@zalify/cli 0.22.1 → 0.23.0

package/README.md

@@ -103,7 +103,8 @@ its new home under `shop`.
 | `ads` / `ads list` | List the workspace's brand instances and their provisioning status |
 | `ads new <name> [--objective] [--budget] [--country] [--link]` | Scaffold a campaign FOLDER — the drag-and-drop form: `campaign.yaml` for budget/audience/copy defaults, `creatives/` for the files that become ads. Three questions when interactive, flags otherwise. `cp -r` an existing folder to duplicate a campaign |
 | `ads pull [--account <act_id>] [--days <n>] [--force]` | The existing account as files: every ingested campaign lands as `campaigns/<slug>.yaml` (imported form — names in `label:`, budgets, statuses, core audience) plus `campaigns/.bindings.json` mapping YAML nodes to platform ids. A hash ledger protects local edits: unedited files fast-forward, edited ones are kept and named, deletions never happen automatically |
-| `ads diff` | Desired (your campaign files) vs actual (the ingested account), keyed through bindings: bound nodes compare budget/status, unbound nodes become creations. Read-only |
+| `ads creative generate <campaign> --prompt <text> [--orientation] [--ref <url...>] [--name]` | One image through the canvas pipeline (safe zones, product fidelity with refs), downloaded INTO the campaign's `creatives/` and recorded in its `assets.json` — the filesystem stays the interface, and the asset is stored once |
+| `ads diff` | Desired (your campaign files) vs actual (the ingested account), keyed through bindings: bound nodes compare budget/status, unbound nodes become creations. Folder campaigns upload their `creatives/` first (presign + checksum dedup — the `brand images push` machinery) and derive server-side. Read-only against the platform |
 | `ads apply [-y] [--activate]` | Execute the diff after showing it and asking. Creations land **PAUSED** — always; budget edits apply to bound entities; `paused→active` is refused without `--activate` (turning spend on is said twice; `active→paused` always executes). Created ids merge into the bindings ledger |
 | `ads remove <slug>` | Deprecate a brand instance — soft-deletes the record (drops out of `ads list` and the service's repo-token minting; survives for history). The GitHub repo is deliberately untouched: deleting real campaign intent is a human-on-GitHub decision |
 | `ads status` | The instance at a glance: brand + consent, platform access and credential expiry, ingestion freshness (with per-account failures), first-party join coverage, plan and pending-proposal counts. Exits non-zero when the service reports problems |

package/dist/cli.js

@@ -31,6 +31,20 @@ var __toESM = (mod, isNodeMode, target) => {
   return to;
 };
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // node_modules/commander/lib/error.js
@@ -7929,6 +7943,17 @@ var require_ansi_align = __commonJS((exports, module) => {
   }
 });
 
+// src/hash.ts
+var exports_hash = {};
+__export(exports_hash, {
+  sha256: () => sha256
+});
+import { createHash } from "node:crypto";
+function sha256(bytes) {
+  return createHash("sha256").update(bytes).digest("hex");
+}
+var init_hash = () => {};
+
 // node_modules/yaml/dist/nodes/identity.js
 var require_identity = __commonJS((exports) => {
   var ALIAS = Symbol.for("yaml.alias");
@@ -18234,7 +18259,7 @@ function updateNotifier(options) {
 
 // src/cli.ts
 import { createRequire as createRequire2 } from "node:module";
-import { dirname as dirname3, join as join13 } from "node:path";
+import { dirname as dirname3, join as join14 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/auth.ts
@@ -18555,13 +18580,8 @@ async function whoami() {
   console.log(live ? "status     ✓ key verified" : `status     ! not verified — ${liveError}`);
 }
 
