@koda-sl/baker-cli 0.571.0-dev.6a3439a0a → 0.572.0-dev.61ba69c66

package/dist/chunk-S4RCF3YT.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/commands/creatives/rule-candidate.ts"],"sourcesContent":["/**\n * Whether what a person said about one ad is a standing rule for every ad, and the rule it states.\n * One angry note never becomes a rule by itself: a model drafts a rule only where it can quote the\n * note's own words that make it hold beyond this ad (`draftRules`), the person is asked once and says\n * yes, and `baker creatives rules add` tests it against the version it came from and the company's\n * approved ones before it is saved. Measured on the 65 production notes of\n * scripts/creative-rules-evals/cases.json (standing.mts): precision 0.92, recall 0.55; the decision\n * model's yes/no on the note never passed 0.83 at a useful recall, a long note mixing one-off fixes\n * with a rule reading as a fix.\n *\n * Prod, Oct 2026: most of the company's rules lived only as rejection notes (\"100 % online\", no AI\n * people, the business unit's logo, no dates, one voice per video) and nothing turned them into one.\n */\nimport { createHash } from \"node:crypto\";\nimport { mkdir, readFile, writeFile } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { CREATIVE_FEEDBACK_REASON_LABELS, type CreativeFeedbackNote, type CreativeFeedbackReason } from \"@baker/api\";\nimport { z } from \"zod\";\nimport { Phrases, RULE_APPLIES, RULE_KINDS, RULE_STRENGTHS } from \"../../engine/creative-rules/schema.ts\";\nimport { askAboutText, type ReviewUsage } from \"../../engine/nodes/local/lib/render-review.ts\";\nimport { holdWorkspaceSpend } from \"../canvas/unbilled-spend.ts\";\n\n/** A rule as a model drafts it from a note, before the person says yes. */\nexport type RuleDraft = {\n  /** The rule, in the person's own language, one sentence. */\n  text: string;\n  strength: (typeof RULE_STRENGTHS)[number];\n  applies: (typeof RULE_APPLIES)[number];\n  /** The language the note is in (BCP-47 primary tag): its phrases are checked only in ads in it. */\n  language?: string;\n  kinds?: Array<(typeof RULE_KINDS)[number]>;\n  platforms?: string[];\n  forbid?: string[];\n  require?: string[];\n  allow?: string[];\n  people?: \"real\";\n};\n\nconst optionalPhrases = Phrases.optional().catch(undefined);\nconst Draft = z.object({\n  because: z.string().trim().min(3).max(400),\n  text: z.string().trim().min(1).max(300),\n  strength: z.enum(RULE_STRENGTHS).catch(\"must\"),\n  applies: z.enum(RULE_APPLIES).catch(\"any\"),\n  language: z\n    .string()\n    .trim()\n    .regex(/^[a-z]{2,3}$/)\n    .optional()\n    .catch(undefined),\n  kinds: z.array(z.enum(RULE_KINDS)).optional().catch(undefined),\n  platforms: optionalPhrases,\n  forbid: optionalPhrases,\n  require: optionalPhrases,\n  allow: optionalPhrases,\n  people: z.literal(\"real\").optional().catch(undefined),\n});\n\n/** The model's drafts, every malformed one dropped, the empty lists left out. Pure. */\nexport function parseDrafts(answer: unknown): RuleDraft[] {\n  const rules = (answer as { rules?: unknown } | null)?.rules;\n  if (!Array.isArray(rules)) return [];\n  return rules.slice(0, MAX_DRAFTS).flatMap((raw) => {\n    const draft = Draft.safeParse(raw);\n    if (!draft.success) return [];\n    const { because: _because, ...rule } = draft.data;\n    return [\n      Object.fromEntries(\n        Object.entries(rule).filter(([, v]) => v !