tailii-host 0.1.1 → 0.4.0

package/dist/push/approvalPushNotifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvalPushNotifier.js","sourceRoot":"","sources":["../../src/push/approvalPushNotifier.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,2CAA2C;AAC3C,0CAA0C;AAC1C,EAAE;AACF,gEAAgE;AAChE,kEAAkE;AAClE,uEAAuE;AACvE,8DAA8D;AAC9D,+CAA+C;AAC/C,yEAAyE;AACzE,sCAAsC;AACtC,0EAA0E;AAC1E,4DAA4D;AAC5D,EAAE;AACF,4DAA4D;AAC5D,gFAAgF;AAChF,4CAA4C;AAC5C,EAAE;AACF,0DAA0D;AAE1D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAyB,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAoB,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAA2B,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAkB,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AA6BvC,iEAAiE;AACjE,MAAM,OAAO,0BAA0B;IACpB,GAAG,CAAiB;IACpB,GAAG,CAAe;IAEnC,YAAY,IAAa,EAAE,GAAG,GAAiB,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAChF,IAAI,CAAC,GAAG,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,UAAU,CAAC,EAAU,EAAE,IAAY,EAAE,OAAe;QAClD,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IAED,aAAa,CAAC,EAAU,EAAE,MAAc,EAAE,OAAe;QACvD,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IAED,YAAY,CAAC,EAAU,EAAE,MAAc,EAAE,OAAe;QACtD,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;CACF;AAED,+BAA+B;AAE/B,oDAAoD;AACpD,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAE/C,6CAA6C;AAC7C,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAkB9C;;;GAGG;AACH,MAAM,OAAO,oBAAoB;IACd,WAAW,CAAkB;IAC7B,UAAU,CAAqB;IAC/B,WAAW,CAAmB;IAC9B,MAAM,CAAc;IACpB,QAAQ,CAAgB;IACxB,OAAO,CAAU;IACjB,WAAW,CAAS;IACpB,UAAU,CAAS;IACnB,GAAG,CAAe;IAEnC,YAAY,IAA8B;QACxC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,4BAA4B,CAAC;QACpE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,0BAA0B,CAAC;QAChE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,GAAwB,EAAE,WAAmB;QACxD,MAAM,cAAc,GAAgB;YAClC,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE;SACjD,CAAC;QACF,IAAI,KAAgD,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,EAAE;YACnD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAChE,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,0BAA0B;IAClB,KAAK,CAAC,aAAa,CAAC,GAAwB;QAClD,0CAA0C;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACtE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAClD,CAAC;QAED,+CAA+C;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACrE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACjD,CAAC;QAED,0CAA0C;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,IAAI,KAAK,IAAI,IAAI,WAAW,GAAG,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;YAClF,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACzE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACrD,CAAC;QAED,oCAAoC;QACpC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,CAAC;QACtF,CAAC;QAED,wEAAwE;QACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CACrC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EACpE,WAAW,EACX,MAAM,CAAC,KAAK,EACZ,GAAG,CACJ,CAAC;QAEF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,mDAAmD;YACnD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAChE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAClD,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,aAAa,CACzB,GAAwB,EACxB,KAA+D,EAC/D,KAAa,EACb,GAAW;QAEX,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/E,IAAI,KAAK,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAElC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAChD,8BAA8B;YAC9B,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;YAC9B,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,CAAC;YAChF,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACnF,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACzD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAC3B,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACxC,8BAA8B;YAC9B,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;QACxD,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,kFAAkF;IAC1E,WAAW,CACjB,GAAwB,EACxB,KAA+D,EAC/D,KAAa,EACb,GAAW;QAEX,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,WAAW;YACvB,WAAW,EAAE,KAAK,CAAC,KAAK;YACxB,SAAS,EAAE,GAAG;YACd,KAAK;YACL,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC;SAC7D,CAAC;IACJ,CAAC;CACF;AAED,mDAAmD;AACnD,MAAM,UAAU,UAAU,CAAC,KAAgB;IACzC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,sBAAsB;YACzB,OAAO,sBAAsB,CAAC;QAChC,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC;QACxB,KAAK,6BAA6B;YAChC,OAAO,6BAA6B,CAAC;QACvC,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;IAClC,CAAC;AACH,CAAC;AAED,iCAAiC;AAEjC;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B;IAIxC,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CAAC;QACxC,WAAW;QACX,UAAU,EAAE,IAAI,gBAAgB,CAAC,eAAe,EAAE,CAAC;QACnD,WAAW,EAAE,IAAI,eAAe,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC;QAC1E,MAAM,EAAE,IAAI,UAAU,CAAC,IAAI,eAAe,EAAE,CAAC;QAC7C,QAAQ,EAAE,IAAI,0BAA0B,EAAE;QAC1C,WAAW,EAAE,eAAe,EAAE;KAC/B,CAAC,CAAC;IACH,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE;QACpC,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC,CAAC;AACJ,CAAC"}

package/dist/push/deviceTokenStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceTokenStore.js","sourceRoot":"","sources":["../../src/push/deviceTokenStore.ts"],"names":[],"mappings":"AAAA,sBAAsB;AACtB,wCAAwC;AACxC,sCAAsC;AACtC,EAAE;AACF,qEAAqE;AACrE,iEAAiE;AACjE,8DAA8D;AAE9D,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAiB,eAAe,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAyBjG;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IACV,IAAI,CAAS;IAE9B,YAAY,IAAa;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,eAAe,EAAE,CAAC;IACxC,CAAC;IAED,IAAY,OAAO;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IACnD,CAAC;IAED,0DAA0D;IAC1D,IAAI;QACF,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/E,MAAM,GAAG,GAAG,GAA8B,CAAC;QAC3C,IACE,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ;YAChC,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC/B,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ;YACnC,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,EACpC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC;YACnB,WAAW,EAAE,GAAG,CAAC,aAAa,CAAC;YAC/B,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC;YACzB,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED,wDAAwD;IACxD,IAAI,CAAC,MAAyB;QAC5B,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,kDAAkD;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,uDAAuD;QACvD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,sDAAsD;IACtD,MAAM;QACJ,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;IACH,CAAC;CACF"}

package/dist/{pushTypes.js → push/pushTypes.js}

@@ -5,7 +5,7 @@
 // 秘密（.p8/token）・diff・cwd 本文を payload/ログに載せない（Requirement 6.5, 2.3）。
 import * as os from "node:os";
 import * as path from "node:path";
-import { ensureDirectory0700 } from "./paths.js";
+import { ensureDirectory0700 } from "../shared/paths.js";
 /** 当該環境の APNs ホスト名（token の environment から送信ホストを写像）。 */
 export function apnsSendHost(environment) {
     return environment === "production" ? "api.push.apple.com" : "api.sandbox.push.apple.com";

package/dist/push/pushTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pushTypes.js","sourceRoot":"","sources":["../../src/push/pushTypes.ts"],"names":[],"mappings":"AAAA,eAAe;AACf,yCAAyC;AACzC,kFAAkF;AAClF,EAAE;AACF,oEAAoE;AAEpE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAUzD,uDAAuD;AACvD,MAAM,UAAU,YAAY,CAAC,WAAqB;IAChD,OAAO,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,4BAA4B,CAAC;AAC5F,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,SAAS,CAAC;AACvD,CAAC;AAeD,0CAA0C;AAC1C,MAAM,UAAU,eAAe,CAAC,CAAY,EAAE,CAAY;IACxD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC;IACnF,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC;IAClG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kCAAkC;AAElC,4CAA4C;AAC5C,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,mBAAmB,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,sBAAsB;AAEtB;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,IAAY,EAAE,OAAe;IAC/E,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,MAAM,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC9D,MAAM,GAAG,GAAG;QACV,KAAK;QACL,oBAAoB,EAAE,gBAAgB;QACtC,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,OAAO;KACrB,CAAC;IACF,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,wDAAwD;AACxD,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5E,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/push/sendLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