@koda-sl/baker-cli 0.466.0 → 0.468.0

package/dist/chunk-SL5OGWXQ.js

@@ -0,0 +1,98 @@
+import {
+  isRemoteUrl
+} from "./chunk-BCSOWRQL.js";
+import {
+  detectImageContentType,
+  uploadLocalImage
+} from "./chunk-SFHL3KWY.js";
+import {
+  IMAGE_GENERATE_MODELS,
+  MODEL_REGISTRY,
+  VIDEO_GENERATE_MODELS
+} from "./chunk-CHSNHVYF.js";
+import {
+  ApiError,
+  apiPost
+} from "./chunk-MMOTJIV6.js";
+
+// src/commands/studio/modelOptions.ts
+function unionOfStringEnum(node, models, param) {
+  const values = /* @__PURE__ */ new Set();
+  for (const model of models) {
+    const schema = MODEL_REGISTRY[node][model]?.params[param];
+    if (schema?.kind === "string") for (const value of schema.enum ?? []) values.add(value);
+  }
+  return [...values];
+}
+function unionOfNumberEnum(node, models, param) {
+  const values = /* @__PURE__ */ new Set();
+  for (const model of models) {
+    const schema = MODEL_REGISTRY[node][model]?.params[param];
+    if (schema?.kind === "number") for (const value of schema.enum ?? []) values.add(value);
+  }
+  return [...values].sort((a, b) => a - b);
+}
+var IMAGE_MODEL_IDS = [...IMAGE_GENERATE_MODELS];
+var VIDEO_MODEL_IDS = [...VIDEO_GENERATE_MODELS];
+var IMAGE_SIZES = unionOfStringEnum("image_generate", IMAGE_GENERATE_MODELS, "image_size");
+var IMAGE_QUALITIES = unionOfStringEnum("image_generate", IMAGE_GENERATE_MODELS, "quality");
+var CLIP_RESOLUTIONS = unionOfStringEnum("video_generate", VIDEO_GENERATE_MODELS, "resolution");
+var CLIP_DURATIONS = unionOfNumberEnum("video_generate", VIDEO_GENERATE_MODELS, "duration");
+var CLIP_PERSON_GENERATION = unionOfStringEnum("video_generate", VIDEO_GENERATE_MODELS, "person_generation");
+
+// src/commands/studio/references.ts
+var LIBRARY_ID_RE = /^[a-z0-9]{16,}$/i;
+var FILE_EXTENSION_RE = /\.[a-z0-9]{2,5}$/i;
+var PATH_HINT_RE = /[/\\]/;
+function classify(entry) {
+  if (isRemoteUrl(entry)) return { kind: "url", value: entry };
+  if (PATH_HINT_RE.test(entry) || FILE_EXTENSION_RE.test(entry)) return { kind: "path", value: entry };
+  if (LIBRARY_ID_RE.test(entry)) return { kind: "id", value: entry };
+  throw new ApiError(
+    "VALIDATION_ERROR",
+    `"${entry}" is not a library image id, a file path, or an image URL. Pass a comma-separated mix of those.`
+  );
+}
+function parseImageRefs(spec) {
+  return spec.split(",").map((entry) => entry.trim()).filter(Boolean).map(classify);
+}
+var defaultDeps = {
+  ingest: (url) => apiPost("/api/images/ingest", { url, source: "uploaded" }),
+  upload: (path) => uploadLocalImage({ file: path, contentType: detectImageContentType(path), source: "uploaded" })
+};
+async function resolveLibraryImageIds(spec, limit, deps = defaultDeps) {
+  const refs = parseImageRefs(spec);
+  if (limit && refs.length > limit.max) {
+    throw new ApiError("VALIDATION_ERROR", limit.refuse(refs.length));
+  }
+  const imageIds = [];
+  const added = [];
+  for (const ref of refs) {
+    if (ref.kind === "id") {
+      imageIds.push(ref.value);
+      continue;
+    }
+    const { imageId } = ref.kind === "url" ? await deps.ingest(ref.value) : await deps.upload(ref.value).catch(uploadFailure(ref.value));
+    imageIds.push(imageId);
+    added.push(imageId);
+  }
+  return { imageIds, added };
+}
+function uploadFailure(path) {
+  return (error) => {
+    if (error instanceof ApiError) throw error;
+    throw new ApiError("VALIDATION_ERROR", `Could not read "${path}" as an image.`);
+  };
+}
+
+export {
+  IMAGE_MODEL_IDS,
+  VIDEO_MODEL_IDS,
+  IMAGE_SIZES,
+  IMAGE_QUALITIES,
+  CLIP_RESOLUTIONS,
+  CLIP_DURATIONS,
+  CLIP_PERSON_GENERATION,
+  resolveLibraryImageIds
+};
+//# sourceMappingURL=chunk-SL5OGWXQ.js.map

package/dist/chunk-SSVZM3P6.js

@@ -0,0 +1,333 @@
+import {
+  captureProxyCredentials,
+  isChallengeBody,
+  isPrivateAddress,
+  isProxyFailure,
+  nextPlannedRoute,
+  plannedRoutes,
+  refuseNonPublicUrl,
+  shouldEscalate
+} from "./chunk-YPCVPDU7.js";
+
+// ../proxy/src/fetch.ts
+import { lookup as dnsLookup } from "dns";
