@koda-sl/baker-cli 0.477.0-dev.55c09e3e8 → 0.478.0

package/dist/chunk-7ANWFQEA.js

@@ -0,0 +1,220 @@
+import {
+  debugLogHttp,
+  readBodyForLog
+} from "./chunk-KODTY7PB.js";
+import {
+  getEnv,
+  optionalTargetCompany
+} from "./chunk-H5CGVMQW.js";
+
+// src/client.ts
+var MAX_RATE_LIMIT_RETRIES = 3;
+var MAX_TOTAL_WAIT_MS = 2 * 60 * 1e3;
+async function fetchWithRateLimitRetry(url, init) {
+  let totalWaited = 0;
+  for (let attempt = 0; attempt <= MAX_RATE_LIMIT_RETRIES; attempt++) {
+    const response = await fetch(url, init);
+    if (response.status !== 429 || attempt >= MAX_RATE_LIMIT_RETRIES) {
+      return response;
+    }
+    const retryAfterHeader = response.headers.get("Retry-After");
+    const waitMs = retryAfterHeader ? Number(retryAfterHeader) * 1e3 : 2e3 * 2 ** attempt;
+    if (totalWaited + waitMs > MAX_TOTAL_WAIT_MS) {
+      return response;
+    }
+    totalWaited += waitMs;
+    await new Promise((resolve) => setTimeout(resolve, waitMs));
+  }
+  return fetch(url, init);
+}
+var ApiError = class extends Error {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.name = "ApiError";
+    this.code = code;
+  }
+};
+var CONVEX_ID_RE = /^[a-zA-Z0-9_]+$/;
+function hasControlCharacters(value) {
+  for (let i = 0; i < value.length; i++) {
+    const code = value.charCodeAt(i);
+    if (code < 32 && code !== 9 && code !== 10 && code !== 13) {
+      return true;
+    }
+  }
+  return false;
+}
+function validateStringValue(value) {
+  if (hasControlCharacters(value)) {
+    throw new ApiError("VALIDATION_ERROR", "String value contains invalid control characters");
+  }
+}
+function validateConvexId(id) {
+  if (!CONVEX_ID_RE.test(id)) {
+    throw new ApiError("VALIDATION_ERROR", `Invalid ID format: "${id}". Expected alphanumeric string.`);
+  }
+}
+function sanitizeParams(params) {
+  const sanitized = {};
+  for (const [key, value] of Object.entries(params)) {
+    validateStringValue(value);
+    sanitized[key] = value;
+  }
+  return sanitized;
+}
+function chatHeader() {
+  const { BAKER_CHAT_ID: chatId, BAKER_THREAD_ID: threadId, BAKER_KEY_SCOPE: keyScope } = getEnv();
+  const targetCompany = optionalTargetCompany();
+  return {
+    ...chatId ? { "x-baker-chat-id": chatId } : {},
+    ...threadId ? { "x-baker-thread-id": threadId } : {},
+    // Only ever narrows the key (`KEY_SCOPE_HEADER` in the backend).
+    ...keyScope ? { "x-baker-key-scope": keyScope } : {},
+    // `--company`: read another company of the organization (`TARGET_COMPANY_HEADER`).
+    ...targetCompany ? { "x-baker-company": targetCompany } : {}
+  };
+}
+function mapHttpError(status) {
+  if (status === 401) {
+    return "UNAUTHORIZED";
+  }
+  if (status === 403) {
+    return "FORBIDDEN";
+  }
+  if (status === 404) {
+    return "NOT_FOUND";
+  }
+  if (status === 422 || status === 400) {
+    return "VALIDATION_ERROR";
+  }
+  if (status === 409) {
+    return "CONFLICT";
+  }
+  if (status === 429) {
+    return "RATE_LIMITED";
+  }
+  if (status === 503) {
+    return "UNAVAILABLE";
+  }
+  return "INTERNAL_ERROR";
+}
+async function handleResponse(response) {
+  const body = await response.text();
+  if (!response.ok) {
+    let message = `HTTP ${response.status}: ${response.statusText}`;
+    try {
+      const parsed = JSON.parse(body);
+      if (typeof parsed.error === "string") {
+        message = parsed.error;
+      } else if (parsed.error?.message) {
+        message = parsed.error.message;
+      } else if (parsed.message) {
+        message = parsed.message;
+      }
+    } catch {
+    }
+    throw new ApiError(mapHttpError(response.status), message);
+  }
+  try {
+    return JSON.parse(body);
+  } catch {
+    throw new ApiError("INTERNAL_ERROR", "Failed to parse API response as JSON");
+  }
+}
+async function apiGetWithHeaders(path, params) {
+  const env = getEnv();
+  const url = new URL(path, env.BAKER_API_URL);
+  if (params) {
+    const clean = sanitizeParams(params);
+    for (const [key, value] of Object.entries(clean)) {
+      url.searchParams.set(key, value);
+    }
+  }
+  const urlStr = url.toString();
+  const startedAt = Date.now();
+  let response;
+  try {
+    response = await fetchWithRateLimitRetry(urlStr, {
+      method: "GET",
+      headers: {
+        Authorization: `Bearer ${env.BAKER_API_KEY}`,
