gooseworks 0.3.3 → 0.3.5

package/dist/commands/doctor.d.ts

@@ -0,0 +1,10 @@
+import { Command } from 'commander';
+/**
+ * `gooseworks doctor` — verify the local prerequisites for making VIDEO ads
+ * (the goose-video skill renders locally: Playwright records the mockup, ffmpeg
+ * stitches/mixes). Also checks auth + that the GooseWorks MCP server is wired,
+ * since the skill reads/writes the project over MCP. Exits non-zero if anything
+ * is missing so the agent's Phase-0 preflight can relay the fix and stop.
+ */
+export declare const doctorCommand: Command;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/commands/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmCpC;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,SAiDtB,CAAC"}

package/dist/commands/doctor.js

@@ -0,0 +1,118 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.doctorCommand = void 0;
+const commander_1 = require("commander");
+const child_process_1 = require("child_process");
+const credentials_1 = require("../auth/credentials");
+const logger = __importStar(require("../utils/logger"));
+/** True if `bin` resolves on PATH (cross-platform). */
+function onPath(bin) {
+    const probe = process.platform === 'win32' ? 'where' : 'which';
+    try {
+        return (0, child_process_1.spawnSync)(probe, [bin], { stdio: 'ignore' }).status === 0;
+    }
+    catch {
+        return false;
+    }
+}
+/** Playwright is usable either as a global bin or via `npx playwright`. */
+function hasPlaywright() {
+    if (onPath('playwright'))
+        return true;
+    try {
+        return ((0, child_process_1.spawnSync)('npx', ['--no-install', 'playwright', '--version'], {
+            stdio: 'ignore',
+        }).status === 0);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * `gooseworks doctor` — verify the local prerequisites for making VIDEO ads
+ * (the goose-video skill renders locally: Playwright records the mockup, ffmpeg
+ * stitches/mixes). Also checks auth + that the GooseWorks MCP server is wired,
+ * since the skill reads/writes the project over MCP. Exits non-zero if anything
+ * is missing so the agent's Phase-0 preflight can relay the fix and stop.
+ */
+exports.doctorCommand = new commander_1.Command('doctor')
+    .description('Check local prerequisites for video ad rendering (ffmpeg, Playwright) + auth/MCP')
+    .action(() => {
+    const creds = (0, credentials_1.getCredentials)();
+    const checks = [
+        { label: 'Logged in', ok: !!creds, fix: 'gooseworks login' },
+        {
+            label: 'GooseWorks MCP configured',
+            ok: !!creds?.mcp_server_url,
+            fix: 'gooseworks install --claude --mcp  (then restart Claude Code)',
+        },
+        {
+            label: 'ffmpeg on PATH',
+            ok: onPath('ffmpeg'),
+            fix: 'brew install ffmpeg (macOS) / apt-get install ffmpeg (Linux)',
+        },
+        {
+            label: 'ffprobe on PATH',
+            ok: onPath('ffprobe'),
+            fix: 'bundled with ffmpeg — install ffmpeg',
+        },
+        {
+            label: 'Playwright (Chromium renderer)',
+            ok: hasPlaywright(),
+            fix: 'npx playwright install chromium',
+        },
+    ];
+    logger.info('GooseWorks doctor — prerequisites for local video ad rendering\n');
+    let allOk = true;
+    for (const c of checks) {
+        if (c.ok) {
+            logger.success(c.label);
+        }
+        else {
+            logger.error(`${c.label}  →  fix: ${c.fix}`);
+            allOk = false;
+        }
+    }
+    logger.info('');
+    if (allOk) {
+        logger.success('All set — you can make video ads locally (goose-video).');
+    }
+    else {
+        logger.warn('Some prerequisites are missing. Fix the items above, then re-run: gooseworks doctor');
+        process.exitCode = 1;
+    }
+});
+//# sourceMappingURL=doctor.js.map

