@koda-sl/baker-cli 0.384.0-dev.4699b7308 → 0.384.0-dev.557795bef

package/dist/{chunk-VZEDAFAR.js → chunk-6YYSUISH.js}

@@ -1,6 +1,6 @@
 import {
   debugLogSetting
-} from "./chunk-HJEMOSPH.js";
+} from "./chunk-I4FTS5EE.js";
 
 // src/debugLog.ts
 import { appendFileSync, mkdirSync, renameSync, statSync } from "fs";
@@ -12,10 +12,10 @@ var MAX_BYTES = 64 * 1024 * 1024;
 var REDACTIONS = [
   [/Bearer\s+[A-Za-z0-9._-]+/g, "Bearer [redacted]"],
   // Authorization headers
-  // Both prefixes, captured rather than listed twice: `bkr_` does not contain
-  // the literal `bk_`, so the company-key rule matched no part of the read-only
-  // credential a Session review runs with.
-  [/\b(bkr?)_[A-Za-z0-9]+/g, "$1_[redacted]"],
+  // Every prefix, captured rather than listed thrice: `bkr_` and `bkv_` do not
+  // contain the literal `bk_`, so the company-key rule matched no part of the
+  // read-only credentials a Session review or a published report runs with.
+  [/\b(bk[rv]?)_[A-Za-z0-9]+/g, "$1_[redacted]"],
   // Baker API keys
   [/eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g, "[redacted-jwt]"],
   // JWTs / id tokens
@@ -33,6 +33,45 @@ function redactSecrets(input) {
   }
   return out;
 }
+var CREDENTIAL_VALUE = "[credential value]";
+var CREDENTIAL_PUT_PATH = "/api/credentials/put";
+function withoutCredentialValue(url, body) {
+  let path;
+  try {
+    path = new URL(url).pathname;
+  } catch {
+    path = url;
+  }
+  if (path !== CREDENTIAL_PUT_PATH || body === null || typeof body !== "object" || !("value" in body)) {
+    return body;
+  }
+  return { ...body, value: CREDENTIAL_VALUE };
+}
+var PUT_FLAGS_WITH_VALUES = /* @__PURE__ */ new Set(["--host", "--label"]);
+function argvWithoutCredentialValue(argv) {
+  if (argv[0] !== "credentials" || argv[1] !== "put") {
+    return argv;
+  }
+  let nameSeen = false;
+  let keepNext = false;
+  let redactNext = false;
+  return argv.map((arg, index) => {
+    if (index < 2) return arg;
+    if (keepNext || redactNext) {
+      const kept = keepNext ? arg : CREDENTIAL_VALUE;
+      keepNext = false;
+      redactNext = false;
+      return kept;
+    }
+    if (arg.startsWith("--value=")) return `--value=${CREDENTIAL_VALUE}`;
+    redactNext = arg === "--value";
+    keepNext = PUT_FLAGS_WITH_VALUES.has(arg);
+    if (arg.startsWith("-")) return arg;
+    const isName = !nameSeen;
+    nameSeen = true;
+    return isName ? arg : CREDENTIAL_VALUE;
+  });
+}
 function resolveTarget() {
   const raw = debugLogSetting();
   if (!raw) {
@@ -98,7 +137,7 @@ function errorToPlain(err) {
 var invocationStartedAt;
 function logInvocation(argv) {
   invocationStartedAt = Date.now();
-  append({ kind: "invocation", argv, cwd: process.cwd() });
+  append({ kind: "invocation", argv: argvWithoutCredentialValue(argv), cwd: process.cwd() });
 }
 function logExit(code) {
   append({
@@ -127,7 +166,7 @@ function debugLogHttp(entry) {
     method: entry.method,
     url: entry.url,
     durationMs: entry.durationMs,
-    request: entry.requestBody,
+    request: withoutCredentialValue(entry.url, entry.requestBody),
     status: entry.status,
     ok: entry.ok,
     response: entry.responseBody,
@@ -173,4 +212,4 @@ export {
   readBodyForLog,
   installStreamTaps
 };
-//# sourceMappingURL=chunk-VZEDAFAR.js.map
+//# sourceMappingURL=chunk-6YYSUISH.js.map

package/dist/chunk-6YYSUISH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/debugLog.ts"],"sourcesContent":["// Full-fidelity debug capture for the whole CLI.\n//\n// Set BAKER_DEBUG_LOG to turn it on:\n//   BAKER_DEBUG_LOG=1                -> appends to ./baker-cli-debug.jsonl\n//   BAKER_DEBUG_LOG=/tmp/baker.jsonl -> appends to that file\n//   BAKER_DEBUG_LOG=0|false|off|no   -> disabled (same as unset)\n//\n// When enabled, every HTTP request/response (both the REST client and the\n// canvas engine client), every byte written to stdout/stderr, and the command\n// invocation are appended as JSONL entries. Known secret shapes are redacted\n// before anything is written (best-effort — see redactSecrets). Logging is\n// always fail-open: a logging error is swallowed so it can never break a\n// command. The file rotates once past MAX_BYTES so an always-on capture cannot\n// fill the disk.\n\nimport { appendFileSync, mkdirSync, renameSync, statSync } from \"node:fs\";\nimport { dirname, isAbsolute, resolve } from \"node:path\";\nimport { debugLogSetting } from \"./env.ts\";\n\nconst DEFAULT_FILE = \"baker-cli-debug.jsonl\";\nconst BOOLEAN_ON = new Set([\"1\", \"true\", \"on\", \"yes\"]);\nconst BOOLEAN_OFF = new Set([\"0\", \"false\", \"off\", \"no\"]);\n\n// Rotate once the active file passes this size (one older generation, `<file>.1`,\n// is kept). Bounds growth for the always-on sandbox capture without a per-write stat.\nconst MAX_BYTES = 64 * 1024 * 1024;\n\n// Best-effort redaction. Response/request bodies are stored as escaped strings, so\n// key/value matching is unreliable there; instead we scrub the token *values*\n// themselves (quote-agnostic) plus the auth header and Baker keys. This is not\n// exhaustive — a secret in an unrecognized shape can still be written. See README.\nconst REDACTIONS: ReadonlyArray<readonly [RegExp, string]> = [\n  [/Bearer\\s+[A-Za-z0-9._-]+/g, \"Bearer [redacted]\"], // Authorization headers\n  // Every prefix, captured rather than listed thrice: `bkr_` and `bkv_` do not\n  // contain the literal `bk_`, so the company-key rule matched no part of the\n  // read-only credentials a Session review or a published report runs with.\n  [/\\b(bk[rv]?)_[A-Za-z0-9]+/g, \"$1_[redacted]\"], // Baker API keys\n  [/eyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+/g, \"[redacted-jwt]\"], // JWTs / id tokens\n  [/ya29\\.