sendLog.js","sourceRoot":"","sources":["../../src/push/sendLog.ts"],"names":[],"mappings":"AAAA,aAAa;AACb,wCAAwC;AACxC,6BAA6B;AAC7B,EAAE;AACF,2EAA2E;AAC3E,mDAAmD;AACnD,qDAAqD;AAErD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAEtE,8CAA8C;AAC9C,MAAM,OAAO,OAAO;IACD,IAAI,CAAS;IAE9B,YAAY,IAAa;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,eAAe,EAAE,CAAC;IACxC,CAAC;IAED,IAAY,OAAO;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED,gDAAgD;IAChD,QAAQ,CAAC,OAAe;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED,qCAAqC;IACrC,MAAM,CAAC,OAAe,EAAE,EAAU;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAED,4CAA4C;IACpC,IAAI;QACV,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7E,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;YAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0DAA0D;IAClD,IAAI,CAAC,GAA2B;QACtC,IAAI,CAAC;YACH,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,MAAM,GAA2B,EAAE,CAAC;YAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;YACnE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACxE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;CACF"}

package/dist/services/accountIdentity.d.ts

@@ -0,0 +1,44 @@
+/** 使用量カードへ出すマスク済みアカウント（取れなかった側は省略）。 */
+export interface AccountIdentities {
+    claude?: string;
+    codex?: string;
+}
+/** engine へ注入するフェッチャの型（テストは固定値を注入する）。 */
+export type AccountIdentityProvider = () => Promise<AccountIdentities>;
+/** `claude auth status --json` に与える timeout（ms）。 */
+export declare const ACCOUNT_IDENTITY_TIMEOUT_MS = 3000;
+/** `~/.codex/auth.json` の読み込み上限（バイト）。異常に大きいファイルは読まない。 */
+export declare const CODEX_AUTH_MAX_BYTES: number;
+/** 子プロセス実行の注入点（テストは実 CLI を起動しない偽 exec を注入する）。 */
+export type AccountExec = (command: string, args: readonly string[], timeoutMs: number) => Promise<string | null>;
+/**
+ * email をマスクする（純ロジック, TESTABLE）。`alice@example.com` → `a***@example.com`。
+ *
+ * local part が空・`@` が無い/複数・domain が空や制御文字入りなど不正形は **undefined**
+ * （＝「載せない」）。マスクできない値をそのまま出すくらいなら、行ごと出さない。
+ */
+export declare function maskEmail(raw: string | null | undefined): string | undefined;
+/**
+ * JWT（id_token）の payload から `email` claim を取り出す（純ロジック, TESTABLE）。
+ * 署名は検証しない（表示専用）。形が違えば undefined。
+ */
+export declare function emailFromIdToken(token: unknown): string | undefined;
+/**
+ * `claude auth status --json` の出力から email を取り出す（純ロジック, TESTABLE）。
+ * `loggedIn: false` は「アカウント無し」なので undefined。
+ */
+export declare function emailFromClaudeAuthStatus(raw: string | null): string | undefined;
+/** `auth.json` 本文から Codex アカウントの email を取り出す（純ロジック, TESTABLE）。 */
+export declare function emailFromCodexAuthJson(raw: string | null): string | undefined;
+export interface CollectAccountIdentitiesOptions {
+    exec?: AccountExec;
+    /** `~/.codex/auth.json` の本文を返す読み取り（テストは fixture を注入する）。 */
+    readCodexAuth?: () => string | null;
+    timeoutMs?: number;
+}
+/**
+ * 両 agent のマスク済みアカウントを集める（キャッシュ無し。テストはここを直接叩く）。
+ * 取れなかった側は省略する。生 email はここから外へ出ない。
+ */
+export declare function collectAccountIdentities(options?: CollectAccountIdentitiesOptions): Promise<AccountIdentities>;
+export declare function fetchAccountIdentities(): Promise<AccountIdentities>;

package/dist/services/accountIdentity.js

@@ -0,0 +1,184 @@
+// accountIdentity.ts
+// tailii (TS host) — 「どのアカウントの使用量か」の表示用 ID（account-usage）
+//
+// 使用量シートの各カードに、ログイン中アカウントを**マスク済み**で 1 行出すための取得層。
+//
+// 秘密の扱い（この層の存在理由）:
+//   - 生の email はここから外へ出さない。**マスクは host 側で行い、ワイヤーへは
+//     `a***@example.com` 形式のマスク済み文字列しか載せない**（ログにも生値を出さない）。
+//   - Codex 側は id_token（JWT）を読むが、トークン文字列そのものはワイヤー・ログへ載せない。
+//     署名検証はしない — CLI 自身が管理するローカルファイルの、表示専用の読み取りなので
+//     「改竄されていたら表示が変わるだけ」で済む（mocovia と同じ割り切り）。
+//
+// 取得元:
+//   - Claude … `claude auth status --json` の `email`（2.1.220 実測。キーは camelCase で
+//     `loggedIn` / `authMethod` / `apiProvider` / `email` / `subscriptionType`）。
+//   - Codex  … `~/.codex/auth.json` の `tokens.id_token` の claims `email`。
+//
+// アカウント切替はまれなので、hostVersions と同じ**プロセス内キャッシュ**で 1 回だけ取る。
+import { execFile } from "node:child_process";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { defaultInjectedPath } from "../commands/launch.js";
+/** `claude auth status --json` に与える timeout（ms）。 */
+export const ACCOUNT_IDENTITY_TIMEOUT_MS = 3_000;
