@koda-sl/baker-cli 0.204.0 → 0.209.0

package/README.md

@@ -2454,15 +2454,16 @@ Get a single video by ID. `--full` includes the auto-generated **transcript** (B
 baker videos get j571abc123 --full --output md
 ```
 
-### `baker videos upload <file>`
+### `baker videos upload <file|url>`
 
-Upload a video file via Mux direct upload.
+Upload a video. A local path is uploaded directly; an `http(s)` URL is routed to `baker videos ingest`.
 
 ```bash
 baker videos upload ./demo.mp4
 baker videos upload ./demo.mp4 --dry-run
 baker videos upload ./testimonial-maria.mp4 \
   --context "Testimonial from Maria, a real customer, filmed on her phone for the autumn campaign"
+baker videos upload https://www.youtube.com/watch?v=abc123
 ```
 
 Supported extensions: `.mp4`, `.mov`, `.webm`, `.avi`, `.mkv`
@@ -2480,6 +2481,55 @@ baker videos group --group-key "instagram:Cx7Ab9"
 
 Same lookup as `baker images group` and takes either kind of id; the two exist so the noun you happen to hold does not decide whether you can ask.
 
+### `baker videos ingest <url>`
+
+Add a video to the library from a link — a direct video file, or a page on YouTube, TikTok, Vimeo, or Instagram.
+
+```bash
+baker videos ingest https://cdn.example.com/hero-loop.mp4          # → { videoId, via: "direct" }
+baker videos ingest https://www.youtube.com/watch?v=abc123         # → { videoId, via: "download" }
+baker videos ingest https://vimeo.com/12345 --external-id vim:12345
+```
+
+Two routes, chosen from the URL and reported as `via`:
+
+- **direct** — the URL ends in a video extension, so Baker fetches the file itself. Nothing is downloaded locally and there is no size limit.
+- **download** — anything else. The video is downloaded locally, stored, and then ingested. Videos longer than **3 hours** are refused up front, from the link's metadata, before anything is fetched. The downloaded file itself is capped at 16 GB.
+
+A direct URL that Baker cannot fetch retries automatically on the download route and reports `fallbackFrom`. Force the download route with `--download`.
+
+Re-ingesting the same link returns the existing row with `deduped: true` instead of transcoding it twice. On the download route the key is the provider's own id, so the same clip pasted as a share link, a shorts link or a watch link folds into one row; on the direct route it is the URL itself. Pass `--external-id` to supply your own key.
+
+| Flag | Purpose |
+|---|---|
+| `--source` | Provenance. Inferred from the link's host when omitted, and that inference covers 20 video platforms — `youtube`, `instagram`, `tiktok`, `twitter`, `facebook`, `reddit`, `vimeo`, `dailymotion`, `twitch`, `bluesky`, `bilibili`, `vk`, `ok`, `pinterest`, `tumblr`, `snapchat`, `loom`, `streamable`, `newgrounds`, `rutube` — plus `uploaded` and `url`. A link from anywhere else still ingests, recorded as `url`. |
+| `--external-id` | Dedupe key — re-running the same link returns the existing video. Derived from the link automatically on the download route. |
+| `--external-url` | Canonical page URL. Defaults to the input for a page URL. |
+| `--download` | Skip the direct attempt and always download. |
+| `--country` | Two-letter country to fetch from (`US`, `DE`, `JP`). Use when a video is blocked in the region Baker fetches from. |
+| `--context` | What you know that the video cannot show — campaign, who is on camera, intended use. Feeds the analysis, exactly as on `upload`. |
+| `--dry-run` | Preview the resolved route and parameters. |
+
+Baker fetches directly first and only pays for a proxied connection when the site refuses it. `--country` pins those paid connections to a specific place — it does not change the first, free attempt. The result names both the exit used (`egress`) and the country, so a geo-targeted fetch is never invisible after the fact. A region failure says so and suggests the flag; other failures don't, because a different country would not fix them.
+
+### Vimeo needs a signed-in session
+
+Vimeo has removed every anonymous download path — measured against all four of yt-dlp's clients, and the failure is identical through direct, datacenter and residential exits, so it is neither an IP nor a fingerprint problem. Set `VIMEO_COOKIE` on the Convex deployment to the value of the `vimeo` cookie from a logged-in browser session (`npx convex env set VIMEO_COOKIE '<value>'`). That one cookie is sufficient; the rest of the jar is not needed.
