star8-cli 1.4.0 → 1.5.0

package/dist/index.js

@@ -16,6 +16,21 @@ function redactSensitiveValues(value) {
     SENSITIVE_FIELD_PATTERN.test(key) ? "[REDACTED]" : redactSensitiveValues(child)
   ]));
 }
+function retryAfterSeconds(response) {
+  if (response.status !== 429)
+    return void 0;
+  const value = response.headers.get("retry-after");
+  if (value === null || !/^\d+$/.test(value))
+    return void 0;
+  const seconds = Number(value);
+  if (!Number.isSafeInteger(seconds))
+    return void 0;
+  return seconds;
+}
+function retryAfterGuidance(response) {
+  const seconds = retryAfterSeconds(response);
+  return seconds === void 0 ? void 0 : `\u518D\u8A66\u884C\u307E\u3067\u306E\u76EE\u5B89: ${seconds}\u79D2`;
+}
 var ApiError = class extends Error {
   httpStatus;
   errorCode;
@@ -761,6 +776,78 @@ var ApiClient = class {
     return this.put(`${this.wphostingSitePath(contractId2, servername2)}/security/${enc(key)}`, data);
   }
   // ================================================================
+  // VPS API（/v1/vps）
+  // ================================================================
+  vpsServerPath(uuid) {
+    return `/v1/vps/servers/${enc(uuid)}`;
+  }
+  async listVpsServers() {
+    return this.get("/v1/vps/servers");
+  }
+  async getVpsServer(uuid) {
+    return this.get(this.vpsServerPath(uuid));
+  }
+  async updateVpsMemo(uuid, data) {
+    return this.put(`${this.vpsServerPath(uuid)}/memo`, data);
+  }
+  async updateVpsName(uuid, data) {
+    return this.put(`${this.vpsServerPath(uuid)}/name`, data);
+  }
+  async updateVpsReverseDns(uuid, data) {
+    return this.put(`${this.vpsServerPath(uuid)}/reverse-dns`, data);
+  }
+  async getVpsPower(uuid) {
+    return this.get(`${this.vpsServerPath(uuid)}/power`);
+  }
+  async startVpsPower(uuid) {
+    return this.post(`${this.vpsServerPath(uuid)}/power/start`);
+  }
+  async rebootVpsPower(uuid, data) {
+    return this.post(`${this.vpsServerPath(uuid)}/power/reboot`, data);
+  }
+  async stopVpsPower(uuid) {
+    return this.post(`${this.vpsServerPath(uuid)}/power/stop`);
+  }
+  async getVpsPacketFilter(uuid) {
+    return this.get(`${this.vpsServerPath(uuid)}/packet-filter`);
+  }
+  async updateVpsPacketFilter(uuid, data) {
+    return this.put(`${this.vpsServerPath(uuid)}/packet-filter`, data);
+  }
+  async addVpsPacketFilterRule(uuid, data) {
+    return this.post(`${this.vpsServerPath(uuid)}/packet-filter/rules`, data);
+  }
+  async updateVpsPacketFilterRule(uuid, ruleId, data) {
+    return this.put(`${this.vpsServerPath(uuid)}/packet-filter/rules/${enc(ruleId)}`, data);
+  }
+  async deleteVpsPacketFilterRule(uuid, ruleId) {
+    return this.delete(`${this.vpsServerPath(uuid)}/packet-filter/rules/${enc(ruleId)}`);
+  }
+  async listVpsOsImages(uuid) {
+    return this.get(`${this.vpsServerPath(uuid)}/os-images`);
+  }
+  async reinstallVpsOs(uuid, data) {
+    return this.post(`${this.vpsServerPath(uuid)}/os-reinstall`, data);
+  }
+  async getVpsOsReinstall(uuid) {
+    return this.get(`${this.vpsServerPath(uuid)}/os-reinstall`);
+  }
+  async getVpsProtection(uuid) {
+    return this.get(`${this.vpsServerPath(uuid)}/protection`);
+  }
+  async updateVpsProtection(uuid, data) {
+    return this.put(`${this.vpsServerPath(uuid)}/protection`, data);
+  }
+  async listVpsPlans() {
+    return this.get("/v1/vps/plans");
+  }
+  async registerVps(data, idempotencyKey) {
+    return this.post("/v1/vps/servers", data, idempotencyHeaders(idempotencyKey));
+  }
+  async getVpsSignupStatus(id) {
+    return this.get(`/v1/vps/signup-status/${enc(id)}`);
+  }
+  // ================================================================
   // HTTP 基盤
   // ================================================================
   async get(path2, params) {
@@ -811,12 +898,23 @@ var ApiClient = class {
       const dbg = (msg) => process.stderr.write(`[DEBUG] ${msg}
 `);
       dbg(`HTTP ${response.status} ${response.statusText}`);
-      const debugHeaders = ["x-ratelimit-limit", "x-ratelimit-remaining", "x-ratelimit-reset", "x-concurrent-limit", "x-concurrent-remaining", "content-type"];
+      const debugHeaders = [
+        "x-ratelimit-limit",
+        "x-ratelimit-remaining",