-// src/hash.ts
-import { createHash } from "node:crypto";
-function sha256(bytes) {
-  return createHash("sha256").update(bytes).digest("hex");
-}
-
 // src/assets.ts
+init_hash();
 import { readFileSync as readFileSync2, writeFileSync as writeFileSync3, existsSync as existsSync2, readdirSync } from "node:fs";
 import { join as join2, resolve } from "node:path";
 var BATCH = 10;
@@ -18601,8 +18621,11 @@ async function assetsPull(storeDir) {
   console.log(`Done: ${pulled} downloaded, ${Object.keys(index).length - pulled} already local.`);
 }
 async function assetsPush(storeDir) {
+  await pushImagesIn(imagesDirFor(storeDir));
+}
+async function pushImagesIn(dir2) {
   const { appUrl, workspaceId, key, workspaceName, workspaceSlug } = requireActive();
-  const imagesDir = imagesDirFor(storeDir);
+  const imagesDir = dir2;
   const indexPath = join2(imagesDir, "assets.json");
   const index = readIndex(imagesDir);
   async function api(path9, body) {
@@ -18625,13 +18648,13 @@ async function assetsPush(storeDir) {
     }
     return json;
   }
-  const files = readdirSync(imagesDir).filter((f) => f.endsWith(".png")).map((name) => {
+  const files = readdirSync(imagesDir).filter((f) => /\.(png|jpe?g|webp)$/i.test(f)).map((name) => {
     const bytes = readFileSync2(join2(imagesDir, name));
     return { name, bytes, checksum: sha256(bytes) };
   }).filter((f) => index[f.name]?.checksum !== f.checksum);
   if (!files.length) {
     console.log("Everything already pushed.");
-    return;
+    return index;
   }
   console.log(`Pushing ${files.length} file(s) to "${workspaceName || workspaceId}"`);
   for (let i = 0;i < files.length; i += BATCH) {
@@ -18699,6 +18722,7 @@ async function assetsPush(storeDir) {
 `);
   }
   console.log("Done.");
+  return index;
 }
 
 // src/self-update.ts
@@ -18894,6 +18918,7 @@ async function workspaceSet(slugOrId) {
 }
 
 // src/images.ts
+init_hash();
 import { readFileSync as readFileSync3, writeFileSync as writeFileSync4, existsSync as existsSync4, rmSync as rmSync2 } from "node:fs";
 import { join as join4, resolve as resolve2 } from "node:path";
 var MAX_JOBS_PER_REQUEST = 40;
@@ -19111,6 +19136,7 @@ import { existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync
 import { basename as basename2, join as join6, resolve as resolve4 } from "node:path";
 
 // src/theme.ts
+init_hash();
 import { spawnSync as spawnSync2 } from "node:child_process";
 import { randomBytes as randomBytes2 } from "node:crypto";
 import {
@@ -20339,8 +20365,8 @@ async function adsList() {
 }
 
 // src/ads-diff.ts
-import { existsSync as existsSync9, readdirSync as readdirSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync8 } from "node:fs";
-import { join as join9, resolve as resolve7 } from "node:path";
+import { existsSync as existsSync10, readdirSync as readdirSync4, readFileSync as readFileSync8, writeFileSync as writeFileSync9 } from "node:fs";
+import { join as join10, resolve as resolve7 } from "node:path";
 import { createInterface as createInterface2 } from "node:readline/promises";
 
 // node_modules/yaml/dist/index.js
@@ -20389,43 +20415,127 @@ var $stringify = publicApi.stringify;
 var $visit = visit.visit;
 var $visitAsync = visit.visitAsync;
 