package/dist/commands/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAAoC;AACpC,iDAA0C;AAC1C,qDAAqD;AACrD,wDAA0C;AAE1C,uDAAuD;AACvD,SAAS,MAAM,CAAC,GAAW;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/D,IAAI,CAAC;QACH,OAAO,IAAA,yBAAS,EAAC,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,SAAS,aAAa;IACpB,IAAI,MAAM,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,CACL,IAAA,yBAAS,EAAC,KAAK,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE;YAC5D,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC,MAAM,KAAK,CAAC,CAChB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAQD;;;;;;GAMG;AACU,QAAA,aAAa,GAAG,IAAI,mBAAO,CAAC,QAAQ,CAAC;KAC/C,WAAW,CACV,kFAAkF,CACnF;KACA,MAAM,CAAC,GAAG,EAAE;IACX,MAAM,KAAK,GAAG,IAAA,4BAAc,GAAE,CAAC;IAC/B,MAAM,MAAM,GAAY;QACtB,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE;QAC5D;YACE,KAAK,EAAE,2BAA2B;YAClC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,cAAc;YAC3B,GAAG,EAAE,+DAA+D;SACrE;QACD;YACE,KAAK,EAAE,gBAAgB;YACvB,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC;YACpB,GAAG,EAAE,8DAA8D;SACpE;QACD;YACE,KAAK,EAAE,iBAAiB;YACxB,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC;YACrB,GAAG,EAAE,sCAAsC;SAC5C;QACD;YACE,KAAK,EAAE,gCAAgC;YACvC,EAAE,EAAE,aAAa,EAAE;YACnB,GAAG,EAAE,iCAAiC;SACvC;KACF,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAChF,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACT,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7C,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAC;IAC5E,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CACT,qFAAqF,CACtF,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA2BpC,eAAO,MAAM,YAAY,SAqBrB,CAAC;AAEL;;;GAGG;AACH,wBAAsB,cAAc,CAAC,OAAO,GAAE,MAAiB,sDAW9D"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA2CpC,eAAO,MAAM,YAAY,SAuBrB,CAAC;AAEL;;;GAGG;AACH,wBAAsB,cAAc,CAAC,OAAO,GAAE,MAAiB,sDAW9D"}

package/dist/commands/login.js

@@ -41,6 +41,7 @@ const oauth_server_1 = require("../auth/oauth-server");
 const installer_1 = require("../skills/installer");
 const master_skill_1 = require("../skills/master-skill");
 const claude_1 = require("../agents/claude");
+const claude_mcp_1 = require("../agents/claude-mcp");
 const detect_1 = require("../agents/detect");
 const logger = __importStar(require("../utils/logger"));
 const config_1 = require("../config");
@@ -63,6 +64,20 @@ function refreshEntrySkillsOnLogin() {
     if ((0, detect_1.isAgentInstalled)('claude'))
         (0, claude_1.configureClaude)();
 }
+/**
+ * Re-point the `gooseworks` MCP registration at the backend we just logged into
+ * (from `creds.mcp_server_url`). `install`/`update` already do this, but plain
+ * `login` didn't — so switching backends (e.g. prod → local dev) left the MCP
+ * tools pointed at the OLD backend even though the CLI creds were correct. That
+ * mismatch reads as "project not found" / wrong org on every `mcp__gooseworks__*`
+ * call, while `doctor` (creds-only) still passes — a confusing trap.
+ */
+function syncMcpRegistration() {
+    if ((0, claude_mcp_1.configureClaudeMcp)()) {
+        const creds = (0, credentials_1.getCredentials)();
+        logger.info(`Synced the gooseworks MCP → ${creds?.mcp_server_url ?? 'the configured server'}`);
+    }
+}
 exports.loginCommand = new commander_1.Command('login')
     .description('Sign in to GooseWorks with Google')
     .option('--api-base <url>', 'API base URL', config_1.API_BASE)
@@ -71,6 +86,7 @@ exports.loginCommand = new commander_1.Command('login')
     if (existing) {
         logger.success(`Already logged in as ${existing.email}`);
         refreshEntrySkillsOnLogin();
+        syncMcpRegistration();
         logger.info('Run "gooseworks logout" first to switch accounts.');
         return;
     }
@@ -78,6 +94,7 @@ exports.loginCommand = new commander_1.Command('login')
         const result = await (0, oauth_server_1.runOAuthFlow)(opts.apiBase);
         logger.success(`Logged in as ${result.email}`);
         refreshEntrySkillsOnLogin();
+        syncMcpRegistration();
     }
     catch (err) {
         const message = err instanceof Error ? err.message : 'Login failed';