+        Accept: "application/json",
+        ...chatHeader()
+      },
+      signal: AbortSignal.timeout(6e4)
+    });
+  } catch (err) {
+    debugLogHttp({ source: "cli", method: "GET", url: urlStr, durationMs: Date.now() - startedAt, error: err });
+    if (err instanceof Error && (err.name === "TimeoutError" || err.name === "AbortError")) {
+      throw new ApiError("TIMEOUT", "Request timed out after 60 seconds");
+    }
+    throw new ApiError("NETWORK_ERROR", `Request failed: ${err instanceof Error ? err.message : "Unknown error"}`);
+  }
+  debugLogHttp({
+    source: "cli",
+    method: "GET",
+    url: urlStr,
+    status: response.status,
+    ok: response.ok,
+    responseBody: await readBodyForLog(response),
+    durationMs: Date.now() - startedAt
+  });
+  return { data: await handleResponse(response), headers: response.headers };
+}
+async function apiGet(path, params) {
+  return (await apiGetWithHeaders(path, params)).data;
+}
+async function apiPost(path, body, opts) {
+  const env = getEnv();
+  const timeoutMs = opts?.timeoutMs ?? 6e4;
+  const urlStr = new URL(path, env.BAKER_API_URL).toString();
+  const startedAt = Date.now();
+  let response;
+  try {
+    response = await fetchWithRateLimitRetry(urlStr, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${env.BAKER_API_KEY}`,
+        "Content-Type": "application/json",
+        Accept: "application/json",
+        ...chatHeader()
+      },
+      body: JSON.stringify(body),
+      signal: AbortSignal.timeout(timeoutMs)
+    });
+  } catch (err) {
+    debugLogHttp({
+      source: "cli",
+      method: "POST",
+      url: urlStr,
+      requestBody: body,
+      durationMs: Date.now() - startedAt,
+      error: err
+    });
+    if (err instanceof Error && (err.name === "TimeoutError" || err.name === "AbortError")) {
+      throw new ApiError("TIMEOUT", `Request timed out after ${Math.round(timeoutMs / 1e3)} seconds`);
+    }
+    throw new ApiError("NETWORK_ERROR", `Request failed: ${err instanceof Error ? err.message : "Unknown error"}`);
+  }
+  debugLogHttp({
+    source: "cli",
+    method: "POST",
+    url: urlStr,
+    requestBody: body,
+    status: response.status,
+    ok: response.ok,
+    responseBody: await readBodyForLog(response),
+    durationMs: Date.now() - startedAt
+  });
+  return handleResponse(response);
+}
+
+export {
+  ApiError,
+  validateConvexId,
+  apiGetWithHeaders,
+  apiGet,
+  apiPost
+};
+//# sourceMappingURL=chunk-7ANWFQEA.js.map

package/dist/chunk-7ANWFQEA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts"],"sourcesContent":["import { debugLogHttp, readBodyForLog } from \"./debugLog.ts\";\nimport { getEnv, optionalTargetCompany } from \"./env.ts\";\n\nconst MAX_RATE_LIMIT_RETRIES = 3;\nconst MAX_TOTAL_WAIT_MS = 2 * 60 * 1000;\n\nasync function fetchWithRateLimitRetry(url: string, init: RequestInit): Promise<Response> {\n  let totalWaited = 0;\n\n  for (let attempt = 0; attempt <= MAX_RATE_LIMIT_RETRIES; attempt++) {\n    const response = await fetch(url, init);\n\n    if (response.status !== 429 || attempt >= MAX_RATE_LIMIT_RETRIES) {\n      return response;\n    }\n\n    const retryAfterHeader = response.headers.get(\"Retry-After\");\n    const waitMs = retryAfterHeader ? Number(retryAfterHeader) * 1000 : 2000 * 2 ** attempt;\n\n    if (totalWaited + waitMs > MAX_TOTAL_WAIT_MS) {\n      return response;\n    }\n\n    totalWaited += waitMs;\n    await new Promise((resolve) => setTimeout(resolve, waitMs));\n  }\n\n  return fetch(url, init);\n}\n\nexport type ErrorCode =\n  | \"UNAUTHORIZED\"\n  | \"FORBIDDEN\"\n  | \"NOT_FOUND\"\n  | \"CONFLICT\"\n  | \"VALIDATION_ERROR\"\n  | \"RATE_LIMITED\"\n  | \"UNAVAILABLE\"\n  | \"INTERNAL_ERROR\"\n  | \"NETWORK_ERROR\"\n  | \"TIMEOUT\"\n  | \"IMAGE_PROCESSING_ERROR\";\n\nexport class ApiError extends Error {\n  code: ErrorCode;\n\n  constructor(code: ErrorCode, message: string) {\n    super(message);\n    this.name = \"ApiError\";\n    this.code = code;\n  }\n}\n\nconst CONVEX_ID_RE = /^[a-zA-Z0-9_]+$/;\n\nfunction hasControlCharacters(value: string): boolean {\n  for (let i = 0; i < value.length; i++) {\n    const code = value.charCodeAt(i);\n    // Allow tab (9), newline (10), carriage return (13)\n    if (code < 32 && code !== 9 && code !== 10 && code !