@koda-sl/baker-cli 0.531.0 → 0.533.0

package/dist/chunk-QOC3JEUQ.js

@@ -1,363 +0,0 @@
-import {
-  MAX_VIDEO_INGEST_BYTES,
-  MAX_VIDEO_INGEST_SECONDS,
-  directDedupeKey,
-  downloadTimeoutMs,
-  isDirectMediaUrl,
-  isDrmProtected,
-  isRegionBlocked,
-  isToolingOrBlockFailure,
-  refuseByDuration,
-  resolveIngestSource,
-  worthDownloadingInstead
-} from "./chunk-FKOECEVC.js";
-import {
-  YtDlpError,
-  canonicalUrl,
-  durationSeconds,
-  isAudioOnly,
-  isVimeoAuthFailure,
-  probeYtDlp,
-  runYtDlp,
-  ytDlpBlockSignal
-} from "./chunk-EHIISZYD.js";
-import {
-  videosIngestRequestSchema
-} from "./chunk-HVJJEQDQ.js";
-import {
-  ApiError,
-  apiPost
-} from "./chunk-B4UVJCJ4.js";
-import {
-  captureVimeoCookie,
-  isProxyFailure
-} from "./chunk-52IYZCRS.js";
-import {
-  registerSchema,
-  writeJson
-} from "./chunk-FSGJSREN.js";
-
-// src/commands/videos/ingest.ts
-import { mkdtemp, rm, stat } from "fs/promises";
-import { tmpdir } from "os";
-import path from "path";
-import { defineCommand } from "citty";
-
-// src/lib/streamUpload.ts
-import { createHash } from "crypto";
-import { createReadStream } from "fs";
-import { Readable } from "stream";
-import { pipeline } from "stream/promises";
-async function hashFile(filePath) {
-  const hash = createHash("sha256");
-  await pipeline(createReadStream(filePath), hash);
-  return hash.digest("hex");
-}
-async function putFileStreamed(args) {
-  const body = Readable.toWeb(createReadStream(args.filePath));
-  return await fetch(args.putUrl, {
-    method: "PUT",
-    body,
-    headers: {
-      "Content-Type": args.contentType,
-      "Content-Length": String(args.sizeBytes)
-    },
-    duplex: "half"
-  });
-}
-
-// src/commands/videos/ingest.ts
-registerSchema({
-  command: "videos.ingest",
-  description: "Add a video to the library from a URL \u2014 a direct file, or a YouTube/TikTok/Vimeo page.",
-  args: {
-    url: { type: "string", description: "Video URL (direct file or a watch/post page)", required: true },
-    source: { type: "string", description: "Provenance: url | youtube", required: false },
-    "external-id": { type: "string", description: "Provider asset id (deduped on)", required: false },
-    "external-url": { type: "string", description: "Canonical page URL", required: false },
-    download: {
-      type: "boolean",
-      description: "Force the download path instead of letting Baker fetch the URL directly",
-      required: false,
-      default: false
-    },
-    country: {
-      type: "string",
-      description: "Two-letter country to fetch from (e.g. US, DE, JP) \u2014 use when a video is blocked in your region",
-      required: false
-    },
-    context: {
-      type: "string",
-      description: "What you know that the video cannot show \u2014 the campaign, whether the person on camera is a real customer, what it is for. Highest-leverage flag here: it is what makes the clip findable later.",
-      required: false
-    },
-    "dry-run": { type: "boolean", description: "Preview the operation without executing", required: false }
-  }
-});
-var ingestCommand = defineCommand({
-  meta: {
-    name: "ingest",
-    description: "Add a video to the library from a URL. A direct file URL is handed straight to Baker, which fetches it. A page URL (YouTube, TikTok, Vimeo, Instagram) is downloaded here first, then uploaded \u2014 and a direct URL that Baker cannot fetch falls back to that same path automatically.\n\nExample: baker videos ingest https://www.youtube.com/watch?v=abc123"
-  },
-  args: {
-    url: { type: "positional", description: "Video URL", required: false },
-    source: { type: "string", description: "Provenance: url | youtube", required: false },
-    "external-id": { type: "string", description: "Provider asset id", required: false },
-    "external-url": { type: "string", description: "Canonical page URL", required: false },
-    download: { type: "boolean", description: "Force the download path", required: false, default: false },
-    country: { type: "string", description: "Two-letter country to fetch from, e.g. US", required: false },
-    context: {
-      type: "string",
-      description: "Context for the analysis \u2014 campaign, who is on camera, intended use",
-      required: false
-    },
-    "dry-run": { type: "boolean", description: "Preview without executing", required: false, default: false }
-  },
-  run: ({ args }) => runVideoIngest({
-    url: args.url,
-    source: args.source,
-    externalId: args["external-id"],
-    externalUrl: args["external-url"],
-    forceDownload: args.download === true,
-    country: args.country,
-    context: args.context,
-    dryRun: args["dry-run"] === true
-  })
-});
-async function runVideoIngest(opts) {
-  const url = opts.url;
-  if (!url) {
-    writeJson({ ok: false, error: { code: "VALIDATION_ERROR", message: "URL is required" } });
-    process.exit(1);
-  }
-  const direct = !opts.forceDownload && isDirectMediaUrl(url);
-  const country = opts.country?.trim() || void 0;
-  const args = {
-    url,
-    source: resolveIngestSource(opts.source, url),
-    externalId: opts.externalId,
-    // Deliberately NOT pre-filled with the pasted URL. Doing so shadowed the
-    // canonical URL the probe resolves (`?? canonicalUrl(...)` below could never
-    // run), so the same video filed under a different `externalUrl` depending on
-    // whether the link was copied from a share sheet, a shorts page or the
-    // address bar. `downloadThenIngest` falls back to `args.url` when the probe
-    // resolves nothing, which is the value this used to hard-code.
-    externalUrl: opts.externalUrl,
-    descriptionContext: opts.context?.trim() || void 0
-  };
-  const validation = videosIngestRequestSchema.safeParse({ ...args, url });
-  if (!validation.success) {
-    const problem = validation.error.issues[0];
-    writeJson({
-      ok: false,
-      error: {
-        code: "VALIDATION_ERROR",
-        message: problem ? `${problem.path.join(".") || "request"}: ${problem.message}` : "Invalid request"
-      }
-    });
-    process.exit(1);
-  }
-  if (opts.dryRun) {
-    reportDryRun(args, direct, country);
-    return;
-  }
-  try {
-    const data = await ingestByRoute(args, direct, country);
-    writeJson({ ok: true, data, hints: ingestHints(data) });
-  } catch (err) {
-    reportIngestFailure(err);
-  }
-}
-function ingestHints(data) {
-  if (data.reducedQuality !== true) return void 0;
-  return [
-    "Added, but at standard quality (360p): the site refused to release the full-quality file and this was the best it would hand over. Tell the user \u2014 the clip is in the library and usable, it is just not high-resolution. If they need the crisp version, ask them for the original file and use `baker videos upload <file>`."
-  ];
-}
-function reportDryRun(args, direct, country) {
-  writeJson({
-    ok: true,
-    dryRun: true,
-    operation: "videos.ingest",
-    params: {
-      url: args.url,
-      source: args.source,
-      // Known up front on the direct route, because it is derived from the URL
-      // alone. The download route's key comes from the probe, which a dry run
-      // does not perform, so there it stays null rather than becoming a guess.
-      externalId: args.externalId ?? (direct ? directDedupeKey(args.source, args.url) : null),
-      // A page URL's canonical form is only known after the probe, which a dry
-      // run does not perform — so this is null rather than a guess.
-      externalUrl: args.externalUrl ?? null,
-      direct,
-      country: country ?? null,
-      descriptionContext: args.descriptionContext ?? null
-    }
-  });
-}
-async function ingestByRoute(args, direct, country) {
-  if (!direct) {
-    return { ...await downloadThenIngest(args, country), via: "download" };
-  }
-  try {
-    const externalId = args.externalId ?? directDedupeKey(args.source, args.url);
-    return { ...await ingestUrl({ ...args, externalId }), via: "direct" };
-  } catch (err) {
-    if (!(err instanceof ApiError) || !worthDownloadingInstead(err.code)) throw err;
-    return { ...await downloadThenIngest(args, country), via: "download", fallbackFrom: err.message };
-  }
-}
-function reportYtDlpFailure(err) {
-  const detail = `${err.stderrTail} ${err.message}`;
-  if (isProxyFailure(ytDlpBlockSignal(detail))) {
-    fail(
-      "Couldn't download that video: our connection to the internet was refused.",
-      "This is Baker's egress proxy, not the link \u2014 its credentials look wrong or expired. The link is probably fine. Report it; retrying won't help until the proxy is fixed."
-    );
-  }
-  if (isDrmProtected(detail)) {
-    fail(
-      "That video is copy-protected, so it can't be added to the library.",
-      "The publisher encrypted this one against downloading. Nothing will change that \u2014 not retrying, not a different region. Ask whoever owns the video for the original file and add it with `baker videos upload <file>`."
-    );
-  }
-  if (isVimeoAuthFailure(detail)) {
-    fail(
-      "Vimeo wouldn't hand over that video \u2014 Baker isn't signed in to Vimeo.",
-      "Vimeo now refuses anonymous downloads entirely, so this needs a signed-in session and the one Baker holds has either expired or was never set. Nothing is wrong with the link. Report it so the Vimeo cookie can be refreshed; meanwhile download the file and use `baker videos upload <file>`."
-    );
-  }
-  if (isRegionBlocked(detail)) {
-    fail(
-      `That video isn't available in the region we're fetching from. ${err.stderrTail || err.message}`,
-      "Re-run with `--country <two-letter code>` for a country where the video plays \u2014 e.g. `--country US`. Pick the one the video belongs to (the uploader's country is the usual answer); each attempt costs a paid connection, so choose rather than work through the list."
-    );
-  }
-  fail(
-    `Couldn't download that video. ${err.stderrTail || err.message}`,
-    isToolingOrBlockFailure(detail) ? "The site wouldn't hand over the video \u2014 usually the downloader being out of date against a site that changed, or the request being blocked. Retrying won't help, and the link is probably fine. Report it so the tool can be updated; meanwhile download the file and use `baker videos upload <file>`." : "Check the link is public and playable. Private or age-restricted videos can't be downloaded \u2014 download the file yourself and use `baker videos upload <file>`."
-  );
-}
-function fail(message, fix, code = "INGEST_FAILED") {
-  writeJson({ ok: false, error: { code, message, fix } });
-  process.exit(1);
-}
-function reportIngestFailure(err) {
-  if (err instanceof ApiError) {
-    writeJson({ ok: false, error: { code: err.code, message: err.message } });
-    process.exit(1);
-  }
-  if (err instanceof YtDlpError) reportYtDlpFailure(err);
-  const detail = err instanceof Error ? err.message : String(err);
-  if (detail.includes("timed out after")) {
-    fail(
-      "That video took too long to download and was stopped part-way.",
-      "Long or slow-serving videos can outrun the download window. Try a shorter clip, or download this one yourself and use `baker videos upload <file>`.",
-      "INTERNAL_ERROR"
-    );
-  }
-  fail(
-    `Couldn't add that video. ${detail}`,
-    "This is a fault on Baker's side, not a problem with the link. Report it.",
-    "INTERNAL_ERROR"
-  );
-}
-function dedupeKey(args, info) {
-  const id = typeof info.id === "string" ? info.id : void 0;
-  if (!id) return void 0;
-  if (info.extractor === "generic") return `${args.source}:${canonicalUrl(info) ?? args.url}`;
-  return `${args.source}:${id}`;
-}
-function ingestUrl(args) {
-  const body = {
-    url: args.url,
-    source: args.source
-  };
-  if (args.externalId) body.externalId = args.externalId;
-  if (args.externalUrl) body.externalUrl = args.externalUrl;
-  if (args.descriptionContext) body.descriptionContext = args.descriptionContext;
-  return apiPost("/api/videos/ingest", body);
-}
-async function downloadThenIngest(args, country) {
-  const vimeoCookie = captureVimeoCookie();
-  const workDir = await mkdtemp(path.join(tmpdir(), "videos-ingest-"));
-  try {
-    const probe = await probeYtDlp({ url: args.url, country, vimeoCookie, cookieDir: workDir });
-    if (isAudioOnly(probe.info)) {
-      throw new ApiError(
-        "VALIDATION_ERROR",
-        "That link is audio, not video, so it can't go in the video library. Music and podcast links have no picture to store."
-      );
-    }
-    const tooLong = refuseByDuration(durationSeconds(probe.info), MAX_VIDEO_INGEST_SECONDS);
-    if (tooLong) {
-      throw new ApiError("VALIDATION_ERROR", tooLong);
-    }
-    const externalId = args.externalId ?? dedupeKey(args, probe.info);
-    const { filePath, tier, reducedQuality } = await runYtDlp({
-      url: args.url,
-      audioOnly: false,
-      workDir,
-      // Deliberately uncapped: take the best the site will release and let Mux
-      // decide what to serve. The 1080p ceiling this replaces was reasoning
-      // about the wrong cost — it saved download bytes by throwing away source
-      // pixels *before* the one system that can make renditions from them ever
-      // saw them, so a 4K master became a 1080p master permanently, for
-      // everything the library is ever asked to do with that clip afterwards.
-      // Downscaling is Mux's job and it is cheap; re-acquiring a master is not.
-      country,
-      vimeoCookie,
-      // Budgeted from the probed length, so the duration we accept and the time
-      // we allow to fetch it cannot drift apart.
-      timeoutMs: downloadTimeoutMs(durationSeconds(probe.info))
-    });
-    const stats = await stat(filePath);
-    if (stats.size > MAX_VIDEO_INGEST_BYTES) {
-      throw new ApiError(
-        "VALIDATION_ERROR",
-        `That video is ${(stats.size / 1024 ** 3).toFixed(1)} GB, over the ${Math.round(MAX_VIDEO_INGEST_BYTES / 1024 ** 3)} GB limit for this route.`
-      );
-    }
-    const publicUrl = await uploadToAssetStore(filePath, stats.size);
-    return {
-      ...await ingestUrl({
-        ...args,
-        url: publicUrl,
-        externalId,
-        externalUrl: args.externalUrl ?? canonicalUrl(probe.info) ?? args.url
-      }),
-      egress: tier,
-      // Named in the result for the same reason `egress` is: a geo-targeted exit
-      // is a deliberate, billable choice and must not be invisible afterwards.
-      ...country ? { country } : {},
-      // Third member of the same family. The site refused the good formats and
-      // the download quietly took the one it would release, which is the right
-      // call — but a clip that is 360p because of that must say so here, or the
-      // only way to find out is to watch it.
