@koda-sl/baker-cli 0.385.0-dev.ec7b0e42b → 0.385.0-dev.f7ef4c7e1

package/dist/chunk-IELPT4K2.js

@@ -0,0 +1,74 @@
+import {
+  cacheGet,
+  cacheSet,
+  handleConnectionError,
+  needsConnectionFix,
+  writeJsonEnvelope
+} from "./chunk-EIGXX6KI.js";
+import {
+  ApiError,
+  apiGet
+} from "./chunk-CUL3VB4L.js";
+import {
+  getEnv
+} from "./chunk-I4FTS5EE.js";
+
+// src/commands/gsc/resolve.ts
+async function fetchSites(useCache = true) {
+  if (useCache) {
+    const cached = cacheGet("gsc-sites", "list");
+    if (cached) return cached.data;
+  }
+  const params = !useCache ? { "skip-cache": "true" } : void 0;
+  const data = await apiGet("/api/gsc/sites", params);
+  if (useCache) {
+    cacheSet("gsc-sites", "list", data, 60 * 60 * 1e3);
+  }
+  return data;
+}
+async function resolveSiteUrl(args) {
+  const fromArgs = args["site-url"];
+  const fromEnv = getEnv().BAKER_GSC_SITE_URL;
+  const siteUrl = fromArgs || fromEnv;
+  if (siteUrl) return siteUrl;
+  const useCache = !args["no-cache"];
+  try {
+    const sites = await fetchSites(useCache);
+    const [single] = sites;
+    if (sites.length === 1 && single) {
+      process.stderr.write(`Using site "${single.siteUrl}"
+`);
+      return single.siteUrl;
+    }
+    if (sites.length === 0) {
+      handleConnectionError("gsc");
+    }
+    const list = sites.map((s) => `  ${s.siteUrl}  (${s.permissionLevel})`).join("\n");
+    writeJsonEnvelope({
+      ok: false,
+      error: {
+        code: "MULTIPLE_SITES",
+        message: `Multiple sites found. Pass --site-url or set BAKER_GSC_SITE_URL:
+${list}`
+      }
+    });
+    process.exit(1);
+  } catch (err) {
+    if (err instanceof ApiError && needsConnectionFix(err.code, err.message)) {
+      handleConnectionError("gsc", err.message);
+    }
+    writeJsonEnvelope({
+      ok: false,
+      error: {
+        code: "RESOLUTION_ERROR",
+        message: "Could not auto-detect site. Pass --site-url or set BAKER_GSC_SITE_URL."
+      }
+    });
+    process.exit(1);
+  }
+}
+
+export {
+  resolveSiteUrl
+};
+//# sourceMappingURL=chunk-IELPT4K2.js.map

package/dist/chunk-IELPT4K2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/gsc/resolve.ts"],"sourcesContent":["import { ApiError, apiGet } from \"../../client.ts\";\nimport { getEnv } from \"../../env.ts\";\nimport { handleConnectionError, needsConnectionFix } from \"../../error-handler.ts\";\nimport { cacheGet, cacheSet } from \"../ads/cache.ts\";\nimport { writeJsonEnvelope } from \"../ads/output.ts\";\n\ninterface GscSite {\n  siteUrl: string;\n  permissionLevel: string;\n}\n\nasync function fetchSites(useCache = true): Promise<GscSite[]> {\n  if (useCache) {\n    const cached = cacheGet<GscSite[]>(\"gsc-sites\", \"list\");\n    if (cached) return cached.data;\n  }\n  const params = !useCache ? { \"skip-cache\": \"true\" } : undefined;\n  const data = await apiGet<GscSite[]>(\"/api/gsc/sites\", params);\n  if (useCache) {\n    cacheSet(\"gsc-sites\", \"list\", data, 60 * 60 * 1000);\n  }\n  return data;\n}\n\nexport async function resolveSiteUrl(args: Record<string, unknown>): Promise<string> {\n  const fromArgs = args[\"site-url\"] as string | undefined;\n  