seo-testing-tool 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 seo-testing-tool contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,228 @@
+# SEO Testing Tool v1.0.0
+
+Strumento CLI per esperimenti SEO con analisi statistica (Welch's t-test), integrazione Google Search Console. Database SQLite locale (zero configurazione).
+
+## Visione
+
+Rispondere in modo affidabile alla domanda:
+**"Questa modifica SEO ha probabilmente migliorato o peggiorato le performance su Google?"**
+
+Il tool non promette certezze, ma supporta decisioni informate attraverso analisi statistica rigorosa.
+
+## Prerequisiti
+
+- Node.js >= 18
+- Credenziali OAuth2 Google (per integrazione GSC)
+
+> Il database SQLite viene creato automaticamente in `~/.seo-tool/data.db` al primo avvio. Non serve installare nulla.
+
+## Installazione
+
+### Da npm (utenti)
+
+```bash
+npm install -g seo-testing-tool
+seo-tool --help
+```
+
+> Richiede Node.js >= 18. Su alcune piattaforme `better-sqlite3` potrebbe richiedere build tools (python, make).
+
+### Da sorgente (sviluppatori)
+
+```bash
+git clone https://github.com/svilupp0/SEO-Testing-Tool.git
+cd SEO-Testing-Tool
+npm install
+cp .env.example .env
+```
+
+### Variabili d'ambiente (.env)
+
+```env
+# Opzionale: default ~/.seo-tool/data.db
+# DATABASE_URL=file:/percorso/personalizzato/data.db
+GOOGLE_CLIENT_ID=xxx.apps.googleusercontent.com
+GOOGLE_CLIENT_SECRET=xxx
+GOOGLE_REDIRECT_URI=http://localhost:3000/auth/callback
+USER_ID=default-user
+```
+
+### Setup database
+
+```bash
+# Crea le tabelle nel database SQLite locale (via Drizzle)
+npm run db:push
+```
+
+### Verifica connessione DB
+
+```bash
+npm run smoke-test
+```
+
+## Quick Start (Demo Mode)
+
+Vuoi provare il tool senza configurare Google Search Console? La modalità demo genera due esperimenti con **70 giorni di metriche simulate** (rumore statistico realistico via Box-Muller):
+
+- **Esperimento Positivo** — incremento click del +46% nel periodo post (p-value < 0.01)
+- **Esperimento Neutro** — nessuna differenza significativa tra pre e post
+
+```bash
+# Genera i dati demo nel database locale
+npm run demo
+```
+
+Una volta completato, esplora i risultati:
+
+```bash
+# Elenca tutti gli esperimenti
+seo-tool list
+
+# Visualizza dettaglio con grafico ASCII e analisi statistica
+seo-tool status <ID>
+
+# Esporta le metriche in Excel o CSV
+seo-tool export <ID>
+```
+
+> L'ID viene mostrato al termine di `npm run demo`. Puoi usare anche solo i primi 8 caratteri.
+
+## Comandi CLI
+
+| Comando | Descrizione |
+|---------|-------------|
+| `seo-tool add` | Crea un nuovo test SEO (prompt interattivi) |
+| `seo-tool list` | Mostra tabella con tutti i test |
+| `seo-tool status <id>` | Dettaglio test con analisi statistica e grafico ASCII |
+| `seo-tool run` | Sincronizza tutti i test attivi (fetch GSC + analisi) |
+| `seo-tool export <id>` | Esporta metriche in CSV |
+| `seo-tool delete <id>` | Elimina un test (con conferma interattiva) |
+
+Tutti i comandi che accettano `<id>` supportano **ID parziali** (es. `seo-tool status abcd`).
+
+### Esempi
+
+```bash
+# Crea un nuovo test
+seo-tool add
+
+# Elenca tutti i test
+seo-tool list
+