-      ...reducedQuality ? { reducedQuality: true } : {}
-    };
-  } finally {
-    await rm(workDir, { recursive: true, force: true }).catch(() => {
-    });
-  }
-}
-async function uploadToAssetStore(filePath, sizeBytes) {
-  const sha256 = await hashFile(filePath);
-  const { putUrl, publicUrl } = await apiPost("/api/canvas/assets/presign", {
-    sha256,
-    mime: "video/mp4",
-    purpose: "source"
-  });
-  const putRes = await putFileStreamed({ putUrl, filePath, contentType: "video/mp4", sizeBytes });
-  if (!putRes.ok) {
-    throw new ApiError("INTERNAL_ERROR", `Storing the downloaded video failed: HTTP ${putRes.status}`);
-  }
-  return publicUrl;
-}
-
-export {
-  ingestCommand,
-  runVideoIngest,
-  ingestHints
-};
-//# sourceMappingURL=chunk-QOC3JEUQ.js.map

package/dist/chunk-QOC3JEUQ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/commands/videos/ingest.ts","../src/lib/streamUpload.ts"],"sourcesContent":["import { mkdtemp, rm, stat } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport path from \"node:path\";\nimport { type VideosIngestRequest, type VideosIngestResponse, videosIngestRequestSchema } from \"@baker/api\";\nimport { isProxyFailure } from \"@baker/proxy\";\nimport { defineCommand } from \"citty\";\nimport { ApiError, apiPost } from \"../../client.ts\";\nimport { captureVimeoCookie } from \"../../env.ts\";\nimport { hashFile, putFileStreamed } from \"../../lib/streamUpload.ts\";\nimport { isVimeoAuthFailure } from \"../../lib/vimeoCookie.ts\";\nimport {\n  canonicalUrl,\n  durationSeconds,\n  isAudioOnly,\n  probeYtDlp,\n  runYtDlp,\n  YtDlpError,\n  type YtDlpInfo,\n} from \"../../lib/ytDlp.ts\";\nimport { ytDlpBlockSignal } from \"../../lib/ytDlpSignal.ts\";\nimport { writeJson } from \"../../output.ts\";\nimport { registerSchema } from \"../../schemas.ts\";\nimport {\n  directDedupeKey,\n  downloadTimeoutMs,\n  isDirectMediaUrl,\n  isDrmProtected,\n  isRegionBlocked,\n  isToolingOrBlockFailure,\n  MAX_VIDEO_INGEST_BYTES,\n  MAX_VIDEO_INGEST_SECONDS,\n  refuseByDuration,\n  resolveIngestSource,\n  worthDownloadingInstead,\n} from \"./ingestUrl.ts\";\n\nregisterSchema({\n  command: \"videos.ingest\",\n  description: \"Add a video to the library from a URL — a direct file, or a YouTube/TikTok/Vimeo page.\",\n  args: {\n    url: { type: \"string\", description: \"Video URL (direct file or a watch/post page)\", required: true },\n    source: { type: \"string\", description: \"Provenance: url | youtube\", required: false },\n    \"external-id\": { type: \"string\", description: \"Provider asset id (deduped on)\", required: false },\n    \"external-url\": { type: \"string\", description: \"Canonical page URL\", required: false },\n    download: {\n      type: \"boolean\",\n      description: \"Force the download path instead of letting Baker fetch the URL directly\",\n      required: false,\n      default: false,\n    },\n    country: {\n      type: \"string\",\n      description: \"Two-letter country to fetch from (e.g. US, DE, JP) — use when a video is blocked in your region\",\n      required: false,\n    },\n    context: {\n      type: \"string\",\n      description:\n        \"What you know that the video cannot show — the campaign, whether the person on camera is a real customer, what it is for. Highest-leverage flag here: it is what makes the clip findable later.\",\n      required: false,\n    },\n    \"dry-run\": { type: \"boolean\", description: \"Preview the operation without executing\", required: false },\n  },\n});\n\nexport const ingestCommand = defineCommand({\n  meta: {\n    name: \"ingest\",\n    description:\n      \"Add a video to the library from a URL. A direct file URL is handed straight to Baker, which fetches it. A page URL (YouTube, TikTok, Vimeo, Instagram) is downloaded here first, then uploaded — and a direct URL that Baker cannot fetch falls back to that same path automatically.\\n\\nExample: baker videos ingest https://www.youtube.com/watch?v=abc123\",\n  },\n  args: {\n    url: { type: \"positional\", description: \"Video URL\", required: false },\n    source: { type: \"string\", description: \"Provenance: url | youtube\", required: false },\n    \"external-id\": { type: \"string\", description: \"Provider asset id\", required: false },\n    \"external-url\": { type: \"string\", description: \"Canonical page URL\", required: false },\n    download: { type: \"boolean\", description: \"Force the download path\", required: false, default: false },\n    country: { type: \"string\", description: \"Two-letter country to fetch from, e.g. US\", required: false },\n    context: {\n      type: \"string\",\n      description: \"Context for the analysis — campaign, who is on camera, intended use\",\n      required: false,\n    },\n    \"dry-run\": { type: \"boolean\", description: \"Preview without executing\", required: false, default: false },\n  },\n  run: ({ args }) =>\n    runVideoIngest({\n      url: args.url as string | undefined,\n      source: args.source as string | undefined,\n      externalId: args[\"external-id\"] as string | undefined,\n      externalUrl: args[\"external-url\"] as string | undefined,\n      forceDownload: args.download === true,\n      country: args.country as string | undefined,\n      context: args.context as string | undefined,\n      dryRun: args[\"dry-run\"] === true,\n    }),\n});\n\nexport type VideoIngestOptions = {\n  url: string | undefined;\n  source?: string;\n  externalId?: string;\n  externalUrl?: string;\n  forceDownload?: boolean;\n  country?: string;\n  /** What the adder knew that the frames cannot show. Feeds the analysis. */\n  context?: string;\n  dryRun?: boolean;\n};\n\n/**\n * The ingest flow itself, callable from `videos ingest` and from the URL branch\n * of `videos upload` — one implementation, so the two verbs cannot drift.\n */\nexport async function runVideoIngest(opts: VideoIngestOptions): Promise<void> {\n  const url = opts.url;\n  if (!url) {\n    writeJson({ ok: false, error: { code: \"VALIDATION_ERROR\", message: \"URL is required\" } });\n    process.exit(1);\n  }\n\n  const direct = !opts.forceDownload && isDirectMediaUrl(url);\n  const country = opts.country?.trim() || undefined;\n  const args: IngestArgs = {\n    url,\n    source: resolveIngestSource(opts.source, url),\n    externalId: opts.externalId,\n    // Deliberately NOT pre-filled with the pasted URL. Doing so shadowed the\n    // canonical URL the probe resolves (`?? canonicalUrl(...)