@koda-sl/baker-cli 0.497.0 → 0.498.0

package/dist/chunk-CBXIUKGG.js

@@ -1,74 +0,0 @@
-import {
-  cacheGet,
-  cacheSet,
-  handleConnectionError,
-  needsConnectionFix,
-  writeJsonEnvelope
-} from "./chunk-2VIZ4UUZ.js";
-import {
-  ApiError,
-  apiGet
-} from "./chunk-6YLNY6CK.js";
-import {
-  getEnv
-} from "./chunk-57KKVDDR.js";
-
-// src/commands/gsc/resolve.ts
-async function fetchSites(useCache = true) {
-  if (useCache) {
-    const cached = cacheGet("gsc-sites", "list");
-    if (cached) return cached.data;
-  }
-  const params = !useCache ? { "skip-cache": "true" } : void 0;
-  const data = await apiGet("/api/gsc/sites", params);
-  if (useCache) {
-    cacheSet("gsc-sites", "list", data, 60 * 60 * 1e3);
-  }
-  return data;
-}
-async function resolveSiteUrl(args) {
-  const fromArgs = args["site-url"];
-  const fromEnv = getEnv().BAKER_GSC_SITE_URL;
-  const siteUrl = fromArgs || fromEnv;
-  if (siteUrl) return siteUrl;
-  const useCache = !args["no-cache"];
-  try {
-    const sites = await fetchSites(useCache);
-    const [single] = sites;
-    if (sites.length === 1 && single) {
-      process.stderr.write(`Using site "${single.siteUrl}"
-`);
-      return single.siteUrl;
-    }
-    if (sites.length === 0) {
-      handleConnectionError("gsc");
-    }
-    const list = sites.map((s) => `  ${s.siteUrl}  (${s.permissionLevel})`).join("\n");
-    writeJsonEnvelope({
-      ok: false,
-      error: {
-        code: "MULTIPLE_SITES",
-        message: `Multiple sites found. Pass --site-url or set BAKER_GSC_SITE_URL:
-${list}`
-      }
-    });
-    process.exit(1);
-  } catch (err) {
-    if (err instanceof ApiError && needsConnectionFix(err.code, err.message)) {
-      handleConnectionError("gsc", err.message);
-    }
-    writeJsonEnvelope({
-      ok: false,
-      error: {
-        code: "RESOLUTION_ERROR",
-        message: "Could not auto-detect site. Pass --site-url or set BAKER_GSC_SITE_URL."
-      }
-    });
-    process.exit(1);
-  }
-}
-
-export {
-  resolveSiteUrl
-};
-//# sourceMappingURL=chunk-CBXIUKGG.js.map

package/dist/chunk-CRIP3IUP.js

@@ -1,191 +0,0 @@
-import {
-  hintLines,
-  splitHints
-} from "./chunk-D5FY4FAK.js";
-import {
-  isNotConnectedError,
-  writeJsonEnvelope
-} from "./chunk-2VIZ4UUZ.js";
-import {
-  ApiError,
-  apiPost
-} from "./chunk-6YLNY6CK.js";
-import {
-  requireChatId,
-  resolveChatId
-} from "./chunk-57KKVDDR.js";
-
-// src/commands/ga4/shared.ts
-import { readFileSync } from "fs";
-function failValidation(message) {
-  writeJsonEnvelope({ ok: false, error: { code: "VALIDATION_ERROR", message } });
-  process.exit(1);
-}
-function requireTarget(args, entity) {
-  const positional = Array.isArray(args._) ? args._[0] : void 0;
-  const target = args.id ?? args.target ?? positional;
-  if (typeof target !== "string" || target.length === 0) {
-    failValidation(`pass the ${entity} id as the positional argument`);
-  }
-  return target;
-}
-function readJsonSource(args, flag) {
-  const inline = args[flag];
-  const file = args.file;
-  const raw = typeof file === "string" && file.length > 0 ? readFileSync(file, "utf8") : typeof inline === "string" && inline.length > 0 ? inline : void 0;
-  if (raw === void 0) {
-    failValidation(`pass --${flag} with inline JSON or --file with a path to a JSON file`);
-  }
-  try {
-    return JSON.parse(raw);
-  } catch {
-    return failValidation(`--${flag} is not valid JSON`);
-  }
-}
-function asObject(value, flag, index) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    failValidation(
-      index === void 0 ? `--${flag} must be a JSON object` : `--${flag}[${index}] must be a JSON object`
-    );
-  }
-  return value;
-}
-function loadJsonArg(args, flag = "json") {
-  return asObject(readJsonSource(args, flag), flag);
-}
-function loadJsonPayloads(args) {
-  const parsed = readJsonSource(args, "json");
-  if (!Array.isArray(parsed)) {
-    return [asObject(parsed, "json")];
-  }
-  if (parsed.length === 0) {
-    failValidation("--json is an empty list \u2014 pass at least one definition");
-  }
-  return parsed.map((entry, index) => asObject(entry, "json", index));
-}
-var RETRYABLE_CODES = /* @__PURE__ */ new Set(["RATE_LIMITED", "UNAVAILABLE", "INTERNAL_ERROR", "NETWORK_ERROR", "TIMEOUT"]);
-function handleError(err) {
-  if (err instanceof ApiError) {
-    const readOnly = err.code === "FORBIDDEN" && /read the property but not change it/i.test(err.message);
-    writeJsonEnvelope({
-      ok: false,
-      error: {
-        code: err.code,
-        message: err.message,
-        ...readOnly ? {
-          fix: {
-            action: "reconnect",
-            explanation: "The Google Analytics connection is read-only. Ask the user to reconnect Google Analytics \u2014 in the dashboard, Brain \u2192 Integrations \u2192 Platforms \u2192 Google Analytics \u2014 which grants the permission to change the property. Reporting (`baker ga4 query`, `baker ga4 audit`) keeps working meanwhile, so carry on with the rest of the job and tell them what you will set up once they have reconnected. Don't claim anything was configured."
