@koda-sl/baker-cli 0.573.0 → 0.574.0

package/README.md

@@ -41,10 +41,10 @@ export BAKER_CHAT_ID="<chat-id>"
 - A malformed `BAKER_GOOGLE_ADS_CUSTOMER_ID`, `BAKER_LINKEDIN_AD_ACCOUNT_ID` or `BAKER_X_ADS_ACCOUNT_ID` ends it with `VALIDATION_ERROR` instead, whose `fix` says to correct or unset the variable
 - `BAKER_API_URL` is your Convex site URL — the deployment the CLI talks to, not an address to show anybody
 - `BAKER_PUBLIC_API_URL` — Baker's own host for the public API (`https://api.withbaker.com`). Set for you; not one to export by hand. It is what `analytics sending-events` publishes the `POST /v1/events` contract on, so that an integration written by a client's developers never names a deployment. Where it is unset the contract falls back to `BAKER_API_URL`, which keeps the printed request runnable against a deployment that fronts itself.
-- `BAKER_GOOGLE_ADS_CUSTOMER_ID` — default Google Ads customer ID (10 digits). Used when `--customer-id` is not passed. If neither is set and the account has exactly one Google Ads customer, it is auto-selected.
+- `BAKER_GOOGLE_ADS_CUSTOMER_ID` — default Google Ads customer ID (10 digits). Used when `--customer-id` is not passed (`--customer-id` takes `386-508-3115` as the UI writes it too). If neither is set and the account has exactly one Google Ads customer, it is auto-selected.
 - `BAKER_GA4_PROPERTY_ID` — default GA4 property ID. Used when `--property-id` is not passed. If neither is set and exactly one property is connected, it is auto-selected.
 - `BAKER_GSC_SITE_URL` — default GSC site URL. Used when `--site-url` is not passed. If neither is set and exactly one site is verified, it is auto-selected.
-- `BAKER_META_AD_ACCOUNT_ID` — default Meta ad account ID (`act_<n>` or the bare number). Used when `--account-id` is not passed. If neither is set and exactly one Meta ad account is connected, it is auto-selected; with several, the command refuses with `MISSING_ACCOUNT_ID` and lists them.
+- `BAKER_META_AD_ACCOUNT_ID` / `BAKER_LINKEDIN_AD_ACCOUNT_ID` — default Meta / LinkedIn ad account (Meta: `act_<n>` or the bare number). Used when `--account-id` is not passed. If neither is set and exactly one ad account is selected, it is auto-selected; with several, the command refuses with `MISSING_ACCOUNT_ID` and lists them; an `--account-id` the company did not select is refused with `UNKNOWN_ACCOUNT`, listing the ones it did.
 - `BAKER_X_ADS_ACCOUNT_ID` — default X Ads account ID (base36). Used when `--account-id` is not passed. If neither is set and exactly one X Ads account is connected, it is auto-selected.
 - `BAKER_CHAT_ID` — the chat every staging command stages against (ads on every platform, tags, Tag Manager, GA4, Work Actions, Scheduled agents, site, funnel, Shopify, …). `scheduled-agents run` does not require it. When set, it is also sent as an `x-baker-chat-id` header on every request, so library additions that apply immediately (images, videos, followed brands) are listed in that chat's changes as already applied.
 - `BAKER_THREAD_ID` — set per turn by the sandbox. Sent as an `x-baker-thread-id` header alongside the chat header, so the tools a command reports or changes are those of whoever sent this turn, even while someone else writes in another thread of the same chat.
@@ -363,7 +363,7 @@ baker ads google currency --customer-id 5904042878
 
 | Flag            | Description                                    |
 |-----------------|------------------------------------------------|
-| `--customer-id` | Google Ads customer ID (10 digits, no dashes). Falls back to `BAKER_GOOGLE_ADS_CUSTOMER_ID` env var. |
+| `--customer-id` | Google Ads customer ID (10 digits; dashes are fine). Falls back to `BAKER_GOOGLE_ADS_CUSTOMER_ID` env var. |
 | `--no-cache`    | Skip cache (24h TTL)                           |
 
 ---
@@ -519,7 +519,7 @@ Each warning is printed once, on stdout — never also on stderr — so `--outpu
 
 | Flag            | Description                                                  |
 |-----------------|--------------------------------------------------------------|
-| `--customer-id` | Google Ads customer ID (10 digits, no dashes). Falls back to `BAKER_GOOGLE_ADS_CUSTOMER_ID` env var. |
+| `--customer-id` | Google Ads customer ID (10 digits; dashes are fine). Falls back to `BAKER_GOOGLE_ADS_CUSTOMER_ID` env var. |
 | `--preset`      | Named query template (see presets below)                     |
 | `--date-range`  | Override preset date range: a Google literal (LAST_7_DAYS, LAST_30_DAYS, LAST_MONTH, etc.) or `BETWEEN 'YYYY-MM-DD' AND 'YYYY-MM-DD'` — there is no LAST_90_DAYS |
 | `--include-paused` | Include paused entities in preset results. Off by default: presets return only actually-serving entities (enabled campaign **and** ad group **and** ad). Google Ads has no single serving flag, so the whole chain must be `ENABLED` for an entity to serve. |
@@ -1563,6 +1563,7 @@ baker ads linkedin preview 1611562694 --account-id 503001492
 