== undefined && !(Array.isArray(v) && v.length === 0)),\n      ) as RuleDraft,\n    ];\n  });\n}\n\n/** A note states a few rules at most; more is a note that lists one-off changes. */\nconst MAX_DRAFTS = 3;\n\n/** The question the drafting model answers. Pure. */\nexport function draftRulesPrompt(note: string, ad: { kind?: \"static\" | \"video\"; platform?: string }): string {\n  const where = [ad.kind ? `a ${ad.kind} ad` : \"an ad\", ad.platform ? `for ${ad.platform}` : \"\"]\n    .filter(Boolean)\n    .join(\" \");\n  return [\n    `A person rejected ${where} and said, in their own words:`,\n    `\"\"\"${note}\"\"\"`,\n    \"\",\n    \"List only the standing rules this note states for EVERY future ad of the company (at most 3). Most notes state none: they ask for changes to this ad (fix a word, move the logo, speed up a scene, redo the pieces), and a change to this ad is never a rule, however it is phrased. A rule is standing only when the note itself says it holds beyond this ad (always, never, in every video, in these creatives, these mistakes keep happening, it is the format of the programme, the rule of the other pieces), or it corrects how the company or what it sells must always be named.\",\n    \"For each rule, quote in `because` the note's own words that make it hold beyond this ad; a rule you cannot quote that for is not a rule. Return JSON only:\",\n    '{\"rules\": [{\"because\": string, \"text\": string, \"strength\": \"never\" | \"must\" | \"prefer\", \"applies\": \"copy\" | \"picture\" | \"cast\" | \"logo\" | \"voice\" | \"sound\" | \"subtitles\" | \"any\", \"language\": string, \"kinds\": [\"static\" | \"video\"], \"platforms\": string[], \"forbid\": string[], \"require\": string[], \"allow\": string[], \"people\": \"real\" | null}]}',\n    \"- text: the rule in one short sentence, in the note's own language and close to its words.\",\n    '- strength: \"never\" for a ban, \"must\" for something every ad has to do, \"prefer\" for a taste.',\n    '- applies: what of the ad it is about (\"copy\" for its words, \"picture\", \"cast\" for who appears, \"logo\", \"voice\", \"sound\", \"subtitles\"), else \"any\".',\n    '- language: the note\\'s language as a two-letter code (\"es\").',\n    '- kinds and platforms: only when the note limits the rule to them (\"en estos creativos de linkedin\" gives platforms [\"linkedin\"]); else [].',\n    '- forbid: the exact words the rule bans in the ad\\'s words, only when a word or phrase decides it (\"100 % online\", not \"online\" gives forbid [\"online\"], allow [\"100 % online\"]); else []. require: words every ad must say; usually []. allow: the right phrase that contains a banned word.',\n    '- people: \"real\" only when the rule is that no AI-made or invented people appear; else null.',\n    'Return {\"rules\": []} when the note states no standing rule.',\n  ].join(\"\\n\");\n}\n\n/** Drafts the rules a note states, or none when it states none or no model answered. */\nexport type DraftRules = (note: string, ad: { kind?: \"static\" | \"video\"; platform?: string }) => Promise<RuleDraft[]>;\n\n/** Pinned and kept by the note, so the same note drafts the same rule. */\nexport const RULE_DRAFT_MODEL = \"google/gemini-3.5-flash\";\nconst DRAFT_REQUEST = {\n  provider: { order: [\"google-vertex\"], allow_fallbacks: false },\n  seed: 0,\n  reasoning: { effort: \"low\" },\n  response_format: { type: \"json_object\" },\n};\nconst DRAFT_TIMEOUT_MS = 30_000;\n\n/** The live drafting model, its answers kept in `cacheDir` by the prompt and its spend held for the next bill. */\nexport function modelRuleDrafter(cacheDir: string): DraftRules {\n  return async (note, ad) => {\n    const prompt = draftRulesPrompt(note, ad);\n    const key = createHash(\"sha256\")\n      .update(JSON.stringify([RULE_DRAFT_MODEL, prompt]))\n      .digest(\"hex\")\n      .slice(0, 16);\n    const file = path.join(cacheDir, \"rule-drafts\", `${key}.json`);\n    const cached = await readFile(file, \"utf8\").then(\n      (raw) => parseDrafts(JSON.parse(raw)),\n      () => null,\n    );\n    if (cached) return cached;\n    const spent: ReviewUsage[] = [];\n    const answer = await askAboutText(RULE_DRAFT_MODEL, prompt, (u) => spent.push(u), {\n      timeoutMs: DRAFT_TIMEOUT_MS,\n      request: DRAFT_REQUEST,\n    }).catch(() => null);\n    await holdWorkspaceSpend(spent);\n    if (answer === null) return [];\n    await mkdir(path.dirname(file), { recursive: true }).catch(() => undefined);\n    await writeFile(file, JSON.stringify(answer), \"utf8\").catch(() => undefined);\n    return parseDrafts(answer);\n  };\n}\n\n/** The rules a rejection's note states for every ad, drafted for the person to confirm; none when it states none. */\nexport async function ruleCandidates(\n  note: string | undefined,\n  ad: { kind?: \"static\" | \"video\"; platform?: string },\n  draft: DraftRules,\n): Promise<RuleDraft[]> {\n  const text = note?.trim();\n  if (!text) return [];\n  return await draft(text, ad).catch(() => []);\n}\n\n/** A drafted rule kept for `baker creatives rules add --candidate <id>`, with the words and version it came from. */\nexport type SavedCandidate = RuleDraft & { source: { slug?: string; runId?: string; quote?: string } };\n\nconst candidatesDir = (cacheDir: string) => path.join(cacheDir, \"rule-candidates\");\n\n/** Keeps each candidate under a short id its words decide, and returns the ids, in order. */\nexport async function saveCandidates(cacheDir: string, candidates: readonly SavedCandidate[]): Promise<string[]> {\n  await mkdir(candidatesDir(cacheDir), { recursive: true });\n  return await Promise.all(\n    candidates.map(async (c) => {\n      const id = `rc-${createHash(\"sha256\").update(JSON.stringify(c)).digest(\"hex\").slice(0, 8)}`;\n      await writeFile(path.join(candidatesDir(cacheDir), `${id}.json`), JSON.stringify(c), \"utf8\");\n      return id;\n    }),\n  );\n}\n\n/** A kept candidate, or null when there is none by that id. */\nexport async function loadCandidate(cacheDir: string, id: string): Promise<SavedCandidate | null> {\n  if (!/^rc-[0-9a-f]{8}$/.test(id)) return null;\n  return await readFile(path.join(candidatesDir(cacheDir), `${id}.json`), \"utf8\").then(\n    (raw) => JSON.parse(raw) as SavedCandidate,\n    () => null,\n  );\n}\n\n/** A reason the company gave on this many other ads is a pattern, not one person's bad day. */\nconst REPEATED_ON = 2;\nconst REPEATED_NOTES = 3;\n\nexport type RepeatedReason = { label: string; creatives: number; notes: string[] };\n\n/**\n * Each reason of this rejection the company already gave on two or more other ads, with their\n * words: a rule proposed first, even when no one note states it. Pure.