[A-Za-z0-9._-]+/g, \"[redacted-google-token]\"], // Google OAuth access tokens\n  [/1\\/\\/[A-Za-z0-9._-]+/g, \"[redacted-google-refresh]\"], // Google refresh tokens\n  [/EAA[A-Za-z0-9]{20,}/g, \"[redacted-meta-token]\"], // Meta/Facebook access tokens\n];\n\nexport function redactSecrets(input: string): string {\n  let out = input;\n  for (const [pattern, replacement] of REDACTIONS) {\n    out = out.replace(pattern, replacement);\n  }\n  return out;\n}\n\nconst CREDENTIAL_VALUE = \"[credential value]\";\nconst CREDENTIAL_PUT_PATH = \"/api/credentials/put\";\n\n/**\n * `baker credentials put` carries a credential's value, the one payload this\n * log must never hold whatever its shape: the Session review reads this file.\n * Keyed on the route, not on a secret pattern, so a value no rule recognises\n * is still dropped.\n */\nfunction withoutCredentialValue(url: string, body: unknown): unknown {\n  let path: string;\n  try {\n    path = new URL(url).pathname;\n  } catch {\n    path = url;\n  }\n  if (path !== CREDENTIAL_PUT_PATH || body === null || typeof body !== \"object\" || !(\"value\" in body)) {\n    return body;\n  }\n  return { ...body, value: CREDENTIAL_VALUE };\n}\n\nconst PUT_FLAGS_WITH_VALUES = new Set([\"--host\", \"--label\"]);\n\n/** A value typed after `credentials put` (refused by the command, but already in argv) never reaches the log. */\nfunction argvWithoutCredentialValue(argv: string[]): string[] {\n  if (argv[0] !== \"credentials\" || argv[1] !== \"put\") {\n    return argv;\n  }\n  let nameSeen = false;\n  let keepNext = false;\n  let redactNext = false;\n  return argv.map((arg, index) => {\n    if (index < 2) return arg;\n    if (keepNext || redactNext) {\n      const kept = keepNext ? arg : CREDENTIAL_VALUE;\n      keepNext = false;\n      redactNext = false;\n      return kept;\n    }\n    if (arg.startsWith(\"--value=\")) return `--value=${CREDENTIAL_VALUE}`;\n    redactNext = arg === \"--value\";\n    keepNext = PUT_FLAGS_WITH_VALUES.has(arg);\n    if (arg.startsWith(\"-\")) return arg;\n    const isName = !nameSeen;\n    nameSeen = true;\n    return isName ? arg : CREDENTIAL_VALUE;\n  });\n}\n\nfunction resolveTarget(): string | undefined {\n  const raw = debugLogSetting();\n  if (!raw) {\n    return undefined;\n  }\n  const lower = raw.toLowerCase();\n  if (BOOLEAN_OFF.has(lower)) {\n    return undefined;\n  }\n  const target = BOOLEAN_ON.has(lower) ? DEFAULT_FILE : raw;\n  return isAbsolute(target) ? target : resolve(process.cwd(), target);\n}\n\nexport function isDebugLogEnabled(): boolean {\n  return resolveTarget() !== undefined;\n}\n\nlet sessionId: string | undefined;\nfunction getSessionId(): string {\n  if (!sessionId) {\n    sessionId = `${process.pid}-${Date.now()}`;\n  }\n  return sessionId;\n}\n\n// Per-resolved-path bookkeeping so the hot path skips redundant syscalls: the\n// directory is ensured once and the current size is read once (via statSync),\n// then tracked in-process. Resets when the resolved path changes.\nlet trackedPath: string | undefined;\nlet bytesInFile = 0;\n\nfunction ensureReady(filePath: string): void {\n  if (trackedPath !== filePath) {\n    trackedPath = filePath;\n    mkdirSync(dirname(filePath), { recursive: true });\n    try {\n      bytesInFile = statSync(filePath).size;\n    } catch {\n      bytesInFile = 0;\n    }\n  }\n}\n\nfunction append(entry: Record<string, unknown>): void {\n  const filePath = resolveTarget();\n  if (!filePath) {\n    return;\n  }\n  try {\n    const payload = { ts: new Date().toISOString(), session: getSessionId(), ...entry };\n    const line = `${redactSecrets(JSON.stringify(payload))}\\n`;\n    ensureReady(filePath);\n    const size = Buffer.byteLength(line);\n    if (bytesInFile + size > MAX_BYTES) {\n      renameSync(filePath, `${filePath}.1`);\n      bytesInFile = 0;\n    }\n    appendFileSync(filePath, line);\n    bytesInFile += size;\n  } catch {\n    // Fail-open: debug logging must never break a command.\n  }\n}\n\nfunction errorToPlain(err: unknown): Record<string, unknown> {\n  if (err instanceof Error) {\n    const code = (err as { code?: unknown }).code;\n    return { name: err.name, message: err.message, ...(typeof code === \"string\" ? { code } : {}) };\n  }\n  return { message: String(err) };\n}\n\nlet invocationStartedAt: number | undefined;\n\nexport function logInvocation(argv: string[]): void {\n  invocationStartedAt = Date.now();\n  append({ kind: \"invocation\", argv: argvWithoutCredentialValue(argv), cwd: process.cwd() });\n}\n\n/**\n * Close an invocation with its outcome and its wall time.\n *\n * Until this existed the log could say what was called and what every HTTP hop\n * cost, and nothing at all about whether the command succeeded or how long the\n * whole thing took — so \"this verb is slow\" and \"this verb fails half the time\"\n * were both unanswerable from the one record that sees every call. `durationMs`\n * is measured from `logInvocation`, which runs before any command does.\n */\nexport function logExit(code: number): void {\n  append({\n    kind: \"exit\",\n    code,\n    ...(invocationStartedAt === undefined ? {} : { durationMs: Date.now() - invocationStartedAt }),\n  });\n}\n\nlet exitHookInstalled = false;\n\n/**\n * Write the exit record however the process ends.\n *\n * `process.on(\"exit\")` is the only hook that sees all of them — a clean return, a\n * `process.exit` from the error handler, an unhandled rejection — and it is\n * synchronous-only, which is exactly what `appendFileSync` needs. Installed once,\n * and only when logging is on, so the disabled path adds no listener at all.