@koda-sl/baker-cli 0.466.0 → 0.467.0

package/README.md

@@ -36,7 +36,7 @@ export BAKER_X_ADS_ACCOUNT_ID="18ce53xyz"
 export BAKER_CHAT_ID="<chat-id>"
 ```
 
-- `BAKER_API_KEY` must start with `bk_` (or `bkr_` for the read-only credential a Session review runs with)
+- `BAKER_API_KEY` must start with `bk_` (or `bkr_` for the read-only credential a Session review runs with, or `bkv_` for the one a published report runs with)
 - A missing or malformed `BAKER_API_KEY` / `BAKER_API_URL` ends any command that talks to Baker with `NOT_CONFIGURED` (non-retryable, with a `fix`) naming the variable and the rule it broke — never its value
 - A malformed `BAKER_GOOGLE_ADS_CUSTOMER_ID`, `BAKER_LINKEDIN_AD_ACCOUNT_ID` or `BAKER_X_ADS_ACCOUNT_ID` ends it with `VALIDATION_ERROR` instead, whose `fix` says to correct or unset the variable
 - `BAKER_API_URL` is your Convex site URL — the deployment the CLI talks to, not an address to show anybody
@@ -47,6 +47,7 @@ export BAKER_CHAT_ID="<chat-id>"
 - `BAKER_X_ADS_ACCOUNT_ID` — default X Ads account ID (base36). Used when `--account-id` is not passed. If neither is set and exactly one X Ads account is connected, it is auto-selected.
 - `BAKER_CHAT_ID` — chat context for staged Work Action commands and staged Scheduled agent create/update/delete/unstage. `scheduled-agents run` does not require it. When set, it is also sent as an `x-baker-chat-id` header on every request, so library additions that apply immediately (images, videos, followed brands) are listed in that chat's changes as already applied.
 - `BAKER_THREAD_ID` — set per turn by the sandbox. Sent as an `x-baker-thread-id` header alongside the chat header, so the tools a command reports or changes are those of whoever sent this turn, even while someone else writes in another thread of the same chat.
+- `BAKER_KEY_SCOPE` — `report` while a report's data endpoint runs in the chat preview (set by the reports runtime). Sent as an `x-baker-key-scope` header, Baker then holds the key to what a published report may do — reads only — so a report that writes fails in the preview rather than once published. It can only narrow the key.
 
 ## Debug logging
 
@@ -3722,6 +3723,22 @@ Stop following a brand by advertiser id → `POST /api/ad-library/unfollow`. Ret
 baker winning-ads unfollow adv_123
 ```
 
+### Decisions about text (`baker decide`)
+
+Typed questions about text, answered by Jev (a decision model) with a probability: a yes/no (`noul`), one option of your set (`choice`) or a level on a scale (`score`). Read-only, text only, never generates prose. Works with a `bk_`, `bkr_` or `bkv_` key, so a published Report can call it.
+
+```bash
+baker decide --questions '{"b2b":{"type":"noul","question":"Is `message` written for a business buyer?"}}' --state '{"message":"…"}'
+baker decide --questions questions.json --items ads.json --state '{"advertiser":"Notion"}' [--full]
+```
+
+- `--questions` (required): `{ "<name>": { "type": "noul", "question" } | { "type": "choice", "question", "options": { "<key>": "<meaning>" } } | { "type": "score", "question", "levels": [lowest, …, highest] } }`.
+- `--items`: `[{ "id", "text": "…" | { "<field>": "…" } }]`. Every question is asked about every item, which reaches Jev as `` `item` `` inside its own question. Up to 500 items of 4,000 characters, 2,000 questions per call; packed into requests of up to 200 questions sent at once.
+- `--state`: shared context, or the text itself when there are no items (inline JSON, a file, `-`, or plain text).
+- Each flag that takes JSON accepts it inline, as a file path, or `-` for stdin.
+- Output: `{ model, answers | items: [{ id, answers | null }], unanswered, requests, costUsd }`. A noul is `{ noul }`; a choice `{ choice, probability, confidence }`; a score `{ score, level, confidence }`. `--full` adds every option's `probabilities`.
+- When the model does not answer, the error carries `fix.action: "degrade"`: carry on without the answers rather than abort.
+
 ### Scheduled agents (`baker scheduled-agents`)
 