const fromEnv = getEnv().BAKER_GSC_SITE_URL;\n  const siteUrl = fromArgs || fromEnv;\n\n  if (siteUrl) return siteUrl;\n\n  const useCache = !args[\"no-cache\"];\n\n  try {\n    const sites = await fetchSites(useCache);\n    const [single] = sites;\n    if (sites.length === 1 && single) {\n      process.stderr.write(`Using site \"${single.siteUrl}\"\\n`);\n      return single.siteUrl;\n    }\n    if (sites.length === 0) {\n      handleConnectionError(\"gsc\");\n    }\n    const list = sites.map((s) => `  ${s.siteUrl}  (${s.permissionLevel})`).join(\"\\n\");\n    writeJsonEnvelope({\n      ok: false,\n      error: {\n        code: \"MULTIPLE_SITES\",\n        message: `Multiple sites found. Pass --site-url or set BAKER_GSC_SITE_URL:\\n${list}`,\n      },\n    });\n    process.exit(1);\n  } catch (err) {\n    // The listing call is the only thing that can throw here, so a 401/404 from\n    // it means the connection is missing — not that resolution is ambiguous.\n    if (err instanceof ApiError && needsConnectionFix(err.code, err.message)) {\n      handleConnectionError(\"gsc\", err.message);\n    }\n    writeJsonEnvelope({\n      ok: false,\n      error: {\n        code: \"RESOLUTION_ERROR\",\n        message: \"Could not auto-detect site. Pass --site-url or set BAKER_GSC_SITE_URL.\",\n      },\n    });\n    process.exit(1);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAWA,eAAe,WAAW,WAAW,MAA0B;AAC7D,MAAI,UAAU;AACZ,UAAM,SAAS,SAAoB,aAAa,MAAM;AACtD,QAAI,OAAQ,QAAO,OAAO;AAAA,EAC5B;AACA,QAAM,SAAS,CAAC,WAAW,EAAE,cAAc,OAAO,IAAI;AACtD,QAAM,OAAO,MAAM,OAAkB,kBAAkB,MAAM;AAC7D,MAAI,UAAU;AACZ,aAAS,aAAa,QAAQ,MAAM,KAAK,KAAK,GAAI;AAAA,EACpD;AACA,SAAO;AACT;AAEA,eAAsB,eAAe,MAAgD;AACnF,QAAM,WAAW,KAAK,UAAU;AAChC,QAAM,UAAU,OAAO,EAAE;AACzB,QAAM,UAAU,YAAY;AAE5B,MAAI,QAAS,QAAO;AAEpB,QAAM,WAAW,CAAC,KAAK,UAAU;AAEjC,MAAI;AACF,UAAM,QAAQ,MAAM,WAAW,QAAQ;AACvC,UAAM,CAAC,MAAM,IAAI;AACjB,QAAI,MAAM,WAAW,KAAK,QAAQ;AAChC,cAAQ,OAAO,MAAM,eAAe,OAAO,OAAO;AAAA,CAAK;AACvD,aAAO,OAAO;AAAA,IAChB;AACA,QAAI,MAAM,WAAW,GAAG;AACtB,4BAAsB,KAAK;AAAA,IAC7B;AACA,UAAM,OAAO,MAAM,IAAI,CAAC,MAAM,KAAK,EAAE,OAAO,MAAM,EAAE,eAAe,GAAG,EAAE,KAAK,IAAI;AACjF,sBAAkB;AAAA,MAChB,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,EAAqE,IAAI;AAAA,MACpF;AAAA,IACF,CAAC;AACD,YAAQ,KAAK,CAAC;AAAA,EAChB,SAAS,KAAK;AAGZ,QAAI,eAAe,YAAY,mBAAmB,IAAI,MAAM,IAAI,OAAO,GAAG;AACxE,4BAAsB,OAAO,IAAI,OAAO;AAAA,IAC1C;AACA,sBAAkB;AAAA,MAChB,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,IACF,CAAC;AACD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":[]}

package/dist/chunk-IJMWEO4P.js

@@ -0,0 +1,57 @@
+// src/commands/avatars/profile.ts
+var TEXT_FIELDS = [
+  ["subject", "subjectDescription"],
+  ["persona", "persona"],
+  ["speech", "speech"],
+  ["accent", "accent"],
+  ["motion", "motion"],
+  ["wardrobe", "wardrobe"],
+  ["setting", "setting"]
+];
+function parseGuardrails(value) {
+  if (typeof value !== "string") {
+    return void 0;
+  }
+  return [
+    ...new Set(
+      value.split(",").map((rule) => rule.trim()).filter((rule) => rule.length > 0)
+    )
+  ];
+}
+function buildProfilePatch(args) {
+  const patch = {};
+  for (const [flag, field] of TEXT_FIELDS) {
+    const value = args[flag];