== 13) {\n      return true;\n    }\n  }\n  return false;\n}\n\nfunction validateStringValue(value: string): void {\n  if (hasControlCharacters(value)) {\n    throw new ApiError(\"VALIDATION_ERROR\", \"String value contains invalid control characters\");\n  }\n}\n\nexport function validateConvexId(id: string): void {\n  if (!CONVEX_ID_RE.test(id)) {\n    throw new ApiError(\"VALIDATION_ERROR\", `Invalid ID format: \"${id}\". Expected alphanumeric string.`);\n  }\n}\n\nfunction sanitizeParams(params: Record<string, string>): Record<string, string> {\n  const sanitized: Record<string, string> = {};\n  for (const [key, value] of Object.entries(params)) {\n    validateStringValue(value);\n    sanitized[key] = value;\n  }\n  return sanitized;\n}\n\n/**\n * Sent on every call so the backend can attribute immediately-applied writes\n * (library images and videos, followed advertisers) to the Session they were\n * made from, and vouch for the acting user against the sender of the turn's own\n * thread. Absent outside a chat-attached environment.\n */\nfunction chatHeader(): Record<string, string> {\n  const { BAKER_CHAT_ID: chatId, BAKER_THREAD_ID: threadId, BAKER_KEY_SCOPE: keyScope } = getEnv();\n  // Read live: `organization pull` names each company in turn.\n  const targetCompany = optionalTargetCompany();\n  return {\n    ...(chatId ? { \"x-baker-chat-id\": chatId } : {}),\n    ...(threadId ? { \"x-baker-thread-id\": threadId } : {}),\n    // Only ever narrows the key (`KEY_SCOPE_HEADER` in the backend).\n    ...(keyScope ? { \"x-baker-key-scope\": keyScope } : {}),\n    // `--company`: read another company of the organization (`TARGET_COMPANY_HEADER`).\n    ...(targetCompany ? { \"x-baker-company\": targetCompany } : {}),\n  };\n}\n\nfunction mapHttpError(status: number): ErrorCode {\n  if (status === 401) {\n    return \"UNAUTHORIZED\";\n  }\n  // 403 is never \"not connected\" — every backend `FORBIDDEN` means connected but\n  // not allowed (an asset outside the granted scope, a capability the account\n  // lacks). Folding it into UNAUTHORIZED sent agents down the reconnect path,\n  // which cannot fix a permission gap and wastes the user's time.\n  if (status === 403) {\n    return \"FORBIDDEN\";\n  }\n  if (status === 404) {\n    return \"NOT_FOUND\";\n  }\n  if (status === 422 || status === 400) {\n    return \"VALIDATION_ERROR\";\n  }\n  // 409 is a state the caller has to change, never a fault to sit out. It is\n  // what the backend returns for \"this workspace has not switched analytics on\n  // yet\" and its siblings — folded into INTERNAL_ERROR, that reaches an agent\n  // as a transient failure worth retrying, which it never is.\n  if (status === 409) {\n    return \"CONFLICT\";\n  }\n  if (status === 429) {\n    return \"RATE_LIMITED\";\n  }\n  // 503 is the backend's `UNAVAILABLE`: a system it depends on did not answer\n  // just now, and asking again is the fix. Folded into INTERNAL_ERROR, it reads\n  // exactly like a fault of ours, and the agent cannot tell which one waits out.\n  if (status === 503) {\n    return \"UNAVAILABLE\";\n  }\n  return \"INTERNAL_ERROR\";\n}\n\nasync function handleResponse<T>(response: Response): Promise<T> {\n  const body = await response.text();\n\n  if (!response.ok) {\n    let message = `HTTP ${response.status}: ${response.statusText}`;\n    try {\n      const parsed = JSON.parse(body) as { error?: string | { message?: string }; message?: string };\n      if (typeof parsed.error === \"string\") {\n        message = parsed.error;\n      } else if (parsed.error?.message) {\n        message = parsed.error.message;\n      } else if (parsed.message) {\n        message = parsed.message;\n      }\n    } catch {\n      // Use default message\n    }\n    throw new ApiError(mapHttpError(response.status), message);\n  }\n\n  try {\n    return JSON.parse(body) as T;\n  } catch {\n    throw new ApiError(\"INTERNAL_ERROR\", \"Failed to parse API response as JSON\");\n  }\n}\n\n/**\n * A GET that also hands back the response headers.\n *\n * Some endpoints have to say something *about* the answer that the answer has\n * no room for — `GET /api/testimonials` returns a bare array and sets\n * `X-Baker-Next-Cursor` when rows past this page remain unexamined, so the rows\n * alone cannot tell one page of a library from the whole of it.