\n */\nexport function installExitRecord(): void {\n  if (exitHookInstalled || !isDebugLogEnabled()) {\n    return;\n  }\n  exitHookInstalled = true;\n  process.on(\"exit\", (code) => {\n    logExit(typeof code === \"number\" ? code : 0);\n  });\n}\n\nexport type HttpLogEntry = {\n  source: \"cli\" | \"canvas\";\n  method: string;\n  url: string;\n  requestBody?: unknown;\n  status?: number;\n  ok?: boolean;\n  responseBody?: string;\n  durationMs?: number;\n  error?: unknown;\n};\n\nexport function debugLogHttp(entry: HttpLogEntry): void {\n  if (!isDebugLogEnabled()) {\n    return;\n  }\n  append({\n    kind: \"http\",\n    source: entry.source,\n    method: entry.method,\n    url: entry.url,\n    durationMs: entry.durationMs,\n    request: withoutCredentialValue(entry.url, entry.requestBody),\n    status: entry.status,\n    ok: entry.ok,\n    response: entry.responseBody,\n    error: entry.error === undefined ? undefined : errorToPlain(entry.error),\n  });\n}\n\n// Reads a response body for logging without consuming it for the real caller.\nexport async function readBodyForLog(response: Response): Promise<string | undefined> {\n  if (!isDebugLogEnabled()) {\n    return undefined;\n  }\n  try {\n    return await response.clone().text();\n  } catch {\n    return undefined;\n  }\n}\n\n// Method syntax (bivariant) so a real `process.stdout`/`stderr` and a plain\n// test double both satisfy it.\ntype Writable = { write(...args: unknown[]): boolean };\n\n// Wraps a stream's `write` so every chunk is mirrored into the debug log while\n// the original write semantics (args + return value) are preserved. A single\n// streaming TextDecoder per stream decodes byte chunks so a multi-byte character\n// split across two writes is reassembled instead of garbled.\nexport function tapStream(name: string, stream: Writable): void {\n  const original = stream.write.bind(stream) as (...args: unknown[]) => boolean;\n  const decoder = new TextDecoder(\"utf-8\");\n  stream.write = ((chunk: unknown, ...rest: unknown[]): boolean => {\n    try {\n      const text =\n        typeof chunk === \"string\"\n          ? chunk\n          : chunk instanceof Uint8Array\n            ? decoder.decode(chunk, { stream: true })\n            : String(chunk);\n      append({ kind: \"output\", stream: name, text });\n    } catch {\n      // ignore capture failures\n    }\n    return original(chunk, ...rest);\n  }) as typeof stream.write;\n}\n\nlet tapsInstalled = false;\n\n// Mirrors everything written to stdout/stderr into the debug log. Installed once,\n// only when enabled, so the common (disabled) path leaves the streams untouched.\nexport function installStreamTaps(): void {\n  if (tapsInstalled || !isDebugLogEnabled()) {\n    return;\n  }\n  tapsInstalled = true;\n  tapStream(\"stdout\", process.stdout);\n  tapStream(\"stderr\", process.stderr);\n}\n"],"mappings":";;;;;AAeA,SAAS,gBAAgB,WAAW,YAAY,gBAAgB;AAChE,SAAS,SAAS,YAAY,eAAe;AAG7C,IAAM,eAAe;AACrB,IAAM,aAAa,oBAAI,IAAI,CAAC,KAAK,QAAQ,MAAM,KAAK,CAAC;AACrD,IAAM,cAAc,oBAAI,IAAI,CAAC,KAAK,SAAS,OAAO,IAAI,CAAC;AAIvD,IAAM,YAAY,KAAK,OAAO;AAM9B,IAAM,aAAuD;AAAA,EAC3D,CAAC,6BAA6B,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA,EAIjD,CAAC,6BAA6B,eAAe;AAAA;AAAA,EAC7C,CAAC,sDAAsD,gBAAgB;AAAA;AAAA,EACvE,CAAC,0BAA0B,yBAAyB;AAAA;AAAA,EACpD,CAAC,yBAAyB,2BAA2B;AAAA;AAAA,EACrD,CAAC,wBAAwB,uBAAuB;AAAA;AAClD;AAEO,SAAS,cAAc,OAAuB;AACnD,MAAI,MAAM;AACV,aAAW,CAAC,SAAS,WAAW,KAAK,YAAY;AAC/C,UAAM,IAAI,QAAQ,SAAS,WAAW;AAAA,EACxC;AACA,SAAO;AACT;AAEA,IAAM,mBAAmB;AACzB,IAAM,sBAAsB;AAQ5B,SAAS,uBAAuB,KAAa,MAAwB;AACnE,MAAI;AACJ,MAAI;AACF,WAAO,IAAI,IAAI,GAAG,EAAE;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,SAAS,uBAAuB,SAAS,QAAQ,OAAO,SAAS,YAAY,EAAE,WAAW,OAAO;AACnG,WAAO;AAAA,EACT;AACA,SAAO,EAAE,GAAG,MAAM,OAAO,iBAAiB;AAC5C;AAEA,IAAM,wBAAwB,oBAAI,IAAI,CAAC,UAAU,SAAS,CAAC;AAG3D,SAAS,2BAA2B,MAA0B;AAC5D,MAAI,KAAK,CAAC,MAAM,iBAAiB,KAAK,CAAC,MAAM,OAAO;AAClD,WAAO;AAAA,EACT;AACA,MAAI,WAAW;AACf,MAAI,WAAW;AACf,MAAI,aAAa;AACjB,SAAO,KAAK,IAAI,CAAC,KAAK,UAAU;AAC9B,QAAI,QAAQ,EAAG,QAAO;AACtB,QAAI,YAAY,YAAY;AAC1B,YAAM,OAAO,WAAW,MAAM;AAC9B,iBAAW;AACX,mBAAa;AACb,aAAO;AAAA,IACT;AACA,QAAI,IAAI,WAAW,UAAU,EAAG,QAAO,WAAW,gBAAgB;AAClE,iBAAa,QAAQ;AACrB,eAAW,sBAAsB,IAAI,GAAG;AACxC,QAAI,IAAI,WAAW,GAAG,EAAG,QAAO;AAChC,UAAM,SAAS,CAAC;AAChB,eAAW;AACX,WAAO,SAAS,MAAM;AAAA,EACxB,CAAC;AACH;AAEA,SAAS,gBAAoC;AAC3C,QAAM,MAAM,gBAAgB;AAC5B,MAAI,CAAC,KAAK;AACR,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,IAAI,YAAY;AAC9B,MAAI,YAAY,IAAI,KAAK,GAAG;AAC1B,WAAO;AAAA,EACT;AACA,QAAM,SAAS,WAAW,IAAI,KAAK,IAAI,eAAe;AACtD,SAAO,WAAW,MAAM,IAAI,SAAS,QAAQ,QAAQ,IAAI,GAAG,MAAM;AACpE;AAEO,SAAS,oBAA6B;AAC3C,SAAO,cAAc,MAAM;AAC7B;AAEA,IAAI;AACJ,SAAS,eAAuB;AAC9B,MAAI,CAAC,WAAW;AACd,gBAAY,GAAG,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC;AAAA,EAC1C;AACA,SAAO;AACT;AAKA,IAAI;AACJ,IAAI,cAAc;AAElB,SAAS,YAAY,UAAwB;AAC3C,MAAI,gBAAgB,UAAU;AAC5B,kBAAc;AACd,cAAU,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAChD,QAAI;AACF,oBAAc,SAAS,QAAQ,EAAE;AAAA,IACnC,QAAQ;AACN,oBAAc;AAAA,IAChB;AAAA,EACF;AACF;AAEA,SAAS,OAAO,OAAsC;AACpD,QAAM,WAAW,cAAc;AAC/B,MAAI,CAAC,UAAU;AACb;AAAA,EACF;AACA,MAAI;AACF,UAAM,UAAU,EAAE,KAAI,oBAAI,KAAK,GAAE,YAAY,GAAG,SAAS,aAAa,GAAG,GAAG,MAAM;AAClF,UAAM,OAAO,GAAG,cAAc,KAAK,UAAU,OAAO,CAAC,CAAC;AAAA;AACtD,gBAAY,QAAQ;AACpB,UAAM,OAAO,OAAO,WAAW,IAAI;AACnC,QAAI,cAAc,OAAO,WAAW;AAClC,iBAAW,UAAU,GAAG,QAAQ,IAAI;AACpC,oBAAc;AAAA,IAChB;AACA,mBAAe,UAAU,IAAI;AAC7B,mBAAe;AAAA,EACjB,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,aAAa,KAAuC;AAC3D,MAAI,eAAe,OAAO;AACxB,UAAM,OAAQ,IAA2B;AACzC,WAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,SAAS,GAAI,OAAO,SAAS,WAAW,EAAE,KAAK,IAAI,CAAC,EAAG;AAAA,EAC/F;AACA,SAAO,EAAE,SAAS,OAAO,GAAG,EAAE;AAChC;AAEA,IAAI;AAEG,SAAS,cAAc,MAAsB;AAClD,wBAAsB,KAAK,IAAI;AAC/B,SAAO,EAAE,MAAM,cAAc,MAAM,2BAA2B,IAAI,GAAG,KAAK,QAAQ,IAAI,EAAE,CAAC;AAC3F;AAWO,SAAS,QAAQ,MAAoB;AAC1C,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,GAAI,wBAAwB,SAAY,CAAC,IAAI,EAAE,YAAY,KAAK,IAAI,IAAI,oBAAoB;AAAA,EAC9F,CAAC;AACH;AAEA,IAAI,oBAAoB;AAUjB,SAAS,oBAA0B;AACxC,MAAI,qBAAqB,CAAC,kBAAkB,GAAG;AAC7C;AAAA,EACF;AACA,sBAAoB;AACpB,UAAQ,GAAG,QAAQ,CAAC,SAAS;AAC3B,YAAQ,OAAO,SAAS,WAAW,OAAO,CAAC;AAAA,EAC7C,CAAC;AACH;AAcO,SAAS,aAAa,OAA2B;AACtD,MAAI,CAAC,kBAAkB,GAAG;AACxB;AAAA,EACF;AACA