@koda-sl/baker-cli 0.476.0 → 0.477.0

package/dist/creatives-XEKEYLNV.js

@@ -0,0 +1,182 @@
+import {
+  csvOrJson,
+  handleLinkedinError,
+  resolveAccountIdArg,
+  resolveStatusFilter,
+  statusesArgDescription
+} from "./chunk-XYOU3ROP.js";
+import {
+  writeAdsOutput,
+  writeJsonEnvelope
+} from "./chunk-AAF7HL4I.js";
+import {
+  NO_CACHE_ARG
+} from "./chunk-O6VUX3O5.js";
+import {
+  shapeListRows
+} from "./chunk-KIGGMKAE.js";
+import "./chunk-GAJQPQWS.js";
+import "./chunk-GXDLWBOY.js";
+import "./chunk-GIWHHCD6.js";
+import "./chunk-XQIOCIDO.js";
+import "./chunk-ML7DLFFY.js";
+import {
+  apiGet
+} from "./chunk-7ANWFQEA.js";
+import "./chunk-KODTY7PB.js";
+import "./chunk-H5CGVMQW.js";
+import "./chunk-ANYMWCST.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/ads/linkedin/creatives.ts
+import { defineCommand } from "citty";
+function asRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+function asString(value) {
+  return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+function creativeDestination(content) {
+  if (!content) return { format: "unknown" };
+  const reference = asString(content.reference);
+  if (reference) return { format: "post", postUrn: reference };
+  const textAd = asRecord(content.textAd);
+  if (textAd) return { format: "text", landingUrl: asString(textAd.landingPage) };
+  const spotlight = asRecord(content.spotlight);
+  if (spotlight) return { format: "spotlight", landingUrl: asString(spotlight.landingPage) };
+  if (asRecord(content.follower)) return { format: "follower" };
+  if (asRecord(content.jobs)) return { format: "jobs" };
+  return { format: "unknown" };
+}
+var COMPACT_COLUMNS = [
+  "id",
+  "urn",
+  "campaign",
+  "intendedStatus",
+  "isServing",
+  "reviewStatus",
+  "format",
+  "landingUrl",
+  "postUrn"
+];
+function compactRow(row) {
+  const destination = creativeDestination(row.content);
+  return {
+    id: row.id,
+    urn: row.urn,
+    campaign: row.campaign,
+    intendedStatus: row.intendedStatus,
+    isServing: row.isServing,
+    reviewStatus: row.reviewStatus,
+    format: destination.format,
+    ...destination.landingUrl ? { landingUrl: destination.landingUrl } : {},
+    ...destination.postUrn ? { postUrn: destination.postUrn } : {}
+  };
+}
+function unmappedShapeWarnings(rows, rawContentReturned) {
+  const unmapped = rows.filter((row) => row.content && creativeDestination(row.content).format === "unknown");
+  if (unmapped.length === 0) return [];
+  const remedy = rawContentReturned ? "Their raw content is in this response \u2014 read it directly; this command cannot resolve a destination for them." : "Re-read those with --full before drawing any conclusion about where they point.";
+  return [
+    {
+      code: "UNMAPPED_CREATIVE_CONTENT",
+      message: `${unmapped.length} of ${rows.length} creatives have a content shape this command can't read, so their destination is missing (ids: ${unmapped.slice(0, 5).map((row) => row.id).join(", ")}). ${remedy}`
+    }
+  ];
+}
+var listArgs = {
+  "account-id": { type: "string", description: "Numeric account ID or urn:li:sponsoredAccount:N" },
+  "account-urn": { type: "string", description: "Alias for --account-id" },
+  "campaign-id": { type: "string", description: "Filter by campaign ID" },
+  "all-statuses": { type: "boolean", description: "Drop the default ACTIVE filter" },
+  statuses: { type: "string", description: statusesArgDescription("creatives") },
+  fields: {
+    type: "string",
+    description: "CSV of dotted paths to return instead of the compact row, e.g. id,content.textAd.landingPage"
+  },
+  full: { type: "boolean", description: "Return the complete raw records, including the opaque 'content' block" },
+  limit: { type: "string", description: "Max rows (default: 500)" },
+  "no-cache": NO_CACHE_ARG,
+  output: { type: "string", description: "json|csv|jsonl|md", default: "json" }
+};
+var creativesListCommand = defineCommand({
+  meta: {
+    name: "list",
+    description: "List LinkedIn creatives (ads). Runs by default when no subcommand is given."