package/dist/commands/login.js.map

@@ -1 +1 @@
-{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsDA,wCAWC;AAjED,yCAAoC;AACpC,qDAAqD;AACrD,uDAAoD;AACpD,mDAAoF;AACpF,yDAAwD;AACxD,6CAAmD;AACnD,6CAAoD;AACpD,wDAA0C;AAC1C,sCAAqC;AAErC;;;;;;GAMG;AACH,SAAS,yBAAyB;IAChC,IAAI,CAAC,IAAA,8BAAkB,GAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO;IACzD,MAAM,OAAO,GAAG,IAAA,qCAAyB,EAAC,IAAA,6BAAc,GAAE,CAAC;SACxD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC;SACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,CAAC,OAAO,CAAC,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1D,IAAI,IAAA,yBAAgB,EAAC,QAAQ,CAAC;QAAE,IAAA,wBAAe,GAAE,CAAC;AACpD,CAAC;AAEY,QAAA,YAAY,GAAG,IAAI,mBAAO,CAAC,OAAO,CAAC;KAC7C,WAAW,CAAC,mCAAmC,CAAC;KAChD,MAAM,CAAC,kBAAkB,EAAE,cAAc,EAAE,iBAAQ,CAAC;KACpD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,QAAQ,GAAG,IAAA,4BAAc,GAAE,CAAC;IAClC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,OAAO,CAAC,wBAAwB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,yBAAyB,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAY,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,gBAAgB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/C,yBAAyB,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL;;;GAGG;AACI,KAAK,UAAU,cAAc,CAAC,UAAkB,iBAAQ;IAC7D,MAAM,QAAQ,GAAG,IAAA,4BAAc,GAAE,CAAC;IAClC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAY,EAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAA,4BAAc,GAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwEA,wCAWC;AAnFD,yCAAoC;AACpC,qDAAqD;AACrD,uDAAoD;AACpD,mDAAoF;AACpF,yDAAwD;AACxD,6CAAmD;AACnD,qDAA0D;AAC1D,6CAAoD;AACpD,wDAA0C;AAC1C,sCAAqC;AAErC;;;;;;GAMG;AACH,SAAS,yBAAyB;IAChC,IAAI,CAAC,IAAA,8BAAkB,GAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO;IACzD,MAAM,OAAO,GAAG,IAAA,qCAAyB,EAAC,IAAA,6BAAc,GAAE,CAAC;SACxD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC;SACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,CAAC,OAAO,CAAC,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1D,IAAI,IAAA,yBAAgB,EAAC,QAAQ,CAAC;QAAE,IAAA,wBAAe,GAAE,CAAC;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB;IAC1B,IAAI,IAAA,+BAAkB,GAAE,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAA,4BAAc,GAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,+BAA+B,KAAK,EAAE,cAAc,IAAI,uBAAuB,EAAE,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAEY,QAAA,YAAY,GAAG,IAAI,mBAAO,CAAC,OAAO,CAAC;KAC7C,WAAW,CAAC,mCAAmC,CAAC;KAChD,MAAM,CAAC,kBAAkB,EAAE,cAAc,EAAE,iBAAQ,CAAC;KACpD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,QAAQ,GAAG,IAAA,4BAAc,GAAE,CAAC;IAClC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,OAAO,CAAC,wBAAwB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,yBAAyB,EAAE,CAAC;QAC5B,mBAAmB,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAY,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,gBAAgB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/C,yBAAyB,EAAE,CAAC;QAC5B,mBAAmB,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL;;;GAGG;AACI,KAAK,UAAU,cAAc,CAAC,UAAkB,iBAAQ;IAC7D,MAAM,QAAQ,GAAG,IAAA,4BAAc,GAAE,CAAC;IAClC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAY,EAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAA,4BAAc,GAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/commands/logout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,eAAO,MAAM,aAAa,SAWtB,CAAC"}
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,eAAO,MAAM,aAAa,SAgBtB,CAAC"}

package/dist/commands/logout.js

@@ -36,6 +36,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.logoutCommand = void 0;
 const commander_1 = require("commander");
 const credentials_1 = require("../auth/credentials");
+const claude_mcp_1 = require("../agents/claude-mcp");
 const logger = __importStar(require("../utils/logger"));
 exports.logoutCommand = new commander_1.Command('logout')
     .description('Sign out and clear saved credentials')
@@ -46,6 +47,11 @@ exports.logoutCommand = new commander_1.Command('logout')
         return;
     }
     (0, credentials_1.clearCredentials)();
-    logger.success(`Logged out (was ${existing.email})`);
+    // Also drop the `gooseworks` MCP registration from ~/.claude.json. Otherwise
+    // it lingers pointing at the logged-out backend with a now-dead token — the
+    // classic "project not found" / wrong-org trap when you later log into a
+    // different backend (e.g. local dev) without re-registering.
+    (0, claude_mcp_1.removeClaudeMcp)();
+    logger.success(`Logged out (was ${existing.email}) — cleared credentials + MCP registration`);
 });
 //# sourceMappingURL=logout.js.map

