@koda-sl/baker-cli 0.531.0 → 0.533.0

package/dist/chunk-ES3PWGS3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/videos/ingest.ts","../src/lib/streamUpload.ts"],"sourcesContent":["import { mkdtemp, rm, stat } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport path from \"node:path\";\nimport { type VideosIngestRequest, type VideosIngestResponse, videosIngestRequestSchema } from \"@baker/api\";\nimport { isProxyFailure } from \"@baker/proxy\";\nimport { defineCommand } from \"citty\";\nimport { ApiError, apiPost } from \"../../client.ts\";\nimport { captureVimeoCookie } from \"../../env.ts\";\nimport { maskEnvelope } from \"../../field-mask.ts\";\nimport {\n  eachTarget,\n  failWith,\n  positionalTargets,\n  type TargetError,\n  type TargetOutcome,\n} from \"../../lib/batchTargets.ts\";\nimport { hashFile, putFileStreamed } from \"../../lib/streamUpload.ts\";\nimport { isVimeoAuthFailure } from \"../../lib/vimeoCookie.ts\";\nimport {\n  canonicalUrl,\n  durationSeconds,\n  isAudioOnly,\n  probeYtDlp,\n  runYtDlp,\n  YtDlpError,\n  type YtDlpInfo,\n} from \"../../lib/ytDlp.ts\";\nimport { ytDlpBlockSignal } from \"../../lib/ytDlpSignal.ts\";\nimport { writeJson } from \"../../output.ts\";\nimport { registerSchema } from \"../../schemas.ts\";\nimport {\n  directDedupeKey,\n  downloadTimeoutMs,\n  isDirectMediaUrl,\n  isDrmProtected,\n  isRegionBlocked,\n  isToolingOrBlockFailure,\n  MAX_VIDEO_INGEST_BYTES,\n  MAX_VIDEO_INGEST_SECONDS,\n  refuseByDuration,\n  resolveIngestSource,\n  worthDownloadingInstead,\n} from \"./ingestUrl.ts\";\n\nregisterSchema({\n  command: \"videos.ingest\",\n  description:\n    \"Add videos to the library from URLs — direct files, or YouTube/TikTok/Vimeo pages. Several URLs run at once and return one row each.\",\n  args: {\n    url: {\n      type: \"string\",\n      description: \"Video URL (direct file or a watch/post page); pass several to add them at once\",\n      required: true,\n    },\n    source: { type: \"string\", description: \"Provenance: url | youtube\", required: false },\n    \"external-id\": { type: \"string\", description: \"Provider asset id (deduped on)\", required: false },\n    \"external-url\": { type: \"string\", description: \"Canonical page URL\", required: false },\n    download: {\n      type: \"boolean\",\n      description: \"Force the download path instead of letting Baker fetch the URL directly\",\n      required: false,\n      default: false,\n    },\n    country: {\n      type: \"string\",\n      description: \"Two-letter country to fetch from (e.g. US, DE, JP) — use when a video is blocked in your region\",\n      required: false,\n    },\n    context: {\n      type: \"string\",\n      description:\n        \"What you know that the video cannot show — the campaign, whether the person on camera is a real customer, what it is for. Highest-leverage flag here: it is what makes the clip findable later.\",\n      required: false,\n    },\n    \"dry-run\": { type: \"boolean\", description: \"Preview the operation without executing\", required: false },\n    fields: {\n      type: \"string\",\n      description: \"Comma-separated field names to keep on each added video; failed URLs are always listed whole\",\n      required: false,\n    },\n  },\n});\n\nexport const ingestCommand = defineCommand({\n  meta: {\n    name: \"ingest\",\n    description:\n      'Add videos to the library from URLs. A direct file URL is handed straight to Baker, which fetches it. A page URL (YouTube, TikTok, Vimeo, Instagram) is downloaded here first, then uploaded — and a direct URL that Baker cannot fetch falls back to that same path automatically. Several URLs are added at once, so a list takes about as long as its slowest clip: pass them all in one call rather than looping.\\n\\nExamples:\\n  baker videos ingest https://www.youtube.com/watch?v=abc123\\n  baker videos ingest https://youtu.be/a https://youtu.be/b https://cdn.example.com/c.mp4 --context \"Spring campaign testimonials\"',\n  },\n  args: {\n    url: { type: \"positional\", description: \"Video URL; pass several to add them at once\", required: false },\n    source: { type: \"string\", description: \"Provenance: url | youtube\", required: false },\n    \"external-id\": { type: \"string\", description: \"Provider asset id (one URL only)\", required: false },\n    \"external-url\": { type: \"string\", description: \"Canonical page URL (one URL only)\", required: false },\n    download: { type: \"boolean\", description: \"Force the download path\", required: false, default: false },\n    country: { type: \"string\", description: \"Two-letter country to fetch from, e.g. US\", required: false },\n    context: {\n      type: \"string\",\n      description: \"Context for the analysis — campaign, who is on camera, intended use (applies to every URL)\",\n      required: false,\n    },\n    \"dry-run\": { type: \"boolean\", description: \"Preview without executing\", required: false, default: false },\n    fields: { type: \"string\", description: \"Comma-separated field names to keep on each added video\", required: false },\n  },\n  run: ({ args }) =>\n    runVideoIngest({\n      urls: positionalTargets(args),\n      source: args.source as string | undefined,\n      externalId: args[\"external-id\"] as string | undefined,\n      externalUrl: args[\"external-url\"] as string | undefined,\n      forceDownload: args.download === true,\n      country: args.country as string | undefined,\n      context: args.context as string | undefined,\n      dryRun: args[\"dry-run\"] === true,\n      fields: typeof args.fields === \"string\" && args.fields.length > 0 ? args.fields.split(\",\") : undefined,\n    }),\n});\n\nexport type VideoIngestOptions = {\n  urls: string[];\n  source?: string;\n  externalId?: string;\n  externalUrl?: string;\n  forceDownload?: boolean;\n  country?: string;\n  /** What the adder knew that the frames cannot show. Feeds the analysis. */\n  context?: string;\n  dryRun?: boolean;\n  /** Keys kept on each added video. The failures are never narrowed: they say what to fix. */\n  fields?: string[];\n};\n\n/**\n * The ingest flow itself, callable from `videos ingest` and from the URL branch\n * of `videos upload` — one implementation, so the two verbs cannot drift.