 # "Top companies seeing this campaign" (ABM feedback loop) — org names auto-resolved
 baker ads linkedin top-companies --campaign-id 1234 --last-days 30
+baker ads linkedin top-companies --targets targets.csv --last-days 60   # whole account, target accounts only
 
 # "Which companies are our ads reaching?" — one row per company over the whole period,
 # most engaged first ({org, name, impressions, clicks, engagements, costLocal}).
@@ -1572,6 +1573,8 @@ baker ads linkedin companies --page 2                              # companies 1
 baker ads linkedin companies --by month --min-impressions 50       # months[] per company
 baker ads linkedin companies --campaign-id 1,2 --by campaign       # campaigns[] per company
 baker ads linkedin companies --with-domains --stats --output csv   # + domain/domainSource; read-quality stats
+baker ads linkedin companies --targets targets.csv --tier 1        # target accounts only (+ targets.notReached)
+baker ads linkedin companies --with-firmographics --min-staff 500  # + industry, staffCount; only 500+ employees
 
 # "Who are these org URNs?" — resolve org URNs to company names (probe leakage)
 baker ads linkedin resolve --urns urn:li:organization:17719,urn:li:organization:19022
@@ -2495,6 +2498,17 @@ A Reddit thread link is not sent to Firecrawl (which refuses Reddit): it is read
 
 ---
 
+### `baker research people <domain|name>`
+
+Who likely holds a role at one company: one Google search of public LinkedIn profiles, every profile checked by a decision model (works there now, holds the role) and the rest dropped. Leads to confirm, never contacts; nothing is stored. Spends credits, so it needs **Outside data on people and companies** switched on in Settings → General; while it is off the call is refused (`FORBIDDEN`, `fix.action: "ask_admin"`).
+
+```bash
+baker research people acme.com --title "Chief Technology Officer,CTO"
+baker research people acme.io --name "Acme Robotics" --seniority VP --function Engineering
+```
+
+Flags: `--name` (the company as written on LinkedIn), `--title <"a,b">`, `--seniority <CXO|VP|Director|Owner|Partner|Manager|Senior>`, `--function <f>` (at least one of the three), `--limit <1-20>` (default 10), `--no-cache`. Returns `company`, `query`, `people[]` (`name`, `headline`, `profile_url`, `at_company`, `role_match`), `dropped`, `verified`. Cached 7 days per search.
+
 ### `baker research cite <url> "<span>"`
 
 Prove a quote word for word against its page and record the evidence. The page is read fresh (whole page), each span is checked verbatim (case, spacing, curly quotes and dashes forgiven; markdown link and emphasis marks ignored), and an evidence row is kept: URL, capture time, a hash of the page, and each span with the words around it.
@@ -4404,6 +4418,23 @@ baker decide --questions questions.json --items ads.json --state '{"advertiser":
 - Output: `{ model, answers | items: [{ id, answers | null }], unanswered, requests, costUsd }`. A noul is `{ noul }`; a choice `{ choice, probability, confidence }`; a score `{ score, level, confidence }`. `--full` adds every option's `probabilities`.
 - When the model does not answer, the error carries `fix.action: "degrade"`: carry on without the answers rather than abort.
 