+
+Use an account created for this and holding nothing else — the value travels in sandbox-wide environment that the agent can read. Unset, Vimeo simply fails with a message telling the user to upload the file instead. The session expires, and when it does the failure says so explicitly rather than surfacing Vimeo's opaque 401.
+
+An audio-only link (a music or podcast page) is refused up front — there is no picture to store in a video library. A download is also given a time budget scaled to the video's length, capped at 15 minutes, because the turn is blocked while it runs; a video that outruns it says so and points at `upload`.
+
+The download route caps the pull at 1080p — Baker re-encodes for streaming anyway, so fetching a 4K master (what modern YouTube serves by default) only makes the download slower for pixels that get discarded.
+
+**Blocked downloads climb the egress ladder automatically.** The download route goes through the same **direct → datacenter → residential** ladder as every other outbound read (`@baker/proxy`; see [Operations](../../docs/operations.md) → Egress Proxy). There is no proxy flag on any command and nothing to opt into — the unproxied attempt always runs first, so a paid exit costs nothing until a host actually refuses us, and with no `OXYLABS_*` credentials in the environment this is a single plain download.
+
+A rung only opens on evidence that *who we are* was the problem — a 403/429/451, a WAF connection reset, or a bot wall like YouTube's "Sign in to confirm you're not a bot". A private video, a deleted one, a 404 or an unsupported URL fails identically from every address on earth, so it stops after one attempt instead of burning a timeout per tier. That decision is `shouldEscalate`'s, shared with the capture engine and the ad-media downloaders; yt-dlp's stderr is only *parsed* into the signal it takes (`src/lib/ytDlpSignal.ts`), never allowed to judge for itself.
+
+Requires `yt-dlp` on `PATH` (present in the Baker Runtime). Private, age-restricted, or region-locked videos cannot be downloaded — the error carries a `fix` pointing at `baker videos upload <file>`.
+
+**yt-dlp goes stale, and that looks like a broken video.** Large platforms change their players every few weeks and an out-of-date `yt-dlp` then resolves *no* formats at all, failing with "Requested format is not available" or "Only images are available" rather than anything that names the real cause. The error classifies this case separately and says the link is probably fine. The Runtime image installs `yt-dlp` unpinned at build time (`packages/e2b-template/src/template.ts`), so it ages with the image — if platform ingests start failing across the board, rebuild the template before investigating anything else. Direct file URLs don't depend on `yt-dlp` at all and keep working regardless.
+
 ### `baker videos delete <id>`
 
 Delete a video by ID.
@@ -2950,7 +3000,7 @@ baker history list --category ads --full    # ad writes with raw metadata
 
 ---
 
-### `baker hubspot forms list | view | submissions` · `baker hubspot workflows list` · `baker hubspot pipelines list` · `baker hubspot contacts summary | lookup` · `baker hubspot meetings list | view`
+### `baker hubspot forms list | view | submissions` · `baker hubspot workflows list | view` · `baker hubspot pipelines list` · `baker hubspot contacts summary | lookup` · `baker hubspot meetings list | view`
 
 Read-only view of the company's **connected HubSpot account** — the forms and meeting links (calendars) that live there, the leads those forms received, and the workflows, deal pipelines, and contact records a lead runs through afterwards. Fetched from HubSpot live on every call; nothing is cached and nothing is ever written back.
 
@@ -2966,6 +3016,8 @@ baker hubspot forms view <formId> --as-node     # the form.external blob for a f
 baker hubspot forms submissions <formId>        # how many leads it received, and when
 baker hubspot forms submissions <formId> --days 90 --full
 baker hubspot workflows list --enabled-only     # what runs after a lead is captured
+baker hubspot workflows view <workflowId>       # enrolment, branches in order, what each step writes
+baker hubspot workflows view <workflowId> --full  # + the values each branch compares
 baker hubspot pipelines list                    # where a lead lands, and the stages after it
 baker hubspot contacts summary --days 30        # are recent leads being worked? (counts only)
 baker hubspot contacts lookup lead@example.com  # was this one lead picked up?
@@ -2978,6 +3030,7 @@ baker hubspot meetings view <slug> --as-node    # the form.external blob for a f
 **`forms view`:** positional `<formId>`; `--full` adds the untouched HubSpot payload; `--as-node` returns the resource blob instead of the readable view.