+        "x-ratelimit-reset",
+        "x-concurrent-limit",
+        "x-concurrent-remaining",
+        "content-type",
+        "location"
+      ];
       for (const h of debugHeaders) {
         const v = response.headers.get(h);
         if (v !== null)
           dbg(`  ${h}: ${v}`);
       }
+      const retryAfter = retryAfterSeconds(response);
+      if (retryAfter !== void 0)
+        dbg(`  retry-after: ${retryAfter}`);
     }
     const rateLimitHeader = response.headers.get("x-ratelimit-limit");
     if (rateLimitHeader) {
@@ -827,12 +925,17 @@ var ApiClient = class {
       };
     }
     const text = await response.text();
+    if (response.status === 202 && text.trim() === "") {
+      const location = response.headers.get("location");
+      return { accepted: true, location };
+    }
     let data;
     try {
       data = JSON.parse(text);
     } catch {
       if (this.debug) {
-        process.stderr.write(`[DEBUG] Raw response: ${text.substring(0, 500)}
+        const bodyBytes = Buffer.byteLength(text, "utf8");
+        process.stderr.write(`[DEBUG] Response body omitted because it is not valid JSON (${bodyBytes} bytes)
 `);
       }
       throw new ApiError(`Response parse error (HTTP ${response.status})`, response.status, "PARSE_ERROR", []);
@@ -841,7 +944,10 @@ var ApiClient = class {
       const err = data;
       const errorCode = err?.error?.code || "UNKNOWN_ERROR";
       const errorMessage = err?.error?.message || "\u30A8\u30E9\u30FC\u304C\u767A\u751F\u3057\u307E\u3057\u305F";
-      const errors = err?.error?.errors || [];
+      const errors = [...err?.error?.errors || []];
+      const retryGuidance = retryAfterGuidance(response);
+      if (retryGuidance)
+        errors.push(retryGuidance);
       throw new ApiError(errorMessage, response.status, errorCode, errors);
     }
     return data;
@@ -933,6 +1039,13 @@ function compactDetails(details) {
 
 // ../../shared/dist/brand-config.js
 function resolveServerPlanBrand(brand, service, planId) {
+  if (service === "vps") {
+    return {
+      serviceName: brand.vpsServiceName,
+      termsUrl: brand.vpsTermsUrl,
+      privacyUrl: brand.vpsPrivacyUrl
+    };
+  }
   if (service === "server" && planId !== void 0) {
     const override = brand.serverPlanOverrides?.find((o) => planId.startsWith(o.planIdPrefix));
     if (override !== void 0) {
@@ -1347,6 +1460,62 @@ async function confirmDestructiveAction(cmd, message) {
     process.exit(1);
   }
 }
+function osReinstallPhrase(uuid) {
+  return `${uuid} \u306EOS\u518D\u30A4\u30F3\u30B9\u30C8\u30FC\u30EB\u3092\u627F\u8A8D`;
+}
+function vpsOsImageName(response, imageId) {
+  const images = Array.isArray(response) ? response : typeof response === "object" && response !== null ? response.os_images : void 0;
+  if (!Array.isArray(images))
+    return void 0;
+  const image = images.find((candidate) => typeof candidate === "object" && candidate !== null && candidate.image_id === imageId);
+  return typeof image?.name === "string" && image.name.length > 0 ? image.name : void 0;
+}
+function osReinstallConfirmationMessage(uuid, imageId, imageName) {
+  const phrase = osReinstallPhrase(uuid);
+  return [
+    "OS\u518D\u30A4\u30F3\u30B9\u30C8\u30FC\u30EB\u306F\u30B5\u30FC\u30D0\u30FC\u5185\u306E\u30C7\u30FC\u30BF\u30FB\u8A2D\u5B9A\u3092\u3059\u3079\u3066\u524A\u9664\u3057\u307E\u3059\u3002",
+    `\u5BFE\u8C61 uuid: ${uuid}`,
+    `\u30A4\u30E1\u30FC\u30B8ID: ${imageId}`,
+    `OS\u30A4\u30E1\u30FC\u30B8: ${imageName}`,
+    "\u8AA4\u64CD\u4F5C\u9632\u6B62: vps protection get/set \u3067 API \u304B\u3089\u306E\u518D\u30A4\u30F3\u30B9\u30C8\u30FC\u30EB\u3092\u62D2\u5426\u3067\u304D\u307E\u3059\u3002",
+    `\u7D9A\u884C\u3059\u308B\u5834\u5408\u306F\u6B21\u3092\u6B63\u78BA\u306B\u5165\u529B\u3057\u3066\u304F\u3060\u3055\u3044: ${phrase}`,
+    ""
+  ].join("\n");
+}
+function isInteractiveTerminal() {
+  return !!(input.isTTY && output.isTTY);
+}
+function hasYesFlag(cmd) {
+  const root = findRoot(cmd);
+  return !!(root.opts().yes || process.argv.includes("--yes") || process.argv.includes("-y"));
+}
+async function confirmOsReinstall(cmd, uuid, confirmReinstall, imageId, imageName, io = { input, output }) {