+# Visualizza dettaglio con grafico ASCII
+seo-tool status abcd1234
+
+# Sincronizza dati da GSC
+seo-tool run
+
+# Esporta in CSV
+seo-tool export abcd1234
+
+# Elimina un test (chiede conferma)
+seo-tool delete abcd1234
+```
+
+## Sviluppo
+
+```bash
+# Esegui comandi senza build (sviluppo)
+npx tsx src/cli.ts <comando>
+
+# Lancia test
+npm test
+
+# Test con UI
+npm run test:ui
+
+# Test con coverage
+npm run test:coverage
+
+# Lint
+npm run lint
+
+# Format
+npm run format
+```
+
+## Deploy su Railway (opzionale)
+
+Il progetto include configurazione per Railway con cron job notturno e database SQLite embedded.
+
+### Setup Railway
+
+1. Crea un nuovo progetto su [Railway](https://railway.app)
+2. Collega il repository Git
+3. Railway rileverà automaticamente `railway.json` e `Dockerfile`
+4. Configura le variabili d'ambiente nel pannello Railway (credenziali Google, ecc.)
+
+### Cron Job
+
+Il cron job (`railway.json`) esegue `npm run cli:run` ogni notte alle **03:00 UTC**:
+- Recupera nuovi dati da Google Search Console
+- Esegue analisi statistica (Welch's t-test)
+- Invia notifiche se i risultati sono statisticamente significativi
+
+### Build manuale Docker
+
+```bash
+# Compila TypeScript
+npm run build
+
+# Build immagine
+docker build -t seo-testing-tool .
+
+# Run
+docker run --env-file .env seo-testing-tool
+```
+
+## Architettura
+
+```
+src/
+  cli.ts                          Entry point CLI (commander)
+  cli/commands.ts                 Comandi: add, list, status, run, export, delete
+  cli/formatters.ts               Colori, tabelle, grafici ASCII
+  demo.ts                         Script per generazione dati demo
+  index.ts                        Entry point cron job
+  smoke-test.ts                   Verifica connessione DB
+  stats/
+    StatisticalEngine.ts          Welch's t-test, outlier detection
+    TDistribution.ts              Distribuzione t (calcolo p-value)
+  config/
+    AnalysisConfig.ts             Soglie configurabili
+    env.ts                        Config OAuth2
+  database/
+    db.ts                         Connessione Drizzle + SQLite
+    schema.ts                     Schema database (Drizzle ORM)
+    DatabaseService.ts            CRUD, transazioni, aggregati, paginazione
+    TimeSeriesService.ts          Gap detection, recovery
+  orchestrator/
+    SEOExperimentOrchestrator.ts  GSC -> Analisi -> Risultati
+  services/
+    ExportService.ts              Export Excel/CSV
+drizzle/                          Migrazioni e meta-dati SQL
+railway.json                      Config deploy Railway (cron 03:00 UTC)
+Dockerfile                        Build container Node.js 18+
+```
+
+## Limiti dichiarati (by design)
+
+- Non funziona su siti piccoli (traffico insufficiente per significativita' statistica)
+- Non e' realtime (richiede tempo per raccogliere dati)
+- Non garantisce risultati (fornisce probabilita', non certezze)
+
+Questi limiti aumentano la fiducia nel tool.
+
+## Documentazione
+
+- **[PROGRESS.md](./PROGRESS.md)** — Progresso implementazione
+- **[blueprint.md](./blueprint.md)** — Specifica tecnica completa
+
+## Licenza
+
+MIT
+
+---
+
+**Versione:** 1.0.0 Stable
+**Last Updated:** 2026-02-16