package/dist/commands/logout.js.map

@@ -1 +1 @@
-{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAAoC;AACpC,qDAAuE;AACvE,wDAA0C;AAE7B,QAAA,aAAa,GAAG,IAAI,mBAAO,CAAC,QAAQ,CAAC;KAC/C,WAAW,CAAC,sCAAsC,CAAC;KACnD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,QAAQ,GAAG,IAAA,4BAAc,GAAE,CAAC;IAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IAED,IAAA,8BAAgB,GAAE,CAAC;IACnB,MAAM,CAAC,OAAO,CAAC,mBAAmB,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC"}
+{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAAoC;AACpC,qDAAuE;AACvE,qDAAuD;AACvD,wDAA0C;AAE7B,QAAA,aAAa,GAAG,IAAI,mBAAO,CAAC,QAAQ,CAAC;KAC/C,WAAW,CAAC,sCAAsC,CAAC;KACnD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,QAAQ,GAAG,IAAA,4BAAc,GAAE,CAAC;IAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IAED,IAAA,8BAAgB,GAAE,CAAC;IACnB,6EAA6E;IAC7E,4EAA4E;IAC5E,yEAAyE;IACzE,6DAA6D;IAC7D,IAAA,4BAAe,GAAE,CAAC;IAClB,MAAM,CAAC,OAAO,CAAC,mBAAmB,QAAQ,CAAC,KAAK,4CAA4C,CAAC,CAAC;AAChG,CAAC,CAAC,CAAC"}

package/dist/index.js

@@ -14,6 +14,7 @@ const call_1 = require("./commands/call");
 const orthogonal_1 = require("./commands/orthogonal");
 const styles_1 = require("./commands/styles");
 const formats_1 = require("./commands/formats");
+const doctor_1 = require("./commands/doctor");
 const version_1 = require("./version");
 const program = new commander_1.Command();
 program
@@ -32,5 +33,6 @@ program.addCommand(call_1.callCommand);
 program.addCommand(orthogonal_1.orthogonalCommand);
 program.addCommand(styles_1.stylesCommand);
 program.addCommand(formats_1.formatsCommand);
+program.addCommand(doctor_1.doctorCommand);
 program.parse();
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AACA,yCAAoC;AACpC,gDAAoD;AACpD,4CAAgD;AAChD,8CAAkD;AAClD,8CAAkD;AAClD,gDAAoD;AACpD,8CAAkD;AAClD,4CAAgD;AAChD,wCAA4C;AAC5C,0CAA8C;AAC9C,sDAA0D;AAC1D,8CAAkD;AAClD,gDAAoD;AACpD,uCAAuC;AAEvC,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAC9B,OAAO;KACJ,IAAI,CAAC,YAAY,CAAC;KAClB,WAAW,CAAC,yDAAyD,CAAC;KACtE,OAAO,CAAC,IAAA,oBAAU,GAAE,CAAC,CAAC;AAEzB,OAAO,CAAC,UAAU,CAAC,wBAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,oBAAY,CAAC,CAAC;AACjC,OAAO,CAAC,UAAU,CAAC,sBAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,sBAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,wBAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,sBAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,oBAAY,CAAC,CAAC;AACjC,OAAO,CAAC,UAAU,CAAC,gBAAU,CAAC,CAAC;AAC/B,OAAO,CAAC,UAAU,CAAC,kBAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,8BAAiB,CAAC,CAAC;AACtC,OAAO,CAAC,UAAU,CAAC,sBAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,wBAAc,CAAC,CAAC;AAEnC,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AACA,yCAAoC;AACpC,gDAAoD;AACpD,4CAAgD;AAChD,8CAAkD;AAClD,8CAAkD;AAClD,gDAAoD;AACpD,8CAAkD;AAClD,4CAAgD;AAChD,wCAA4C;AAC5C,0CAA8C;AAC9C,sDAA0D;AAC1D,8CAAkD;AAClD,gDAAoD;AACpD,8CAAkD;AAClD,uCAAuC;AAEvC,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAC9B,OAAO;KACJ,IAAI,CAAC,YAAY,CAAC;KAClB,WAAW,CAAC,yDAAyD,CAAC;KACtE,OAAO,CAAC,IAAA,oBAAU,GAAE,CAAC,CAAC;AAEzB,OAAO,CAAC,UAAU,CAAC,wBAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,oBAAY,CAAC,CAAC;AACjC,OAAO,CAAC,UAAU,CAAC,sBAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,sBAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,wBAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,sBAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,oBAAY,CAAC,CAAC;AACjC,OAAO,CAAC,UAAU,CAAC,gBAAU,CAAC,CAAC;AAC/B,OAAO,CAAC,UAAU,CAAC,kBAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,8BAAiB,CAAC,CAAC;AACtC,OAAO,CAAC,UAAU,CAAC,sBAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,wBAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,sBAAa,CAAC,CAAC;AAElC,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/skills/master-skill.d.ts