+  if (!confirmReinstall) {
+    throw new Error("OS\u518D\u30A4\u30F3\u30B9\u30C8\u30FC\u30EB\u306B\u306F --confirm-reinstall \u304C\u5FC5\u8981\u3067\u3059\uFF08--yes \u5358\u72EC\u3067\u306F\u5B9F\u884C\u3067\u304D\u307E\u305B\u3093\uFF09\u3002\u8AA4\u64CD\u4F5C\u9632\u6B62\u306B\u306F vps protection set \u3067 os_reinstall \u3092\u6709\u52B9\u306B\u3067\u304D\u307E\u3059\u3002");
+  }
+  const tty = !!(io.input.isTTY && io.output.isTTY);
+  if (!tty) {
+    if (!hasYesFlag(cmd)) {
+      throw new Error("\u975E\u5BFE\u8A71\u3067\u306EOS\u518D\u30A4\u30F3\u30B9\u30C8\u30FC\u30EB\u306B\u306F --yes \u3068 --confirm-reinstall \u306E\u4E21\u65B9\u304C\u5FC5\u8981\u3067\u3059\u3002");
+    }
+    return;
+  }
+  const phrase = osReinstallPhrase(uuid);
+  io.output.write(osReinstallConfirmationMessage(uuid, imageId, imageName));
+  const rl = createInterface({
+    input: io.input,
+    output: io.output,
+    terminal: true
+  });
+  try {
+    const answer = (await rl.question("> ")).trim();
+    if (answer !== phrase) {
+      throw new BillingCancelledError("\u78BA\u8A8D\u6587\u5B57\u5217\u304C\u4E00\u81F4\u3057\u306A\u3044\u305F\u3081\u3001OS\u518D\u30A4\u30F3\u30B9\u30C8\u30FC\u30EB\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F\u3002");
+    }
+  } finally {
+    rl.close();
+  }
+}
 var defaultBillingConfirmationIo = { input, output };
 function billingPurchasePhrase(subject, totalPrice) {
   return `${subject} \u3092\u7A0E\u8FBC${formatYen(totalPrice)}\u3067\u627F\u8A8D`;
@@ -1485,11 +1654,19 @@ function pickDefined(obj) {
   return result;
 }
 
+// ../core/dist/lib/terminal-output.js
+import { stripVTControlCharacters } from "util";
+var LINE_BREAK_PATTERN = /[\r\n\u2028\u2029]+/g;
+var CONTROL_CHARACTER_PATTERN = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f]/g;
+function sanitizeTerminalText(value) {
+  return stripVTControlCharacters(String(value)).replace(LINE_BREAK_PATTERN, " ").replace(CONTROL_CHARACTER_PATTERN, "");
+}
+
 // ../core/dist/commands/auth/login.js
 import { password, select } from "@inquirer/prompts";
 
 // ../core/dist/lib/auth-service-info.js
-var SERVICE_ORDER = ["server", "domain", "wphosting"];
+var SERVICE_ORDER = ["server", "domain", "wphosting", "vps"];
 var NO_DEFAULT_SERVER = "__XSERVER_NO_DEFAULT_SERVER__";
 function servernameChoices(targets) {
   return [
@@ -1525,6 +1702,9 @@ function parseAuthApiKeyInfo(meData) {
     if (name === "domain" && typeof block.allow_acquisition === "boolean") {
       service.allowAcquisition = block.allow_acquisition;
     }
+    if ((name === "server" || name === "wphosting" || name === "vps") && typeof block.allow_signup === "boolean") {
+      service.allowSignup = block.allow_signup;
+    }
     if (name === "wphosting") {
       service.siteTargetMode = stringValue(block.site_target_mode, "unknown");
       service.sites = strings(block.sites);
@@ -1548,19 +1728,30 @@ function permissionLabel(value) {
     return "\u30AB\u30B9\u30BF\u30E0";
   return value === "unknown" ? "\u4E0D\u660E" : value;
 }
+function serviceLabel(name) {
+  if (name === "server")
+    return "Server";
+  if (name === "domain")
+    return "Domain";
+  if (name === "wphosting")
+    return "XServer for WordPress";
+  return "VPS";
+}
+function targetLabel(name) {
+  if (name === "server")
+    return "\u5BFE\u8C61\u30B5\u30FC\u30D0\u30FC";
+  if (name === "wphosting")
+    return "\u5BFE\u8C61\u5951\u7D04";
+  if (name === "vps")
+    return "\u5BFE\u8C61VPS";
+  return "\u5BFE\u8C61\u30C9\u30E1\u30A4\u30F3";
+}
 function targetLines(service) {
-  if (service.name === "wphosting") {
-    if (service.targetMode === "all")
-      return ["    \u5BFE\u8C61\u5951\u7D04: \u3059\u3079\u3066"];
-    return ["    \u5BFE\u8C61\u5951\u7D04:", ...service.targets.map((target) => `      - ${target}`)];
-  }
-  const label = service.name === "server" ? "\u5BFE\u8C61\u30B5\u30FC\u30D0\u30FC" : "\u5BFE\u8C61\u30C9\u30E1\u30A4\u30F3";
+  const label = targetLabel(service.name);
   if (service.targetMode === "all") {
     return [`    ${label}: \u3059\u3079\u3066`];
   }
-  const lines = [`    ${label}:`];
-  lines.push(...service.targets.map((target) => `      - ${target}`));