 A Scheduled agent is a **trigger** and a **prompt**. When the trigger fires, a Session opens with that prompt and does the job — there is no Task in between. `create`, `update`, and `delete` stage draft ops on `BAKER_CHAT_ID` and apply when the chat is published. `unstage` takes back what this chat staged on one item before Publish (`--index <n>` for one change only, by its index in `list` → `draft.ops`). `list` and `get` include draft state when `BAKER_CHAT_ID` is set; `get` on a published item also returns `runsAs` — who each run acts as and which tools it loads. `run` fires a published item immediately and does not require a chat id. Publishing every run unreviewed is switched on by the user on the item, never through the CLI: `--auto-publish` is refused with an `ask_user` fix.

package/dist/account-2VTEV5C3.js

@@ -0,0 +1,79 @@
+import {
+  csvOrJson,
+  handleLinkedinError,
+  resolveAccountIdArg
+} from "./chunk-J57EXXFU.js";
+import {
+  writeAdsJson,
+  writeAdsOutput
+} from "./chunk-LHNL6JM2.js";
+import {
+  NO_CACHE_ARG
+} from "./chunk-DL2W4N7J.js";
+import "./chunk-WXC3I4CT.js";
+import "./chunk-GXDLWBOY.js";
+import "./chunk-GIWHHCD6.js";
+import "./chunk-XQIOCIDO.js";
+import "./chunk-ML7DLFFY.js";
+import {
+  apiGet
+} from "./chunk-KB5XJHQX.js";
+import "./chunk-YONSWWCF.js";
+import "./chunk-QXDEZKAR.js";
+import "./chunk-4DM6OAQ6.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/ads/linkedin/account.ts
+import { defineCommand } from "citty";
+var accountDetailCommand = defineCommand({
+  meta: {
+    name: "detail",
+    description: `Single LinkedIn ad account detail (currency, status, type).
+
+Examples:
+  baker ads linkedin account --account-id 503001492
+  baker ads linkedin account --account-urn urn:li:sponsoredAccount:503001492 --output md`
+  },
+  args: {
+    "account-id": { type: "string", description: "Numeric account ID or urn:li:sponsoredAccount:N" },
+    "account-urn": { type: "string", description: "Alias for --account-id" },
+    "no-cache": NO_CACHE_ARG,
+    output: { type: "string", description: "json|csv|jsonl|md", default: "json" }
+  },
+  run: async ({ args }) => {
+    const accountId = resolveAccountIdArg(args);
+    try {
+      const params = { "account-id": accountId };
+      if (args["no-cache"]) params["skip-cache"] = "true";
+      const data = await apiGet("/api/ads/linkedin/account", params);
+      const fmt = csvOrJson(args);
+      if (fmt !== "json") {
+        writeAdsOutput([data], fmt);
+        return;
+      }
+      writeAdsJson({ ok: true, data });
+    } catch (err) {
+      handleLinkedinError(err);
+    }
+  }
+});
+var accountCommand = defineCommand({
+  meta: {
+    name: "account",
+    description: `LinkedIn ad account: its detail, and the settings that apply across every ad set in it.
+
+Examples:
+  baker ads linkedin account --account-id 503001492                          \u2014 currency, status, type
+  baker ads linkedin account url-params --param utm_source=linkedin          \u2014 UTMs for every ad in the account`
+  },
+  subCommands: {
+    detail: accountDetailCommand,
+    "url-params": () => import("./write-commands-GLIDTGI3.js").then((m) => m.accountUrlParamsCommand)
+  },
+  args: accountDetailCommand.args,
+  default: "detail"
+});
+export {
+  accountCommand
+};
+//# sourceMappingURL=account-2VTEV5C3.js.map

