siluzan-tso-cli 1.1.32 → 1.1.33-beta.2

package/README.md

@@ -43,7 +43,7 @@ HTML 报告模板外部资源：**ECharts** 统一使用 `https://staticpn.siluz
 在**用户的目标项目根目录**执行（根据用户使用的助手选择 `--ai`）：
 
 ```bash
-npm install -g siluzan-tso-cli
+npm install -g siluzan-tso-cli@beta
 siluzan-tso init --ai cursor         # 写入 Cursor（默认）
 siluzan-tso init --ai cursor,claude  # 同时写入多个平台
 siluzan-tso init --ai all            # 写入所有支持的平台
@@ -51,6 +51,7 @@ siluzan-tso init -d /path/to/skills  # 写入自定义目录
 siluzan-tso init --force             # 强制覆盖已存在文件
 ```
 
+> **注意**：当前为测试版（1.1.33-beta.2），供内部测试使用。正式发布后安装命令将改为 `npm install -g siluzan-tso-cli`。
 
 | 助手                    | 建议 `--ai`                          |
 | ----------------------- | ------------------------------------ |

package/dist/index.js

@@ -1980,6 +1980,7 @@ import * as fs3 from "fs/promises";
 import * as path3 from "path";
 import * as fs4 from "fs/promises";
 import * as path4 from "path";
+import { spawn as spawn2 } from "child_process";
 import * as path5 from "path";
 import { chmod, mkdir as mkdir3, open, readdir, stat, unlink } from "fs/promises";
 import * as path6 from "path";
@@ -2933,6 +2934,60 @@ function installProcessHandlers() {
     process.exit(1);
   });
 }
+function tryOpenHttpsUrlInBrowser(url) {
+  try {
+    const parsed = new URL(url);
+    if (parsed.protocol !== "https:") {
+      return false;
+    }
+    if (process.platform === "win32") {
+      const child = spawn2("rundll32", ["url.dll,FileProtocolHandler", parsed.toString()], {
+        detached: true,
+        stdio: "ignore",
+        windowsHide: true
+      });
+      child.unref();
+    } else if (process.platform === "darwin") {
+      const child = spawn2("open", [parsed.toString()], { detached: true, stdio: "ignore" });
+      child.unref();
+    } else {
+      const child = spawn2("xdg-open", [parsed.toString()], { detached: true, stdio: "ignore" });
+      child.unref();
+    }
+    return true;
+  } catch {
+    return false;
+  }
+}
+function deliverMediaAccountOAuthLink(opts) {
+  const { mediaLabel, redirectUrl, tryOpenBrowser: tryOpenBrowser2 } = opts;
+  if (isSiluzanAgentEnv()) {
+    console.log(
+      `
+\u2139\uFE0F  \u68C0\u6D4B\u5230 Siluzan Agent \u73AF\u5883\uFF08IS_SILUZAN_AGENT_ENV=true\uFF09\u3002
+   \u8BF7\u6253\u5F00\u4EE5\u4E0B\u94FE\u63A5\u5B8C\u6210 ${mediaLabel} \u5E7F\u544A\u8D26\u6237\u6388\u6743\uFF08\u6C99\u7BB1\u5185\u4E0D\u4F1A\u81EA\u52A8\u6253\u5F00\u6D4F\u89C8\u5668\uFF09\uFF1A
+
+  ${redirectUrl}
+`
+    );
+    return;
+  }
+  if (tryOpenBrowser2) {
+    const opened = tryOpenBrowser2(redirectUrl);
+    if (opened) {
+      console.log(`
+\u2705 \u5DF2\u5728\u9ED8\u8BA4\u6D4F\u89C8\u5668\u4E2D\u6253\u5F00 ${mediaLabel} \u6388\u6743\u9875\u9762\u3002`);
+      console.log(`   \u5B8C\u6210\u6388\u6743\u540E\u6D4F\u89C8\u5668\u4F1A\u81EA\u52A8\u8DF3\u56DE\u4E1D\u8DEF\u8D5E\uFF0C\u8D26\u6237\u7ED1\u5B9A\u5373\u751F\u6548\u3002
+`);
+    } else {
+      console.log(`
+\u26A0\uFE0F  \u65E0\u6CD5\u81EA\u52A8\u6253\u5F00\u6D4F\u89C8\u5668\uFF0C\u8BF7\u624B\u52A8\u590D\u5236\u4EE5\u4E0B\u94FE\u63A5\u5230\u6D4F\u89C8\u5668\u4E2D\u5B8C\u6210\u6388\u6743\uFF1A
+`);
+    }
+  }
+  console.log(`  ${redirectUrl}
+`);
+}
 function printAuthMissingHelp(binName) {
   if (isSiluzanAgentEnv()) {
     console.error(
@@ -3774,7 +3829,7 @@ var DEFAULT_API_BASE;
 var init_defaults = __esm({
   "src/config/defaults.ts"() {
     "use strict";
-    DEFAULT_API_BASE = "https://tso-api.siluzan.com";
+    DEFAULT_API_BASE = "https://tso-api-ci.siluzan.com";
   }
 });
 