-          }
-        } : err.code === "UNAUTHORIZED" || err.code === "FORBIDDEN" && isNotConnectedError(err.code, err.message) ? {
-          fix: {
-            action: "request_connection",
-            explanation: 'Google Analytics is not connected for this company yet, or no property has been picked. Don\'t send the user to Settings \u2014 call the `request_connection` tool with { platform: "google-analytics", reason } and they connect and pick their property from inside the chat. If the `request_connection` call fails, say so plainly and give the exact route: dashboard \u2192 Brain \u2192 Integrations \u2192 Platforms \u2192 Google Analytics. Then carry on with the rest of the task.'
-          }
-        } : {},
-        retryable: RETRYABLE_CODES.has(err.code)
-      }
-    });
-    process.exit(1);
-  }
-  writeJsonEnvelope({ ok: false, error: { code: "NETWORK_ERROR", message: "Unexpected error", retryable: true } });
-  process.exit(1);
-}
-var STAGE_HINTS = [
-  "Staged only \u2014 nothing has changed in Google Analytics yet. These apply when the chat completes, and an applied change takes effect on the property immediately: there is no version to publish afterwards and no undo. Say the changes are ready and take effect when the user completes the chat \u2014 not that they are done already."
-];
-var WARNING_HINT = "Read the warnings above before telling the user this is ready.";
-async function stageOp(op) {
-  const chatId = requireChatId();
-  try {
-    const { data, hints } = splitHints(await apiPost("/api/ga4/draft/stage", { chatId, op }));
-    writeJsonEnvelope({
-      ok: true,
-      data,
-      hints: [...hints, ...STAGE_HINTS, ...data.warnings.length > 0 ? [WARNING_HINT] : []]
-    });
-  } catch (err) {
-    handleError(err);
-  }
-}
-async function stageOps(ops) {
-  const [only] = ops;
-  if (ops.length === 1 && only) {
-    await stageOp(only);
-    return;
-  }
-  const chatId = requireChatId();
-  try {
-    const { data, hints } = splitHints(
-      await apiPost("/api/ga4/draft/stage-batch", { chatId, ops })
-    );
-    writeJsonEnvelope({
-      ok: true,
-      data,
-      hints: [...hints, ...STAGE_HINTS, ...data.ops.some((op) => op.warnings.length > 0) ? [WARNING_HINT] : []]
-    });
-  } catch (err) {
-    handleError(err);
-  }
-}
-async function draftAction(path, body, chat) {
-  const chatId = resolveChatId(chat);
-  try {
-    const { data, hints } = splitHints(await apiPost(path, { chatId, ...body }));
-    writeJsonEnvelope({ ok: true, data, ...hints.length > 0 ? { hints } : {} });
-    return data;
-  } catch (err) {
-    handleError(err);
-  }
-}
-function renderDraft(response) {
-  if (response.count === 0) {
-    return "No Google Analytics changes staged on this chat.";
-  }
-  const lines = [
-    `${response.count} staged Google Analytics change(s)`,
-    ...response.ops.map((op) => {
-      const status = op.result ? ` [${op.result.status}]` : "";
-      return `  ${op.ref}  ${op.summary}${status}`;
-    })
-  ];
-  if (response.status === "applied") {
-    const failed = response.ops.filter((op) => op.result?.status !== "applied");
-    lines.push(
-      "",
-      failed.length === 0 ? "All applied \u2014 these are in effect on the property now." : `${failed.length} of ${response.count} did not apply. The rest are in effect on the property.`
-    );
-  }
-  if (response.publishError) {
-    lines.push("", response.publishError);
-  }
-  return lines.join("\n");
-}
-async function draftList(json, chat) {
-  const chatId = resolveChatId(chat);
-  try {
-    const response = await apiPost("/api/ga4/draft", { chatId });
-    const { data, hints } = splitHints(response);
-    if (json) {
-      writeJsonEnvelope({ ok: true, data, ...hints.length > 0 ? { hints } : {} });
-      return;
-    }
-    process.stdout.write(`${renderDraft(data)}${hintLines(response)}
-`);
-  } catch (err) {
-    handleError(err);
-  }
-}
-
-export {
-  failValidation,
-  requireTarget,
-  loadJsonArg,
-  loadJsonPayloads,
-  handleError,
-  stageOp,
-  stageOps,
-  draftAction,
-  draftList
-};
-//# sourceMappingURL=chunk-CRIP3IUP.js.map