+import { Agent, ProxyAgent, Response, fetch as undiciFetch } from "undici";
+
+// ../proxy/src/fetchDecision.ts
+function classifyFetchOutcome(signal) {
+  if (isProxyFailure(signal)) return "proxy_unavailable";
+  if (shouldEscalate(signal)) return "blocked";
+  if (signal.status != null && signal.status >= 200 && signal.status < 400 && !signal.challenge) return "ok";
+  return "failed";
+}
+function shouldTryNextRoute(outcome) {
+  return outcome === "blocked" || outcome === "proxy_unavailable";
+}
+var TIMEOUT_CODES = /* @__PURE__ */ new Set([
+  "UND_ERR_CONNECT_TIMEOUT",
+  "UND_ERR_HEADERS_TIMEOUT",
+  "UND_ERR_BODY_TIMEOUT",
+  "ETIMEDOUT"
+]);
+var RESET_CODES = /* @__PURE__ */ new Set(["ECONNRESET", "UND_ERR_SOCKET", "EPIPE"]);
+var PROXY_RESPONSE = /Proxy response \((\d+)\)/;
+function errorCode(error) {
+  if (typeof error !== "object" || error === null) return null;
+  const code = error.code;
+  if (typeof code === "string") return code;
+  const name = error.name;
+  return typeof name === "string" ? name : null;
+}
+function errorMessage(error) {
+  if (typeof error === "object" && error !== null) {
+    const message = error.message;
+    if (typeof message === "string") return message;
+  }
+  return String(error);
+}
+function errorBlockSignal(error, proxied) {
+  const proxyResponse = PROXY_RESPONSE.exec(errorMessage(error));
+  if (proxyResponse) {
+    const status = Number(proxyResponse[1]);
+    return status === 407 ? { status: 407 } : { netError: "ERR_TUNNEL_CONNECTION_FAILED" };
+  }
+  const code = errorCode(error);
+  if (code !== null && TIMEOUT_CODES.has(code)) return { timedOut: true };
+  if (code === "AbortError" || code === "TimeoutError") return { timedOut: true };
+  if (proxied) {
+    return { netError: "ERR_PROXY_CONNECTION_FAILED" };
+  }
+  if (code !== null && RESET_CODES.has(code)) return { netError: "ERR_CONNECTION_RESET" };
+  return { netError: code ?? "ERR_FAILED" };
+}
+function shouldSniffChallenge(contentType, contentLength, maxSniffBytes) {
+  if (contentLength !== null && contentLength > maxSniffBytes) return false;
+  if (contentType === null || contentType.trim() === "") return true;
+  const type = contentType.toLowerCase();
+  if (type.startsWith("image/") || type.startsWith("video/") || type.startsWith("audio/")) return false;
+  return type.includes("text/") || type.includes("html") || type.includes("json") || type.includes("xml");
+}
+
+// ../proxy/src/fetch.ts
+var DEFAULT_TIMEOUT_MS = 6e4;
+var MAX_SNIFF_BYTES = 64 * 1024;
+function tierOf(route) {
+  return route.kind === "proxy" ? route.tier : "direct";
+}
+function agentFor(route) {
+  if (route.kind !== "proxy") return directAgent();
+  const token = Buffer.from(`${route.username}:${route.password}`).toString("base64");
+  return new ProxyAgent({ uri: route.server, token: `Basic ${token}` });
+}
+function directAgent() {
+  return new Agent({
+    connect: {
+      lookup: (hostname, options, callback) => {
+        dnsLookup(hostname, options, (error, address, family) => {
+          if (error) {
+            callback(error, address, family);
+            return;
+          }
+          const found = Array.isArray(address) ? address.map((entry) => entry.address) : [address];
+          const blocked = found.find((entry) => isPrivateAddress(entry));
+          if (blocked !== void 0) {
+            callback(new Error(`${PRIVATE_ADDRESS_CODE}: ${hostname} resolves to ${blocked}`), "", 4);
+            return;
+          }
+          callback(null, address, family);
+        });
+      }
+    }
+  });
+}
+var PRIVATE_ADDRESS_CODE = "EPRIVATEADDR";
+var MAX_REDIRECTS = 20;
+var REDIRECT_STATUS = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
+function originOf(url) {
+  try {
+    return new URL(url).origin;
+  } catch {
+    return null;
+  }
+}
+function refuseRedirect(entry, to) {
+  if (refuseNonPublicUrl(to) === null) return false;
+  const destination = originOf(to);
+  return destination === null || destination !== originOf(entry);
+}
+async function followRedirects(url, init) {
