@koda-sl/baker-cli 0.497.0 → 0.498.0

package/dist/chunk-JX7BX2NB.js

@@ -1,333 +0,0 @@
-import {
-  captureProxyCredentials,
-  isChallengeBody,
-  isPrivateAddress,
-  isProxyFailure,
-  nextPlannedRoute,
-  plannedRoutes,
-  refuseNonPublicUrl,
-  shouldEscalate
-} from "./chunk-57KKVDDR.js";
-
-// ../proxy/src/fetch.ts
-import { lookup as dnsLookup } from "dns";
-import { Agent, ProxyAgent, Response, fetch as undiciFetch } from "undici";
-
-// ../proxy/src/fetchDecision.ts
-function classifyFetchOutcome(signal) {
-  if (isProxyFailure(signal)) return "proxy_unavailable";
-  if (shouldEscalate(signal)) return "blocked";
-  if (signal.status != null && signal.status >= 200 && signal.status < 400 && !signal.challenge) return "ok";
-  return "failed";
-}
-function shouldTryNextRoute(outcome) {
-  return outcome === "blocked" || outcome === "proxy_unavailable";
-}
-var TIMEOUT_CODES = /* @__PURE__ */ new Set([
-  "UND_ERR_CONNECT_TIMEOUT",
-  "UND_ERR_HEADERS_TIMEOUT",
-  "UND_ERR_BODY_TIMEOUT",
-  "ETIMEDOUT"
-]);
-var RESET_CODES = /* @__PURE__ */ new Set(["ECONNRESET", "UND_ERR_SOCKET", "EPIPE"]);
-var PROXY_RESPONSE = /Proxy response \((\d+)\)/;
-function errorCode(error) {
-  if (typeof error !== "object" || error === null) return null;
-  const code = error.code;
-  if (typeof code === "string") return code;
-  const name = error.name;
-  return typeof name === "string" ? name : null;
-}
-function errorMessage(error) {
-  if (typeof error === "object" && error !== null) {
-    const message = error.message;
-    if (typeof message === "string") return message;
-  }
-  return String(error);
-}
-function errorBlockSignal(error, proxied) {
-  const proxyResponse = PROXY_RESPONSE.exec(errorMessage(error));
-  if (proxyResponse) {
-    const status = Number(proxyResponse[1]);
-    return status === 407 ? { status: 407 } : { netError: "ERR_TUNNEL_CONNECTION_FAILED" };
-  }
-  const code = errorCode(error);
-  if (code !== null && TIMEOUT_CODES.has(code)) return { timedOut: true };
-  if (code === "AbortError" || code === "TimeoutError") return { timedOut: true };
-  if (proxied) {
-    return { netError: "ERR_PROXY_CONNECTION_FAILED" };
-  }
-  if (code !== null && RESET_CODES.has(code)) return { netError: "ERR_CONNECTION_RESET" };
-  return { netError: code ?? "ERR_FAILED" };
-}
-function shouldSniffChallenge(contentType, contentLength, maxSniffBytes) {
-  if (contentLength !== null && contentLength > maxSniffBytes) return false;
-  if (contentType === null || contentType.trim() === "") return true;
-  const type = contentType.toLowerCase();
-  if (type.startsWith("image/") || type.startsWith("video/") || type.startsWith("audio/")) return false;
-  return type.includes("text/") || type.includes("html") || type.includes("json") || type.includes("xml");
-}
-
-// ../proxy/src/fetch.ts
-var DEFAULT_TIMEOUT_MS = 6e4;
-var MAX_SNIFF_BYTES = 64 * 1024;
-function tierOf(route) {
-  return route.kind === "proxy" ? route.tier : "direct";
-}
-function agentFor(route) {
-  if (route.kind !== "proxy") return directAgent();
-  const token = Buffer.from(`${route.username}:${route.password}`).toString("base64");
-  return new ProxyAgent({ uri: route.server, token: `Basic ${token}` });
-}
-function directAgent() {
-  return new Agent({
-    connect: {
-      lookup: (hostname, options, callback) => {
-        dnsLookup(hostname, options, (error, address, family) => {
-          if (error) {
-            callback(error, address, family);
-            return;
-          }
-          const found = Array.isArray(address) ? address.map((entry) => entry.address) : [address];
-          const blocked = found.find((entry) => isPrivateAddress(entry));
-          if (blocked !== void 0) {
-            callback(new Error(`${PRIVATE_ADDRESS_CODE}: ${hostname} resolves to ${blocked}`), "", 4);
-            return;
-          }
-          callback(null, address, family);
-        });
-      }
-    }
-  });
-}
-var PRIVATE_ADDRESS_CODE = "EPRIVATEADDR";
-var MAX_REDIRECTS = 20;
-var REDIRECT_STATUS = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
