32).toString('base64url');
+    const codeChallenge = crypto_1.default.createHash('sha256').update(codeVerifier).digest('base64url');
+    const state = crypto_1.default.randomBytes(16).toString('base64url');
+    // 127.0.0.1 の OS 割当ポートで受け口を立てる
+    const server = http_1.default.createServer();
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => resolve());
+    });
+    const port = server.address().port;
+    const redirectUri = `http://127.0.0.1:${port}/callback`;
+    const params = new URLSearchParams({
+        client_id: clientId,
+        redirect_uri: redirectUri,
+        response_type: 'code',
+        scope: 'openid email profile',
+        state,
+        code_challenge: codeChallenge,
+        code_challenge_method: 'S256',
+        access_type: 'online',
+        prompt: 'select_account',
+        hd: ALLOWED_HD,
+    });
+    const authUrl = `${AUTH_ENDPOINT}?${params.toString()}`;
+    // 認可コードを待つ（タイムアウト付き）。secret を含まないので URL 表示は安全。
+    const codePromise = new Promise((resolve) => {
+        let settled = false;
+        const finish = (r) => {
+            if (settled)
+                return;
+            settled = true;
+            resolve(r);
+        };
+        const timer = setTimeout(() => {
+            finish({ error: 'timeout: 5 分以内に認可が完了しませんでした' });
+        }, CALLBACK_TIMEOUT_MS);
+        timer.unref?.();
+        server.on('request', (req, res) => {
+            const url = new URL(req.url || '/', `http://127.0.0.1:${port}`);
+            if (url.pathname !== '/callback') {
+                res.writeHead(404);
+                res.end();
+                return;
+            }
+            const returnedState = url.searchParams.get('state');
+            const googleError = url.searchParams.get('error');
+            const code = url.searchParams.get('code');
+            // state 照合（不一致は即エラー）
+            if (!returnedState || returnedState !== state) {
+                res.writeHead(400, { 'Content-Type': 'text/plain; charset=utf-8' });
+                res.end('state mismatch');
+                clearTimeout(timer);
+                finish({ error: 'state_mismatch' });
+                return;
+            }
+            if (googleError) {
+                res.writeHead(400, { 'Content-Type': 'text/plain; charset=utf-8' });
+                res.end('authorization denied');
+                clearTimeout(timer);
+                finish({ error: `google_error: ${googleError}` });
+                return;
+            }
+            if (!code) {
+                res.writeHead(400, { 'Content-Type': 'text/plain; charset=utf-8' });
+                res.end('missing code');
+                clearTimeout(timer);
+                finish({ error: 'missing_code' });
+                return;
+            }
+            res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+            res.end(RESULT_HTML);
+            clearTimeout(timer);
+            finish({ code });
+        });
+    });
+    // ブラウザ起動。失敗時は URL を返して手動オープン誘導。
+    const opened = openBrowser(authUrl);
+    let outcome;
+    try {
+        outcome = await codePromise;
+    }
+    finally {
+        server.close();
+    }
+    if ('error' in outcome) {
+        return { ok: false, error: outcome.error, authUrl: opened ? undefined : authUrl };
+    }
+    // 認可コード + PKCE verifier + redirect_uri を ad-dashboard に渡す。
+    // Google との code→token 交換はサーバーが client_secret を使って実行する。
+    try {
+        const res = await axios_1.default.post(`${input.endpoint}/api/auth/cli/google`, { code: outcome.code, code_verifier: codeVerifier, redirect_uri: redirectUri }, { timeout: 15000, headers: { 'Content-Type': 'application/json' } });
+        const { access_token, refresh_token, expires_in } = res.data ?? {};
+        if (!access_token || !refresh_token) {
+            return { ok: false, error: 'invalid_response' };
+        }
+        const expiresAt = new Date(Date.now() + (expires_in ?? 3600) * 1000).toISOString();
+        const creds = {
+            endpoint: input.endpoint,
+            accessToken: access_token,
+            refreshToken: refresh_token,
+            expiresAt,
+        };
+        input.store.save(creds);
+        return { ok: true };
+    }
+    catch (err) {
+        const data = err?.response
