@koda-sl/baker-cli 0.470.0 → 0.471.0-dev.cc57cf0bc

package/README.md

@@ -128,6 +128,19 @@ envelope to narrow; without it a note on stderr says the flag changed nothing. A
 that prints its result beside `ok` rather than under `data` (`canvas validate`,
 `canvas critique`) comes back whole, with a hint saying `--fields` was not applied.
 
+### Reading another company: `--company <id>`
+
+Only an organization's workspace (where its Reports across every company are built) may name a company. Any read takes `--company <id>` and runs as that company of the same organization; a write, stage or generate naming a company is refused, and so is any credential of an ordinary company. The ids come from:
+
+```bash
+baker organization companies     # every company: id, name, domain, timezone, suspended, connected platforms
+baker organization pull          # what each company made, as published, into ~/companies/<company>/ (read-only) + INDEX.md
+```
+
+`baker organization pull [--company <id>] [--dir <path>] [--force]` downloads each company's knowledge, landing pages, Forms, brand, documents, custom agents and checks and Reports, as published, one read-only folder per company, and writes `INDEX.md`. A second run only fetches companies that published since.
+
+On the organization workspace's Runtime (`BAKER_WORKSPACE_KIND=organization`) the CLI offers only reads, plus research and judgment run as the workspace itself; any other command is left out of `--help` and `baker schema` and refused before it is sent. Everywhere else the `organization` family is left out of help.
+
 ### Fresh reads: `--no-cache`
 
 Every command that caches takes `--no-cache`, and it skips **both** cache layers — the

package/dist/account-K34PAC77.js

@@ -0,0 +1,49 @@
+import {
+  handleMetaError,
+  resolveAccountIdArg
+} from "./chunk-XKJNDYD3.js";
+import {
+  writeAdsJson
+} from "./chunk-G3TL63X5.js";
+import {
+  NO_CACHE_ARG
+} from "./chunk-M5G6QOR4.js";
+import {
+  apiGet
+} from "./chunk-AGIX3HNF.js";
+import "./chunk-NY3LDKO4.js";
+import "./chunk-PBI5PQEZ.js";
+import "./chunk-MV3PVKTU.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/ads/meta/account.ts
+import { defineCommand } from "citty";
+var accountCommand = defineCommand({
+  meta: {
+    name: "account",
+    description: `Show single Meta ad account detail (currency, timezone, balance, business).
+
+Examples:
+  baker ads meta account --account-id act_123
+  BAKER_META_AD_ACCOUNT_ID=act_123 baker ads meta account`
+  },
+  args: {
+    "account-id": { type: "string", description: "Meta ad account ID (act_...)" },
+    "no-cache": NO_CACHE_ARG
+  },
+  run: async ({ args }) => {
+    const accountId = resolveAccountIdArg(args);
+    try {
+      const params = { "account-id": accountId };
+      if (args["no-cache"]) params["skip-cache"] = "true";
+      const data = await apiGet("/api/ads/meta/account", params);
+      writeAdsJson({ ok: true, data });
+    } catch (err) {
+      handleMetaError(err);
+    }
+  }
+});
+export {
+  accountCommand
+};
+//# sourceMappingURL=account-K34PAC77.js.map