+### Outside data (`baker data`)
+
+People and company data from Baker's data catalog: who works where, work emails and phones, company facts, open jobs, news. Baker holds the provider key, caps each call's price and charges the company's credits what the provider billed; a repeat within days is served from the cache at no cost.
+
+```bash
+baker data search "work email from a LinkedIn profile" [--platform people] [--limit 10]
+baker data describe treg.people.email.find
+baker data call treg.people.email.find --data '{"linkedin_url":"https://www.linkedin.com/in/…"}' --account acme.com
+baker data call blitzapi.people.employee-finder --data '{"company_linkedin_url":"https://www.linkedin.com/company/11016997","job_level":["Director"],"max_results":5}'
+```
+
+- `call` needs **Outside data on people and companies** switched on in Settings → General (off by default); while it is off `call` is refused with `fix.action: "ask_admin"` and `baker capabilities` shows the tool as not ready. `search` and `describe` are free and always answer. `search` lists routers (`treg.*`, which try providers cheapest first and bill only the answer) first, with price, hit rate, whether misses are billed, and why Baker refuses a tool.
+- `call` flags: `--data` (JSON body), `--query` (query parameters as a JSON object), `--max-cost` (USD, default 0.05, at most 1; a dearer call is refused unbilled), `--no-waterfall` (a router stops at the first miss), `--account <domain>` (remember found contacts against that company), `--full`, `--out <file>`, `--no-cache`.
+- Output: `{ id, costUsd, creditsUsed, account, servedBy, cached, pending, data, truncated }` (`creditsUsed`: 100 per dollar; `account`: the company the find was remembered against — a hint asks for `--account <domain>` when there is none). Compact by default; `--full` or `--out` for the whole answer. `search` and `describe` add a `notice` while Outside data is off.
+- `pending: true`: the provider is still working. The same call sent again within 6 hours answers `pending` for free; once it settles the answer is kept and repeats are free; a call unsettled after 6 hours is billed what was reserved. The cache ignores `--max-cost`; finds that reveal an email or phone are never cached (what was found comes back from `baker accounts people`).
+- A find of someone's email or phone needs **Contact details** switched on as well. Each answer says what the call used (`creditsUsed`) and what the chat or run has used on outside data so far (`chatCreditsUsed`); the company's credits are the only limit. Refusals carry `fix.action`: `ask_admin` (`OUTSIDE_DATA_OFF`, or Contact details off), `degrade` (out of credits — carry on without), `try_another_tool` or `fix_input`. Errors are in Baker's words, never the provider's.
+
 ### Scheduled agents (`baker scheduled-agents`)
 
 A Scheduled agent is a **trigger** and a **prompt**. When the trigger fires, a Session opens with that prompt and does the job — there is no Task in between. `create`, `update`, and `delete` stage draft ops on `BAKER_CHAT_ID` and apply when the chat is published. `unstage` takes back what this chat staged on one item before Publish (`--index <n>` for one change only, by its index in `list` → `draft.ops`). `list` and `get` include draft state when `BAKER_CHAT_ID` is set; `get` on a published item also returns `runsAs` — who each run acts as and which tools it loads. `run` fires a published item immediately and does not require a chat id. Publishing every run unreviewed is switched on by the user on the item, never through the CLI: `--auto-publish` is refused with an `ask_user` fix.
@@ -4810,7 +4841,7 @@ baker feedback report --kind feature --title "winning-ads cannot read one countr
 
 ---
 
-### `baker hubspot forms list | view | submissions` · `baker hubspot workflows list | view` · `baker hubspot pipelines list` · `baker hubspot contacts summary | lookup | properties | fields` · `baker hubspot companies search` · `baker hubspot deals list | properties | fields` · `baker hubspot meetings list | view`
+### `baker hubspot forms list | view | submissions` · `baker hubspot workflows list | view` · `baker hubspot pipelines list` · `baker hubspot contacts summary | lookup | properties | fields` · `baker hubspot companies search | contacts` · `baker hubspot deals list | properties | fields` · `baker hubspot meetings list | view`
 
 Read-only view of the company's **connected HubSpot account** — the forms and meeting links (calendars) that live there, the leads those forms received, and the workflows, deal pipelines, and contact records a lead runs through afterwards. Fetched from HubSpot live on every call; nothing is cached and nothing is ever written back.
 