package/dist/account-2VTEV5C3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/ads/linkedin/account.ts"],"sourcesContent":["import { defineCommand } from \"citty\";\nimport { NO_CACHE_ARG } from \"../../../cache-flag.ts\";\nimport { apiGet } from \"../../../client.ts\";\nimport { writeAdsJson, writeAdsOutput } from \"../output.ts\";\nimport { csvOrJson, handleLinkedinError, resolveAccountIdArg } from \"./shared.ts\";\n\ninterface LinkedinAccountInfo {\n  externalId: string;\n  urn: string;\n  name: string;\n  status: string;\n  type: string;\n  currency?: string;\n  test?: boolean;\n}\n\nconst accountDetailCommand = defineCommand({\n  meta: {\n    name: \"detail\",\n    description: `Single LinkedIn ad account detail (currency, status, type).\n\nExamples:\n  baker ads linkedin account --account-id 503001492\n  baker ads linkedin account --account-urn urn:li:sponsoredAccount:503001492 --output md`,\n  },\n  args: {\n    \"account-id\": { type: \"string\", description: \"Numeric account ID or urn:li:sponsoredAccount:N\" },\n    \"account-urn\": { type: \"string\", description: \"Alias for --account-id\" },\n    \"no-cache\": NO_CACHE_ARG,\n    output: { type: \"string\", description: \"json|csv|jsonl|md\", default: \"json\" },\n  },\n  run: async ({ args }) => {\n    const accountId = resolveAccountIdArg(args);\n    try {\n      const params: Record<string, string> = { \"account-id\": accountId };\n      if (args[\"no-cache\"]) params[\"skip-cache\"] = \"true\";\n      const data = await apiGet<LinkedinAccountInfo>(\"/api/ads/linkedin/account\", params);\n      const fmt = csvOrJson(args);\n      if (fmt !== \"json\") {\n        writeAdsOutput([data] as unknown as Array<Record<string, unknown>>, fmt);\n        return;\n      }\n      writeAdsJson({ ok: true, data });\n    } catch (err) {\n      handleLinkedinError(err);\n    }\n  },\n});\n\n/**\n * Account-level settings, with the detail read as the default so\n * `baker ads linkedin account --account-id N` keeps working unchanged. A parent\n * must never declare `run` — citty falls through to it after the matched\n * subcommand, which would fire a live account read on every `url-params` stage.\n */\nexport const accountCommand = defineCommand({\n  meta: {\n    name: \"account\",\n    description: `LinkedIn ad account: its detail, and the settings that apply across every ad set in it.\n\nExamples:\n  baker ads linkedin account --account-id 503001492                          — currency, status, type\n  baker ads linkedin account url-params --param utm_source=linkedin          — UTMs for every ad in the account`,\n  },\n  subCommands: {\n    detail: accountDetailCommand,\n    \"url-params\": () => import(\"./write-commands.ts\").then((m) => m.accountUrlParamsCommand),\n  },\n  args: accountDetailCommand.args,\n  default: \"detail\",\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,qBAAqB;AAgB9B,IAAM,uBAAuB,cAAc;AAAA,EACzC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA,EAKf;AAAA,EACA,MAAM;AAAA,IACJ,cAAc,EAAE,MAAM,UAAU,aAAa,kDAAkD;AAAA,IAC/F,eAAe,EAAE,MAAM,UAAU,aAAa,yBAAyB;AAAA,IACvE,YAAY;AAAA,IACZ,QAAQ,EAAE,MAAM,UAAU,aAAa,qBAAqB,SAAS,OAAO;AAAA,EAC9E;AAAA,EACA,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,UAAM,YAAY,oBAAoB,IAAI;AAC1C,QAAI;AACF,YAAM,SAAiC,EAAE,cAAc,UAAU;AACjE,UAAI,KAAK,UAAU,EAAG,QAAO,YAAY,IAAI;AAC7C,YAAM,OAAO,MAAM,OAA4B,6BAA6B,MAAM;AAClF,YAAM,MAAM,UAAU,IAAI;AAC1B,UAAI,QAAQ,QAAQ;AAClB,uBAAe,CAAC,IAAI,GAAgD,GAAG;AACvE;AAAA,MACF;AACA,mBAAa,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,IACjC,SAAS,KAAK;AACZ,0BAAoB,GAAG;AAAA,IACzB;AAAA,EACF;AACF,CAAC;AAQM,IAAM,iBAAiB,cAAc;AAAA,EAC1C,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA,EAKf;AAAA,EACA,aAAa;AAAA,IACX,QAAQ;AAAA,IACR,cAAc,MAAM,OAAO,8BAAqB,EAAE,KAAK,CAAC,MAAM,EAAE,uBAAuB;AAAA,EACzF;AAAA,EACA,MAAM,qBAAqB;AAAA,EAC3B,SAAS;AACX,CAAC;","names":[]}