+            ?.data;
+        const code = data?.reason ?? data?.error ?? 'network_error';
+        return { ok: false, error: code };
+    }
+}
+//# sourceMappingURL=authGoogle.js.map

package/dist/commands/authGoogle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authGoogle.js","sourceRoot":"","sources":["../../src/commands/authGoogle.ts"],"names":[],"mappings":";;;;;AA4EA,wCAwJC;AApOD,gDAAwB;AACxB,oDAA4B;AAC5B,iDAAsC;AAEtC,kDAA0B;AAqB1B,MAAM,aAAa,GAAG,8CAA8C,CAAC;AACrE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,YAAY,CAAC;AACjE,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,MAAM;AAEjD,MAAM,WAAW,GACf,6DAA6D;IAC7D,qFAAqF;IACrF,0DAA0D,CAAC;AAE7D;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,IAAI,GAAW,CAAC;QAChB,IAAI,IAAc,CAAC;QACnB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,GAAG,GAAG,MAAM,CAAC;YACb,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACxC,wDAAwD;YACxD,GAAG,GAAG,KAAK,CAAC;YACZ,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,UAAU,CAAC;YACjB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,gDAAgD;QAClD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,cAAc,CAAC,KAAuB;IAC1D,IAAI,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IAEtE,8CAA8C;IAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,6BAA6B,EAAE;gBAC7E,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YACH,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,6DAA6D;gBAC7D,wCAAwC;gBACxC,2EAA2E;SAC9E,CAAC;IACJ,CAAC;IAED,eAAe;IACf,MAAM,YAAY,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE3D,+BAA+B;IAC/B,MAAM,MAAM,GAAG,cAAI,CAAC,YAAY,EAAE,CAAC;IACnC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;IACpD,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;IAExD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,QAAQ;QACnB,YAAY,EAAE,WAAW;QACzB,aAAa,EAAE,MAAM;QACrB,KAAK,EAAE,sBAAsB;QAC7B,KAAK;QACL,cAAc,EAAE,aAAa;QAC7B,qBAAqB,EAAE,MAAM;QAC7B,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,gBAAgB;QACxB,EAAE,EAAE,UAAU;KACf,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,GAAG,aAAa,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAExD,+CAA+C;IAC/C,MAAM,WAAW,GAAG,IAAI,OAAO,CAAuC,CAAC,OAAO,EAAE,EAAE;QAChF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,CAAuC,EAAE,EAAE;YACzD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;QACnD,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACxB,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAEhB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAChC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAChE,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAE1C,qBAAqB;YACrB,IAAI,CAAC,aAAa,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;gBAC9C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBACpE,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,IAAI,WAAW,EAAE,CAAC;gBAChB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBACpE,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;gBAChC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,EAAE,KAAK,EAAE,iBAAiB,WAAW,EAAE,EAAE,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YACD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBACpE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACnE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,gCAAgC;IAChC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAEpC,IAAI,OAA6C,CAAC;IAClD,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,WAAW,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACpF,CAAC;IAED,2DAA2D;IAC3D,wDAAwD;IACxD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,eAAK,CAAC,IAAI,CAC1B,GAAG,KAAK,CAAC,QAAQ,sBAAsB,EACvC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,EAC9E,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACpE,CAAC;QAEF,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACnE,IAAI,CAAC,YAAY,IAAI,CAAC,aAAa,EAAE,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QAClD,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACnF,MAAM,KAAK,GAAgB;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,aAAa;YAC3B,SAAS;SACV,CAAC;QACF,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAAqE,EAAE,QAAQ;YAC3F,EAAE,IAAI,CAAC;QACT,MAAM,IAAI,GAAG,IAAI,EAAE,MAAM,IAAI,IAAI,EAAE,KAAK,IAAI,eAAe,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;AACH,CAAC"}