+  let current = url;
+  let request = { ...init, redirect: "manual" };
+  for (let hop = 0; hop <= MAX_REDIRECTS; hop++) {
+    const response = await undiciFetch(current, request);
+    const location = response.headers.get("location");
+    if (!REDIRECT_STATUS.has(response.status) || location === null) return response;
+    await response.body?.cancel();
+    const next = new URL(location, current).toString();
+    if (refuseRedirect(url, next)) {
+      throw new Error(`${PRIVATE_ADDRESS_CODE}: redirected to ${next}`);
+    }
+    const method = (request.method ?? "GET").toUpperCase();
+    const downgrade = response.status === 303 || (response.status === 301 || response.status === 302) && method === "POST";
+    request = downgrade ? { ...request, method: "GET", body: void 0 } : request;
+    current = next;
+  }
+  throw new Error(`too many redirects following ${url}`);
+}
+var NULL_BODY_STATUS = /* @__PURE__ */ new Set([101, 103, 204, 205, 304]);
+function rebuild(response, body) {
+  if (response.status < 200 || response.status > 599 || NULL_BODY_STATUS.has(response.status)) {
+    return new Response(null, { status: response.status, headers: response.headers });
+  }
+  return new Response(body, {
+    status: response.status,
+    statusText: response.statusText,
+    headers: response.headers
+  });
+}
+function declaredLength(response) {
+  const raw = response.headers.get("content-length");
+  if (raw === null) return null;
+  const value = Number(raw);
+  return Number.isFinite(value) ? value : null;
+}
+async function readOnce(response, sniff, maxBytes) {
+  const declared = declaredLength(response);
+  if (maxBytes !== void 0 && declared !== null && declared > maxBytes) {
+    await response.body?.cancel();
+    return { response: rebuild(response, new ArrayBuffer(0)), challenge: false };
+  }
+  const body = await response.arrayBuffer();
+  const wantsSniff = sniff && shouldSniffChallenge(response.headers.get("content-type"), body.byteLength, MAX_SNIFF_BYTES);
+  const challenge = wantsSniff ? isChallengeBody(new TextDecoder().decode(body)) : false;
+  return { response: rebuild(response, body), challenge };
+}
+async function attemptRoute(url, init, route, options) {
+  const tier = tierOf(route);
+  const agent = agentFor(route);
+  const startedAt = Date.now();
+  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const signal = init.signal ? AbortSignal.any([init.signal, AbortSignal.timeout(timeoutMs)]) : AbortSignal.timeout(timeoutMs);
+  try {
+    const raw = await followRedirects(url, { ...init, dispatcher: agent ?? void 0, signal });
+    const read = await readOnce(raw, options.sniffChallenge ?? true, options.maxBytes);
+    const outcome = classifyFetchOutcome({ status: raw.status, challenge: read.challenge });
+    return {
+      attempt: { tier, status: raw.status, ms: Date.now() - startedAt, outcome },
+      response: outcome === "proxy_unavailable" ? null : read.response
+    };
+  } catch (error) {
+    const blockSignal = errorBlockSignal(error, route.kind === "proxy");
+    return {
+      attempt: {
+        tier,
+        status: blockSignal.status ?? void 0,
+        ms: Date.now() - startedAt,
+        outcome: classifyFetchOutcome(blockSignal)
+      },
+      response: null,
+      error
+    };
+  } finally {
+    await agent?.close();
+  }
+}
+async function fetchWithEscalation(url, init, options) {
+  const attempts = [];
+  let originResponse = null;
+  let originTier = "direct";
+  let lastError;
+  const routes = plannedRoutes(url, options.credentials, options.routeOptions);
+  const tried = [];
+  for (let route = routes[0] ?? null; route !== null; route = nextPlannedRoute(routes, tried)) {
+    const rung = await attemptRoute(url, init, route, options);
+    attempts.push(rung.attempt);
+    tried.push({ tier: rung.attempt.tier, proxyFailure: rung.attempt.outcome === "proxy_unavailable" });
+    if (rung.response !== null) {
+      originResponse = rung.response;
+      originTier = rung.attempt.tier;
