@koda-sl/baker-cli 0.543.0 → 0.545.0-dev.2a6beac48

package/dist/chunk-EAHBTBVR.js

@@ -1,324 +0,0 @@
-import {
-  ApiError,
-  apiGet
-} from "./chunk-C35UMKYG.js";
-import {
-  getEnv,
-  optionalTargetCompany
-} from "./chunk-LBIF6FJY.js";
-
-// src/error-handler.ts
-var REQUEST_CONNECTION_PLATFORM = {
-  google_ads: "google-ads",
-  ga4: "google-analytics",
-  gsc: "google-search-console",
-  linkedin_ads: "linkedin",
-  meta_ads: "meta",
-  x_ads: "x-ads"
-};
-var PLATFORM_NAME = {
-  google_ads: "Google Ads",
-  ga4: "Google Analytics 4",
-  gsc: "Google Search Console",
-  x_ads: "X Ads",
-  meta_ads: "Meta Ads",
-  linkedin_ads: "LinkedIn Ads"
-};
-function connectionFixExplanation(platform, originalMessage) {
-  const name = PLATFORM_NAME[platform];
-  const slug = REQUEST_CONNECTION_PLATFORM[platform];
-  if (optionalTargetCompany()) {
-    return `${name} is not connected for that company. It can only be connected in that company's own workspace, never with \`request_connection\` from here. Show that company as not connected for ${name} and carry on with the others.`;
-  }
-  if (originalMessage !== void 0 && SIGN_IN_ENDED.test(originalMessage)) {
-    return `${name} is connected, but its sign-in no longer works (it expired, or was revoked on the platform) \u2014 this is not a Baker error, and retrying later cannot fix it: only the user signing in again can. Call the \`request_connection\` tool now with { platform: "${slug}", reason } \u2014 the card offers Reconnect. If that call fails, give the exact route: dashboard \u2192 Brain \u2192 Integrations \u2192 Platforms \u2192 ${name} \u2192 Reconnect. Then carry on with the rest of the task and say what stays unavailable until it is reconnected.`;
-  }
-  return `${name} is not connected for this company (or no account has been picked). Don't send the user to Settings or end the turn here \u2014 call the \`request_connection\` tool with { platform: "${slug}", reason } and they connect and pick their accounts from inside the chat. If the \`request_connection\` call fails, say so plainly and give the exact route: dashboard \u2192 Brain \u2192 Integrations \u2192 Platforms \u2192 ${name}. Then carry on with the rest of the task and say what stays unavailable until it is connected.`;
-}
-var SIGN_IN_ENDED = /connection expired|must reconnect/i;
-function handleConnectionError(platform, originalMessage) {
-  const platformName = PLATFORM_NAME[platform];
-  const alternative = {
-    google_ads: "keywords-for-site or research advertisers",
-    ga4: "lighthouse for page performance",
-    gsc: "keywords-for-site or research keyword-gap",
-    x_ads: "research advertisers",
-    meta_ads: "research advertisers or research keyword-ideas",
-    linkedin_ads: "research advertisers (LinkedIn Ad Library) or research keyword-ideas"
-  }[platform];
-  const code = {
-    google_ads: "NO_GOOGLE_ADS_CONNECTION",
-    ga4: "NO_GA4_CONNECTION",
-    gsc: "NO_GSC_CONNECTION",
-    x_ads: "NO_X_ADS_CONNECTION",
-    meta_ads: "NO_META_ADS_CONNECTION",
-    linkedin_ads: "NO_LINKEDIN_ADS_CONNECTION"
-  }[platform];
-  const envelope = {
-    ok: false,
-    error: {
-      code,
-      message: originalMessage || `No ${platformName} connection found for this company.`,
-      fix: optionalTargetCompany() ? { action: "continue_without", explanation: connectionFixExplanation(platform) } : {
-        action: "request_connection",
-        explanation: `${connectionFixExplanation(platform, originalMessage)} (Optional fallback for estimated external insights: 'baker research ${alternative}'.)`
-      },
-      retryable: false
-    }