package/dist/auth/GoogleOAuthService.d.ts

@@ -0,0 +1,31 @@
+/**
+ * GoogleOAuthService - Servizio per l'autenticazione OAuth2 con Google
+ */
+interface OAuthConfig {
+    clientId: string;
+    clientSecret: string;
+    redirectUri: string;
+}
+interface TokenResponse {
+    access_token: string;
+    refresh_token: string;
+    expires_in: number;
+    token_type: string;
+}
+interface UserInfo {
+    email: string;
+    verified_email: boolean;
+    id: string;
+}
+export declare class GoogleOAuthService {
+    private config;
+    private sessionStates;
+    constructor(config: OAuthConfig);
+    getAuthorizationUrl(scopes: string[]): string;
+    exchangeCodeForTokens(code: string): Promise<TokenResponse>;
+    getUserInfo(accessToken: string): Promise<UserInfo>;
+    validateState(state: string): void;
+    private generateState;
+}
+export {};
+//# sourceMappingURL=GoogleOAuthService.d.ts.map

package/dist/auth/GoogleOAuthService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GoogleOAuthService.d.ts","sourceRoot":"","sources":["../../src/auth/GoogleOAuthService.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,UAAU,WAAW;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,aAAa;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,QAAQ;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,aAAa,CAA0B;gBAEnC,MAAM,EAAE,WAAW;IAI/B,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM;IAgBvC,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA2B3D,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAezD,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAMlC,OAAO,CAAC,aAAa;CAGtB"}