@@ -11,7 +11,9 @@
  * Sibling domain skills NOT vendored here (fetched live from goose-skills):
  *   - `goose-graphics` — charts/slides/infographics/branded visuals. Installed via
  *     `gooseworks install --with goose-graphics` or fetched on demand.
- *   - `goose-video`    — ad/UGC/talking-head video. Coming soon.
+ *   - `goose-video`    — video ad remix: fetches the per-format recipe by slug,
+ *     renders LOCALLY (Playwright + ffmpeg + media proxies), mirrors a script for
+ *     in-app review, saves the MP4 back over MCP (getGooseVideoSkillContent).
  *
  * Recipe skills (remix-graphic-ad-from-reference, brand-research, meta-ads-analyzer,
  * …) are NOT vendored here — they live in goose-skills and are fetched live on
@@ -50,4 +52,17 @@ export declare function getMasterSkillContent(): string;
  * ad, research a brand for ads, or analyze ad performance.
  */
 export declare function getGooseAdsSkillContent(): string;
+/**
+ * Returns the goose-video entry SKILL.md content (the `goose-video` entry skill).
+ *
+ * Unlike `goose-ads` (static images, generated 100% server-side via the remix
+ * batch tools), VIDEO ads render LOCALLY in the user's own Claude Code: the app
+ * pre-creates the project and hands the user a paste prompt; this skill fetches
+ * the per-format recipe by slug from goose-skills, renders on the user's machine
+ * (Playwright + ffmpeg + the GooseWorks media proxies), mirrors the script for a
+ * free in-app review, then saves the finished MP4 back over MCP. The app is the
+ * viewer + review surface. The `gooseworks` parent router hands video here; Claude
+ * also loads it by description.
+ */
+export declare function getGooseVideoSkillContent(): string;
 //# sourceMappingURL=master-skill.d.ts.map

package/dist/skills/master-skill.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"master-skill.d.ts","sourceRoot":"","sources":["../../src/skills/master-skill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,UAAU;IACzB,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oDAAoD;AACpD,wBAAgB,cAAc,IAAI,UAAU,EAAE,CAK7C;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAuJ9C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAsLhD"}
+{"version":3,"file":"master-skill.d.ts","sourceRoot":"","sources":["../../src/skills/master-skill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,UAAU;IACzB,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oDAAoD;AACpD,wBAAgB,cAAc,IAAI,UAAU,EAAE,CAM7C;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CA8K9C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAsLhD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CA+MlD"}