-  };
-  writeJsonEnvelope(envelope);
-  process.exit(1);
-}
-function isNotConnectedError(code, message) {
-  if (code !== "NOT_FOUND" && code !== "UNAUTHORIZED" && code !== "FORBIDDEN") {
-    return false;
-  }
-  return /no .* connection found|not connected|no .* (selected|picked)|is not in .* connected/i.test(message);
-}
-function needsConnectionFix(code, message) {
-  if (code === "UNAUTHORIZED") {
-    return true;
-  }
-  return isNotConnectedError(code, message);
-}
-function isOrganizationReadRefusal(message) {
-  return message.startsWith("The organization workspace only reads its companies");
-}
-
-// src/commands/ads/cache.ts
-import { createHash } from "crypto";
-import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
-import { homedir } from "os";
-import { join } from "path";
-function cacheDir() {
-  const company = optionalTargetCompany()?.replace(/[^a-zA-Z0-9_]/g, "");
-  return join(homedir(), ".baker", "cache", "ads", ...company ? ["company", company] : []);
-}
-function ensureDir(dir) {
-  if (!existsSync(dir)) {
-    mkdirSync(dir, { recursive: true });
-  }
-}
-function hashKey(key) {
-  return createHash("sha256").update(key).digest("hex").slice(0, 16);
-}
-function cachePath(category, key) {
-  const dir = join(cacheDir(), category);
-  ensureDir(dir);
-  return join(dir, `${hashKey(key)}.json`);
-}
-function cacheGet(category, key) {
-  const path = cachePath(category, key);
-  if (!existsSync(path)) {
-    return null;
-  }
-  try {
-    const raw = readFileSync(path, "utf-8");
-    const entry = JSON.parse(raw);
-    if (entry.expiresAt < Date.now()) {
-      rmSync(path, { force: true });
-      return null;
-    }
-    return entry;
-  } catch {
-    rmSync(path, { force: true });
-    return null;
-  }
-}
-function cacheSet(category, key, data, ttlMs, fields) {
-  const path = cachePath(category, key);
-  const entry = {
-    expiresAt: Date.now() + ttlMs,
-    data,
-    fields
-  };
-  writeFileSync(path, JSON.stringify(entry), "utf-8");
-}
-var HOUR = 60 * 60 * 1e3;
-var MINUTE = 60 * 1e3;
-function getQueryTtl(query) {
-  const upper = query.toUpperCase();
-  if (upper.includes("TODAY")) {
-    return 15 * MINUTE;
-  }
-  if (upper.includes("LAST_7_DAYS") || upper.includes("LAST_14_DAYS")) {
-    return 1 * HOUR;
-  }
-  return 6 * HOUR;
-}
-function buildQueryCacheKey(customerId, query) {
-  const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-  return `${customerId}:${today}:${query.trim().replace(/\s+/g, " ")}`;
-}
-function getManagerIdForCustomer(customerId) {
-  const cached = cacheGet("accounts", "list");
-  if (!cached) return void 0;
-  const account = cached.data.find((a) => a.id === customerId);
-  if (account?.access_type === "managed") return account.manager_id;
-  return void 0;
-}
-
-// src/commands/ads/output.ts
-function writeAdsJson(envelope) {
-  process.stdout.write(`${JSON.stringify(envelope, null, 2)}
-`);
-}
-function writeJsonEnvelope(envelope) {
-  process.stdout.write(`${JSON.stringify(envelope, null, 2)}
-`);
-}
-var TABLE_OUTPUT_FORMATS = ["json", "csv", "jsonl", "md"];
-function outputFormatRefusal(format, supported) {
-  if (supported.includes(format)) return null;
-  const list = supported.length > 1 ? `${supported.slice(0, -1).join(", ")} or ${supported.at(-1)}` : supported.join("");
-  return `--output ${format} is not supported \u2014 use ${list}`;
-}
-function toCsvRow(values) {
-  return values.map((v) => {
-    if (v.includes(",") || v.includes('"') || v.includes("\n")) {
-      return `"${v.replace(/"/g, '""')}"`;
-    }
-    return v;
-  }).join(",");
-}
-function flattenRow(row) {