+// src/ads-sync.ts
+import { existsSync as existsSync9, readdirSync as readdirSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync8 } from "node:fs";
+import { join as join9 } from "node:path";
+var CREATIVE_EXT = /\.(png|jpe?g|webp)$/i;
+async function collectFolder(base, name) {
+  const dir2 = join9(base, "campaigns", name);
+  const doc = $parse(readFileSync7(join9(dir2, "campaign.yaml"), "utf8"));
+  const creativesDir = join9(dir2, "creatives");
+  const sources = [];
+  const gather = async (sub, adSet) => {
+    const abs = join9(creativesDir, sub);
+    if (!existsSync9(abs))
+      return;
+    const entries = readdirSync3(abs, { withFileTypes: true });
+    const hasImages = entries.some((e) => e.isFile() && CREATIVE_EXT.test(e.name));
+    const index = hasImages ? await pushImagesIn(abs) : {};
+    for (const e of entries) {
+      if (e.isDirectory() && sub === "") {
+        await gather(e.name, e.name);
+        continue;
+      }
+      if (!e.isFile() || !CREATIVE_EXT.test(e.name))
+        continue;
+      const sidecarPath = join9(abs, `${e.name.replace(CREATIVE_EXT, "")}.copy.yaml`);
+      sources.push({
+        filename: e.name,
+        adSet,
+        ...existsSync9(sidecarPath) ? { sidecar: $parse(readFileSync7(sidecarPath, "utf8")) } : {},
+        ...index[e.name] ? { asset: index[e.name].url } : {}
+      });
+    }
+  };
+  await gather("", "");
+  return { path: `campaigns/${name}/campaign.yaml`, doc, sources };
+}
+function folderCampaigns(base) {
+  const dir2 = join9(base, "campaigns");
+  if (!existsSync9(dir2))
+    return [];
+  return readdirSync3(dir2, { withFileTypes: true }).filter((e) => e.isDirectory() && existsSync9(join9(dir2, e.name, "campaign.yaml"))).map((e) => e.name);
+}
+async function adsCreativeGenerate(opts) {
+  const auth = requireActive();
+  const dir2 = join9(".", "campaigns", opts.campaign, "creatives");
+  if (!existsSync9(dir2)) {
+    throw new Error(`campaigns/${opts.campaign}/creatives/ not found — \`zalify ads new ${opts.campaign}\` first.`);
+  }
+  console.log("Generating (the canvas pipeline: safe zones + product fidelity)…");
+  const res = await fetch(`${auth.appUrl}/api/autopilot/ads-code/creative`, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${auth.key}`,
+      "x-zalify-workspace-id": auth.workspaceId,
+      "Content-Type": "application/json"
+    },
+    body: JSON.stringify({
+      prompt: opts.prompt,
+      orientation: opts.orientation ?? "square",
+      refUrls: opts.ref ?? []
+    })
+  });
+  const json = await res.json().catch(() => ({}));
+  if (!res.ok || !json.image) {
+    throw new Error(`generation failed (${res.status}): ${json.error ?? ""}`);
+  }
+  const download = await fetch(json.image.url);
+  if (!download.ok)
+    throw new Error(`download failed (${download.status})`);
+  const bytes = Buffer.from(await download.arrayBuffer());
+  const filename = `${(opts.name ?? json.image.name ?? "generated").toLowerCase().replaceAll(/[^a-z0-9]+/g, "-").replaceAll(/^-+|-+$/g, "").slice(0, 60)}.png`;
+  writeFileSync8(join9(dir2, filename), bytes);
+  const indexPath = join9(dir2, "assets.json");
+  const index = existsSync9(indexPath) ? JSON.parse(readFileSync7(indexPath, "utf8")) : {};
+  const { sha256: sha2562 } = await Promise.resolve().then(() => (init_hash(), exports_hash));
+  index[filename] = {
+    assetId: json.image.assetId,
+    url: json.image.url,
+    checksum: sha2562(bytes)
+  };
+  writeFileSync8(indexPath, `${JSON.stringify(index, null, 2)}
+`);
+  console.log(`✓ creatives/${filename}  (asset ${json.image.assetId})`);
+  console.log("  Review the image; delete the file to reject it. `zalify ads diff` when ready.");
+}
+
 // src/ads-diff.ts
 function root() {
   const cwd = resolve7(".");
-  if (existsSync9(join9(cwd, ".zalify", "brand-repo.json")) || existsSync9(join9(cwd, "campaigns"))) {