` below could never\n    // run), so the same video filed under a different `externalUrl` depending on\n    // whether the link was copied from a share sheet, a shorts page or the\n    // address bar. `downloadThenIngest` falls back to `args.url` when the probe\n    // resolves nothing, which is the value this used to hard-code.\n    externalUrl: opts.externalUrl,\n    descriptionContext: opts.context?.trim() || undefined,\n  };\n\n  // Checked here as well as at the route, because the download path ends by\n  // posting this same body: a bad `--source` caught only server-side would\n  // otherwise be discovered twice, the second time after downloading the video.\n  const validation = videosIngestRequestSchema.safeParse({ ...args, url });\n  if (!validation.success) {\n    const problem = validation.error.issues[0];\n    writeJson({\n      ok: false,\n      error: {\n        code: \"VALIDATION_ERROR\",\n        message: problem ? `${problem.path.join(\".\") || \"request\"}: ${problem.message}` : \"Invalid request\",\n      },\n    });\n    process.exit(1);\n  }\n\n  if (opts.dryRun) {\n    reportDryRun(args, direct, country);\n    return;\n  }\n\n  try {\n    const data = await ingestByRoute(args, direct, country);\n    writeJson({ ok: true, data, hints: ingestHints(data) });\n  } catch (err) {\n    reportIngestFailure(err);\n  }\n}\n\n/**\n * The successful ingest as the caller receives it.\n *\n * Named rather than left as a `Record<string, unknown>` so the fields that only\n * *sometimes* appear are still a checked contract. `reducedQuality` is the one\n * that needs it: nothing else reads it, `ingestHints` is the only thing that\n * acts on it, and an untyped bag would let either side be renamed with the\n * tests still green and the hint silently never firing again.\n */\nexport type IngestReport = VideosIngestResponse & {\n  via: \"direct\" | \"download\";\n  egress?: string;\n  country?: string;\n  reducedQuality?: true;\n  fallbackFrom?: string;\n};\n\n/**\n * What the caller has to be told about a download that already succeeded.\n *\n * The recovery itself is deliberately invisible — nobody asks for a retry, and\n * a video that arrives is a video that arrived. What must not be invisible is\n * the price the recovery paid, because it is the one thing looking at the\n * result cannot reveal: a 360p clip and a 1080p clip are the same successful\n * envelope. Written for whoever reads the JSON to repeat to a marketer, so it\n * says \"standard quality\", not which player answered.\n */\nexport function ingestHints(data: IngestReport): string[] | undefined {\n  if (data.reducedQuality !== true) return undefined;\n  return [\n    \"Added, but at standard quality (360p): the site refused to release the full-quality file and this was the best it would hand over. Tell the user — the clip is in the library and usable, it is just not high-resolution. If they need the crisp version, ask them for the original file and use `baker videos upload <file>`.\",\n  ];\n}\n\nfunction reportDryRun(args: IngestArgs, direct: boolean, country?: string): void {\n  writeJson({\n    ok: true,\n    dryRun: true,\n    operation: \"videos.ingest\",\n    params: {\n      url: args.url,\n      source: args.source,\n      // Known up front on the direct route, because it is derived from the URL\n      // alone. The download route's key comes from the probe, which a dry run\n      // does not perform, so there it stays null rather than becoming a guess.\n      externalId: args.externalId ?? (direct ? directDedupeKey(args.source, args.url) : null),\n      // A page URL's canonical form is only known after the probe, which a dry\n      // run does not perform — so this is null rather than a guess.\n      externalUrl: args.externalUrl ?? null,\n      direct,\n      country: country ?? null,\n      descriptionContext: args.descriptionContext ?? null,\n    },\n  });\n}\n\n/**\n * A direct media URL is handed straight over: Baker asks Mux to pull it, so no\n * bytes cross this machine and there is no size ceiling to hit. Only when that\n * is refused do we pay to download and re-upload the file ourselves.\n */\nasync function ingestByRoute(args: IngestArgs, direct: boolean, country?: string): Promise<IngestReport> {\n  if (!direct) {\n    return { ...(await downloadThenIngest(args, country)), via: \"download\" };\n  }\n  try {\n    // Defaulted here rather than on `args`, so that the fallback below still\n    // derives its key from the probe: a URL that turns out to be a page carries\n    // a real provider id, which dedupes better than the link it was pasted as.\n    const externalId = args.externalId ?? directDedupeKey(args.source, args.url);\n    return { ...(await ingestUrl({ ...args, externalId })), via: \"direct\" };\n  } catch (err) {\n    if (!(err instanceof ApiError) || !worthDownloadingInstead(err.code)) throw err;\n    return { ...(await downloadThenIngest(args, country)), via: \"download\", fallbackFrom: err.message };\n  }\n}\n\n/**\n * Turn a yt-dlp failure into the one sentence that names its actual cause.\n *\n * Split out from `reportIngestFailure` because the list of distinguishable\n * causes kept growing — proxy, DRM, Vimeo login, region, stale extractor — and\n * each one exists because the generic message sent the reader somewhere useless.\n * Order matters and is not alphabetical: DRM and region both also emit phrases\n * the stale-extractor branch would match, so the specific cases are asked first.\n */\nfunction reportYtDlpFailure(err: YtDlpError): never {\n  const detail = `${err.stderrTail} ${err.message}`;\n\n  // Our own egress failing is not the site's fault and not the link's. Saying\n  // otherwise sends whoever reads this to check a video that was never the\n  // problem, while the real cause — a rotated proxy credential — stays hidden.\n  if (isProxyFailure(ytDlpBlockSignal(detail))) {\n    fail(\n      \"Couldn't download that video: our connection to the internet was refused.\",\n      \"This is Baker's egress proxy, not the link — its credentials look wrong or expired. The link is probably fine. Report it; retrying won't help until the proxy is fixed.\",\n    );\n  }\n  if (isDrmProtected(detail)) {\n    fail(\n      \"That video is copy-protected, so it can't be added to the library.\",\n      \"The publisher encrypted this one against downloading. Nothing will change that — not retrying, not a different region. Ask whoever owns the video for the original file and add it with `baker videos upload <file>`.\",\n    );\n  }\n  if (isVimeoAuthFailure(detail)) {\n    fail(\n      \"Vimeo wouldn't hand over that video — Baker isn't signed in to Vimeo.