+    }
+    if (rung.error !== void 0) lastError = rung.error;
+    if (!shouldTryNextRoute(rung.attempt.outcome)) break;
+  }
+  return {
+    response: originResponse,
+    attempts,
+    finalTier: originResponse !== null ? originTier : lastAttempt(attempts)?.tier ?? "direct",
+    ...originResponse === null && lastError !== void 0 ? { error: lastError } : {}
+  };
+}
+function lastAttempt(attempts) {
+  return attempts[attempts.length - 1];
+}
+function describeLadder(result) {
+  const rungs = result.attempts.map((a) => `${a.tier}:${a.outcome}${a.status ? `(${a.status})` : ""}@${a.ms}ms`);
+  return `${rungs.join(" \u2192 ")} | final=${result.finalTier}`;
+}
+function rescued(result) {
+  return result.attempts.some((attempt) => attempt.outcome === "ok");
+}
+function endedBlocked(result) {
+  if (rescued(result)) return false;
+  return result.attempts.some((attempt) => attempt.outcome === "blocked");
+}
+function endedProxyUnavailable(result) {
+  if (rescued(result) || endedBlocked(result)) return false;
+  return result.attempts.some((attempt) => attempt.outcome === "proxy_unavailable");
+}
+function endedPrivateAddress(result) {
+  if (rescued(result)) return false;
+  for (let error = result.error, depth = 0; error instanceof Error && depth < 5; depth++) {
+    if (error.message.includes(PRIVATE_ADDRESS_CODE)) return true;
+    error = error.cause;
+  }
+  return false;
+}
+
+// src/lib/externalFetch.ts
+var BROWSER_HEADERS = {
+  "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36",
+  Accept: "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
+  "Accept-Language": "en-US,en;q=0.9"
+};
+var NOT_PUBLIC_MESSAGE = "That address is not reachable from the public web, so there is nothing to read.";
+var MAX_REMOTE_IMAGE_BYTES = 25e6;
+var ExternalFetchError = class extends Error {
+  /** True when the fault was ours — a route we could not open, not a dead host. */
+  ourFault;
+  constructor(message, ourFault) {
+    super(message);
+    this.name = "ExternalFetchError";
+    this.ourFault = ourFault;
+  }
+};
+async function fetchExternal(url, options = {}) {
+  if (refuseNonPublicUrl(url) !== null) {
+    throw new ExternalFetchError(NOT_PUBLIC_MESSAGE, false);
+  }
+  const result = await fetchWithEscalation(
+    url,
+    { headers: { ...BROWSER_HEADERS, ...options.headers } },
+    {
+      credentials: captureProxyCredentials(),
+      ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs },
+      ...options.maxBytes === void 0 ? {} : { maxBytes: options.maxBytes },
+      ...options.sniffChallenge === void 0 ? {} : { sniffChallenge: options.sniffChallenge }
+    }
+  );
+  if (result.attempts.length > 1) {
+    process.stderr.write(`fetch ladder ${url} \u2014 ${describeLadder(result)}
+`);
+  }
+  if (result.response === null) {
+    if (endedPrivateAddress(result)) {
+      throw new ExternalFetchError(NOT_PUBLIC_MESSAGE, false);
+    }
+    const ourFault = endedProxyUnavailable(result);
+    throw new ExternalFetchError(
+      ourFault ? "Could not open a route to that address." : "That address did not answer.",
+      ourFault
+    );
+  }
+  return { response: result.response, blocked: endedBlocked(result) };
+}
+function refuseOversize(bytes, maxBytes) {
+  if (bytes === null || bytes <= maxBytes) return null;
+  return `That file is ${humanBytes(bytes)} \u2014 the limit is ${humanBytes(maxBytes)}.`;
+}
+function humanBytes(n) {
+  if (n >= 1024 ** 3) return `${(n / 1024 ** 3).toFixed(1)} GB`;
+  if (n >= 1024 ** 2) return `${(n / 1024 ** 2).toFixed(1)} MB`;
+  return `${Math.max(1, Math.round(n / 1024))} KB`;
+}
+function declaredBytes(response) {
+  const raw = response.headers.get("content-length");
+  if (raw === null) return null;
+  const value = Number(raw);
+  return Number.isFinite(value) ? value : null;
+}
+async function fetchExternalBytes(url, options) {
+  const { response, blocked } = await fetchExternal(url, options);
+  if (!response.ok) {
+    throw new ExternalFetchError(`${response.status} ${response.statusText}`, false);