+/** `~/.codex/auth.json` の読み込み上限（バイト）。異常に大きいファイルは読まない。 */
+export const CODEX_AUTH_MAX_BYTES = 256 * 1024;
+/**
+ * email をマスクする（純ロジック, TESTABLE）。`alice@example.com` → `a***@example.com`。
+ *
+ * local part が空・`@` が無い/複数・domain が空や制御文字入りなど不正形は **undefined**
+ * （＝「載せない」）。マスクできない値をそのまま出すくらいなら、行ごと出さない。
+ */
+export function maskEmail(raw) {
+    if (typeof raw !== "string")
+        return undefined;
+    const email = raw.trim();
+    const at = email.indexOf("@");
+    if (at <= 0)
+        return undefined;
+    const local = email.slice(0, at);
+    const domain = email.slice(at + 1);
+    if (domain.length === 0 || domain.length > 128)
+        return undefined;
+    if (domain.includes("@"))
+        return undefined;
+    // 制御文字・空白を含む domain は表示に載せない（ログ・UI の汚染防止）。
+    if ([...domain].some(isUnsafeLabelChar))
+        return undefined;
+    const first = [...local][0];
+    if (first === undefined)
+        return undefined;
+    return `${first}***@${domain}`;
+}
+/** domain ラベルに現れてはいけない文字（制御文字・空白）。 */
+function isUnsafeLabelChar(character) {
+    const code = character.codePointAt(0) ?? 0;
+    return code <= 0x20 || code === 0x7f;
+}
+/**
+ * JWT（id_token）の payload から `email` claim を取り出す（純ロジック, TESTABLE）。
+ * 署名は検証しない（表示専用）。形が違えば undefined。
+ */
+export function emailFromIdToken(token) {
+    if (typeof token !== "string")
+        return undefined;
+    const parts = token.split(".");
+    if (parts.length !== 3)
+        return undefined;
+    const payload = parts[1];
+    if (payload === undefined || payload.length === 0)
+        return undefined;
+    try {
+        const json = Buffer.from(payload, "base64url").toString("utf8");
+        const claims = JSON.parse(json);
+        if (typeof claims !== "object" || claims === null)
+            return undefined;
+        const email = claims["email"];
+        return typeof email === "string" && email.length > 0 ? email : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * `claude auth status --json` の出力から email を取り出す（純ロジック, TESTABLE）。
+ * `loggedIn: false` は「アカウント無し」なので undefined。
+ */
+export function emailFromClaudeAuthStatus(raw) {
+    if (raw === null)
+        return undefined;
+    try {
+        const parsed = JSON.parse(raw.trim());
+        if (typeof parsed !== "object" || parsed === null)
+            return undefined;
+        const rec = parsed;
+        if (rec["loggedIn"] === false)
+            return undefined;
+        const email = rec["email"];
+        return typeof email === "string" && email.length > 0 ? email : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** 既定の exec（PATH を launch と揃え、timeout で必ず戻る）。 */
+const defaultExec = (command, args, timeoutMs) => new Promise((resolve) => {
+    execFile(command, [...args], {
+        cwd: os.homedir(),
+        timeout: timeoutMs,
+        maxBuffer: 64 * 1024,
+        env: {
+            ...process.env,
+            PATH: [defaultInjectedPath(), process.env["PATH"] ?? ""].filter(Boolean).join(":"),
+        },
+    }, (error, stdout) => resolve(error ? null : String(stdout)));
+});
+/** `~/.codex/auth.json` を読む既定実装（サイズ上限付き。読めなければ null）。 */
+function readCodexAuthFile(authPath) {
+    try {
+        const stat = fs.statSync(authPath);
+        if (!stat.isFile() || stat.size > CODEX_AUTH_MAX_BYTES)
+            return null;
+        return fs.readFileSync(authPath, "utf8");
+    }
+    catch {
+        return null;
+    }
+}
+/** `auth.json` 本文から Codex アカウントの email を取り出す（純ロジック, TESTABLE）。 */
+export function emailFromCodexAuthJson(raw) {
+    if (raw === null)
+        return undefined;
+    try {
+        const parsed = JSON.parse(raw);
+        if (typeof parsed !== "object" || parsed === null)
+            return undefined;
+        const tokens = parsed["tokens"];
+        if (typeof tokens !== "object" || tokens === null)
+            return undefined;
+        return emailFromIdToken(tokens["id_token"]);
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * 両 agent のマスク済みアカウントを集める（キャッシュ無し。テストはここを直接叩く）。
+ * 取れなかった側は省略する。生 email はここから外へ出ない。
+ */
+export async function collectAccountIdentities(options = {}) {
+    const exec = options.exec ?? defaultExec;
+    const timeoutMs = options.timeoutMs ?? ACCOUNT_IDENTITY_TIMEOUT_MS;
+    const readAuth = options.readCodexAuth ??