@@ -4274,6 +4329,44 @@ function groupAccountIdsByOverviewRoute(cliMedia, accountIds, accountMediaTypes)
   }
   return groups;
 }
+function routeToBalanceMedia(route) {
+  if (route === "FacebookAds") return "MetaAd";
+  if (BALANCE_SUPPORTED_MEDIA.includes(route)) {
+    return route;
+  }
+  return null;
+}
+function applyRealtimeBalanceIfNeeded(item, bal) {
+  if (bal == null || typeof bal.remainingAccountBudget !== "number") return;
+  if (bal.remainingAccountBudget > 0) {
+    item.remainingAccountBudget = bal.remainingAccountBudget;
+  }
+  if (bal.currencyCode) item.currencyCode = bal.currencyCode;
+  if (bal.status) item.status = bal.status;
+}
+async function overlayRealtimeBalanceOnOverviewMap(route, overviewMap, config, verbose) {
+  const media = routeToBalanceMedia(route);
+  if (!media || overviewMap.size === 0) return;
+  const ids = [...overviewMap.keys()];
+  const balanceMap = await fetchBalanceMap(media, ids, config, void 0, void 0, verbose);
+  for (const [id, item] of overviewMap) {
+    applyRealtimeBalanceIfNeeded(item, balanceMap.get(id));
+  }
+}
+async function enrichOverviewRecordWithRealtimeBalance(media, accountId, config, record, verbose) {
+  if (!BALANCE_SUPPORTED_MEDIA.includes(media)) {
+    return record;
+  }
+  const balanceMap = await fetchBalanceMap(media, [accountId], config, void 0, void 0, verbose);
+  const bal = balanceMap.get(accountId);
+  if (bal == null) return record;
+  const out = { ...record };
+  applyRealtimeBalanceIfNeeded(out, bal);
+  if (bal.name && out["accountName"] == null && out["mediaCustomerName"] == null) {
+    out["mediaCustomerName"] = bal.name;
+  }
+  return out;
+}
 async function fetchBalanceMap(media, accountIds, config, startDate, endDate, verbose) {
   const result = /* @__PURE__ */ new Map();
   if (accountIds.length === 0) return result;
@@ -4407,70 +4500,73 @@ async function fetchOverviewMap(route, accountIds, config, startDate, endDate, v
       for (const row of rows) {
         result.set(row.mediaAccountId, row);
       }
-      return result;
-    }
-    const fetchLegacyBatch = async (ids) => {
-      const batch = /* @__PURE__ */ new Map();
-      const params = new URLSearchParams({
-        period: "true",
-        startDate: start,
-        endDate: end,
-        mediaCustomerIds: ids.join(",")
-      });
-      const url = `${config.apiBaseUrl}/report/media-account/${route}/accountsoverview?${params}`;
-      const raw = await apiFetch2(url, config, {}, verbose);
-      const items = Array.isArray(raw) ? raw : [];
-      for (const item of items) {
-        if (item.mediaAccountId != null) {
-          batch.set(String(item.mediaAccountId), item);
+    } else {
+      const fetchLegacyBatch = async (ids) => {
+        const batch = /* @__PURE__ */ new Map();
+        const params = new URLSearchParams({
+          period: "true",
+          startDate: start,
+          endDate: end,
+          mediaCustomerIds: ids.join(",")
+        });
+        const url = `${config.apiBaseUrl}/report/media-account/${route}/accountsoverview?${params}`;
+        const raw = await apiFetch2(url, config, {}, verbose);
+        const items = Array.isArray(raw) ? raw : [];
+        for (const item of items) {
+          if (item.mediaAccountId != null) {
+            batch.set(String(item.mediaAccountId), item);
+          }
         }
-      }
-      return batch;
-    };
-    const mergeOverview = (batch) => {
-      for (const [k, v] of batch) result.set(k, v);
-    };
-    if (accountIds.length === 1) {
-      mergeOverview(await fetchLegacyBatch(accountIds));
-      return result;
-    }
-    try {