+  if (existsSync10(join10(cwd, ".zalify", "brand-repo.json")) || existsSync10(join10(cwd, "campaigns"))) {
     return cwd;
   }
   throw new Error("Not inside a brand-instance checkout — run from the repo `zalify ads create` made.");
 }
-function collect(base) {
-  const dir2 = join9(base, "campaigns");
-  if (!existsSync9(dir2))
-    return { files: [], folders: 0 };
+async function collect(base) {
+  const dir2 = join10(base, "campaigns");
+  if (!existsSync10(dir2))
+    return { files: [] };
   const files = [];
-  let folders = 0;
-  for (const entry of readdirSync3(dir2, { withFileTypes: true })) {
-    if (entry.isDirectory()) {
-      if (existsSync9(join9(dir2, entry.name, "campaign.yaml")))
-        folders += 1;
+  for (const entry of readdirSync4(dir2, { withFileTypes: true })) {
+    if (entry.isDirectory())
       continue;
-    }
     if (!entry.name.endsWith(".yaml") || entry.name.endsWith(".copy.yaml")) {
       continue;
     }
     const path9 = `campaigns/${entry.name}`;
     try {
-      files.push({ path: path9, doc: $parse(readFileSync7(join9(base, path9), "utf8")) });
+      files.push({ path: path9, doc: $parse(readFileSync8(join10(base, path9), "utf8")) });
     } catch (err) {
       throw new Error(`${path9} is not valid YAML: ${String(err).slice(0, 120)}`);
     }
   }
-  return { files, folders };
+  for (const name of folderCampaigns(base)) {
+    files.push(await collectFolder(base, name));
+  }
+  return { files };
 }
 function ledger(base) {
-  const path9 = join9(base, "campaigns", ".bindings.json");
-  if (!existsSync9(path9))
+  const path9 = join10(base, "campaigns", ".bindings.json");
+  if (!existsSync10(path9))
     return { nodes: {}, pulled: {} };
-  const raw = JSON.parse(readFileSync7(path9, "utf8"));
+  const raw = JSON.parse(readFileSync8(path9, "utf8"));
   return { nodes: raw.nodes ?? {}, pulled: raw.pulled ?? {} };
 }
 async function post(auth, path9, payload) {
@@ -20443,7 +20553,7 @@ async function post(auth, path9, payload) {
     throw new Error(`${path9}: ${res.status} ${json.error ?? ""}`.trim());
   return json;
 }
-function renderPlan(result, folders) {
+function renderPlan(result) {
   for (const n of result.notes ?? []) {
     console.log(`· ${n.file} — ${n.message}`);
   }
@@ -20467,13 +20577,13 @@ function renderPlan(result, folders) {
   }
   const s = result.summary;
   console.log(`
-${s.creates} to create, ${s.updates} to update, ${s.unchanged} unchanged` + `${result.issues.length ? `, ${result.issues.length} files invalid` : ""}` + `${folders ? `  (${folders} folder campaigns skipped — sync is coming)` : ""}`);
+${s.creates} to create, ${s.updates} to update, ${s.unchanged} unchanged` + `${result.issues.length ? `, ${result.issues.length} files invalid` : ""}`);
 }
 async function adsDiff() {
   const auth = requireActive();
   const base = root();
-  const { files, folders } = collect(base);
-  if (files.length === 0 && folders === 0) {
+  const { files } = await collect(base);
+  if (files.length === 0) {
     console.log("No campaign files — `zalify ads pull` or `zalify ads new` first.");
     return;
   }
@@ -20482,14 +20592,14 @@ async function adsDiff() {
     files,
     bindings: led.nodes
   });
-  renderPlan(result, folders);
+  renderPlan(result);
   if (result.issues.length > 0)
     process.exitCode = 1;
 }
 async function adsApply(opts) {
   const auth = requireActive();
   const base = root();
-  const { files, folders } = collect(base);
+  const { files } = await collect(base);
   if (files.length === 0) {
     console.log("No campaign files — `zalify ads pull` or `zalify ads new` first.");
     return;
@@ -20499,7 +20609,7 @@ async function adsApply(opts) {
     files,
     bindings: led.nodes
   });
-  renderPlan(diff, folders);
+  renderPlan(diff);
   if (diff.issues.length > 0) {
     throw new Error("Fix the invalid files before applying.");
   }