\",\n      \"Vimeo now refuses anonymous downloads entirely, so this needs a signed-in session and the one Baker holds has either expired or was never set. Nothing is wrong with the link. Report it so the Vimeo cookie can be refreshed; meanwhile download the file and use `baker videos upload <file>`.\",\n    );\n  }\n  if (isRegionBlocked(detail)) {\n    fail(\n      `That video isn't available in the region we're fetching from. ${err.stderrTail || err.message}`,\n      \"Re-run with `--country <two-letter code>` for a country where the video plays — e.g. `--country US`. Pick the one the video belongs to (the uploader's country is the usual answer); each attempt costs a paid connection, so choose rather than work through the list.\",\n    );\n  }\n  fail(\n    `Couldn't download that video. ${err.stderrTail || err.message}`,\n    isToolingOrBlockFailure(detail)\n      ? \"The site wouldn't hand over the video — usually the downloader being out of date against a site that changed, or the request being blocked. Retrying won't help, and the link is probably fine. Report it so the tool can be updated; meanwhile download the file and use `baker videos upload <file>`.\"\n      : \"Check the link is public and playable. Private or age-restricted videos can't be downloaded — download the file yourself and use `baker videos upload <file>`.\",\n  );\n}\n\n/** Emit an ingest failure envelope and stop. */\nfunction fail(message: string, fix: string, code = \"INGEST_FAILED\"): never {\n  writeJson({ ok: false, error: { code, message, fix } });\n  process.exit(1);\n}\n\nfunction reportIngestFailure(err: unknown): never {\n  if (err instanceof ApiError) {\n    writeJson({ ok: false, error: { code: err.code, message: err.message } });\n    process.exit(1);\n  }\n  if (err instanceof YtDlpError) reportYtDlpFailure(err);\n\n  // Say what actually went wrong. \"Unexpected error\" was worse than unhelpful:\n  // a download that outran its leash throws a plain `Error`, lands here, and had\n  // its only diagnostic thrown away — so a predictable timeout on a long video\n  // was indistinguishable from a genuine crash.\n  const detail = err instanceof Error ? err.message : String(err);\n  if (detail.includes(\"timed out after\")) {\n    fail(\n      \"That video took too long to download and was stopped part-way.\",\n      \"Long or slow-serving videos can outrun the download window. Try a shorter clip, or download this one yourself and use `baker videos upload <file>`.\",\n      \"INTERNAL_ERROR\",\n    );\n  }\n  fail(\n    `Couldn't add that video. ${detail}`,\n    \"This is a fault on Baker's side, not a problem with the link. Report it.\",\n    \"INTERNAL_ERROR\",\n  );\n}\n\ntype IngestArgs = {\n  url: string;\n  source: string;\n  externalId?: string;\n  externalUrl?: string;\n  descriptionContext?: string;\n};\n\n/**\n * A dedupe key that identifies this exact video and nothing else.\n *\n * yt-dlp's per-platform extractors return a real provider id, which is what we\n * want: the same YouTube clip pasted three ways dedupes to one row. Its\n * *generic* extractor does not — it returns the URL's basename, so two unrelated\n * files both named `demo.mp4` would produce `url:demo` and the second ingest\n * would \"succeed\" by handing back the first one's clip. A wrong hit is worse\n * than a missed one here: a duplicate costs a transcode, while a collision\n * silently returns the wrong video under a successful-looking response.\n *\n * So the generic case is keyed on the canonical URL, which is unique by\n * construction and still dedupes re-pastes of the same link exactly as intended.\n */\nfunction dedupeKey(args: IngestArgs, info: YtDlpInfo): string | undefined {\n  const id = typeof info.id === \"string\" ? info.id : undefined;\n  if (!id) return undefined;\n  if (info.extractor === \"generic\") return `${args.source}:${canonicalUrl(info) ?? args.url}`;\n  return `${args.source}:${id}`;\n}\n\nfunction ingestUrl(args: IngestArgs): Promise<VideosIngestResponse> {\n  const body: VideosIngestRequest = {\n    url: args.url,\n    source: args.source as VideosIngestRequest[\"source\"],\n  };\n  if (args.externalId) body.externalId = args.externalId;\n  if (args.externalUrl) body.externalUrl = args.externalUrl;\n  if (args.descriptionContext) body.descriptionContext = args.descriptionContext;\n  return apiPost<VideosIngestResponse>(\"/api/videos/ingest\", body);\n}\n\n/**\n * Download the media with yt-dlp, park it in R2, then ingest that URL.\n *\n * The extra hop is what makes a page URL work at all: Mux can only pull a media\n * file, and a watch page is not one. It is also the only route for a CDN that\n * serves us but refuses Mux — YouTube's file URLs, for instance, are bound to\n * the IP that requested them, so handing one to Mux would 403.\n */\nasync function downloadThenIngest(\n  args: IngestArgs,\n  country?: string,\n): Promise<VideosIngestResponse & { egress: string; country?: string; reducedQuality?: true }> {\n  const vimeoCookie = captureVimeoCookie();\n  // The work dir is created before the probe, not after, because the probe needs\n  // somewhere to put the cookie jar — Vimeo refuses metadata anonymously too.\n  const workDir = await mkdtemp(path.join(tmpdir(), \"videos-ingest-\"));\n\n  try {\n    // Metadata first, because both of the decisions it settles are decisions we\n    // used to make only after paying for the download.\n    const probe = await probeYtDlp({ url: args.url, country, vimeoCookie, cookieDir: workDir });\n\n    if (isAudioOnly(probe.info)) {\n      throw new ApiError(\n        \"VALIDATION_ERROR\",\n        \"That link is audio, not video, so it can't go in the video library. Music and podcast links have no picture to store.\",\n      );\n    }\n\n    const tooLong = refuseByDuration(durationSeconds(probe.info), MAX_VIDEO_INGEST_SECONDS);\n    if (tooLong) {\n      throw new ApiError(\"VALIDATION_ERROR\", tooLong);\n    }\n\n    // Prefer yt-dlp's own id: re-pasting the same link then dedupes instead of\n    // paying Mux to transcode and transcribe the same video twice. Read from the\n    // probe rather than from the download's info.json only because the probe has\n    // already run — the dedupe itself still happens at the route, after the file\n    // has been fetched. Skipping the download on a known id needs a lookup the\n    // API does not expose yet; `ingestFromUrlInternal` short-circuits on\n    // `externalId` before calling Mux, so the hook for it exists.