-  return lines;
+  return [`    ${label}:`, ...service.targets.map((target) => `      - ${target}`)];
 }
 function siteTargetLines(service) {
   if (service.name !== "wphosting")
@@ -1576,14 +1767,16 @@ function formatAuthApiKeyInfo(info) {
     lines.push("  \u306A\u3057");
   }
   for (const service of info.services) {
-    const label = service.name === "server" ? "Server" : service.name === "domain" ? "Domain" : "XServer for WordPress";
-    lines.push(`  ${label}`);
+    lines.push(`  ${serviceLabel(service.name)}`);
     lines.push(`    \u6A29\u9650: ${permissionLabel(service.permissionType)}`);
     lines.push(...targetLines(service));
     lines.push(...siteTargetLines(service));
     if (service.name === "domain" && service.allowAcquisition !== void 0) {
       lines.push(`    \u53D6\u5F97\u30FB\u79FB\u7BA1\u30FB\u66F4\u65B0: ${service.allowAcquisition ? "\u8A31\u53EF\u3055\u308C\u3066\u3044\u307E\u3059" : "\u8A31\u53EF\u3055\u308C\u3066\u3044\u307E\u305B\u3093"}`);
     }
+    if (service.allowSignup !== void 0) {
+      lines.push(`    \u65B0\u898F\u304A\u7533\u3057\u8FBC\u307F: ${service.allowSignup ? "\u8A31\u53EF\u3055\u308C\u3066\u3044\u307E\u3059" : "\u8A31\u53EF\u3055\u308C\u3066\u3044\u307E\u305B\u3093"}`);
+    }
   }
   if (info.expiresAt) {
     lines.push("", `API\u30AD\u30FC\u6709\u52B9\u671F\u9650: ${info.expiresAt}`);
@@ -3965,6 +4158,234 @@ function registerWphostingAccountCommands(parent, brand) {
   });
 }
 
+// ../core/dist/lib/vps-validation.js
+var UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var PACKET_FILTER_TYPES = [
+  "ssh",
+  "web",
+  "web_http",
+  "mysql",
+  "postgresql",
+  "mail",
+  "rdp",
+  "custom"
+];
+var PACKET_FILTER_PROTOCOLS = ["tcp", "udp", "icmp"];
+function isVpsSupportedBrand(brand) {
+  return brand.brand === "xserver" || brand.brand === "shincloud";
+}
+function validateVpsUuid(value, optionName = "uuid") {
+  if (!UUID_PATTERN.test(value)) {
+    throw new Error(`${optionName} \u306F uuid\uFF088-4-4-4-12 \u306E\u5341\u516D\u9032\uFF09\u3067\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044`);
+  }
+  return value;
+}
+function validateVpsSignupId(value) {
+  if (!/^[1-9]\d*$/.test(value)) {
+    throw new Error("\u7533\u8FBC\u72B6\u6CC1\u306E id \u306F\u6B63\u306E\u6574\u6570\uFF08\u30B5\u30FC\u30D3\u30B9\u30B3\u30FC\u30C9\uFF09\u3067\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044");
+  }
+  return value;
+}
+function validateVpsRuleId(value) {
+  if (!/^[1-9]\d*$/.test(value)) {
+    throw new Error("rule_id \u306F\u6B63\u306E\u6574\u6570\u3067\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044");
+  }
+  return value;
+}
+function parseVpsBoolean(value, optionName) {
+  return parseStrictBoolean(value, optionName);
+}
+function validateVpsPacketFilterType(value) {
+  if (!PACKET_FILTER_TYPES.includes(value)) {
+    throw new Error(`--type \u306F ${PACKET_FILTER_TYPES.join(" / ")} \u306E\u3044\u305A\u308C\u304B\u3092\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044`);
+  }
+  return value;
+}
+function validateVpsPacketFilterProtocol(value) {
+  if (!PACKET_FILTER_PROTOCOLS.includes(value)) {
+    throw new Error("--protocol \u306F tcp / udp / icmp \u306E\u3044\u305A\u308C\u304B\u3092\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044");
+  }
+  return value;
+}
+function validateVpsLength(value, optionName, maximum, minimum = 1) {
+  if (value.length < minimum || value.length > maximum) {
+    throw new Error(`${optionName} \u306F${minimum}\uFF5E${maximum}\u6587\u5B57\u3067\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044`);
+  }
+  return value;
+}
+
+// ../core/dist/commands/vps/index.js
+function uuidArg(uuid) {
+  return validateVpsUuid(uuid);
+}
+function registerVpsCommands(parent, brand) {
+  parent.command("list").description("VPS\u4E00\u89A7\u3092\u53D6\u5F97").action(async () => {
+    printResult(await resolveClient(parent, brand).listVpsServers(), getFormat(parent));
+  });
+  parent.command("info <uuid>").description("VPS\u8A73\u7D30\u3092\u53D6\u5F97").action(async (uuid) => {
+    printResult(await resolveClient(parent, brand).getVpsServer(uuidArg(uuid)), getFormat(parent));
+  });