@@ -20534,7 +20644,7 @@ ${result.refusedActivations} activation${result.refusedActivations > 1 ? "s" : "
   }
   if (Object.keys(result.newBindings).length > 0) {
     Object.assign(led.nodes, result.newBindings);
-    writeFileSync8(join9(base, "campaigns", ".bindings.json"), `${JSON.stringify(led, null, 2)}
+    writeFileSync9(join10(base, "campaigns", ".bindings.json"), `${JSON.stringify(led, null, 2)}
 `);
     console.log(`
 ${Object.keys(result.newBindings).length} new bindings recorded — everything created is PAUSED.`);
@@ -20546,25 +20656,25 @@ ${Object.keys(result.newBindings).length} new bindings recorded — everything c
 // src/ads-pull.ts
 import { createHash as createHash2 } from "node:crypto";
 import {
-  existsSync as existsSync10,
+  existsSync as existsSync11,
   mkdirSync as mkdirSync4,
-  readFileSync as readFileSync8,
-  writeFileSync as writeFileSync9
+  readFileSync as readFileSync9,
+  writeFileSync as writeFileSync10
 } from "node:fs";
-import { dirname as dirname2, join as join10, resolve as resolve8 } from "node:path";
+import { dirname as dirname2, join as join11, resolve as resolve8 } from "node:path";
 var sha = (s) => createHash2("sha256").update(s).digest("hex");
 function checkoutRoot() {
   const cwd = resolve8(".");
-  if (existsSync10(join10(cwd, ".zalify", "brand-repo.json")) || existsSync10(join10(cwd, "campaigns"))) {
+  if (existsSync11(join11(cwd, ".zalify", "brand-repo.json")) || existsSync11(join11(cwd, "campaigns"))) {
     return cwd;
   }
   throw new Error("Not inside a brand-instance checkout — run from the repo `zalify ads create` made.");
 }
 function readBindings(root2) {
-  const path9 = join10(root2, "campaigns", ".bindings.json");
-  if (!existsSync10(path9))
+  const path9 = join11(root2, "campaigns", ".bindings.json");
+  if (!existsSync11(path9))
     return { nodes: {}, pulled: {} };
-  const raw = JSON.parse(readFileSync8(path9, "utf8"));
+  const raw = JSON.parse(readFileSync9(path9, "utf8"));
   return { nodes: raw.nodes ?? {}, pulled: raw.pulled ?? {} };
 }
 async function adsPull(opts) {
@@ -20592,11 +20702,11 @@ async function adsPull(opts) {
   let unchanged = 0;
   const skipped = [];
   for (const f of result.files) {
-    const abs = join10(root2, f.path);
+    const abs = join11(root2, f.path);
     const nextHash = sha(f.yaml);
     const lastPulled = bindings.pulled[f.path];
-    if (existsSync10(abs)) {
-      const current = readFileSync8(abs, "utf8");
+    if (existsSync11(abs)) {
+      const current = readFileSync9(abs, "utf8");
       if (sha(current) === nextHash) {
         unchanged += 1;
         bindings.pulled[f.path] = nextHash;
@@ -20609,17 +20719,17 @@ async function adsPull(opts) {
       }
     }
     mkdirSync4(dirname2(abs), { recursive: true });
-    writeFileSync9(abs, f.yaml);
+    writeFileSync10(abs, f.yaml);
     bindings.pulled[f.path] = nextHash;
     written += 1;
   }
   Object.assign(bindings.nodes, result.bindings);
-  const bindingsPath = join10(root2, "campaigns", ".bindings.json");
+  const bindingsPath = join11(root2, "campaigns", ".bindings.json");
   mkdirSync4(dirname2(bindingsPath), { recursive: true });
-  writeFileSync9(bindingsPath, `${JSON.stringify(bindings, null, 2)}
+  writeFileSync10(bindingsPath, `${JSON.stringify(bindings, null, 2)}
 `);
   const exported = new Set(result.files.map((f) => f.path));
-  const gone = Object.keys(bindings.pulled).filter((p) => !exported.has(p) && existsSync10(join10(root2, p)));
+  const gone = Object.keys(bindings.pulled).filter((p) => !exported.has(p) && existsSync11(join11(root2, p)));
   const s = result.summary;
   console.log(`pulled ${s.campaigns} campaigns (${s.adSets} ad sets, ${s.ads} ads): ` + `${written} written, ${unchanged} unchanged, ${skipped.length} kept (locally edited)`);
   for (const p of skipped)
@@ -20640,8 +20750,8 @@ Review with git diff; commit when it reads right.`);
 