\n */\nexport function repeatedReasons(\n  notes: ReadonlyArray<Pick<CreativeFeedbackNote, \"creative\" | \"reasons\" | \"note\">>,\n  reasons: readonly CreativeFeedbackReason[],\n  slug: string,\n): RepeatedReason[] {\n  return reasons.flatMap((reason) => {\n    const others = notes.filter((n) => n.creative !== slug && n.reasons.includes(reason));\n    const creatives = new Set(others.map((n) => n.creative)).size;\n    return creatives >= REPEATED_ON\n      ? [\n          {\n            label: CREATIVE_FEEDBACK_REASON_LABELS[reason],\n            creatives,\n            notes: [...new Set(others.map((n) => n.note))].slice(0, REPEATED_NOTES),\n          },\n        ]\n      : [];\n  });\n}\n\n/** What the agent does with the rules a note states: ask the person once, save only on yes. Pure. */\nexport function ruleCandidateHints(\n  drafted: ReadonlyArray<{ id: string; text: string }>,\n  repeated: readonly RepeatedReason[],\n): string[] {\n  const asks = drafted.map(\n    (d) =>\n      `Their words state a rule for every ad: \"${d.text}\". Ask them once, in their language: make this a rule for every ad from now on? Only on yes: \\`baker creatives rules add --candidate ${d.id}\\` (reword it with --text if they correct it). On no, never ask again in this chat.`,\n  );\n  const patterns = repeated.map(\n    (r) =>\n      `\"${r.label}\" was also the reason on ${r.creatives} other ads (their words: ${r.notes.map((n) => `\"${n}\"`).join(\"; \")}). ${drafted.length > 0 ? \"Say so when you ask.\" : 'Ask them once whether there is a rule for every ad behind it; on yes, `baker creatives rules add --text \"<the rule, in their words>\" …`.'}`,\n  );\n  return [...asks, ...patterns];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAaA,SAAS,kBAAkB;AAC3B,SAAS,OAAO,UAAU,iBAAiB;AAC3C,OAAO,UAAU;AAEjB,SAAS,SAAS;AAqBlB,IAAM,kBAAkB,QAAQ,SAAS,EAAE,MAAM,MAAS;AAC1D,IAAM,QAAQ,EAAE,OAAO;AAAA,EACrB,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACzC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACtC,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,MAAM;AAAA,EAC7C,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,KAAK;AAAA,EACzC,UAAU,EACP,OAAO,EACP,KAAK,EACL,MAAM,cAAc,EACpB,SAAS,EACT,MAAM,MAAS;AAAA,EAClB,OAAO,EAAE,MAAM,EAAE,KAAK,UAAU,CAAC,EAAE,SAAS,EAAE,MAAM,MAAS;AAAA,EAC7D,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ,EAAE,QAAQ,MAAM,EAAE,SAAS,EAAE,MAAM,MAAS;AACtD,CAAC;AAGM,SAAS,YAAY,QAA8B;AACxD,QAAM,QAAS,QAAuC;AACtD,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,SAAO,MAAM,MAAM,GAAG,UAAU,EAAE,QAAQ,CAAC,QAAQ;AACjD,UAAM,QAAQ,MAAM,UAAU,GAAG;AACjC,QAAI,CAAC,MAAM,QAAS,QAAO,CAAC;AAC5B,UAAM,EAAE,SAAS,UAAU,GAAG,KAAK,IAAI,MAAM;AAC7C,WAAO;AAAA,MACL,OAAO;AAAA,QACL,OAAO,QAAQ,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,UAAa,EAAE,MAAM,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE;AAAA,MACjG;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAGA,IAAM,aAAa;AAGZ,SAAS,iBAAiB,MAAc,IAA8D;AAC3G,QAAM,QAAQ,CAAC,GAAG,OAAO,KAAK,GAAG,IAAI,QAAQ,SAAS,GAAG,WAAW,OAAO,GAAG,QAAQ,KAAK,EAAE,EAC1F,OAAO,OAAO,EACd,KAAK,GAAG;AACX,SAAO;AAAA,IACL,qBAAqB,KAAK;AAAA,IAC1B,MAAM,IAAI;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAMO,IAAM,mBAAmB;AAChC,IAAM,gBAAgB;AAAA,EACpB,UAAU,EAAE,OAAO,CAAC,eAAe,GAAG,iBAAiB,MAAM;AAAA,EAC7D,MAAM;AAAA,EACN,WAAW,EAAE,QAAQ,MAAM;AAAA,EAC3B,iBAAiB,EAAE,MAAM,cAAc;AACzC;AACA,IAAM,mBAAmB;AAGlB,SAAS,iBAAiB,UAA8B;AAC7D,SAAO,OAAO,MAAM,OAAO;AACzB,UAAM,SAAS,iBAAiB,MAAM,EAAE;AACxC,UAAM,MAAM,WAAW,QAAQ,EAC5B,OAAO,KAAK,UAAU,CAAC,kBAAkB,MAAM,CAAC,CAAC,EACjD,