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ,MAAM;AAAA,IACd,QAAQ,MAAM;AAAA,IACd,KAAK,MAAM;AAAA,IACX,YAAY,MAAM;AAAA,IAClB,SAAS,uBAAuB,MAAM,KAAK,MAAM,WAAW;AAAA,IAC5D,QAAQ,MAAM;AAAA,IACd,IAAI,MAAM;AAAA,IACV,UAAU,MAAM;AAAA,IAChB,OAAO,MAAM,UAAU,SAAY,SAAY,aAAa,MAAM,KAAK;AAAA,EACzE,CAAC;AACH;AAGA,eAAsB,eAAe,UAAiD;AACpF,MAAI,CAAC,kBAAkB,GAAG;AACxB,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,MAAM,SAAS,MAAM,EAAE,KAAK;AAAA,EACrC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUO,SAAS,UAAU,MAAc,QAAwB;AAC9D,QAAM,WAAW,OAAO,MAAM,KAAK,MAAM;AACzC,QAAM,UAAU,IAAI,YAAY,OAAO;AACvC,SAAO,SAAS,CAAC,UAAmB,SAA6B;AAC/D,QAAI;AACF,YAAM,OACJ,OAAO,UAAU,WACb,QACA,iBAAiB,aACf,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC,IACtC,OAAO,KAAK;AACpB,aAAO,EAAE,MAAM,UAAU,QAAQ,MAAM,KAAK,CAAC;AAAA,IAC/C,QAAQ;AAAA,IAER;AACA,WAAO,SAAS,OAAO,GAAG,IAAI;AAAA,EAChC;AACF;AAEA,IAAI,gBAAgB;AAIb,SAAS,oBAA0B;AACxC,MAAI,iBAAiB,CAAC,kBAAkB,GAAG;AACzC;AAAA,EACF;AACA,kBAAgB;AAChB,YAAU,UAAU,QAAQ,MAAM;AAClC,YAAU,UAAU,QAAQ,MAAM;AACpC;","names":[]}

package/dist/chunk-7OHWEF3I.js

@@ -0,0 +1,98 @@
+import {
+  ApiError
+} from "./chunk-CUL3VB4L.js";
+
+// src/commands/research/output.ts
+var RESEARCH_DATA_NOTE = "Estimates based on third-party SERP data \u2014 not exact figures. Use for directional insights, not precise measurement.";
+function writeResearchJson(envelope) {
+  process.stdout.write(`${JSON.stringify(envelope, null, 2)}
+`);
+}
+function toCsvRow(values) {
+  return values.map((v) => {
+    if (v.includes(",") || v.includes('"') || v.includes("\n")) {
+      return `"${v.replace(/"/g, '""')}"`;
+    }
+    return v;
+  }).join(",");
+}
+function flattenRow(row) {
+  const flat = {};
+  for (const [key, val] of Object.entries(row)) {
+    flat[key] = typeof val === "object" && val !== null ? JSON.stringify(val) : String(val ?? "");
+  }
+  return flat;
+}
+function writeCsv(data, fields) {
+  if (data.length === 0) return;
+  const cols = fields ?? Object.keys(data[0] ?? {});
+  process.stdout.write(`${toCsvRow(cols)}
+`);
+  for (const row of data) {
+    const flat = flattenRow(row);
+    process.stdout.write(`${toCsvRow(cols.map((f) => flat[f] ?? ""))}
+`);
+  }
+}
+function writeJsonl(data) {
+  for (const row of data) {
+    process.stdout.write(`${JSON.stringify(row)}
+`);
+  }
+}
+function writeMd(data, fields) {
+  if (data.length === 0) return;
+  const cols = fields ?? Object.keys(data[0] ?? {});
+  process.stdout.write(`| ${cols.join(" | ")} |
+`);
+  process.stdout.write(`| ${cols.map(() => "---").join(" | ")} |
+`);
+  for (const row of data) {
+    const flat = flattenRow(row);
+    process.stdout.write(`| ${cols.map((f) => markdownCell(flat[f] ?? "")).join(" | ")} |
+`);
+  }
+}
+function markdownCell(value) {
+  return value.replace(/\|/g, "\\|").replace(/\r?\n/g, " ");
+}
+function writeResearchOutput(data, format, fields) {
+  switch (format) {
+    case "csv":
+      writeCsv(data, fields);
+      break;
+    case "jsonl":
+      writeJsonl(data);
+      break;
+    case "md":
+      writeMd(data, fields);
+      break;
+    default:
+      writeResearchJson({ ok: true, data });
+  }
+}
+function writeResearchHints(hints, format) {
+  if (format === "json") {
+    return;
+  }
+  for (const hint of hints) {
+    process.stderr.write(`${hint}
+`);
+  }
+}
+function handleResearchError(err, fixFor) {
+  const code = err instanceof ApiError ? err.code : "NETWORK_ERROR";
+  const message = err instanceof ApiError ? err.message : err instanceof Error ? err.message : "Unexpected error";
+  const fix = fixFor?.(code);
+  writeResearchJson({ ok: false, error: { code, message, ...fix ? { fix } : {} } });
+  process.exit(1);
+}
+
+export {
+  RESEARCH_DATA_NOTE,
+  writeResearchJson,
+  writeResearchOutput,
+  writeResearchHints,
+  handleResearchError
+};
+//# sourceMappingURL=chunk-7OHWEF3I.js.map

package/dist/chunk-7OHWEF3I.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/research/output.ts"],"sourcesContent":["import { ApiError } from \"../../client.ts\";\n\nexport const RESEARCH_DATA_NOTE =\n  \"Estimates based on third-party SERP data — not exact figures. Use for directional insights, not precise measurement.\";\n\ninterface PaginationInfo {\n  offset: number;\n  limit: number;\n  has_more: boolean;\n  next_offset?: number;\n}\n\ninterface ResearchSuccessEnvelope<T> {\n  ok: true;\n  data: T;\n  fields?: Record<string, string>;\n  note?: string;\n  hints?: string[];\n  total_count?: number;\n  pagination?: PaginationInfo;\n  [key: string]: unknown;\n}\n\n/**\n * Structured remediation. A research call that fails is almost never worth\n * aborting the whole job over, so the fix says what to do *instead* of retrying\n * blindly — usually finish the rest and name the gap.\n */\nexport interface ResearchFix {\n  action: \"retry_with_changes\" | \"continue_without\" | \"reject\";\n  explanation: string;\n  correctedCommand?: string;\n}\n\ninterface ResearchErrorEnvelope {\n  ok: false;\n  error: {\n    code: string;\n    message: string;\n    fix?: ResearchFix;\n  };\n}\n\ntype ResearchOutput = ResearchSuccessEnvelope<unknown> | ResearchErrorEnvelope;\n\nexport function writeResearchJson(envelope: ResearchOutput): void {\n  process.stdout.write(`${JSON.stringify(envelope, null, 2)}\\n`);\n}\n\nfunction toCsvRow(values: string[]): string {\n  return values\n    .map((v) => {\n      if (v.includes(\",\") || v.includes('\"') || v.includes(\"\\n\")) {\n        return `\"${v.replace(/\"/g, '\"\"')}\"`;\n      }\n      return v;\n    })\n    .join(\",\");\n}\n\nfunction flattenRow(row: Record<string, unknown>): Record<string, string> {\n  const flat: Record<string, string> = {};\n  for (const [key, val] of Object.entries(row)) {\n    flat[key] = typeof val === \"object\" && val !