+        (() => readCodexAuthFile(path.join(os.homedir(), ".codex", "auth.json")));
+    const [claudeRaw, codexRaw] = await Promise.all([
+        exec("claude", ["auth", "status", "--json"], timeoutMs).catch(() => null),
+        Promise.resolve().then(readAuth).catch(() => null),
+    ]);
+    const claude = maskEmail(emailFromClaudeAuthStatus(claudeRaw));
+    const codex = maskEmail(emailFromCodexAuthJson(codexRaw));
+    return {
+        ...(claude !== undefined ? { claude } : {}),
+        ...(codex !== undefined ? { codex } : {}),
+    };
+}
+/**
+ * プロセス内キャッシュ付きの取得（既定の provider）。
+ * アカウント切替はまれなので、`claude auth status`（子プロセス）は 1 回だけ走らせる。
+ * 片方も取れなかった（空）ときはキャッシュせず、次回また試す。
+ */
+let memo = null;
+export function fetchAccountIdentities() {
+    memo ??= collectAccountIdentities().then((value) => {
+        if (Object.keys(value).length === 0)
+            memo = null;
+        return value;
+    }, () => {
+        memo = null;
+        return {};
+    });
+    return memo;
+}
+//# sourceMappingURL=accountIdentity.js.map

package/dist/services/accountIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accountIdentity.js","sourceRoot":"","sources":["../../src/services/accountIdentity.ts"],"names":[],"mappings":"AAAA,qBAAqB;AACrB,0DAA0D;AAC1D,EAAE;AACF,kDAAkD;AAClD,EAAE;AACF,mBAAmB;AACnB,mDAAmD;AACnD,2DAA2D;AAC3D,2DAA2D;AAC3D,mDAAmD;AACnD,8CAA8C;AAC9C,EAAE;AACF,OAAO;AACP,gFAAgF;AAChF,iFAAiF;AACjF,0EAA0E;AAC1E,EAAE;AACF,yDAAyD;AAEzD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAW5D,oDAAoD;AACpD,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAEjD,yDAAyD;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,GAAG,IAAI,CAAC;AAS/C;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,GAA8B;IACtD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IACjE,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,2CAA2C;IAC3C,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,GAAG,KAAK,OAAO,MAAM,EAAE,CAAC;AACjC,CAAC;AAED,sCAAsC;AACtC,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChE,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACpE,MAAM,KAAK,GAAI,MAAkC,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAkB;IAC1D,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACpE,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC;QAChD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,iDAAiD;AACjD,MAAM,WAAW,GAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAC5D,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACtB,QAAQ,CACN,OAAO,EACP,CAAC,GAAG,IAAI,CAAC,EACT;QACE,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE;QACjB,OAAO,EAAE,SAAS;QAClB,SAAS,EAAE,EAAE,GAAG,IAAI;QACpB,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,IAAI,EAAE,CAAC,mBAAmB,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;SACnF;KACF,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,yDAAyD;AACzD,SAAS,iBAAiB,CAAC,QAAgB;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,oBAAoB;YAAE,OAAO,IAAI,CAAC;QACpE,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,sBAAsB,CAAC,GAAkB;IACvD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACpE,MAAM,MAAM,GAAI,MAAkC,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACpE,OAAO,gBAAgB,CAAE,MAAkC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AASD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAO,GAAoC,EAAE;IAE7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,2BAA2B,CAAC;IACnE,MAAM,QAAQ,GACZ,OAAO,CAAC,aAAa;QACrB,CAAC,GAAkB,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAE3F,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QACzE,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;KACnD,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,SAAS,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1D,OAAO;QACL,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,IAAI,IAAI,GAAsC,IAAI,CAAC;AAEnD,MAAM,UAAU,sBAAsB;IACpC,IAAI,KAAK,wBAAwB,EAAE,CAAC,IAAI,CACtC,CAAC,KAAK,EAAE,EAAE;QACR,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC,EACD,GAAG,EAAE;QACH,IAAI,GAAG,IAAI,CAAC;QACZ,OAAO,EAAE,CAAC;IACZ,CAAC,CACF,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/services/claudeCredentialRefresh.d.ts

@@ -0,0 +1,30 @@
+/** Claude Code の first-party OAuth token endpoint。 */
+export declare const CLAUDE_OAUTH_TOKEN_ENDPOINT = "https://platform.claude.com/v1/oauth/token";
+/** Claude Code first-party OAuth client ID（Claude Code 2.1.220 と同値）。 */
+export declare const CLAUDE_CODE_OAUTH_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