+  }
+  if (blocked) {
+    throw new ExternalFetchError("That host served a security check instead of the file.", false);
+  }
+  const declared = refuseOversize(declaredBytes(response), options.maxBytes);
+  if (declared !== null) {
+    throw new ExternalFetchError(declared, false);
+  }
+  const buffer = Buffer.from(await response.arrayBuffer());
+  const actual = refuseOversize(buffer.byteLength, options.maxBytes);
+  if (actual !== null) {
+    throw new ExternalFetchError(actual, false);
+  }
+  return { buffer, contentType: response.headers.get("content-type") };
+}
+
+export {
+  MAX_REMOTE_IMAGE_BYTES,
+  fetchExternalBytes
+};
+//# sourceMappingURL=chunk-SSVZM3P6.js.map

package/dist/chunk-T64IRDKW.js

@@ -0,0 +1,52 @@
+import {
+  commandFor,
+  declaredArg
+} from "./chunk-D3RTGIT4.js";
+
+// src/cache-flag.ts
+var NO_CACHE_ARG = {
+  type: "boolean",
+  description: "Skip cached results and read live from the platform (slower)",
+  required: false
+};
+var LEGACY = "--skip-cache";
+var CANONICAL = "--no-cache";
+var PARSEABLE = "--noCache";
+function respell(token, from, to) {
+  if (token === from) {
+    return [to];
+  }
+  if (!token.startsWith(`${from}=`)) {
+    return [token];
+  }
+  return token.slice(from.length + 1) === "false" ? [] : [to];
+}
+function normalizeCacheFlag(argv) {
+  return rewriteBeforeDoubleDash(argv, (token) => respell(token, LEGACY, CANONICAL));
+}
+function cacheFlagForCommand(root, argv) {
+  if (!argv.includes(CANONICAL)) {
+    return argv;
+  }
+  const command = commandFor(root, argv);
+  if (!command || declaredArg(command, "no-cache")) {
+    return argv;
+  }
+  return rewriteBeforeDoubleDash(argv, (token) => token === CANONICAL ? [] : [token]);
+}
+function cacheFlagForParser(argv) {
+  return rewriteBeforeDoubleDash(argv, (token) => respell(token, CANONICAL, PARSEABLE));
+}
+function rewriteBeforeDoubleDash(argv, rewrite) {
+  const end = argv.indexOf("--");
+  const limit = end === -1 ? argv.length : end;
+  return argv.flatMap((token, index) => index >= limit ? [token] : rewrite(token));
+}
+
+export {
+  NO_CACHE_ARG,
+  normalizeCacheFlag,
+  cacheFlagForCommand,
+  cacheFlagForParser
+};
+//# sourceMappingURL=chunk-T64IRDKW.js.map

package/dist/chunk-T64IRDKW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cache-flag.ts"],"sourcesContent":["/**\n * One way to ask for a fresh read.\n *\n * Cached reads used to be bypassed by two different flags: `--no-cache` on the\n * Google, GA4, GSC, research and X families, `--skip-cache` on LinkedIn and\n * Meta. They named the two cache layers — `--no-cache` the CLI's own disk cache,\n * `--skip-cache` the server's — which is a distinction no caller has ever wanted\n * to make: a caller asking for fresh data wants fresh data, and the layer that\n * would have answered instead is an implementation detail of ours.\n *\n * The split was not survivable once an unrecognised flag started failing the\n * call instead of being dropped. The reports runtime appends `--no-cache` for\n * `?fresh=true` and cannot know which family a report reads, so every report row\n * backed by `ads linkedin analytics` or `ads meta insights` failed on refresh —\n * silently, as an empty row. So `--no-cache` is the name, on every command that\n * caches anything, and it bypasses both layers.\n */\n\nimport { declaredArg } from \"./output-flag.ts\";\nimport { commandFor, type IntrospectableCommand } from \"./unknown-flags.ts\";\n\n/**\n * The declaration LinkedIn and Meta share, so `baker schema` reads the same on\n * every command in the families this rename covers. The older families still\n * carry their own wording for the same flag.