-      const batch = await fetchLegacyBatch(accountIds);
-      mergeOverview(batch);
-      if (batch.size === 0) {
-        for (const id of accountIds) {
-          try {
-            mergeOverview(await fetchLegacyBatch([id]));
-          } catch (singleErr) {
-            if (verbose) {
-              process.stderr.write(
-                `[fetchOverviewMap] \u9010\u6237\u91CD\u8BD5\u5931\u8D25 ${id}\uFF1A${singleErr instanceof Error ? singleErr.message : String(singleErr)}
+        return batch;
+      };
+      const mergeOverview = (batch) => {
+        for (const [k, v] of batch) result.set(k, v);
+      };
+      if (accountIds.length === 1) {
+        mergeOverview(await fetchLegacyBatch(accountIds));
+      } else {
+        try {
+          const batch = await fetchLegacyBatch(accountIds);
+          mergeOverview(batch);
+          if (batch.size === 0) {
+            for (const id of accountIds) {
+              try {
+                mergeOverview(await fetchLegacyBatch([id]));
+              } catch (singleErr) {
+                if (verbose) {
+                  process.stderr.write(
+                    `[fetchOverviewMap] \u9010\u6237\u91CD\u8BD5\u5931\u8D25 ${id}\uFF1A${singleErr instanceof Error ? singleErr.message : String(singleErr)}
 `
-              );
+                  );
+                }
+              }
             }
           }
-        }
-      }
-    } catch (err) {
-      if (verbose) {
-        process.stderr.write(
-          `[fetchOverviewMap] \u6279\u91CF\u5F02\u5E38\uFF0C\u9010\u6237\u91CD\u8BD5\uFF1A${err instanceof Error ? err.message : String(err)}
-`
-        );
-      }
-      for (const id of accountIds) {
-        try {
-          mergeOverview(await fetchLegacyBatch([id]));
-        } catch (singleErr) {
+        } catch (err) {
           if (verbose) {
             process.stderr.write(
-              `[fetchOverviewMap] \u9010\u6237\u91CD\u8BD5\u5931\u8D25 ${id}\uFF1A${singleErr instanceof Error ? singleErr.message : String(singleErr)}
+              `[fetchOverviewMap] \u6279\u91CF\u5F02\u5E38\uFF0C\u9010\u6237\u91CD\u8BD5\uFF1A${err instanceof Error ? err.message : String(err)}
 `
             );
           }
+          for (const id of accountIds) {
+            try {
+              mergeOverview(await fetchLegacyBatch([id]));
+            } catch (singleErr) {
+              if (verbose) {
+                process.stderr.write(
+                  `[fetchOverviewMap] \u9010\u6237\u91CD\u8BD5\u5931\u8D25 ${id}\uFF1A${singleErr instanceof Error ? singleErr.message : String(singleErr)}
+`
+                );
+              }
+            }
+          }
         }
       }
     }
+    if (result.size > 0) {
+      await overlayRealtimeBalanceOnOverviewMap(route, result, config, verbose);
+    }
   } catch (err) {
     if (verbose) {
       process.stderr.write(
@@ -106155,11 +106251,15 @@ async function runStats(opts) {
         }
       }
     } else {
-      const params = new URLSearchParams({ startDate, endDate, period: "true" });
-      params.set("mediaCustomerIds", ids.join(","));
-      const url = `${config.apiBaseUrl}/report/media-account/${opts.media}/accountsoverview?${params.toString()}`;
-      const raw = await apiFetch2(url, config, {}, opts.verbose);
-      items = Array.isArray(raw) ? raw : raw.items ?? [];
+      const map = await fetchOverviewMap(
+        opts.media,
+        ids,
+        config,
+        startDate,
+        endDate,
+        opts.verbose
+      );
+      items = [...map.values()];
     }
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
@@ -107693,6 +107793,7 @@ async function fetchBingJson(config, url, verbose) {
 