\n */\nexport async function runVideoIngest(opts: VideoIngestOptions): Promise<void> {\n  const { urls } = opts;\n  if (urls.length === 0) {\n    failWith({ code: \"VALIDATION_ERROR\", message: \"URL is required\" });\n  }\n  // One provider id or page names one video: given to several, the second\n  // ingest would dedupe onto the first and quietly hand back the wrong clip.\n  if (urls.length > 1 && (opts.externalId || opts.externalUrl)) {\n    failWith({\n      code: \"VALIDATION_ERROR\",\n      message: \"--external-id and --external-url name a single video, so they cannot be used with several URLs.\",\n    });\n  }\n\n  const country = opts.country?.trim() || undefined;\n  const plans = planIngests(opts);\n\n  if (opts.dryRun) {\n    const params = plans.map(({ args, direct }) => dryRunParams(args, direct, country));\n    writeJson({\n      ok: true,\n      dryRun: true,\n      operation: \"videos.ingest\",\n      params: params.length === 1 && params[0] ? params[0] : { items: params },\n    });\n    return;\n  }\n\n  const byUrl = new Map(plans.map((plan) => [plan.args.url, plan]));\n  const outcomes = await eachTarget(\n    urls,\n    (url) => {\n      const plan = byUrl.get(url) as (typeof plans)[number];\n      return ingestByRoute(plan.args, plan.direct, country);\n    },\n    ingestFailure,\n  );\n  writeIngestOutcomes(outcomes, opts.fields);\n}\n\ntype IngestPlan = { args: IngestArgs; direct: boolean };\n\n/** What each URL will be sent as, every one checked before any is fetched. */\nfunction planIngests(opts: VideoIngestOptions): IngestPlan[] {\n  const plans = opts.urls.map((url) => {\n    const args: IngestArgs = {\n      url,\n      source: resolveIngestSource(opts.source, url),\n      externalId: opts.externalId,\n      // Deliberately NOT pre-filled with the pasted URL. Doing so shadowed the\n      // canonical URL the probe resolves (`?? canonicalUrl(...)` below could never\n      // run), so the same video filed under a different `externalUrl` depending on\n      // whether the link was copied from a share sheet, a shorts page or the\n      // address bar. `downloadThenIngest` falls back to `args.url` when the probe\n      // resolves nothing, which is the value this used to hard-code.\n      externalUrl: opts.externalUrl,\n      descriptionContext: opts.context?.trim() || undefined,\n    };\n    return { args, direct: !opts.forceDownload && isDirectMediaUrl(url) };\n  });\n\n  // Checked here as well as at the route, because the download path ends by\n  // posting this same body: a bad `--source` caught only server-side would\n  // otherwise be discovered twice, the second time after downloading the video.\n  // Every URL is checked before any is fetched.\n  for (const { args } of plans) {\n    const validation = videosIngestRequestSchema.safeParse(args);\n    if (!validation.success) {\n      const problem = validation.error.issues[0];\n      const where = opts.urls.length > 1 ? `${args.url}: ` : \"\";\n      failWith({\n        code: \"VALIDATION_ERROR\",\n        message: problem\n          ? `${where}${problem.path.join(\".\") || \"request\"}: ${problem.message}`\n          : `${where}Invalid request`,\n      });\n    }\n  }\n  return plans;\n}\n\n/**\n * One URL keeps the envelope it always had. Several report one row per URL —\n * what was added, with its resolution where the download knew it, and what was\n * not, each with its own reason — so nothing has to be looked up afterwards.\n */\nfunction writeIngestOutcomes(outcomes: TargetOutcome<IngestReport>[], fields?: string[]): void {\n  const [only] = outcomes;\n  if (outcomes.length === 1 && only) {\n    if (!only.ok) failWith(only.error);\n    if (!fields) {\n      writeJson({ ok: true, data: only.data, hints: ingestHints(only.data) });\n      return;\n    }\n    const shown = narrowed(only.data, fields);\n    writeJson({ ok: true, data: shown.data, hints: [...(ingestHints(only.data) ?? []), ...shown.hints] });\n    return;\n  }\n\n  const ingested = outcomes.flatMap((o) => (o.ok ? [{ url: o.target, ...o.data }] : []));\n  const failed = outcomes.flatMap((o) => (o.ok ? [] : [{ url: o.target, error: o.error }]));\n  const hints = ingested.flatMap((row) => (ingestHints(row) ?? []).map((hint) => `${row.url}: ${hint}`));\n  if (ingested.length === 0) {\n    writeJson({\n      ok: false,\n      error: {\n        code: \"INGEST_FAILED\",\n        message: `None of the ${outcomes.length} videos could be added: ${failed\n          .map((f) => `${f.url} — ${f.error.message}`)\n          .join(\"; \")}`,\n      },\n      hints: failed.flatMap((f) => (f.error.fix ? [`${f.url}: ${f.error.fix}`] : [])),\n    });\n    process.exit(1);\n  }\n  if (failed.length > 0) {\n    hints.push(\n      `${failed.length} of ${outcomes.length} could not be added — each one's reason and fix is in failed[]. The rest are in the library; carry on with them.`,\n    );\n  }\n  // The two lists are narrowed apart: the CLI-wide mask reads a wrapper of\n  // two lists as one record and would drop both.\n  const shown = fields ? narrowed(ingested, fields) : { data: ingested, hints: [] };\n  hints.push(...shown.hints);\n  writeJson({ ok: true, data: { ingested: shown.data, failed }, ...