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE;AACd,UAAM,OAAO,KAAK,KAAK,UAAU,eAAe,GAAG,GAAG,OAAO;AAC7D,UAAM,SAAS,MAAM,SAAS,MAAM,MAAM,EAAE;AAAA,MAC1C,CAAC,QAAQ,YAAY,KAAK,MAAM,GAAG,CAAC;AAAA,MACpC,MAAM;AAAA,IACR;AACA,QAAI,OAAQ,QAAO;AACnB,UAAM,QAAuB,CAAC;AAC9B,UAAM,SAAS,MAAM,aAAa,kBAAkB,QAAQ,CAAC,MAAM,MAAM,KAAK,CAAC,GAAG;AAAA,MAChF,WAAW;AAAA,MACX,SAAS;AAAA,IACX,CAAC,EAAE,MAAM,MAAM,IAAI;AACnB,UAAM,mBAAmB,KAAK;AAC9B,QAAI,WAAW,KAAM,QAAO,CAAC;AAC7B,UAAM,MAAM,KAAK,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AAC1E,UAAM,UAAU,MAAM,KAAK,UAAU,MAAM,GAAG,MAAM,EAAE,MAAM,MAAM,MAAS;AAC3E,WAAO,YAAY,MAAM;AAAA,EAC3B;AACF;AAGA,eAAsB,eACpB,MACA,IACA,OACsB;AACtB,QAAM,OAAO,MAAM,KAAK;AACxB,MAAI,CAAC,KAAM,QAAO,CAAC;AACnB,SAAO,MAAM,MAAM,MAAM,EAAE,EAAE,MAAM,MAAM,CAAC,CAAC;AAC7C;AAKA,IAAM,gBAAgB,CAAC,aAAqB,KAAK,KAAK,UAAU,iBAAiB;AAGjF,eAAsB,eAAe,UAAkB,YAA0D;AAC/G,QAAM,MAAM,cAAc,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AACxD,SAAO,MAAM,QAAQ;AAAA,IACnB,WAAW,IAAI,OAAO,MAAM;AAC1B,YAAM,KAAK,MAAM,WAAW,QAAQ,EAAE,OAAO,KAAK,UAAU,CAAC,CAAC,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,CAAC,CAAC;AACzF,YAAM,UAAU,KAAK,KAAK,cAAc,QAAQ,GAAG,GAAG,EAAE,OAAO,GAAG,KAAK,UAAU,CAAC,GAAG,MAAM;AAC3F,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AACF;AAGA,eAAsB,cAAc,UAAkB,IAA4C;AAChG,MAAI,CAAC,mBAAmB,KAAK,EAAE,EAAG,QAAO;AACzC,SAAO,MAAM,SAAS,KAAK,KAAK,cAAc,QAAQ,GAAG,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE;AAAA,IAC9E,CAAC,QAAQ,KAAK,MAAM,GAAG;AAAA,IACvB,MAAM;AAAA,EACR;AACF;AAGA,IAAM,cAAc;AACpB,IAAM,iBAAiB;AAQhB,SAAS,gBACd,OACA,SACA,MACkB;AAClB,SAAO,QAAQ,QAAQ,CAAC,WAAW;AACjC,UAAM,SAAS,MAAM,OAAO,CAAC,MAAM,EAAE,aAAa,QAAQ,EAAE,QAAQ,SAAS,MAAM,CAAC;AACpF,UAAM,YAAY,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;AACzD,WAAO,aAAa,cAChB;AAAA,MACE;AAAA,QACE,OAAO,gCAAgC,MAAM;AAAA,QAC7C;AAAA,QACA,OAAO,CAAC,GAAG,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,cAAc;AAAA,MACxE;AAAA,IACF,IACA,CAAC;AAAA,EACP,CAAC;AACH;AAGO,SAAS,mBACd,SACA,UACU;AACV,QAAM,OAAO,QAAQ;AAAA,IACnB,CAAC,MACC,2CAA2C,EAAE,IAAI,wIAAwI,EAAE,EAAE;AAAA,EACjM;AACA,QAAM,WAAW,SAAS;AAAA,IACxB,CAAC,MACC,IAAI,EAAE,KAAK,4BAA4B,EAAE,SAAS,4BAA4B,EAAE,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI,CAAC,MAAM,QAAQ,SAAS,IAAI,yBAAyB,+IAA0I;AAAA,EACvT;AACA,SAAO,CAAC,GAAG,MAAM,GAAG,QAAQ;AAC9B;","names":[]}

package/dist/chunk-S5S54J2K.js

@@ -1,56 +0,0 @@
-import {
-  ApiError,
-  apiGet
-} from "./chunk-LJEJCIHR.js";
-import {
-  compactImage,
-  compactVideo,
-  writeJson
-} from "./chunk-NXNOXZGB.js";
-
-// src/commands/mediaGroup.ts
-async function runMediaGroupLookup(input) {
-  if (!input.id && !input.groupKey) {
-    writeJson({
-      ok: false,
-      error: { code: "VALIDATION_ERROR", message: `Pass ${input.idLabel} or --group-key` }
-    });
-    process.exit(1);
-  }
-  try {
-    const query = new URLSearchParams();
-    if (input.id) query.set("id", input.id);
-    if (input.groupKey) query.set("groupKey", input.groupKey);
-    const data = await apiGet(`${input.path}?${query.toString()}`);
-    const images = data.images.map((image) => compactImage(image));
-    const videos = (data.videos ?? []).map((video) => compactVideo(video));
-    const count = images.length + videos.length;
-    writeJson({
-      ok: true,
-      data: {
-        groupKey: data.groupKey,
-        groupKind: data.groupKind ?? null,
-        // The caption or page title the whole set shares — often the only
-        // place the campaign is named.