-function originOf(url) {
-  try {
-    return new URL(url).origin;
-  } catch {
-    return null;
-  }
-}
-function refuseRedirect(entry, to) {
-  if (refuseNonPublicUrl(to) === null) return false;
-  const destination = originOf(to);
-  return destination === null || destination !== originOf(entry);
-}
-async function followRedirects(url, init) {
-  let current = url;
-  let request = { ...init, redirect: "manual" };
-  for (let hop = 0; hop <= MAX_REDIRECTS; hop++) {
-    const response = await undiciFetch(current, request);
-    const location = response.headers.get("location");
-    if (!REDIRECT_STATUS.has(response.status) || location === null) return response;
-    await response.body?.cancel();
-    const next = new URL(location, current).toString();
-    if (refuseRedirect(url, next)) {
-      throw new Error(`${PRIVATE_ADDRESS_CODE}: redirected to ${next}`);
-    }
-    const method = (request.method ?? "GET").toUpperCase();
-    const downgrade = response.status === 303 || (response.status === 301 || response.status === 302) && method === "POST";
-    request = downgrade ? { ...request, method: "GET", body: void 0 } : request;
-    current = next;
-  }
-  throw new Error(`too many redirects following ${url}`);
-}
-var NULL_BODY_STATUS = /* @__PURE__ */ new Set([101, 103, 204, 205, 304]);
-function rebuild(response, body) {
-  if (response.status < 200 || response.status > 599 || NULL_BODY_STATUS.has(response.status)) {
-    return new Response(null, { status: response.status, headers: response.headers });
-  }
-  return new Response(body, {
-    status: response.status,
-    statusText: response.statusText,
-    headers: response.headers
-  });
-}
-function declaredLength(response) {
-  const raw = response.headers.get("content-length");
-  if (raw === null) return null;
-  const value = Number(raw);
-  return Number.isFinite(value) ? value : null;
-}
-async function readOnce(response, sniff, maxBytes) {
-  const declared = declaredLength(response);
-  if (maxBytes !== void 0 && declared !== null && declared > maxBytes) {
-    await response.body?.cancel();
-    return { response: rebuild(response, new ArrayBuffer(0)), challenge: false };
-  }
-  const body = await response.arrayBuffer();
-  const wantsSniff = sniff && shouldSniffChallenge(response.headers.get("content-type"), body.byteLength, MAX_SNIFF_BYTES);
-  const challenge = wantsSniff ? isChallengeBody(new TextDecoder().decode(body)) : false;
-  return { response: rebuild(response, body), challenge };
-}
-async function attemptRoute(url, init, route, options) {
-  const tier = tierOf(route);
-  const agent = agentFor(route);
-  const startedAt = Date.now();
-  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-  const signal = init.signal ? AbortSignal.any([init.signal, AbortSignal.timeout(timeoutMs)]) : AbortSignal.timeout(timeoutMs);
-  try {
-    const raw = await followRedirects(url, { ...init, dispatcher: agent ?? void 0, signal });
-    const read = await readOnce(raw, options.sniffChallenge ?? true, options.maxBytes);
-    const outcome = classifyFetchOutcome({ status: raw.status, challenge: read.challenge });
-    return {
-      attempt: { tier, status: raw.status, ms: Date.now() - startedAt, outcome },
-      response: outcome === "proxy_unavailable" ? null : read.response
-    };
-  } catch (error) {
-    const blockSignal = errorBlockSignal(error, route.kind === "proxy");
-    return {
-      attempt: {
-        tier,
-        status: blockSignal.status ?? void 0,
-        ms: Date.now() - startedAt,
-        outcome: classifyFetchOutcome(blockSignal)
-      },
-      response: null,
-      error
-    };
-  } finally {
-    await agent?.close();
-  }
-}
-async function fetchWithEscalation(url, init, options) {
-  const attempts = [];
-  let originResponse = null;
-  let originTier = "direct";
-  let lastError;
-  const routes = plannedRoutes(url, options.credentials, options.routeOptions);
-  const tried = [];
-  for (let route = routes[0] ?? null; route !== null; route = nextPlannedRoute(routes, tried)) {