\n */\nexport async function apiGetWithHeaders<T>(\n  path: string,\n  params?: Record<string, string>,\n): Promise<{ data: T; headers: Headers }> {\n  const env = getEnv();\n  const url = new URL(path, env.BAKER_API_URL);\n  if (params) {\n    const clean = sanitizeParams(params);\n    for (const [key, value] of Object.entries(clean)) {\n      url.searchParams.set(key, value);\n    }\n  }\n\n  const urlStr = url.toString();\n  const startedAt = Date.now();\n  let response: Response;\n  try {\n    response = await fetchWithRateLimitRetry(urlStr, {\n      method: \"GET\",\n      headers: {\n        Authorization: `Bearer ${env.BAKER_API_KEY}`,\n        Accept: \"application/json\",\n        ...chatHeader(),\n      },\n      signal: AbortSignal.timeout(60_000),\n    });\n  } catch (err) {\n    debugLogHttp({ source: \"cli\", method: \"GET\", url: urlStr, durationMs: Date.now() - startedAt, error: err });\n    if (err instanceof Error && (err.name === \"TimeoutError\" || err.name === \"AbortError\")) {\n      throw new ApiError(\"TIMEOUT\", \"Request timed out after 60 seconds\");\n    }\n    throw new ApiError(\"NETWORK_ERROR\", `Request failed: ${err instanceof Error ? err.message : \"Unknown error\"}`);\n  }\n\n  debugLogHttp({\n    source: \"cli\",\n    method: \"GET\",\n    url: urlStr,\n    status: response.status,\n    ok: response.ok,\n    responseBody: await readBodyForLog(response),\n    durationMs: Date.now() - startedAt,\n  });\n  return { data: await handleResponse<T>(response), headers: response.headers };\n}\n\nexport async function apiGet<T>(path: string, params?: Record<string, string>): Promise<T> {\n  return (await apiGetWithHeaders<T>(path, params)).data;\n}\n\nexport async function apiPost<T>(path: string, body: unknown, opts?: { timeoutMs?: number }): Promise<T> {\n  const env = getEnv();\n  const timeoutMs = opts?.timeoutMs ?? 60_000;\n  const urlStr = new URL(path, env.BAKER_API_URL).toString();\n  const startedAt = Date.now();\n  let response: Response;\n  try {\n    response = await fetchWithRateLimitRetry(urlStr, {\n      method: \"POST\",\n      headers: {\n        Authorization: `Bearer ${env.BAKER_API_KEY}`,\n        \"Content-Type\": \"application/json\",\n        Accept: \"application/json\",\n        ...chatHeader(),\n      },\n      body: JSON.stringify(body),\n      signal: AbortSignal.timeout(timeoutMs),\n    });\n  } catch (err) {\n    debugLogHttp({\n      source: \"cli\",\n      method: \"POST\",\n      url: urlStr,\n      requestBody: body,\n      durationMs: Date.now() - startedAt,\n      error: err,\n    });\n    if (err instanceof Error && (err.name === \"TimeoutError\" || err.name === \"AbortError\")) {\n      throw new ApiError(\"TIMEOUT\", `Request timed out after ${Math.round(timeoutMs / 1000)} seconds`);\n    }\n    throw new ApiError(\"NETWORK_ERROR\", `Request failed: ${err instanceof Error ? err.message : \"Unknown error\"}`);\n  }\n\n  debugLogHttp({\n    source: \"cli\",\n    method: \"POST\",\n    url: urlStr,\n    requestBody: body,\n    status: response.status,\n    ok: response.ok,\n    responseBody: await readBodyForLog(response),\n    durationMs: Date.now() - startedAt,\n  });\n  return handleResponse<T>(response);\n}\n"],"mappings":";;;;;;;;;;AAGA,IAAM,yBAAyB;AAC/B,IAAM,oBAAoB,IAAI,KAAK;AAEnC,eAAe,wBAAwB,KAAa,MAAsC;AACxF,MAAI,cAAc;AAElB,WAAS,UAAU,GAAG,WAAW,wBAAwB,WAAW;AAClE,UAAM,WAAW,MAAM,MAAM,KAAK,IAAI;AAEtC,QAAI,SAAS,WAAW,OAAO,WAAW,wBAAwB;AAChE,aAAO;AAAA,IACT;AAEA,UAAM,mBAAmB,SAAS,QAAQ,IAAI,aAAa;AAC3D,UAAM,SAAS,mBAAmB,OAAO,gBAAgB,IAAI,MAAO,MAAO,KAAK;AAEhF,QAAI,cAAc,SAAS,mBAAmB;AAC5C,aAAO;AAAA,IACT;AAEA,mBAAe;AACf,UAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,MAAM,CAAC;AAAA,EAC5D;AAEA,SAAO,MAAM,KAAK,IAAI;AACxB;AAeO,IAAM,WAAN,cAAuB,MAAM;AAAA,EAClC;AAAA,EAEA,YAAY,MAAiB,SAAiB;AAC5C,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAEA,IAAM,eAAe;AAErB,SAAS,qBAAqB,OAAwB;AACpD,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,UAAM,OAAO,MAAM,WAAW,CAAC;AAE/B,QAAI,OAAO,MAAM,SAAS,KAAK,SAAS,MAAM,SAAS,IAAI;AACzD,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAqB;AAChD,MAAI,qBAAqB,KAAK,GAAG;AAC/B,UAAM,IAAI,SAAS,oBAAoB,kDAAkD;AAAA,EAC3F;AACF;AAEO,SAAS,iBAAiB,IAAkB;AACjD,MAAI,CAAC,aAAa,KAAK,EAAE,GAAG;AAC1B,UAAM,IAAI,SAAS,oBAAoB,uBAAuB,EAAE,kCAAkC;AAAA,EACpG;AACF;AAEA,SAAS,eAAe,QAAwD;AAC9E,QAAM,YAAoC,CAAC;AAC3C,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