\n    const externalId = args.externalId ?? dedupeKey(args, probe.info);\n\n    const { filePath, tier, reducedQuality } = await runYtDlp({\n      url: args.url,\n      audioOnly: false,\n      workDir,\n      // Deliberately uncapped: take the best the site will release and let Mux\n      // decide what to serve. The 1080p ceiling this replaces was reasoning\n      // about the wrong cost — it saved download bytes by throwing away source\n      // pixels *before* the one system that can make renditions from them ever\n      // saw them, so a 4K master became a 1080p master permanently, for\n      // everything the library is ever asked to do with that clip afterwards.\n      // Downscaling is Mux's job and it is cheap; re-acquiring a master is not.\n      country,\n      vimeoCookie,\n      // Budgeted from the probed length, so the duration we accept and the time\n      // we allow to fetch it cannot drift apart.\n      timeoutMs: downloadTimeoutMs(durationSeconds(probe.info)),\n    });\n\n    const stats = await stat(filePath);\n    if (stats.size > MAX_VIDEO_INGEST_BYTES) {\n      throw new ApiError(\n        \"VALIDATION_ERROR\",\n        `That video is ${(stats.size / 1024 ** 3).toFixed(1)} GB, over the ${Math.round(MAX_VIDEO_INGEST_BYTES / 1024 ** 3)} GB limit for this route.`,\n      );\n    }\n\n    const publicUrl = await uploadToAssetStore(filePath, stats.size);\n\n    // `url` becomes the stored copy, so the original has to survive as\n    // `externalUrl` — otherwise a direct link that fell back to this route\n    // leaves the library with no record of where the clip came from.\n    // `egress` names the rung that produced the bytes. A paid exit costing real\n    // money must never be spent invisibly — without this the only difference\n    // between a free download and a residential one is the wall clock.\n    return {\n      ...(await ingestUrl({\n        ...args,\n        url: publicUrl,\n        externalId,\n        externalUrl: args.externalUrl ?? canonicalUrl(probe.info) ?? args.url,\n      })),\n      egress: tier,\n      // Named in the result for the same reason `egress` is: a geo-targeted exit\n      // is a deliberate, billable choice and must not be invisible afterwards.\n      ...(country ? { country } : {}),\n      // Third member of the same family. The site refused the good formats and\n      // the download quietly took the one it would release, which is the right\n      // call — but a clip that is 360p because of that must say so here, or the\n      // only way to find out is to watch it.\n      ...(reducedQuality ? { reducedQuality: true } : {}),\n    };\n  } finally {\n    await rm(workDir, { recursive: true, force: true }).catch(() => {\n      // best-effort cleanup — the sandbox is disposable\n    });\n  }\n}\n\n/**\n * Park a downloaded file in R2 via the canvas asset presign route and return the\n * public URL.\n *\n * Streamed from disk in both passes — hashing and uploading — so a long video\n * costs one buffer rather than twice its own length in RAM. It reads the file\n * twice because the presign needs the sha before the PUT can start, which is a\n * cheap trade against holding gigabytes in memory to avoid the second read.\n */\nasync function uploadToAssetStore(filePath: string, sizeBytes: number): Promise<string> {\n  const sha256 = await hashFile(filePath);\n  const { putUrl, publicUrl } = await apiPost<{ putUrl: string; publicUrl: string }>(\"/api/canvas/assets/presign\", {\n    sha256,\n    mime: \"video/mp4\",\n    purpose: \"source\",\n  });\n\n  const putRes = await putFileStreamed({ putUrl, filePath, contentType: \"video/mp4\", sizeBytes });\n  if (!putRes.ok) {\n    throw new ApiError(\"INTERNAL_ERROR\", `Storing the downloaded video failed: HTTP ${putRes.status}`);\n  }\n  return publicUrl;\n}\n","import { createHash } from \"node:crypto\";\nimport { createReadStream } from \"node:fs\";\nimport { Readable } from \"node:stream\";\nimport { pipeline } from \"node:stream/promises\";\n\n/**\n * Move a file to object storage without ever holding it in memory.\n *\n * The reason this exists rather than `readFile` + `fetch`: a video is the one\n * asset whose size is set by someone else. Reading it into a Buffer costs its\n * full length in RAM, and handing that Buffer to `new Uint8Array(...)` copies it\n * again — measured, not assumed: `new Uint8Array(buf)` does not alias, so peak\n * usage was twice the file. On an 8 GB Runtime that puts the real ceiling near\n * 3-4 GB of *video*, well under the size a 4K master or a long recording\n * reaches, and the failure mode is an OOM kill with no error to report.\n *\n * Streaming makes peak memory a fixed chunk regardless of length, which is what\n * lets the size limit be a policy decision instead of a memory one.\n */\n\n/** sha256 of a file's contents, read in chunks. */\nexport async function hashFile(filePath: string): Promise<string> {\n  const hash = createHash(\"sha256\");\n  await pipeline(createReadStream(filePath), hash);\n  return hash.digest(\"hex\");\n}\n\n/**\n * PUT a file to a presigned URL, streaming from disk.\n *\n * `content-length` is mandatory and comes from the caller's `stat`: a stream\n * body would otherwise be sent chunked, which S3-compatible presigned PUTs\n * reject. `duplex: \"half\"` is required by undici whenever the body is a stream.\n */\nexport async function putFileStreamed(args: {\n  putUrl: string;\n  filePath: string;\n  contentType: string;\n  sizeBytes: number;\n}): Promise<Response> {\n  // `toWeb` rather than handing `fetch` the Node stream directly: undici accepts\n  // both, but only the web stream is a `BodyInit`, so this stays type-safe\n  // instead of needing a cast that would hide a real mistake later.