package/dist/chunk-CRIP3IUP.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/commands/ga4/shared.ts"],"sourcesContent":["import { readFileSync } from \"node:fs\";\nimport type { Ga4DraftListResponse, Ga4DraftStageBatchResponse, Ga4DraftStageResponse } from \"@baker/api/ga4\";\nimport { ApiError, apiPost } from \"../../client.ts\";\nimport { requireChatId, resolveChatId } from \"../../env.ts\";\nimport { isNotConnectedError } from \"../../error-handler.ts\";\nimport { hintLines, splitHints } from \"../ads/hints.ts\";\nimport { writeJsonEnvelope } from \"../ads/output.ts\";\n\n/**\n * Shared plumbing for the staged Google Analytics write commands. These NEVER\n * change the property directly: each stages a change onto this chat's draft, the\n * user reviews the whole set in the Analytics tab, and it applies when the chat\n * completes.\n */\n\nexport function failValidation(message: string): never {\n  writeJsonEnvelope({ ok: false, error: { code: \"VALIDATION_ERROR\", message } });\n  process.exit(1);\n}\n\nexport function requireTarget(args: Record<string, unknown>, entity: string): string {\n  const positional = Array.isArray(args._) ? args._[0] : undefined;\n  const target = args.id ?? args.target ?? positional;\n  if (typeof target !== \"string\" || target.length === 0) {\n    failValidation(`pass the ${entity} id as the positional argument`);\n  }\n  return target;\n}\n\nfunction readJsonSource(args: Record<string, unknown>, flag: \"patch\" | \"json\"): unknown {\n  const inline = args[flag];\n  const file = args.file;\n  const raw =\n    typeof file === \"string\" && file.length > 0\n      ? readFileSync(file, \"utf8\")\n      : typeof inline === \"string\" && inline.length > 0\n        ? inline\n        : undefined;\n  if (raw === undefined) {\n    failValidation(`pass --${flag} with inline JSON or --file with a path to a JSON file`);\n  }\n  try {\n    return JSON.parse(raw) as unknown;\n  } catch {\n    return failValidation(`--${flag} is not valid JSON`);\n  }\n}\n\nfunction asObject(value: unknown, flag: string, index?: number): Record<string, unknown> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    failValidation(\n      index === undefined ? `--${flag} must be a JSON object` : `--${flag}[${index}] must be a JSON object`,\n    );\n  }\n  return value as Record<string, unknown>;\n}\n\n/** `--json '<inline>'` or `--file <path>` → a parsed object. */\nexport function loadJsonArg(args: Record<string, unknown>, flag: \"patch\" | \"json\" = \"json\"): Record<string, unknown> {\n  return asObject(readJsonSource(args, flag), flag);\n}\n\n/**\n * The same, but a JSON **array** is allowed and means \"stage all of these\n * together\".\n *\n * This is the only way to keep a bulk job cheap. Every stage call reads the\n * whole property first — the property, its data streams, its key events, its\n * custom definitions and its retention window — because that read is what the\n * duplicate and immutability refusals are derived from. One call per definition\n * therefore multiplies a routine \"make these eight parameters reportable\" into\n * roughly fifty Admin API reads against a quota Google counts per project.\n */\nexport function loadJsonPayloads(args: Record<string, unknown>): Record<string, unknown>[] {\n  const parsed = readJsonSource(args, \"json\");\n  if (!Array.isArray(parsed)) {\n    return [asObject(parsed, \"json\")];\n  }\n  if (parsed.length === 0) {\n    failValidation(\"--json is an empty list — pass at least one definition\");\n  }\n  return parsed.map((entry, index) => asObject(entry, \"json\", index));\n}\n\nconst RETRYABLE_CODES = new Set([\"RATE_LIMITED\", \"UNAVAILABLE\", \"INTERNAL_ERROR\", \"NETWORK_ERROR\", \"TIMEOUT\"]);\n\n/**\n * The one error shape for the whole family.\n *\n * Two different 403s reach here and they need opposite responses, which is why\n * the fix is keyed to the message and not just the status:\n *  - \"no Google Analytics connection / no property picked\" → the in-chat connect\n *    form, same as every other family.