+  },
+  args: listArgs,
+  run: async ({ args }) => {
+    const accountId = resolveAccountIdArg(args);
+    try {
+      const params = { "account-id": accountId };
+      const statuses = resolveStatusFilter(args, "creatives");
+      if (statuses) params.statuses = statuses.join(",");
+      if (args["campaign-id"]) params["campaign-id"] = String(args["campaign-id"]);
+      if (args.limit) params.limit = String(args.limit);
+      if (args["no-cache"]) params["skip-cache"] = "true";
+      const data = await apiGet("/api/ads/linkedin/creatives", params);
+      const shaped = shapeListRows(data, args, {
+        row: compactRow,
+        columns: COMPACT_COLUMNS
+      });
+      const fmt = csvOrJson(args);
+      if (fmt !== "json") {
+        writeAdsOutput(shaped.rows, fmt, shaped.fields, shaped.hints);
+        return;
+      }
+      const warnings = unmappedShapeWarnings(data, args.full === true);
+      writeJsonEnvelope({
+        ok: true,
+        data: shaped.rows,
+        ...warnings.length > 0 ? { warnings } : {},
+        ...shaped.hints ? { hints: shaped.hints } : {}
+      });
+    } catch (err) {
+      handleLinkedinError(err);
+    }
+  }
+});
+var creativesCommand = defineCommand({
+  meta: {
+    name: "creatives",
+    description: `List LinkedIn creatives (ads), or stage writes (create/update/pause/resume/duplicate).
+
+Defaults to ACTIVE intended-status. Pass --all-statuses or --statuses ACTIVE,PAUSED to widen.
+
+Rows are compact by default: id, urn, campaign, status, review status, format, and
+the resolved destination (landingUrl, or postUrn for post-based ads). Use --fields
+for specific dotted paths, or --full for the complete raw records.
+
+Post-based ads (image, video, carousel, document, article, event, TLA) report a
+postUrn, not a landingUrl \u2014 their destination lives in the post itself.
+Use 'reviewStatus' to spot rejected/pending creatives during an audit.
+
+Write subcommands stage ops on this chat's draft \u2014 media comes from the Baker
+library and is uploaded to LinkedIn only at publish.
+
+Examples:
+  baker ads linkedin creatives --account-id 503001492
+  baker ads linkedin creatives --account-id 503001492 --fields id,intendedStatus,content.textAd.landingPage
+  baker ads linkedin creatives create --campaign 1234 --format image --image-id <bakerImageId> --intro "\u2026" --headline "Book a demo" --landing-url https://example.com --cta REQUEST_DEMO
+  baker ads linkedin creatives pause urn:li:sponsoredCreative:789`
+  },
+  subCommands: {
+    list: creativesListCommand,
+    create: () => import("./write-commands-PK23JVW3.js").then((m) => m.creativesCreateCommand),
+    update: () => import("./write-commands-PK23JVW3.js").then((m) => m.creativesUpdateCommand),
+    pause: () => import("./write-commands-PK23JVW3.js").then((m) => m.creativesPauseCommand),
+    resume: () => import("./write-commands-PK23JVW3.js").then((m) => m.creativesResumeCommand),
+    duplicate: () => import("./write-commands-PK23JVW3.js").then((m) => m.creativesDuplicateCommand)
+  },
+  // A parent must never declare `run`: citty falls through to it *after* running
+  // the matched subcommand, so every write would also trigger a full live list.
+  // `args` stays here so citty's subcommand scan knows which flags take a value.