-        groupTitle: data.groupTitle ?? null,
-        groupUrl: data.groupUrl ?? null,
-        count,
-        images,
-        videos
-      },
-      hints: count > 1 ? ["These arrived together and are ordered. Read them in sequence before using any one of them alone."] : void 0
-    });
-  } catch (err) {
-    if (err instanceof ApiError) {
-      writeJson({ ok: false, error: { code: err.code, message: err.message } });
-      process.exit(1);
-    }
-    writeJson({ ok: false, error: { code: "INTERNAL_ERROR", message: "Unexpected error" } });
-    process.exit(1);
-  }
-}
-
-export {
-  runMediaGroupLookup
-};
-//# sourceMappingURL=chunk-S5S54J2K.js.map

package/dist/chunk-SIRRBWQ2.js

@@ -1,215 +0,0 @@
-import {
-  debugLogSetting
-} from "./chunk-B64KJW5C.js";
-
-// src/debugLog.ts
-import { appendFileSync, mkdirSync, renameSync, statSync } from "fs";
-import { dirname, isAbsolute, resolve } from "path";
-var DEFAULT_FILE = "baker-cli-debug.jsonl";
-var BOOLEAN_ON = /* @__PURE__ */ new Set(["1", "true", "on", "yes"]);
-var BOOLEAN_OFF = /* @__PURE__ */ new Set(["0", "false", "off", "no"]);
-var MAX_BYTES = 64 * 1024 * 1024;
-var REDACTIONS = [
-  [/Bearer\s+[A-Za-z0-9._-]+/g, "Bearer [redacted]"],
-  // Authorization headers
-  // Every prefix, captured rather than listed thrice: `bkr_` and `bkv_` do not
-  // contain the literal `bk_`, so the company-key rule matched no part of the
-  // read-only credentials a Session review or a published report runs with.
-  [/\b(bk[rv]?)_[A-Za-z0-9]+/g, "$1_[redacted]"],
-  // Baker API keys
-  [/eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g, "[redacted-jwt]"],
-  // JWTs / id tokens
-  [/ya29\.[A-Za-z0-9._-]+/g, "[redacted-google-token]"],
-  // Google OAuth access tokens
-  [/1\/\/[A-Za-z0-9._-]+/g, "[redacted-google-refresh]"],
-  // Google refresh tokens
-  [/EAA[A-Za-z0-9]{20,}/g, "[redacted-meta-token]"]
-  // Meta/Facebook access tokens
-];
-function redactSecrets(input) {
-  let out = input;
-  for (const [pattern, replacement] of REDACTIONS) {
-    out = out.replace(pattern, replacement);
-  }
-  return out;
-}
-var CREDENTIAL_VALUE = "[credential value]";
-var CREDENTIAL_PUT_PATH = "/api/credentials/put";
-function withoutCredentialValue(url, body) {
-  let path;
-  try {
-    path = new URL(url).pathname;
-  } catch {
-    path = url;
-  }
-  if (path !== CREDENTIAL_PUT_PATH || body === null || typeof body !== "object" || !("value" in body)) {
-    return body;
-  }
-  return { ...body, value: CREDENTIAL_VALUE };
-}
-var PUT_FLAGS_WITH_VALUES = /* @__PURE__ */ new Set(["--host", "--label"]);
-function argvWithoutCredentialValue(argv) {
-  if (argv[0] !== "credentials" || argv[1] !== "put") {
-    return argv;
-  }
-  let nameSeen = false;
-  let keepNext = false;
-  let redactNext = false;
-  return argv.map((arg, index) => {
-    if (index < 2) return arg;
-    if (keepNext || redactNext) {
-      const kept = keepNext ? arg : CREDENTIAL_VALUE;
-      keepNext = false;
-      redactNext = false;
-      return kept;
-    }
-    if (arg.startsWith("--value=")) return `--value=${CREDENTIAL_VALUE}`;
-    redactNext = arg === "--value";
-    keepNext = PUT_FLAGS_WITH_VALUES.has(arg);
-    if (arg.startsWith("-")) return arg;
-    const isName = !nameSeen;
-    nameSeen = true;
-    return isName ? arg : CREDENTIAL_VALUE;
-  });
-}
-function resolveTarget() {
-  const raw = debugLogSetting();
-  if (!raw) {
-    return void 0;
-  }
-  const lower = raw.toLowerCase();
-  if (BOOLEAN_OFF.has(lower)) {
-    return void 0;
-  }