package/dist/auth/GoogleOAuthService.js

@@ -0,0 +1,69 @@
+/**
+ * GoogleOAuthService - Servizio per l'autenticazione OAuth2 con Google
+ */
+export class GoogleOAuthService {
+    config;
+    sessionStates = new Set();
+    constructor(config) {
+        this.config = config;
+    }
+    getAuthorizationUrl(scopes) {
+        const state = this.generateState();
+        this.sessionStates.add(state);
+        const params = new URLSearchParams({
+            client_id: this.config.clientId,
+            redirect_uri: this.config.redirectUri,
+            response_type: 'code',
+            scope: scopes.join(' '),
+            access_type: 'offline',
+            state: state,
+        });
+        return `https://accounts.google.com/o/oauth2/v2/auth?${params.toString()}`;
+    }
+    async exchangeCodeForTokens(code) {
+        try {
+            const response = await fetch('https://oauth2.googleapis.com/token', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                },
+                body: new URLSearchParams({
+                    code,
+                    client_id: this.config.clientId,
+                    client_secret: this.config.clientSecret,
+                    redirect_uri: this.config.redirectUri,
+                    grant_type: 'authorization_code',
+                }),
+            });
+            if (!response.ok) {
+                throw new Error('Token exchange failed');
+            }
+            const data = await response.json();
+            return data;
+        }
+        catch (error) {
+            throw new Error('Impossibile connettersi a Google. Riprova.');
+        }
+    }
+    async getUserInfo(accessToken) {
+        const response = await fetch('https://www.googleapis.com/oauth2/v2/userinfo', {
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+            },
+        });
+        if (!response.ok) {
+            throw new Error('Impossibile connettersi a Google. Riprova.');
+        }
+        const data = await response.json();
+        return data;
+    }
+    validateState(state) {
+        if (!this.sessionStates.has(state)) {
+            throw new Error('Impossibile connettersi a Google. Riprova.');
+        }
+    }
+    generateState() {
+        return Math.random().toString(36).substring(2) + Date.now().toString(36);
+    }
+}
+//# sourceMappingURL=GoogleOAuthService.js.map

package/dist/auth/GoogleOAuthService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GoogleOAuthService.js","sourceRoot":"","sources":["../../src/auth/GoogleOAuthService.ts"],"names":[],"mappings":"AAAA;;GAEG;AAqBH,MAAM,OAAO,kBAAkB;IACrB,MAAM,CAAc;IACpB,aAAa,GAAgB,IAAI,GAAG,EAAE,CAAC;IAE/C,YAAY,MAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,mBAAmB,CAAC,MAAgB;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAE9B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,WAAW,EAAE,SAAS;YACtB,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QAEH,OAAO,gDAAgD,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,IAAY;QACtC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,qCAAqC,EAAE;gBAClE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;gBACD,IAAI,EAAE,IAAI,eAAe,CAAC;oBACxB,IAAI;oBACJ,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;oBACvC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;oBACrC,UAAU,EAAE,oBAAoB;iBACjC,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,OAAO,IAAqB,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB;QACnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,+CAA+C,EAAE;YAC5E,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,IAAgB,CAAC;IAC1B,CAAC;IAED,aAAa,CAAC,KAAa;QACzB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF"}

package/dist/auth/TokenManager.d.ts

@@ -0,0 +1,56 @@
+/**
+ * TokenManager - Gestione dei token OAuth2 e refresh automatico
+ */
+import { GoogleOAuthService } from './GoogleOAuthService.js';
+interface TokenManagerConfig {
+    clientId: string;
+    clientSecret: string;
+}
+interface StoredToken {
+    access_token: string;
+    refresh_token: string;
+    expires_in: number;
+    expires_at: number;
+    token_type: string;
+}
+interface TokenResponse {
+    access_token: string;
+    refresh_token?: string;
+    expires_in: number;
+    token_type: string;
+}
+interface TokenStatus {
+    isRevoked: boolean;
+    revokedAt: Date | null;
+}
+interface ValidationResult {
+    isValid: boolean;
+    isRevoked: boolean;
+    errorMessage: string;
+}
+interface ValidTokenResult {
+    success: boolean;
+    error: string | null;
+    token: string | null;
+}
+export declare class TokenManager {
+    private config;
+    private currentToken;
+    private readonly REFRESH_THRESHOLD;
+    private tokens;
+    private revokedTokens;
+    constructor(config: TokenManagerConfig | GoogleOAuthService);
+    isTokenExpired(token: StoredToken): boolean;
+    processToken(token: TokenResponse): StoredToken;
+    needsRefresh(token: StoredToken): boolean;
+    refreshAccessToken(userIdOrToken: string): Promise<TokenResponse>;
+    saveTokens(userIdOrToken: string | StoredToken, tokens?: TokenResponse): Promise<void>;
+    getValidAccessToken(): Promise<string>;
+    getValidAccessToken(userId: string): Promise<ValidTokenResult>;
+    validateAccessToken(_accessToken: string): Promise<ValidationResult>;
+    getTokenStatus(userId: string): Promise<TokenStatus>;
+    markAsRevoked(userId: string): Promise<void>;
+    isAccessRevoked(userId: string): Promise<boolean>;
+}
+export {};
+//# sourceMappingURL=TokenManager.d.ts.map