(hints.length > 0 ? { hints } : {}) });\n}\n\n/** `data` cut to the fields, and the hint naming any field nothing carried. */\nfunction narrowed(data: unknown, fields: string[]): { data: unknown; hints: string[] } {\n  const masked = maskEnvelope({ ok: true, data }, fields);\n  const hints = Array.isArray(masked.hints) ? masked.hints.filter((hint) => typeof hint === \"string\") : [];\n  return { data: masked.data, hints };\n}\n\n/**\n * The successful ingest as the caller receives it.\n *\n * Named rather than left as a `Record<string, unknown>` so the fields that only\n * *sometimes* appear are still a checked contract. `reducedQuality` is the one\n * that needs it: nothing else reads it, `ingestHints` is the only thing that\n * acts on it, and an untyped bag would let either side be renamed with the\n * tests still green and the hint silently never firing again.\n */\nexport type IngestReport = VideosIngestResponse & {\n  via: \"direct\" | \"download\";\n  egress?: string;\n  country?: string;\n  reducedQuality?: true;\n  fallbackFrom?: string;\n  /** The downloaded file's size; absent on the direct route, where Baker fetches it. */\n  width?: number;\n  height?: number;\n};\n\n/**\n * What the caller has to be told about a download that already succeeded.\n *\n * The recovery itself is deliberately invisible — nobody asks for a retry, and\n * a video that arrives is a video that arrived. What must not be invisible is\n * the price the recovery paid, because it is the one thing looking at the\n * result cannot reveal: a 360p clip and a 1080p clip are the same successful\n * envelope. Written for whoever reads the JSON to repeat to a marketer, so it\n * says \"standard quality\", not which player answered.\n */\nexport function ingestHints(data: IngestReport): string[] | undefined {\n  if (data.reducedQuality !== true) return undefined;\n  return [\n    \"Added, but at standard quality (360p): the site refused to release the full-quality file and this was the best it would hand over. Tell the user — the clip is in the library and usable, it is just not high-resolution. If they need the crisp version, ask them for the original file and use `baker videos upload <file>`.\",\n  ];\n}\n\nfunction dryRunParams(args: IngestArgs, direct: boolean, country?: string): Record<string, unknown> {\n  return {\n    url: args.url,\n    source: args.source,\n    // Known up front on the direct route, because it is derived from the URL\n    // alone. The download route's key comes from the probe, which a dry run\n    // does not perform, so there it stays null rather than becoming a guess.\n    externalId: args.externalId ?? (direct ? directDedupeKey(args.source, args.url) : null),\n    // A page URL's canonical form is only known after the probe, which a dry\n    // run does not perform — so this is null rather than a guess.\n    externalUrl: args.externalUrl ?? null,\n    direct,\n    country: country ?? null,\n    descriptionContext: args.descriptionContext ?? null,\n  };\n}\n\n/**\n * A direct media URL is handed straight over: Baker asks Mux to pull it, so no\n * bytes cross this machine and there is no size ceiling to hit. Only when that\n * is refused do we pay to download and re-upload the file ourselves.\n */\nasync function ingestByRoute(args: IngestArgs, direct: boolean, country?: string): Promise<IngestReport> {\n  if (!direct) {\n    return { ...(await downloadThenIngest(args, country)), via: \"download\" };\n  }\n  try {\n    // Defaulted here rather than on `args`, so that the fallback below still\n    // derives its key from the probe: a URL that turns out to be a page carries\n    // a real provider id, which dedupes better than the link it was pasted as.\n    const externalId = args.externalId ?? directDedupeKey(args.source, args.url);\n    return { ...(await ingestUrl({ ...args, externalId })), via: \"direct\" };\n  } catch (err) {\n    if (!(err instanceof ApiError) || !worthDownloadingInstead(err.code)) throw err;\n    return { ...(await downloadThenIngest(args, country)), via: \"download\", fallbackFrom: err.message };\n  }\n}\n\n/**\n * Turn a yt-dlp failure into the one sentence that names its actual cause.\n *\n * Split out from `ingestFailure` because the list of distinguishable\n * causes kept growing — proxy, DRM, Vimeo login, region, stale extractor — and\n * each one exists because the generic message sent the reader somewhere useless.\n * Order matters and is not alphabetical: DRM and region both also emit phrases\n * the stale-extractor branch would match, so the specific cases are asked first.\n */\nfunction ytDlpFailure(err: YtDlpError): TargetError {\n  const detail = `${err.stderrTail} ${err.message}`;\n\n  // Our own egress failing is not the site's fault and not the link's. Saying\n  // otherwise sends whoever reads this to check a video that was never the\n  // problem, while the real cause — a rotated proxy credential — stays hidden.\n  if (isProxyFailure(ytDlpBlockSignal(detail))) {\n    return failure(\n      \"Couldn't download that video: our connection to the internet was refused.\",\n      \"This is Baker's egress proxy, not the link — its credentials look wrong or expired. The link is probably fine. Report it; retrying won't help until the proxy is fixed.\",\n    );\n  }\n  if (isDrmProtected(detail)) {\n    return failure(\n      \"That video is copy-protected, so it can't be added to the library.\",\n      \"The publisher encrypted this one against downloading. Nothing will change that — not retrying, not a different region. Ask whoever owns the video for the original file and add it with `baker videos upload <file>`.\",\n    );\n  }\n  if (isVimeoAuthFailure(detail)) {\n    return failure(\n      \"Vimeo wouldn't hand over that video — Baker isn't signed in to Vimeo.