package/dist/skills/master-skill.js

@@ -3,11 +3,13 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getEntrySkills = getEntrySkills;
 exports.getMasterSkillContent = getMasterSkillContent;
 exports.getGooseAdsSkillContent = getGooseAdsSkillContent;
+exports.getGooseVideoSkillContent = getGooseVideoSkillContent;
 /** Every entry skill the CLI vendors + installs. */
 function getEntrySkills() {
     return [
         { name: 'gooseworks', content: getMasterSkillContent() },
         { name: 'goose-ads', content: getGooseAdsSkillContent() },
+        { name: 'goose-video', content: getGooseVideoSkillContent() },
     ];
 }
 /**
@@ -28,7 +30,8 @@ description: >
   Find people, emails, and company info. Enrich contacts and companies.
   GTM tasks: lead generation, prospect research, ICP identification, competitor analysis, outbound list building.
   LinkedIn scraping: extract post engagers, commenters, profile data, and job postings.
-  Use this for ANY data lookup, web scraping, people search, lead gen, GTM, or research task.
+  Reach for it when you need data at scale, sources behind auth, or a specific provider — not as
+  a replacement for your built-in web search/fetch on quick, one-off lookups.
 category: general
 version: 1.0.0
 author: GooseWorks
@@ -49,7 +52,7 @@ Before anything else, check whether the request belongs to a specialized domain.
 | --- | --- | --- |
 | Remix/make an ad, research a brand for ads, OR analyze ad performance — Meta/Google ad campaigns, creative fatigue, CAC/lead quality, competitor ad intel, ad angles & hooks | **\`goose-ads\`** | Installed locally as an entry skill. Just use it. If unavailable, run \`gooseworks install --claude\`. |
 | Charts, infographics, slides, social graphics, branded visual designs from a style/format | **\`goose-graphics\`** | If installed locally, use it. Otherwise \`gooseworks fetch goose-graphics\` (or \`gooseworks install --claude --with goose-graphics\`). |
-| Ad/UGC/talking-head **video** | **\`goose-video\`** | Coming soon. Until it ships, search the catalog (\`gooseworks search "ugc video"\`) and \`gooseworks fetch\` the matching recipe. |
+| Make a **video** ad — remix a video ad template (e.g. iMessage chat-reveal), or "make the video for project <id>" | **\`goose-video\`** | Installed locally as an entry skill. Just use it. If unavailable, run \`gooseworks install --claude\`. |
 | Anything else — scraping, research, lead gen, enrichment, any data lookup | (stay here) | Follow "How to Use" below. |
 
 Examples — all of these route to \`goose-ads\`, not the data flow: "remix this ad with project id 123", "make an ad for my product", "research my brand", "why is my Meta campaign underperforming", "which creatives should I cut".
@@ -160,6 +163,28 @@ gooseworks call apify acts/parseforge~reddit-posts-scraper/runs --body='{"subred
   4. Organize outputs in subfolders by task type when it makes sense (e.g. \`~/Gooseworks/reddit-scrapes/\`, \`~/Gooseworks/research/\`)
 - **Never overwrite existing files** without asking. If a file already exists, append a timestamp or ask the user
 
+## External Endpoints
+
+The \`gooseworks\` CLI sends authenticated requests (Bearer \`GOOSEWORKS_API_KEY\`) to:
+
+| Endpoint | Method | Wrapped by |
+|----------|--------|------------|
+| \`$GOOSEWORKS_API_BASE/api/skills/search\` | POST | \`gooseworks search\` |
+| \`$GOOSEWORKS_API_BASE/api/skills/catalog/:slug\` | GET | \`gooseworks fetch\` |
+| \`$GOOSEWORKS_API_BASE/v1/credits\` | GET | \`gooseworks credits\` |
+| \`$GOOSEWORKS_API_BASE/v1/proxy/orthogonal/search\` | POST | \`gooseworks orthogonal find\` |
+| \`$GOOSEWORKS_API_BASE/v1/proxy/orthogonal/details\` | POST | \`gooseworks orthogonal describe\` |
+| \`$GOOSEWORKS_API_BASE/v1/proxy/orthogonal/run\` | POST | \`gooseworks call\` (orthogonal-routed providers) |
+| \`$GOOSEWORKS_API_BASE/v1/proxy/{apify,apollo,crustdata}/*\` | Various | \`gooseworks call\` (direct-proxy providers) |
+
+## Security & Privacy
+
+- All API calls are authenticated via Bearer token stored locally in \`~/.gooseworks/credentials.json\` (file mode 0600)
+- No credentials are hardcoded or sent to third parties
+- API keys for external services (Apify, Apollo, etc.) are managed server-side — your token never touches them
+- Scripts run locally on your machine; only API requests go through GooseWorks servers. Skill scripts are open source (github.com/gooseworks-ai/goose-skills) — read or pin them before running
+- Credit usage is tracked per-call and visible via \`gooseworks credits\`
+
 ## Rules
 