package/dist/auth/TokenManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenManager.d.ts","sourceRoot":"","sources":["../../src/auth/TokenManager.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,UAAU,kBAAkB;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,WAAW;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,aAAa;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,WAAW;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB;AAED,UAAU,gBAAgB;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,gBAAgB;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,YAAY,CAA4B;IAChD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAU;IAC5C,OAAO,CAAC,MAAM,CAAuC;IACrD,OAAO,CAAC,aAAa,CAAgC;gBAEzC,MAAM,EAAE,kBAAkB,GAAG,kBAAkB;IAQ3D,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO;IAI3C,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,WAAW;IAU/C,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO;IAKnC,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAsFjE,UAAU,CAAC,aAAa,EAAE,MAAM,GAAG,WAAW,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBtF,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC;IACtC,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAgD9D,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IASpE,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAQpD,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5C,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAGxD"}

package/dist/auth/TokenManager.js

@@ -0,0 +1,190 @@
+/**
+ * TokenManager - Gestione dei token OAuth2 e refresh automatico
+ */
+export class TokenManager {
+    config;
+    currentToken = null;
+    REFRESH_THRESHOLD = 600000; // 10 minuti in millisecondi
+    tokens = new Map();
+    revokedTokens = new Map();
+    constructor(config) {
+        if ('clientId' in config && 'clientSecret' in config) {
+            this.config = config;
+        }
+        else {
+            this.config = { clientId: '', clientSecret: '' };
+        }
+    }
+    isTokenExpired(token) {
+        return token.expires_at < Date.now();
+    }
+    processToken(token) {
+        return {
+            access_token: token.access_token,
+            refresh_token: token.refresh_token || '',
+            expires_in: token.expires_in,
+            expires_at: Date.now() + token.expires_in * 1000,
+            token_type: token.token_type,
+        };
+    }
+    needsRefresh(token) {
+        const timeUntilExpiry = token.expires_at - Date.now();
+        return timeUntilExpiry < this.REFRESH_THRESHOLD;
+    }
+    async refreshAccessToken(userIdOrToken) {
+        // Se è un userId, recupera il token
+        let refreshToken;
+        let userId = null;
+        if (this.tokens.has(userIdOrToken)) {
+            userId = userIdOrToken;
+            const storedToken = this.tokens.get(userIdOrToken);
+            if (!storedToken) {
+                throw new Error('No token found');
+            }
+            // Controlla se è già revocato
+            if (this.revokedTokens.has(userId)) {
+                throw new Error('Accesso revocato. Riconnetti il tuo account Google.');
+            }
+            refreshToken = storedToken.refresh_token;
+        }
+        else {
+            refreshToken = userIdOrToken;
+        }
+        try {
+            const response = await fetch('https://oauth2.googleapis.com/token', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                },
+                body: new URLSearchParams({
+                    refresh_token: refreshToken,
+                    client_id: this.config.clientId,
+                    client_secret: this.config.clientSecret,
+                    grant_type: 'refresh_token',
+                }),
+            });
+            if (!response.ok) {
+                // Prima controlla errori HTTP specifici
+                if (response.status === 500) {
+                    throw new Error('Errore del server Google');
+                }
+                // Prova a parsare il JSON solo se non è un errore 500
+                let data = {};
+                try {
+                    data = await response.json();
+                }
+                catch {
+                    // Se non è JSON valido, continua con i controlli di status
+                }
+                // Controlla se è un errore di revoca
+                if (data.error === 'invalid_grant') {
+                    if (userId) {
+                        this.revokedTokens.set(userId, new Date());
+                    }
+                    throw new Error('Accesso revocato. Riconnetti il tuo account Google.');
+                }
+                const isRevoked = response.status === 400 || response.status === 401;
+                if (isRevoked) {
+                    throw new Error('Sessione scaduta. Effettua nuovamente il login.');
+                }
+                throw new Error('Token refresh failed');
+            }
+            const data = await response.json();
+            return data;
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                if (error.message.includes('Accesso revocato')) {
+                    throw error;
+                }
+                if (error.message.includes('Sessione scaduta')) {
+                    throw error;
+                }
+                if (error.message.includes('Errore del server Google')) {
+                    throw error;
+                }
+                if (error.message === 'Network timeout') {
+                    throw new Error('Errore di rete');
+                }
+            }
+            throw new Error('Impossibile rinnovare la sessione. Riprova.');
+        }
+    }
+    async saveTokens(userIdOrToken, tokens) {
+        if (typeof userIdOrToken === 'string' && tokens) {
+            // Nuovo formato: saveTokens(userId, tokens)
+            const userId = userIdOrToken;
+            const storedToken = this.processToken(tokens);
+            this.tokens.set(userId, storedToken);
+            // Se salviamo nuovi token, rimuoviamo lo stato di revoca
+            if (this.revokedTokens.has(userId)) {
+                this.revokedTokens.delete(userId);
+            }
+        }
+        else {
+            // Vecchio formato: saveTokens(token)
+            this.currentToken = userIdOrToken;
+        }
+    }
+    async getValidAccessToken(userId) {
+        if (userId) {
+            // Controlla se è revocato
+            if (this.revokedTokens.has(userId)) {
+                return {
+                    success: false,
+                    error: 'Accesso revocato. Riconnetti il tuo account Google.',
+                    token: null,
+                };
+            }
+            const token = this.tokens.get(userId);
+            if (!token) {
+                return {
+                    success: false,
+                    error: 'No token available',
+                    token: null,
+                };
+            }
+            return {
+                success: true,
+                error: null,
+                token: token.access_token,
+            };
+        }
+        // Vecchio comportamento
+        if (!this.currentToken) {
+            throw new Error('No token available');
+        }
+        if (this.isTokenExpired(this.currentToken) || this.needsRefresh(this.currentToken)) {
+            const newTokens = await this.refreshAccessToken(this.currentToken.refresh_token);
+            const processedToken = this.processToken(newTokens);
+            // Mantieni il refresh token originale se Google non ne invia uno nuovo
+            if (!newTokens.refresh_token) {
+                processedToken.refresh_token = this.currentToken.refresh_token;
+            }
+            this.currentToken = processedToken;
+        }
+        return this.currentToken.access_token;
+    }
+    async validateAccessToken(_accessToken) {
+        // Simula validazione - ritorna revocato per token non autorizzati
+        return {
+            isValid: false,
+            isRevoked: true,
+            errorMessage: 'Accesso revocato. Riconnetti il tuo account Google.',
+        };
+    }
+    async getTokenStatus(userId) {
+        const isRevoked = this.revokedTokens.has(userId);
+        return {
+            isRevoked,
+            revokedAt: isRevoked ? this.revokedTokens.get(userId) : null,
+        };
+    }
+    async markAsRevoked(userId) {
+        this.revokedTokens.set(userId, new Date());
+    }
+    async isAccessRevoked(userId) {
+        return this.revokedTokens.has(userId);
+    }
+}
+//# sourceMappingURL=TokenManager.js.map