\n *  - \"this connection can read but not change the property\" → a RECONNECT, which\n *    is what every connection made before Baker could configure GA4 needs. The\n *    backend's message already says so, so it is passed through as the fix\n *    explanation rather than being replaced with the connect-form wording, which\n *    would send the user to set up a connection they already have.\n */\nexport function handleError(err: unknown): never {\n  if (err instanceof ApiError) {\n    const readOnly = err.code === \"FORBIDDEN\" && /read the property but not change it/i.test(err.message);\n    writeJsonEnvelope({\n      ok: false,\n      error: {\n        code: err.code,\n        message: err.message,\n        ...(readOnly\n          ? {\n              fix: {\n                action: \"reconnect\",\n                explanation:\n                  \"The Google Analytics connection is read-only. Ask the user to reconnect Google Analytics — in the \" +\n                  \"dashboard, Brain → Integrations → Platforms → Google Analytics — which grants the permission to change \" +\n                  \"the property. Reporting (`baker ga4 query`, `baker ga4 audit`) keeps working meanwhile, so carry \" +\n                  \"on with the rest of the job and tell them what you will set up once they have reconnected. Don't \" +\n                  \"claim anything was configured.\",\n              },\n            }\n          : err.code === \"UNAUTHORIZED\" || (err.code === \"FORBIDDEN\" && isNotConnectedError(err.code, err.message))\n            ? {\n                fix: {\n                  action: \"request_connection\",\n                  explanation:\n                    \"Google Analytics is not connected for this company yet, or no property has been picked. Don't \" +\n                    'send the user to Settings — call the `request_connection` tool with { platform: \"google-analytics\", ' +\n                    \"reason } and they connect and pick their property from inside the chat. If the \" +\n                    \"`request_connection` call fails, say so plainly and give the exact route: dashboard → Brain → \" +\n                    \"Integrations → Platforms → Google Analytics. Then carry on with the rest of the task.\",\n                },\n              }\n            : {}),\n        retryable: RETRYABLE_CODES.has(err.code),\n      },\n    });\n    process.exit(1);\n  }\n  writeJsonEnvelope({ ok: false, error: { code: \"NETWORK_ERROR\", message: \"Unexpected error\", retryable: true } });\n  process.exit(1);\n}\n\n/** Nudges returned after a stage so the agent's next step is obvious. */\nconst STAGE_HINTS = [\n  \"Staged only — nothing has changed in Google Analytics yet. These apply when the chat completes, and an applied \" +\n    \"change takes effect on the property immediately: there is no version to publish afterwards and no undo. Say \" +\n    \"the changes are ready and take effect when the user completes the chat — not that they are done already.\",\n];\n\nconst WARNING_HINT = \"Read the warnings above before telling the user this is ready.\";\n\nexport async function stageOp(op: Record<string, unknown>): Promise<void> {\n  const chatId = requireChatId();\n  try {\n    const { data, hints } = splitHints(await apiPost<Ga4DraftStageResponse>(\"/api/ga4/draft/stage\", { chatId, op }));\n    writeJsonEnvelope({\n      ok: true,\n      data,\n      hints: [...hints, ...STAGE_HINTS, ...(data.warnings.length > 0 ? [WARNING_HINT] : [])],\n    });\n  } catch (err) {\n    handleError(err);\n  }\n}\n\n/**\n * Stage several changes as ONE request against ONE read of the property.\n *\n * All-or-nothing: if any one of them is refused, none of them stage — which is\n * the honest outcome, since the refusals are things like \"two of these claim the\n * same parameter name\" that only mean anything about the set as a whole. A\n * single op falls through to the plain path so its envelope is unchanged.\n */\nexport async function stageOps(ops: Record<string, unknown>[]): Promise<void> {\n  const [only] = ops;\n  if (ops.length === 1 && only) {\n    await stageOp(only);\n    return;\n  }\n  const chatId = requireChatId();\n  try {\n    const { data, hints } = splitHints(\n      await apiPost<Ga4DraftStageBatchResponse>(\"/api/ga4/draft/stage-batch\", { chatId, ops }),\n    );\n    writeJsonEnvelope({\n      ok: true,\n      data,\n      hints: [...hints, ...STAGE_HINTS, ...