== null ? JSON.stringify(val) : String(val ?? \"\");\n  }\n  return flat;\n}\n\nfunction writeCsv(data: Array<Record<string, unknown>>, fields?: string[]): void {\n  if (data.length === 0) return;\n  const cols = fields ?? Object.keys(data[0] ?? {});\n  process.stdout.write(`${toCsvRow(cols)}\\n`);\n  for (const row of data) {\n    const flat = flattenRow(row);\n    process.stdout.write(`${toCsvRow(cols.map((f) => flat[f] ?? \"\"))}\\n`);\n  }\n}\n\nfunction writeJsonl(data: Array<Record<string, unknown>>): void {\n  for (const row of data) {\n    process.stdout.write(`${JSON.stringify(row)}\\n`);\n  }\n}\n\nfunction writeMd(data: Array<Record<string, unknown>>, fields?: string[]): void {\n  if (data.length === 0) return;\n  const cols = fields ?? Object.keys(data[0] ?? {});\n  process.stdout.write(`| ${cols.join(\" | \")} |\\n`);\n  process.stdout.write(`| ${cols.map(() => \"---\").join(\" | \")} |\\n`);\n  for (const row of data) {\n    const flat = flattenRow(row);\n    process.stdout.write(`| ${cols.map((f) => markdownCell(flat[f] ?? \"\")).join(\" | \")} |\\n`);\n  }\n}\n\n/** A `|` or a line break inside a cell would end it, shifting every column after it. */\nfunction markdownCell(value: string): string {\n  return value.replace(/\\|/g, \"\\\\|\").replace(/\\r?\\n/g, \" \");\n}\n\nexport function writeResearchOutput(data: Array<Record<string, unknown>>, format: string, fields?: string[]): void {\n  switch (format) {\n    case \"csv\":\n      writeCsv(data, fields);\n      break;\n    case \"jsonl\":\n      writeJsonl(data);\n      break;\n    case \"md\":\n      writeMd(data, fields);\n      break;\n    default:\n      writeResearchJson({ ok: true, data });\n  }\n}\n\n/**\n * csv/md/jsonl render rows and nothing else, so a hint carried in the JSON\n * envelope disappears in exactly the case it matters most — an empty result,\n * where the output is a header line or nothing at all. Send it to stderr instead.\n */\nexport function writeResearchHints(hints: string[], format: string): void {\n  if (format === \"json\") {\n    return;\n  }\n  for (const hint of hints) {\n    process.stderr.write(`${hint}\\n`);\n  }\n}\n\nexport function handleResearchError(err: unknown, fixFor?: (code: string) => ResearchFix | undefined): never {\n  const code = err instanceof ApiError ? err.code : \"NETWORK_ERROR\";\n  const message = err instanceof ApiError ? err.message : err instanceof Error ? err.message : \"Unexpected error\";\n  const fix = fixFor?.(code);\n  writeResearchJson({ ok: false, error: { code, message, ...(fix ? { fix } : {}) } });\n  process.exit(1);\n}\n"],"mappings":";;;;;AAEO,IAAM,qBACX;AA0CK,SAAS,kBAAkB,UAAgC;AAChE,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAAA,CAAI;AAC/D;AAEA,SAAS,SAAS,QAA0B;AAC1C,SAAO,OACJ,IAAI,CAAC,MAAM;AACV,QAAI,EAAE,SAAS,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK,EAAE,SAAS,IAAI,GAAG;AAC1D,aAAO,IAAI,EAAE,QAAQ,MAAM,IAAI,CAAC;AAAA,IAClC;AACA,WAAO;AAAA,EACT,CAAC,EACA,KAAK,GAAG;AACb;AAEA,SAAS,WAAW,KAAsD;AACxE,QAAM,OAA+B,CAAC;AACtC,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC5C,SAAK,GAAG,IAAI,OAAO,QAAQ,YAAY,QAAQ,OAAO,KAAK,UAAU,GAAG,IAAI,OAAO,OAAO,EAAE;AAAA,EAC9F;AACA,SAAO;AACT;AAEA,SAAS,SAAS,MAAsC,QAAyB;AAC/E,MAAI,KAAK,WAAW,EAAG;AACvB,QAAM,OAAO,UAAU,OAAO,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;AAChD,UAAQ,OAAO,MAAM,GAAG,SAAS,IAAI,CAAC;AAAA,CAAI;AAC1C,aAAW,OAAO,MAAM;AACtB,UAAM,OAAO,WAAW,GAAG;AAC3B,YAAQ,OAAO,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;AAAA,CAAI;AAAA,EACtE;AACF;AAEA,SAAS,WAAW,MAA4C;AAC9D,aAAW,OAAO,MAAM;AACtB,YAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,GAAG,CAAC;AAAA,CAAI;AAAA,EACjD;AACF;AAEA,SAAS,QAAQ,MAAsC,QAAyB;AAC9E,MAAI,KAAK,WAAW,EAAG;AACvB,QAAM,OAAO,UAAU,OAAO,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;AAChD,UAAQ,OAAO,MAAM,KAAK,KAAK,KAAK,KAAK,CAAC;AAAA,CAAM;AAChD,UAAQ,OAAO,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,EAAE,KAAK,KAAK,CAAC;AAAA,CAAM;AACjE,aAAW,OAAO,MAAM;AACtB,UAAM,OAAO,WAAW,GAAG;AAC3B,YAAQ,OAAO,MAAM,KAAK,KAAK,IAAI,CAAC,MAAM,aAAa,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,KAAK,CAAC;AAAA,CAAM;AAAA,EAC1F;AACF;AAGA,SAAS,aAAa,OAAuB;AAC3C,SAAO,MAAM,QAAQ,OAAO,KAAK,EAAE,QAAQ,UAAU,GAAG;AAC1D;AAEO,SAAS,oBAAoB,MAAsC,QAAgB,QAAyB;AACjH,UAAQ,QAAQ;AAAA,IACd,KAAK;AACH,eAAS,MAAM,MAAM;AACrB;AAAA,IACF,KAAK;AACH,iBAAW,IAAI;AACf;AAAA,IACF,KAAK;AACH,cAAQ,MAAM,MAAM;AACpB;AAAA,IACF;AACE,wBAAkB,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,EACxC;AACF;AAOO,SAAS,mBAAmB,OAAiB,QAAsB;AACxE,MAAI,WAAW,QAAQ;AACrB;AAAA,EACF;AACA,aAAW,QAAQ,OAAO;AACxB,YAAQ,OAAO,MAAM,GAAG,IAAI;AAAA,CAAI;AAAA,EAClC;AACF;AAEO,SAAS,oBAAoB,KAAc,QAA2D;AAC3G,QAAM,OAAO,eAAe,WAAW,IAAI,OAAO;AAClD,QAAM,UAAU,eAAe,WAAW,IAAI,UAAU,eAAe,QAAQ,IAAI,UAAU;AAC7F,QAAM,MAAM,SAAS,IAAI;AACzB,oBAAkB,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,SAAS,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC,EAAG,EAAE,CAAC;AAClF,UAAQ,KAAK,CAAC;AAChB;","names":[]}

package/dist/chunk-A636XRD7.js

@@ -0,0 +1,159 @@
+import {
+  failApi
+} from "./chunk-JUY47NZ2.js";
+import {
+  CREATIVE_PERFORMANCE_DEFAULT_DAYS,
+  CREATIVE_PERFORMANCE_MAX_DAYS
+} from "./chunk-O6XZIQXZ.js";
+import {
+  apiPost
+} from "./chunk-CUL3VB4L.js";
+import {
+  registerSchema,
+  writeJson
+} from "./chunk-MYTDK3AL.js";
+
+// src/commands/creatives/performance.ts
+import { readFileSync } from "fs";
+import path from "path";
+import { defineCommand } from "citty";
+import { parse as parseYaml } from "yaml";
+var DESCRIPTION = `How each Baker creative is doing in the live Meta ads that show it: spend, impressions, CTR, CPC, results, cost per result, frequency and a fatigue verdict, next to the angle, hook, mechanism and dominant slot its definition set out to test. Video creatives add hookRate (percent of impressions that watched 3 seconds) and holdRate (percent of those that reached a ThruPlay). Use it before briefing new creatives, to learn which angle and mechanism to make next and which creatives to replace.