package/dist/auth/TokenManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenManager.js","sourceRoot":"","sources":["../../src/auth/TokenManager.ts"],"names":[],"mappings":"AAAA;;GAEG;AAyCH,MAAM,OAAO,YAAY;IACf,MAAM,CAAqB;IAC3B,YAAY,GAAuB,IAAI,CAAC;IAC/B,iBAAiB,GAAG,MAAM,CAAC,CAAC,4BAA4B;IACjE,MAAM,GAA6B,IAAI,GAAG,EAAE,CAAC;IAC7C,aAAa,GAAsB,IAAI,GAAG,EAAE,CAAC;IAErD,YAAY,MAA+C;QACzD,IAAI,UAAU,IAAI,MAAM,IAAI,cAAc,IAAI,MAAM,EAAE,CAAC;YACrD,IAAI,CAAC,MAAM,GAAG,MAA4B,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IAED,cAAc,CAAC,KAAkB;QAC/B,OAAO,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvC,CAAC;IAED,YAAY,CAAC,KAAoB;QAC/B,OAAO;YACL,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;YACxC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI;YAChD,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,KAAkB;QAC7B,MAAM,eAAe,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtD,OAAO,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,aAAqB;QAC5C,qCAAqC;QACrC,IAAI,YAAoB,CAAC;QACzB,IAAI,MAAM,GAAkB,IAAI,CAAC;QAEjC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YACnC,MAAM,GAAG,aAAa,CAAC;YACvB,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACnD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACpC,CAAC;YAED,gCAAgC;YAChC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YAED,YAAY,GAAG,WAAW,CAAC,aAAa,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,aAAa,CAAC;QAC/B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,qCAAqC,EAAE;gBAClE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;gBACD,IAAI,EAAE,IAAI,eAAe,CAAC;oBACxB,aAAa,EAAE,YAAY;oBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;oBACvC,UAAU,EAAE,eAAe;iBAC5B,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,wCAAwC;gBACxC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBAC9C,CAAC;gBAED,uDAAuD;gBACvD,IAAI,IAAI,GAAuB,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAwB,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;gBAED,sCAAsC;gBACtC,IAAI,IAAI,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;oBACnC,IAAI,MAAM,EAAE,CAAC;wBACX,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;oBAC7C,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;gBACzE,CAAC;gBAED,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;gBACrE,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACrE,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAmB,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;oBAC/C,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;oBAC/C,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;oBACvD,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,KAAK,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;oBACxC,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,aAAmC,EAAE,MAAsB;QAC1E,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,MAAM,EAAE,CAAC;YAChD,4CAA4C;YAC5C,MAAM,MAAM,GAAG,aAAa,CAAC;YAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAErC,yDAAyD;YACzD,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,qCAAqC;YACrC,IAAI,CAAC,YAAY,GAAG,aAA4B,CAAC;QACnD,CAAC;IACH,CAAC;IAID,KAAK,CAAC,mBAAmB,CAAC,MAAe;QACvC,IAAI,MAAM,EAAE,CAAC;YACX,2BAA2B;YAC3B,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,qDAAqD;oBAC5D,KAAK,EAAE,IAAI;iBACZ,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,oBAAoB;oBAC3B,KAAK,EAAE,IAAI;iBACZ,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,KAAK,CAAC,YAAY;aAC1B,CAAC;QACJ,CAAC;QAED,wBAAwB;QACxB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACnF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;YACjF,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAEpD,uEAAuE;YACvE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;gBAC7B,cAAc,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;YACjE,CAAC;YAED,IAAI,CAAC,YAAY,GAAG,cAAc,CAAC;QACrC,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,YAAoB;QAC5C,kEAAkE;QAClE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,IAAI;YACf,YAAY,EAAE,qDAAqD;SACpE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO;YACL,SAAS;YACT,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,CAAC,CAAC,IAAI;SAC9D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc;QAClC,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/cli/commands.d.ts

@@ -0,0 +1,36 @@
+/**
+ * CLI Commands
+ *
+ * Implementazione dei 7 comandi: login, add, list, status, run, export, delete
+ */
+/**
+ * login — Collega l'account Google per accedere a Google Search Console
+ */
+export declare function loginCommand(): Promise<void>;
+/**
+ * add — Crea un nuovo test SEO con prompt interattivi
+ */
+export declare function addCommand(): Promise<void>;
+/**
+ * list — Mostra tabella con tutti i test
+ */
+export declare function listCommand(): Promise<void>;
+/**
+ * status <id> — Dettaglio di un singolo test con analisi e grafico
+ */
+export declare function statusCommand(id: string): Promise<void>;
+/**
+ * run — Sincronizza tutti i test attivi via orchestratore
+ */
+export declare function runCommand(): Promise<void>;
+/**
+ * export <id> — Esporta dati test su file Excel o CSV (con scelta interattiva)
+ */
+export declare function exportCommand(id: string, options?: {
+    format?: string;
+}): Promise<void>;
+/**
+ * delete <id> — Elimina un test (con conferma interattiva) e registra nell'Audit Log
+ */
+export declare function deleteCommand(id: string): Promise<void>;
+//# sourceMappingURL=commands.d.ts.map

package/dist/cli/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAsEH;;GAEG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CA4FlD;AAED;;GAEG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CA8DhD;AAED;;GAEG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAmBjD;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA2D7D;AAED;;GAEG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAoEhD;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA6E5F;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmD7D"}