(data.ops.some((op) => op.warnings.length > 0) ? [WARNING_HINT] : [])],\n    });\n  } catch (err) {\n    handleError(err);\n  }\n}\n\nexport async function draftAction(\n  path: string,\n  body: Record<string, unknown>,\n  chat?: unknown,\n): Promise<Record<string, unknown>> {\n  const chatId = resolveChatId(chat);\n  try {\n    const { data, hints } = splitHints(await apiPost<Record<string, unknown>>(path, { chatId, ...body }));\n    writeJsonEnvelope({ ok: true, data, ...(hints.length > 0 ? { hints } : {}) });\n    return data;\n  } catch (err) {\n    handleError(err);\n  }\n}\n\n/** A compact, readable view of everything staged on this chat. */\nexport function renderDraft(response: Ga4DraftListResponse): string {\n  if (response.count === 0) {\n    return \"No Google Analytics changes staged on this chat.\";\n  }\n  const lines = [\n    `${response.count} staged Google Analytics change(s)`,\n    ...response.ops.map((op) => {\n      const status = op.result ? ` [${op.result.status}]` : \"\";\n      return `  ${op.ref}  ${op.summary}${status}`;\n    }),\n  ];\n  if (response.status === \"applied\") {\n    const failed = response.ops.filter((op) => op.result?.status !== \"applied\");\n    lines.push(\n      \"\",\n      failed.length === 0\n        ? \"All applied — these are in effect on the property now.\"\n        : `${failed.length} of ${response.count} did not apply. The rest are in effect on the property.`,\n    );\n  }\n  if (response.publishError) {\n    lines.push(\"\", response.publishError);\n  }\n  return lines.join(\"\\n\");\n}\n\nexport async function draftList(json: boolean, chat?: unknown): Promise<void> {\n  const chatId = resolveChatId(chat);\n  try {\n    const response = await apiPost<Ga4DraftListResponse>(\"/api/ga4/draft\", { chatId });\n    const { data, hints } = splitHints(response);\n    if (json) {\n      writeJsonEnvelope({ ok: true, data, ...(hints.length > 0 ? { hints } : {}) });\n      return;\n    }\n    process.stdout.write(`${renderDraft(data)}${hintLines(response)}\\n`);\n  } catch (err) {\n    handleError(err);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,SAAS,oBAAoB;AAetB,SAAS,eAAe,SAAwB;AACrD,oBAAkB,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,oBAAoB,QAAQ,EAAE,CAAC;AAC7E,UAAQ,KAAK,CAAC;AAChB;AAEO,SAAS,cAAc,MAA+B,QAAwB;AACnF,QAAM,aAAa,MAAM,QAAQ,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI;AACvD,QAAM,SAAS,KAAK,MAAM,KAAK,UAAU;AACzC,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,GAAG;AACrD,mBAAe,YAAY,MAAM,gCAAgC;AAAA,EACnE;AACA,SAAO;AACT;AAEA,SAAS,eAAe,MAA+B,MAAiC;AACtF,QAAM,SAAS,KAAK,IAAI;AACxB,QAAM,OAAO,KAAK;AAClB,QAAM,MACJ,OAAO,SAAS,YAAY,KAAK,SAAS,IACtC,aAAa,MAAM,MAAM,IACzB,OAAO,WAAW,YAAY,OAAO,SAAS,IAC5C,SACA;AACR,MAAI,QAAQ,QAAW;AACrB,mBAAe,UAAU,IAAI,wDAAwD;AAAA,EACvF;AACA,MAAI;AACF,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO,eAAe,KAAK,IAAI,oBAAoB;AAAA,EACrD;AACF;AAEA,SAAS,SAAS,OAAgB,MAAc,OAAyC;AACvF,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAC/D;AAAA,MACE,UAAU,SAAY,KAAK,IAAI,2BAA2B,KAAK,IAAI,IAAI,KAAK;AAAA,IAC9E;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,YAAY,MAA+B,OAAyB,QAAiC;AACnH,SAAO,SAAS,eAAe,MAAM,IAAI,GAAG,IAAI;AAClD;AAaO,SAAS,iBAAiB,MAA0D;AACzF,QAAM,SAAS,eAAe,MAAM,MAAM;AAC1C,MAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;AAC1B,WAAO,CAAC,SAAS,QAAQ,MAAM,CAAC;AAAA,EAClC;AACA,MAAI,OAAO,WAAW,GAAG;AACvB,mBAAe,6DAAwD;AAAA,EACzE;AACA,SAAO,OAAO,IAAI,CAAC,OAAO,UAAU,SAAS,OAAO,QAAQ,KAAK,CAAC;AACpE;AAEA,IAAM,kBAAkB,oBAAI,IAAI,CAAC,gBAAgB,eAAe,kBAAkB,iBAAiB,SAAS,CAAC;AAetG,SAAS,YAAY,KAAqB;AAC/C,MAAI,eAAe,UAAU;AAC3B,UAAM,WAAW,IAAI,SAAS,eAAe,uCAAuC,KAAK,IAAI,OAAO;AACpG,sBAAkB;AAAA,MAChB,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,MAAM,IAAI;AAAA,QACV,SAAS,IAAI;AAAA,QACb,GAAI,WACA;AAAA,UACE,KAAK;AAAA,YACH,QAAQ;AAAA,YACR,aACE;AAAA,UAKJ;AAAA,QACF,IACA,IAAI,SAAS,kBAAmB,IAAI,SAAS,eAAe,oBAAoB,IAAI,MAAM,IAAI,OAAO,IACnG;AAAA,UACE,KAAK;AAAA,YACH,QAAQ;AAAA,YACR,aACE;AAAA,UAKJ;AAAA,QACF,IACA,CAAC;AAAA,QACP,WAAW,gBAAgB,IAAI