+/** Claude Code と同じ「期限の5分前から更新対象」の猶予。 */
+export declare const CLAUDE_OAUTH_REFRESH_SKEW_MS: number;
+export interface RefreshedClaudeCredential {
+    accessToken: string;
+    expiresAtMs: number;
+    subscriptionType?: string;
+    rateLimitTier?: string;
+}
+export type OAuthTokenRequester = (url: string, init: RequestInit) => Promise<Response>;
+export interface RefreshClaudeCredentialOptions {
+    credentialsPath?: string;
+    requester?: OAuthTokenRequester;
+    now?: () => number;
+    timeoutSeconds?: number;
+}
+export declare function defaultClaudeCredentialsPath(): string;
+/** Claude Code と同じ5分猶予で access token の更新要否を判定する。 */
+export declare function shouldRefreshClaudeCredential(expiresAtMs: number | null, nowMs?: number): boolean;
+/**
+ * credentials file の refresh token で access token を更新する。
+ *
+ * Keychain が使える通常環境では呼び出し側が Keychain を正本にする。この関数は
+ * Keychain が使えない SSH/headless 環境専用で、成功時だけ同じ credentials file を
+ * mode 0600 のまま原子的に更新する。
+ */
+export declare function refreshClaudeCredentialFile(options?: RefreshClaudeCredentialOptions): Promise<RefreshedClaudeCredential | null>;

package/dist/services/claudeCredentialRefresh.js

@@ -0,0 +1,345 @@
+// claudeCredentialRefresh.ts
+// SSH/headless 環境で Claude Code の credentials file を安全に自動更新する。
+//
+// refresh token はローテーションされるため、単純な POST + 上書きは禁止。
+// Claude Code 2.1.220 と同じ 2 つの proper-lockfile 互換ロックを取り、ロック取得後に
+// credentials を再読込してから refresh し、同一ディレクトリ内の一時ファイルから
+// 原子的に置換する。credentials.json 自体は削除しない。
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+/** Claude Code の first-party OAuth token endpoint。 */
+export const CLAUDE_OAUTH_TOKEN_ENDPOINT = "https://platform.claude.com/v1/oauth/token";
+/** Claude Code first-party OAuth client ID（Claude Code 2.1.220 と同値）。 */
+export const CLAUDE_CODE_OAUTH_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
+/** Claude Code と同じ「期限の5分前から更新対象」の猶予。 */
+export const CLAUDE_OAUTH_REFRESH_SKEW_MS = 5 * 60 * 1_000;
+const LOCK_STALE_MS = 60_000;
+const LOCK_RETRY_LIMIT = 5;
+export function defaultClaudeCredentialsPath() {
+    return path.join(os.homedir(), ".claude", ".credentials.json");
+}
+/** Claude Code と同じ5分猶予で access token の更新要否を判定する。 */
+export function shouldRefreshClaudeCredential(expiresAtMs, nowMs = Date.now()) {
+    return expiresAtMs !== null && nowMs + CLAUDE_OAUTH_REFRESH_SKEW_MS >= expiresAtMs;
+}
+/**
+ * credentials file の refresh token で access token を更新する。
+ *
+ * Keychain が使える通常環境では呼び出し側が Keychain を正本にする。この関数は
+ * Keychain が使えない SSH/headless 環境専用で、成功時だけ同じ credentials file を
+ * mode 0600 のまま原子的に更新する。
+ */
+export async function refreshClaudeCredentialFile(options = {}) {
+    const credentialsPath = options.credentialsPath ?? defaultClaudeCredentialsPath();
+    const requester = options.requester ?? ((url, init) => fetch(url, init));
+    const now = options.now ?? (() => Date.now());
+    const timeoutSeconds = options.timeoutSeconds ?? 5;
+    const initial = readCredentials(credentialsPath);
+    if (initial === null)
+        return null;
+    let locks = await acquireOAuthRefreshLocks(path.dirname(credentialsPath));
+    if (locks === null)
+        return null;
+    let stopHeartbeat = startLockHeartbeat(locks);
+    try {
+        // Claude Code / 別 engine が待機中に更新していれば、その結果を採用して POST しない。
+        const current = readCredentials(credentialsPath);
+        if (current === null)
+            return null;
+        if (current.accessToken !== initial.accessToken)
+            return toRefreshedCredential(current.oauth);
+        if (!ownsAllLocks(locks))
+            return null;
+        const response = await requester(CLAUDE_OAUTH_TOKEN_ENDPOINT, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({
+                grant_type: "refresh_token",
+                refresh_token: current.refreshToken,
+                client_id: current.clientId,
+                scope: current.scopes.join(" "),
+            }),
+            signal: AbortSignal.timeout(timeoutSeconds * 1_000),
+        });
+        if (response.status !== 200)
+            return null;
+        const payload = await response.json();
+        let mergeBase = current;
+        let updated = mergeRefreshResponse(mergeBase, payload, now());
+        if (updated === null)
+            return null;
+        if (!ownsAllLocks(locks)) {
+            // refresh token を回した後にロックを失った場合は、そのまま上書きしない。
+            // Claude Code と同様に再ロックして credentials を再読込し、兄弟更新を採用するか
+            // 同じ refresh token のままなら自分の応答を安全に保存する。