+
+Start here:
+  baker creatives performance                      # every creative in an ad, last 30 days
+  baker creatives performance --slug spring-offer  # one creative
+  baker creatives performance --days 14 --full     # ids, last-7-day figures, a video's watch funnel, one row per ad
+
+Fatigue follows the Meta playbook (07-creative-audit.md): fresh, fading, fatigued, dead, or too_early (under 14 days or 1,000 impressions) and no_delivery. A low hook rate means the first 3 seconds need new hooks; a working hook with a low hold rate means the body loses people. A creative counts once a Session's publish created an ad with it.`;
+var ARGS = {
+  slug: { type: "string", description: "Only this creative (src/creatives/<slug>/)", required: false },
+  days: {
+    type: "string",
+    description: `Reporting window in days, ending today (1-${CREATIVE_PERFORMANCE_MAX_DAYS}, default ${CREATIVE_PERFORMANCE_DEFAULT_DAYS})`,
+    required: false
+  },
+  full: {
+    type: "boolean",
+    description: "Add ids, last-7-day CTR and cost per result, and one row per ad",
+    required: false,
+    default: false
+  }
+};
+registerSchema({ command: "creatives.performance", description: DESCRIPTION, args: ARGS });
+var INSIGHT_KEYS = [
+  "idea",
+  "message",
+  "evidence",
+  "angle",
+  "hook",
+  "mechanism",
+  "dominantSlot",
+  "persona",
+  "awareness",
+  "hypothesis"
+];
+var FRONTMATTER = /^---\r?\n([\s\S]*?)\r?\n---/;
+function insightValue(value) {
+  if (typeof value === "string") return value.trim() || null;
+  if (typeof value === "number" || typeof value === "boolean") return String(value);
+  return null;
+}
+function definitionInsights(markdown) {
+  const block = FRONTMATTER.exec(markdown)?.[1];
+  if (!block) return null;
+  let parsed;
+  try {
+    parsed = parseYaml(block);
+  } catch {
+    return null;
+  }
+  if (parsed === null || typeof parsed !== "object") return null;
+  const insights = {};
+  for (const [key, raw] of Object.entries(parsed)) {
+    if (!(INSIGHT_KEYS.includes(key) || key.startsWith("source") || key.startsWith("reference"))) continue;
+    const value = insightValue(raw);
+    if (value !== null) insights[key] = value;
+  }
+  return Object.keys(insights).length > 0 ? insights : null;
+}
+function readLocalDefinition(slug) {
+  try {
+    return readFileSync(path.join(process.cwd(), "src", "creatives", slug, "_definition.md"), "utf8");
+  } catch {
+    return null;
+  }
+}
+var COMPARED_FIELDS = [
+  { key: "angle", label: "angle", advice: "Brief the next creative on the cheapest angle with a new hook." },
+  { key: "mechanism", label: "mechanism", advice: "Brief the next creative on the cheapest mechanism." },
+  { key: "dominantSlot", label: "dominant slot", advice: "Lead the next creative with the cheapest dominant slot." }
+];
+function cheapestHint(creatives, { key, label, advice }) {
+  const byValue = /* @__PURE__ */ new Map();
+  for (const creative of creatives) {
+    const value = creative.definition?.[key];
+    if (!value || creative.costPerResult === null) continue;
+    const best = byValue.get(value);
+    if (!best || (best.costPerResult ?? Number.POSITIVE_INFINITY) > creative.costPerResult)
+      byValue.set(value, creative);
+  }
+  if (byValue.size < 2) return null;
+  const ranked = [...byValue.entries()].sort(([, a], [, b]) => (a.costPerResult ?? 0) - (b.costPerResult ?? 0)).map(
+    ([value, creative]) => `"${value}" ${creative.costPerResult}${creative.currency ? ` ${creative.currency}` : ""} (${creative.slug ?? creative.title})`
+  );
+  return `Cost per result by ${label}: ${ranked.join(", ")}. ${advice}`;
+}
+function withDefinitions(response, readDefinition) {
+  const creatives = response.data.creatives.map((creative) => {
+    const markdown = creative.slug ? readDefinition(creative.slug) : null;
+    const definition = markdown ? definitionInsights(markdown) : null;
+    return definition ? { ...creative, definition } : creative;
+  });
+  const hints = [...response.hints ?? []];
+  for (const field of COMPARED_FIELDS) {
+    const hint = cheapestHint(creatives, field);
+    if (hint) hints.push(hint);
+  }
+  const unnamed = creatives.filter((creative) => !creative.definition?.angle).map((c) => c.slug ?? c.title);
+  if (unnamed.length > 0) {
+    hints.push(
+      `No angle recorded for: ${unnamed.join(", ")}. Add angle and hook to src/creatives/<slug>/_definition.md so results show which angle works.`
+    );
+  }
+  return { ...response, data: { ...response.data, creatives }, ...hints.length > 0 ? { hints } : {} };
+}
+function parseDays(raw) {
+  if (raw === void 0) return void 0;
+  const days = Number(raw);
+  if (!Number.isInteger(days) || days < 1 || days > CREATIVE_PERFORMANCE_MAX_DAYS) {
+    throw new Error(`--days must be a whole number from 1 to ${CREATIVE_PERFORMANCE_MAX_DAYS}`);
+  }
+  return days;
+}
+var performanceCommand = defineCommand({
+  meta: { name: "performance", description: DESCRIPTION },
+  args: ARGS,
+  run: async ({ args }) => {
+    try {
+      const body = {};
+      const slug = args.slug;
+      if (slug) body.slug = slug;
+      const days = parseDays(args.days);
+      if (days !== void 0) body.days = days;
+      if (args.full) body.full = true;
+      const response = await apiPost("/api/creatives/performance", body);
+      writeJson(withDefinitions(response, readLocalDefinition));
+    } catch (err) {
+      failApi(err);
+    }
+  }
+});
+
+export {
+  definitionInsights,
+  withDefinitions,
+  parseDays,
+  performanceCommand
+};
+//# sourceMappingURL=chunk-A636XRD7.js.map