,IAAI,IAAI;AAAA,MACzC;AAAA,IACF,CAAC;AACD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,oBAAkB,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,oBAAoB,WAAW,KAAK,EAAE,CAAC;AAC/G,UAAQ,KAAK,CAAC;AAChB;AAGA,IAAM,cAAc;AAAA,EAClB;AAGF;AAEA,IAAM,eAAe;AAErB,eAAsB,QAAQ,IAA4C;AACxE,QAAM,SAAS,cAAc;AAC7B,MAAI;AACF,UAAM,EAAE,MAAM,MAAM,IAAI,WAAW,MAAM,QAA+B,wBAAwB,EAAE,QAAQ,GAAG,CAAC,CAAC;AAC/G,sBAAkB;AAAA,MAChB,IAAI;AAAA,MACJ;AAAA,MACA,OAAO,CAAC,GAAG,OAAO,GAAG,aAAa,GAAI,KAAK,SAAS,SAAS,IAAI,CAAC,YAAY,IAAI,CAAC,CAAE;AAAA,IACvF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,gBAAY,GAAG;AAAA,EACjB;AACF;AAUA,eAAsB,SAAS,KAA+C;AAC5E,QAAM,CAAC,IAAI,IAAI;AACf,MAAI,IAAI,WAAW,KAAK,MAAM;AAC5B,UAAM,QAAQ,IAAI;AAClB;AAAA,EACF;AACA,QAAM,SAAS,cAAc;AAC7B,MAAI;AACF,UAAM,EAAE,MAAM,MAAM,IAAI;AAAA,MACtB,MAAM,QAAoC,8BAA8B,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzF;AACA,sBAAkB;AAAA,MAChB,IAAI;AAAA,MACJ;AAAA,MACA,OAAO,CAAC,GAAG,OAAO,GAAG,aAAa,GAAI,KAAK,IAAI,KAAK,CAAC,OAAO,GAAG,SAAS,SAAS,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAE;AAAA,IAC5G,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,gBAAY,GAAG;AAAA,EACjB;AACF;AAEA,eAAsB,YACpB,MACA,MACA,MACkC;AAClC,QAAM,SAAS,cAAc,IAAI;AACjC,MAAI;AACF,UAAM,EAAE,MAAM,MAAM,IAAI,WAAW,MAAM,QAAiC,MAAM,EAAE,QAAQ,GAAG,KAAK,CAAC,CAAC;AACpG,sBAAkB,EAAE,IAAI,MAAM,MAAM,GAAI,MAAM,SAAS,IAAI,EAAE,MAAM,IAAI,CAAC,EAAG,CAAC;AAC5E,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,gBAAY,GAAG;AAAA,EACjB;AACF;AAGO,SAAS,YAAY,UAAwC;AAClE,MAAI,SAAS,UAAU,GAAG;AACxB,WAAO;AAAA,EACT;AACA,QAAM,QAAQ;AAAA,IACZ,GAAG,SAAS,KAAK;AAAA,IACjB,GAAG,SAAS,IAAI,IAAI,CAAC,OAAO;AAC1B,YAAM,SAAS,GAAG,SAAS,KAAK,GAAG,OAAO,MAAM,MAAM;AACtD,aAAO,KAAK,GAAG,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM;AAAA,IAC5C,CAAC;AAAA,EACH;AACA,MAAI,SAAS,WAAW,WAAW;AACjC,UAAM,SAAS,SAAS,IAAI,OAAO,CAAC,OAAO,GAAG,QAAQ,WAAW,SAAS;AAC1E,UAAM;AAAA,MACJ;AAAA,MACA,OAAO,WAAW,IACd,gEACA,GAAG,OAAO,MAAM,OAAO,SAAS,KAAK;AAAA,IAC3C;AAAA,EACF;AACA,MAAI,SAAS,cAAc;AACzB,UAAM,KAAK,IAAI,SAAS,YAAY;AAAA,EACtC;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,eAAsB,UAAU,MAAe,MAA+B;AAC5E,QAAM,SAAS,cAAc,IAAI;AACjC,MAAI;AACF,UAAM,WAAW,MAAM,QAA8B,kBAAkB,EAAE,OAAO,CAAC;AACjF,UAAM,EAAE,MAAM,MAAM,IAAI,WAAW,QAAQ;AAC3C,QAAI,MAAM;AACR,wBAAkB,EAAE,IAAI,MAAM,MAAM,GAAI,MAAM,SAAS,IAAI,EAAE,MAAM,IAAI,CAAC,EAAG,CAAC;AAC5E;AAAA,IACF;AACA,YAAQ,OAAO,MAAM,GAAG,YAAY,IAAI,CAAC,GAAG,UAAU,QAAQ,CAAC;AAAA,CAAI;AAAA,EACrE,SAAS,KAAK;AACZ,gBAAY,GAAG;AAAA,EACjB;AACF;","names":[]}

package/dist/chunk-CZYLHFSD.js

@@ -1,106 +0,0 @@
-import {
-  cacheGet,
-  cacheSet,
-  handleConnectionError,
-  needsConnectionFix,
-  writeAdsJson
-} from "./chunk-2VIZ4UUZ.js";
-import {
-  ApiError,
-  apiGet
-} from "./chunk-6YLNY6CK.js";
-import {
-  getEnv
-} from "./chunk-57KKVDDR.js";
-
-// src/commands/ads/x/output.ts
-var ACCOUNTS_CACHE_TTL_MS = 60 * 60 * 1e3;
-var NO_X_ACCOUNTS_EXPLANATION = "The X Ads connection is live, but X lists no ads accounts for it. That is usually an account X has not activated for advertising yet \u2014 most often one with no billing set up. It does not mean the connection failed, and reconnecting will not change it. An account X omits here still works everywhere else: take its id from the ads.x.com URL (ads.x.com/manager/<id>/\u2026) and pass --account-id <id>, or set BAKER_X_ADS_ACCOUNT_ID.";
-async function fetchXAccounts(useCache) {
-  if (useCache) {
-    const cached = cacheGet("x-accounts", "list");
-    if (cached) return cached.data;
-  }
-  const params = !useCache ? { "skip-cache": "true" } : void 0;
-  const data = await apiGet("/api/ads/x/accounts", params);
-  if (useCache) {
-    cacheSet("x-accounts", "list", data, ACCOUNTS_CACHE_TTL_MS);
-  }
-  return data;
-}
-async function resolveXAccountId(args) {
-  const fromArgs = args["account-id"];
-  const accountId = fromArgs || getEnv().BAKER_X_ADS_ACCOUNT_ID;
-  if (accountId) {
-    if (!/^[a-z0-9]+$/.test(accountId)) {
-      writeAdsJson({
-        ok: false,
-        error: {
-          code: "INVALID_ACCOUNT_ID",
-          message: "X Ads account ID must be a base36 string (lowercase letters and digits). Pass --account-id or set BAKER_X_ADS_ACCOUNT_ID."