-    const rung = await attemptRoute(url, init, route, options);
-    attempts.push(rung.attempt);
-    tried.push({ tier: rung.attempt.tier, proxyFailure: rung.attempt.outcome === "proxy_unavailable" });
-    if (rung.response !== null) {
-      originResponse = rung.response;
-      originTier = rung.attempt.tier;
-    }
-    if (rung.error !== void 0) lastError = rung.error;
-    if (!shouldTryNextRoute(rung.attempt.outcome)) break;
-  }
-  return {
-    response: originResponse,
-    attempts,
-    finalTier: originResponse !== null ? originTier : lastAttempt(attempts)?.tier ?? "direct",
-    ...originResponse === null && lastError !== void 0 ? { error: lastError } : {}
-  };
-}
-function lastAttempt(attempts) {
-  return attempts[attempts.length - 1];
-}
-function describeLadder(result) {
-  const rungs = result.attempts.map((a) => `${a.tier}:${a.outcome}${a.status ? `(${a.status})` : ""}@${a.ms}ms`);
-  return `${rungs.join(" \u2192 ")} | final=${result.finalTier}`;
-}
-function rescued(result) {
-  return result.attempts.some((attempt) => attempt.outcome === "ok");
-}
-function endedBlocked(result) {
-  if (rescued(result)) return false;
-  return result.attempts.some((attempt) => attempt.outcome === "blocked");
-}
-function endedProxyUnavailable(result) {
-  if (rescued(result) || endedBlocked(result)) return false;
-  return result.attempts.some((attempt) => attempt.outcome === "proxy_unavailable");
-}
-function endedPrivateAddress(result) {
-  if (rescued(result)) return false;
-  for (let error = result.error, depth = 0; error instanceof Error && depth < 5; depth++) {
-    if (error.message.includes(PRIVATE_ADDRESS_CODE)) return true;
-    error = error.cause;
-  }
-  return false;
-}
-
-// src/lib/externalFetch.ts
-var BROWSER_HEADERS = {
-  "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36",
-  Accept: "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
-  "Accept-Language": "en-US,en;q=0.9"
-};
-var NOT_PUBLIC_MESSAGE = "That address is not reachable from the public web, so there is nothing to read.";
-var MAX_REMOTE_IMAGE_BYTES = 25e6;
-var ExternalFetchError = class extends Error {
-  /** True when the fault was ours — a route we could not open, not a dead host. */
-  ourFault;
-  constructor(message, ourFault) {
-    super(message);
-    this.name = "ExternalFetchError";
-    this.ourFault = ourFault;
-  }
-};
-async function fetchExternal(url, options = {}) {
-  if (refuseNonPublicUrl(url) !== null) {
-    throw new ExternalFetchError(NOT_PUBLIC_MESSAGE, false);
-  }
-  const result = await fetchWithEscalation(
-    url,
-    { headers: { ...BROWSER_HEADERS, ...options.headers } },
-    {
-      credentials: captureProxyCredentials(),
-      ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs },
-      ...options.maxBytes === void 0 ? {} : { maxBytes: options.maxBytes },
-      ...options.sniffChallenge === void 0 ? {} : { sniffChallenge: options.sniffChallenge }
-    }
-  );
-  if (result.attempts.length > 1) {
-    process.stderr.write(`fetch ladder ${url} \u2014 ${describeLadder(result)}
-`);
-  }
-  if (result.response === null) {
-    if (endedPrivateAddress(result)) {
-      throw new ExternalFetchError(NOT_PUBLIC_MESSAGE, false);
-    }
-    const ourFault = endedProxyUnavailable(result);
-    throw new ExternalFetchError(
-      ourFault ? "Could not open a route to that address." : "That address did not answer.",
-      ourFault
-    );
-  }
-  return { response: result.response, blocked: endedBlocked(result) };
-}
-function refuseOversize(bytes, maxBytes) {
-  if (bytes === null || bytes <= maxBytes) return null;
-  return `That file is ${humanBytes(bytes)} \u2014 the limit is ${humanBytes(maxBytes)}.`;
-}
-function humanBytes(n) {
-  if (n >= 1024 ** 3) return `${(n / 1024 ** 3).toFixed(1)} GB`;
-  if (n >= 1024 ** 2) return `${(n / 1024 ** 2).toFixed(1)} MB`;
-  return `${Math.max(1, Math.round(n / 1024))} KB`;
-}
-function declaredBytes(response) {
-  const raw = response.headers.get("content-length");
-  if (raw === null) return null;
-  const value = Number(raw);