\",\n      \"Vimeo now refuses anonymous downloads entirely, so this needs a signed-in session and the one Baker holds has either expired or was never set. Nothing is wrong with the link. Report it so the Vimeo cookie can be refreshed; meanwhile download the file and use `baker videos upload <file>`.\",\n    );\n  }\n  if (isRegionBlocked(detail)) {\n    return failure(\n      `That video isn't available in the region we're fetching from. ${err.stderrTail || err.message}`,\n      \"Re-run with `--country <two-letter code>` for a country where the video plays — e.g. `--country US`. Pick the one the video belongs to (the uploader's country is the usual answer); each attempt costs a paid connection, so choose rather than work through the list.\",\n    );\n  }\n  return failure(\n    `Couldn't download that video. ${err.stderrTail || err.message}`,\n    isToolingOrBlockFailure(detail)\n      ? \"The site wouldn't hand over the video — usually the downloader being out of date against a site that changed, or the request being blocked. Retrying won't help, and the link is probably fine. Report it so the tool can be updated; meanwhile download the file and use `baker videos upload <file>`.\"\n      : \"Check the link is public and playable. Private or age-restricted videos can't be downloaded — download the file yourself and use `baker videos upload <file>`.\",\n  );\n}\n\nfunction failure(message: string, fix: string, code = \"INGEST_FAILED\"): TargetError {\n  return { code, message, fix };\n}\n\n/** The one ingest's failure, as its envelope's `error`. */\nfunction ingestFailure(err: unknown): TargetError {\n  if (err instanceof ApiError) return { code: err.code, message: err.message };\n  if (err instanceof YtDlpError) return ytDlpFailure(err);\n\n  // Say what actually went wrong. \"Unexpected error\" was worse than unhelpful:\n  // a download that outran its leash throws a plain `Error`, lands here, and had\n  // its only diagnostic thrown away — so a predictable timeout on a long video\n  // was indistinguishable from a genuine crash.\n  const detail = err instanceof Error ? err.message : String(err);\n  if (detail.includes(\"timed out after\")) {\n    return failure(\n      \"That video took too long to download and was stopped part-way.\",\n      \"Long or slow-serving videos can outrun the download window. Try a shorter clip, or download this one yourself and use `baker videos upload <file>`.\",\n      \"INTERNAL_ERROR\",\n    );\n  }\n  return failure(\n    `Couldn't add that video. ${detail}`,\n    \"This is a fault on Baker's side, not a problem with the link. Report it.\",\n    \"INTERNAL_ERROR\",\n  );\n}\n\ntype IngestArgs = {\n  url: string;\n  source: string;\n  externalId?: string;\n  externalUrl?: string;\n  descriptionContext?: string;\n};\n\n/**\n * A dedupe key that identifies this exact video and nothing else.\n *\n * yt-dlp's per-platform extractors return a real provider id, which is what we\n * want: the same YouTube clip pasted three ways dedupes to one row. Its\n * *generic* extractor does not — it returns the URL's basename, so two unrelated\n * files both named `demo.mp4` would produce `url:demo` and the second ingest\n * would \"succeed\" by handing back the first one's clip. A wrong hit is worse\n * than a missed one here: a duplicate costs a transcode, while a collision\n * silently returns the wrong video under a successful-looking response.\n *\n * So the generic case is keyed on the canonical URL, which is unique by\n * construction and still dedupes re-pastes of the same link exactly as intended.\n */\nfunction dedupeKey(args: IngestArgs, info: YtDlpInfo): string | undefined {\n  const id = typeof info.id === \"string\" ? info.id : undefined;\n  if (!id) return undefined;\n  if (info.extractor === \"generic\") return `${args.source}:${canonicalUrl(info) ?? args.url}`;\n  return `${args.source}:${id}`;\n}\n\nfunction ingestUrl(args: IngestArgs): Promise<VideosIngestResponse> {\n  const body: VideosIngestRequest = {\n    url: args.url,\n    source: args.source as VideosIngestRequest[\"source\"],\n  };\n  if (args.externalId) body.externalId = args.externalId;\n  if (args.externalUrl) body.externalUrl = args.externalUrl;\n  if (args.descriptionContext) body.descriptionContext = args.descriptionContext;\n  return apiPost<VideosIngestResponse>(\"/api/videos/ingest\", body);\n}\n\n/**\n * Download the media with yt-dlp, park it in R2, then ingest that URL.\n *\n * The extra hop is what makes a page URL work at all: Mux can only pull a media\n * file, and a watch page is not one. It is also the only route for a CDN that\n * serves us but refuses Mux — YouTube's file URLs, for instance, are bound to\n * the IP that requested them, so handing one to Mux would 403.\n */\nasync function downloadThenIngest(\n  args: IngestArgs,\n  country?: string,\n): Promise<\n  VideosIngestResponse & { egress: string; country?: string; reducedQuality?: true; width?: number; height?: number }\n> {\n  const vimeoCookie = captureVimeoCookie();\n  // The work dir is created before the probe, not after, because the probe needs\n  // somewhere to put the cookie jar — Vimeo refuses metadata anonymously too.\n  const workDir = await mkdtemp(path.join(tmpdir(), \"videos-ingest-\"));\n\n  try {\n    // Metadata first, because both of the decisions it settles are decisions we\n    // used to make only after paying for the download.\n    const probe = await probeYtDlp({ url: args.url, country, vimeoCookie, cookieDir: workDir });\n\n    if (isAudioOnly(probe.info)) {\n      throw new ApiError(\n        \"VALIDATION_ERROR\",\n        \"That link is audio, not video, so it can't go in the video library. Music and podcast links have no picture to store.