@@ -4833,6 +4864,7 @@ baker hubspot contacts summary --days 30        # are recent leads being worked?
 baker hubspot contacts lookup lead@example.com  # was this one lead picked up?
 baker hubspot contacts properties               # what a HubSpot-read source can watch, with each value
 baker hubspot companies search --domains acme.com,globex.io --with-deals   # CRM accounts by domain, with their deals
+baker hubspot companies contacts acme.com --roles "Chief Technology Officer,CXO"   # who the CRM holds there, by targeted role
 baker hubspot deals list --pipeline default --modified-since 2026-01-01    # deals: amount, stage, closed won
 baker hubspot meetings list                     # every calendar + whether booking redirects
 baker hubspot meetings view <slug>              # booking-form fields for one calendar
@@ -4846,6 +4878,7 @@ baker hubspot meetings view <slug> --as-node    # the form.external blob for a f
 **`workflows view`:** positional `<workflowId>` (the id from `workflows list`, and the one in HubSpot's own URL — the command translates it to HubSpot's separate internal flow id for you). Returns the enrolment criteria and whether it re-enrols (`null` = HubSpot does not report it for that criteria type, so it is unknown rather than off), plus every step with the property it writes. On a `LIST_BRANCH` step, branches come back in **evaluation order** (`order: 1` wins over `order: 2`) — a broad branch above a narrower one silently swallows the records the narrow one was written for, and HubSpot reports nothing. A `STATIC_BRANCH` matches on a value rather than top down, so its `order` is display only. `steps` is **not** in execution order; follow `nextActionId`. `--full` adds the raw payload, the only place the branch filter criteria (which property is compared to which value) can be read.
 **`pipelines list`:** no flags; stages come back in the order they run in HubSpot, each with `isClosed` and `isWon` (closed with probability 1).
 **`companies search` flags:** `--domains <a.com,b.com>` (up to 100; a URL or `www.` is reduced to the bare domain), `--names <"Acme, Inc.;Globex">` (semicolon-separated), `--with-deals`, `--limit <1-500>` (default 100), `--output json|csv|jsonl|md`. Rows: `{ id, name, domain, linkedinPage, deals? }`; `notFound` lists the searched domains no CRM company carries; `truncated: true` means more matched than `--limit`.
+**`companies contacts`:** positional `<domain>`; `--roles <"a,b">` (up to 20 job titles, seniorities or functions a campaign targets) ranks each titled contact by `roleMatch` (0-1, judged by a decision model); `--limit <1-200>` (default 50), `--output json|csv|jsonl|md`. Rows: `{ id, name, jobTitle, lifecycleStage, lastActivityAt, linkedinUrl, roleMatch? }` — never email or phone. `companies: []` means the domain is not in HubSpot; `rolesJudged: false` means the roles could not be judged this time.
 **`deals list` flags:** `--pipeline <id,id>`, `--modified-since <YYYY-MM-DD>`, `--limit <1-1000>` (default 200), `--after <cursor>`, `--output json|csv|jsonl|md`. Rows, oldest change first: `{ id, name, amount, currency, pipelineId, stageId, stageLabel, isClosed, isWon, createdAt, closedAt, modifiedAt, companyIds }` — `amount: null` is none entered. `next` is the `--after` for the following page; `restartFrom` appears when HubSpot's 10,000-result search ceiling is reached (read on with `--modified-since <restartFrom>`); `companiesReadable: false` means the connection cannot read companies, so no deal carries `companyIds`.
 **`contacts summary` flags:** `--days <1-365>` (default 30) over contact creation date. Returns counts only — total contacts, how many have an owner, and the lifecycle-stage split — never a name or an email. `truncated: true` means the page budget ran out, so the counts are floors.
 **`contacts lookup`:** positional `<email>`; returns that contact's lifecycle stage, owner, the account (company) it was filed under, and associated deals with their stage. `dealsReadable: false` / `companyReadable: false` mean the connection does not cover deals or accounts, so an empty `deals` or a null `company` is unknown rather than absent. `found: false` means no contact with that email — the lead never reached the CRM, which is a finding rather than an error.
@@ -4994,7 +5027,7 @@ baker shopify tracking audit
 
 ---
 
-### `baker accounts influenced | engagement | warm | company | campaigns | crm`
+### `baker accounts influenced | engagement | warm | company | campaigns | people | crm`
 
 Account insights: which companies the LinkedIn ads are warming, and which CRM deals they influenced. Reads Baker's nightly copy of LinkedIn and the CRM, so it is fast and covers up to 24 months; nothing is changed anywhere. Every company has it once a LinkedIn ad account is chosen; before the first nightly read the reports are empty — read live with `baker ads linkedin companies`. `--start`/`--end` must be real calendar days within 24 calendar months; a bad flag or an unsupported `--output` exits 1 with `INVALID_ARGS`.
 