-  return Number.isFinite(value) ? value : null;
-}
-async function fetchExternalBytes(url, options) {
-  const { response, blocked } = await fetchExternal(url, options);
-  if (!response.ok) {
-    throw new ExternalFetchError(`${response.status} ${response.statusText}`, false);
-  }
-  if (blocked) {
-    throw new ExternalFetchError("That host served a security check instead of the file.", false);
-  }
-  const declared = refuseOversize(declaredBytes(response), options.maxBytes);
-  if (declared !== null) {
-    throw new ExternalFetchError(declared, false);
-  }
-  const buffer = Buffer.from(await response.arrayBuffer());
-  const actual = refuseOversize(buffer.byteLength, options.maxBytes);
-  if (actual !== null) {
-    throw new ExternalFetchError(actual, false);
-  }
-  return { buffer, contentType: response.headers.get("content-type") };
-}
-
-export {
-  MAX_REMOTE_IMAGE_BYTES,
-  fetchExternalBytes
-};
-//# sourceMappingURL=chunk-JX7BX2NB.js.map

package/dist/chunk-KKSHEPBY.js

@@ -1,363 +0,0 @@
-import {
-  MAX_VIDEO_INGEST_BYTES,
-  MAX_VIDEO_INGEST_SECONDS,
-  directDedupeKey,
-  downloadTimeoutMs,
-  isDirectMediaUrl,
-  isDrmProtected,
-  isRegionBlocked,
-  isToolingOrBlockFailure,
-  refuseByDuration,
-  resolveIngestSource,
-  worthDownloadingInstead
-} from "./chunk-FKOECEVC.js";
-import {
-  YtDlpError,
-  canonicalUrl,
-  durationSeconds,
-  isAudioOnly,
-  isVimeoAuthFailure,
-  probeYtDlp,
-  runYtDlp,
-  ytDlpBlockSignal
-} from "./chunk-VI5YQQ63.js";
-import {
-  videosIngestRequestSchema
-} from "./chunk-O37VU7FG.js";
-import {
-  ApiError,
-  apiPost
-} from "./chunk-6YLNY6CK.js";
-import {
-  captureVimeoCookie,
-  isProxyFailure
-} from "./chunk-57KKVDDR.js";
-import {
-  registerSchema,
-  writeJson
-} from "./chunk-QANGHND7.js";
-
-// src/commands/videos/ingest.ts
-import { mkdtemp, rm, stat } from "fs/promises";
-import { tmpdir } from "os";
-import path from "path";
-import { defineCommand } from "citty";
-
-// src/lib/streamUpload.ts
-import { createHash } from "crypto";
-import { createReadStream } from "fs";
-import { Readable } from "stream";
-import { pipeline } from "stream/promises";
-async function hashFile(filePath) {
-  const hash = createHash("sha256");
-  await pipeline(createReadStream(filePath), hash);
-  return hash.digest("hex");
-}
-async function putFileStreamed(args) {
-  const body = Readable.toWeb(createReadStream(args.filePath));
-  return await fetch(args.putUrl, {
-    method: "PUT",
-    body,
-    headers: {
-      "Content-Type": args.contentType,
-      "Content-Length": String(args.sizeBytes)
-    },
-    duplex: "half"
-  });
-}
-
-// src/commands/videos/ingest.ts
-registerSchema({
-  command: "videos.ingest",
-  description: "Add a video to the library from a URL \u2014 a direct file, or a YouTube/TikTok/Vimeo page.",
-  args: {
-    url: { type: "string", description: "Video URL (direct file or a watch/post page)", required: true },
-    source: { type: "string", description: "Provenance: url | youtube", required: false },
-    "external-id": { type: "string", description: "Provider asset id (deduped on)", required: false },
-    "external-url": { type: "string", description: "Canonical page URL", required: false },
-    download: {
-      type: "boolean",
-      description: "Force the download path instead of letting Baker fetch the URL directly",
-      required: false,
-      default: false
-    },
-    country: {
-      type: "string",
-      description: "Two-letter country to fetch from (e.g. US, DE, JP) \u2014 use when a video is blocked in your region",
-      required: false
-    },
-    context: {
-      type: "string",
-      description: "What you know that the video cannot show \u2014 the campaign, whether the person on camera is a real customer, what it is for. Highest-leverage flag here: it is what makes the clip findable later.",
-      required: false
-    },
-    "dry-run": { type: "boolean", description: "Preview the operation without executing", required: false }
-  }
-});
-var ingestCommand = defineCommand({
-  meta: {
-    name: "ingest",