\",\n      );\n    }\n\n    const tooLong = refuseByDuration(durationSeconds(probe.info), MAX_VIDEO_INGEST_SECONDS);\n    if (tooLong) {\n      throw new ApiError(\"VALIDATION_ERROR\", tooLong);\n    }\n\n    // Prefer yt-dlp's own id: re-pasting the same link then dedupes instead of\n    // paying Mux to transcode and transcribe the same video twice. Read from the\n    // probe rather than from the download's info.json only because the probe has\n    // already run — the dedupe itself still happens at the route, after the file\n    // has been fetched. Skipping the download on a known id needs a lookup the\n    // API does not expose yet; `ingestFromUrlInternal` short-circuits on\n    // `externalId` before calling Mux, so the hook for it exists.\n    const externalId = args.externalId ?? dedupeKey(args, probe.info);\n\n    const { filePath, info, tier, reducedQuality } = await runYtDlp({\n      url: args.url,\n      audioOnly: false,\n      workDir,\n      // Deliberately uncapped: take the best the site will release and let Mux\n      // decide what to serve. The 1080p ceiling this replaces was reasoning\n      // about the wrong cost — it saved download bytes by throwing away source\n      // pixels *before* the one system that can make renditions from them ever\n      // saw them, so a 4K master became a 1080p master permanently, for\n      // everything the library is ever asked to do with that clip afterwards.\n      // Downscaling is Mux's job and it is cheap; re-acquiring a master is not.\n      country,\n      vimeoCookie,\n      // Budgeted from the probed length, so the duration we accept and the time\n      // we allow to fetch it cannot drift apart.\n      timeoutMs: downloadTimeoutMs(durationSeconds(probe.info)),\n    });\n\n    const stats = await stat(filePath);\n    if (stats.size > MAX_VIDEO_INGEST_BYTES) {\n      throw new ApiError(\n        \"VALIDATION_ERROR\",\n        `That video is ${(stats.size / 1024 ** 3).toFixed(1)} GB, over the ${Math.round(MAX_VIDEO_INGEST_BYTES / 1024 ** 3)} GB limit for this route.`,\n      );\n    }\n\n    const publicUrl = await uploadToAssetStore(filePath, stats.size);\n\n    // `url` becomes the stored copy, so the original has to survive as\n    // `externalUrl` — otherwise a direct link that fell back to this route\n    // leaves the library with no record of where the clip came from.\n    // `egress` names the rung that produced the bytes. A paid exit costing real\n    // money must never be spent invisibly — without this the only difference\n    // between a free download and a residential one is the wall clock.\n    return {\n      ...(await ingestUrl({\n        ...args,\n        url: publicUrl,\n        externalId,\n        externalUrl: args.externalUrl ?? canonicalUrl(probe.info) ?? args.url,\n      })),\n      egress: tier,\n      // Named in the result for the same reason `egress` is: a geo-targeted exit\n      // is a deliberate, billable choice and must not be invisible afterwards.\n      ...(country ? { country } : {}),\n      // Third member of the same family. The site refused the good formats and\n      // the download quietly took the one it would release, which is the right\n      // call — but a clip that is 360p because of that must say so here, or the\n      // only way to find out is to watch it.\n      ...(reducedQuality ? { reducedQuality: true } : {}),\n      // What the site released, so a clip that came in small is visible in the\n      // answer rather than after the marketer has already looked at it.\n      ...downloadedResolution(info),\n    };\n  } finally {\n    await rm(workDir, { recursive: true, force: true }).catch(() => {\n      // best-effort cleanup — the sandbox is disposable\n    });\n  }\n}\n\n/** The downloaded format's size, when yt-dlp reported one. */\nfunction downloadedResolution(info: YtDlpInfo): { width?: number; height?: number } {\n  const { width, height } = info;\n  return typeof width === \"number\" && typeof height === \"number\" ? { width, height } : {};\n}\n\n/**\n * Park a downloaded file in R2 via the canvas asset presign route and return the\n * public URL.\n *\n * Streamed from disk in both passes — hashing and uploading — so a long video\n * costs one buffer rather than twice its own length in RAM. It reads the file\n * twice because the presign needs the sha before the PUT can start, which is a\n * cheap trade against holding gigabytes in memory to avoid the second read.\n */\nasync function uploadToAssetStore(filePath: string, sizeBytes: number): Promise<string> {\n  const sha256 = await hashFile(filePath);\n  const { putUrl, publicUrl } = await apiPost<{ putUrl: string; publicUrl: string }>(\"/api/canvas/assets/presign\", {\n    sha256,\n    mime: \"video/mp4\",\n    purpose: \"source\",\n  });\n\n  const putRes = await putFileStreamed({ putUrl, filePath, contentType: \"video/mp4\", sizeBytes });\n  if (!putRes.ok) {\n    throw new ApiError(\"INTERNAL_ERROR\", `Storing the downloaded video failed: HTTP ${putRes.status}`);\n  }\n  return publicUrl;\n}\n","import { createHash } from \"node:crypto\";\nimport { createReadStream } from \"node:fs\";\nimport { Readable } from \"node:stream\";\nimport { pipeline } from \"node:stream/promises\";\n\n/**\n * Move a file to object storage without ever holding it in memory.\n *\n * The reason this exists rather than `readFile` + `fetch`: a video is the one\n * asset whose size is set by someone else. Reading it into a Buffer costs its\n * full length in RAM, and handing that Buffer to `new Uint8Array(...)` copies it\n * again — measured, not assumed: `new Uint8Array(buf)` does not alias, so peak\n * usage was twice the file. On an 8 GB Runtime that puts the real ceiling near\n * 3-4 GB of *video*, well under the size a 4K master or a long recording\n * reaches, and the failure mode is an OOM kill with no error to report.