 // src/ads-read.ts
 import { spawn as spawn4 } from "node:child_process";
-import { existsSync as existsSync11, readFileSync as readFileSync9 } from "node:fs";
-import { join as join11, resolve as resolve9 } from "node:path";
+import { existsSync as existsSync12, readFileSync as readFileSync10 } from "node:fs";
+import { join as join12, resolve as resolve9 } from "node:path";
 async function serviceGet(auth, path9) {
   const res = await fetch(`${auth.appUrl}/api/autopilot/${path9}`, {
     headers: {
@@ -20730,11 +20840,11 @@ account changes: ${a.byPerson} by people, ${a.byMeta} automated`);
 }
 function adsDigest(dir2) {
   const root2 = resolve9(dir2 ?? ".");
-  const path9 = join11(root2, "signals", "latest.json");
-  if (!existsSync11(path9)) {
+  const path9 = join12(root2, "signals", "latest.json");
+  if (!existsSync12(path9)) {
     throw new Error("signals/latest.json not found — run from a brand-instance checkout " + "(and pull: the service commits a digest daily).");
   }
-  const d = JSON.parse(readFileSync9(path9, "utf8"));
+  const d = JSON.parse(readFileSync10(path9, "utf8"));
   console.log(`digest of ${d.window.days} days (${d.window.first_date ?? "—"} … ${d.window.last_date ?? "—"}), generated ${when(d.generated_at)}`);
   const t = d.totals;
   console.log(`  spend ${money(t.spend)}  purchases ${num(t.purchases)}  roas ${t.platform_roas ?? "—"}`);
@@ -20780,19 +20890,19 @@ async function adsDoctor(dir2) {
     console.log(`  ✗ ${msg}`);
     failed += 1;
   };
-  const linkPath = join11(root2, ".zalify", "brand-repo.json");
+  const linkPath = join12(root2, ".zalify", "brand-repo.json");
   let link = null;
-  if (existsSync11(linkPath)) {
-    link = JSON.parse(readFileSync9(linkPath, "utf8"));
+  if (existsSync12(linkPath)) {
+    link = JSON.parse(readFileSync10(linkPath, "utf8"));
     ok(`checkout linked to ${link?.repo} (slug ${link?.slug})`);
   } else {
     console.log("  - not inside a brand-instance checkout (repo checks only)");
   }
   let identity2 = null;
-  const identityPath = join11(root2, "identity.yaml");
-  if (existsSync11(identityPath)) {
+  const identityPath = join12(root2, "identity.yaml");
+  if (existsSync12(identityPath)) {
     try {
-      identity2 = $parse(readFileSync9(identityPath, "utf8"));
+      identity2 = $parse(readFileSync10(identityPath, "utf8"));
       ok("identity.yaml parses");
       if (identity2?.workspace_id && identity2.workspace_id !== auth.workspaceId) {
         bad(`identity.yaml workspace_id (${identity2.workspace_id}) ≠ active workspace (${auth.workspaceId}) — is the CLI on the right workspace?`);
@@ -20858,8 +20968,8 @@ ${failed} problem${failed > 1 ? "s" : ""}.`);
 }
 