-    description: "Add a video to the library from a URL. A direct file URL is handed straight to Baker, which fetches it. A page URL (YouTube, TikTok, Vimeo, Instagram) is downloaded here first, then uploaded \u2014 and a direct URL that Baker cannot fetch falls back to that same path automatically.\n\nExample: baker videos ingest https://www.youtube.com/watch?v=abc123"
-  },
-  args: {
-    url: { type: "positional", description: "Video URL", required: false },
-    source: { type: "string", description: "Provenance: url | youtube", required: false },
-    "external-id": { type: "string", description: "Provider asset id", required: false },
-    "external-url": { type: "string", description: "Canonical page URL", required: false },
-    download: { type: "boolean", description: "Force the download path", required: false, default: false },
-    country: { type: "string", description: "Two-letter country to fetch from, e.g. US", required: false },
-    context: {
-      type: "string",
-      description: "Context for the analysis \u2014 campaign, who is on camera, intended use",
-      required: false
-    },
-    "dry-run": { type: "boolean", description: "Preview without executing", required: false, default: false }
-  },
-  run: ({ args }) => runVideoIngest({
-    url: args.url,
-    source: args.source,
-    externalId: args["external-id"],
-    externalUrl: args["external-url"],
-    forceDownload: args.download === true,
-    country: args.country,
-    context: args.context,
-    dryRun: args["dry-run"] === true
-  })
-});
-async function runVideoIngest(opts) {
-  const url = opts.url;
-  if (!url) {
-    writeJson({ ok: false, error: { code: "VALIDATION_ERROR", message: "URL is required" } });
-    process.exit(1);
-  }
-  const direct = !opts.forceDownload && isDirectMediaUrl(url);
-  const country = opts.country?.trim() || void 0;
-  const args = {
-    url,
-    source: resolveIngestSource(opts.source, url),
-    externalId: opts.externalId,
-    // Deliberately NOT pre-filled with the pasted URL. Doing so shadowed the
-    // canonical URL the probe resolves (`?? canonicalUrl(...)` below could never
-    // run), so the same video filed under a different `externalUrl` depending on
-    // whether the link was copied from a share sheet, a shorts page or the
-    // address bar. `downloadThenIngest` falls back to `args.url` when the probe
-    // resolves nothing, which is the value this used to hard-code.
-    externalUrl: opts.externalUrl,
-    descriptionContext: opts.context?.trim() || void 0
-  };
-  const validation = videosIngestRequestSchema.safeParse({ ...args, url });
-  if (!validation.success) {
-    const problem = validation.error.issues[0];
-    writeJson({
-      ok: false,
-      error: {
-        code: "VALIDATION_ERROR",
-        message: problem ? `${problem.path.join(".") || "request"}: ${problem.message}` : "Invalid request"
-      }
-    });
-    process.exit(1);
-  }
-  if (opts.dryRun) {
-    reportDryRun(args, direct, country);
-    return;
-  }
-  try {
-    const data = await ingestByRoute(args, direct, country);
-    writeJson({ ok: true, data, hints: ingestHints(data) });
-  } catch (err) {
-    reportIngestFailure(err);
-  }
-}
-function ingestHints(data) {
-  if (data.reducedQuality !== true) return void 0;
-  return [
-    "Added, but at standard quality (360p): the site refused to release the full-quality file and this was the best it would hand over. Tell the user \u2014 the clip is in the library and usable, it is just not high-resolution. If they need the crisp version, ask them for the original file and use `baker videos upload <file>`."
-  ];
-}
-function reportDryRun(args, direct, country) {
-  writeJson({
-    ok: true,
-    dryRun: true,
-    operation: "videos.ingest",
-    params: {
-      url: args.url,
-      source: args.source,
-      // Known up front on the direct route, because it is derived from the URL
-      // alone. The download route's key comes from the probe, which a dry run
-      // does not perform, so there it stays null rather than becoming a guess.