,wBAAoB,KAAK;AACzB,cAAU,GAAG,IAAI;AAAA,EACnB;AACA,SAAO;AACT;AAQA,SAAS,aAAqC;AAC5C,QAAM,EAAE,eAAe,QAAQ,iBAAiB,UAAU,iBAAiB,SAAS,IAAI,OAAO;AAE/F,QAAM,gBAAgB,sBAAsB;AAC5C,SAAO;AAAA,IACL,GAAI,SAAS,EAAE,mBAAmB,OAAO,IAAI,CAAC;AAAA,IAC9C,GAAI,WAAW,EAAE,qBAAqB,SAAS,IAAI,CAAC;AAAA;AAAA,IAEpD,GAAI,WAAW,EAAE,qBAAqB,SAAS,IAAI,CAAC;AAAA;AAAA,IAEpD,GAAI,gBAAgB,EAAE,mBAAmB,cAAc,IAAI,CAAC;AAAA,EAC9D;AACF;AAEA,SAAS,aAAa,QAA2B;AAC/C,MAAI,WAAW,KAAK;AAClB,WAAO;AAAA,EACT;AAKA,MAAI,WAAW,KAAK;AAClB,WAAO;AAAA,EACT;AACA,MAAI,WAAW,KAAK;AAClB,WAAO;AAAA,EACT;AACA,MAAI,WAAW,OAAO,WAAW,KAAK;AACpC,WAAO;AAAA,EACT;AAKA,MAAI,WAAW,KAAK;AAClB,WAAO;AAAA,EACT;AACA,MAAI,WAAW,KAAK;AAClB,WAAO;AAAA,EACT;AAIA,MAAI,WAAW,KAAK;AAClB,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,eAAe,eAAkB,UAAgC;AAC/D,QAAM,OAAO,MAAM,SAAS,KAAK;AAEjC,MAAI,CAAC,SAAS,IAAI;AAChB,QAAI,UAAU,QAAQ,SAAS,MAAM,KAAK,SAAS,UAAU;AAC7D,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,UAAI,OAAO,OAAO,UAAU,UAAU;AACpC,kBAAU,OAAO;AAAA,MACnB,WAAW,OAAO,OAAO,SAAS;AAChC,kBAAU,OAAO,MAAM;AAAA,MACzB,WAAW,OAAO,SAAS;AACzB,kBAAU,OAAO;AAAA,MACnB;AAAA,IACF,QAAQ;AAAA,IAER;AACA,UAAM,IAAI,SAAS,aAAa,SAAS,MAAM,GAAG,OAAO;AAAA,EAC3D;AAEA,MAAI;AACF,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,QAAQ;AACN,UAAM,IAAI,SAAS,kBAAkB,sCAAsC;AAAA,EAC7E;AACF;AAUA,eAAsB,kBACpB,MACA,QACwC;AACxC,QAAM,MAAM,OAAO;AACnB,QAAM,MAAM,IAAI,IAAI,MAAM,IAAI,aAAa;AAC3C,MAAI,QAAQ;AACV,UAAM,QAAQ,eAAe,MAAM;AACnC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,UAAI,aAAa,IAAI,KAAK,KAAK;AAAA,IACjC;AAAA,EACF;AAEA,QAAM,SAAS,IAAI,SAAS;AAC5B,QAAM,YAAY,KAAK,IAAI;AAC3B,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,wBAAwB,QAAQ;AAAA,MAC/C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,IAAI,aAAa;AAAA,QAC1C,QAAQ;AAAA,QACR,GAAG,WAAW;AAAA,MAChB;AAAA,MACA,QAAQ,YAAY,QAAQ,GAAM;AAAA,IACpC,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,iBAAa,EAAE,QAAQ,OAAO,QAAQ,OAAO,KAAK,QAAQ,YAAY,KAAK,IAAI,IAAI,WAAW,OAAO,IAAI,CAAC;AAC1G,QAAI,eAAe,UAAU,IAAI,SAAS,kBAAkB,IAAI,SAAS,eAAe;AACtF,YAAM,IAAI,SAAS,WAAW,oCAAoC;AAAA,IACpE;AACA,UAAM,IAAI,SAAS,iBAAiB,mBAAmB,eAAe,QAAQ,IAAI,UAAU,eAAe,EAAE;AAAA,EAC/G;AAEA,eAAa;AAAA,IACX,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,KAAK;AAAA,IACL,QAAQ,SAAS;AAAA,IACjB,IAAI,SAAS;AAAA,IACb,cAAc,MAAM,eAAe,QAAQ;AAAA,IAC3C,YAAY,KAAK,IAAI,IAAI;AAAA,EAC3B,CAAC;AACD,SAAO,EAAE,MAAM,MAAM,eAAkB,QAAQ,GAAG,SAAS,SAAS,QAAQ;AAC9E;AAEA,eAAsB,OAAU,MAAc,QAA6C;AACzF,UAAQ,MAAM,kBAAqB,MAAM,MAAM,GAAG;AACpD;AAEA,eAAsB,QAAW,MAAc,MAAe,MAA2C;AACvG,QAAM,MAAM,OAAO;AACnB,QAAM,YAAY,MAAM,aAAa;AACrC,QAAM,SAAS,IAAI,IAAI,MAAM,IAAI,aAAa,EAAE,SAAS;AACzD,QAAM,YAAY,KAAK,IAAI;AAC3B,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,wBAAwB,QAAQ;AAAA,MAC/C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,IAAI,aAAa;AAAA,QAC1C,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,GAAG,WAAW;AAAA,MAChB;AAAA,MACA,MAAM,KAAK,UAAU,IAAI;AAAA,MACzB,QAAQ,YAAY,QAAQ,SAAS;AAAA,IACvC,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,iBAAa;AAAA,MACX,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,KAAK;AAAA,MACL,aAAa;AAAA,MACb,YAAY,KAAK,IAAI,IAAI;AAAA,MACzB,OAAO;AAAA,IACT,CAAC;AACD,QAAI,eAAe,UAAU,IAAI,SAAS,kBAAkB,IAAI,SAAS,eAAe;AACtF,YAAM,IAAI,SAAS,WAAW,2BAA2B,KAAK,MAAM,YAAY,GAAI,CAAC,UAAU;AAAA,IACjG;AACA,UAAM,IAAI,SAAS,iBAAiB,mBAAmB,eAAe,QAAQ,IAAI,UAAU,eAAe,EAAE;AAAA,EAC/G;AAEA,eAAa;AAAA,IACX,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ,SAAS;AAAA,IACjB,IAAI,SAAS;AAAA,IACb,cAAc,MAAM,eAAe,QAAQ;AAAA,IAC3C,YAAY,KAAK,IAAI,IAAI;AAAA,EAC3B,CAAC;AACD,SAAO,eAAkB,QAAQ;AACnC;","names":[]}

package/dist/chunk-7FKRKMGL.js

@@ -0,0 +1,133 @@
+import {
+  IDEA_ANGLES,
+  IDEA_FORMATS,
+  checkIdeas,
+  coverageOf,
+  readCreativeRecords,
+  readIdeas,
+  readInsights,
+  readKnowledgeCorpus,
+  readPersonaIds,
+  sameMessageRead,
+  workspaceIdeasJudge
+} from "./chunk-CMNVR6DX.js";
+import {
+  findWorkspaceRoot
+} from "./chunk-ANWV2VTO.js";
+import {
+  registerSchema,
+  writeJson
+} from "./chunk-ANYMWCST.js";
+
+// src/commands/creatives/ideas.ts
+import { defineCommand } from "citty";
+var BUILD_NEXT = 3;
+var DESCRIPTION = `Check and rank the ad ideas in src/creatives/_ideas/: is each backed by something a customer said (src/content/insights/), does it claim only what the Knowledge holds, is it a different ad from the others, does it fill a gap the live ads leave. Free and local.