+    if (typeof value === "string") {
+      Object.assign(patch, { [field]: value.trim() });
+    }
+  }
+  const guardrails = parseGuardrails(args.guardrails);
+  if (guardrails) {
+    patch.guardrails = guardrails;
+  }
+  return patch;
+}
+function hasProfileEdit(patch) {
+  return Object.keys(patch).length > 0;
+}
+function mergeProfile(current, patch) {
+  const merged = { ...current };
+  for (const [key, value] of Object.entries(patch)) {
+    if (value.length === 0) {
+      if (key !== "subjectDescription") {
+        delete merged[key];
+      }
+      continue;
+    }
+    Object.assign(merged, { [key]: value });
+  }
+  return merged;
+}
+
+export {
+  buildProfilePatch,
+  hasProfileEdit,
+  mergeProfile
+};
+//# sourceMappingURL=chunk-IJMWEO4P.js.map

package/dist/chunk-IJMWEO4P.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/avatars/profile.ts"],"sourcesContent":["import type { AvatarProfile } from \"@baker/api\";\n\n/**\n * A partial edit of an avatar's written profile.\n *\n * `update` sends the profile whole — the backend replaces it rather than\n * merging — so an agent that passes `--persona` alone would wipe the subject\n * description, which is the one field the identity depends on. The CLI reads\n * the stored profile first and merges this patch over it.\n */\nexport type AvatarProfilePatch = Partial<AvatarProfile>;\n\n/** Written-profile flags, in the order they read on the command line. */\nexport const PROFILE_FLAGS = [\n  \"subject\",\n  \"persona\",\n  \"speech\",\n  \"accent\",\n  \"motion\",\n  \"wardrobe\",\n  \"setting\",\n  \"guardrails\",\n] as const;\n\ntype AvatarProfileTextField = Exclude<keyof AvatarProfile, \"guardrails\">;\n\nconst TEXT_FIELDS: ReadonlyArray<[flag: string, field: AvatarProfileTextField]> = [\n  [\"subject\", \"subjectDescription\"],\n  [\"persona\", \"persona\"],\n  [\"speech\", \"speech\"],\n  [\"accent\", \"accent\"],\n  [\"motion\", \"motion\"],\n  [\"wardrobe\", \"wardrobe\"],\n  [\"setting\", \"setting\"],\n];\n\n/**\n * Split a `--guardrails \"never a, never b\"` flag into single rules.\n *\n * Returns undefined when the flag was omitted so the caller can tell \"leave the\n * stored rules alone\" from \"clear them\" (an empty string).\n */\nexport function parseGuardrails(value: unknown): string[] | undefined {\n  if (typeof value !== \"string\") {\n    return undefined;\n  }\n  return [\n    ...new Set(\n      value\n        .split(\",\")\n        .map((rule) => rule.trim())\n        .filter((rule) => rule.length > 0),\n    ),\n  ];\n}\n\n/** Read the profile flags a caller actually passed. Omitted flags stay absent. */\nexport function buildProfilePatch(args: Record<string, unknown>): AvatarProfilePatch {\n  const patch: AvatarProfilePatch = {};\n  for (const [flag, field] of TEXT_FIELDS) {\n    const value = args[flag];\n    if (typeof value === \"string\") {\n      Object.assign(patch, { [field]: value.trim() });\n    }\n  }\n  const guardrails = parseGuardrails(args.guardrails);\n  if (guardrails) {\n    patch.guardrails = guardrails;\n  }\n  return patch;\n}\n\nexport function hasProfileEdit(patch: AvatarProfilePatch): boolean {\n  return Object.keys(patch).length > 0;\n}\n\n/**\n * Merge a patch over the stored profile. An empty value clears the field it\n * names — except `subjectDescription`, which the identity sheet was fused from\n * and can only ever be replaced, never removed (`update` rejects the empty\n * flag outright, so this is the second line of defence).