 // src/brand.ts
-import { existsSync as existsSync12, mkdirSync as mkdirSync5, readdirSync as readdirSync4, readFileSync as readFileSync10, writeFileSync as writeFileSync10 } from "node:fs";
-import { basename as basename5, join as join12, resolve as resolve10 } from "node:path";
+import { existsSync as existsSync13, mkdirSync as mkdirSync5, readdirSync as readdirSync5, readFileSync as readFileSync11, writeFileSync as writeFileSync11 } from "node:fs";
+import { basename as basename5, join as join13, resolve as resolve10 } from "node:path";
 var AUTHORING_MD = `# Brand authoring guide
 
 The rules for filling in this folder. An author — human or AI agent —
@@ -21162,17 +21272,17 @@ var MANIFEST_JSON = JSON.stringify({
 function brandInit(dir2 = ".", opts = {}) {
   const target = resolve10(dir2);
   const slug = basename5(target).toLowerCase().replaceAll(/[^a-z0-9-]+/g, "-").replaceAll(/^-+|-+$/g, "");
-  if (existsSync12(target) && readdirSync4(target).length > 0) {
+  if (existsSync13(target) && readdirSync5(target).length > 0) {
     throw new Error(`${dir2} already exists and is not empty`);
   }
   const name = opts.name ?? slug.split("-").map((w) => w.charAt(0).toUpperCase() + w.slice(1)).join(" ");
   const currency = (opts.currency ?? "USD").toUpperCase();
-  mkdirSync5(join12(target, "images"), { recursive: true });
-  writeFileSync10(join12(target, "AUTHORING.md"), AUTHORING_MD);
-  writeFileSync10(join12(target, "brand.md"), BRAND_MD(name));
-  writeFileSync10(join12(target, "store.json"), STORE_JSON(name, slug, opts.vertical ?? "<vertical>", currency));
-  writeFileSync10(join12(target, "catalog.json"), CATALOG_JSON(name, currency));
-  writeFileSync10(join12(target, "images", "manifest.json"), MANIFEST_JSON);
+  mkdirSync5(join13(target, "images"), { recursive: true });
+  writeFileSync11(join13(target, "AUTHORING.md"), AUTHORING_MD);
+  writeFileSync11(join13(target, "brand.md"), BRAND_MD(name));
+  writeFileSync11(join13(target, "store.json"), STORE_JSON(name, slug, opts.vertical ?? "<vertical>", currency));
+  writeFileSync11(join13(target, "catalog.json"), CATALOG_JSON(name, currency));
+  writeFileSync11(join13(target, "images", "manifest.json"), MANIFEST_JSON);
   console.log(`Scaffolded brand data in ${dir2}:`);
   for (const f of ["AUTHORING.md", "brand.md", "store.json", "catalog.json", "images/manifest.json"]) {
     console.log(`  + ${f}`);
@@ -21187,19 +21297,19 @@ function brandValidate(dir2 = ".") {
   const problems = [];
   const warnings = [];
   const readJson2 = (rel) => {
-    const path9 = join12(target, rel);
-    if (!existsSync12(path9)) {
+    const path9 = join13(target, rel);
+    if (!existsSync13(path9)) {
       problems.push(`missing ${rel}`);
       return null;
     }
     try {
-      return JSON.parse(readFileSync10(path9, "utf8"));
+      return JSON.parse(readFileSync11(path9, "utf8"));
     } catch (err) {
       problems.push(`${rel}: invalid JSON — ${err instanceof Error ? err.message : err}`);
       return null;
     }
   };
-  if (!existsSync12(join12(target, "brand.md")))
+  if (!existsSync13(join13(target, "brand.md")))
     problems.push("missing brand.md");
   const store = readJson2("store.json");
   if (store && (!store.name || !store.slug))
@@ -21375,7 +21485,7 @@ function brandValidate(dir2 = ".") {
 // src/cli.ts
 var __dirname4 = dirname3(fileURLToPath3(import.meta.url));
 var require2 = createRequire2(import.meta.url);
-var pkg = require2(join13(__dirname4, "..", "package.json"));
+var pkg = require2(join14(__dirname4, "..", "package.json"));
 try {
   updateNotifier({ pkg }).notify({
     isGlobal: true,
@@ -21488,6 +21598,10 @@ adsPlan.command("show <id>").description("Print one plan's content (id, or slug@
 ads.command("open").description("Open the Structure canvas for the active workspace").action(() => {
   adsOpen();
 });
+var adsCreative = ads.command("creative").description("Creatives for folder campaigns — generated through the canvas pipeline");
+adsCreative.command("generate <campaign>").description("Generate one image (safe zones + product fidelity) into the campaign's creatives/ — same pipeline, same asset library, stored once").requiredOption("--prompt <text>", "what the image should be").option("--orientation <o>", "square | landscape | portrait", "square").option("--ref <url...>", "product photos the image must stay faithful to").option("--name <name>", "filename stem (default: derived)").action(async (campaign, options) => {
+  await adsCreativeGenerate({ campaign, ...options });
+});
 ads.command("doctor [dir]").description("Health checks that have each broken once: slug alignment, consent drift, timezone match, credential expiry").action(async (dir2) => {
   await adsDoctor(dir2);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zalify/cli",
-  "version": "0.22.1",
+  "version": "0.23.0",
   "description": "Zalify CLI - command-line interface for Zalify",
   "type": "module",
   "main": "dist/cli.js",