package/dist/account-HZC6X2PH.js

@@ -0,0 +1,49 @@
+import {
+  handleMetaError,
+  resolveAccountIdArg
+} from "./chunk-O3LHCQ7Q.js";
+import {
+  writeAdsJson
+} from "./chunk-LHNL6JM2.js";
+import {
+  NO_CACHE_ARG
+} from "./chunk-DL2W4N7J.js";
+import {
+  apiGet
+} from "./chunk-KB5XJHQX.js";
+import "./chunk-YONSWWCF.js";
+import "./chunk-QXDEZKAR.js";
+import "./chunk-4DM6OAQ6.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/ads/meta/account.ts
+import { defineCommand } from "citty";
+var accountCommand = defineCommand({
+  meta: {
+    name: "account",
+    description: `Show single Meta ad account detail (currency, timezone, balance, business).
+
+Examples:
+  baker ads meta account --account-id act_123
+  BAKER_META_AD_ACCOUNT_ID=act_123 baker ads meta account`
+  },
+  args: {
+    "account-id": { type: "string", description: "Meta ad account ID (act_...)" },
+    "no-cache": NO_CACHE_ARG
+  },
+  run: async ({ args }) => {
+    const accountId = resolveAccountIdArg(args);
+    try {
+      const params = { "account-id": accountId };
+      if (args["no-cache"]) params["skip-cache"] = "true";
+      const data = await apiGet("/api/ads/meta/account", params);
+      writeAdsJson({ ok: true, data });
+    } catch (err) {
+      handleMetaError(err);
+    }
+  }
+});
+export {
+  accountCommand
+};
+//# sourceMappingURL=account-HZC6X2PH.js.map

package/dist/account-MLX2MQTO.js

@@ -0,0 +1,80 @@
+import {
+  CHATGPT_ADS_REFERENCE,
+  runChatgptRead
+} from "./chunk-JSEPE5EP.js";
+import "./chunk-LHNL6JM2.js";
+import {
+  apiGet
+} from "./chunk-KB5XJHQX.js";
+import "./chunk-YONSWWCF.js";
+import "./chunk-QXDEZKAR.js";
+import {
+  registerSchema
+} from "./chunk-4DM6OAQ6.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/ads/chatgpt/account.ts
+import { defineCommand } from "citty";
+registerSchema({
+  command: "ads.chatgpt.account",
+  description: "The connected ChatGPT Ads account: name, currency, timezone, status, and the brand and account reviews that decide whether anything in it can serve.",
+  args: {
+    full: { type: "boolean", description: "Return ChatGPT Ads' own account object", required: false }
+  }
+});
+function accountHints(account) {
+  const hints = [];
+  if (account.brandReview.status !== "approved") {
+    const reason = account.brandReview.reason ? ` (${account.brandReview.reason})` : "";
+    hints.push(
+      `Brand review is ${account.brandReview.status}${reason}: nothing in this account serves until it is approved. Fix it in ChatGPT Ads Manager before changing campaigns.`
+    );
+  }
+  if (account.accountReview && account.accountReview.status !== "approved") {
+    hints.push(`A separate account review is ${account.accountReview.status}; delivery can wait on it too.`);
+  }
+  if (account.status === "paused") {
+    hints.push("The whole account is paused, so no campaign in it serves whatever its own status says.");
+  }
+  return hints;
+}
+var SHOW_ARGS = {
+  full: { type: "boolean", description: "Return ChatGPT Ads' own account object", required: false }
+};
+var accountShowCommand = defineCommand({
+  meta: {
+    name: "show",
+    description: "The connected ChatGPT Ads account. Example: baker ads chatgpt account"
+  },
+  args: SHOW_ARGS,
+  run: async ({ args }) => {
+    await runChatgptRead(
+      CHATGPT_ADS_REFERENCE.account,
+      () => apiGet("/api/ads/chatgpt/account", args.full ? { full: "true" } : void 0),
+      (account) => args.full ? [] : accountHints(account)
+    );
+  }
+});
+var accountCommand = defineCommand({
+  meta: {
+    name: "account",
+    description: `The connected ChatGPT Ads account. Start here: currency and timezone for every figure, and whether reviews let anything serve.
+
+Examples:
+  baker ads chatgpt account
+  baker ads chatgpt account --full
+  baker ads chatgpt account update --favicon-url https://example.com/icon.png   \u2014 staged; applies on publish`
+  },
+  subCommands: {
+    show: accountShowCommand,
+    update: () => import("./account-writes-UNVXSLMV.js").then((m) => m.accountUpdateCommand)
+  },
+  // A parent must never declare `run`: citty falls through to it after the matched subcommand.
+  args: SHOW_ARGS,
+  default: "show"
+});
+export {
+  accountCommand,
+  accountHints
+};
+//# sourceMappingURL=account-MLX2MQTO.js.map