 // src/commands/report-bing-analysis/run.ts
 init_auth();
+init_balance();
 async function runReportBingOverview(opts) {
   const id = assertBingAccountId(opts.account);
   const { startDate, endDate } = resolveBingDateRange(opts.start, opts.end);
@@ -107700,7 +107801,14 @@ async function runReportBingOverview(opts) {
   const params = new URLSearchParams({ startDate, endDate });
   const url = reportingUrl2(config, id, "OverviewSectionData", params.toString());
   try {
-    const data = await fetchBingJson(config, url, !!opts.verbose);
+    const raw = await fetchBingJson(config, url, !!opts.verbose);
+    const data = raw && typeof raw === "object" && !Array.isArray(raw) ? await enrichOverviewRecordWithRealtimeBalance(
+      "BingV2",
+      id,
+      config,
+      raw,
+      opts.verbose
+    ) : raw;
     if (opts.jsonOut) {
       await emitBingSnapshot(opts, "bing-overview", id, startDate, endDate, data);
       return;
@@ -120909,35 +121017,11 @@ async function runAccountShareDetail(opts) {
 
 // src/commands/account-manage/oauth.ts
 init_auth();
-import { spawn as spawn2 } from "child_process";
+init_dist();
 function toApiMediaType(media) {
   return media === "Meta" ? "FacebookAds" : media;
 }
-function tryOpenBrowser(url) {
-  try {
-    const parsed = new URL(url);
-    if (parsed.protocol !== "https:") {
-      return false;
-    }
-    if (process.platform === "win32") {
-      const child = spawn2("rundll32", ["url.dll,FileProtocolHandler", parsed.toString()], {
-        detached: true,
-        stdio: "ignore",
-        windowsHide: true
-      });
-      child.unref();
-    } else if (process.platform === "darwin") {
-      const child = spawn2("open", [parsed.toString()], { detached: true, stdio: "ignore" });
-      child.unref();
-    } else {
-      const child = spawn2("xdg-open", [parsed.toString()], { detached: true, stdio: "ignore" });
-      child.unref();
-    }
-    return true;
-  } catch {
-    return false;
-  }
-}
+var tryOpenBrowser = tryOpenHttpsUrlInBrowser;
 async function runAccountAuth(opts) {
   const config = loadConfig(opts.token);
   const apiMediaType = toApiMediaType(opts.media);
@@ -120963,17 +121047,32 @@ async function runAccountAuth(opts) {
 `);
     process.exit(1);
   }
-  const opened = tryOpenBrowser(redirectUrl);
-  if (opened) {
-    console.log(`\u2705 \u5DF2\u5728\u9ED8\u8BA4\u6D4F\u89C8\u5668\u4E2D\u6253\u5F00 ${opts.media} \u6388\u6743\u9875\u9762\u3002`);
-    console.log(`   \u5B8C\u6210\u6388\u6743\u540E\u6D4F\u89C8\u5668\u4F1A\u81EA\u52A8\u8DF3\u56DE\u4E1D\u8DEF\u8D5E\uFF0C\u8D26\u6237\u7ED1\u5B9A\u5373\u751F\u6548\u3002
-`);
-  } else {
-    console.log(`\u26A0\uFE0F  \u65E0\u6CD5\u81EA\u52A8\u6253\u5F00\u6D4F\u89C8\u5668\uFF0C\u8BF7\u624B\u52A8\u590D\u5236\u4EE5\u4E0B\u94FE\u63A5\u5230\u6D4F\u89C8\u5668\u4E2D\u5B8C\u6210\u6388\u6743\uFF1A
-`);
+  deliverMediaAccountOAuthLink({
+    mediaLabel: opts.media,
+    redirectUrl,
+    tryOpenBrowser: tryOpenHttpsUrlInBrowser
+  });
+}
+async function runAccountReauth(opts) {
+  if (!opts.id && (!opts.ids || opts.ids.length === 0)) {
+    console.error(
+      "\n\u274C \u91CD\u65B0\u6388\u6743\u987B\u6307\u5B9A\u8981\u89E3\u7ED1\u7684\u8D26\u6237 entityId\uFF1A--id <entityId> \u6216 --ids id1,id2\n   entityId \u6765\u81EA list-accounts --json-out \u7684 ma.entityId\uFF08\u4E0D\u662F mediaCustomerId\uFF09\n"
+    );
+    process.exit(1);
   }
-  console.log(`  ${redirectUrl}
-`);
+  console.log("\n\u6B65\u9AA4 1/2\uFF1A\u65AD\u5F00\u5173\u8054\uFF08\u91CD\u65B0\u6388\u6743\u524D\u5FC5\u987B\u5148\u89E3\u7ED1\uFF0C\u5BF9\u9F50\u7F51\u9875\u300C\u91CD\u65B0\u6388\u6743\u300D\uFF09\u2026\n");
+  await runAccountDelink({
+    token: opts.token,
+    id: opts.id,
+    ids: opts.ids,
+    verbose: opts.verbose
+  });
+  console.log("\u6B65\u9AA4 2/2\uFF1A\u53D1\u8D77 OAuth \u6388\u6743\u2026\n");
+  await runAccountAuth({
+    token: opts.token,
+    media: opts.media,
+    verbose: opts.verbose
+  });
 }
 