@@ -5011,13 +5044,15 @@ baker accounts campaigns --last-months 6 --output md   # per campaign: reached,
 baker accounts influenced --model awareness --threshold 10 --output csv   # another rule, this call only
 baker accounts warm --min 0                            # every New/Rising company, below the threshold too
 baker accounts engagement --targets targets.csv        # only the target accounts; targets: reached/engaged per tier, notReached
+baker accounts people acme.com --roles "CMO,Marketing Director"   # who we already know there: CRM, earlier finds, Form leads
+baker accounts alerts --since 2026-10-01                # every company a warm-account alert fired on (--company, --limit, --full)
 baker accounts crm status                              # deals from HubSpot or sent by the client; what arrived, linked Google Sheets
 baker accounts crm sheet                               # create and link the deals sheet in the client's Google Drive
 baker accounts crm check --file deals.csv              # judge a deals or company CSV offline, nothing sent
 baker accounts crm contract                            # the send-your-CRM contract, as Markdown for a developer
 ```
 
-A deal is **influenced** when its company reached the company's influence rule — by default 3+ LinkedIn ad engagements (Awareness: 7+ impressions; Intent: 3+ clicks) — in the 12 months up to and including the month the deal was created (`--basis pipeline`, deals not won) or closed won (`--basis revenue`). It is a labelled rule, not credit: campaign rows overlap, and money is reported per currency, never summed across currencies. Deals whose company match is only a guess come back under `lowConfidence` and stay out of `summary` until the match is confirmed in Measure → Accounts. Without the deals set up there — HubSpot's pipelines and won/lost stages, or Another CRM — `influenced` and `campaigns` exit 1 with `ACCOUNTS_NOT_SET_UP`. A CRM Baker cannot read sends its companies and deals to `POST /v1/accounts/crm` (a `crm_ingest` key, `X-Baker-Mode: test` to rehearse, up to 500 records per request, records naming a person refused), is uploaded as a CSV in Measure → Accounts, or lives in a Google Sheet linked there that Baker reads every night (a row deleted from the sheet leaves Baker). A file is a deals export or a company list — a company needs only its website or LinkedIn page; `crm check` runs the same rules offline and `crm contract` prints the whole contract. The CLI never sends deals or links a sheet of the client's; `crm sheet` creates the empty deals sheet in their Google Drive and links it, applied at once (asking again returns the same sheet). `--model engagement|awareness|intent` and `--threshold N` on `influenced`, `campaigns` and `warm` read with another rule for that call only; the saved setting is unchanged. A **warm** account is New or Rising, reached the company's influence threshold this period on the rule's metric (`--min N` overrides, `--min 0` drops it), and has no open deal, no won deal and no deal lost in the last 6 months; `engagement` and `warm` rows carry `dealStatus` (`won` > `open` > `lost` > `none`), `engagement --output csv` adds `lastMonth` and `previousImpressions/Clicks/Engagements`, and `campaigns` / `company` carry each campaign's `campaignName` (null when LinkedIn could not name it). `company` returns `months` (the company's totals), `byCampaign` (the same numbers per campaign — overlapping, never add them) and its `deals` with `touchValue` and `influenced`. `warm --output csv` is the file `baker ads linkedin audiences create --type company-list --list-file` takes. `--targets <file>` on `engagement`, `influenced`, `campaigns` and `warm` narrows the report to an ABM target list — a CSV with a domain or website column (name and tier optional) or a JSON array of domains or `{domain, name, tier}` — reduced to registrable domains; rows, totals and pages count the targets only, and the answer adds `targets` `{total, reached, engaged, notReached, byTier}`.
+A deal is **influenced** when its company reached the company's influence rule — by default 3+ LinkedIn ad engagements (Awareness: 7+ impressions; Intent: 3+ clicks) — in the 12 months up to and including the month the deal was created (`--basis pipeline`, deals not won) or closed won (`--basis revenue`). It is a labelled rule, not credit: campaign rows overlap, and money is reported per currency, never summed across currencies. Deals whose company match is only a guess come back under `lowConfidence` and stay out of `summary` until the match is confirmed in Measure → Accounts. Without the deals set up there — HubSpot's pipelines and won/lost stages, or Another CRM — `influenced` and `campaigns` exit 1 with `ACCOUNTS_NOT_SET_UP`. A CRM