+  const memo = parent.command("memo").description("VPS\u30E1\u30E2");
+  memo.command("update <uuid>").description("\u30E1\u30E2\u3092\u5909\u66F4\uFF08\u7A7A\u6587\u5B57\u3067\u524A\u9664\uFF09").requiredOption("--memo <memo>", "\u30E1\u30E2\uFF08\u6700\u5927500\u6587\u5B57\uFF09").action(async (uuid, opts) => {
+    printResult(await resolveClient(parent, brand).updateVpsMemo(uuidArg(uuid), {
+      memo: validateVpsLength(opts.memo, "--memo", 500, 0)
+    }), getFormat(parent));
+  });
+  const name = parent.command("name").description("VPS\u30B5\u30FC\u30D0\u30FC\u540D");
+  name.command("update <uuid>").description("\u30B5\u30FC\u30D0\u30FC\u540D\u3092\u5909\u66F4").requiredOption("--name <name>", "\u30B5\u30FC\u30D0\u30FC\u540D\uFF08\u6700\u592750\u6587\u5B57\uFF09").action(async (uuid, opts) => {
+    printResult(await resolveClient(parent, brand).updateVpsName(uuidArg(uuid), {
+      name: validateVpsLength(opts.name, "--name", 50)
+    }), getFormat(parent));
+  });
+  const reverseDns = parent.command("reverse-dns").description("\u9006\u5F15\u304D\u30DB\u30B9\u30C8\u540D");
+  reverseDns.command("update <uuid>").description("\u9006\u5F15\u304D\u30DB\u30B9\u30C8\u540D\u3092\u5909\u66F4").requiredOption("--hostname <hostname>", "\u9006\u5F15\u304D\u30DB\u30B9\u30C8\u540D").action(async (uuid, opts) => {
+    printResult(await resolveClient(parent, brand).updateVpsReverseDns(uuidArg(uuid), {
+      hostname: validateVpsLength(opts.hostname, "--hostname", 253)
+    }), getFormat(parent));
+  });
+  const power = parent.command("power").description("\u96FB\u6E90\u64CD\u4F5C\uFF08start/reboot/stop \u306F 202 Accepted\u3002\u9032\u6357\u306F power status \u3067\u78BA\u8A8D\uFF09");
+  power.command("status <uuid>").description("\u96FB\u6E90\u72B6\u614B\u3092\u53D6\u5F97").action(async (uuid) => {
+    printResult(await resolveClient(parent, brand).getVpsPower(uuidArg(uuid)), getFormat(parent));
+  });
+  power.command("start <uuid>").description("VPS\u3092\u8D77\u52D5").action(async (uuid) => {
+    printResult(await resolveClient(parent, brand).startVpsPower(uuidArg(uuid)), getFormat(parent));
+  });
+  power.command("reboot <uuid>").description("VPS\u3092\u518D\u8D77\u52D5").option("--force", "\u5F37\u5236\u518D\u8D77\u52D5\uFF08\u96FB\u6E90\u65AD\u76F8\u5F53\u3002\u901A\u5E38\u306E\u518D\u8D77\u52D5\u3067\u5FDC\u7B54\u304C\u306A\u3044\u5834\u5408\uFF09").action(async (uuid, opts) => {
+    const id = uuidArg(uuid);
+    if (opts.force) {
+      await confirmDestructiveAction(parent, `VPS ${id} \u3092\u5F37\u5236\u518D\u8D77\u52D5\u3057\u307E\u3059\uFF08\u96FB\u6E90\u65AD\u76F8\u5F53\uFF09\u3002\u3088\u308D\u3057\u3044\u3067\u3059\u304B\uFF1F`);
+    }
+    printResult(await resolveClient(parent, brand).rebootVpsPower(id, opts.force ? { force: true } : void 0), getFormat(parent));
+  });
+  power.command("stop <uuid>").description("VPS\u3092\u505C\u6B62").action(async (uuid) => {
+    printResult(await resolveClient(parent, brand).stopVpsPower(uuidArg(uuid)), getFormat(parent));
+  });
+  const packetFilter = parent.command("packet-filter").description("\u30D1\u30B1\u30C3\u30C8\u30D5\u30A3\u30EB\u30BF\u30FC");
+  packetFilter.command("get <uuid>").description("\u30D1\u30B1\u30C3\u30C8\u30D5\u30A3\u30EB\u30BF\u30FC\u8A2D\u5B9A\u3092\u53D6\u5F97").action(async (uuid) => {
+    printResult(await resolveClient(parent, brand).getVpsPacketFilter(uuidArg(uuid)), getFormat(parent));
+  });
+  packetFilter.command("update <uuid>").description("\u30D1\u30B1\u30C3\u30C8\u30D5\u30A3\u30EB\u30BF\u30FC\u306E\u6709\u52B9/\u7121\u52B9\u3092\u5207\u66FF").requiredOption("--enabled <bool>", "true \u3067\u6709\u52B9 / false \u3067\u7121\u52B9").action(async (uuid, opts) => {
+    printResult(await resolveClient(parent, brand).updateVpsPacketFilter(uuidArg(uuid), {
+      enabled: parseVpsBoolean(opts.enabled, "--enabled")
+    }), getFormat(parent));
+  });
+  packetFilter.command("add-rule <uuid>").description("\u30EB\u30FC\u30EB\u3092\u8FFD\u52A0").requiredOption("--type <type>", "ssh / web / web_http / mysql / postgresql / mail / rdp / custom").option("--protocol <protocol>", "tcp / udp / icmp\uFF08custom \u306F\u5FC5\u9808\uFF09").option("--port <port>", "\u30DD\u30FC\u30C8\u307E\u305F\u306F\u7BC4\u56F2\uFF08custom \u306F icmp \u4EE5\u5916\u3067\u5FC5\u9808\uFF09").option("--allowed-ip <cidr>", "\u8A31\u53EF\u3059\u308B\u63A5\u7D9A\u5143\uFF08custom \u306E\u307F\uFF09").option("--memo <memo>", "\u30E1\u30E2\uFF08custom \u306E\u307F\uFF09").action(async (uuid, opts) => {