-  const target = BOOLEAN_ON.has(lower) ? DEFAULT_FILE : raw;
-  return isAbsolute(target) ? target : resolve(process.cwd(), target);
-}
-function isDebugLogEnabled() {
-  return resolveTarget() !== void 0;
-}
-var sessionId;
-function getSessionId() {
-  if (!sessionId) {
-    sessionId = `${process.pid}-${Date.now()}`;
-  }
-  return sessionId;
-}
-var trackedPath;
-var bytesInFile = 0;
-function ensureReady(filePath) {
-  if (trackedPath !== filePath) {
-    trackedPath = filePath;
-    mkdirSync(dirname(filePath), { recursive: true });
-    try {
-      bytesInFile = statSync(filePath).size;
-    } catch {
-      bytesInFile = 0;
-    }
-  }
-}
-function append(entry) {
-  const filePath = resolveTarget();
-  if (!filePath) {
-    return;
-  }
-  try {
-    const payload = { ts: (/* @__PURE__ */ new Date()).toISOString(), session: getSessionId(), ...entry };
-    const line = `${redactSecrets(JSON.stringify(payload))}
-`;
-    ensureReady(filePath);
-    const size = Buffer.byteLength(line);
-    if (bytesInFile + size > MAX_BYTES) {
-      renameSync(filePath, `${filePath}.1`);
-      bytesInFile = 0;
-    }
-    appendFileSync(filePath, line);
-    bytesInFile += size;
-  } catch {
-  }
-}
-function errorToPlain(err) {
-  if (err instanceof Error) {
-    const code = err.code;
-    return { name: err.name, message: err.message, ...typeof code === "string" ? { code } : {} };
-  }
-  return { message: String(err) };
-}
-var invocationStartedAt;
-function logInvocation(argv) {
-  invocationStartedAt = Date.now();
-  append({ kind: "invocation", argv: argvWithoutCredentialValue(argv), cwd: process.cwd() });
-}
-function logExit(code) {
-  append({
-    kind: "exit",
-    code,
-    ...invocationStartedAt === void 0 ? {} : { durationMs: Date.now() - invocationStartedAt }
-  });
-}
-var exitHookInstalled = false;
-function installExitRecord() {
-  if (exitHookInstalled || !isDebugLogEnabled()) {
-    return;
-  }
-  exitHookInstalled = true;
-  process.on("exit", (code) => {
-    logExit(typeof code === "number" ? code : 0);
-  });
-}
-function debugLogHttp(entry) {
-  if (!isDebugLogEnabled()) {
-    return;
-  }
-  append({
-    kind: "http",
-    source: entry.source,
-    method: entry.method,
-    url: entry.url,
-    durationMs: entry.durationMs,
-    request: withoutCredentialValue(entry.url, entry.requestBody),
-    status: entry.status,
-    ok: entry.ok,
-    response: entry.responseBody,
-    error: entry.error === void 0 ? void 0 : errorToPlain(entry.error)
-  });
-}
-async function readBodyForLog(response) {
-  if (!isDebugLogEnabled()) {
-    return void 0;
-  }
-  try {
-    return await response.clone().text();
-  } catch {
-    return void 0;
-  }
-}
-function tapStream(name, stream) {
-  const original = stream.write.bind(stream);
-  const decoder = new TextDecoder("utf-8");
-  stream.write = ((chunk, ...rest) => {
-    try {
-      const text = typeof chunk === "string" ? chunk : chunk instanceof Uint8Array ? decoder.decode(chunk, { stream: true }) : String(chunk);
-      append({ kind: "output", stream: name, text });
-    } catch {
-    }
-    return original(chunk, ...rest);
-  });
-}
-var tapsInstalled = false;
-function installStreamTaps() {
-  if (tapsInstalled || !isDebugLogEnabled()) {
-    return;
-  }
-  tapsInstalled = true;
-  tapStream("stdout", process.stdout);
-  tapStream("stderr", process.stderr);
-}
-
-export {
-  logInvocation,
-  installExitRecord,
-  debugLogHttp,
-  readBodyForLog,
-  installStreamTaps
-};
-//# sourceMappingURL=chunk-SIRRBWQ2.js.map