\n */\nexport function mergeProfile(current: AvatarProfile, patch: AvatarProfilePatch): AvatarProfile {\n  const merged: AvatarProfile = { ...current };\n  for (const [key, value] of Object.entries(patch) as [keyof AvatarProfile, string | string[]][]) {\n    if (value.length === 0) {\n      if (key !== \"subjectDescription\") {\n        delete merged[key];\n      }\n      continue;\n    }\n    Object.assign(merged, { [key]: value });\n  }\n  return merged;\n}\n"],"mappings":";AA0BA,IAAM,cAA4E;AAAA,EAChF,CAAC,WAAW,oBAAoB;AAAA,EAChC,CAAC,WAAW,SAAS;AAAA,EACrB,CAAC,UAAU,QAAQ;AAAA,EACnB,CAAC,UAAU,QAAQ;AAAA,EACnB,CAAC,UAAU,QAAQ;AAAA,EACnB,CAAC,YAAY,UAAU;AAAA,EACvB,CAAC,WAAW,SAAS;AACvB;AAQO,SAAS,gBAAgB,OAAsC;AACpE,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,GAAG,IAAI;AAAA,MACL,MACG,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;AAAA,IACrC;AAAA,EACF;AACF;AAGO,SAAS,kBAAkB,MAAmD;AACnF,QAAM,QAA4B,CAAC;AACnC,aAAW,CAAC,MAAM,KAAK,KAAK,aAAa;AACvC,UAAM,QAAQ,KAAK,IAAI;AACvB,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO,OAAO,OAAO,EAAE,CAAC,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;AAAA,IAChD;AAAA,EACF;AACA,QAAM,aAAa,gBAAgB,KAAK,UAAU;AAClD,MAAI,YAAY;AACd,UAAM,aAAa;AAAA,EACrB;AACA,SAAO;AACT;AAEO,SAAS,eAAe,OAAoC;AACjE,SAAO,OAAO,KAAK,KAAK,EAAE,SAAS;AACrC;AAQO,SAAS,aAAa,SAAwB,OAA0C;AAC7F,QAAM,SAAwB,EAAE,GAAG,QAAQ;AAC3C,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAiD;AAC9F,QAAI,MAAM,WAAW,GAAG;AACtB,UAAI,QAAQ,sBAAsB;AAChC,eAAO,OAAO,GAAG;AAAA,MACnB;AACA;AAAA,IACF;AACA,WAAO,OAAO,QAAQ,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC;AAAA,EACxC;AACA,SAAO;AACT;","names":[]}

package/dist/chunk-IVIJJXXT.js

@@ -0,0 +1,62 @@
+// src/commands/images/brandVerification.ts
+function brandToken(domain) {
+  const bare = domain.trim().toLowerCase().replace(/^[a-z]+:\/\//, "").replace(/^www\./, "").split("/")[0];
+  const label = (bare ?? "").split(".")[0] ?? "";
+  return label;
+}
+function readBackHints(domain, ingested, token, recoverRoute) {
+  if (ingested.length === 0) {
+    return [
+      `Nothing was catalogued, so no described row exists to check the mark against. Re-run with \`--auto-ingest 1\` and read \`textInImage\` / \`subject\` back with \`baker images get <imageId>\`, or open the URL and confirm by eye that it is ${token || domain}'s mark and not another company's.`
+    ];
+  }
+  const readBack = ingested.map((item) => `baker images get ${item.imageId}`).join(" && ");
+  return [
+    `Read the mark itself: run \`${readBack}\` and confirm \`textInImage\` / \`subject\` names ${token || domain}. If it names a different company, this is the wrong mark: discard it and use ${recoverRoute} instead.`,
+    "The catalogued row is described asynchronously, so `textInImage` may be empty on the first read \u2014 re-read once the row is `ready` rather than treating an empty field as a match."