Baker cannot read sends its companies and deals to `POST /v1/accounts/crm` (a `crm_ingest` key, `X-Baker-Mode: test` to rehearse, up to 500 records per request, records naming a person refused), is uploaded as a CSV in Measure → Accounts, or lives in a Google Sheet linked there that Baker reads every night (a row deleted from the sheet leaves Baker). A file is a deals export or a company list — a company needs only its website or LinkedIn page; `crm check` runs the same rules offline and `crm contract` prints the whole contract. The CLI never sends deals or links a sheet of the client's; `crm sheet` creates the empty deals sheet in their Google Drive and links it, applied at once (asking again returns the same sheet). `--model engagement|awareness|intent` and `--threshold N` on `influenced`, `campaigns` and `warm` read with another rule for that call only; the saved setting is unchanged. A **warm** account is New or Rising, reached the company's influence threshold this period on the rule's metric (`--min N` overrides, `--min 0` drops it), and has no open deal, no won deal and no deal lost in the last 6 months; `engagement` and `warm` rows carry `dealStatus` (`won` > `open` > `lost` > `none`), `engagement --output csv` adds `lastMonth` and `previousImpressions/Clicks/Engagements`, and `campaigns` / `company` carry each campaign's `campaignName` (null when LinkedIn could not name it). `company` returns `months` (the company's totals), `byCampaign` (the same numbers per campaign — overlapping, never add them) and its `deals` with `touchValue` and `influenced`. `warm --output csv` is the file `baker ads linkedin audiences create --type company-list --list-file` takes. `--targets <file>` on `engagement`, `influenced`, `campaigns` and `warm` narrows the report to an ABM target list — a CSV with a domain or website column (name and tier optional) or a JSON array of domains or `{domain, name, tier}` — reduced to registrable domains; rows, totals and pages count the targets only, and the answer adds `targets` `{total, reached, engaged, notReached, byTier}`. `people <domain> [--roles "A,B"]` lists who Baker already knows at one company, for free — HubSpot contacts (never their email), ActiveCampaign contacts at the domain and earlier `baker data` finds — each with its `source`, plus the count of Form leads from the domain, each source's state (`read`, `not_connected`, `failed`) and, with `--roles`, `roleMatch` per person and the `missingRoles` nobody known holds; `outsideDataEnabled` says whether a paid lookup is possible. Company rows carry `isTarget`, `tier` and `alertedAt`; targets come from `--targets` or the published target-accounts Knowledge, matched on LinkedIn page, website or name, and with `--targets` `engagement` and `influenced` add `comparison.{targets,others}`. `alerts [--since YYYY-MM-DD] [--company <LinkedIn id|urn>] [--limit 1-1000] [--full]` lists every company a warm-account alert fired on (`orgId, name, domain, alertedAt, isTarget, tier, agent`; `--full` adds `scheduledAgentId, runChatId, month`), as `{alerts, truncated}`.
 
 ---
 

package/dist/account-WFAMHUCQ.js

@@ -0,0 +1,82 @@
+import {
+  CHATGPT_ADS_REFERENCE,
+  runChatgptRead
+} from "./chunk-4DHHMWP4.js";
+import "./chunk-VJUVTMHY.js";
+import "./chunk-SOPVIIUW.js";
+import "./chunk-G4FG5EQO.js";
+import {
+  apiGet
+} from "./chunk-JCFZ7ECN.js";
+import "./chunk-OFSUVUXT.js";
+import "./chunk-OMLZ35HJ.js";
+import {
+  registerSchema
+} from "./chunk-NXNOXZGB.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/ads/chatgpt/account.ts
+import { defineCommand } from "citty";
+registerSchema({
+  command: "ads.chatgpt.account",
+  description: "The connected ChatGPT Ads account: name, currency, timezone, status, and the brand and account reviews that decide whether anything in it can serve.",
+  args: {
+    full: { type: "boolean", description: "Return ChatGPT Ads' own account object", required: false }
+  }
+});
+function accountHints(account) {
+  const hints = [];
+  if (account.brandReview.status !== "approved") {
+    const reason = account.brandReview.reason ? ` (${account.brandReview.reason})` : "";
+    hints.push(
+      `Brand review is ${account.brandReview.status}${reason}: nothing in this account serves until it is approved. Fix it in ChatGPT Ads Manager before changing campaigns.`
+    );
+  }
+  if (account.accountReview && account.accountReview.status !== "approved") {
+    hints.push(`A separate account review is ${account.accountReview.status}; delivery can wait on it too.`);
+  }
+  if (account.status === "paused") {
+    hints.push("The whole account is paused, so no campaign in it serves whatever its own status says.");
+  }
+  return hints;
+}
+var SHOW_ARGS = {