package/dist/account-KKYBE6KV.js

@@ -0,0 +1,80 @@
+import {
+  CHATGPT_ADS_REFERENCE,
+  runChatgptRead
+} from "./chunk-LA3P65JZ.js";
+import "./chunk-G3TL63X5.js";
+import {
+  apiGet
+} from "./chunk-AGIX3HNF.js";
+import "./chunk-NY3LDKO4.js";
+import "./chunk-PBI5PQEZ.js";
+import {
+  registerSchema
+} from "./chunk-MV3PVKTU.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/ads/chatgpt/account.ts
+import { defineCommand } from "citty";
+registerSchema({
+  command: "ads.chatgpt.account",
+  description: "The connected ChatGPT Ads account: name, currency, timezone, status, and the brand and account reviews that decide whether anything in it can serve.",
+  args: {
+    full: { type: "boolean", description: "Return ChatGPT Ads' own account object", required: false }
+  }
+});
+function accountHints(account) {
+  const hints = [];
+  if (account.brandReview.status !== "approved") {
+    const reason = account.brandReview.reason ? ` (${account.brandReview.reason})` : "";
+    hints.push(
+      `Brand review is ${account.brandReview.status}${reason}: nothing in this account serves until it is approved. Fix it in ChatGPT Ads Manager before changing campaigns.`
+    );
+  }
+  if (account.accountReview && account.accountReview.status !== "approved") {
+    hints.push(`A separate account review is ${account.accountReview.status}; delivery can wait on it too.`);
+  }
+  if (account.status === "paused") {
+    hints.push("The whole account is paused, so no campaign in it serves whatever its own status says.");
+  }
+  return hints;
+}
+var SHOW_ARGS = {
+  full: { type: "boolean", description: "Return ChatGPT Ads' own account object", required: false }
+};
+var accountShowCommand = defineCommand({
+  meta: {
+    name: "show",
+    description: "The connected ChatGPT Ads account. Example: baker ads chatgpt account"
+  },
+  args: SHOW_ARGS,
+  run: async ({ args }) => {
+    await runChatgptRead(
+      CHATGPT_ADS_REFERENCE.account,
+      () => apiGet("/api/ads/chatgpt/account", args.full ? { full: "true" } : void 0),
+      (account) => args.full ? [] : accountHints(account)
+    );
+  }
+});
+var accountCommand = defineCommand({
+  meta: {
+    name: "account",
+    description: `The connected ChatGPT Ads account. Start here: currency and timezone for every figure, and whether reviews let anything serve.
+
+Examples:
+  baker ads chatgpt account
+  baker ads chatgpt account --full
+  baker ads chatgpt account update --favicon-url https://example.com/icon.png   \u2014 staged; applies on publish`
+  },
+  subCommands: {
+    show: accountShowCommand,
+    update: () => import("./account-writes-FVRHSUYP.js").then((m) => m.accountUpdateCommand)
+  },
+  // A parent must never declare `run`: citty falls through to it after the matched subcommand.
+  args: SHOW_ARGS,
+  default: "show"
+});
+export {
+  accountCommand,
+  accountHints
+};
+//# sourceMappingURL=account-KKYBE6KV.js.map

package/dist/account-NKEMDY2U.js

@@ -0,0 +1,79 @@
+import {
+  csvOrJson,
+  handleLinkedinError,
+  resolveAccountIdArg
+} from "./chunk-NHFX7CBM.js";
+import {
+  writeAdsJson,
+  writeAdsOutput
+} from "./chunk-G3TL63X5.js";
+import {
+  NO_CACHE_ARG
+} from "./chunk-M5G6QOR4.js";
+import "./chunk-RPJYEJDQ.js";
+import "./chunk-GXDLWBOY.js";
+import "./chunk-GIWHHCD6.js";
+import "./chunk-XQIOCIDO.js";
+import "./chunk-I2DNBEV6.js";
+import {
+  apiGet
+} from "./chunk-AGIX3HNF.js";
+import "./chunk-NY3LDKO4.js";
+import "./chunk-PBI5PQEZ.js";
+import "./chunk-MV3PVKTU.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/ads/linkedin/account.ts
+import { defineCommand } from "citty";
+var accountDetailCommand = defineCommand({
+  meta: {
+    name: "detail",
+    description: `Single LinkedIn ad account detail (currency, status, type).
+
+Examples:
+  baker ads linkedin account --account-id 503001492
+  baker ads linkedin account --account-urn urn:li:sponsoredAccount:503001492 --output md`
+  },
+  args: {
+    "account-id": { type: "string", description: "Numeric account ID or urn:li:sponsoredAccount:N" },
+    "account-urn": { type: "string", description: "Alias for --account-id" },
+    "no-cache": NO_CACHE_ARG,
+    output: { type: "string", description: "json|csv|jsonl|md", default: "json" }
+  },
+  run: async ({ args }) => {
+    const accountId = resolveAccountIdArg(args);
+    try {
+      const params = { "account-id": accountId };
+      if (args["no-cache"]) params["skip-cache"] = "true";
+      const data = await apiGet("/api/ads/linkedin/account", params);
+      const fmt = csvOrJson(args);
+      if (fmt !== "json") {
+        writeAdsOutput([data], fmt);
+        return;
+      }
+      writeAdsJson({ ok: true, data });
+    } catch (err) {
+      handleLinkedinError(err);
+    }
+  }
+});
+var accountCommand = defineCommand({
+  meta: {
+    name: "account",
+    description: `LinkedIn ad account: its detail, and the settings that apply across every ad set in it.
+
+Examples:
+  baker ads linkedin account --account-id 503001492                          \u2014 currency, status, type
+  baker ads linkedin account url-params --param utm_source=linkedin          \u2014 UTMs for every ad in the account`
+  },
+  subCommands: {
+    detail: accountDetailCommand,
+    "url-params": () => import("./write-commands-D5X6N7Q4.js").then((m) => m.accountUrlParamsCommand)
+  },
+  args: accountDetailCommand.args,
+  default: "detail"
+});
+export {
+  accountCommand
+};
+//# sourceMappingURL=account-NKEMDY2U.js.map