+  args: listArgs,
+  default: "list"
+});
+export {
+  creativeDestination,
+  creativesCommand,
+  unmappedShapeWarnings
+};
+//# sourceMappingURL=creatives-XEKEYLNV.js.map

package/dist/credentials-GJMH4XRU.js

@@ -0,0 +1,287 @@
+import {
+  repeatedValues
+} from "./chunk-ERSX3MKH.js";
+import {
+  failApi,
+  failValidation
+} from "./chunk-R4CDO5YH.js";
+import "./chunk-GAJQPQWS.js";
+import "./chunk-GXDLWBOY.js";
+import "./chunk-GIWHHCD6.js";
+import "./chunk-XQIOCIDO.js";
+import {
+  getPublicSuffix,
+  parse
+} from "./chunk-ML7DLFFY.js";
+import {
+  apiPost
+} from "./chunk-7ANWFQEA.js";
+import "./chunk-KODTY7PB.js";
+import "./chunk-H5CGVMQW.js";
+import {
+  registerSchema,
+  writeJson
+} from "./chunk-ANYMWCST.js";
+import "./chunk-YQSBHWOI.js";
+
+// ../api/src/credentials/contract.ts
+import { z } from "zod";
+
+// ../api/src/credentials/hosts.ts
+function normaliseHost(host) {
+  return host.trim().toLowerCase().replace(/\.$/, "");
+}
+function asciiHost(host) {
+  if (!/[\u0080-\u{10FFFF}]/u.test(host) || /[/?#@:\\%[\]\s]/.test(host)) return host;
+  const url = `http://${host}`;
+  return URL.canParse(url) ? new URL(url).hostname : host;
+}
+function validateHostPattern(raw) {
+  const typed = normaliseHost(raw);
+  const wildcard = typed.startsWith("*.");
+  const host = asciiHost(wildcard ? typed.slice(2) : typed);
+  const pattern = wildcard ? `*.${host}` : host;
+  if (host === "" || host.includes("*")) {
+    return { ok: false, reason: "Use a website address like api.example.com or *.example.com." };
+  }
+  const parsed = parse(host);
+  if (parsed.isIp || host.startsWith("[")) {
+    return { ok: false, reason: "Use a website address, not an IP address." };
+  }
+  if (parsed.hostname !== host || parsed.domain === null) {
+    return { ok: false, reason: "Use only the website address, like api.example.com." };
+  }
+  if (wildcard && !wildcardSafe(host)) {
+    return { ok: false, reason: `*.${host} would allow any website. Name the company's own address.` };
+  }
+  return { ok: true, pattern };
+}
+var OPEN_HOSTING_DOMAINS = ["amazonaws.com", "cloudfront.net", "googleapis.com", "on.aws"];
+var WITH_PRIVATE = { allowPrivateDomains: true };
+function wildcardSafe(host) {
+  if (OPEN_HOSTING_DOMAINS.some((domain) => host === domain || host.endsWith(`.${domain}`))) return false;
+  const suffix = getPublicSuffix(host, WITH_PRIVATE);
+  return suffix !== host && getPublicSuffix(`zz.${host}`, WITH_PRIVATE) === suffix;
+}
+
+// ../api/src/credentials/placeholder.ts
+var CREDENTIAL_NAME_PATTERN = "[a-z0-9][a-z0-9_-]{0,63}";
+var CREDENTIAL_NAME_RE = new RegExp(`^${CREDENTIAL_NAME_PATTERN}$`);
+var PLACEHOLDER_SOURCE = `\\{\\{credential:(${CREDENTIAL_NAME_PATTERN})\\}\\}`;
+var WHOLE_PLACEHOLDER_RE = new RegExp(`^${PLACEHOLDER_SOURCE}$`);
+
+// ../api/src/credentials/contract.ts
+var MAX_CREDENTIAL_VALUE_LENGTH = 16384;
+var MAX_CREDENTIAL_HOSTS = 20;
+var credentialNameSchema = z.string().regex(new RegExp(`^${CREDENTIAL_NAME_PATTERN}$`), "Use lowercase letters, digits, - and _ (max 64).");
+var credentialHostsSchema = z.array(z.string()).max(MAX_CREDENTIAL_HOSTS).transform((hosts, ctx) => {
+  const patterns = [];
+  for (const host of hosts) {
+    const result = validateHostPattern(host);
+    if (result.ok) patterns.push(result.pattern);
+    else ctx.addIssue({ code: "custom", message: `${host}: ${result.reason}` });
+  }
+  return [...new Set(patterns)];
+});
+var credentialSourceSchema = z.enum(["user", "agent", "chat-detected", "requested"]);
+var credentialSummarySchema = z.object({
+  name: z.string(),
+  label: z.string(),
+  placeholder: z.string(),
+  allowedHosts: z.array(z.string()),
+  source: credentialSourceSchema,
+  lastUsedAt: z.number().nullable()
+});