package/dist/chunk-A636XRD7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/creatives/performance.ts"],"sourcesContent":["import { readFileSync } from \"node:fs\";\nimport path from \"node:path\";\nimport {\n  CREATIVE_PERFORMANCE_DEFAULT_DAYS,\n  CREATIVE_PERFORMANCE_MAX_DAYS,\n  type CreativePerformance,\n  type CreativesPerformanceRequest,\n  type CreativesPerformanceResponse,\n} from \"@baker/api\";\nimport { defineCommand } from \"citty\";\nimport { parse as parseYaml } from \"yaml\";\nimport { apiPost } from \"../../client.ts\";\nimport { writeJson } from \"../../output.ts\";\nimport { registerSchema } from \"../../schemas.ts\";\nimport { failApi } from \"../actions/shared.ts\";\n\nconst DESCRIPTION = `How each Baker creative is doing in the live Meta ads that show it: spend, impressions, CTR, CPC, results, cost per result, frequency and a fatigue verdict, next to the angle, hook, mechanism and dominant slot its definition set out to test. Video creatives add hookRate (percent of impressions that watched 3 seconds) and holdRate (percent of those that reached a ThruPlay). Use it before briefing new creatives, to learn which angle and mechanism to make next and which creatives to replace.\n\nStart here:\n  baker creatives performance                      # every creative in an ad, last 30 days\n  baker creatives performance --slug spring-offer  # one creative\n  baker creatives performance --days 14 --full     # ids, last-7-day figures, a video's watch funnel, one row per ad\n\nFatigue follows the Meta playbook (07-creative-audit.md): fresh, fading, fatigued, dead, or too_early (under 14 days or 1,000 impressions) and no_delivery. A low hook rate means the first 3 seconds need new hooks; a working hook with a low hold rate means the body loses people. A creative counts once a Session's publish created an ad with it.`;\n\nconst ARGS = {\n  slug: { type: \"string\", description: \"Only this creative (src/creatives/<slug>/)\", required: false },\n  days: {\n    type: \"string\",\n    description: `Reporting window in days, ending today (1-${CREATIVE_PERFORMANCE_MAX_DAYS}, default ${CREATIVE_PERFORMANCE_DEFAULT_DAYS})`,\n    required: false,\n  },\n  full: {\n    type: \"boolean\",\n    description: \"Add ids, last-7-day CTR and cost per result, and one row per ad\",\n    required: false,\n    default: false,\n  },\n} as const;\n\nregisterSchema({ command: \"creatives.performance\", description: DESCRIPTION, args: ARGS });\n\n/**\n * Frontmatter keys that say what a creative set out to test (angle, hook, the\n * mechanism it uses and the slot it leads with) and which reference\n * ad it adapted. Anything named `source…` or `reference…` is kept too, so\n * reference fields added to the collection later come through without a CLI\n * release.\n */\nconst INSIGHT_KEYS = [\n  \"idea\",\n  \"message\",\n  \"evidence\",\n  \"angle\",\n  \"hook\",\n  \"mechanism\",\n  \"dominantSlot\",\n  \"persona\",\n  \"awareness\",\n  \"hypothesis\",\n];\nconst FRONTMATTER = /^---\\r?\\n([\\s\\S]*?)\\r?\\n---/;\n\nfunction insightValue(value: unknown): string | null {\n  if (typeof value === \"string\") return value.trim() || null;\n  if (typeof value === \"number\" || typeof value === \"boolean\") return String(value);\n  return null;\n}\n\n/** The insight fields of a `_definition.md`, or null when it names none. */\nexport function definitionInsights(markdown: string): Record<string, string> | null {\n  const block = FRONTMATTER.exec(markdown)?.[1];\n  if (!block) return null;\n  let parsed: unknown;\n  try {\n    parsed = parseYaml(block);\n  } catch {\n    return null;\n  }\n  if (parsed === null || typeof parsed !== \"object\") return null;\n  const insights: Record<string, string> = {};\n  for (const [key, raw] of Object.entries(parsed as Record<string, unknown>)) {\n    if (!(INSIGHT_KEYS.includes(key) || key.startsWith(\"source\") || key.startsWith(\"reference\"))) continue;\n    const value = insightValue(raw);\n    if (value !== null) insights[key] = value;\n  }\n  return Object.keys(insights).length > 0 ? insights : null;\n}\n\nfunction readLocalDefinition(slug: string): string | null {\n  try {\n    return readFileSync(path.join(process.cwd(), \"src\", \"creatives\", slug, \"_definition.md\"), \"utf8\");\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Definition fields whose values are compared by cost per result, each with\n * the advice its hint closes on. `label` is how the hint names the field.\n */\nconst COMPARED_FIELDS = [\n  { key: \"angle\", label: \"angle\", advice: \"Brief the next creative on the cheapest angle with a new hook.\" },\n  { key: \"mechanism\", label: \"mechanism\", advice: \"Brief the next creative on the cheapest mechanism.\" },\n  { key: \"dominantSlot\", label: \"dominant slot\", advice: \"Lead the next creative with the cheapest dominant slot.\" },\n] as const;\n\nfunction cheapestHint(\n  creatives: readonly CreativePerformance[],\n  { key, label, advice }: (typeof COMPARED_FIELDS)[number],\n): string | null {\n  const byValue = new Map<string, CreativePerformance>();\n  for (const creative of creatives) {\n    const value = creative.definition?.[key];\n    if (!value || creative.costPerResult === null) continue;\n    const best = byValue.get(value);\n    if (!best || (best.costPerResult ?? Number.POSITIVE_INFINITY) > creative.costPerResult)\n      byValue.set(value, creative);\n  }\n  if (byValue.size < 2) return null;\n  const ranked = [...byValue.entries()]\n    .sort(([, a], [, b]) => (a.costPerResult ?? 0) - (b.costPerResult ?? 0))\n    .map(\n      ([value, creative]) =>\n        `\"${value}\" ${creative.costPerResult}${creative.currency ? ` ${creative.currency}` : \"\"} (${creative.slug ?? creative.title})`,\n    );\n  return `Cost per result by ${label}: ${ranked.join(\", \")}. ${advice}`;\n}\n\n/**\n * Adds each creative's definition (read from the local repo, where the agent\n * works) and the hints that need it: which angle, mechanism and dominant slot\n * are cheapest, and which creatives say nothing about what they test.