package/dist/account-reads-6IFA5UYY.js

@@ -0,0 +1,218 @@
+import {
+  exitWithServiceReadError
+} from "./chunk-EBMS5SW3.js";
+import {
+  failWriteValidation,
+  listFlag,
+  requireCustomerId
+} from "./chunk-EXXCDFEM.js";
+import "./chunk-ERSX3MKH.js";
+import "./chunk-P6STUJ22.js";
+import "./chunk-4NZ47VXO.js";
+import "./chunk-D5FY4FAK.js";
+import "./chunk-5BMPVG43.js";
+import "./chunk-SEPPFM5S.js";
+import {
+  getManagerIdForCustomer,
+  writeJsonEnvelope
+} from "./chunk-G3TL63X5.js";
+import "./chunk-KOMLRHVH.js";
+import "./chunk-M22GYDBE.js";
+import "./chunk-JVRA7EGL.js";
+import "./chunk-3BLSLGVH.js";
+import "./chunk-B3C5RXM4.js";
+import "./chunk-KLVHEGSW.js";
+import "./chunk-XQIOCIDO.js";
+import "./chunk-I2DNBEV6.js";
+import {
+  apiPost
+} from "./chunk-AGIX3HNF.js";
+import "./chunk-NY3LDKO4.js";
+import "./chunk-PBI5PQEZ.js";
+import {
+  registerSchema
+} from "./chunk-MV3PVKTU.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/ads/google/account-reads.ts
+import { defineCommand } from "citty";
+function register(command, description, args) {
+  registerSchema({
+    command,
+    description,
+    args: Object.fromEntries(
+      Object.entries(args).map(([name, arg]) => [
+        name,
+        { type: arg.type, description: arg.description, required: false }
+      ])
+    )
+  });
+}
+async function serviceRead(path, customerId, body) {
+  const managerId = getManagerIdForCustomer(customerId);
+  const { data } = await apiPost(path, {
+    customerId,
+    ...managerId ? { managerId } : {},
+    ...body
+  });
+  return data;
+}
+var CUSTOMER_ARG = {
+  "customer-id": { type: "string", description: "Google Ads customer ID (10 digits, no dashes)" }
+};
+var INVOICE_ARGS = {
+  ...CUSTOMER_ARG,
+  month: { type: "string", description: "Issue month, YYYY-MM (default: last month)" }
+};
+register(
+  "ads.google.invoices",
+  "List the invoices Google issued in one month (accounts on monthly invoicing only): id, dates, service period, subtotal/tax/total in micros, PDF link. Start here: `baker ads google invoices --customer-id 1234567890 --month 2026-09`. An account that pays automatically has no invoices \u2014 the error's fix says where its receipts are; carry on.",
+  INVOICE_ARGS
+);
+var invoicesCommand = defineCommand({
+  meta: {
+    name: "invoices",
+    description: `List one month's invoices (monthly-invoicing accounts only). Read-only.
+
+Example:
+  baker ads google invoices --customer-id 1234567890 --month 2026-09`
+  },
+  args: INVOICE_ARGS,
+  run: async ({ args }) => {
+    const customerId = requireCustomerId(args);
+    try {
+      const data = await serviceRead("/api/ads/google/invoices", customerId, {
+        ...args.month ? { month: args.month } : {}
+      });
+      const hints = data.invoices.length === 0 ? [`No invoice was issued in ${data.month}. Try the month before with --month.`] : [
+        "Amounts are micros in each invoice's currency_code (divide by 1,000,000). pdf_url needs the user's Google sign-in."
+      ];
+      writeJsonEnvelope({ ok: true, data, hints });
+    } catch (err) {
+      exitWithServiceReadError(err);
+    }
+  }
+});
+register(
+  "ads.google.identity-verification",
+  "Advertiser identity verification status: each program's status (PENDING_USER_ACTION, PENDING_REVIEW, SUCCESS, FAILURE), deadlines and the link where the user completes it. Start here: `baker ads google identity-verification --customer-id 1234567890`. Google only answers for accounts on monthly invoicing \u2014 otherwise the error's fix says where the user reads it; carry on.",
+  CUSTOMER_ARG
+);
+var identityVerificationCommand = defineCommand({
+  meta: {
+    name: "identity-verification",
+    description: `Advertiser identity verification status and deadlines. Read-only.
+
+Example:
+  baker ads google identity-verification --customer-id 1234567890`
+  },
+  args: CUSTOMER_ARG,
+  run: async ({ args }) => {
+    const customerId = requireCustomerId(args);
+    try {
+      const data = await serviceRead(
+        "/api/ads/google/identity-verification",
+        customerId,
+        {}
+      );
+      const pending = data.programs.filter((program) => program.status === "PENDING_USER_ACTION");
+      const hints = pending.length > 0 ? [