\n  const body = Readable.toWeb(createReadStream(args.filePath)) as ReadableStream<Uint8Array>;\n\n  return await fetch(args.putUrl, {\n    method: \"PUT\",\n    body,\n    headers: {\n      \"Content-Type\": args.contentType,\n      \"Content-Length\": String(args.sizeBytes),\n    },\n    duplex: \"half\",\n  } as RequestInit & { duplex: \"half\" });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,SAAS,IAAI,YAAY;AAClC,SAAS,cAAc;AACvB,OAAO,UAAU;AAGjB,SAAS,qBAAqB;;;ACL9B,SAAS,kBAAkB;AAC3B,SAAS,wBAAwB;AACjC,SAAS,gBAAgB;AACzB,SAAS,gBAAgB;AAkBzB,eAAsB,SAAS,UAAmC;AAChE,QAAM,OAAO,WAAW,QAAQ;AAChC,QAAM,SAAS,iBAAiB,QAAQ,GAAG,IAAI;AAC/C,SAAO,KAAK,OAAO,KAAK;AAC1B;AASA,eAAsB,gBAAgB,MAKhB;AAIpB,QAAM,OAAO,SAAS,MAAM,iBAAiB,KAAK,QAAQ,CAAC;AAE3D,SAAO,MAAM,MAAM,KAAK,QAAQ;AAAA,IAC9B,QAAQ;AAAA,IACR;AAAA,IACA,SAAS;AAAA,MACP,gBAAgB,KAAK;AAAA,MACrB,kBAAkB,OAAO,KAAK,SAAS;AAAA,IACzC;AAAA,IACA,QAAQ;AAAA,EACV,CAAqC;AACvC;;;ADlBA,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM;AAAA,IACJ,KAAK,EAAE,MAAM,UAAU,aAAa,gDAAgD,UAAU,KAAK;AAAA,IACnG,QAAQ,EAAE,MAAM,UAAU,aAAa,6BAA6B,UAAU,MAAM;AAAA,IACpF,eAAe,EAAE,MAAM,UAAU,aAAa,kCAAkC,UAAU,MAAM;AAAA,IAChG,gBAAgB,EAAE,MAAM,UAAU,aAAa,sBAAsB,UAAU,MAAM;AAAA,IACrF,UAAU;AAAA,MACR,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,MACV,SAAS;AAAA,IACX;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,aACE;AAAA,MACF,UAAU;AAAA,IACZ;AAAA,IACA,WAAW,EAAE,MAAM,WAAW,aAAa,2CAA2C,UAAU,MAAM;AAAA,EACxG;AACF,CAAC;AAEM,IAAM,gBAAgB,cAAc;AAAA,EACzC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aACE;AAAA,EACJ;AAAA,EACA,MAAM;AAAA,IACJ,KAAK,EAAE,MAAM,cAAc,aAAa,aAAa,UAAU,MAAM;AAAA,IACrE,QAAQ,EAAE,MAAM,UAAU,aAAa,6BAA6B,UAAU,MAAM;AAAA,IACpF,eAAe,EAAE,MAAM,UAAU,aAAa,qBAAqB,UAAU,MAAM;AAAA,IACnF,gBAAgB,EAAE,MAAM,UAAU,aAAa,sBAAsB,UAAU,MAAM;AAAA,IACrF,UAAU,EAAE,MAAM,WAAW,aAAa,2BAA2B,UAAU,OAAO,SAAS,MAAM;AAAA,IACrG,SAAS,EAAE,MAAM,UAAU,aAAa,6CAA6C,UAAU,MAAM;AAAA,IACrG,SAAS;AAAA,MACP,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,WAAW,EAAE,MAAM,WAAW,aAAa,6BAA6B,UAAU,OAAO,SAAS,MAAM;AAAA,EAC1G;AAAA,EACA,KAAK,CAAC,EAAE,KAAK,MACX,eAAe;AAAA,IACb,KAAK,KAAK;AAAA,IACV,QAAQ,KAAK;AAAA,IACb,YAAY,KAAK,aAAa;AAAA,IAC9B,aAAa,KAAK,cAAc;AAAA,IAChC,eAAe,KAAK,aAAa;AAAA,IACjC,SAAS,KAAK;AAAA,IACd,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK,SAAS,MAAM;AAAA,EAC9B,CAAC;AACL,CAAC;AAkBD,eAAsB,eAAe,MAAyC;AAC5E,QAAM,MAAM,KAAK;AACjB,MAAI,CAAC,KAAK;AACR,cAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,oBAAoB,SAAS,kBAAkB,EAAE,CAAC;AACxF,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,SAAS,CAAC,KAAK,iBAAiB,iBAAiB,GAAG;AAC1D,QAAM,UAAU,KAAK,SAAS,KAAK,KAAK;AACxC,QAAM,OAAmB;AAAA,IACvB;AAAA,IACA,QAAQ,oBAAoB,KAAK,QAAQ,GAAG;AAAA,IAC5C,YAAY,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOjB,aAAa,KAAK;AAAA,IAClB,oBAAoB,KAAK,SAAS,KAAK,KAAK;AAAA,EAC9C;AAKA,QAAM,aAAa,0BAA0B,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC;AACvE,MAAI,CAAC,WAAW,SAAS;AACvB,UAAM,UAAU,WAAW,MAAM,OAAO,CAAC;AACzC,cAAU;AAAA,MACR,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS,UAAU,GAAG,QAAQ,KAAK,KAAK,GAAG,KAAK,SAAS,KAAK,QAAQ,OAAO,KAAK;AAAA,MACpF;AAAA,IACF,CAAC;AACD,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,KAAK,QAAQ;AACf,iBAAa,MAAM,QAAQ,OAAO;AAClC;AAAA,EACF;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,cAAc,MAAM,QAAQ,OAAO;AACtD,cAAU,EAAE,IAAI,MAAM,MAAM,OAAO,YAAY,IAAI,EAAE,CAAC;AAAA,EACxD,SAAS,KAAK;AACZ,wBAAoB,GAAG;AAAA,EACzB;AACF;AA6BO,SAAS,YAAY,MAA0C;AACpE,MAAI,KAAK,mBAAmB,KAAM,QAAO;AACzC,SAAO;AAAA,IACL;AAAA,EACF;AACF;AAEA,SAAS,aAAa,MAAkB,QAAiB,SAAwB;AAC/E,YAAU;AAAA,IACR,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,QAAQ;AAAA,MACN,KAAK,KAAK;AAAA,MACV,QAAQ,KAAK;AAAA;AAAA;AAAA;AAAA,MAIb,YAAY,KAAK,eAAe,SAAS,gBAAgB,KAAK,QAAQ,KAAK,GAAG,IAAI;AAAA;AAAA;AAAA,MAGlF,aAAa,KAAK,eAAe;AAAA,MACjC;AAAA,MACA,SAAS,WAAW;AAAA,MACpB,oBAAoB,KAAK,sBAAsB;AAAA,IACjD;AAAA,EACF,CAAC;AACH;AAOA,eAAe,cAAc,MAAkB,QAAiB,SAAyC;AACvG,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,GAAI,MAAM,mBAAmB,MAAM,OAAO,GAAI,KAAK,WAAW;AAAA,EACzE;AACA,MAAI;AAIF,UAAM,aAAa,KAAK,cAAc,gBAAgB,KAAK,QAAQ,KAAK,GAAG;AAC3E,WAAO,EAAE,GAAI,MAAM,UAAU,EAAE,GAAG,MAAM,WAAW,CAAC,GAAI,KAAK,SAAS;AAAA,EACxE,SAAS,KAAK;AACZ,QAAI,EAAE,eAAe,aAAa,CAAC,wBAAwB,IAAI,IAAI,EAAG,OAAM;AAC5E,WAAO,EAAE,GAAI,MAAM,mBAAmB,MAAM,OAAO,GAAI,KAAK,YAAY,cAAc,IAAI,QAAQ;AAAA,EACpG;AACF;AAWA,SAAS,mBAAmB,KAAwB;AAClD,QAAM,SAAS,GAAG,IAAI,UAAU,IAAI,IAAI,OAAO;AAK/C,MAAI,eAAe,iBAAiB,MAAM,CAAC,GAAG;AAC5C;AAAA,MACE;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,eAAe,MAAM,GAAG;AAC1B;AAAA,MACE;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,mBAAmB,MAAM,GAAG;AAC9B;AAAA,MACE;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,gBAAgB,MAAM,GAAG;AAC3B;AAAA,MACE,iEAAiE,IAAI,cAAc,IAAI,OAAO;AAAA,MAC9F;AAAA,IACF;AAAA,EACF;AACA;AAAA,IACE,iCAAiC,IAAI,cAAc,IAAI,OAAO;AAAA,IAC9D,wBAAwB,MAAM,IAC1B,iTACA;AAAA,EACN;AACF;AAGA,SAAS,KAAK,SAAiB,KAAa,OAAO,iBAAwB;AACzE,YAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,SAAS,IAAI,EAAE,CAAC;AACtD,UAAQ,KAAK,CAAC;AAChB;AAEA,SAAS,oBAAoB,KAAqB;AAChD,MAAI,eAAe,UAAU;AAC3B,cAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;AACxE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,eAAe,WAAY,oBAAmB,GAAG;AAMrD,QAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC9D,MAAI,OAAO,SAAS,iBAAiB,GAAG;AACtC;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA;AAAA,IACE,4BAA4B,MAAM;AAAA,IAClC;AAAA,IACA;AAAA,EACF;AACF;AAwBA,SAAS,UAAU,MAAkB,MAAqC;AACxE,QAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AACnD,MAAI,CAAC,GAAI,QAAO;AAChB,MAAI,KAAK,cAAc,UAAW,QAAO,GAAG,KAAK,MAAM,IAAI,aAAa,IAAI,KAAK,KAAK,GAAG;AACzF,SAAO,GAAG,KAAK,MAAM,IAAI,EAAE;AAC7B;AAEA,SAAS,UAAU,MAAiD;AAClE,QAAM,OAA4B;AAAA,IAChC,KAAK,KAAK;AAAA,IACV,QAAQ,KAAK;AAAA,EACf;AACA,MAAI,KAAK,WAAY,MAAK,aAAa,KAAK;AAC5C,MAAI,KAAK,YAAa,MAAK,cAAc,KAAK;AAC9C,MAAI,KAAK,mBAAoB,MAAK,qBAAqB,KAAK;AAC5D,SAAO,QAA8B,sBAAsB,IAAI;AACjE;AAUA,eAAe,mBACb,MACA,SAC6F;AAC7F,QAAM,cAAc,mBAAmB;AAGvC,QAAM,UAAU,MAAM,QAAQ,KAAK,KAAK,OAAO,GAAG,gBAAgB,CAAC;AAEnE,MAAI;AAGF,UAAM,QAAQ,MAAM,WAAW,EAAE,KAAK,KAAK,KAAK,SAAS,aAAa,WAAW,QAAQ,CAAC;AAE1F,QAAI,YAAY,MAAM,IAAI,GAAG;AAC3B,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAU,iBAAiB,gBAAgB,MAAM,IAAI,GAAG,wBAAwB;AACtF,QAAI,SAAS;AACX,YAAM,IAAI,SAAS,oBAAoB,OAAO;AAAA,IAChD;AASA,UAAM,aAAa,KAAK,cAAc,UAAU,MAAM,MAAM,IAAI;AAEhE,UAAM,EAAE,UAAU,MAAM,eAAe,IAAI,MAAM,SAAS;AAAA,MACxD,KAAK,KAAK;AAAA,MACV,WAAW;AAAA,MACX;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA;AAAA,MACA;AAAA;AAAA;AAAA,MAGA,WAAW,kBAAkB,gBAAgB,MAAM,IAAI,CAAC;AAAA,IAC1D,CAAC;AAED,UAAM,QAAQ,MAAM,KAAK,QAAQ;AACjC,QAAI,MAAM,OAAO,wBAAwB;AACvC,YAAM,IAAI;AAAA,QACR;AAAA,QACA,kBAAkB,MAAM,OAAO,QAAQ,GAAG,QAAQ,CAAC,CAAC,iBAAiB,KAAK,MAAM,yBAAyB,QAAQ,CAAC,CAAC;AAAA,MACrH;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,mBAAmB,UAAU,MAAM,IAAI;AAQ/D,WAAO;AAAA,MACL,GAAI,MAAM,UAAU;AAAA,QAClB,GAAG;AAAA,QACH,KAAK;AAAA,QACL;AAAA,QACA,aAAa,KAAK,eAAe,aAAa,MAAM,IAAI,KAAK,KAAK;AAAA,MACpE,CAAC;AAAA,MACD,QAAQ;AAAA;AAAA;AAAA,MAGR,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,MAK7B,GAAI,iBAAiB,EAAE,gBAAgB,KAAK,IAAI,CAAC;AAAA,IACnD;AAAA,EACF,UAAE;AACA,UAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM;AAAA,IAEhE,CAAC;AAAA,EACH;AACF;AAWA,eAAe,mBAAmB,UAAkB,WAAoC;AACtF,QAAM,SAAS,MAAM,SAAS,QAAQ;AACtC,QAAM,EAAE,QAAQ,UAAU,IAAI,MAAM,QAA+C,8BAA8B;AAAA,IAC/G;AAAA,IACA,MAAM;AAAA,IACN,SAAS;AAAA,EACX,CAAC;AAED,QAAM,SAAS,MAAM,gBAAgB,EAAE,QAAQ,UAAU,aAAa,aAAa,UAAU,CAAC;AAC9F,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,SAAS,kBAAkB,6CAA6C,OAAO,MAAM,EAAE;AAAA,EACnG;AACA,SAAO;AACT;","names":[]}