-  const flat = {};
-  for (const [key, val] of Object.entries(row)) {
-    flat[key] = typeof val === "object" && val !== null ? JSON.stringify(val) : String(val ?? "");
-  }
-  return flat;
-}
-function writeWhole(lines) {
-  process.stdout.write(`${lines.join("\n")}
-`);
-}
-function writeAdsCsv(data, fields) {
-  if (data.length === 0) return;
-  const cols = fields ?? Object.keys(data[0] ?? {});
-  const lines = [toCsvRow(cols)];
-  for (const row of data) {
-    const flat = flattenRow(row);
-    lines.push(toCsvRow(cols.map((f) => flat[f] ?? "")));
-  }
-  writeWhole(lines);
-}
-function writeAdsJsonl(data) {
-  if (data.length === 0) return;
-  writeWhole(data.map((row) => JSON.stringify(row)));
-}
-function mdCell(value) {
-  return value.replace(/\|/g, "\\|").replace(/\r?\n/g, " ");
-}
-function writeAdsMd(data, fields) {
-  if (data.length === 0) return;
-  const cols = fields ?? Object.keys(data[0] ?? {});
-  const lines = [`| ${cols.join(" | ")} |`, `| ${cols.map(() => "---").join(" | ")} |`];
-  for (const row of data) {
-    const flat = flattenRow(row);
-    lines.push(`| ${cols.map((f) => mdCell(flat[f] ?? "")).join(" | ")} |`);
-  }
-  writeWhole(lines);
-}
-function writeAdsOutput(data, format, fields, hints = []) {
-  switch (format) {
-    case "csv":
-      writeAdsCsv(data, fields);
-      break;
-    case "jsonl":
-      writeAdsJsonl(data);
-      break;
-    case "md":
-      writeAdsMd(data, fields);
-      break;
-    default:
-      writeJsonEnvelope(hints.length > 0 ? { ok: true, data, hints } : { ok: true, data });
-      return;
-  }
-  for (const hint of hints) process.stderr.write(`${hint}
-`);
-}
-async function fetchAccounts(useCache = true) {
-  if (useCache) {
-    const cached = cacheGet("accounts", "list");
-    if (cached) return cached.data;
-  }
-  const params = !useCache ? { "skip-cache": "true" } : void 0;
-  const data = await apiGet("/api/ads/google/accounts", params);
-  if (useCache) {
-    cacheSet("accounts", "list", data, 60 * 60 * 1e3);
-  }
-  return data;
-}
-async function resolveCustomerId(args) {
-  const fromArgs = args["customer-id"];
-  const customerId = fromArgs || getEnv().BAKER_GOOGLE_ADS_CUSTOMER_ID;
-  if (customerId) {
-    if (!/^\d{10}$/.test(customerId)) {
-      writeAdsJson({
-        ok: false,
-        error: {
-          code: "INVALID_CUSTOMER_ID",
-          message: "Customer ID must be exactly 10 digits without dashes. Pass --customer-id or set BAKER_GOOGLE_ADS_CUSTOMER_ID."
-        }
-      });
-      process.exit(1);
-    }
-    return customerId;
-  }
-  const useCache = !args["no-cache"];
-  try {
-    const accounts = await fetchAccounts(useCache);
-    const [single] = accounts;
-    if (accounts.length === 1 && single) {
-      process.stderr.write(`Using account "${single.name}" (${single.id})
-`);
-      return single.id;
-    }
-    if (accounts.length === 0) {
-      handleConnectionError("google_ads");
-    }
-    const list = accounts.map((a) => `  ${a.id}  ${a.name}`).join("\n");
-    writeAdsJson({
-      ok: false,
-      error: {
-        code: "MULTIPLE_ACCOUNTS",
-        message: `Multiple accounts found. Pass --customer-id or set BAKER_GOOGLE_ADS_CUSTOMER_ID:
-${list}`
-      }
-    });
-    process.exit(1);
-  } catch (err) {
-    if (err instanceof ApiError && isNotConnectedError(err.code, err.message)) {
-      handleConnectionError("google_ads", err.message);
-    }
-    writeAdsJson({
-      ok: false,
-      error: {
-        code: "INVALID_CUSTOMER_ID",
-        message: "Could not auto-detect account. Pass --customer-id or set BAKER_GOOGLE_ADS_CUSTOMER_ID."