+
+Start here, after writing 4-8 idea files (one per file, eight fields: who, message, evidence, awareness, angle, format, job, why):
+  baker creatives ideas            # ranked, with problems; build_next names the ones to make
+  baker creatives make <idea>      # then build each one in build_next
+An idea with a problem is not built until it is fixed. An idea with no evidence is an explore bet: it may be built, and says so.`;
+var ARGS = {
+  full: {
+    type: "boolean",
+    description: "Every idea with its warnings and gaps, and the allowed angle and format values",
+    required: false,
+    default: false
+  }
+};
+registerSchema({ command: "creatives.ideas", description: DESCRIPTION, args: ARGS });
+function ideasHints(report) {
+  const hints = [];
+  const toBuild = report.ideas.filter((i) => i.status === "idea");
+  if (toBuild.length === 0 && report.unreadable.length === 0) {
+    hints.push(
+      "No ideas yet. Write 4-8 files in src/creatives/_ideas/<idea>.md (who, message, evidence, awareness, angle, format, job, why), then run this again."
+    );
+  }
+  if (report.unreadable.length > 0) {
+    hints.push(`Fix ${report.unreadable.map((u) => u.id).join(", ")}: each names what is missing or unknown.`);
+  }
+  const blocked = toBuild.filter((i) => i.problems.length > 0);
+  if (blocked.length > 0) hints.push(`Fix before building: ${blocked.map((i) => i.id).join(", ")}.`);
+  if (report.observedCount < 3) {
+    hints.push(
+      "Few customer quotes on file: run `baker research customers` so ideas stand on what customers said; until then they are explore bets."
+    );
+  } else if (toBuild.length > 0 && toBuild.every((i) => i.evidence === "explore")) {
+    hints.push("No idea cites an insight: put the insight ids that back each one in its `evidence`.");
+  }
+  const next = buildNext(report.ideas);
+  if (next.length === 1) hints.push(`Build: \`baker creatives make ${next[0]}\`.`);
+  if (next.length > 1)
+    hints.push(
+      `Build ${next.join(", ")} at once: one \`creative-producer\` per idea, all spawned in one message in the background, each given its idea id, and handle each as it returns. Never build them one after another: each render takes minutes. Edited an idea after this check? Run \`baker creatives ideas\` again first: a producer cannot build an idea with a problem.`
+    );
+  return hints;
+}
+function buildNext(ideas, count = BUILD_NEXT) {
+  const ready = ideas.filter((i) => i.status === "idea" && i.problems.length === 0);
+  const firstBet = ready.find((i) => i.evidence === "explore");
+  return ready.filter((i) => i.evidence !== "explore" || i === firstBet).slice(0, count).map((i) => i.id);
+}
+function compactIdea(check) {
+  return {
+    idea: check.id,
+    status: check.status,
+    evidence: check.evidence,
+    ...check.quote ? { quote: check.quote.length > 120 ? `${check.quote.slice(0, 117)}...` : check.quote } : {},
+    awareness: check.awareness,
+    angle: check.angle,
+    format: check.format,
+    ...check.problems.length > 0 ? { problems: check.problems } : {},
+    ...check.warnings.length > 0 ? { warnings: check.warnings } : {}
+  };
+}
+async function ideasReport(root, opts = {}) {
+  const judge = opts.ask ? { ask: opts.ask, done: () => Promise.resolve() } : workspaceIdeasJudge(root);
+  const [{ ideas, unreadable }, insights, knowledge, personas, creatives] = await Promise.all([
+    readIdeas(root),
+    readInsights(root, { ask: judge.ask }),
+    readKnowledgeCorpus(root),
+    readPersonaIds(root),
+    readCreativeRecords(root)
+  ]);
+  const sameMessage = await sameMessageRead(ideas, judge.ask);
+  await judge.done();
+  const checked = checkIdeas({ ideas, insights, knowledge, personas, sameMessage, ...coverageOf(ideas, creatives) });
+  return {
+    ideas: checked,
+    unreadable,
+    insightCount: insights.length,
+    observedCount: insights.filter((i) => i.status === "observed").length
+  };
+}
+var ideasCommand = defineCommand({
+  meta: { name: "ideas", description: DESCRIPTION },
+  args: ARGS,
+  async run({ args }) {
+    const root = findWorkspaceRoot(process.cwd()) ?? process.cwd();
+    const report = await ideasReport(root);
+    const full = args.full === true;
+    writeJson({
+      ok: true,
+      data: {
+        build_next: buildNext(report.ideas),
+        ideas: full ? report.ideas : report.ideas.map(compactIdea),
+        ...report.unreadable.length > 0 ? { unreadable: report.unreadable } : {},
+        customer_quotes: { total: report.insightCount, observed: report.observedCount },
+        ...full ? { allowed: { angle: IDEA_ANGLES, format: IDEA_FORMATS } } : {}
+      },
+      hints: ideasHints(report)
+    });
+  }
+});
+
+export {
+  ideasHints,
+  buildNext,
+  compactIdea,
+  ideasReport,
+  ideasCommand
+};
+//# sourceMappingURL=chunk-7FKRKMGL.js.map

package/dist/chunk-7VHPAGPK.js

@@ -0,0 +1,228 @@
+import {
+  NUMERIC_ID_REGEX
+} from "./chunk-ML7DLFFY.js";
+
+// ../api/src/ads-google/change-history.ts
+var CHANGE_SCOPES = ["detail", "summary"];
+var CHANGE_SCOPE_MAX_DAYS = {
+  detail: 30,
+  summary: 90
+};
+var DEFAULT_CHANGE_DAYS = 7;
+var MAX_CHANGE_DAYS = CHANGE_SCOPE_MAX_DAYS.summary;
+function isChangeLookbackWithinReach(days, scope) {
+  return days <= CHANGE_SCOPE_MAX_DAYS[scope];
+}
+
+// ../api/src/ads-google/keyword-planning.ts
+import { z } from "zod";
+var ISO_DATE = /^\d{4}-\d{2}-\d{2}$/;
+var micros = z.number().int().positive();