+  full: { type: "boolean", description: "Return ChatGPT Ads' own account object", required: false }
+};
+var accountShowCommand = defineCommand({
+  meta: {
+    name: "show",
+    description: "The connected ChatGPT Ads account. Example: baker ads chatgpt account"
+  },
+  args: SHOW_ARGS,
+  run: async ({ args }) => {
+    await runChatgptRead(
+      CHATGPT_ADS_REFERENCE.account,
+      () => apiGet("/api/ads/chatgpt/account", args.full ? { full: "true" } : void 0),
+      (account) => args.full ? [] : accountHints(account)
+    );
+  }
+});
+var accountCommand = defineCommand({
+  meta: {
+    name: "account",
+    description: `The connected ChatGPT Ads account. Start here: currency and timezone for every figure, and whether reviews let anything serve.
+
+Examples:
+  baker ads chatgpt account
+  baker ads chatgpt account --full
+  baker ads chatgpt account update --favicon-url https://example.com/icon.png   \u2014 staged; applies on publish`
+  },
+  subCommands: {
+    show: accountShowCommand,
+    update: () => import("./account-writes-EEKHPF5I.js").then((m) => m.accountUpdateCommand)
+  },
+  // A parent must never declare `run`: citty falls through to it after the matched subcommand.
+  args: SHOW_ARGS,
+  default: "show"
+});
+export {
+  accountCommand,
+  accountHints
+};
+//# sourceMappingURL=account-WFAMHUCQ.js.map

package/dist/account-Y7ZFEM7U.js

@@ -0,0 +1,82 @@
+import {
+  csvOrJson,
+  handleLinkedinError,
+  resolveAccountIdArg
+} from "./chunk-SLTZC32B.js";
+import {
+  writeAdsJson,
+  writeAdsOutput
+} from "./chunk-VJUVTMHY.js";
+import {
+  NO_CACHE_ARG
+} from "./chunk-HPF3USL2.js";
+import "./chunk-AJ4OO3CV.js";
+import "./chunk-QV6AST5T.js";
+import "./chunk-WCU362Z6.js";
+import "./chunk-GIWHHCD6.js";
+import "./chunk-SOPVIIUW.js";
+import "./chunk-G4FG5EQO.js";
+import "./chunk-3WOFZTGC.js";
+import "./chunk-XHWHBGKX.js";
+import {
+  apiGet
+} from "./chunk-JCFZ7ECN.js";
+import "./chunk-OFSUVUXT.js";
+import "./chunk-OMLZ35HJ.js";
+import "./chunk-NXNOXZGB.js";
+import "./chunk-YQSBHWOI.js";
+
+// src/commands/ads/linkedin/account.ts
+import { defineCommand } from "citty";
+var accountDetailCommand = defineCommand({
+  meta: {
+    name: "detail",
+    description: `Single LinkedIn ad account detail (currency, status, type).
+
+Examples:
+  baker ads linkedin account --account-id 503001492
+  baker ads linkedin account --account-urn urn:li:sponsoredAccount:503001492 --output md`
+  },
+  args: {
+    "account-id": { type: "string", description: "Numeric account ID or urn:li:sponsoredAccount:N" },
+    "account-urn": { type: "string", description: "Alias for --account-id" },
+    "no-cache": NO_CACHE_ARG,
+    output: { type: "string", description: "json|csv|jsonl|md", default: "json" }
+  },
+  run: async ({ args }) => {
+    const accountId = resolveAccountIdArg(args);
+    try {
+      const params = { "account-id": accountId };
+      if (args["no-cache"]) params["skip-cache"] = "true";
+      const data = await apiGet("/api/ads/linkedin/account", params);
+      const fmt = csvOrJson(args);
+      if (fmt !== "json") {
+        writeAdsOutput([data], fmt);
+        return;
+      }
+      writeAdsJson({ ok: true, data });
+    } catch (err) {
+      handleLinkedinError(err);
+    }
+  }
+});
+var accountCommand = defineCommand({
+  meta: {
+    name: "account",
+    description: `LinkedIn ad account: its detail, and the settings that apply across every ad set in it.
+
+Examples:
+  baker ads linkedin account --account-id 503001492                          \u2014 currency, status, type
+  baker ads linkedin account url-params --param utm_source=linkedin          \u2014 UTMs for every ad in the account`
+  },
+  subCommands: {
+    detail: accountDetailCommand,
+    "url-params": () => import("./write-commands-W4Z6MANM.js").then((m) => m.accountUrlParamsCommand)
+  },
+  args: accountDetailCommand.args,
+  default: "detail"
+});
+export {
+  accountCommand
+};
+//# sourceMappingURL=account-Y7ZFEM7U.js.map

package/dist/account-YYB2KWLU.js

@@ -0,0 +1,139 @@
+import {
+  handleMetaError,
+  resolveAccountIdArg
+} from "./chunk-FCD5BPC5.js";
+import "./chunk-QALAJNBG.js";
+import {
+  writeJsonEnvelope
+} from "./chunk-VJUVTMHY.js";
+import {
+  NO_CACHE_ARG
+} from "./chunk-HPF3USL2.js";
+import {
+  apiGet
+} from "./chunk-JCFZ7ECN.js";
+import "./chunk-OFSUVUXT.js";
+import "./chunk-OMLZ35HJ.js";
+import "./chunk-NXNOXZGB.js";
+import "./chunk-YQSBHWOI.js";
+
+// ../api/src/ads-meta/accountHealth.ts
+var ACCOUNT_STATUS = {
+  1: "ACTIVE",
+  2: "DISABLED",
+  3: "UNSETTLED",
+  7: "PENDING_RISK_REVIEW",
+  8: "PENDING_SETTLEMENT",
+  9: "IN_GRACE_PERIOD",
+  100: "PENDING_CLOSURE",
+  101: "CLOSED",
+  201: "ANY_ACTIVE",
+  202: "ANY_CLOSED"
+};
+var DISABLE_REASON = {