+    printResult(await resolveClient(parent, brand).addVpsPacketFilterRule(uuidArg(uuid), {
+      type: validateVpsPacketFilterType(opts.type),
+      ...pickDefined({
+        protocol: opts.protocol === void 0 ? void 0 : validateVpsPacketFilterProtocol(opts.protocol),
+        port: opts.port,
+        allowed_ip: opts.allowedIp,
+        memo: opts.memo
+      })
+    }), getFormat(parent));
+  });
+  packetFilter.command("update-rule <uuid> <ruleId>").description("\u30EB\u30FC\u30EB\u3092\u5909\u66F4").option("--protocol <protocol>", "tcp / udp / icmp").option("--port <port>", "\u30DD\u30FC\u30C8\u307E\u305F\u306F\u7BC4\u56F2").option("--allowed-ip <cidr>", "\u8A31\u53EF\u3059\u308B\u63A5\u7D9A\u5143").option("--memo <memo>", "\u30E1\u30E2").action(async (uuid, ruleId, opts) => {
+    const data = pickDefined({
+      protocol: opts.protocol === void 0 ? void 0 : validateVpsPacketFilterProtocol(opts.protocol),
+      port: opts.port,
+      allowed_ip: opts.allowedIp,
+      memo: opts.memo
+    });
+    if (Object.keys(data).length === 0) {
+      throw new Error("\u66F4\u65B0\u9805\u76EE\u30921\u3064\u4EE5\u4E0A\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044");
+    }
+    printResult(await resolveClient(parent, brand).updateVpsPacketFilterRule(uuidArg(uuid), validateVpsRuleId(ruleId), data), getFormat(parent));
+  });
+  packetFilter.command("delete-rule <uuid> <ruleId>").description("\u30EB\u30FC\u30EB\u3092\u524A\u9664").action(async (uuid, ruleId) => {
+    const id = validateVpsRuleId(ruleId);
+    await confirmDestructiveAction(parent, `\u30D1\u30B1\u30C3\u30C8\u30D5\u30A3\u30EB\u30BF\u30FC\u306E\u30EB\u30FC\u30EB ${id} \u3092\u524A\u9664\u3057\u307E\u3059\u3002\u3088\u308D\u3057\u3044\u3067\u3059\u304B\uFF1F`);
+    printResult(await resolveClient(parent, brand).deleteVpsPacketFilterRule(uuidArg(uuid), id), getFormat(parent));
+  });
+  parent.command("os-images").description("\u518D\u30A4\u30F3\u30B9\u30C8\u30FC\u30EB\u3067\u304D\u308B\u30A4\u30E1\u30FC\u30B8\u4E00\u89A7\u3092\u53D6\u5F97").argument("<uuid>", "VPS\u306E uuid").action(async (uuid) => {
+    printResult(await resolveClient(parent, brand).listVpsOsImages(uuidArg(uuid)), getFormat(parent));
+  });
+  const osReinstall = parent.command("os-reinstall").description("OS\u518D\u30A4\u30F3\u30B9\u30C8\u30FC\u30EB\uFF08\u30C7\u30FC\u30BF\u5168\u6D88\u53BB\u3002protection \u3067\u62D2\u5426\u3067\u304D\u307E\u3059\uFF09");
+  osReinstall.command("run <uuid>").description("OS\u3092\u518D\u30A4\u30F3\u30B9\u30C8\u30FC\u30EB\uFF08\u505C\u6B62\u4E2D\u306EVPS\u304C\u5BFE\u8C61\u3002--yes \u5358\u72EC\u3067\u306F\u5B9F\u884C\u4E0D\u53EF\uFF09").requiredOption("--image-id <id>", "\u30A4\u30E1\u30FC\u30B8ID\uFF08os-images \u306E image_id\uFF09").requiredOption("--root-password <password>", "\u7BA1\u7406\u8005\u30D1\u30B9\u30EF\u30FC\u30C9\uFF089\u301C70\u6587\u5B57\uFF09").option("--ssh-key-name <name>", "\u767B\u9332\u6E08\u307FSSH\u30AD\u30FC\u540D").option("--ssh-public-key <key>", "\u767B\u9332\u3059\u308B\u516C\u958B\u9375\uFF08ssh-key-name \u3068\u4F75\u7528\uFF09").option("--basic-password <password>", "\u7BA1\u7406\u30C4\u30FC\u30EBBasic\u8A8D\u8A3C\uFF08requires_basic_password \u306E\u30A4\u30E1\u30FC\u30B8\u306E\u307F\uFF09").option("--confirm-reinstall", "\u30C7\u30FC\u30BF\u5168\u6D88\u53BB\u3092\u627F\u8A8D\uFF08\u5FC5\u9808\u3002--yes \u3067\u306F\u7701\u7565\u4E0D\u53EF\uFF09").action(async (uuid, opts) => {
+    const id = uuidArg(uuid);
+    const rootPassword = validateVpsLength(opts.rootPassword, "--root-password", 70, 9);
+    const client2 = resolveClient(parent, brand);
+    let imageName = opts.imageId;
+    if (opts.confirmReinstall === true && isInteractiveTerminal()) {
+      imageName = vpsOsImageName(await client2.listVpsOsImages(id), opts.imageId) ?? "";
+      if (!imageName) {