+var FORECAST_MATCH_TYPES = ["EXACT", "PHRASE", "BROAD"];
+var googleForecastBiddingSchema = z.discriminatedUnion("strategy", [
+  z.object({ strategy: z.literal("MANUAL_CPC"), maxCpcBidMicros: micros, dailyBudgetMicros: micros.optional() }),
+  z.object({
+    strategy: z.literal("MAXIMIZE_CLICKS"),
+    dailyTargetSpendMicros: micros,
+    maxCpcBidCeilingMicros: micros.optional()
+  }),
+  z.object({ strategy: z.literal("MAXIMIZE_CONVERSIONS"), dailyTargetSpendMicros: micros })
+]);
+var googleKeywordForecastRequestSchema = z.object({
+  customerId: z.string().regex(NUMERIC_ID_REGEX, "customerId must be the bare numeric customer id"),
+  managerId: z.string().optional(),
+  /** One forecast ad group per entry; most forecasts are a single group. */
+  adGroups: z.array(
+    z.object({
+      keywords: z.array(z.object({ text: z.string().trim().min(1).max(80), matchType: z.enum(FORECAST_MATCH_TYPES) })).min(1)
+    })
+  ).min(1),
+  locationIds: z.array(z.string().regex(NUMERIC_ID_REGEX)).optional(),
+  languageId: z.string().regex(NUMERIC_ID_REGEX).optional(),
+  bidding: googleForecastBiddingSchema,
+  /** Must start in the future and end within a year. Without them Baker forecasts the 30 days from tomorrow. */
+  startDate: z.string().regex(ISO_DATE).optional(),
+  endDate: z.string().regex(ISO_DATE).optional(),
+  currencyCode: z.string().length(3).optional()
+}).refine((body) => body.startDate === void 0 === (body.endDate === void 0), {
+  message: "Give both --start and --end, or neither (the forecast then covers the 30 days from tomorrow)",
+  path: ["endDate"]
+});
+var KEYWORD_FORECAST_SOURCE = "keyword_planner_forecast";
+var googleKeywordForecastResponseSchema = z.object({
+  source: z.literal(KEYWORD_FORECAST_SOURCE),
+  period: z.object({ startDate: z.string(), endDate: z.string() }),
+  forecast_clicks: z.number().nullable(),
+  forecast_cost_micros: z.number().nullable(),
+  forecast_conversions: z.number().nullable(),
+  forecast_average_cpc_micros: z.number().nullable(),
+  forecast_average_cpa_micros: z.number().nullable()
+});
+var googleAdGroupThemesRequestSchema = z.object({
+  customerId: z.string().regex(NUMERIC_ID_REGEX, "customerId must be the bare numeric customer id"),
+  managerId: z.string().optional(),
+  keywords: z.array(z.string().trim().min(1)).min(1),
+  /** Existing ad groups to sort the keywords into: numeric ids or `customers/{cid}/adGroups/{id}`. */
+  adGroups: z.array(z.string().min(1)).min(1)
+});
+var googleAdGroupThemesResponseSchema = z.object({
+  suggestions: z.array(
+    z.object({
+      keyword: z.string(),
+      suggested_keyword: z.string(),
+      match_type: z.string(),
+      ad_group: z.string(),
+      campaign: z.string()
+    })
+  ),
+  unusable_ad_groups: z.array(z.object({ ad_group: z.string(), campaign: z.string() }))
+});
+
+// ../api/src/ads-google/url-options.ts
+import { z as z2 } from "zod";
+var URL_OPTION_LEVELS = ["account", "campaign", "ad_group", "ad"];
+var googleUrlOptionValueSchema = z2.discriminatedUnion("state", [
+  z2.object({ state: z2.literal("set"), value: z2.string() }),
+  z2.object({ state: z2.literal("not_set") }),
+  z2.object({ state: z2.literal("not_read"), reason: z2.string() })
+]);
+var googleUrlOptionsRequestSchema = z2.object({
+  customerId: z2.string().regex(NUMERIC_ID_REGEX, "customerId must be the bare numeric customer id"),
+  managerId: z2.string().optional(),
+  /** Compact by default: only campaigns that actually override the account. `full` lists every campaign. */
+  full: z2.boolean().optional(),
+  skipCache: z2.boolean().optional()
+});
+var googleUrlOptionsCampaignSchema = z2.object({
+  id: z2.string(),
+  name: z2.string(),
+  status: z2.string(),
+  final_url_suffix: googleUrlOptionValueSchema,
+  tracking_url_template: googleUrlOptionValueSchema
+});
+var googleUrlOptionsAdGroupSchema = z2.object({
+  id: z2.string(),
+  name: z2.string(),
+  status: z2.string(),
+  campaign_id: z2.string(),
+  final_url_suffix: googleUrlOptionValueSchema,
+  tracking_url_template: googleUrlOptionValueSchema
+});
+var googleUrlOptionsAdSchema = z2.object({
+  id: z2.string(),
+  status: z2.string(),
+  ad_group_id: z2.string(),
+  campaign_id: z2.string(),
+  final_url_suffix: googleUrlOptionValueSchema,
+  tracking_url_template: googleUrlOptionValueSchema
+});
+var googleUrlOptionsResponseSchema = z2.object({
+  customer_id: z2.string(),
+  account: z2.object({
+    level: z2.literal("account"),
+    read: z2.boolean(),
+    final_url_suffix: googleUrlOptionValueSchema,
+    tracking_url_template: googleUrlOptionValueSchema
+  }),
+  campaigns: z2.object({
+    level: z2.literal("campaign"),
+    read: z2.boolean(),
+    /** Campaigns actually observed. 0 with `read: true` means the account has no non-removed campaigns. */
+    campaigns_read: z2.number().int().nonnegative(),
+    /** Campaigns observed to carry no override of their own — an explicit finding, not an omission. */
+    campaigns_without_override: z2.number().int().nonnegative(),
+    overrides: z2.array(googleUrlOptionsCampaignSchema),
+    /** Compact mode only: campaigns read but not listed because they carry no override. */
+    omitted: z2.number().int().nonnegative()
+  }),
+  /**
+   * Ad groups and ads that carry an override of their own — read by asking Google only for the
+   * entities whose suffix or template IS NOT NULL, so an account of thousands of ads costs one page.