+  ];
+}
+function brandVerificationHints({
+  domain,
+  ingested,
+  hitCount = 0,
+  recover,
+  brandMatch
+}) {
+  if (ingested.length === 0 && hitCount === 0) {
+    return [];
+  }
+  const token = brandToken(domain);
+  const recoverRoute = recover ?? `\`baker images extract https://${domain}\` to pull the mark off the brand's own site`;
+  const readBack = readBackHints(domain, ingested, token, recoverRoute);
+  if (brandMatch?.verdict === "mismatch") {
+    const owner = brandMatch.name ?? "a different company";
+    const ownerDomain = brandMatch.domain ? ` (${brandMatch.domain})` : "";
+    return [
+      `WRONG BRAND \u2014 Brandfetch holds no record for "${domain}". The closest one it has is ${owner}${ownerDomain}, so the mark returned here is very likely ${owner}'s, not ${token || domain}'s. Do not place it. Use ${recoverRoute}, and if that fails, tell the user you could not find their logo rather than shipping this one.`,
+      ...readBack
+    ];
+  }
+  if (brandMatch?.verdict === "confirmed") {
+    const owner = brandMatch.name ?? (token || domain);
+    return [
+      `Brandfetch confirms "${domain}" is ${owner}, which verifies the record \u2014 not the artwork. Its ${owner} record is what the returned files come from, and a provider record can hold the wrong company's image: this is exactly how a domain confirmed as "Zernio" served ClickUp's logo into a client's page.`,
+      ...readBack
+    ];
+  }
+  if (brandMatch?.verdict === "unverified") {
+    return [
+      `This mark could not be checked \u2014 Brandfetch returned no record for "${domain}", so nothing confirms whose logo these files are. Treat it as unverified rather than as correct.`,
+      ...readBack
+    ];
+  }
+  return [
+    `VERIFY BRAND before placing any of these. This matched on the string "${domain}", not on what the image shows \u2014 a 200 from the provider's CDN only means bytes were served, so a wrong brand's mark comes back looking exactly like a right one.`,
+    ...readBack
+  ];
+}
+
+export {
+  brandVerificationHints
+};
+//# sourceMappingURL=chunk-IVIJJXXT.js.map

package/dist/chunk-IVIJJXXT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/images/brandVerification.ts"],"sourcesContent":["/**\n * Brandfetch matches on the domain string, not on what the mark depicts.\n *\n * Resolution is a constructed CDN URL probed with a GET whose bytes are thrown\n * away, so a 200 means \"the CDN served something\", never \"this is that brand's\n * logo\". In a real run `freepik.com` returned the Magnific wordmark and\n * `zernio.com` returned ClickUp — both shipped into a client's page and both\n * only noticed twenty minutes later, by eye.\n *\n * The response now carries `brandMatch`, Brandfetch's own answer to \"whose brand\n * is this domain\", so these hints no longer have to fire blind:\n *\n *   - `mismatch`   — Brandfetch has records and none is this brand. Loudest\n *                    warning available, naming the company whose mark this is.\n *   - `unverified` — the check did not run. Say so; do not imply either verdict.