+            stopHeartbeat();
+            releaseDirectoryLocks(locks);
+            const reacquired = await acquireOAuthRefreshLocks(path.dirname(credentialsPath));
+            if (reacquired === null)
+                return null;
+            locks = reacquired;
+            stopHeartbeat = startLockHeartbeat(locks);
+            const latest = readCredentials(credentialsPath);
+            if (latest === null)
+                return null;
+            if (latest.refreshToken !== current.refreshToken ||
+                latest.accessToken !== current.accessToken) {
+                return toRefreshedCredential(latest.oauth);
+            }
+            mergeBase = latest;
+            updated = mergeRefreshResponse(mergeBase, payload, now());
+            if (updated === null)
+                return null;
+        }
+        if (!ownsAllLocks(locks))
+            return null;
+        writeCredentialsAtomically(credentialsPath, updated.document);
+        return updated.credential;
+    }
+    catch {
+        return null;
+    }
+    finally {
+        stopHeartbeat();
+        releaseDirectoryLocks(locks);
+    }
+}
+function readCredentials(credentialsPath) {
+    let document;
+    try {
+        document = JSON.parse(fs.readFileSync(credentialsPath, "utf8"));
+    }
+    catch {
+        return null;
+    }
+    if (typeof document !== "object" || document === null || Array.isArray(document))
+        return null;
+    const record = document;
+    const rawOauth = record["claudeAiOauth"];
+    if (typeof rawOauth !== "object" || rawOauth === null || Array.isArray(rawOauth))
+        return null;
+    const oauth = rawOauth;
+    const accessToken = nonEmptyString(oauth.accessToken);
+    const refreshToken = nonEmptyString(oauth.refreshToken);
+    const scopes = Array.isArray(oauth.scopes)
+        ? oauth.scopes.filter((scope) => nonEmptyString(scope) !== null)
+        : [];
+    if (accessToken === null || refreshToken === null || scopes.length === 0)
+        return null;
+    return {
+        document: record,
+        oauth,
+        accessToken,
+        refreshToken,
+        scopes,
+        clientId: nonEmptyString(oauth.clientId) ?? CLAUDE_CODE_OAUTH_CLIENT_ID,
+    };
+}
+function mergeRefreshResponse(current, payload, nowMs) {
+    if (typeof payload !== "object" || payload === null || Array.isArray(payload))
+        return null;
+    const response = payload;
+    const accessToken = nonEmptyString(response["access_token"]);
+    const expiresIn = positiveFiniteNumber(response["expires_in"]);
+    if (accessToken === null || expiresIn === null)
+        return null;
+    const refreshToken = nonEmptyString(response["refresh_token"]) ?? current.refreshToken;
+    const responseScopes = typeof response["scope"] === "string"
+        ? response["scope"].split(/\s+/).filter((scope) => scope.length > 0)
+        : [];
+    const scopes = responseScopes.length > 0 ? responseScopes : current.scopes;
+    const expiresAtMs = nowMs + expiresIn * 1_000;
+    const refreshExpiresIn = positiveFiniteNumber(response["refresh_token_expires_in"]);
+    const oauth = {
+        ...current.oauth,
+        accessToken,
+        refreshToken,
+        expiresAt: expiresAtMs,
+        scopes,
+        ...(refreshExpiresIn !== null
+            ? { refreshTokenExpiresAt: nowMs + refreshExpiresIn * 1_000 }
+            : {}),
+    };
+    const document = { ...current.document, claudeAiOauth: oauth };
+    return {
+        document,
+        credential: {
+            accessToken,
+            expiresAtMs,
+            ...(nonEmptyString(oauth.subscriptionType) !== null
+                ? { subscriptionType: nonEmptyString(oauth.subscriptionType) }
+                : {}),
+            ...(nonEmptyString(oauth.rateLimitTier) !== null
+                ? { rateLimitTier: nonEmptyString(oauth.rateLimitTier) }
+                : {}),
+        },
+    };
+}
+function toRefreshedCredential(oauth) {
+    const accessToken = nonEmptyString(oauth.accessToken);
+    const expiresAtMs = typeof oauth.expiresAt === "number" && Number.isFinite(oauth.expiresAt)
+        ? oauth.expiresAt
+        : null;
+    if (accessToken === null || expiresAtMs === null)
+        return null;
+    const subscriptionType = nonEmptyString(oauth.subscriptionType);
+    const rateLimitTier = nonEmptyString(oauth.rateLimitTier);
+    return {
+        accessToken,
+        expiresAtMs,