+var credentialsListResponseSchema = z.object({ credentials: z.array(credentialSummarySchema) });
+var credentialsPutRequestSchema = z.object({
+  name: credentialNameSchema,
+  label: z.string().trim().min(1).max(80).optional(),
+  value: z.string().min(1).max(MAX_CREDENTIAL_VALUE_LENGTH),
+  allowedHosts: credentialHostsSchema
+});
+var credentialsPutResponseSchema = z.object({
+  name: z.string(),
+  placeholder: z.string(),
+  replaced: z.boolean()
+});
+var credentialsDeleteRequestSchema = z.object({ name: credentialNameSchema });
+var credentialsDeleteResponseSchema = z.object({ name: z.string(), deleted: z.literal(true) });
+var brokerResolveResponseSchema = z.object({
+  credentials: z.array(z.object({ name: z.string(), value: z.string(), allowedHosts: z.array(z.string()) }))
+});
+var brokerUsageRequestSchema = z.object({
+  uses: z.array(z.object({ name: credentialNameSchema, host: z.string().max(253) })).max(100)
+});
+
+// src/commands/credentials/index.ts
+import { defineCommand } from "citty";
+var DOC = "__tooling__/docs/tools/baker/credentials.md";
+var STDIN_ONLY = 'The value is read from stdin only, never from the command line (argv is visible to other processes and lands in logs). Pipe it: printf %s "$VALUE" | baker credentials put <name> --host <host>. For a credential the user owns, call request_credential instead.';
+registerSchema({
+  command: "credentials.list",
+  description: "Start here: the credentials (API keys, tokens, passwords) this company stored, by name \u2014 never their values. Write the `placeholder` ({{credential:NAME}}) into an HTTPS request (curl header, URL, SDK config, JSON body) and the sandbox proxy sends the real value, only to the credential's allowedHosts. Nothing listed? Ask the user with the request_credential tool. Compact by default; --full adds source and lastUsedAt.",
+  args: {
+    full: { type: "boolean", description: "Add source and lastUsedAt per credential", required: false, default: false }
+  }
+});
+registerSchema({
+  command: "credentials.put",
+  description: `Store a credential YOU created on the user's behalf (e.g. a key you just generated through an API), so later requests can use {{credential:NAME}}. Example: printf %s "$KEY" | baker credentials put stripe-key --host api.stripe.com --label "Stripe key". The value comes from stdin ONLY. For a credential the user owns, call request_credential instead \u2014 never ask for it in chat. Replacing is allowed only for credentials the agent created.`,
+  args: {
+    name: { type: "positional", description: "Lowercase name: letters, digits, - and _ (max 64)", required: true },
+    host: {
+      type: "string",
+      description: "Website the value may be sent to (repeatable, or comma-separated): api.stripe.com, acme-store.myshopify.com",
+      required: true
+    },
+    label: { type: "string", description: "Human-readable label shown in Settings \u2192 Credentials", required: false }
+  }
+});
+registerSchema({
+  command: "credentials.delete",
+  description: "Delete a credential the agent created (e.g. a key it rotated out). Credentials the user added can only be removed by the user, in Settings \u2192 Credentials.",
+  args: {
+    name: { type: "positional", description: "Credential name", required: true }
+  }
+});
+async function readPipedValue() {
+  const stdin = process.stdin;
+  if (stdin.isTTY) return "";
+  const chunks = [];
+  for await (const chunk of stdin) {
+    chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
+  }
+  return Buffer.concat(chunks).toString("utf8").replace(/\r?\n$/, "");
+}
+function parseName(raw) {
+  const parsed = credentialNameSchema.safeParse(raw);
+  if (!parsed.success) {
+    failValidation(`Invalid credential name "${String(raw)}": use lowercase letters, digits, - and _ (max 64).`);