 // src/commands/account-manage/google-mcc.ts
@@ -121934,12 +122033,30 @@ function register23(program2) {
       });
     }
   );
-  accountCmd.command("auth").description("\u6DFB\u52A0\u6388\u6743\uFF1A\u53D1\u8D77\u5A92\u4F53 OAuth\uFF0C\u6D4F\u89C8\u5668\u6253\u5F00\u6388\u6743\u9875\uFF08\u7F51\u9875 manageAccounts\u300C\u6DFB\u52A0\u6388\u6743\u300D\uFF09").requiredOption(
+  accountCmd.command("auth").description(
+    "\u6DFB\u52A0\u6388\u6743\uFF1A\u9996\u6B21\u7ED1\u5B9A\u5A92\u4F53\u8D26\u6237 OAuth\uFF08\u7F51\u9875 manageAccounts\u300C\u6DFB\u52A0\u6388\u6743\u300D\uFF09\uFF1BOAuth \u5931\u6548\u8BF7\u7528 reauth"
+  ).requiredOption(
     "-m, --media <type>",
     "\u5A92\u4F53\u7C7B\u578B\uFF1AGoogle | TikTok | Meta | Yandex | BingV2 | Kwai"
   ).option("-t, --token <token>", "Auth Token").option("--verbose", "\u8BE6\u7EC6\u9519\u8BEF\u4FE1\u606F", false).action(async (opts) => {
     await runAccountAuth({ token: opts.token, media: opts.media, verbose: opts.verbose });
   });
+  accountCmd.command("reauth").description(
+    "\u91CD\u65B0\u6388\u6743\uFF1A\u5148\u89E3\u7ED1\u518D OAuth\uFF08\u7F51\u9875 manageAccounts\u300C\u91CD\u65B0\u6388\u6743\u300D\uFF1BinvalidOAuthToken \u5931\u6548\u65F6\u5FC5\u8D70\u6B64\u547D\u4EE4\uFF09"
+  ).requiredOption(
+    "-m, --media <type>",
+    "\u5A92\u4F53\u7C7B\u578B\uFF1AGoogle | TikTok | Meta | Yandex | BingV2 | Kwai"
+  ).option("--id <entityId>", "\u5355\u4E2A\u8D26\u6237 entityId\uFF08\u6765\u81EA list-accounts \u7684 ma.entityId\uFF09").option("--ids <entityIds>", "\u6279\u91CF entityId\uFF0C\u9017\u53F7\u5206\u9694\uFF08\u4E0E --id \u4E8C\u9009\u4E00\uFF0C\u53EF\u540C\u65F6\u4F20\uFF09").option("-t, --token <token>", "Auth Token").option("--verbose", "\u8BE6\u7EC6\u9519\u8BEF\u4FE1\u606F", false).action(
+    async (opts) => {
+      await runAccountReauth({
+        token: opts.token,
+        media: opts.media,
+        id: opts.id,
+        ids: opts.ids ? opts.ids.split(",").map((s) => s.trim()).filter(Boolean) : void 0,
+        verbose: opts.verbose
+      });
+    }
+  );
   accountCmd.command("mcc-bind").description("Google\uFF1A\u5C06\u5B50\u8D26\u6237\u7ED1\u5B9A\u5230\u7ECF\u7406\u8D26\u6237\uFF08MCC\uFF09\uFF0C\u9700\u5DF2\u914D\u7F6E googleApiUrl").requiredOption(
     "--customers <ids>",
     "\u5B50\u8D26\u6237 mediaCustomerId\uFF0C\u591A\u4E2A\u9017\u53F7\u5206\u9694\uFF08\u6765\u81EA list-accounts \u7684 ma.mediaCustomerId\uFF09"

package/dist/skill/_meta.json

@@ -1,5 +1,5 @@
 {
   "slug": "siluzan-tso",
-  "version": "1.1.32",
-  "publishedAt": 1782807133114
+  "version": "1.1.33-beta.2",
+  "publishedAt": 1782876066592
 }

package/dist/skill/references/accounts/accounts.md

@@ -280,7 +280,7 @@ siluzan-tso account-history --start 2026-03-01 --end 2026-03-31 --json-out ./sna
 | 状态       | 含义     | 下一步操作                                                                                                                                                                                                                                           |
 | ---------- | -------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | `Pending`  | 审核中   | 等待，可反复运行此命令轮询；审核周期因媒体而异                                                                                                                                                                                                       |
-| `Approved` | 审核通过 | 运行 `list-accounts -m <媒体>` 确认账户已出现；引导用户充值激活（`config show` 取 `webUrl`，按 `finance.md` 打开对应媒体充值页；例如 Google 为 `https://www.siluzan.com/v3/foreign_trade/tso/recharge/pay?mediaType=Google`；Kwai、Yandex 当前没有对应充值界面） |
+| `Approved` | 审核通过 | 运行 `list-accounts -m <媒体>` 确认账户已出现；引导用户充值激活（`config show` 取 `webUrl`，按 `finance.md` 打开对应媒体充值页；例如 Google 为 `https://www-ci.siluzan.com/v3/foreign_trade/tso/recharge/pay?mediaType=Google`；Kwai、Yandex 当前没有对应充值界面） |
 | `Rejected` | 被拒     | 查看 `--json-out` 落盘中的 `reason` 字段了解拒绝原因；修改资料后重新提交；若原因不明，引导用户联系丝路赞客服                                                                                                                                         |
 
 ---
@@ -307,9 +307,11 @@ siluzan-tso account me --check-phone 15130150466 --json-out ./snap-me
 
 ---
 
-### auth — 添加媒体平台 OAuth 授权
+### auth — 添加媒体平台 OAuth 授权（首次绑定）
 
-在浏览器中打开对应媒体的 OAuth 授权页面，授权后账户自动绑定到丝路赞。
+在浏览器中打开对应媒体的 OAuth 授权页面，授权后账户自动绑定到丝路赞。对应网页 **「添加授权」**。
+
+> **OAuth 已失效**（`invalidOAuthToken=true`）时**不要**用本命令，须走下方 **`reauth`**（重新授权必须先解绑）。
 
 ```bash
 siluzan-tso account auth -m <媒体类型>
@@ -322,13 +324,13 @@ siluzan-tso account auth -m <媒体类型>
 **示例：**
 
 ```bash
-# 授权 Google Ads 账户
+# 首次授权 Google Ads 账户
 siluzan-tso account auth -m Google
 