\n *   - `confirmed`  — the metadata agrees. Says nothing about the artwork, and\n *                    the read-back check stays exactly where it was, because\n *                    `zernio.com` is `confirmed` and still serves ClickUp.\n *\n * The hits are never withheld. A warned-about wrong logo is recoverable; a\n * client whose real mark refuses to load is not.\n */\n\ninterface IngestedRef {\n  imageId: string;\n}\n\n/** Brandfetch's verdict, as carried on the `logo` response. Absent for `icon`,\n * which has no brand record to consult, and for an older backend. */\ninterface BrandMatchRef {\n  verdict: \"confirmed\" | \"mismatch\" | \"unverified\";\n  requestedDomain?: string;\n  name?: string;\n  domain?: string;\n}\n\ninterface BrandVerificationInput {\n  /** What was asked for — a domain for `logo`, an icon slug for `icon`. */\n  domain: string;\n  ingested: IngestedRef[];\n  /** Hits returned by the provider. With `--no-auto-ingest` there are hits but\n   * no library row, so the read-back check has nothing to read. */\n  hitCount?: number;\n  /** What to run when the mark turns out to be the wrong brand. Callers whose\n   * subject is not a hostname must pass their own route — `https://<icon-slug>`\n   * is not a page. */\n  recover?: string;\n  brandMatch?: BrandMatchRef;\n}\n\n/**\n * The brand's own word, as it would appear burned into its wordmark:\n * `www.zernio.com` → `zernio`, `linear.app` → `linear`.\n */\nexport function brandToken(domain: string): string {\n  const bare = domain\n    .trim()\n    .toLowerCase()\n    .replace(/^[a-z]+:\\/\\//, \"\")\n    .replace(/^www\\./, \"\")\n    .split(\"/\")[0];\n  const label = (bare ?? \"\").split(\".\")[0] ?? \"\";\n  return label;\n}\n\n/** How to read the mark back, or how to get into a position to. */\nfunction readBackHints(domain: string, ingested: IngestedRef[], token: string, recoverRoute: string): string[] {\n  if (ingested.length === 0) {\n    return [\n      `Nothing was catalogued, so no described row exists to check the mark against. Re-run with \\`--auto-ingest 1\\` and read \\`textInImage\\` / \\`subject\\` back with \\`baker images get <imageId>\\`, or open the URL and confirm by eye that it is ${token || domain}'s mark and not another company's.`,\n    ];\n  }\n  const readBack = ingested.map((item) => `baker images get ${item.imageId}`).join(\" && \");\n  return [\n    `Read the mark itself: run \\`${readBack}\\` and confirm \\`textInImage\\` / \\`subject\\` names ${token || domain}. If it names a different company, this is the wrong mark: discard it and use ${recoverRoute} instead.`,\n    \"The catalogued row is described asynchronously, so `textInImage` may be empty on the first read — re-read once the row is `ready` rather than treating an empty field as a match.