+  }
+  return parsed.data;
+}
+function parseHosts(rawArgs, parsed) {
+  const hosts = repeatedValues(rawArgs, "host", parsed).flatMap((value) => value.split(",")).map((host) => host.trim()).filter((host) => host !== "");
+  if (hosts.length === 0) {
+    failValidation("Name at least one website the value may be sent to: --host api.example.com (repeatable).");
+  }
+  const result = credentialHostsSchema.safeParse(hosts);
+  if (!result.success) {
+    failValidation(`Invalid --host: ${result.error.issues.map((issue) => issue.message).join("; ")}`);
+  }
+  return result.data;
+}
+var listCommand = defineCommand({
+  meta: {
+    name: "list",
+    description: "Start here: stored credentials by name with their {{credential:NAME}} placeholder and allowed websites. Never shows values."
+  },
+  args: {
+    full: { type: "boolean", description: "Add source and lastUsedAt", required: false, default: false }
+  },
+  run: async ({ args }) => {
+    try {
+      const response = await apiPost("/api/credentials/list", {});
+      const credentials = response.data.credentials.map(
+        (credential) => args.full ? credential : {
+          name: credential.name,
+          placeholder: credential.placeholder,
+          allowedHosts: credential.allowedHosts,
+          label: credential.label
+        }
+      );
+      writeJson({
+        ok: true,
+        data: { credentials },
+        meta: { count: credentials.length },
+        ...credentials.length === 0 ? {
+          hints: [
+            "No credentials stored. When the task needs one the user owns, call the request_credential tool (label, reason, allowedHosts) \u2014 never ask them to paste it in chat."
+          ]
+        } : {}
+      });
+    } catch (err) {
+      failApi(err);
+    }
+  }
+});
+var putCommand = defineCommand({
+  meta: {
+    name: "put",
+    description: `Store a credential you created on the user's behalf; the value is read from stdin only.
+Start here: printf %s "$KEY" | baker credentials put stripe-key --host api.stripe.com
+For a credential the user owns, call request_credential instead.`
+  },
+  args: {
+    name: { type: "positional", description: "Lowercase name: letters, digits, - and _ (max 64)", required: true },
+    host: {
+      type: "string",
+      description: "Website the value may be sent to (repeatable, or comma-separated)",
+      required: false
+    },
+    label: { type: "string", description: "Label shown in Settings \u2192 Credentials", required: false },
+    value: {
+      type: "string",
+      description: "Refused \u2014 never put a value on the command line. Pipe it on stdin.",
+      required: false
+    }
+  },
+  run: async ({ args, rawArgs }) => {
+    if (args.value !== void 0 || args._.length > 1) {
+      failValidation(STDIN_ONLY);
+    }
+    const name = parseName(args.name);
+    const allowedHosts = parseHosts(rawArgs, args.host);
+    const value = await readPipedValue();
+    if (value === "") {
+      failValidation(`Nothing was piped on stdin. ${STDIN_ONLY}`);
+    }
+    if (value.length > MAX_CREDENTIAL_VALUE_LENGTH) {
+      failValidation(`The value is longer than ${MAX_CREDENTIAL_VALUE_LENGTH} characters.`);
+    }
+    const body = { name, value, allowedHosts, ...args.label ? { label: args.label } : {} };
+    try {
+      const response = await apiPost("/api/credentials/put", body);
+      writeJson({
+        ok: true,
+        data: { name: response.data.name, placeholder: response.data.placeholder },
+        hints: [
+          `Use ${response.data.placeholder} in the request; the value is sent only to: ${allowedHosts.join(", ")}.`,
+          "Never echo, print or write the value anywhere \u2014 unset the shell variable that held it."