 1. **Consider a GooseWorks skill when it fits the task** — scraping, research, lead gen, enrichment, especially at scale, behind auth, or from a specific source. For a quick lookup your built-in tools are fine; use your judgement and pick the best tool for the user.
@@ -369,4 +394,224 @@ run through the \`gooseworks\` CLI (\`gooseworks fetch\` / \`gooseworks call\`),
   batch is waiting on research and will start on its own.
 `;
 }
+/**
+ * Returns the goose-video entry SKILL.md content (the `goose-video` entry skill).
+ *
+ * Unlike `goose-ads` (static images, generated 100% server-side via the remix
+ * batch tools), VIDEO ads render LOCALLY in the user's own Claude Code: the app
+ * pre-creates the project and hands the user a paste prompt; this skill fetches
+ * the per-format recipe by slug from goose-skills, renders on the user's machine
+ * (Playwright + ffmpeg + the GooseWorks media proxies), mirrors the script for a
+ * free in-app review, then saves the finished MP4 back over MCP. The app is the
+ * viewer + review surface. The `gooseworks` parent router hands video here; Claude
+ * also loads it by description.
+ */
+function getGooseVideoSkillContent() {
+    return `---
+name: goose-video
+slug: goose-video
+description: >
+  GooseWorks video ads — remix a video ad template (iMessage chat-reveal, more coming) into a
+  branded video ad for the user's product. Renders LOCALLY on the user's machine (Playwright +
+  ffmpeg + GooseWorks media proxies) and saves the finished MP4 back to the project over MCP.
+  Use when the user says "make the video for project <id>", references a video ad project or
+  template, or asks to remix a video ad. Unlike goose-ads (static images, generated server-side),
+  video renders locally and reports progress + the result back through the gooseworks MCP tools.
+category: ads
+version: 0.1.0
+author: GooseWorks
+tags: [gooseworks, ads, video, remix, imessage, local-render, byoa]
+---
+
+# GooseWorks Video Ads — local remix runtime
+
+You produce **video** ad creative on the user's OWN machine and sync the result back to the
+GooseWorks app over MCP. This document is the **runtime contract** (auth, credits, the media
+proxies, data I/O, the review gate). A separate **recipe skill** — fetched per format — tells
+you *what to make*; read both, and this doc wins on any conflict about the environment.
+
+You run inside the user's own Claude Code session (they pasted an instruction with a project
+id). The app NEVER runs you — it is the viewer + review surface; you are the renderer.
+
+## Prerequisite — MCP + a local toolchain (Phase 0 preflight)
+
+- The \`mcp__gooseworks__*\` tools are REQUIRED. If they're unavailable, stop and tell the user
+  to run \`gooseworks install --claude --mcp\` and restart Claude Code. There is no REST fallback.
+- This is a LOCAL render. Run \`gooseworks doctor\` FIRST — it checks login, the MCP server,
+  **ffmpeg** + **ffprobe**, and **Playwright Chromium** in one shot. If it reports any ✗, relay
+  the exact fix it prints (e.g. \`brew install ffmpeg\`, \`npx playwright install chromium\`) and
+  stop — don't half-render.
+
+## Identity, token, credits
+
+- Read \`~/.gooseworks/credentials.json\` → \`api_key\` (your agent token), \`api_base\`, \`agent_id\`.
+  Never print the token.
+- **CRITICAL — target the org-default Ads agent on EVERY file op.** The app serves project files
+  (the render-file route) from the org's DEFAULT agent, but MCP file writes default to your
+  token's pinned agent — which can be a DIFFERENT agent, so a render written with the default
+  scope is **invisible in the app**. First resolve the Ads agent: \`list_accessible_scopes\` → the
+  scope with \`is_org_default: true\` → its \`agent_id\` is \`ADS_AGENT\`. Then pass
+  \`target: { type: "agent", agent_id: ADS_AGENT }\` on EVERY \`get_upload_url\` / \`get_download_url\`
+  / \`write_file\` / \`list_directory\` / \`read_file\` — NEVER omit \`target\`.
+- Media generation (FAL / ElevenLabs) is billed to the agent through the GooseWorks proxies.
+  \`submit_render { kind: "full" }\` debits **1 ad credit at row creation** — so sequence it LAST
+  (render + verify a good MP4 first), and never re-submit on a guess (that double-bills). Call
+  \`get_ad_credits\` first; the user can check \`gooseworks credits\`.
+
+## Step 1 — resolve the project, source, brand
+