-        }
-      });
-      process.exit(1);
-    }
-    return accountId;
-  }
-  const useCache = !args["no-cache"];
-  try {
-    const accounts = await fetchXAccounts(useCache);
-    const [single] = accounts;
-    if (accounts.length === 1 && single) {
-      process.stderr.write(`Using account "${single.name}" (${single.id})
-`);
-      return single.id;
-    }
-    if (accounts.length === 0) {
-      writeAdsJson({
-        ok: false,
-        error: {
-          code: "INVALID_ACCOUNT_ID",
-          message: NO_X_ACCOUNTS_EXPLANATION,
-          fix: { action: "reject", explanation: NO_X_ACCOUNTS_EXPLANATION },
-          retryable: false
-        }
-      });
-      process.exit(1);
-    }
-    const list = accounts.map((a) => `  ${a.id}  ${a.name}`).join("\n");
-    writeAdsJson({
-      ok: false,
-      error: {
-        code: "MULTIPLE_ACCOUNTS",
-        message: `Multiple X Ads accounts found. Pass --account-id or set BAKER_X_ADS_ACCOUNT_ID:
-${list}`
-      }
-    });
-    process.exit(1);
-  } catch (err) {
-    if (err instanceof ApiError && needsConnectionFix(err.code, err.message)) {
-      handleConnectionError("x_ads", err.message);
-    }
-    writeAdsJson({
-      ok: false,
-      error: {
-        code: "INVALID_ACCOUNT_ID",
-        message: "Could not auto-detect account. Pass --account-id or set BAKER_X_ADS_ACCOUNT_ID."
-      }
-    });
-    process.exit(1);
-  }
-}
-async function resolveXAccountTimezone(accountId, args) {
-  try {
-    const accounts = await fetchXAccounts(!args["no-cache"]);
-    return accounts.find((a) => a.id === accountId)?.timezone || "UTC";
-  } catch {
-    return "UTC";
-  }
-}
-
-export {
-  NO_X_ACCOUNTS_EXPLANATION,
-  resolveXAccountId,
-  resolveXAccountTimezone
-};
-//# sourceMappingURL=chunk-CZYLHFSD.js.map

package/dist/chunk-D5NEIESR.js

@@ -1,215 +0,0 @@
-import {
-  debugLogSetting
-} from "./chunk-57KKVDDR.js";
-
-// src/debugLog.ts
-import { appendFileSync, mkdirSync, renameSync, statSync } from "fs";
-import { dirname, isAbsolute, resolve } from "path";
-var DEFAULT_FILE = "baker-cli-debug.jsonl";
-var BOOLEAN_ON = /* @__PURE__ */ new Set(["1", "true", "on", "yes"]);
-var BOOLEAN_OFF = /* @__PURE__ */ new Set(["0", "false", "off", "no"]);
-var MAX_BYTES = 64 * 1024 * 1024;
-var REDACTIONS = [
-  [/Bearer\s+[A-Za-z0-9._-]+/g, "Bearer [redacted]"],
-  // Authorization headers
-  // Every prefix, captured rather than listed thrice: `bkr_` and `bkv_` do not
-  // contain the literal `bk_`, so the company-key rule matched no part of the
-  // read-only credentials a Session review or a published report runs with.
-  [/\b(bk[rv]?)_[A-Za-z0-9]+/g, "$1_[redacted]"],
-  // Baker API keys
-  [/eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g, "[redacted-jwt]"],
-  // JWTs / id tokens
-  [/ya29\.[A-Za-z0-9._-]+/g, "[redacted-google-token]"],
-  // Google OAuth access tokens
-  [/1\/\/[A-Za-z0-9._-]+/g, "[redacted-google-refresh]"],
-  // Google refresh tokens
-  [/EAA[A-Za-z0-9]{20,}/g, "[redacted-meta-token]"]
-  // Meta/Facebook access tokens
-];
-function redactSecrets(input) {
-  let out = input;
-  for (const [pattern, replacement] of REDACTIONS) {
-    out = out.replace(pattern, replacement);
-  }
-  return out;
-}
-var CREDENTIAL_VALUE = "[credential value]";
-var CREDENTIAL_PUT_PATH = "/api/credentials/put";
-function withoutCredentialValue(url, body) {
-  let path;
-  try {
-    path = new URL(url).pathname;
-  } catch {
-    path = url;
-  }
-  if (path !== CREDENTIAL_PUT_PATH || body === null || typeof body !== "object" || !("value" in body)) {
-    return body;
-  }
-  return { ...body, value: CREDENTIAL_VALUE };
-}
-var PUT_FLAGS_WITH_VALUES = /* @__PURE__ */ new Set(["--host", "--label"]);
-function argvWithoutCredentialValue(argv) {
-  if (argv[0] !== "credentials" || argv[1] !== "put") {
-    return argv;
-  }
-  let nameSeen = false;
-  let keepNext = false;
-  let redactNext = false;
-  return argv.map((arg, index) => {
-    if (index < 2) return arg;
-    if (keepNext || redactNext) {
-      const kept = keepNext ? arg : CREDENTIAL_VALUE;
-      keepNext = false;