+        `Verification is waiting on the advertiser${pending[0]?.completion_deadline ? ` (deadline ${pending[0].completion_deadline})` : ""}: give the user the action_url \u2014 ads stop serving if it lapses.`
+      ] : [];
+      writeJsonEnvelope(hints.length > 0 ? { ok: true, data, hints } : { ok: true, data });
+    } catch (err) {
+      exitWithServiceReadError(err);
+    }
+  }
+});
+var PREVIEW_ARGS = {
+  ...CUSTOMER_ARG,
+  ads: {
+    type: "string",
+    description: "Comma-separated video ads of Video campaigns as {adGroupId}~{adId} (from `ads list`) \u2014 previewed live on YouTube"
+  },
+  "asset-groups": {
+    type: "string",
+    description: "Comma-separated Performance Max asset group ids (from `asset-groups list`) \u2014 previewed on Google's preview page"
+  }
+};
+register(
+  "ads.google.previews",
+  "Shareable preview links for Performance Max asset groups (Google's preview page) and video ads (live on YouTube) that already exist in the account \u2014 a link the user can open or forward. Start here: `baker ads google previews --customer-id 1234567890 --asset-groups 6743268912`. Returns { previews: [{ target, url, youtube_tv_url, expires_at }] }. Only video ads of Video campaigns can be previewed by ad (search, display and Demand Gen ads have no shareable preview); staged (unpublished) changes cannot be previewed.",
+  PREVIEW_ARGS
+);
+var previewsCommand = defineCommand({
+  meta: {
+    name: "previews",
+    description: `Shareable preview links for existing Performance Max asset groups and video ads. Read-only.
+
+Examples:
+  baker ads google previews --customer-id 1234567890 --asset-groups 6743268912
+  baker ads google previews --customer-id 1234567890 --ads 195752489650~826812181091   # a video ad, live on YouTube`
+  },
+  args: PREVIEW_ARGS,
+  run: async ({ args }) => {
+    const customerId = requireCustomerId(args);
+    const ads = listFlag(args.ads);
+    const assetGroups = listFlag(args["asset-groups"]);
+    if (!ads?.length && !assetGroups?.length) failWriteValidation("pass --ads and/or --asset-groups");
+    try {
+      const data = await serviceRead("/api/ads/google/previews", customerId, {
+        ...ads ? { ads } : {},
+        ...assetGroups ? { assetGroups } : {}
+      });
+      writeJsonEnvelope({
+        ok: true,
+        data,
+        hints: [
+          "Each link expires (expires_at). It shows what is live in the account now, not anything staged in this chat."
+        ]
+      });
+    } catch (err) {
+      exitWithServiceReadError(err);
+    }
+  }
+});
+var BRAND_ARGS = {
+  ...CUSTOMER_ARG,
+  prefix: { type: "string", description: "The start of the brand's name (at least 2 letters)" }
+};
+register(
+  "ads.google.brands",
+  "Find a brand's Google entity id \u2014 what a BRANDS list member names (`keyword-lists add --brand /g/\u2026`). Start here: `baker ads google brands --customer-id 1234567890 --prefix nike`. Several brands can share a name: pick by the URL. Read-only.",
+  BRAND_ARGS
+);
+var brandsCommand = defineCommand({
+  meta: {
+    name: "brands",
+    description: `Find brand entity ids for a brand list (BRANDS). Read-only.
+
+Example:
+  baker ads google brands --customer-id 1234567890 --prefix nike`
+  },
+  args: BRAND_ARGS,
+  run: async ({ args }) => {
+    const customerId = requireCustomerId(args);
+    if (typeof args.prefix !== "string" || args.prefix.trim().length < 2) {
+      failWriteValidation("--prefix needs at least the first 2 letters of the brand");
+    }
+    try {
+      const data = await serviceRead("/api/ads/google/brands", customerId, {
+        prefix: args.prefix
+      });
+      const hints = data.brands.length > 0 ? [
+        "Several brands can share a name \u2014 pick the one whose URL is the brand you mean, then `keyword-lists add --list-ref <BRANDS list> --brand <entity_id>`."
+      ] : ["No brand starts with that \u2014 try a shorter or different prefix."];
+      writeJsonEnvelope({ ok: true, data, hints });
+    } catch (err) {
+      exitWithServiceReadError(err);
+    }
+  }
+});
+export {
+  brandsCommand,
+  identityVerificationCommand,
+  invoicesCommand,
+  previewsCommand
+};
+//# sourceMappingURL=account-reads-6IFA5UYY.js.map