+        ]
+      });
+    } catch (err) {
+      failApi(err);
+    }
+  }
+});
+var deleteCommand = defineCommand({
+  meta: {
+    name: "delete",
+    description: "Delete a credential the agent created. User-added credentials are removed by the user in Settings \u2192 Credentials."
+  },
+  args: {
+    name: { type: "positional", description: "Credential name", required: true }
+  },
+  run: async ({ args }) => {
+    const name = parseName(args.name);
+    try {
+      const response = await apiPost("/api/credentials/delete", { name });
+      writeJson({ ok: true, data: response.data });
+    } catch (err) {
+      failApi(err);
+    }
+  }
+});
+var credentialsCommand = defineCommand({
+  meta: {
+    name: "credentials",
+    description: `Credentials (API keys, tokens, passwords) by name: write {{credential:NAME}} in an HTTPS request and the value is sent only to the websites it is bound to. You never see values.
+Full guide: ${DOC}`
+  },
+  subCommands: { list: listCommand, put: putCommand, delete: deleteCommand }
+});
+export {
+  credentialsCommand
+};
+//# sourceMappingURL=credentials-GJMH4XRU.js.map

package/dist/critique-EJJQVV4D.js

@@ -0,0 +1,213 @@
+import {
+  FRAME_PLACEHOLDER_NOTE,
+  exitOnPrepareError,
+  prepareCanvas
+} from "./chunk-3IGY2FWK.js";
+import "./chunk-CMNVR6DX.js";
+import "./chunk-37P6DTDJ.js";
+import "./chunk-O6TGA5HT.js";
+import "./chunk-QKUBK3AD.js";
+import "./chunk-HH5PFZ7U.js";
+import "./chunk-ANWV2VTO.js";
+import {
+  briefCopyLines,
+  frameDescriptionOf,
+  nativeDialogueOf
+} from "./chunk-GRL25RKS.js";
+import "./chunk-GAD2NYL4.js";
+import "./chunk-DGCUPJZD.js";
+import {
+  COPY_DIRECTIVE_HEADER
+} from "./chunk-5TV4GYP2.js";
+import "./chunk-2XQ5HU6D.js";
+import "./chunk-OST3RA6Q.js";
+import "./chunk-5HYSKH77.js";
+import "./chunk-KIGGMKAE.js";
+import "./chunk-UW7PZFWZ.js";
+import "./chunk-NKXH3I65.js";
+import "./chunk-CPTOHQSJ.js";
+import "./chunk-JRLGQA2T.js";
+import "./chunk-GAJQPQWS.js";
+import "./chunk-GXDLWBOY.js";
+import "./chunk-GIWHHCD6.js";
+import "./chunk-XQIOCIDO.js";
+import "./chunk-ML7DLFFY.js";
+import "./chunk-KODTY7PB.js";
+import "./chunk-H5CGVMQW.js";
+import "./chunk-ANYMWCST.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/canvas/critique.ts
+import path from "path";
+import { defineCommand } from "citty";
+
+// src/engine/scaffold/lib/critique.ts
+var VIBE_CUE = /\b(light|lighting|golden|moody|warm|cool|tone|grade|contrast|shadow|glow|rim|backlit|neon|soft)\b/i;
+var MECHANISM_CUE = /\b(because|works by|so that|mechanism|proof|guarantee|clinically|backed by|the reason|that's why)\b/i;
+function promptOf(node) {
+  const p = node?.params?.prompt;
+  return typeof p === "string" ? p : "";
+}
+function round(n) {
+  return Math.round(n * 100) / 100;
+}
+function frameLook(node) {
+  const description = frameDescriptionOf(promptOf(node)).trim();
+  return description.endsWith(FRAME_PLACEHOLDER_NOTE) ? "" : description;
+}
+function creativeText(nodes) {
+  return nodes.flatMap((n) => {
+    if (n.type === "image_generate") return [frameLook(n)];
+    if (n.type === "video_generate") return [nativeDialogueOf(promptOf(n)) ?? ""];
+    if (n.type === "tts" && typeof n.params?.text === "string") return [n.params.text];
+    return [];
+  }).join("\n");
+}
+function scoreHookStrength(nodes, scene0, hasOverlay) {