-      redactNext = false;
-      return kept;
-    }
-    if (arg.startsWith("--value=")) return `--value=${CREDENTIAL_VALUE}`;
-    redactNext = arg === "--value";
-    keepNext = PUT_FLAGS_WITH_VALUES.has(arg);
-    if (arg.startsWith("-")) return arg;
-    const isName = !nameSeen;
-    nameSeen = true;
-    return isName ? arg : CREDENTIAL_VALUE;
-  });
-}
-function resolveTarget() {
-  const raw = debugLogSetting();
-  if (!raw) {
-    return void 0;
-  }
-  const lower = raw.toLowerCase();
-  if (BOOLEAN_OFF.has(lower)) {
-    return void 0;
-  }
-  const target = BOOLEAN_ON.has(lower) ? DEFAULT_FILE : raw;
-  return isAbsolute(target) ? target : resolve(process.cwd(), target);
-}
-function isDebugLogEnabled() {
-  return resolveTarget() !== void 0;
-}
-var sessionId;
-function getSessionId() {
-  if (!sessionId) {
-    sessionId = `${process.pid}-${Date.now()}`;
-  }
-  return sessionId;
-}
-var trackedPath;
-var bytesInFile = 0;
-function ensureReady(filePath) {
-  if (trackedPath !== filePath) {
-    trackedPath = filePath;
-    mkdirSync(dirname(filePath), { recursive: true });
-    try {
-      bytesInFile = statSync(filePath).size;
-    } catch {
-      bytesInFile = 0;
-    }
-  }
-}
-function append(entry) {
-  const filePath = resolveTarget();
-  if (!filePath) {
-    return;
-  }
-  try {
-    const payload = { ts: (/* @__PURE__ */ new Date()).toISOString(), session: getSessionId(), ...entry };
-    const line = `${redactSecrets(JSON.stringify(payload))}
-`;
-    ensureReady(filePath);
-    const size = Buffer.byteLength(line);
-    if (bytesInFile + size > MAX_BYTES) {
-      renameSync(filePath, `${filePath}.1`);
-      bytesInFile = 0;
-    }
-    appendFileSync(filePath, line);
-    bytesInFile += size;
-  } catch {
-  }
-}
-function errorToPlain(err) {
-  if (err instanceof Error) {
-    const code = err.code;
-    return { name: err.name, message: err.message, ...typeof code === "string" ? { code } : {} };
-  }
-  return { message: String(err) };
-}
-var invocationStartedAt;
-function logInvocation(argv) {
-  invocationStartedAt = Date.now();
-  append({ kind: "invocation", argv: argvWithoutCredentialValue(argv), cwd: process.cwd() });
-}
-function logExit(code) {
-  append({
-    kind: "exit",
-    code,
-    ...invocationStartedAt === void 0 ? {} : { durationMs: Date.now() - invocationStartedAt }
-  });
-}
-var exitHookInstalled = false;
-function installExitRecord() {
-  if (exitHookInstalled || !isDebugLogEnabled()) {
-    return;
-  }
-  exitHookInstalled = true;
-  process.on("exit", (code) => {
-    logExit(typeof code === "number" ? code : 0);
-  });
-}
-function debugLogHttp(entry) {
-  if (!isDebugLogEnabled()) {
-    return;
-  }
-  append({
-    kind: "http",
-    source: entry.source,
-    method: entry.method,
-    url: entry.url,
-    durationMs: entry.durationMs,
-    request: withoutCredentialValue(entry.url, entry.requestBody),
-    status: entry.status,
-    ok: entry.ok,
-    response: entry.responseBody,
-    error: entry.error === void 0 ? void 0 : errorToPlain(entry.error)
-  });
-}
-async function readBodyForLog(response) {
-  if (!isDebugLogEnabled()) {
-    return void 0;
-  }
-  try {
-    return await response.clone().text();
-  } catch {
-    return void 0;
-  }
-}
-function tapStream(name, stream) {
-  const original = stream.write.bind(stream);
-  const decoder = new TextDecoder("utf-8");
-  stream.write = ((chunk, ...rest) => {
-    try {
-      const text = typeof chunk === "string" ? chunk : chunk instanceof Uint8Array ? decoder.decode(chunk, { stream: true }) : String(chunk);
-      append({ kind: "output", stream: name, text });
-    } catch {
-    }
-    return original(chunk, ...rest);
-  });
-}
-var tapsInstalled = false;
-function installStreamTaps() {
-  if (tapsInstalled || !isDebugLogEnabled()) {
-    return;
-  }
-  tapsInstalled = true;
-  tapStream("stdout", process.stdout);
-  tapStream("stderr", process.stderr);
-}
-
-export {
-  logInvocation,
-  installExitRecord,
-  debugLogHttp,
-  readBodyForLog,
-  installStreamTaps
-};
-//# sourceMappingURL=chunk-D5NEIESR.js.map