\n *\n * Streaming makes peak memory a fixed chunk regardless of length, which is what\n * lets the size limit be a policy decision instead of a memory one.\n */\n\n/** sha256 of a file's contents, read in chunks. */\nexport async function hashFile(filePath: string): Promise<string> {\n  const hash = createHash(\"sha256\");\n  await pipeline(createReadStream(filePath), hash);\n  return hash.digest(\"hex\");\n}\n\n/**\n * PUT a file to a presigned URL, streaming from disk.\n *\n * `content-length` is mandatory and comes from the caller's `stat`: a stream\n * body would otherwise be sent chunked, which S3-compatible presigned PUTs\n * reject. `duplex: \"half\"` is required by undici whenever the body is a stream.\n */\nexport async function putFileStreamed(args: {\n  putUrl: string;\n  filePath: string;\n  contentType: string;\n  sizeBytes: number;\n}): Promise<Response> {\n  // `toWeb` rather than handing `fetch` the Node stream directly: undici accepts\n  // both, but only the web stream is a `BodyInit`, so this stays type-safe\n  // instead of needing a cast that would hide a real mistake later.\n  const body = Readable.toWeb(createReadStream(args.filePath)) as ReadableStream<Uint8Array>;\n\n  return await fetch(args.putUrl, {\n    method: \"PUT\",\n    body,\n    headers: {\n      \"Content-Type\": args.contentType,\n      \"Content-Length\": String(args.sizeBytes),\n    },\n    duplex: \"half\",\n  } as RequestInit & { duplex: \"half\" });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,SAAS,IAAI,YAAY;AAClC,SAAS,cAAc;AACvB,OAAO,UAAU;AAGjB,SAAS,qBAAqB;;;ACL9B,SAAS,kBAAkB;AAC3B,SAAS,wBAAwB;AACjC,SAAS,gBAAgB;AACzB,SAAS,gBAAgB;AAkBzB,eAAsB,SAAS,UAAmC;AAChE,QAAM,OAAO,WAAW,QAAQ;AAChC,QAAM,SAAS,iBAAiB,QAAQ,GAAG,IAAI;AAC/C,SAAO,KAAK,OAAO,KAAK;AAC1B;AASA,eAAsB,gBAAgB,MAKhB;AAIpB,QAAM,OAAO,SAAS,MAAM,iBAAiB,KAAK,QAAQ,CAAC;AAE3D,SAAO,MAAM,MAAM,KAAK,QAAQ;AAAA,IAC9B,QAAQ;AAAA,IACR;AAAA,IACA,SAAS;AAAA,MACP,gBAAgB,KAAK;AAAA,MACrB,kBAAkB,OAAO,KAAK,SAAS;AAAA,IACzC;AAAA,IACA,QAAQ;AAAA,EACV,CAAqC;AACvC;;;ADVA,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AAAA,IACJ,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,QAAQ,EAAE,MAAM,UAAU,aAAa,6BAA6B,UAAU,MAAM;AAAA,IACpF,eAAe,EAAE,MAAM,UAAU,aAAa,kCAAkC,UAAU,MAAM;AAAA,IAChG,gBAAgB,EAAE,MAAM,UAAU,aAAa,sBAAsB,UAAU,MAAM;AAAA,IACrF,UAAU;AAAA,MACR,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,MACV,SAAS;AAAA,IACX;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,aACE;AAAA,MACF,UAAU;AAAA,IACZ;AAAA,IACA,WAAW,EAAE,MAAM,WAAW,aAAa,2CAA2C,UAAU,MAAM;AAAA,IACtG,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,EACF;AACF,CAAC;AAEM,IAAM,gBAAgB,cAAc;AAAA,EACzC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aACE;AAAA,EACJ;AAAA,EACA,MAAM;AAAA,IACJ,KAAK,EAAE,MAAM,cAAc,aAAa,+CAA+C,UAAU,MAAM;AAAA,IACvG,QAAQ,EAAE,MAAM,UAAU,aAAa,6BAA6B,UAAU,MAAM;AAAA,IACpF,eAAe,EAAE,MAAM,UAAU,aAAa,oCAAoC,UAAU,MAAM;AAAA,IAClG,gBAAgB,EAAE,MAAM,UAAU,aAAa,qCAAqC,UAAU,MAAM;AAAA,IACpG,UAAU,EAAE,MAAM,WAAW,aAAa,2BAA2B,UAAU,OAAO,SAAS,MAAM;AAAA,IACrG,SAAS,EAAE,MAAM,UAAU,aAAa,6CAA6C,UAAU,MAAM;AAAA,IACrG,SAAS;AAAA,MACP,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,WAAW,EAAE,MAAM,WAAW,aAAa,6BAA6B,UAAU,OAAO,SAAS,MAAM;AAAA,IACxG,QAAQ,EAAE,MAAM,UAAU,aAAa,2DAA2D,UAAU,MAAM;AAAA,EACpH;AAAA,EACA,KAAK,CAAC,EAAE,KAAK,MACX,eAAe;AAAA,IACb,MAAM,kBAAkB,IAAI;AAAA,IAC5B,QAAQ,KAAK;AAAA,IACb,YAAY,KAAK,aAAa;AAAA,IAC9B,aAAa,KAAK,cAAc;AAAA,IAChC,eAAe,KAAK,aAAa;AAAA,IACjC,SAAS,KAAK;AAAA,IACd,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK,SAAS,MAAM;AAAA,IAC5B,QAAQ,OAAO,KAAK,WAAW,YAAY,KAAK,OAAO,SAAS,IAAI,KAAK,OAAO,MAAM,GAAG,IAAI;AAAA,EAC/F,CAAC;AACL,CAAC;AAoBD,eAAsB,eAAe,MAAyC;AAC5E,QAAM,EAAE,KAAK,IAAI;AACjB,MAAI,KAAK,WAAW,GAAG;AACrB,aAAS,EAAE,MAAM,oBAAoB,SAAS,kBAAkB,CAAC;AAAA,EACnE;AAGA,MAAI,KAAK,SAAS,MAAM,KAAK,cAAc,KAAK,cAAc;AAC5D,aAAS;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,QAAM,UAAU,KAAK,SAAS,KAAK,KAAK;AACxC,QAAM,QAAQ,YAAY,IAAI;AAE9B,MAAI,KAAK,QAAQ;AACf,UAAM,SAAS,MAAM,IAAI,CAAC,EAAE,MAAM,OAAO,MAAM,aAAa,MAAM,QAAQ,OAAO,CAAC;AAClF,cAAU;AAAA,MACR,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,QAAQ,OAAO,WAAW,KAAK,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,OAAO;AAAA,IACzE,CAAC;AACD;AAAA,EACF;AAEA,QAAM,QAAQ,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC;AAChE,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA,CAAC,QAAQ;AACP,YAAM,OAAO,MAAM,IAAI,GAAG;AAC1B,aAAO,cAAc,KAAK,MAAM,KAAK,QAAQ,OAAO;AAAA,IACtD;AAAA,IACA;AAAA,EACF;AACA,sBAAoB,UAAU,KAAK,MAAM;AAC3C;AAKA,SAAS,YAAY,MAAwC;AAC3D,QAAM,QAAQ,KAAK,KAAK,IAAI,CAAC,QAAQ;AACnC,UAAM,OAAmB;AAAA,MACvB;AAAA,MACA,QAAQ,oBAAoB,KAAK,QAAQ,GAAG;AAAA,MAC5C,YAAY,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOjB,aAAa,KAAK;AAAA,MAClB,oBAAoB,KAAK,SAAS,KAAK,KAAK;AAAA,IAC9C;AACA,WAAO,EAAE,MAAM,QAAQ,CAAC,KAAK,iBAAiB,iBAAiB,GAAG,EAAE;AAAA,EACtE,CAAC;AAMD,aAAW,EAAE,KAAK,KAAK,OAAO;AAC5B,UAAM,aAAa,0BAA0B,UAAU,IAAI;AAC3D,QAAI,CAAC,WAAW,SAAS;AACvB,YAAM,UAAU,WAAW,MAAM,OAAO,CAAC;AACzC,YAAM,QAAQ,KAAK,KAAK,SAAS,IAAI,GAAG,KAAK,GAAG,OAAO;AACvD,eAAS;AAAA,QACP,MAAM;AAAA,QACN,SAAS,UACL,GAAG,KAAK,GAAG,QAAQ,KAAK,KAAK,GAAG,KAAK,SAAS,KAAK,QAAQ,OAAO,KAClE,GAAG,KAAK;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO;AACT;AAOA,SAAS,oBAAoB,UAAyC,QAAyB;AAC7F,QAAM,CAAC,IAAI,IAAI;AACf,MAAI,SAAS,WAAW,KAAK,MAAM;AACjC,QAAI,CAAC,KAAK,GAAI,UAAS,KAAK,KAAK;AACjC,QAAI,CAAC,QAAQ;AACX,gBAAU,EAAE,IAAI,MAAM,MAAM,KAAK,MAAM,OAAO,YAAY,KAAK,IAAI,EAAE,CAAC;AACtE;AAAA,IACF;AACA,UAAMA,SAAQ,SAAS,KAAK,MAAM,MAAM;AACxC,cAAU,EAAE,IAAI,MAAM,MAAMA,OAAM,MAAM,OAAO,CAAC,GAAI,YAAY,KAAK,IAAI,KAAK,CAAC,GAAI,GAAGA,OAAM,KAAK,EAAE,CAAC;AACpG;AAAA,EACF;AAEA,QAAM,WAAW,SAAS,QAAQ,CAAC,MAAO,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAE;AACrF,QAAM,SAAS,SAAS,QAAQ,CAAC,MAAO,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,OAAO,EAAE,MAAM,CAAC,CAAE;AACxF,QAAM,QAAQ,SAAS,QAAQ,CAAC,SAAS,YAAY,