 **`forms submissions`:** positional `<formId>`; `--days <1-365>` (default 30) sets the window; `--full` adds each submission's field values. The default response is counts and dates only — `total`, `inWindow`, `lastSubmittedAt`, and per-day counts — because submissions carry the lead's own contact details. `truncated: true` means the page budget ran out before the window was covered, so `inWindow` is a floor rather than an exact count.
 **`workflows list` flags:** `--search <text>`, `--enabled-only`. Disabled workflows are listed too — a form wired to one that is off looks connected and does nothing.
+**`workflows view`:** positional `<workflowId>` (the id from `workflows list`, and the one in HubSpot's own URL — the command translates it to HubSpot's separate internal flow id for you). Returns the enrolment criteria and whether it re-enrols (`null` = HubSpot does not report it for that criteria type, so it is unknown rather than off), plus every step with the property it writes. On a `LIST_BRANCH` step, branches come back in **evaluation order** (`order: 1` wins over `order: 2`) — a broad branch above a narrower one silently swallows the records the narrow one was written for, and HubSpot reports nothing. A `STATIC_BRANCH` matches on a value rather than top down, so its `order` is display only. `steps` is **not** in execution order; follow `nextActionId`. `--full` adds the raw payload, the only place the branch filter criteria (which property is compared to which value) can be read.
 **`pipelines list`:** no flags; stages come back in the order they run in HubSpot.
 **`contacts summary` flags:** `--days <1-365>` (default 30) over contact creation date. Returns counts only — total contacts, how many have an owner, and the lifecycle-stage split — never a name or an email. `truncated: true` means the page budget ran out, so the counts are floors.
 **`contacts lookup`:** positional `<email>`; returns that contact's lifecycle stage, owner, the account (company) it was filed under, and associated deals with their stage. `dealsReadable: false` / `companyReadable: false` mean the connection does not cover deals or accounts, so an empty `deals` or a null `company` is unknown rather than absent. `found: false` means no contact with that email — the lead never reached the CRM, which is a finding rather than an error.

package/dist/{chunk-UZYVSPCA.js → chunk-3E33AGNR.js}

@@ -1,6 +1,6 @@
 import {
   debugLogSetting
-} from "./chunk-6NZG2TCM.js";
+} from "./chunk-IRNM3T6B.js";
 
 // src/debugLog.ts
 import { appendFileSync, mkdirSync, renameSync, statSync } from "fs";
@@ -150,4 +150,4 @@ export {
   readBodyForLog,
   installStreamTaps
 };
-//# sourceMappingURL=chunk-UZYVSPCA.js.map
+//# sourceMappingURL=chunk-3E33AGNR.js.map

package/dist/{chunk-SVHFT7AN.js → chunk-3WODSPNZ.js}

@@ -2,13 +2,13 @@ import {
   handleConnectionError,
   needsConnectionFix,
   writeAdsJson
-} from "./chunk-KHHD26LZ.js";
+} from "./chunk-FUSTYLP5.js";
 import {
   ApiError
-} from "./chunk-2R2DEPG7.js";
+} from "./chunk-CRXSLYEX.js";
 import {
   getEnv
-} from "./chunk-6NZG2TCM.js";
+} from "./chunk-IRNM3T6B.js";
 
 // src/commands/ads/meta/shared.ts
 var DAY_MS = 864e5;
@@ -108,4 +108,4 @@ export {
   csvOrJson,
   resolveEffectiveStatus
 };
-//# sourceMappingURL=chunk-SVHFT7AN.js.map
+//# sourceMappingURL=chunk-3WODSPNZ.js.map

package/dist/{chunk-2R2DEPG7.js → chunk-CRXSLYEX.js}

@@ -1,10 +1,10 @@
 import {
   debugLogHttp,
   readBodyForLog
-} from "./chunk-UZYVSPCA.js";
+} from "./chunk-3E33AGNR.js";
 import {
   getEnv
-} from "./chunk-6NZG2TCM.js";
+} from "./chunk-IRNM3T6B.js";
 
 // src/client.ts
 var MAX_RATE_LIMIT_RETRIES = 3;
@@ -198,4 +198,4 @@ export {
   apiGet,
   apiPost
 };
-//# sourceMappingURL=chunk-2R2DEPG7.js.map
+//# sourceMappingURL=chunk-CRXSLYEX.js.map