+  1: "ads integrity policy",
+  2: "ads IP review",
+  3: "payment risk",
+  4: "gray account shut down",
+  5: "ads AFC review",
+  6: "business integrity review",
+  7: "permanently closed",
+  8: "unused reseller account",
+  9: "unused account",
+  10: "umbrella ad account",
+  11: "Business Manager integrity policy",
+  12: "misrepresented ad account",
+  13: "legal entity de-share",
+  14: "thread review",
+  15: "compromised ad account"
+};
+var DELIVERS_ANYWAY = /* @__PURE__ */ new Set([1, 9]);
+function statusBlocker(account) {
+  const status = account.account_status;
+  if (status === void 0 || status === 1) return void 0;
+  const name = ACCOUNT_STATUS[status] ?? `status ${status}`;
+  const reason = account.disable_reason ? DISABLE_REASON[account.disable_reason] : void 0;
+  const why = reason ? ` (${reason})` : "";
+  if (DELIVERS_ANYWAY.has(status)) {
+    return `the ad account is ${name}${why}: a payment failed and Meta stops delivery when the grace period ends \u2014 the account owner settles it in Meta Billing`;
+  }
+  return `the ad account is ${name}${why}, so nothing on it delivers \u2014 only the account owner can resolve that with Meta (Account Quality / Billing)`;
+}
+function metaAccountDeliveryBlockers(account) {
+  const blockers = [];
+  const status = statusBlocker(account);
+  if (status) blockers.push(status);
+  const hasFunding = Boolean(account.funding_source || account.funding_source_details?.id);
+  if (!hasFunding && !account.is_prepay_account) {
+    blockers.push(
+      "the ad account has no payment method, so Meta accepts its ads but delivers none (they wait in PENDING_BILLING_INFO) \u2014 the account owner adds one in Meta Billing"
+    );
+  }
+  if (spendCapReached(account)) {
+    blockers.push(
+      "the ad account has reached its spending limit, so Meta stops delivering every ad on it \u2014 an admin raises or removes the limit in Meta Billing \u2192 Payment settings, or Baker can change it as part of a chat"
+    );
+  }
+  return blockers;
+}
+function spendCapReached(account) {
+  const cap = Number(account.spend_cap ?? "0");
+  const spent = Number(account.amount_spent ?? "0");
+  return Number.isFinite(cap) && Number.isFinite(spent) && cap > 0 && spent >= cap;
+}
+
+// src/commands/ads/meta/account.ts
+import { defineCommand } from "citty";
+var accountCommand = defineCommand({
+  meta: {
+    name: "account",
+    description: `Show single Meta ad account detail (currency, timezone, balance, business) and whether it can deliver:
+a hint names a disabled account or a missing payment method, which Meta never refuses at publish \u2014 its ads just never run.
+\`bakerPermissions\` says which per-company Meta permissions (leadAds, catalog, pagePosts) are switched on for this
+company and held by the connection; a hint names any that still needs the user to reconnect Meta.
+
+Examples:
+  baker ads meta account --account-id act_123
+  BAKER_META_AD_ACCOUNT_ID=act_123 baker ads meta account`
+  },
+  args: {
+    "account-id": { type: "string", description: "Meta ad account ID (act_...)" },
+    "no-cache": NO_CACHE_ARG
+  },
+  run: async ({ args }) => {
+    const accountId = await resolveAccountIdArg(args);
+    try {
+      const params = { "account-id": accountId };
+      if (args["no-cache"]) params["skip-cache"] = "true";
+      const data = await apiGet("/api/ads/meta/account", params);
+      const permissionHints = data.bakerPermissions ? accountPermissionHints(data.bakerPermissions) : [];
+      writeJsonEnvelope({ ok: true, data, hints: [...accountDeliveryHints(data), ...permissionHints] });
+    } catch (err) {
+      handleMetaError(err);
+    }
+  }
+});
+function accountDeliveryHints(account) {
+  const blockers = metaAccountDeliveryBlockers(account);
+  if (blockers.length === 0) return ["The account can deliver: it is active and has a payment method."];
+  return [
+    ...blockers.map((blocker) => `Cannot deliver: ${blocker}.`),
+    "Staging still works and publishing still applies the changes, but nothing serves until this is fixed \u2014 tell the user before they publish anything they expect to run."
+  ];
+}
+var PERMISSION_LABEL = {
+  leadAds: "Lead ads (instant forms and their leads)",
+  catalog: "Catalog changes",
+  pagePosts: "Facebook Page posts"
+};
+function accountPermissionHints(permissions) {
+  return Object.keys(PERMISSION_LABEL).filter((key) => permissions[key].reconnectNeeded).map(
+    (key) => `${PERMISSION_LABEL[key]}: switched on for this company, but this Meta connection predates it \u2014 ask the user to reconnect Meta in the dashboard before relying on it.`
+  );
+}
+export {
+  accountCommand,
+  accountDeliveryHints,
+  accountPermissionHints
+};
+//# sourceMappingURL=account-YYB2KWLU.js.map