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;AACrG,MAAI,SAAS,WAAW,GAAG;AACzB,cAAU;AAAA,MACR,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS,eAAe,SAAS,MAAM,2BAA2B,OAC/D,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,WAAM,EAAE,MAAM,OAAO,EAAE,EAC1C,KAAK,IAAI,CAAC;AAAA,MACf;AAAA,MACA,OAAO,OAAO,QAAQ,CAAC,MAAO,EAAE,MAAM,MAAM,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,GAAG,EAAE,IAAI,CAAC,CAAE;AAAA,IAChF,CAAC;AACD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,OAAO,SAAS,GAAG;AACrB,UAAM;AAAA,MACJ,GAAG,OAAO,MAAM,OAAO,SAAS,MAAM;AAAA,IACxC;AAAA,EACF;AAGA,QAAM,QAAQ,SAAS,SAAS,UAAU,MAAM,IAAI,EAAE,MAAM,UAAU,OAAO,CAAC,EAAE;AAChF,QAAM,KAAK,GAAG,MAAM,KAAK;AACzB,YAAU,EAAE,IAAI,MAAM,MAAM,EAAE,UAAU,MAAM,MAAM,OAAO,GAAG,GAAI,MAAM,SAAS,IAAI,EAAE,MAAM,IAAI,CAAC,EAAG,CAAC;AACxG;AAGA,SAAS,SAAS,MAAe,QAAsD;AACrF,QAAM,SAAS,aAAa,EAAE,IAAI,MAAM,KAAK,GAAG,MAAM;AACtD,QAAM,QAAQ,MAAM,QAAQ,OAAO,KAAK,IAAI,OAAO,MAAM,OAAO,CAAC,SAAS,OAAO,SAAS,QAAQ,IAAI,CAAC;AACvG,SAAO,EAAE,MAAM,OAAO,MAAM,MAAM;AACpC;AAgCO,SAAS,YAAY,MAA0C;AACpE,MAAI,KAAK,mBAAmB,KAAM,QAAO;AACzC,SAAO;AAAA,IACL;AAAA,EACF;AACF;AAEA,SAAS,aAAa,MAAkB,QAAiB,SAA2C;AAClG,SAAO;AAAA,IACL,KAAK,KAAK;AAAA,IACV,QAAQ,KAAK;AAAA;AAAA;AAAA;AAAA,IAIb,YAAY,KAAK,eAAe,SAAS,gBAAgB,KAAK,QAAQ,KAAK,GAAG,IAAI;AAAA;AAAA;AAAA,IAGlF,aAAa,KAAK,eAAe;AAAA,IACjC;AAAA,IACA,SAAS,WAAW;AAAA,IACpB,oBAAoB,KAAK,sBAAsB;AAAA,EACjD;AACF;AAOA,eAAe,cAAc,MAAkB,QAAiB,SAAyC;AACvG,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,GAAI,MAAM,mBAAmB,MAAM,OAAO,GAAI,KAAK,WAAW;AAAA,EACzE;AACA,MAAI;AAIF,UAAM,aAAa,KAAK,cAAc,gBAAgB,KAAK,QAAQ,KAAK,GAAG;AAC3E,WAAO,EAAE,GAAI,MAAM,UAAU,EAAE,GAAG,MAAM,WAAW,CAAC,GAAI,KAAK,SAAS;AAAA,EACxE,SAAS,KAAK;AACZ,QAAI,EAAE,eAAe,aAAa,CAAC,wBAAwB,IAAI,IAAI,EAAG,OAAM;AAC5E,WAAO,EAAE,GAAI,MAAM,mBAAmB,MAAM,OAAO,GAAI,KAAK,YAAY,cAAc,IAAI,QAAQ;AAAA,EACpG;AACF;AAWA,SAAS,aAAa,KAA8B;AAClD,QAAM,SAAS,GAAG,IAAI,UAAU,IAAI,IAAI,OAAO;AAK/C,MAAI,eAAe,iBAAiB,MAAM,CAAC,GAAG;AAC5C,WAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,eAAe,MAAM,GAAG;AAC1B,WAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,mBAAmB,MAAM,GAAG;AAC9B,WAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,gBAAgB,MAAM,GAAG;AAC3B,WAAO;AAAA,MACL,iEAAiE,IAAI,cAAc,IAAI,OAAO;AAAA,MAC9F;AAAA,IACF;AAAA,EACF;AACA,SAAO;AAAA,IACL,iCAAiC,IAAI,cAAc,IAAI,OAAO;AAAA,IAC9D,wBAAwB,MAAM,IAC1B,iTACA;AAAA,EACN;AACF;AAEA,SAAS,QAAQ,SAAiB,KAAa,OAAO,iBAA8B;AAClF,SAAO,EAAE,MAAM,SAAS,IAAI;AAC9B;AAGA,SAAS,cAAc,KAA2B;AAChD,MAAI,eAAe,SAAU,QAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ;AAC3E,MAAI,eAAe,WAAY,QAAO,aAAa,GAAG;AAMtD,QAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC9D,MAAI,OAAO,SAAS,iBAAiB,GAAG;AACtC,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,SAAO;AAAA,IACL,4BAA4B,MAAM;AAAA,IAClC;AAAA,IACA;AAAA,EACF;AACF;AAwBA,SAAS,UAAU,MAAkB,MAAqC;AACxE,QAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AACnD,MAAI,CAAC,GAAI,QAAO;AAChB,MAAI,KAAK,cAAc,UAAW,QAAO,GAAG,KAAK,MAAM,IAAI,aAAa,IAAI,KAAK,KAAK,GAAG;AACzF,SAAO,GAAG,KAAK,MAAM,IAAI,EAAE;AAC7B;AAEA,SAAS,UAAU,MAAiD;AAClE,QAAM,OAA4B;AAAA,IAChC,KAAK,KAAK;AAAA,IACV,QAAQ,KAAK;AAAA,EACf;AACA,MAAI,KAAK,WAAY,MAAK,aAAa,KAAK;AAC5C,MAAI,KAAK,YAAa,MAAK,cAAc,KAAK;AAC9C,MAAI,KAAK,mBAAoB,MAAK,qBAAqB,KAAK;AAC5D,SAAO,QAA8B,sBAAsB,IAAI;AACjE;AAUA,eAAe,mBACb,MACA,SAGA;AACA,QAAM,cAAc,mBAAmB;AAGvC,QAAM,UAAU,MAAM,QAAQ,KAAK,KAAK,OAAO,GAAG,gBAAgB,CAAC;AAEnE,MAAI;AAGF,UAAM,QAAQ,MAAM,WAAW,EAAE,KAAK,KAAK,KAAK,SAAS,aAAa,WAAW,QAAQ,CAAC;AAE1F,QAAI,YAAY,MAAM,IAAI,GAAG;AAC3B,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAU,iBAAiB,gBAAgB,MAAM,IAAI,GAAG,wBAAwB;AACtF,QAAI,SAAS;AACX,YAAM,IAAI,SAAS,oBAAoB,OAAO;AAAA,IAChD;AASA,UAAM,aAAa,KAAK,cAAc,UAAU,MAAM,MAAM,IAAI;AAEhE,UAAM,EAAE,UAAU,MAAM,MAAM,eAAe,IAAI,MAAM,SAAS;AAAA,MAC9D,KAAK,KAAK;AAAA,MACV,WAAW;AAAA,MACX;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA;AAAA,MACA;AAAA;AAAA;AAAA,MAGA,WAAW,kBAAkB,gBAAgB,MAAM,IAAI,CAAC;AAAA,IAC1D,CAAC;AAED,UAAM,QAAQ,MAAM,KAAK,QAAQ;AACjC,QAAI,MAAM,OAAO,wBAAwB;AACvC,YAAM,IAAI;AAAA,QACR;AAAA,QACA,kBAAkB,MAAM,OAAO,QAAQ,GAAG,QAAQ,CAAC,CAAC,iBAAiB,KAAK,MAAM,yBAAyB,QAAQ,CAAC,CAAC;AAAA,MACrH;AAAA,IACF;AAEA,UAAM,YAAY,MAAM,mBAAmB,UAAU,MAAM,IAAI;AAQ/D,WAAO;AAAA,MACL,GAAI,MAAM,UAAU;AAAA,QAClB,GAAG;AAAA,QACH,KAAK;AAAA,QACL;AAAA,QACA,aAAa,KAAK,eAAe,aAAa,MAAM,IAAI,KAAK,KAAK;AAAA,MACpE,CAAC;AAAA,MACD,QAAQ;AAAA;AAAA;AAAA,MAGR,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,MAK7B,GAAI,iBAAiB,EAAE,gBAAgB,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA,MAGjD,GAAG,qBAAqB,IAAI;AAAA,IAC9B;AAAA,EACF,UAAE;AACA,UAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM;AAAA,IAEhE,CAAC;AAAA,EACH;AACF;AAGA,SAAS,qBAAqB,MAAsD;AAClF,QAAM,EAAE,OAAO,OAAO,IAAI;AAC1B,SAAO,OAAO,UAAU,YAAY,OAAO,WAAW,WAAW,EAAE,OAAO,OAAO,IAAI,CAAC;AACxF;AAWA,eAAe,mBAAmB,UAAkB,WAAoC;AACtF,QAAM,SAAS,MAAM,SAAS,QAAQ;AACtC,QAAM,EAAE,QAAQ,UAAU,IAAI,MAAM,QAA+C,8BAA8B;AAAA,IAC/G;AAAA,IACA,MAAM;AAAA,IACN,SAAS;AAAA,EACX,CAAC;AAED,QAAM,SAAS,MAAM,gBAAgB,EAAE,QAAQ,UAAU,aAAa,aAAa,UAAU,CAAC;AAC9F,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,SAAS,kBAAkB,6CAA6C,OAAO,MAAM,EAAE;AAAA,EACnG;AACA,SAAO;AACT;","names":["shown"]}

package/dist/chunk-FESQ5TXU.js

@@ -0,0 +1,42 @@
+import {
+  ApiError
+} from "./chunk-CIW3Q7B2.js";
+import {
+  writeJson
+} from "./chunk-HZPTQRX6.js";
+
+// src/commands/studio/errors.ts
+var CREDIT_HINTS = ["credit", "top up", "billing", "quota"];
+function studioStartFix(message) {
+  const lower = message.toLowerCase();
+  if (CREDIT_HINTS.some((hint) => lower.includes(hint))) {
+    return {
+      action: "Stop generating and finish the task with assets that already exist",
+      explanation: "No generation will run until the plan is topped up, so retrying costs time and changes nothing. Source or reuse an image instead, complete the rest of the work, and tell the user the new artwork could not be produced."