-      externalId: args.externalId ?? (direct ? directDedupeKey(args.source, args.url) : null),
-      // A page URL's canonical form is only known after the probe, which a dry
-      // run does not perform — so this is null rather than a guess.
-      externalUrl: args.externalUrl ?? null,
-      direct,
-      country: country ?? null,
-      descriptionContext: args.descriptionContext ?? null
-    }
-  });
-}
-async function ingestByRoute(args, direct, country) {
-  if (!direct) {
-    return { ...await downloadThenIngest(args, country), via: "download" };
-  }
-  try {
-    const externalId = args.externalId ?? directDedupeKey(args.source, args.url);
-    return { ...await ingestUrl({ ...args, externalId }), via: "direct" };
-  } catch (err) {
-    if (!(err instanceof ApiError) || !worthDownloadingInstead(err.code)) throw err;
-    return { ...await downloadThenIngest(args, country), via: "download", fallbackFrom: err.message };
-  }
-}
-function reportYtDlpFailure(err) {
-  const detail = `${err.stderrTail} ${err.message}`;
-  if (isProxyFailure(ytDlpBlockSignal(detail))) {
-    fail(
-      "Couldn't download that video: our connection to the internet was refused.",
-      "This is Baker's egress proxy, not the link \u2014 its credentials look wrong or expired. The link is probably fine. Report it; retrying won't help until the proxy is fixed."
-    );
-  }
-  if (isDrmProtected(detail)) {
-    fail(
-      "That video is copy-protected, so it can't be added to the library.",
-      "The publisher encrypted this one against downloading. Nothing will change that \u2014 not retrying, not a different region. Ask whoever owns the video for the original file and add it with `baker videos upload <file>`."
-    );
-  }
-  if (isVimeoAuthFailure(detail)) {
-    fail(
-      "Vimeo wouldn't hand over that video \u2014 Baker isn't signed in to Vimeo.",
-      "Vimeo now refuses anonymous downloads entirely, so this needs a signed-in session and the one Baker holds has either expired or was never set. Nothing is wrong with the link. Report it so the Vimeo cookie can be refreshed; meanwhile download the file and use `baker videos upload <file>`."
-    );
-  }
-  if (isRegionBlocked(detail)) {
-    fail(
-      `That video isn't available in the region we're fetching from. ${err.stderrTail || err.message}`,
-      "Re-run with `--country <two-letter code>` for a country where the video plays \u2014 e.g. `--country US`. Pick the one the video belongs to (the uploader's country is the usual answer); each attempt costs a paid connection, so choose rather than work through the list."
-    );
-  }
-  fail(
-    `Couldn't download that video. ${err.stderrTail || err.message}`,
-    isToolingOrBlockFailure(detail) ? "The site wouldn't hand over the video \u2014 usually the downloader being out of date against a site that changed, or the request being blocked. Retrying won't help, and the link is probably fine. Report it so the tool can be updated; meanwhile download the file and use `baker videos upload <file>`." : "Check the link is public and playable. Private or age-restricted videos can't be downloaded \u2014 download the file yourself and use `baker videos upload <file>`."
-  );
-}
-function fail(message, fix, code = "INGEST_FAILED") {
-  writeJson({ ok: false, error: { code, message, fix } });
-  process.exit(1);
-}
-function reportIngestFailure(err) {
-  if (err instanceof ApiError) {
-    writeJson({ ok: false, error: { code: err.code, message: err.message } });
-    process.exit(1);
-  }
-  if (err instanceof YtDlpError) reportYtDlpFailure(err);
-  const detail = err instanceof Error ? err.message : String(err);
-  if (detail.includes("timed out after")) {
-    fail(
-      "That video took too long to download and was stopped part-way.",
-      "Long or slow-serving videos can outrun the download window. Try a shorter clip, or download this one yourself and use `baker videos upload <file>`.",
-      "INTERNAL_ERROR"
-    );
-  }
-  fail(
-    `Couldn't add that video. ${detail}`,
-    "This is a fault on Baker's side, not a problem with the link. Report it.",
-    "INTERNAL_ERROR"
-  );
-}
-function dedupeKey(args, info) {
-  const id = typeof info.id === "string" ? info.id : void 0;
-  if (!id) return void 0;
-  if (info.extractor === "generic") return `${args.source}:${canonicalUrl(info) ?? args.url}`;
-  return `${args.source}:${id}`;
-}
-function ingestUrl(args) {
-  const body = {
-    url: args.url,
-    source: args.source
-  };
-  if (args.externalId) body.externalId = args.externalId;
-  if (args.externalUrl) body.externalUrl = args.externalUrl;
-  if (args.descriptionContext) body.descriptionContext = args.descriptionContext;
-  return apiPost("/api/videos/ingest", body);
-}
-async function downloadThenIngest(args, country) {
-  const vimeoCookie = captureVimeoCookie();
-  const workDir = await mkdtemp(path.join(tmpdir(), "videos-ingest-"));
-  try {
-    const probe = await probeYtDlp({ url: args.url, country, vimeoCookie, cookieDir: workDir });
-    if (isAudioOnly(probe.info)) {
-      throw new ApiError(
-        "VALIDATION_ERROR",
-        "That link is audio, not video, so it can't go in the video library. Music and podcast links have no picture to store."