\n */\nexport const NO_CACHE_ARG = {\n  type: \"boolean\",\n  description: \"Skip cached results and read live from the platform (slower)\",\n  required: false,\n} as const;\n\nconst LEGACY = \"--skip-cache\";\nconst CANONICAL = \"--no-cache\";\n/**\n * The spelling handed to the parser, and the reason this module exists twice\n * over. citty resolves a bare `--no-cache` to `cache: false` rather than filling\n * the `no-cache` arg the command declared, so every `args[\"no-cache\"]` read in\n * the CLI sees `undefined` and the flag does nothing at all — the same trap\n * `wantsAsync` in `ads/meta/insights.ts` records for `--no-async`. citty\n * registers `camelCase(name)` as an alias of every declared arg, and mri leaves\n * `--noCache` alone, so this spelling lands in `args[\"no-cache\"]` as intended.\n */\nconst PARSEABLE = \"--noCache\";\n\n/**\n * One token, respelled — and collapsed to the bare flag when it carried a value.\n *\n * `--no-cache=true` is not the same option with a value: mri's `--no-` branch\n * never splits on `=`, so the whole `cache=true` becomes the key and the flag is\n * dropped without a word. The bare flag says the same thing and survives, and\n * the one value mri read as off drops the flag rather than mis-stating it.\n */\nfunction respell(token: string, from: string, to: string): string[] {\n  if (token === from) {\n    return [to];\n  }\n  if (!token.startsWith(`${from}=`)) {\n    return [token];\n  }\n  return token.slice(from.length + 1) === \"false\" ? [] : [to];\n}\n\n/**\n * The legacy spelling, translated before anything parses it.\n *\n * Sandboxes already running carry the old tool docs until their next sync, and\n * an agent that reads `--skip-cache` there would now have its call refused —\n * turning a rename into exactly the failure the rename exists to fix. Kept for\n * one release; the guard in `cache-flag-coverage.test.ts` is what stops the\n * second spelling coming back into the commands themselves.\n */\nexport function normalizeCacheFlag(argv: string[]): string[] {\n  return rewriteBeforeDoubleDash(argv, (token) => respell(token, LEGACY, CANONICAL));\n}\n\n/**\n * `--no-cache` dropped where the command it addresses caches nothing.\n *\n * The reports runtime appends it to every read on `?fresh=true` and cannot know\n * which commands cache, so a report reading `winning-ads winners` failed on\n * every Refresh with \"not an option\" — and the same report answered fine\n * without it. A command with no cache already reads fresh, which is all the\n * flag asks for. Applied before `refuseUnknownFlags`, like `--output json`.\n */\nexport function cacheFlagForCommand(root: IntrospectableCommand, argv: string[]): string[] {\n  if (!argv.includes(CANONICAL)) {\n    return argv;\n  }\n  const command = commandFor(root, argv);\n  if (!command || declaredArg(command, \"no-cache\")) {\n    return argv;\n  }\n  return rewriteBeforeDoubleDash(argv, (token) => (token === CANONICAL ? [] : [token]));\n}\n\n/**\n * The canonical spelling in the form citty can actually parse.\n *\n * Deliberately applied after `refuseUnknownFlags`, not with the rewrite above:\n * that guard quotes the token back to the caller, and a command that does not\n * take this flag should be refused in the spelling the caller typed.\n */\nexport function cacheFlagForParser(argv: string[]): string[] {\n  return rewriteBeforeDoubleDash(argv, (token) => respell(token, CANONICAL, PARSEABLE));\n}\n\n/**\n * Everything after `--` is the caller's own payload, not ours to rewrite — the\n * same boundary `unknown-flags.ts` refuses to read past.\n */\nfunction rewriteBeforeDoubleDash(argv: string[], rewrite: (token: string) => string[]): string[] {\n  const end = argv.indexOf(\"--\");\n  const limit = end === -1 ? argv.length : end;\n  return argv.flatMap((token, index) => (index >= limit ? [token] : rewrite(token)));\n}\n"],"mappings":";;;;;;AA0BO,IAAM,eAAe;AAAA,EAC1B,MAAM;AAAA,EACN,aAAa;AAAA,EACb,UAAU;AACZ;AAEA,IAAM,SAAS;AACf,IAAM,YAAY;AAUlB,IAAM,YAAY;AAUlB,SAAS,QAAQ,OAAe,MAAc,IAAsB;AAClE,MAAI,UAAU,MAAM;AAClB,WAAO,CAAC,EAAE;AAAA,EACZ;AACA,MAAI,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,GAAG;AACjC,WAAO,CAAC,KAAK;AAAA,EACf;AACA,SAAO,MAAM,MAAM,KAAK,SAAS,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE;AAC5D;AAWO,SAAS,mBAAmB,MAA0B;AAC3D,SAAO,wBAAwB,MAAM,CAAC,UAAU,QAAQ,OAAO,QAAQ,SAAS,CAAC;AACnF;AAWO,SAAS,oBAAoB,MAA6B,MAA0B;AACzF,MAAI,CAAC,KAAK,SAAS,SAAS,GAAG;AAC7B,WAAO;AAAA,EACT;AACA,QAAM,UAAU,WAAW,MAAM,IAAI;AACrC,MAAI,CAAC,WAAW,YAAY,SAAS,UAAU,GAAG;AAChD,WAAO;AAAA,EACT;AACA,SAAO,wBAAwB,MAAM,CAAC,UAAW,UAAU,YAAY,CAAC,IAAI,CAAC,KAAK,CAAE;AACtF;AASO,SAAS,mBAAmB,MAA0B;AAC3D,SAAO,wBAAwB,MAAM,CAAC,UAAU,QAAQ,OAAO,WAAW,SAAS,CAAC;AACtF;AAMA,SAAS,wBAAwB,MAAgB,SAAgD;AAC/F,QAAM,MAAM,KAAK,QAAQ,IAAI;AAC7B,QAAM,QAAQ,QAAQ,KAAK,KAAK,SAAS;AACzC,SAAO,KAAK,QAAQ,CAAC,OAAO,UAAW,SAAS,QAAQ,CAAC,KAAK,IAAI,QAAQ,KAAK,CAAE;AACnF;","names":[]}