\n */\nexport function withDefinitions(\n  response: CreativesPerformanceResponse,\n  readDefinition: (slug: string) => string | null,\n): CreativesPerformanceResponse {\n  const creatives = response.data.creatives.map((creative) => {\n    const markdown = creative.slug ? readDefinition(creative.slug) : null;\n    const definition = markdown ? definitionInsights(markdown) : null;\n    return definition ? { ...creative, definition } : creative;\n  });\n  const hints = [...(response.hints ?? [])];\n  for (const field of COMPARED_FIELDS) {\n    const hint = cheapestHint(creatives, field);\n    if (hint) hints.push(hint);\n  }\n  const unnamed = creatives.filter((creative) => !creative.definition?.angle).map((c) => c.slug ?? c.title);\n  if (unnamed.length > 0) {\n    hints.push(\n      `No angle recorded for: ${unnamed.join(\", \")}. Add angle and hook to src/creatives/<slug>/_definition.md so results show which angle works.`,\n    );\n  }\n  return { ...response, data: { ...response.data, creatives }, ...(hints.length > 0 ? { hints } : {}) };\n}\n\nexport function parseDays(raw: string | undefined): number | undefined {\n  if (raw === undefined) return undefined;\n  const days = Number(raw);\n  if (!Number.isInteger(days) || days < 1 || days > CREATIVE_PERFORMANCE_MAX_DAYS) {\n    throw new Error(`--days must be a whole number from 1 to ${CREATIVE_PERFORMANCE_MAX_DAYS}`);\n  }\n  return days;\n}\n\nexport const performanceCommand = defineCommand({\n  meta: { name: \"performance\", description: DESCRIPTION },\n  args: ARGS,\n  run: async ({ args }) => {\n    try {\n      const body: CreativesPerformanceRequest = {};\n      const slug = args.slug as string | undefined;\n      if (slug) body.slug = slug;\n      const days = parseDays(args.days as string | undefined);\n      if (days !== undefined) body.days = days;\n      if (args.full) body.full = true;\n      const response = await apiPost<CreativesPerformanceResponse>(\"/api/creatives/performance\", body);\n      writeJson(withDefinitions(response, readLocalDefinition));\n    } catch (err) {\n      failApi(err);\n    }\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;AAAA,SAAS,oBAAoB;AAC7B,OAAO,UAAU;AAQjB,SAAS,qBAAqB;AAC9B,SAAS,SAAS,iBAAiB;AAMnC,IAAM,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASpB,IAAM,OAAO;AAAA,EACX,MAAM,EAAE,MAAM,UAAU,aAAa,8CAA8C,UAAU,MAAM;AAAA,EACnG,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa,6CAA6C,6BAA6B,aAAa,iCAAiC;AAAA,IACrI,UAAU;AAAA,EACZ;AAAA,EACA,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AACF;AAEA,eAAe,EAAE,SAAS,yBAAyB,aAAa,aAAa,MAAM,KAAK,CAAC;AASzF,IAAM,eAAe;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACA,IAAM,cAAc;AAEpB,SAAS,aAAa,OAA+B;AACnD,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,KAAK,KAAK;AACtD,MAAI,OAAO,UAAU,YAAY,OAAO,UAAU,UAAW,QAAO,OAAO,KAAK;AAChF,SAAO;AACT;AAGO,SAAS,mBAAmB,UAAiD;AAClF,QAAM,QAAQ,YAAY,KAAK,QAAQ,IAAI,CAAC;AAC5C,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACJ,MAAI;AACF,aAAS,UAAU,KAAK;AAAA,EAC1B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,WAAW,QAAQ,OAAO,WAAW,SAAU,QAAO;AAC1D,QAAM,WAAmC,CAAC;AAC1C,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,MAAiC,GAAG;AAC1E,QAAI,EAAE,aAAa,SAAS,GAAG,KAAK,IAAI,WAAW,QAAQ,KAAK,IAAI,WAAW,WAAW,GAAI;AAC9F,UAAM,QAAQ,aAAa,GAAG;AAC9B,QAAI,UAAU,KAAM,UAAS,GAAG,IAAI;AAAA,EACtC;AACA,SAAO,OAAO,KAAK,QAAQ,EAAE,SAAS,IAAI,WAAW;AACvD;AAEA,SAAS,oBAAoB,MAA6B;AACxD,MAAI;AACF,WAAO,aAAa,KAAK,KAAK,QAAQ,IAAI,GAAG,OAAO,aAAa,MAAM,gBAAgB,GAAG,MAAM;AAAA,EAClG,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,IAAM,kBAAkB;AAAA,EACtB,EAAE,KAAK,SAAS,OAAO,SAAS,QAAQ,iEAAiE;AAAA,EACzG,EAAE,KAAK,aAAa,OAAO,aAAa,QAAQ,qDAAqD;AAAA,EACrG,EAAE,KAAK,gBAAgB,OAAO,iBAAiB,QAAQ,0DAA0D;AACnH;AAEA,SAAS,aACP,WACA,EAAE,KAAK,OAAO,OAAO,GACN;AACf,QAAM,UAAU,oBAAI,IAAiC;AACrD,aAAW,YAAY,WAAW;AAChC,UAAM,QAAQ,SAAS,aAAa,GAAG;AACvC,QAAI,CAAC,SAAS,SAAS,kBAAkB,KAAM;AAC/C,UAAM,OAAO,QAAQ,IAAI,KAAK;AAC9B,QAAI,CAAC,SAAS,KAAK,iBAAiB,OAAO,qBAAqB,SAAS;AACvE,cAAQ,IAAI,OAAO,QAAQ;AAAA,EAC/B;AACA,MAAI,QAAQ,OAAO,EAAG,QAAO;AAC7B,QAAM,SAAS,CAAC,GAAG,QAAQ,QAAQ,CAAC,EACjC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,MAAM,EAAE,iBAAiB,EAAE,EACtE;AAAA,IACC,CAAC,CAAC,OAAO,QAAQ,MACf,IAAI,KAAK,KAAK,SAAS,aAAa,GAAG,SAAS,WAAW,IAAI,SAAS,QAAQ,KAAK,EAAE,KAAK,SAAS,QAAQ,SAAS,KAAK;AAAA,EAC/H;AACF,SAAO,sBAAsB,KAAK,KAAK,OAAO,KAAK,IAAI,CAAC,KAAK,MAAM;AACrE;AAOO,SAAS,gBACd,UACA,gBAC8B;AAC9B,QAAM,YAAY,SAAS,KAAK,UAAU,IAAI,CAAC,aAAa;AAC1D,UAAM,WAAW,SAAS,OAAO,eAAe,SAAS,IAAI,IAAI;AACjE,UAAM,aAAa,WAAW,mBAAmB,QAAQ,IAAI;AAC7D,WAAO,aAAa,EAAE,GAAG,UAAU,WAAW,IAAI;AAAA,EACpD,CAAC;AACD,QAAM,QAAQ,CAAC,GAAI,SAAS,SAAS,CAAC,CAAE;AACxC,aAAW,SAAS,iBAAiB;AACnC,UAAM,OAAO,aAAa,WAAW,KAAK;AAC1C,QAAI,KAAM,OAAM,KAAK,IAAI;AAAA,EAC3B;AACA,QAAM,UAAU,UAAU,OAAO,CAAC,aAAa,CAAC,SAAS,YAAY,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK;AACxG,MAAI,QAAQ,SAAS,GAAG;AACtB,UAAM;AAAA,MACJ,0BAA0B,QAAQ,KAAK,IAAI,CAAC;AAAA,IAC9C;AAAA,EACF;AACA,SAAO,EAAE,GAAG,UAAU,MAAM,EAAE,GAAG,SAAS,MAAM,UAAU,GAAG,GAAI,MAAM,SAAS,IAAI,EAAE,MAAM,IAAI,CAAC,EAAG;AACtG;AAEO,SAAS,UAAU,KAA6C;AACrE,MAAI,QAAQ,OAAW,QAAO;AAC9B,QAAM,OAAO,OAAO,GAAG;AACvB,MAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,+BAA+B;AAC/E,UAAM,IAAI,MAAM,2CAA2C,6BAA6B,EAAE;AAAA,EAC5F;AACA,SAAO;AACT;AAEO,IAAM,qBAAqB,cAAc;AAAA,EAC9C,MAAM,EAAE,MAAM,eAAe,aAAa,YAAY;AAAA,EACtD,MAAM;AAAA,EACN,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,QAAI;AACF,YAAM,OAAoC,CAAC;AAC3C,YAAM,OAAO,KAAK;AAClB,UAAI,KAAM,MAAK,OAAO;AACtB,YAAM,OAAO,UAAU,KAAK,IAA0B;AACtD,UAAI,SAAS,OAAW,MAAK,OAAO;AACpC,UAAI,KAAK,KAAM,MAAK,OAAO;AAC3B,YAAM,WAAW,MAAM,QAAsC,8BAA8B,IAAI;AAC/F,gBAAU,gBAAgB,UAAU,mBAAmB,CAAC;AAAA,IAC1D,SAAS,KAAK;AACZ,cAAQ,GAAG;AAAA,IACb;AAAA,EACF;AACF,CAAC;","names":[]}