-      }
-    });
-    process.exit(1);
-  }
-}
-
-export {
-  cacheGet,
-  cacheSet,
-  getQueryTtl,
-  buildQueryCacheKey,
-  getManagerIdForCustomer,
-  writeAdsJson,
-  writeJsonEnvelope,
-  TABLE_OUTPUT_FORMATS,
-  outputFormatRefusal,
-  toCsvRow,
-  writeAdsOutput,
-  resolveCustomerId,
-  connectionFixExplanation,
-  handleConnectionError,
-  isNotConnectedError,
-  needsConnectionFix,
-  isOrganizationReadRefusal
-};
-//# sourceMappingURL=chunk-EAHBTBVR.js.map

package/dist/chunk-ELAYD7O3.js

@@ -1,215 +0,0 @@
-import {
-  debugLogSetting
-} from "./chunk-LBIF6FJY.js";
-
-// src/debugLog.ts
-import { appendFileSync, mkdirSync, renameSync, statSync } from "fs";
-import { dirname, isAbsolute, resolve } from "path";
-var DEFAULT_FILE = "baker-cli-debug.jsonl";
-var BOOLEAN_ON = /* @__PURE__ */ new Set(["1", "true", "on", "yes"]);
-var BOOLEAN_OFF = /* @__PURE__ */ new Set(["0", "false", "off", "no"]);
-var MAX_BYTES = 64 * 1024 * 1024;
-var REDACTIONS = [
-  [/Bearer\s+[A-Za-z0-9._-]+/g, "Bearer [redacted]"],
-  // Authorization headers
-  // Every prefix, captured rather than listed thrice: `bkr_` and `bkv_` do not
-  // contain the literal `bk_`, so the company-key rule matched no part of the
-  // read-only credentials a Session review or a published report runs with.
-  [/\b(bk[rv]?)_[A-Za-z0-9]+/g, "$1_[redacted]"],
-  // Baker API keys
-  [/eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g, "[redacted-jwt]"],
-  // JWTs / id tokens
-  [/ya29\.[A-Za-z0-9._-]+/g, "[redacted-google-token]"],
-  // Google OAuth access tokens
-  [/1\/\/[A-Za-z0-9._-]+/g, "[redacted-google-refresh]"],
-  // Google refresh tokens
-  [/EAA[A-Za-z0-9]{20,}/g, "[redacted-meta-token]"]
-  // Meta/Facebook access tokens
-];
-function redactSecrets(input) {
-  let out = input;
-  for (const [pattern, replacement] of REDACTIONS) {
-    out = out.replace(pattern, replacement);
-  }
-  return out;
-}
-var CREDENTIAL_VALUE = "[credential value]";
-var CREDENTIAL_PUT_PATH = "/api/credentials/put";
-function withoutCredentialValue(url, body) {
-  let path;
-  try {
-    path = new URL(url).pathname;
-  } catch {
-    path = url;
-  }
-  if (path !== CREDENTIAL_PUT_PATH || body === null || typeof body !== "object" || !("value" in body)) {
-    return body;
-  }
-  return { ...body, value: CREDENTIAL_VALUE };
-}
-var PUT_FLAGS_WITH_VALUES = /* @__PURE__ */ new Set(["--host", "--label"]);
-function argvWithoutCredentialValue(argv) {
-  if (argv[0] !== "credentials" || argv[1] !== "put") {
-    return argv;
-  }
-  let nameSeen = false;
-  let keepNext = false;
-  let redactNext = false;
-  return argv.map((arg, index) => {
-    if (index < 2) return arg;
-    if (keepNext || redactNext) {
-      const kept = keepNext ? arg : CREDENTIAL_VALUE;
-      keepNext = false;
-      redactNext = false;
-      return kept;
-    }
-    if (arg.startsWith("--value=")) return `--value=${CREDENTIAL_VALUE}`;
-    redactNext = arg === "--value";
-    keepNext = PUT_FLAGS_WITH_VALUES.has(arg);
-    if (arg.startsWith("-")) return arg;
-    const isName = !nameSeen;
-    nameSeen = true;
-    return isName ? arg : CREDENTIAL_VALUE;
-  });
-}
-function resolveTarget() {
-  const raw = debugLogSetting();
-  if (!raw) {
-    return void 0;
-  }
-  const lower = raw.toLowerCase();
-  if (BOOLEAN_OFF.has(lower)) {
-    return void 0;
-  }
-  const target = BOOLEAN_ON.has(lower) ? DEFAULT_FILE : raw;
-  return isAbsolute(target) ? target : resolve(process.cwd(), target);