+        ...(subscriptionType !== null ? { subscriptionType } : {}),
+        ...(rateLimitTier !== null ? { rateLimitTier } : {}),
+    };
+}
+function nonEmptyString(value) {
+    return typeof value === "string" && value.length > 0 ? value : null;
+}
+function positiveFiniteNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : null;
+}
+/**
+ * Claude Code の proper-lockfile 設定と互換のディレクトリロックを同じ順で取る。
+ * 新ロック: `<configDir>/.oauth_refresh.lock`
+ * legacy ロック: `<real configDir>.lock`
+ */
+async function acquireOAuthRefreshLocks(configDir) {
+    try {
+        fs.mkdirSync(configDir, { recursive: true, mode: 0o700 });
+    }
+    catch {
+        return null;
+    }
+    let realConfigDir;
+    try {
+        realConfigDir = fs.realpathSync(configDir);
+    }
+    catch {
+        realConfigDir = configDir;
+    }
+    const lockPaths = [
+        path.join(configDir, ".oauth_refresh.lock"),
+        `${realConfigDir}.lock`,
+    ];
+    for (let attempt = 0; attempt <= LOCK_RETRY_LIMIT; attempt += 1) {
+        const held = [];
+        let complete = true;
+        for (const lockPath of lockPaths) {
+            const lock = tryAcquireDirectoryLock(lockPath);
+            if (lock === null) {
+                complete = false;
+                break;
+            }
+            held.push(lock);
+        }
+        if (complete)
+            return held;
+        releaseDirectoryLocks(held);
+        if (attempt < LOCK_RETRY_LIMIT) {
+            await new Promise((resolve) => {
+                setTimeout(resolve, 1_000 + Math.floor(Math.random() * 1_000));
+            });
+        }
+    }
+    return null;
+}
+function tryAcquireDirectoryLock(lockPath) {
+    try {
+        fs.mkdirSync(lockPath, { mode: 0o700 });
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            return null;
+        try {
+            const stat = fs.statSync(lockPath);
+            if (!stat.isDirectory() || Date.now() - stat.mtimeMs <= LOCK_STALE_MS)
+                return null;
+            fs.rmdirSync(lockPath);
+            fs.mkdirSync(lockPath, { mode: 0o700 });
+        }
+        catch {
+            return null;
+        }
+    }
+    try {
+        const stat = fs.statSync(lockPath);
+        return { lockPath, dev: stat.dev, ino: stat.ino };
+    }
+    catch {
+        return null;
+    }
+}
+function startLockHeartbeat(locks) {
+    const timer = setInterval(() => {
+        const now = new Date();
+        for (const lock of locks) {
+            if (!stillOwnsLock(lock))
+                continue;
+            try {
+                fs.utimesSync(lock.lockPath, now, now);
+            }
+            catch {
+                // ロック喪失は release 側でも inode 照合し、他プロセスのロックを消さない。
+            }
+        }
+    }, 5_000);
+    timer.unref();
+    return () => clearInterval(timer);
+}
+function releaseDirectoryLocks(locks) {
+    for (const lock of [...locks].reverse()) {
+        if (!stillOwnsLock(lock))
+            continue;
+        try {
+            fs.rmdirSync(lock.lockPath);
+        }
+        catch {
+            // 他プロセスによる回収・置換、または非空なら触らない。
+        }
+    }
+}
+function stillOwnsLock(lock) {
+    try {
+        const stat = fs.statSync(lock.lockPath);
+        return stat.isDirectory() && stat.dev === lock.dev && stat.ino === lock.ino;
+    }
+    catch {
+        return false;
+    }
+}
+function ownsAllLocks(locks) {
+    return locks.length === 2 && locks.every(stillOwnsLock);
+}
+/** mode 0600 の同一ディレクトリ一時ファイルを書き、rename で原子的に置換する。 */
+function writeCredentialsAtomically(credentialsPath, document) {
+    const dir = path.dirname(credentialsPath);
+    const tempPath = path.join(dir, `.credentials.json.tailii-${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}`);
+    let fd = null;
+    try {
+        fd = fs.openSync(tempPath, "wx", 0o600);
+        fs.writeFileSync(fd, `${JSON.stringify(document)}\n`, "utf8");
+        fs.fsyncSync(fd);
+        fs.closeSync(fd);
+        fd = null;
+        fs.renameSync(tempPath, credentialsPath);
+        fs.chmodSync(credentialsPath, 0o600);
+    }
+    catch (error) {
+        if (fd !== null) {
+            try {
+                fs.closeSync(fd);
+            }
+            catch {
+                // 元のエラーを優先する。
+            }
+        }
+        try {
+            fs.unlinkSync(tempPath);
+        }
+        catch {
+            // rename 済み、または一時ファイル未生成。
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=claudeCredentialRefresh.js.map