package/dist/account-writes-FVRHSUYP.js

@@ -0,0 +1,66 @@
+import {
+  compact,
+  schemaArgs,
+  stageChatgptOp
+} from "./chunk-5FDRGIIV.js";
+import {
+  CHATGPT_ADS_REFERENCE,
+  chatgptFailure
+} from "./chunk-LA3P65JZ.js";
+import {
+  writeJsonEnvelope
+} from "./chunk-G3TL63X5.js";
+import {
+  apiGet
+} from "./chunk-AGIX3HNF.js";
+import "./chunk-NY3LDKO4.js";
+import "./chunk-PBI5PQEZ.js";
+import {
+  registerSchema
+} from "./chunk-MV3PVKTU.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/ads/chatgpt/account-writes.ts
+import { defineCommand } from "citty";
+var REFERENCE = CHATGPT_ADS_REFERENCE.account;
+var UPDATE_ARGS = {
+  name: { type: "string", description: "The advertiser name shown on every card" },
+  "favicon-url": { type: "string", description: "https:// square icon, at least 128 \xD7 128 px" }
+};
+registerSchema({
+  command: "ads.chatgpt.account.update",
+  description: "Stage a change to the advertiser's brand name or icon. It applies when the chat is published and starts a new brand review; nothing in the account serves until it is approved.",
+  args: schemaArgs(UPDATE_ARGS)
+});
+var accountUpdateCommand = defineCommand({
+  meta: {
+    name: "update",
+    description: `Stage a change to the brand name or icon (applies when the chat is published).
+
+Examples:
+  baker ads chatgpt account update --favicon-url https://example.com/icon.png
+  baker ads chatgpt account update --name "GreenLeaf Energy"`
+  },
+  args: UPDATE_ARGS,
+  run: async ({ args }) => {
+    let account;
+    try {
+      account = await apiGet("/api/ads/chatgpt/account");
+    } catch (err) {
+      writeJsonEnvelope({ ...chatgptFailure(err, REFERENCE) });
+      process.exit(1);
+    }
+    await stageChatgptOp(
+      {
+        kind: "account.update",
+        target: account.id,
+        payload: compact({ name: args.name, faviconUrl: args["favicon-url"] })
+      },
+      REFERENCE
+    );
+  }
+});
+export {
+  accountUpdateCommand
+};
+//# sourceMappingURL=account-writes-FVRHSUYP.js.map