-}
-function isDebugLogEnabled() {
-  return resolveTarget() !== void 0;
-}
-var sessionId;
-function getSessionId() {
-  if (!sessionId) {
-    sessionId = `${process.pid}-${Date.now()}`;
-  }
-  return sessionId;
-}
-var trackedPath;
-var bytesInFile = 0;
-function ensureReady(filePath) {
-  if (trackedPath !== filePath) {
-    trackedPath = filePath;
-    mkdirSync(dirname(filePath), { recursive: true });
-    try {
-      bytesInFile = statSync(filePath).size;
-    } catch {
-      bytesInFile = 0;
-    }
-  }
-}
-function append(entry) {
-  const filePath = resolveTarget();
-  if (!filePath) {
-    return;
-  }
-  try {
-    const payload = { ts: (/* @__PURE__ */ new Date()).toISOString(), session: getSessionId(), ...entry };
-    const line = `${redactSecrets(JSON.stringify(payload))}
-`;
-    ensureReady(filePath);
-    const size = Buffer.byteLength(line);
-    if (bytesInFile + size > MAX_BYTES) {
-      renameSync(filePath, `${filePath}.1`);
-      bytesInFile = 0;
-    }
-    appendFileSync(filePath, line);
-    bytesInFile += size;
-  } catch {
-  }
-}
-function errorToPlain(err) {
-  if (err instanceof Error) {
-    const code = err.code;
-    return { name: err.name, message: err.message, ...typeof code === "string" ? { code } : {} };
-  }
-  return { message: String(err) };
-}
-var invocationStartedAt;
-function logInvocation(argv) {
-  invocationStartedAt = Date.now();
-  append({ kind: "invocation", argv: argvWithoutCredentialValue(argv), cwd: process.cwd() });
-}
-function logExit(code) {
-  append({
-    kind: "exit",
-    code,
-    ...invocationStartedAt === void 0 ? {} : { durationMs: Date.now() - invocationStartedAt }
-  });
-}
-var exitHookInstalled = false;
-function installExitRecord() {
-  if (exitHookInstalled || !isDebugLogEnabled()) {
-    return;
-  }
-  exitHookInstalled = true;
-  process.on("exit", (code) => {
-    logExit(typeof code === "number" ? code : 0);
-  });
-}
-function debugLogHttp(entry) {
-  if (!isDebugLogEnabled()) {
-    return;
-  }
-  append({
-    kind: "http",
-    source: entry.source,
-    method: entry.method,
-    url: entry.url,
-    durationMs: entry.durationMs,
-    request: withoutCredentialValue(entry.url, entry.requestBody),
-    status: entry.status,
-    ok: entry.ok,
-    response: entry.responseBody,
-    error: entry.error === void 0 ? void 0 : errorToPlain(entry.error)
-  });
-}
-async function readBodyForLog(response) {
-  if (!isDebugLogEnabled()) {
-    return void 0;
-  }
-  try {
-    return await response.clone().text();
-  } catch {
-    return void 0;
-  }
-}
-function tapStream(name, stream) {
-  const original = stream.write.bind(stream);
-  const decoder = new TextDecoder("utf-8");
-  stream.write = ((chunk, ...rest) => {
-    try {
-      const text = typeof chunk === "string" ? chunk : chunk instanceof Uint8Array ? decoder.decode(chunk, { stream: true }) : String(chunk);
-      append({ kind: "output", stream: name, text });
-    } catch {
-    }
-    return original(chunk, ...rest);
-  });
-}
-var tapsInstalled = false;
-function installStreamTaps() {
-  if (tapsInstalled || !isDebugLogEnabled()) {
-    return;
-  }
-  tapsInstalled = true;
-  tapStream("stdout", process.stdout);
-  tapStream("stderr", process.stderr);
-}
-
-export {
-  logInvocation,
-  installExitRecord,
-  debugLogHttp,
-  readBodyForLog,
-  installStreamTaps
-};
-//# sourceMappingURL=chunk-ELAYD7O3.js.map