-# 授权 TikTok Ads 账户
+# 首次授权 TikTok Ads 账户
 siluzan-tso account auth -m TikTok
 
-# 授权 Meta（Facebook）Ads 账户
+# 首次授权 Meta（Facebook）Ads 账户
 siluzan-tso account auth -m Meta
 ```
 
@@ -336,6 +338,38 @@ siluzan-tso account auth -m Meta
 
 ---
 
+### reauth — 重新授权（先解绑再 OAuth）
+
+OAuth 失效时恢复授权。对齐 TSO 网页 **「重新授权」**：程序会先 **delink** 断开关联，再跳转媒体 OAuth。**禁止**对失效账户跳过解绑直接用 `account auth`。
+
+```bash
+siluzan-tso account reauth -m <媒体类型> --id <entityId>
+siluzan-tso account reauth -m Google --ids <id1,id2>
+```
+
+| 选项                 | 说明                                                                     |
+| -------------------- | ------------------------------------------------------------------------ |
+| `-m, --media <type>` | 媒体类型（必填）                                                         |
+| `--id <entityId>`    | 单个账户 `entityId`（来自 `list-accounts` 的 `ma.entityId`）             |
+| `--ids <id1,id2>`    | 批量 `entityId`，逗号分隔（与 `--id` 二选一）                            |
+
+**示例：**
+
+```bash
+# 1. 查失效账户的 entityId
+siluzan-tso list-accounts -m Google --json-out ./snap
+
+# 2. 重新授权（内置 delink → OAuth）
+siluzan-tso account reauth -m Google --id abc123def456
+
+# 3. 验证
+siluzan-tso list-accounts -m Google
+```
+
+> 手动两步等价于 `reauth`：`account delink --id …` → `account auth -m …`（须用户确认解绑风险）。
+
+---
+
 ### delink — 解除授权 / 断开账户关联
 
 从当前丝路赞账号下移除媒体账户绑定。
@@ -854,7 +888,7 @@ siluzan-tso account email-deauth -c <mediaCustomerId> --invitation-id <id> --res
 
 | 功能                                    | 媒体   | 网页路径                                          |
 | --------------------------------------- | ------ | ------------------------------------------------- |
-| **账户激活**（邀请他人激活 / 充值激活） | Google | `https://www.siluzan.com/v3/foreign_trade/tso/manageAccounts` |
+| **账户激活**（邀请他人激活 / 充值激活） | Google | `https://www-ci.siluzan.com/v3/foreign_trade/tso/manageAccounts` |
 
 **Agent 建议话术**：
 
@@ -863,5 +897,5 @@ siluzan-tso account email-deauth -c <mediaCustomerId> --invitation-id <id> --res
 siluzan-tso config show   # 查看 webUrl 字段
 
 # 账户激活（Google）→ 引导至账户管理页
-# https://www.siluzan.com/v3/foreign_trade/tso/manageAccounts
+# https://www-ci.siluzan.com/v3/foreign_trade/tso/manageAccounts
 ```

package/dist/skill/references/accounts/finance.md

@@ -117,7 +117,7 @@ siluzan-tso config show
 
 ### 充值页链接（按媒体 × 类型）
 
-链接模式：`https://www.siluzan.com/v3/foreign_trade/tso/recharge/<page>?mediaType=<mediaType>`；丝路赞钱包：`https://www.siluzan.com/v3/foreign_trade/tso/recharge/siluzanWallet`（无媒体参数）。
+链接模式：`https://www-ci.siluzan.com/v3/foreign_trade/tso/recharge/<page>?mediaType=<mediaType>`；丝路赞钱包：`https://www-ci.siluzan.com/v3/foreign_trade/tso/recharge/siluzanWallet`（无媒体参数）。
 
 | 充值类型                  | `<page>`              | 支持媒体（`mediaType` 参数）                |
 | ------------------------- | --------------------- | ------------------------------------------- |

package/dist/skill/references/accounts/open-account-by-media.md

@@ -1,6 +1,6 @@
 # 各媒体开户
 
-> 网页链接：`https://www.siluzan.com/v3/foreign_trade/tso/accountOpeningHistory?tso=%2Fv3umijs%2Ftso%2FaccountOpeningHistory`  
+> 网页链接：`https://www-ci.siluzan.com/v3/foreign_trade/tso/accountOpeningHistory?tso=%2Fv3umijs%2Ftso%2FaccountOpeningHistory`  
 > 多命令串联见 `references/core/workflows.md` § 流程一。
 
 ## 首次响应硬规范（必读）

package/dist/skill/references/accounts/open-account-google-ui.md

@@ -60,7 +60,7 @@ siluzan-tso open-account google-wizard
 
 ```bash
 siluzan-tso account-history -m Google
-# 审核通过后：config show → https://www.siluzan.com/v3/foreign_trade/tso/recharge/pay?mediaType=Google
+# 审核通过后：config show → https://www-ci.siluzan.com/v3/foreign_trade/tso/recharge/pay?mediaType=Google
 ```
 
 ---

package/dist/skill/references/analytics/rag.md

@@ -1,6 +1,6 @@
 # rag：知识库检索（TSO 广告投放辅助）
 
-知识库管理页面在 https://www.siluzan.com/knowledge-base/
+知识库管理页面在 https://www-ci.siluzan.com/knowledge-base/
 