+        throw new Error(`--image-id ${opts.imageId} \u306EOS\u30A4\u30E1\u30FC\u30B8\u540D\u3092\u53D6\u5F97\u3067\u304D\u306A\u3044\u305F\u3081\u3001\u518D\u30A4\u30F3\u30B9\u30C8\u30FC\u30EB\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F\u3002`);
+      }
+    }
+    await confirmOsReinstall(parent, id, opts.confirmReinstall === true, opts.imageId, imageName);
+    printResult(await client2.reinstallVpsOs(id, {
+      image_id: opts.imageId,
+      root_password: rootPassword,
+      ...pickDefined({
+        ssh_key_name: opts.sshKeyName,
+        ssh_public_key: opts.sshPublicKey,
+        basic_password: opts.basicPassword
+      })
+    }), getFormat(parent));
+  });
+  osReinstall.command("status <uuid>").description("OS\u518D\u30A4\u30F3\u30B9\u30C8\u30FC\u30EB\u306E\u72B6\u6CC1\u3092\u78BA\u8A8D").action(async (uuid) => {
+    printResult(await resolveClient(parent, brand).getVpsOsReinstall(uuidArg(uuid)), getFormat(parent));
+  });
+  const protection = parent.command("protection").description("\u64CD\u4F5C\u4FDD\u8B77\uFF08API\u304B\u3089\u306EOS\u518D\u30A4\u30F3\u30B9\u30C8\u30FC\u30EB\u3092VPS\u5358\u4F4D\u3067\u62D2\u5426\uFF09");
+  protection.command("get <uuid>").description("\u64CD\u4F5C\u4FDD\u8B77\u306E\u8A2D\u5B9A\u3092\u53D6\u5F97").action(async (uuid) => {
+    printResult(await resolveClient(parent, brand).getVpsProtection(uuidArg(uuid)), getFormat(parent));
+  });
+  protection.command("set <uuid>").description("\u64CD\u4F5C\u4FDD\u8B77\u306E\u8A2D\u5B9A\u3092\u5909\u66F4").requiredOption("--os-reinstall <bool>", "true \u3067\u518D\u30A4\u30F3\u30B9\u30C8\u30FC\u30EB\u3092\u62D2\u5426 / false \u3067\u89E3\u9664").action(async (uuid, opts) => {
+    printResult(await resolveClient(parent, brand).updateVpsProtection(uuidArg(uuid), {
+      os_reinstall: parseVpsBoolean(opts.osReinstall, "--os-reinstall")
+    }), getFormat(parent));
+  });
+  parent.command("plans").description("\u304A\u7533\u3057\u8FBC\u307F\u53EF\u80FD\u306A\u30D7\u30E9\u30F3\u30FB\u6599\u91D1\u3092\u53D6\u5F97").action(async () => {
+    printResult(await resolveClient(parent, brand).listVpsPlans(), getFormat(parent));
+  });
+  parent.command("signup-status <id>").description("\u304A\u7533\u3057\u8FBC\u307F\u72B6\u6CC1\u3092\u78BA\u8A8D\uFF08id \u306F\u7533\u8FBC\u5FDC\u7B54\u306E\u30B5\u30FC\u30D3\u30B9\u30B3\u30FC\u30C9\uFF09").action(async (id) => {
+    printResult(await resolveClient(parent, brand).getVpsSignupStatus(validateVpsSignupId(id)), getFormat(parent));
+  });
+  parent.command("signup").description(brand.brand === "shincloud" ? "\u30B7\u30F3VPS\u3092\u65B0\u898F\u304A\u7533\u3057\u8FBC\u307F\uFF08\u30B9\u30BF\u30F3\u30C0\u30FC\u30C9\u30FB\u5927\u5BB9\u91CF\u30E1\u30E2\u30EA\u3002\u30D7\u30EA\u30DA\u30A4\u30C9\u306E\u307F\uFF09" : "VPS\u3092\u65B0\u898F\u304A\u7533\u3057\u8FBC\u307F\uFF08VPS\u30FB\u30D3\u30B8\u30CD\u30B9VPS\u3002\u30D7\u30EA\u30DA\u30A4\u30C9\u306E\u307F\uFF09").requiredOption("--plan-id <id>", brand.brand === "shincloud" ? "\u30D7\u30E9\u30F3ID\uFF08vps-2gb / vps-highmem-4gb \u306A\u3069\uFF09" : "\u30D7\u30E9\u30F3ID\uFF08vps-4gb / business-4gb \u306A\u3069\uFF09").requiredOption("--period <months>", "\u5951\u7D04\u671F\u9593\uFF08\u6708\u6570\u3002plans \u304C\u8FD4\u3057\u305F months \u304B\u3089\u6307\u5B9A\uFF09").requiredOption("--image-id <id>", "OS\u30A4\u30E1\u30FC\u30B8ID\uFF08plans \u306E os_images[].image_id\uFF09").requiredOption("--root-password <password>", "root\u30D1\u30B9\u30EF\u30FC\u30C9\uFF089\u301C70\u6587\u5B57\uFF09").requiredOption("--expected-total-price <yen>", "plans \u304C\u8FD4\u3057\u305F\u7A0E\u8FBC\u5408\u8A08\u91D1\u984D").option("--name <name>", "\u30B5\u30FC\u30D0\u30FC\u540D").option("--ssh-key-name <name>", "\u767B\u9332\u6E08\u307FSSH\u30AD\u30FC\u540D").option("--ssh-public-key <key>", "\u767B\u9332\u3059\u308B\u516C\u958B\u9375\uFF08ssh-key-name \u3068\u4F75\u7528\uFF09").option("--partner-code <code>", "\u304A\u53D6\u6B21\u5E97\u30B3\u30FC\u30C9").option("--auto-renew <bool>", "\u81EA\u52D5\u66F4\u65B0\uFF08true / false\u3002\u7701\u7565\u6642\u306F true\uFF09").option("--dry-run", "\u30D7\u30EC\u30D3\u30E5\u30FC\u306E\u307F\u5B9F\u884C").option("--confirm-purchase", "\u8AB2\u91D1\u3092\u4F34\u3046\u7533\u8ACB\u3092\u660E\u793A\u7684\u306B\u78BA\u8A8D").option("--agree-to-terms", "\u5229\u7528\u898F\u7D04\u306B\u540C\u610F").option("--idempotency-key <key>", "\u5B9F\u7533\u8ACB\u306E\u51AA\u7B49\u6027\u30AD\u30FC\uFF08\u82F1\u6570\u5B57\u30FB_\u30FB-\u306E8\uFF5E64\u6587\u5B57\uFF09").action(async (opts) => {