package/dist/chunk-TFUAWBDZ.js

@@ -0,0 +1,188 @@
+import {
+  analyticsErrorEnvelope
+} from "./chunk-WJQZQBGR.js";
+import {
+  PEOPLE_SEARCH_MAX_TERMS,
+  parsePeopleQuery,
+  peopleLookupRequestSchema
+} from "./chunk-SSJK7FEV.js";
+import {
+  writeJsonEnvelope
+} from "./chunk-6SL6463H.js";
+import {
+  apiPost
+} from "./chunk-MMOTJIV6.js";
+import {
+  registerSchema
+} from "./chunk-D3RTGIT4.js";
+
+// src/commands/analytics/lookup.ts
+import { readFileSync } from "fs";
+import { defineCommand } from "citty";
+function peopleArgs(args2) {
+  const parts = peopleParts(args2);
+  if (parts.length === 0) return {};
+  const people = parsePeopleQuery(parts).terms.map((term) => term.input);
+  return people.length === 0 ? {} : { people };
+}
+function peopleParts(args2) {
+  return [...args2.person ? [String(args2.person)] : [], ...args2["people-file"] ? [readPeopleFile(args2)] : []];
+}
+function readPeopleFile(args2) {
+  try {
+    return readFileSync(String(args2["people-file"]), "utf8");
+  } catch {
+    return "";
+  }
+}
+function unreadablePeopleFile(args2) {
+  if (!args2["people-file"]) return void 0;
+  const path = String(args2["people-file"]);
+  try {
+    readFileSync(path, "utf8");
+    return void 0;
+  } catch {
+    return `Couldn't read --people-file ${path}. Check the path, or pass the people inline with --person.`;
+  }
+}
+function peopleLimitError(args2) {
+  const unreadable = unreadablePeopleFile(args2);
+  if (unreadable !== void 0) return unreadable;
+  const { terms, dropped } = parsePeopleQuery(peopleParts(args2));
+  if (dropped === 0) return void 0;
+  return `${terms.length + dropped} people named; one search takes up to ${PEOPLE_SEARCH_MAX_TERMS}. Split the list and run each part.`;
+}
+function compactRow(row) {
+  const clicks = [...row.googleClick ? ["google"] : [], ...row.metaClick ? ["meta"] : []];
+  const candidates = {
+    input: row.input,
+    readAs: row.kind,
+    found: row.found,
+    problem: row.problem,
+    contacts: row.contacts,
+    events: row.events,
+    firstSeen: row.firstSeen,
+    lastSeen: row.lastSeen,
+    pageViews: row.pageViews,
+    landings: row.landings,
+    visits: row.visits,
+    formSubmits: row.formSubmits,
+    firstSource: row.firstSource,
+    systemEvents: row.systemEvents,
+    pageEvents: row.pageEvents,
+    uploads: row.uploads,
+    uploadedTo: row.uploadedTo,
+    clicks,
+    knownBy: row.knownBy
+  };
+  return Object.fromEntries(
+    Object.entries(candidates).filter(
+      ([key, value]) => key === "found" || !(value === 0 || value === "" || Array.isArray(value) && value.length === 0)
+    )
+  );
+}
+function lookupHints(data) {
+  const hints = [];
+  if (data.dropped > 0) {
+    hints.push(
+      `${data.dropped} lines past the limit of ${PEOPLE_SEARCH_MAX_TERMS} were not looked up. Run the rest separately.`
+    );
+  }
+  const unseen = data.people.filter((row) => !row.found && row.problem === "");
+  if (unseen.length > 0) {
+    hints.push(
+      `Not seen by Baker: ${unseen.map((row) => row.input).join(", ")}. Baker knows a person by what its pages, Forms and connected systems recorded \u2014 a lead that came in through a form or site Baker does not measure, or a source not connected, is not here.`
+    );
+  }
+  for (const row of data.people.filter((person) => person.problem !== "")) {
+    hints.push(`${row.input}: ${row.problem}`);
+  }
+  const found = data.people.filter((row) => row.found);
+  const neverVisited = found.filter((row) => row.pageViews === 0);