\",\n  ];\n}\n\nexport function brandVerificationHints({\n  domain,\n  ingested,\n  hitCount = 0,\n  recover,\n  brandMatch,\n}: BrandVerificationInput): string[] {\n  if (ingested.length === 0 && hitCount === 0) {\n    return [];\n  }\n\n  const token = brandToken(domain);\n  const recoverRoute =\n    recover ?? `\\`baker images extract https://${domain}\\` to pull the mark off the brand's own site`;\n  const readBack = readBackHints(domain, ingested, token, recoverRoute);\n\n  if (brandMatch?.verdict === \"mismatch\") {\n    const owner = brandMatch.name ?? \"a different company\";\n    const ownerDomain = brandMatch.domain ? ` (${brandMatch.domain})` : \"\";\n    return [\n      `WRONG BRAND — Brandfetch holds no record for \"${domain}\". The closest one it has is ${owner}${ownerDomain}, so the mark returned here is very likely ${owner}'s, not ${token || domain}'s. Do not place it. Use ${recoverRoute}, and if that fails, tell the user you could not find their logo rather than shipping this one.`,\n      ...readBack,\n    ];\n  }\n\n  if (brandMatch?.verdict === \"confirmed\") {\n    const owner = brandMatch.name ?? (token || domain);\n    return [\n      `Brandfetch confirms \"${domain}\" is ${owner}, which verifies the record — not the artwork. Its ${owner} record is what the returned files come from, and a provider record can hold the wrong company's image: this is exactly how a domain confirmed as \"Zernio\" served ClickUp's logo into a client's page.`,\n      ...readBack,\n    ];\n  }\n\n  if (brandMatch?.verdict === \"unverified\") {\n    return [\n      `This mark could not be checked — Brandfetch returned no record for \"${domain}\", so nothing confirms whose logo these files are. Treat it as unverified rather than as correct.`,\n      ...readBack,\n    ];\n  }\n\n  // No verdict at all (an `icon` lookup, or a backend that predates the field):\n  // fall back to warning unconditionally, since a wrong brand and a right one\n  // are byte-identical in shape.\n  return [\n    `VERIFY BRAND before placing any of these. This matched on the string \"${domain}\", not on what the image shows — a 200 from the provider's CDN only means bytes were served, so a wrong brand's mark comes back looking exactly like a right one.`,\n    ...readBack,\n  ];\n}\n"],"mappings":";AAsDO,SAAS,WAAW,QAAwB;AACjD,QAAM,OAAO,OACV,KAAK,EACL,YAAY,EACZ,QAAQ,gBAAgB,EAAE,EAC1B,QAAQ,UAAU,EAAE,EACpB,MAAM,GAAG,EAAE,CAAC;AACf,QAAM,SAAS,QAAQ,IAAI,MAAM,GAAG,EAAE,CAAC,KAAK;AAC5C,SAAO;AACT;AAGA,SAAS,cAAc,QAAgB,UAAyB,OAAe,cAAgC;AAC7G,MAAI,SAAS,WAAW,GAAG;AACzB,WAAO;AAAA,MACL,gPAAgP,SAAS,MAAM;AAAA,IACjQ;AAAA,EACF;AACA,QAAM,WAAW,SAAS,IAAI,CAAC,SAAS,oBAAoB,KAAK,OAAO,EAAE,EAAE,KAAK,MAAM;AACvF,SAAO;AAAA,IACL,+BAA+B,QAAQ,sDAAsD,SAAS,MAAM,iFAAiF,YAAY;AAAA,IACzM;AAAA,EACF;AACF;AAEO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA;AACF,GAAqC;AACnC,MAAI,SAAS,WAAW,KAAK,aAAa,GAAG;AAC3C,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,QAAQ,WAAW,MAAM;AAC/B,QAAM,eACJ,WAAW,kCAAkC,MAAM;AACrD,QAAM,WAAW,cAAc,QAAQ,UAAU,OAAO,YAAY;AAEpE,MAAI,YAAY,YAAY,YAAY;AACtC,UAAM,QAAQ,WAAW,QAAQ;AACjC,UAAM,cAAc,WAAW,SAAS,KAAK,WAAW,MAAM,MAAM;AACpE,WAAO;AAAA,MACL,sDAAiD,MAAM,gCAAgC,KAAK,GAAG,WAAW,8CAA8C,KAAK,WAAW,SAAS,MAAM,4BAA4B,YAAY;AAAA,MAC/N,GAAG;AAAA,IACL;AAAA,EACF;AAEA,MAAI,YAAY,YAAY,aAAa;AACvC,UAAM,QAAQ,WAAW,SAAS,SAAS;AAC3C,WAAO;AAAA,MACL,wBAAwB,MAAM,QAAQ,KAAK,2DAAsD,KAAK;AAAA,MACtG,GAAG;AAAA,IACL;AAAA,EACF;AAEA,MAAI,YAAY,YAAY,cAAc;AACxC,WAAO;AAAA,MACL,4EAAuE,MAAM;AAAA,MAC7E,GAAG;AAAA,IACL;AAAA,EACF;AAKA,SAAO;AAAA,IACL,yEAAyE,MAAM;AAAA,IAC/E,GAAG;AAAA,EACL;AACF;","names":[]}