+    };
+  }
+  return {
+    action: "Drop or correct the setting the message names, then run the command once more",
+    explanation: "The message says which model was chosen and what it accepts. If the setting is not essential to the brief, leave it out rather than switching model. Do not abort the wider job over one refused setting."
+  };
+}
+function failStudioCommand(error, opts = {}) {
+  if (error instanceof ApiError) {
+    writeJson({
+      ok: false,
+      error: {
+        code: error.code,
+        message: error.message,
+        ...opts.withFix ? { fix: studioStartFix(error.message) } : {}
+      }
+    });
+    process.exit(1);
+  }
+  writeJson({ ok: false, error: { code: "INTERNAL_ERROR", message: "Unexpected error" } });
+  process.exit(1);
+}
+
+export {
+  failStudioCommand
+};
+//# sourceMappingURL=chunk-FESQ5TXU.js.map

package/dist/chunk-FEUKUZRA.js

@@ -0,0 +1,106 @@
+import {
+  cacheGet,
+  cacheSet,
+  handleConnectionError,
+  needsConnectionFix,
+  writeAdsJson
+} from "./chunk-LV7EU6HM.js";
+import {
+  ApiError,
+  apiGet
+} from "./chunk-CIW3Q7B2.js";
+import {
+  getEnv
+} from "./chunk-VPF5A7CM.js";
+
+// src/commands/ads/x/output.ts
+var ACCOUNTS_CACHE_TTL_MS = 60 * 60 * 1e3;
+var NO_X_ACCOUNTS_EXPLANATION = "The X Ads connection is live, but X lists no ads accounts for it. That is usually an account X has not activated for advertising yet \u2014 most often one with no billing set up. It does not mean the connection failed, and reconnecting will not change it. An account X omits here still works everywhere else: take its id from the ads.x.com URL (ads.x.com/manager/<id>/\u2026) and pass --account-id <id>, or set BAKER_X_ADS_ACCOUNT_ID.";
+async function fetchXAccounts(useCache) {
+  if (useCache) {
+    const cached = cacheGet("x-accounts", "list");
+    if (cached) return cached.data;
+  }
+  const params = !useCache ? { "skip-cache": "true" } : void 0;
+  const data = await apiGet("/api/ads/x/accounts", params);
+  if (useCache) {
+    cacheSet("x-accounts", "list", data, ACCOUNTS_CACHE_TTL_MS);
+  }
+  return data;
+}
+async function resolveXAccountId(args) {
+  const fromArgs = args["account-id"];
+  const accountId = fromArgs || getEnv().BAKER_X_ADS_ACCOUNT_ID;
+  if (accountId) {
+    if (!/^[a-z0-9]+$/.test(accountId)) {
+      writeAdsJson({
+        ok: false,
+        error: {
+          code: "INVALID_ACCOUNT_ID",
+          message: "X Ads account ID must be a base36 string (lowercase letters and digits). Pass --account-id or set BAKER_X_ADS_ACCOUNT_ID."
+        }
+      });
+      process.exit(1);
+    }
+    return accountId;
+  }
+  const useCache = !args["no-cache"];
+  try {
+    const accounts = await fetchXAccounts(useCache);
+    const [single] = accounts;
+    if (accounts.length === 1 && single) {
+      process.stderr.write(`Using account "${single.name}" (${single.id})
+`);
+      return single.id;
+    }
+    if (accounts.length === 0) {
+      writeAdsJson({
+        ok: false,
+        error: {
+          code: "INVALID_ACCOUNT_ID",
+          message: NO_X_ACCOUNTS_EXPLANATION,
+          fix: { action: "reject", explanation: NO_X_ACCOUNTS_EXPLANATION },
+          retryable: false
+        }
+      });
+      process.exit(1);
+    }
+    const list = accounts.map((a) => `  ${a.id}  ${a.name}`).join("\n");
+    writeAdsJson({
+      ok: false,
+      error: {
+        code: "MULTIPLE_ACCOUNTS",
+        message: `Multiple X Ads accounts found. Pass --account-id or set BAKER_X_ADS_ACCOUNT_ID:
+${list}`
+      }
+    });
+    process.exit(1);
+  } catch (err) {
+    if (err instanceof ApiError && needsConnectionFix(err.code, err.message)) {
+      handleConnectionError("x_ads", err.message);
+    }
+    writeAdsJson({
+      ok: false,
+      error: {
+        code: "INVALID_ACCOUNT_ID",
+        message: "Could not auto-detect account. Pass --account-id or set BAKER_X_ADS_ACCOUNT_ID."
+      }
+    });
+    process.exit(1);
+  }
+}
+async function resolveXAccountTimezone(accountId, args) {
+  try {
+    const accounts = await fetchXAccounts(!args["no-cache"]);
+    return accounts.find((a) => a.id === accountId)?.timezone || "UTC";
+  } catch {
+    return "UTC";
+  }
+}
+
+export {
+  NO_X_ACCOUNTS_EXPLANATION,
+  resolveXAccountId,
+  resolveXAccountTimezone
+};
+//# sourceMappingURL=chunk-FEUKUZRA.js.map