 为 **广告投放、账户分析、拓词、诊断报告** 等 TSO 业务提供**企业已入库**的产品、行业、客户背景事实依据。
 

package/dist/skill/references/analytics/reporting.md

@@ -192,9 +192,9 @@ siluzan-tso report push receive-emails -m Google [--json-out ./snap]
 
 | 媒体   | 报告类型         | URL 模板                                                    |
 | ------ | ---------------- | ----------------------------------------------------------- |
-| Google | 日报（Daily）    | `https://www.siluzan.com/media-report/publish/{entityId}?culture=zh-CN` |
-| Google | 小时报（Hourly） | `https://www.siluzan.com/media-report/hour/{entityId}?culture=zh-CN`    |
-| TikTok | 日报             | `https://www.siluzan.com/media-report/publish/{entityId}?culture=zh-CN` |
+| Google | 日报（Daily）    | `https://www-ci.siluzan.com/media-report/publish/{entityId}?culture=zh-CN` |
+| Google | 小时报（Hourly） | `https://www-ci.siluzan.com/media-report/hour/{entityId}?culture=zh-CN`    |
+| TikTok | 日报             | `https://www-ci.siluzan.com/media-report/publish/{entityId}?culture=zh-CN` |
 
 `entityId` 来自 `siluzan-tso report list --json-out ./snap` 中每条记录的 `entityId` 字段。
 
@@ -207,8 +207,8 @@ siluzan-tso report list -m Google --json-out ./snap
 
 # 第二步：查看 webUrl
 siluzan-tso config show
-# webUrl: https://www.siluzan.com
+# webUrl: https://www-ci.siluzan.com
 
 # 第三步：拼接链接（Google 日报）
-# https://www.siluzan.com/media-report/publish/rpt_abc123?culture=zh-CN
+# https://www-ci.siluzan.com/media-report/publish/rpt_abc123?culture=zh-CN
 ```

package/dist/skill/references/core/agent-conventions.md

@@ -219,7 +219,7 @@
 ## 十一、常见 HTTP 状态码
 
 - **400**：参数错误，查看对应 reference 或 `-h`
-- **401**：平台方返回则需用户重新授权；**我方凭据失效**则优先 `send-login-code` + `login --phone --code`，见 `references/core/setup.md`
+- **401**：媒体 OAuth 失效 → `account reauth -m <媒体> --id <entityId>`（须先 delink，见 W9）；**丝路赞登录凭据失效** → `send-login-code` + `login --phone --code`，见 `references/core/setup.md`
 - **500**：服务可能正在部署/升级，建议反馈 Siluzan 相关人员
 
 ---

package/dist/skill/references/core/setup.md

@@ -10,7 +10,7 @@
 ## 安装 CLI
 
 ```bash
-npm install -g siluzan-tso-cli
+npm install -g siluzan-tso-cli@beta
 ```
 
 ---
@@ -64,7 +64,7 @@ siluzan-tso config set --api-key <Key>               # 或 config 直接写入
 siluzan-tso config set --token <Token>               # 备用：设置 JWT Token
 ```
 
-API Key 获取入口：`https://www.siluzan.com/v3/foreign_trade/settings/apiKeyManagement`
+API Key 获取入口：`https://www-ci.siluzan.com/v3/foreign_trade/settings/apiKeyManagement`
 
 ```bash
 # 第 1 步：让用户报出手机号后，立刻发码（命令立即返回，不会等待输入）
@@ -129,9 +129,9 @@ siluzan-tso config show
 
 ```
   构建环境     : production
-  apiBaseUrl   : https://tso-api.siluzan.com
-  googleApiUrl : https://googleapi.mysiluzan.com
-  webUrl       : https://www.siluzan.com
+  apiBaseUrl   : https://tso-api-ci.siluzan.com
+  googleApiUrl : https://googleapi-ci.mysiluzan.com
+  webUrl       : https://www-ci.siluzan.com
   apiKey       : abcd****1234
 ```
 

package/dist/skill/references/core/workflows.md

@@ -152,7 +152,8 @@
 - **步骤（按场景）**：
   - **分享**：`list-accounts --json-out` 取 `entityId` → `account share --id <entityId> --phone <手机号>`；查 `account share-detail --customer-id <mediaCustomerId>`；取消 `account unshare --id <entityId> --account-id <userId>`。
   - **解绑**：`account delink --id <entityId>` / `--ids id1,id2`。
-  - **OAuth 重授权**：`invalidOAuthToken=true` → `account auth -m <媒体>`（浏览器授权）→ `list-accounts` 验证。
+  - **OAuth 重授权**：`invalidOAuthToken=true` → `list-accounts --json-out` 取 `ma.entityId` → **`account reauth -m <媒体> --id <entityId>`**（内置先 delink 再 OAuth，对齐网页「重新授权」）→ `list-accounts` 验证。**禁止**对失效账户直接用 `account auth`（首次「添加授权」专用）。
+  - **首次 OAuth 添加授权**：`account auth -m <媒体>`（无需先 delink）。
   - **MCC**：`account mcc-bind --customers <mediaCustomerId,...> --mcc <MCC客户ID>` / `mcc-unbind`（走 `googleApiUrl`，先 `config show`）。
   - **BC（TikTok）**：`account bc-bind --customers <id> --bc-ids <id>` / `bc-unbind --bc-id <id>`（解绑一次一个）。
   - **BM（Meta）**：`account bm-bind --account-id <mediaCustomerId> --bm-id <bmId>`。

package/dist/skill/references/misc/tso-home.md

@@ -6,7 +6,7 @@
 siluzan-tso config show   # 取 webUrl
 ```
 