package/dist/accounts-4BQFACQF.js

@@ -0,0 +1,114 @@
+import {
+  connectedResourceHints
+} from "./chunk-P4NSJS54.js";
+import {
+  AVAILABLE_ARG,
+  writeAvailableAccounts
+} from "./chunk-IYTCXEOJ.js";
+import {
+  cacheGet,
+  cacheSet,
+  handleConnectionError,
+  needsConnectionFix,
+  writeAdsJson,
+  writeAdsOutput,
+  writeJsonEnvelope
+} from "./chunk-G3TL63X5.js";
+import {
+  ApiError,
+  apiGet
+} from "./chunk-AGIX3HNF.js";
+import "./chunk-NY3LDKO4.js";
+import "./chunk-PBI5PQEZ.js";
+import {
+  registerSchema
+} from "./chunk-MV3PVKTU.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/ads/google/accounts.ts
+import { defineCommand } from "citty";
+registerSchema({
+  command: "ads.google.accounts",
+  description: "List the Google Ads accounts this company connected \u2014 there can be several, and every one of them is yours to work in. Returns accounts with id, name, access_type (direct or managed), level in the hierarchy, and optional manager_id for managed accounts. Run this first to find account IDs for other commands.",
+  args: {
+    "no-cache": { type: "boolean", description: "Skip cache, hit API directly", required: false },
+    output: { type: "string", description: "Format: json|csv|md", required: false, default: "json" },
+    available: AVAILABLE_ARG
+  }
+});
+function accountHints(accounts) {
+  return connectedResourceHints({
+    plural: "Google Ads accounts",
+    singular: "Google Ads account",
+    flag: "--customer-id",
+    resources: accounts.map((account) => ({ id: account.id, label: account.name }))
+  });
+}
+function handleAccountsError(err) {
+  if (err instanceof ApiError) {
+    if (needsConnectionFix(err.code, err.message)) {
+      handleConnectionError("google_ads", err.message);
+    }
+    const envelope = {
+      ok: false,
+      error: {
+        code: err.code,
+        message: err.message,
+        fix: {
+          action: "reject",
+          explanation: err.message
+        },
+        retryable: false
+      }
+    };
+    writeAdsJson(envelope);
+    process.exit(1);
+  }
+  writeAdsJson({ ok: false, error: { code: "NETWORK_ERROR", message: "Unexpected error" } });
+  process.exit(1);
+}
+var accountsCommand = defineCommand({
+  meta: {
+    name: "accounts",
+    description: `List accessible Google Ads accounts. Returns customer IDs needed for all other commands.
+
+Examples:
+  baker ads google accounts
+  baker ads google accounts --available   # every account the login reaches, selected or not`
+  },
+  args: {
+    "no-cache": { type: "boolean", description: "Skip cache", required: false },
+    output: { type: "string", description: "Format: json|csv|md", required: false, default: "json" },
+    available: AVAILABLE_ARG
+  },
+  run: async ({ args }) => {
+    if (args.available) return writeAvailableAccounts("google-ads", handleAccountsError);
+    const useCache = !args["no-cache"];
+    if (useCache) {
+      const cached = cacheGet("accounts", "list");
+      if (cached) {
+        writeJsonEnvelope({ ok: true, data: cached.data, cached: true, hints: accountHints(cached.data) });
+        return;
+      }
+    }
+    try {
+      const params = !useCache ? { "skip-cache": "true" } : void 0;
+      const data = await apiGet("/api/ads/google/accounts", params);
+      if (useCache) {
+        cacheSet("accounts", "list", data, 60 * 60 * 1e3);
+      }
+      const format = args.output || "json";
+      if (format !== "json") {
+        writeAdsOutput(data, format);
+        return;
+      }
+      writeJsonEnvelope({ ok: true, data, hints: accountHints(data) });
+    } catch (err) {
+      handleAccountsError(err);
+    }
+  }
+});
+export {
+  accountsCommand
+};
+//# sourceMappingURL=accounts-4BQFACQF.js.map