+    const expectedTotalPrice = parseInteger(opts.expectedTotalPrice, "--expected-total-price", 0);
+    const period = parseSignupPeriod(opts.period);
+    const partnerCode = opts.partnerCode === void 0 ? void 0 : validatePartnerCode(opts.partnerCode);
+    const autoRenew = opts.autoRenew === void 0 ? void 0 : parseAutoRenew(opts.autoRenew);
+    const baseData = {
+      plan_id: opts.planId,
+      period,
+      image_id: opts.imageId,
+      root_password: validateVpsLength(opts.rootPassword, "--root-password", 70, 9),
+      expected_total_price: expectedTotalPrice,
+      agree_to_terms: true,
+      ...pickDefined({
+        name: opts.name,
+        ssh_key_name: opts.sshKeyName,
+        ssh_public_key: opts.sshPublicKey,
+        partner_code: partnerCode,
+        auto_renew: autoRenew
+      })
+    };
+    const client2 = resolveClient(parent, brand);
+    await runBillingPurchase({
+      format: getFormat(parent),
+      options: opts,
+      operation: signupOperationName(brand, "vps", opts.planId),
+      targetLabel: "\u7533\u8FBC\u5185\u5BB9",
+      resolveTarget: async () => {
+        const planName = await resolvePlanName(() => client2.listVpsPlans(), opts.planId);
+        return {
+          target: `${planLabel(opts.planId, planName)} / \u5951\u7D04\u671F\u9593 ${period}\u304B\u6708 / ${opts.imageId}`,
+          confirmSubject: `${planName ?? opts.planId} ${period}\u304B\u6708`
+        };
+      },
+      details: compactDetails([
+        autoRenewDetail(autoRenew ?? true, { fromDefault: autoRenew === void 0 }),
+        partnerCodeDetail(partnerCode)
+      ]),
+      legalNoticeLines: signupLegalNoticeLines(brand, "vps", opts.planId),
+      statusCommand: `${brand.commandName} vps signup-status <id>`,
+      preview: () => client2.registerVps({ ...baseData, dry_run: true }),
+      execute: (idempotencyKey) => client2.registerVps({ ...baseData, dry_run: false }, idempotencyKey)
+    });
+  });
+}
+
 // ../core/dist/index.js
 function createProgram(brand, version = "0.0.0") {
   const program = new Command();
@@ -3981,6 +4402,10 @@ function createProgram(brand, version = "0.0.0") {
     registerWphostingAccountCommands(wphosting, brand);
     registerWphostingCommands(wphosting, brand);
   }
+  if (isVpsSupportedBrand(brand)) {
+    const vps = program.command("vps").description(brand.brand === "shincloud" ? "VPS API\uFF08\u30B7\u30F3VPS\uFF09" : "VPS API\uFF08XServer VPS\uFF09");
+    registerVpsCommands(vps, brand);
+  }
   const domain = program.command("domain").description("\u30C9\u30E1\u30A4\u30F3\u30B5\u30FC\u30D3\u30B9API\uFF08\u53D6\u5F97\u30FB\u5951\u7D04\u30FBDNS\u30FBWhois\u306A\u3069\uFF09");
   registerDomainCommands(domain, brand);
   const server = program.command("server").description("\u30B5\u30FC\u30D0\u30FC\u7BA1\u7406API\uFF08WordPress\u30FB\u30E1\u30FC\u30EB\u30FBDB\u306A\u3069\uFF09").option("--servername <name>", "\u30B5\u30FC\u30D0\u30FC\u540D\uFF08\u30D7\u30ED\u30D5\u30A1\u30A4\u30EB\u306E\u30C7\u30D5\u30A9\u30EB\u30C8\u3092\u4E0A\u66F8\u304D\uFF09");
@@ -4029,10 +4454,10 @@ function run(brand, version = "0.0.0") {
       }
     };
     if (err instanceof ApiError) {
-      console.error(`\u30A8\u30E9\u30FC [${err.errorCode}]: ${err.message}`);
+      console.error(`\u30A8\u30E9\u30FC [${sanitizeTerminalText(err.errorCode)}]: ${sanitizeTerminalText(err.message)}`);
       if (err.errors.length > 0) {
         for (const e of err.errors) {
-          console.error(`  - ${e}`);
+          console.error(`  - ${sanitizeTerminalText(e)}`);
         }
       }
       printResendGuidance();
@@ -4059,7 +4484,7 @@ function run(brand, version = "0.0.0") {
 // package.json
 var package_default = {
   name: "star8-cli",
-  version: "1.4.0",
+  version: "1.5.0",
   description: "Official CLI for Star8 API \u2014 manage your Star8 hosting from the terminal",
   type: "module",
   bin: {