package/dist/account-reads-FCETXYI7.js

@@ -0,0 +1,218 @@
+import {
+  exitWithServiceReadError
+} from "./chunk-J2QOKD2F.js";
+import {
+  failWriteValidation,
+  listFlag,
+  requireCustomerId
+} from "./chunk-CHFKTRB5.js";
+import "./chunk-ERSX3MKH.js";
+import "./chunk-GKXMIXEV.js";
+import "./chunk-4NZ47VXO.js";
+import "./chunk-D5FY4FAK.js";
+import "./chunk-D5MF337I.js";
+import "./chunk-7VHPAGPK.js";
+import {
+  getManagerIdForCustomer,
+  writeJsonEnvelope
+} from "./chunk-LHNL6JM2.js";
+import "./chunk-VHMNSO2B.js";
+import "./chunk-65BQAJMH.js";
+import "./chunk-6GFJFTG6.js";
+import "./chunk-NAMEFVWL.js";
+import "./chunk-GT4UFORX.js";
+import "./chunk-CECS3DHZ.js";
+import "./chunk-XQIOCIDO.js";
+import "./chunk-ML7DLFFY.js";
+import {
+  apiPost
+} from "./chunk-KB5XJHQX.js";
+import "./chunk-YONSWWCF.js";
+import "./chunk-QXDEZKAR.js";
+import {
+  registerSchema
+} from "./chunk-4DM6OAQ6.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/ads/google/account-reads.ts
+import { defineCommand } from "citty";
+function register(command, description, args) {
+  registerSchema({
+    command,
+    description,
+    args: Object.fromEntries(
+      Object.entries(args).map(([name, arg]) => [
+        name,
+        { type: arg.type, description: arg.description, required: false }
+      ])
+    )
+  });
+}
+async function serviceRead(path, customerId, body) {
+  const managerId = getManagerIdForCustomer(customerId);
+  const { data } = await apiPost(path, {
+    customerId,
+    ...managerId ? { managerId } : {},
+    ...body
+  });
+  return data;
+}
+var CUSTOMER_ARG = {
+  "customer-id": { type: "string", description: "Google Ads customer ID (10 digits, no dashes)" }
+};
+var INVOICE_ARGS = {
+  ...CUSTOMER_ARG,
+  month: { type: "string", description: "Issue month, YYYY-MM (default: last month)" }
+};
+register(
+  "ads.google.invoices",
+  "List the invoices Google issued in one month (accounts on monthly invoicing only): id, dates, service period, subtotal/tax/total in micros, PDF link. Start here: `baker ads google invoices --customer-id 1234567890 --month 2026-09`. An account that pays automatically has no invoices \u2014 the error's fix says where its receipts are; carry on.",
+  INVOICE_ARGS
+);
+var invoicesCommand = defineCommand({
+  meta: {
+    name: "invoices",
+    description: `List one month's invoices (monthly-invoicing accounts only). Read-only.
+
+Example:
+  baker ads google invoices --customer-id 1234567890 --month 2026-09`
+  },
+  args: INVOICE_ARGS,
+  run: async ({ args }) => {
+    const customerId = requireCustomerId(args);
+    try {
+      const data = await serviceRead("/api/ads/google/invoices", customerId, {
+        ...args.month ? { month: args.month } : {}
+      });
+      const hints = data.invoices.length === 0 ? [`No invoice was issued in ${data.month}. Try the month before with --month.`] : [
+        "Amounts are micros in each invoice's currency_code (divide by 1,000,000). pdf_url needs the user's Google sign-in."
+      ];
+      writeJsonEnvelope({ ok: true, data, hints });
+    } catch (err) {
+      exitWithServiceReadError(err);
+    }
+  }
+});
+register(
+  "ads.google.identity-verification",
+  "Advertiser identity verification status: each program's status (PENDING_USER_ACTION, PENDING_REVIEW, SUCCESS, FAILURE), deadlines and the link where the user completes it. Start here: `baker ads google identity-verification --customer-id 1234567890`. Google only answers for accounts on monthly invoicing \u2014 otherwise the error's fix says where the user reads it; carry on.",
+  CUSTOMER_ARG
+);
+var identityVerificationCommand = defineCommand({
+  meta: {
+    name: "identity-verification",
+    description: `Advertiser identity verification status and deadlines. Read-only.
+
+Example:
+  baker ads google identity-verification --customer-id 1234567890`
+  },
+  args: CUSTOMER_ARG,
+  run: async ({ args }) => {
+    const customerId = requireCustomerId(args);
+    try {
+      const data = await serviceRead(
+        "/api/ads/google/identity-verification",
+        customerId,
+        {}
+      );
+      const pending = data.programs.filter((program) => program.status === "PENDING_USER_ACTION");
+      const hints = pending.length > 0 ? [
