@koda-sl/baker-cli 0.192.0 → 0.192.1

package/README.md

@@ -4701,10 +4701,11 @@ baker canvas catalog | jq '.compositions[].id'
 // URL source — font file for font_specimen (direct fetch; magic-byte sniffed, so octet-stream CDNs work)
 { "id": "src", "type": "ingest", "params": { "source": "url", "url": "https://cdn.example.com/brand.ttf", "expect": "font" } }
 
-// Path source — relative path resolved against process.cwd()
+// Path source — relative to the canvas file's own directory (validate/run resolve it there)
 { "id": "src", "type": "ingest", "params": { "source": "path", "path": "./inputs/headshot.png", "expect": "image" } }
 
-// Path source — absolute path used as-is
+// Path source — an absolute path is used as-is, and so resolves only on the machine that wrote it.
+// Keep canvases portable: creative canvases are validated for this (`absolute-reference`).
 { "id": "src", "type": "ingest", "params": { "source": "path", "path": "/abs/work/clip.mp4", "expect": "video" } }
 ```
 

package/dist/cli.js

@@ -20906,7 +20906,7 @@ function todoPath(el, label) {
   const t = el.type.toLowerCase();
   const fresh = t === "person" || t === "animal" || t === "location" ? " [SOURCE FRESH \u2014 a DIFFERENT person/animal/set than the original ad; do not reuse the source's individual]" : "";
   const same = el.same_as ? ` [SAME INDIVIDUAL as ${el.same_as} \u2014 a different wardrobe/look of the same person; reuse that cast person, change only the outfit]` : "";
-  return `[TODO: drop one real source image for ${label} (${el.type})${desc}${expr} \u2014 reused across every frame it appears in${fresh}${same}]`;
+  return `[TODO: drop one real source image for ${label} (${el.type})${desc}${expr} \u2014 reused across every frame it appears in${fresh}${same}; use a path relative to this canvas file, never an absolute path]`;
 }
 function buildElementSlots(elements) {
   const usedIds = /* @__PURE__ */ new Set([
@@ -21753,7 +21753,7 @@ function emitScreenScene(i, scene, lengths, out, surfaceIngests, nodes, clips) {
       type: "ingest",
       params: {
         source: "path",
-        path: `[TODO: supply the REAL screen for "${label}" \u2014 NEVER AI-generate a UI. Capture a clean, text-free screenshot with \`baker images screenshot https://<brand-domain>/<path>\` (image-library skill); spoken/overlay text rides the overlay layer, not the screenshot]`,
+        path: `[TODO: supply the REAL screen for "${label}" \u2014 NEVER AI-generate a UI. Capture a clean, text-free screenshot with \`baker images screenshot https://<brand-domain>/<path>\` (image-library skill); spoken/overlay text rides the overlay layer, not the screenshot. Wire it in as a path relative to this canvas file, never an absolute path]`,
         expect: "image"
       }
     });
@@ -21805,7 +21805,7 @@ function emitGraphicScene(i, scene, lengths, out, surfaceIngests, nodes, clips)
       type: "ingest",
       params: {
         source: "path",
-        path: `[TODO: supply the REAL designed graphic for "${label}" \u2014 NEVER AI-generate a designed panel (its typography/wordmarks garble). Rebuild it as brand HTML in video-overlay-composition (the scene's text/logos are already seeded there), export the design from the brand kit, or source stock art; text rides the overlay layer, not this plate]`,
+        path: `[TODO: supply the REAL designed graphic for "${label}" \u2014 NEVER AI-generate a designed panel (its typography/wordmarks garble). Rebuild it as brand HTML in video-overlay-composition (the scene's text/logos are already seeded there), export the design from the brand kit, or source stock art; text rides the overlay layer, not this plate. Wire it in as a path relative to this canvas file, never an absolute path]`,
         expect: "image"
       }
     });
@@ -24082,6 +24082,10 @@ function mimeForFile(filePath) {
 function toPosix(p) {
   return p.split(path12.sep).join("/");
 }
+function isInside(dir, target) {
+  const rel = path12.relative(dir, target);
+  return !rel.startsWith("..") && !path12.isAbsolute(rel);
+}
 function localPathRefsFromCanvas(parsed) {
   const nodes = parsed?.nodes;
   if (!Array.isArray(nodes)) return [];
@@ -24120,6 +24124,13 @@ async function uploadRunSnapshot(client, opts) {
     const skipped = [];
     for (const refPath of await sourceRefsToSnapshot(canvasDir, opts.parsed)) {
       const abs = path12.isAbsolute(refPath) ? refPath : path12.resolve(canvasDir, refPath);
+      if (!isInside(canvasDir, abs)) {
+        skipped.push({
+          path: toPosix(path12.relative(canvasDir, abs)),
+          reason: "outside the creative folder \u2014 read from the workspace on rerun"
+        });
+        continue;
+      }
       let st;
       try {
         st = await stat2(abs);
@@ -24776,7 +24787,7 @@ function todoPath2(el, label) {
   const expr = el.expression ? `, with a ${el.expression} expression` : "";
   const t = el.type.toLowerCase();
   const lock = t === "person" || t === "animal" ? " \u2014 REQUIRED: this is the emotional hero; ground it in a real reference (image-library / video-library / Pinterest), do not delete this slot and free-generate" : "";
-  return `[TODO: drop a real image for ${label} (${el.type})${desc}${expr}${lock}]`;
+  return `[TODO: drop a real image for ${label} (${el.type})${desc}${expr}${lock} \u2014 replace with a path relative to this canvas file, never an absolute path]`;
 }
 function sheetSubjectDescription(el) {
   const desc = el.description ?? `the ${el.type}`;
@@ -24867,7 +24878,11 @@ function scaffoldStaticAd(input, elementsInput, opts) {
     nodes.push({
       id: "brandfont",
       type: "ingest",
-      params: { source: "path", path: "[TODO: path to brand font .otf/.ttf]", expect: "font" }
+      params: {
+        source: "path",
+        path: "[TODO: brand font .otf/.ttf, as a path relative to this canvas file (e.g. ../../brand/fonts/Brand-Bold.otf) \u2014 never an absolute path]",
+        expect: "font"
+      }
     });
     nodes.push({
       id: "type_ref",