+  if (neverVisited.length > 0) {
+    hints.push(
+      `${neverVisited.length} of ${found.length} found never visited a page Baker publishes: Baker knows them only from what their systems reported, so no landing can be credited with them.`
+    );
+  }
+  if (found.length > 0) {
+    hints.push(
+      `\`baker analytics feed --person '${found[0]?.input}' --days 90\` lists everything one of them did, in order \u2014 add more, comma-separated, to follow several.`
+    );
+  }
+  return hints;
+}
+function lookupReport(data, full = false) {
+  const found = data.people.filter((row) => row.found);
+  return {
+    summary: {
+      searched: data.people.length,
+      found: found.length,
+      notFound: data.people.length - found.length,
+      visitedABakerPage: found.filter((row) => row.pageViews > 0).length
+    },
+    people: full ? data.people : data.people.map(compactRow),
+    hints: lookupHints(data)
+  };
+}
+var NO_PEOPLE = "Name at least one person: --person 'ana@empresa.com, deal:40001234567' or --people-file leads.txt.";
+var args = {
+  person: {
+    type: "string",
+    description: "The people, comma-separated: an email, a phone (+34\u2026), a HubSpot contact id, deal:<HubSpot deal id>, a gclid/fbclid, a browser id. Prefix to be exact: email:, phone:, hubspot:, deal:, gclid:, fbclid:, browser:",
+    required: false
+  },
+  "people-file": {
+    type: "string",
+    description: "A file with one person per line \u2014 a column pasted from a CRM export",
+    required: false
+  },
+  full: {
+    type: "boolean",
+    description: "Every field of every line, zeros included",
+    required: false
+  }
+};
+registerSchema({
+  command: "analytics.lookup",
+  description: "What Baker saw of each person in a list, by email, phone, CRM id, deal or click id",
+  args
+});
+var lookupCommand = defineCommand({
+  meta: {
+    name: "lookup",
+    description: `What Baker saw of each person in a list \u2014 all time, one line each \u2014 by whatever the client holds about them. The reconciliation question: "HubSpot says 26 leads yesterday, which of them does Baker have, and where did they come from".
+
+Start here:
+  baker analytics lookup --person 'ana@empresa.com, +34600111222, 90001234567'
+  baker analytics lookup --person 'deal:40001234567, deal:40001234568'   \u2014 HubSpot deal ids, looked up through the deal's contacts
+  baker analytics lookup --people-file leads.txt                           \u2014 one per line, up to ${PEOPLE_SEARCH_MAX_TERMS}
+
+Each line says whether Baker has them, when it first and last saw them, the pages and Forms they touched, what their systems reported (systemEvents: CRM stages, orders), what Baker uploaded for them to ad platforms, which ad click they carried, and every kind of key they are linked by. A bare number is read as a HubSpot contact id or a phone; prefix it to be exact. Emails and phones are hashed by Baker \u2014 say them to the client as they gave them, never as a hash. Follow one with \`baker analytics feed --person <same value>\`.`
+  },
+  args,
+  run: async ({ args: raw }) => {
+    const { people } = peopleArgs(raw);
+    const parsed = peopleLookupRequestSchema.safeParse({ people: people ?? [] });
+    const invalid = peopleLimitError(raw) ?? (parsed.success ? void 0 : NO_PEOPLE);
+    if (invalid !== void 0 || !parsed.success) {
+      writeJsonEnvelope({ ok: false, error: { code: "VALIDATION_ERROR", message: invalid ?? NO_PEOPLE } });
+      process.exit(1);
+    }
+    try {
+      const response = await apiPost("/api/analytics/people", parsed.data);
+      const { hints, ...data } = lookupReport(response.data, raw.full === true);
+      writeJsonEnvelope({ ok: true, data, ...hints.length > 0 ? { hints } : {} });
+    } catch (error) {
+      writeJsonEnvelope({ ok: false, error: analyticsErrorEnvelope(error) });
+      process.exit(1);
+    }
+  }
+});
+
+export {
+  peopleArgs,
+  peopleLimitError,
+  lookupReport,
+  lookupCommand
+};
+//# sourceMappingURL=chunk-TFUAWBDZ.js.map