+        `Verification is waiting on the advertiser${pending[0]?.completion_deadline ? ` (deadline ${pending[0].completion_deadline})` : ""}: give the user the action_url \u2014 ads stop serving if it lapses.`
+      ] : [];
+      writeJsonEnvelope(hints.length > 0 ? { ok: true, data, hints } : { ok: true, data });
+    } catch (err) {
+      exitWithServiceReadError(err);
+    }
+  }
+});
+var PREVIEW_ARGS = {
+  ...CUSTOMER_ARG,
+  ads: {
+    type: "string",
+    description: "Comma-separated video ads of Video campaigns as {adGroupId}~{adId} (from `ads list`) \u2014 previewed live on YouTube"
+  },
+  "asset-groups": {
+    type: "string",
+    description: "Comma-separated Performance Max asset group ids (from `asset-groups list`) \u2014 previewed on Google's preview page"
+  }
+};
+register(
+  "ads.google.previews",
+  "Shareable preview links for Performance Max asset groups (Google's preview page) and video ads (live on YouTube) that already exist in the account \u2014 a link the user can open or forward. Start here: `baker ads google previews --customer-id 1234567890 --asset-groups 6743268912`. Returns { previews: [{ target, url, youtube_tv_url, expires_at }] }. Only video ads of Video campaigns can be previewed by ad (search, display and Demand Gen ads have no shareable preview); staged (unpublished) changes cannot be previewed.",
+  PREVIEW_ARGS
+);
+var previewsCommand = defineCommand({
+  meta: {
+    name: "previews",
+    description: `Shareable preview links for existing Performance Max asset groups and video ads. Read-only.
+
+Examples:
+  baker ads google previews --customer-id 1234567890 --asset-groups 6743268912
+  baker ads google previews --customer-id 1234567890 --ads 195752489650~826812181091   # a video ad, live on YouTube`
+  },
+  args: PREVIEW_ARGS,
+  run: async ({ args }) => {
+    const customerId = requireCustomerId(args);
+    const ads = listFlag(args.ads);
+    const assetGroups = listFlag(args["asset-groups"]);
+    if (!ads?.length && !assetGroups?.length) failWriteValidation("pass --ads and/or --asset-groups");
+    try {
+      const data = await serviceRead("/api/ads/google/previews", customerId, {
+        ...ads ? { ads } : {},
+        ...assetGroups ? { assetGroups } : {}
+      });
+      writeJsonEnvelope({
+        ok: true,
+        data,
+        hints: [
+          "Each link expires (expires_at). It shows what is live in the account now, not anything staged in this chat."
+        ]
+      });
+    } catch (err) {
+      exitWithServiceReadError(err);
+    }
+  }
+});
+var BRAND_ARGS = {
+  ...CUSTOMER_ARG,
+  prefix: { type: "string", description: "The start of the brand's name (at least 2 letters)" }
+};
+register(
+  "ads.google.brands",
+  "Find a brand's Google entity id \u2014 what a BRANDS list member names (`keyword-lists add --brand /g/\u2026`). Start here: `baker ads google brands --customer-id 1234567890 --prefix nike`. Several brands can share a name: pick by the URL. Read-only.",
+  BRAND_ARGS
+);
+var brandsCommand = defineCommand({
+  meta: {
+    name: "brands",
+    description: `Find brand entity ids for a brand list (BRANDS). Read-only.
+
+Example:
+  baker ads google brands --customer-id 1234567890 --prefix nike`
+  },
+  args: BRAND_ARGS,
+  run: async ({ args }) => {
+    const customerId = requireCustomerId(args);
+    if (typeof args.prefix !== "string" || args.prefix.trim().length < 2) {
+      failWriteValidation("--prefix needs at least the first 2 letters of the brand");
+    }
+    try {
+      const data = await serviceRead("/api/ads/google/brands", customerId, {
+        prefix: args.prefix
+      });
+      const hints = data.brands.length > 0 ? [
+        "Several brands can share a name \u2014 pick the one whose URL is the brand you mean, then `keyword-lists add --list-ref <BRANDS list> --brand <entity_id>`."
+      ] : ["No brand starts with that \u2014 try a shorter or different prefix."];
+      writeJsonEnvelope({ ok: true, data, hints });
+    } catch (err) {
+      exitWithServiceReadError(err);
+    }
+  }
+});
+export {
+  brandsCommand,
+  identityVerificationCommand,
+  invoicesCommand,
+  previewsCommand
+};
+//# sourceMappingURL=account-reads-FCETXYI7.js.map