-      );
-    }
-    const tooLong = refuseByDuration(durationSeconds(probe.info), MAX_VIDEO_INGEST_SECONDS);
-    if (tooLong) {
-      throw new ApiError("VALIDATION_ERROR", tooLong);
-    }
-    const externalId = args.externalId ?? dedupeKey(args, probe.info);
-    const { filePath, tier, reducedQuality } = await runYtDlp({
-      url: args.url,
-      audioOnly: false,
-      workDir,
-      // Deliberately uncapped: take the best the site will release and let Mux
-      // decide what to serve. The 1080p ceiling this replaces was reasoning
-      // about the wrong cost — it saved download bytes by throwing away source
-      // pixels *before* the one system that can make renditions from them ever
-      // saw them, so a 4K master became a 1080p master permanently, for
-      // everything the library is ever asked to do with that clip afterwards.
-      // Downscaling is Mux's job and it is cheap; re-acquiring a master is not.
-      country,
-      vimeoCookie,
-      // Budgeted from the probed length, so the duration we accept and the time
-      // we allow to fetch it cannot drift apart.
-      timeoutMs: downloadTimeoutMs(durationSeconds(probe.info))
-    });
-    const stats = await stat(filePath);
-    if (stats.size > MAX_VIDEO_INGEST_BYTES) {
-      throw new ApiError(
-        "VALIDATION_ERROR",
-        `That video is ${(stats.size / 1024 ** 3).toFixed(1)} GB, over the ${Math.round(MAX_VIDEO_INGEST_BYTES / 1024 ** 3)} GB limit for this route.`
-      );
-    }
-    const publicUrl = await uploadToAssetStore(filePath, stats.size);
-    return {
-      ...await ingestUrl({
-        ...args,
-        url: publicUrl,
-        externalId,
-        externalUrl: args.externalUrl ?? canonicalUrl(probe.info) ?? args.url
-      }),
-      egress: tier,
-      // Named in the result for the same reason `egress` is: a geo-targeted exit
-      // is a deliberate, billable choice and must not be invisible afterwards.
-      ...country ? { country } : {},
-      // Third member of the same family. The site refused the good formats and
-      // the download quietly took the one it would release, which is the right
-      // call — but a clip that is 360p because of that must say so here, or the
-      // only way to find out is to watch it.
-      ...reducedQuality ? { reducedQuality: true } : {}
-    };
-  } finally {
-    await rm(workDir, { recursive: true, force: true }).catch(() => {
-    });
-  }
-}
-async function uploadToAssetStore(filePath, sizeBytes) {
-  const sha256 = await hashFile(filePath);
-  const { putUrl, publicUrl } = await apiPost("/api/canvas/assets/presign", {
-    sha256,
-    mime: "video/mp4",
-    purpose: "source"
-  });
-  const putRes = await putFileStreamed({ putUrl, filePath, contentType: "video/mp4", sizeBytes });
-  if (!putRes.ok) {
-    throw new ApiError("INTERNAL_ERROR", `Storing the downloaded video failed: HTTP ${putRes.status}`);
-  }
-  return publicUrl;
-}
-
-export {
-  ingestCommand,
-  runVideoIngest,
-  ingestHints
-};
-//# sourceMappingURL=chunk-KKSHEPBY.js.map