+  const scene0Text = scene0.map((n) => promptOf(n)).join("\n");
+  const frames = scene0.filter((n) => n.type === "image_generate");
+  const look = (frames.length > 0 ? frames.map(frameLook) : scene0.map((n) => promptOf(n))).join("\n");
+  const hookClip = scene0.find((n) => n.type === "video_generate");
+  const hasSound = hookClip?.params?.generate_audio === true || /Dialogue:|Audio:/.test(scene0Text) || nodes.some((n) => n.type === "tts" || n.type === "dialogue");
+  const layers = [hasOverlay, hasSound, look.trim().length > 40, VIBE_CUE.test(look)];
+  const layerCount = layers.filter(Boolean).length;
+  return {
+    dimension: "hook_strength",
+    score: round(hookClip ? layerCount / 4 : 0.5),
+    note: hookClip ? `hook works on ${layerCount}/4 layers (text/sound/visual/vibe)` : "no scene-0 clip found \u2014 is this a video creative?"
+  };
+}
+function scoreFirstFrameLegibility(hasOverlay) {
+  return {
+    dimension: "first_frame_legibility",
+    score: hasOverlay ? 1 : 0.4,
+    note: hasOverlay ? "a designed overlay layer carries the sound-off message" : "footage-only \u2014 the first frame may not read with sound off; consider an overlay hook"
+  };
+}
+function scoreRetentionRisk(videoNodes) {
+  let saggy = 0;
+  for (const n of videoNodes) {
+    const dur = typeof n.params?.duration === "number" ? n.params.duration : 0;
+    const spoken = /Dialogue:/.test(promptOf(n)) || n.params?.generate_audio === true;
+    if (dur >= 8 && !spoken) saggy += 1;
+  }
+  return {
+    dimension: "retention_risk",
+    score: round(videoNodes.length > 0 ? 1 - Math.min(1, saggy / videoNodes.length) : 0.7),
+    note: saggy > 0 ? `${saggy} long clip(s) with no spoken line may sag` : "no obvious sag points"
+  };
+}
+function scoreMechanismClarity(allPromptText) {
+  const clear = MECHANISM_CUE.test(allPromptText);
+  return {
+    dimension: "mechanism_clarity",
+    score: clear ? 1 : 0.4,
+    note: clear ? "states a mechanism/proof" : "no clear 'why it works' \u2014 add the mechanism"
+  };
+}
+function clamp01(n) {
+  return Math.max(0, Math.min(1, n));
+}
+function staticCopyLines(nodes) {
+  const gen = nodes.find((n) => n.type === "image_generate");
+  const prompt = promptOf(gen);
+  const compiled = briefCopyLines(prompt);
+  if (compiled.length > 0) return compiled;
+  const start = prompt.indexOf(COPY_DIRECTIVE_HEADER);
+  if (start === -1) return [];
+  const bodyStart = start + COPY_DIRECTIVE_HEADER.length;
+  const end = prompt.indexOf("\n\n", bodyStart);
+  const block = prompt.slice(bodyStart, end === -1 ? void 0 : end);
+  const quoted = block.match(/"[^"]+"/g);
+  return quoted ? quoted.map((s) => s.slice(1, -1)) : [];
+}
+function scoreTextLegibilityRisk(copy) {
+  const lines = copy.length;
+  return {
+    dimension: "text_legibility_risk",
+    score: round(clamp01(1 - Math.max(0, lines - 6) / 12)),
+    note: lines > 6 ? `${lines} copy blocks \u2014 dense; trim or split so type stays legible` : `${lines} copy block(s) \u2014 reads cleanly`
+  };
+}
+function scoreIdentityGrounding(nodes) {
+  const grounded = nodes.filter((n) => n.type === "image_reference_sheet").length + nodes.filter((n) => n.type === "ingest" && typeof n.id === "string" && /^el_/.test(n.id)).length;
+  return {
+    dimension: "identity_grounding",
+    // 0 grounded is fine for a pure-type ad, so it's a soft nudge, not a failure.