package/dist/account-writes-UNVXSLMV.js

@@ -0,0 +1,66 @@
+import {
+  compact,
+  schemaArgs,
+  stageChatgptOp
+} from "./chunk-JE5NMVRX.js";
+import {
+  CHATGPT_ADS_REFERENCE,
+  chatgptFailure
+} from "./chunk-JSEPE5EP.js";
+import {
+  writeJsonEnvelope
+} from "./chunk-LHNL6JM2.js";
+import {
+  apiGet
+} from "./chunk-KB5XJHQX.js";
+import "./chunk-YONSWWCF.js";
+import "./chunk-QXDEZKAR.js";
+import {
+  registerSchema
+} from "./chunk-4DM6OAQ6.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/ads/chatgpt/account-writes.ts
+import { defineCommand } from "citty";
+var REFERENCE = CHATGPT_ADS_REFERENCE.account;
+var UPDATE_ARGS = {
+  name: { type: "string", description: "The advertiser name shown on every card" },
+  "favicon-url": { type: "string", description: "https:// square icon, at least 128 \xD7 128 px" }
+};
+registerSchema({
+  command: "ads.chatgpt.account.update",
+  description: "Stage a change to the advertiser's brand name or icon. It applies when the chat is published and starts a new brand review; nothing in the account serves until it is approved.",
+  args: schemaArgs(UPDATE_ARGS)
+});
+var accountUpdateCommand = defineCommand({
+  meta: {
+    name: "update",
+    description: `Stage a change to the brand name or icon (applies when the chat is published).
+
+Examples:
+  baker ads chatgpt account update --favicon-url https://example.com/icon.png
+  baker ads chatgpt account update --name "GreenLeaf Energy"`
+  },
+  args: UPDATE_ARGS,
+  run: async ({ args }) => {
+    let account;
+    try {
+      account = await apiGet("/api/ads/chatgpt/account");
+    } catch (err) {
+      writeJsonEnvelope({ ...chatgptFailure(err, REFERENCE) });
+      process.exit(1);
+    }
+    await stageChatgptOp(
+      {
+        kind: "account.update",
+        target: account.id,
+        payload: compact({ name: args.name, faviconUrl: args["favicon-url"] })
+      },
+      REFERENCE
+    );
+  }
+});
+export {
+  accountUpdateCommand
+};
+//# sourceMappingURL=account-writes-UNVXSLMV.js.map