+   * `read: true` with no overrides is a finding: nothing at this level overrides the levels above.
+   * `truncated` means more overriding entities exist than one page listed.
+   */
+  ad_groups: z2.object({
+    level: z2.literal("ad_group"),
+    read: z2.boolean(),
+    overrides: z2.array(googleUrlOptionsAdGroupSchema),
+    truncated: z2.boolean()
+  }),
+  ads: z2.object({
+    level: z2.literal("ad"),
+    read: z2.boolean(),
+    overrides: z2.array(googleUrlOptionsAdSchema),
+    truncated: z2.boolean()
+  }),
+  /** Levels this command could not read. Nothing here may be reported as "not configured". */
+  levels_not_read: z2.array(z2.object({ level: z2.enum(URL_OPTION_LEVELS), reason: z2.string() }))
+});
+var ACCOUNT_URL_OPTIONS_LOCATION = "Google Ads UI \u2192 Admin \u2192 Account settings \u2192 Tracking (account-level tracking template and final URL suffix)";
+var ACCOUNT_URL_OPTIONS_STAGE_COMMAND = 'baker ads google account update --customer-id <id> --final-url-suffix "utm_agency=baker"';
+function isSet(value) {
+  return value.state === "set";
+}
+function entityOverrideHints(label, plural, field, level) {
+  if (!level.read) return [];
+  const hints = [];
+  const overriding = level.overrides.filter((entity) => isSet(entity.final_url_suffix));
+  if (overriding.length > 0) {
+    const named = overriding.slice(0, 5).map((entity) => entity.name || entity.id).join(", ");
+    hints.push(
+      `${overriding.length} ${label}(s) set their own final URL suffix (${named}${overriding.length > 5 ? ", \u2026" : ""}). It REPLACES the campaign and account suffix for every click through it, so an account-wide parameter must be added to theirs too.`
+    );
+  }
+  if (level.truncated) {
+    hints.push(
+      `More ${plural} override the URL options than one page lists \u2014 read them all with \`baker ads google query\` on ${field}.final_url_suffix IS NOT NULL --all before saying which ones do.`
+    );
+  }
+  return hints;
+}
+function urlOptionsHints(report) {
+  const hints = [];
+  const { account, campaigns } = report;
+  if (!account.read) {
+    hints.push(
+      "The account level did NOT read \u2014 its URL options are unknown, not empty. Re-run before telling the user anything about account-wide tagging."
+    );
+  } else if (account.final_url_suffix.state === "not_set") {
+    hints.push(
+      `No account-level final URL suffix is set. An account-wide parameter (agency/partner tagging such as utm_agency=\u2026) belongs at the account level so it reaches every ad \u2014 stage it with \`${ACCOUNT_URL_OPTIONS_STAGE_COMMAND}\` (applies at Publish; the user sees it under ${ACCOUNT_URL_OPTIONS_LOCATION}).`
+    );
+  }
+  if (!campaigns.read) {
+    hints.push(
+      "Campaign-level URL options did NOT read \u2014 do not report that no campaign overrides exist. Re-run before concluding."
+    );
+  } else {
+    const overriding = campaigns.overrides.filter((c) => isSet(c.final_url_suffix));
+    if (overriding.length > 0) {
+      const named = overriding.slice(0, 5).map((c) => c.name || c.id).join(", ");
+      hints.push(
+        `A campaign's final URL suffix REPLACES the account-level one for that campaign \u2014 it does not merge. ${overriding.length} campaign(s) set their own (${named}${overriding.length > 5 ? ", \u2026" : ""}) and will not pick up an account-wide parameter until their own suffix carries it too. Every other campaign read here inherits the account level normally.`
+      );
+    }
+  }
+  hints.push(...entityOverrideHints("ad group", "ad groups", "ad_group", report.ad_groups));
+  hints.push(...entityOverrideHints("ad", "ads", "ad_group_ad.ad", report.ads));
+  const overridingLevelsNotRead = report.levels_not_read.filter((level) => level.level !== "account");
+  if (overridingLevelsNotRead.length > 0) {
+    hints.push(
+      `Not read at this level: ${overridingLevelsNotRead.map((l) => l.level).join(", ")}. A suffix set there still wins over the levels above it.`
+    );
+  }
+  if (campaigns.omitted > 0) {
+    hints.push(`${campaigns.omitted} campaign(s) read with no override of their own are not listed \u2014 pass --full.`);
+  }
+  return hints;
+}
+
+export {
+  CHANGE_SCOPES,
+  CHANGE_SCOPE_MAX_DAYS,
+  DEFAULT_CHANGE_DAYS,
+  isChangeLookbackWithinReach,
+  googleKeywordForecastRequestSchema,
+  urlOptionsHints
+};
+//# sourceMappingURL=chunk-7VHPAGPK.js.map