package/dist/chunk-R44B522K.js

@@ -1,139 +0,0 @@
-import {
-  brandVerificationHints
-} from "./chunk-IVIJJXXT.js";
-import {
-  OUTPUT_ARGS,
-  writeProviderHits
-} from "./chunk-QJ5TU5J6.js";
-import {
-  emptyResultHints
-} from "./chunk-Q6ULQMWG.js";
-import {
-  AUTO_INGEST_MAX,
-  parseAutoIngest
-} from "./chunk-KKJ4KJCW.js";
-import {
-  ApiError,
-  apiPost
-} from "./chunk-B4UVJCJ4.js";
-import {
-  registerSchema,
-  writeJson
-} from "./chunk-FSGJSREN.js";
-
-// src/commands/images/logo.ts
-import { defineCommand } from "citty";
-registerSchema({
-  command: "images.logo",
-  description: "Brand logo lookup via Brandfetch. Auto-ingests by default. Returns `brandMatch` \u2014 Brandfetch's own verdict on whose brand the domain is (confirmed | mismatch | unverified). Branch on it: `mismatch` means the mark is another company's, so do not place it. `confirmed` verifies the record, not the artwork \u2014 read the ingested row back to check the mark itself.",
-  args: {
-    domain: { type: "string", description: "Brand domain (e.g. stripe.com)", required: true },
-    variant: { type: "string", description: "icon | logo | symbol", required: false },
-    "auto-ingest": {
-      type: "number",
-      description: `Ingest top N hits (0-${AUTO_INGEST_MAX.logo}). Defaults to 1 (the first variant). Brandfetch resolves at most ${AUTO_INGEST_MAX.logo} variants, so ${AUTO_INGEST_MAX.logo} ingests every one. Keep it at 1+ \u2014 the ingested row is the only way to check the mark is the brand you asked for.`,
-      required: false
-    },
-    "no-auto-ingest": {
-      type: "boolean",
-      description: "Skip auto-ingest (equivalent to --auto-ingest 0). Leaves the returned mark unverifiable.",
-      required: false,
-      default: false
-    },
-    context: {
-      type: "string",
-      description: "Free-text hint applied to ingested logo variants (e.g. 'Stripe \u2014 payments integration partner', 'Acme competitor brand mark')",
-      required: false
-    },
-    output: { type: "string", description: "Output format: json|files|md", required: false, default: "json" },
-    fields: { type: "string", description: "Comma-separated field names to include", required: false },
-    full: { type: "boolean", description: "Include full metadata", required: false, default: false }
-  }
-});
-var logoCommand = defineCommand({
-  meta: {
-    name: "logo",
-    description: "Brand logo via Brandfetch. Returns up to 5 variants (icon, light/dark logo, light/dark symbol) plus `brandMatch`. Auto-ingests the first variant.\n\nStart here: check `brandMatch.verdict`.\n  mismatch   \u2192 the mark belongs to `brandMatch.name`, a different company. Do not place it.\n  unverified \u2192 nothing confirmed whose logo this is. Treat as unchecked.\n  confirmed  \u2192 Brandfetch has this brand's record. That verifies the record, NOT the artwork \u2014 a confirmed domain has served another company's logo before.\n\n\u26A0 Whatever the verdict, read the ingested row back with `baker images get <imageId>` and check `textInImage`/`subject` before placing it. That is the only check that looks at the mark.\n\nExample: baker images logo stripe.com --variant logo"
-  },
-  args: {
-    domain: { type: "positional", description: "Brand domain", required: false },
-    variant: { type: "string", description: "icon|logo|symbol", required: false },
-    "auto-ingest": {
-      type: "string",
-      description: `Ingest top N (0-${AUTO_INGEST_MAX.logo}, default 1)`,
-      required: false
-    },
-    "no-auto-ingest": { type: "boolean", description: "Skip auto-ingest", required: false },
-    context: { type: "string", description: "Description context hint applied to ingested logos", required: false },
-    ...OUTPUT_ARGS
-  },
-  run: async ({ args }) => {
-    try {
-      const domain = args.domain;
-      if (!domain) {
-        writeJson({ ok: false, error: { code: "VALIDATION_ERROR", message: "Domain is required" } });
-        process.exit(1);
-      }
-      const body = { domain };
-      if (args.variant) body.variant = args.variant;
-      if (args["auto-ingest"] !== void 0) {
-        const parsed = parseAutoIngest(args["auto-ingest"], AUTO_INGEST_MAX.logo);
-        if (!parsed.ok) {
-          writeJson({
-            ok: false,
-            error: {
-              code: "VALIDATION_ERROR",
-              message: parsed.message,
-              fix: {
-                action: "retry_with_changes",
-                explanation: `Brandfetch resolves at most ${AUTO_INGEST_MAX.logo} variants for a domain, so --auto-ingest ${AUTO_INGEST_MAX.logo} already ingests every one. Re-run with a value in 0-${AUTO_INGEST_MAX.logo}.`
-              }
-            }
-          });
-          process.exit(1);
-        }
-        body.autoIngest = parsed.value;
-      } else if (args["no-auto-ingest"]) {
-        body.autoIngest = 0;
-      }
-      if (args.context) body.descriptionContext = args.context;
-      const data = await apiPost("/api/images/logo", body);
-      const hints = [
-        // `brandMatch` is Brandfetch's own answer to whose brand this domain is,
-        // so the warning can now be graded instead of fired blind: loud on a
-        // mismatch, honest about what a confirmation does and does not cover.
-        ...brandVerificationHints({
-          domain,
-          ingested: data.ingested,
-          hitCount: data.hits.length,
-          brandMatch: data.brandMatch
-        }),
-        ...emptyResultHints({ provider: "logo", hitCount: data.hits.length, activeFilters: [], subject: domain })
-      ];
-      writeProviderHits(data, data.hits, args, hints);
-    } catch (err) {
-      if (err instanceof ApiError) {
-        writeJson({ ok: false, error: { code: err.code, message: err.message } });
-        process.exit(1);
-      }
-      writeJson({ ok: false, error: { code: "INTERNAL_ERROR", message: "Unexpected error" } });
-      process.exit(1);
-    }
-  }
-});
-async function fetchBrandLogo(domain) {
-  try {
-    const body = { domain, variant: "logo" };
-    const data = await apiPost("/api/images/logo", body);
-    if (data?.brandMatch?.verdict === "mismatch") return null;
-    return data?.ingested?.[0]?.imageUrl ?? data?.hits?.find((h) => h.imageUrl)?.imageUrl ?? null;
-  } catch {
-    return null;
-  }
-}
-
-export {
-  logoCommand,
-  fetchBrandLogo
-};
-//# sourceMappingURL=chunk-R44B522K.js.map