package/dist/accounts-4P54UY6F.js

@@ -0,0 +1,115 @@
+import {
+  NO_X_ACCOUNTS_EXPLANATION
+} from "./chunk-H7JOVRHO.js";
+import {
+  connectedResourceHints
+} from "./chunk-P4NSJS54.js";
+import {
+  AVAILABLE_ARG,
+  writeAvailableAccounts
+} from "./chunk-7NTION5F.js";
+import {
+  cacheGet,
+  cacheSet,
+  handleConnectionError,
+  needsConnectionFix,
+  writeAdsJson,
+  writeAdsOutput,
+  writeJsonEnvelope
+} from "./chunk-LHNL6JM2.js";
+import {
+  ApiError,
+  apiGet
+} from "./chunk-KB5XJHQX.js";
+import "./chunk-YONSWWCF.js";
+import "./chunk-QXDEZKAR.js";
+import {
+  registerSchema
+} from "./chunk-4DM6OAQ6.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/ads/x/accounts.ts
+import { defineCommand } from "citty";
+registerSchema({
+  command: "ads.x.accounts",
+  description: "List the X Ads accounts this company connected \u2014 there can be several, and every one of them is yours to work in. Returns accounts with id (base36), name, approval_status, timezone, currency. Run this first to find account IDs for other commands.",
+  args: {
+    "no-cache": { type: "boolean", description: "Skip cache, hit API directly", required: false },
+    output: { type: "string", description: "Format: json|csv|md", required: false, default: "json" },
+    available: AVAILABLE_ARG
+  }
+});
+function accountHints(accounts) {
+  if (accounts.length === 0) return [NO_X_ACCOUNTS_EXPLANATION];
+  return connectedResourceHints({
+    plural: "X Ads accounts",
+    singular: "X Ads account",
+    flag: "--account-id",
+    resources: accounts.map((account) => ({ id: account.id, label: account.name }))
+  });
+}
+function handleAccountsError(err) {
+  if (err instanceof ApiError) {
+    if (needsConnectionFix(err.code, err.message)) {
+      handleConnectionError("x_ads", err.message);
+    }
+    const envelope = {
+      ok: false,
+      error: {
+        code: err.code,
+        message: err.message,
+        fix: { action: "reject", explanation: err.message },
+        retryable: false
+      }
+    };
+    writeAdsJson(envelope);
+    process.exit(1);
+  }
+  writeAdsJson({ ok: false, error: { code: "NETWORK_ERROR", message: "Unexpected error" } });
+  process.exit(1);
+}
+var accountsCommand = defineCommand({
+  meta: {
+    name: "accounts",
+    description: `List accessible X Ads accounts. Returns account IDs needed for all other commands.
+
+Examples:
+  baker ads x accounts
+  baker ads x accounts --available   # every account the login reaches, selected or not`
+  },
+  args: {
+    "no-cache": { type: "boolean", description: "Skip cache", required: false },
+    output: { type: "string", description: "Format: json|csv|md", required: false, default: "json" },
+    available: AVAILABLE_ARG
+  },
+  run: async ({ args }) => {
+    if (args.available) return writeAvailableAccounts("x-ads", handleAccountsError);
+    const useCache = !args["no-cache"];
+    if (useCache) {
+      const cached = cacheGet("x-accounts", "list");
+      if (cached) {
+        writeJsonEnvelope({ ok: true, data: cached.data, cached: true, hints: accountHints(cached.data) });
+        return;
+      }
+    }
+    try {
+      const params = !useCache ? { "skip-cache": "true" } : void 0;
+      const data = await apiGet("/api/ads/x/accounts", params);
+      if (useCache) {
+        cacheSet("x-accounts", "list", data, 60 * 60 * 1e3);
+      }
+      const format = args.output || "json";
+      if (format !== "json") {
+        writeAdsOutput(data, format);
+        return;
+      }
+      writeJsonEnvelope({ ok: true, data, hints: accountHints(data) });
+    } catch (err) {
+      handleAccountsError(err);
+    }
+  }
+});
+export {
+  accountsCommand
+};
+//# sourceMappingURL=accounts-4P54UY6F.js.map