-首页地址：`https://www.siluzan.com/v3/foreign_trade/tso/home`
+首页地址：`https://www-ci.siluzan.com/v3/foreign_trade/tso/home`
 
 ---
 
@@ -25,7 +25,7 @@ siluzan-tso config show   # 取 webUrl
 
 ## 推荐话术
 
-1. **「和首页一样的总览」** → 打开 `https://www.siluzan.com/v3/foreign_trade/tso/home`。
+1. **「和首页一样的总览」** → 打开 `https://www-ci.siluzan.com/v3/foreign_trade/tso/home`。
 2. **「某个 Google 账户昨天花了多少」** → `list-accounts -m Google` + `stats -m Google -a <id>`。
 3. **「有待充值账户」** → 说明聚合数据在首页；CLI 可 `list-accounts` + `balance` 逐户排查，或引导充值页。
 

package/dist/skill/references/report-templates/bing-period-report.md

@@ -18,6 +18,7 @@
 ## 1. 执行摘要（总览）
 
 - **CLI**：`siluzan-tso report bing-overview -a <mediaCustomerId> [--start … --end …] --json-out <dir>`
+- **余额**：若 `OverviewSectionData` 误返 `remainingAccountBudget: 0`，CLI 会自动用 `GetMediaAccountInfo` 实时余额回填（与 Web 账户列表一致）；**仍建议**单查余额用 `balance -m BingV2`。
 
 ## 2. 设备与地域
 

package/dist/skill/report-templates/bing-period-report.md

@@ -18,6 +18,7 @@
 ## 1. 执行摘要（总览）
 
 - **CLI**：`siluzan-tso report bing-overview -a <mediaCustomerId> [--start … --end …] --json-out <dir>`
+- **余额**：若 `OverviewSectionData` 误返 `remainingAccountBudget: 0`，CLI 会自动用 `GetMediaAccountInfo` 实时余额回填（与 Web 账户列表一致）；**仍建议**单查余额用 `balance -m BingV2`。
 
 ## 2. 设备与地域
 

package/dist/skill/scripts/install.ps1

@@ -9,11 +9,11 @@ $ErrorActionPreference = 'Stop'
 # -- Package info (injected at build time) ------------------------------------
 $PKG_NAME    = 'siluzan-tso-cli'
 # PKG_VERSION 锁定到与本脚本同批构建产物一致的版本，避免与 dist/skill 错位
-$PKG_VERSION = '1.1.32'
+$PKG_VERSION = '1.1.33-beta.2'
 $CLI_BIN     = 'siluzan-tso'
 $SKILL_LABEL = 'Siluzan TSO'
-$INSTALL_CMD = 'npm install -g siluzan-tso-cli'
-$WEB_BASE    = 'https://www.siluzan.com'
+$INSTALL_CMD = 'npm install -g siluzan-tso-cli@beta'
+$WEB_BASE    = 'https://www-ci.siluzan.com'
 
 # -- Constants ----------------------------------------------------------------
 $NODE_MAJOR_MIN    = 18

package/dist/skill/scripts/install.sh

@@ -9,11 +9,11 @@ set -euo pipefail
 # -- Package info (injected at build time) ------------------------------------
 readonly PKG_NAME="siluzan-tso-cli"
 # PKG_VERSION 锁定到与本脚本同批构建产物一致的版本，避免与 dist/skill 错位
-readonly PKG_VERSION="1.1.32"
+readonly PKG_VERSION="1.1.33-beta.2"
 readonly CLI_BIN="siluzan-tso"
 readonly SKILL_LABEL="Siluzan TSO"
-readonly INSTALL_CMD="npm install -g siluzan-tso-cli"
-readonly WEB_BASE="https://www.siluzan.com"
+readonly INSTALL_CMD="npm install -g siluzan-tso-cli@beta"
+readonly WEB_BASE="https://www-ci.siluzan.com"
 
 # -- Constants ----------------------------------------------------------------
 readonly NODE_MAJOR_MIN=18

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "siluzan-tso-cli",
-  "version": "1.1.32",
+  "version": "1.1.33-beta.2",
   "description": "Siluzan 广告账户管理 CLI — 查询账户、余额、消耗数据，管理绑定关系与充值。",
   "keywords": [
     "ad-account",