+    score: grounded > 0 ? 1 : 0.6,
+    note: grounded > 0 ? `${grounded} subject(s) grounded in a real reference` : "no grounded subject \u2014 fine for a type-only ad; otherwise ground the hero in a real reference"
+  };
+}
+function scoreTypeFidelity(nodes) {
+  const hasSpecimen = nodes.some((n) => n.type === "font_specimen");
+  return {
+    dimension: "type_fidelity",
+    score: hasSpecimen ? 1 : 0.5,
+    note: hasSpecimen ? "brand type biased by a font specimen" : "no font specimen \u2014 brand type may drift; wire the brand font"
+  };
+}
+function critiqueVideo(nodes, videoNodes) {
+  const scene0 = nodes.filter((n) => typeof n.id === "string" && /^s0(?:[_a-z0-9])*_/.test(n.id));
+  const hasOverlay = nodes.some((n) => typeof n.type === "string" && /hyperframe/.test(n.type));
+  return [
+    scoreHookStrength(nodes, scene0, hasOverlay),
+    scoreFirstFrameLegibility(hasOverlay),
+    scoreRetentionRisk(videoNodes),
+    scoreMechanismClarity(creativeText(nodes))
+  ];
+}
+function critiqueStatic(nodes) {
+  const copy = staticCopyLines(nodes);
+  const copyText = copy.join("\n");
+  return [
+    scoreTextLegibilityRisk(copy),
+    scoreIdentityGrounding(nodes),
+    scoreTypeFidelity(nodes),
+    scoreMechanismClarity(copyText)
+  ];
+}
+function critiqueCanvas(canvas) {
+  const nodes = Array.isArray(canvas.nodes) ? canvas.nodes : [];
+  const videoNodes = nodes.filter((n) => n.type === "video_generate");
+  const dimensions = videoNodes.length > 0 ? critiqueVideo(nodes, videoNodes) : critiqueStatic(nodes);
+  const overall = round(dimensions.reduce((s, d) => s + d.score, 0) / dimensions.length);
+  return { advisory: true, overall, dimensions };
+}
+
+// src/commands/canvas/critique.ts
+var critiqueCommand = defineCommand({
+  meta: {
+    name: "critique",
+    description: "Pre-spend creative critic (ADVISORY \u2014 never blocks). Scores a scaffolded creative BEFORE the billed render, so weak spots get fixed for free. It scores what will render: prompt.json and scenes/*.json edits are brought into the canvas first, exactly as `run` does. A VIDEO creative is scored on hook strength, sound-off first-frame legibility, retention risk, and mechanism clarity; a STATIC ad on baked-text legibility risk, identity grounding, brand-type fidelity, and mechanism clarity. Ground a video hook against `baker winning-ads hooks` for a proven pattern."
+  },
+  args: { file: { type: "positional", required: true, description: "Path to canvas JSON" } },
+  async run({ args }) {
+    const filePath = path.resolve(String(args.file));
+    let prepared;
+    try {
+      prepared = await prepareCanvas(filePath, { log: (line) => process.stderr.write(`${line}
+`) });
+    } catch (e) {
+      exitOnPrepareError(e);
+    }
+    const report = critiqueCanvas(prepared.canvas);
+    process.stdout.write(
+      `${JSON.stringify(
+        {
+          ok: true,
+          advisory: true,
+          overall: report.overall,
+          dimensions: report.dimensions,
+          hint: "Scores are 0\u20131 (higher is better). This never blocks a render \u2014 strengthen weak dimensions or proceed."
+        },
+        null,
+        2
+      )}
+`
+    );
+  }
+});
+export {
+  critiqueCommand
+};
+//# sourceMappingURL=critique-EJJQVV4D.js.map