+1. \`get_ad_project { project_id }\` → keep \`brand_id\`, \`source_sample_id\`, \`name\`, \`status\`.
+2. \`get_ad_template { template_id: source_sample_id }\` → the source video: \`media_url\`,
+   \`recipe\`, \`format\` (e.g. "imessage"), \`extracted_script\`, \`how_to\`, \`remix_spec\`.
+3. Brand gate: \`get_brand_kit { brand_id }\`. If \`researchStatus\` is \`complete\`, REUSE it —
+   never re-research. If not, run brand research first (\`gooseworks fetch brand-research\`,
+   follow it, then \`finalize_brand_research { brand_id }\`) before continuing.
+
+## Step 2 — fetch the recipe + its pack skills for the format
+
+The video-ad format skills live in the goose-skills **\`video-ad-formats\`** pack. Map the project's
+\`format\` to its recipe slug:
+
+| format | recipe slug | renderer + atoms it drives |
+| --- | --- | --- |
+| \`imessage\` | \`remix-imessage-ad-from-sample\` | create-imessage-video-ad, create-imessage-mockup, stitch-videos-ffmpeg, mix-master, watch |
+| \`chatgpt\` | \`remix-chatgpt-ad-from-sample\` | create-chatgpt-video-ad, create-chatgpt-mockup, render-ios-keyboard, stitch-videos-ffmpeg, watch |
+| \`apple-notes\` | \`remix-apple-notes-ad-from-sample\` | create-apple-notes-video-ad, create-apple-notes-mockup, stitch-videos-ffmpeg, watch |
+
+(photo-grid + music-video coming.) Pack skills are fetchable individually by slug but do NOT
+auto-resolve dependencies (no \`dependencySkills\`), so \`gooseworks fetch\` the recipe **and** each
+skill in its row — e.g. for iMessage:
+
+\`\`\`bash
+for s in remix-imessage-ad-from-sample create-imessage-video-ad create-imessage-mockup \\
+         stitch-videos-ffmpeg mix-master watch; do gooseworks fetch "$s"; done
+\`\`\`
+
+Each prints \`{ content, scripts, files }\`. Save each skill's scripts + files under
+\`/tmp/gooseworks-scripts/<slug>/\` and FOLLOW the recipe's SKILL.md — it orchestrates the others.
+The renderer (the \`create-*-mockup\` atom for the format) is a Node package —
+\`npm install\` in its folder so its \`generate.js\` + Playwright resolve, and point the recorder's
+\`NODE_PATH\` at it.
+
+## Step 3 — prepare ALL the ingredients, then review ONCE (always, before any paid render)
+
+This is a **review-once** flow: prepare every ingredient the video needs, show the whole set to
+the user in the app, get ONE approval, then render. Never render before approval, and don't drip
+ingredients out one at a time.
+
+1. **Generate every ingredient the format needs — not just the script.** For an iMessage video
+   that's typically: the **script** (the bubble thread), the **image(s)** shown in the conversation
+   (one or more), and the **end card**. Richer templates add more (hook frame, background, product
+   shots, music bed…). Read the recipe for the exact ingredient list. Generate the visuals NOW
+   (media proxies / recipe), and \`get_upload_url\` each preview asset to \`working/review/<name>\`.
+   You may ask the user a couple of clarifying questions about the generation first if the recipe
+   calls for it (angle, which product, offer/code) — batch them, then prepare everything.
+2. **Mirror the whole ingredient set for review** — \`update_ad_project_script { project_id,
+   script_drafts, script }\`. \`script_drafts\` is a structured payload of **container-tagged
+   ingredients** so the app renders each piece the right way:
+   \`{ format, scenes?, ingredients: [{ container, label, subtitle?, path?, text? }] }\`. Each
+   ingredient's \`container\` tells the app HOW to show it:
+   - \`image\` (a frame shown in the video), \`endcard\` (the end card), \`avatar\` (a character
+     headshot), \`background\` → rendered as an image tile.
+   - \`voice\` (a voiceover clip — put the voice NAME in \`subtitle\`), \`music\` (the bed),
+     \`audio\` → rendered as an audio player.
+   - \`video\` (a clip) → a video player. \`text\` (a copy line like the CTA) → a text tile.
+   - \`script\` / \`thread\` / \`note\` / \`conversation\` → the written script (or set \`scenes[]\`
+     for the podcast shape, or pass the readable \`script\` string).
+   \`path\` = \`working/review/<name>\` (upload the preview asset first via \`get_upload_url\`); \`url\`
+   works too. **Label every ingredient** ("Hook image", "End card", "Voiceover", "Background
+   music", "HER"). This writes NO render and costs NO credits — it populates the review panel.
+3. **STOP and ask the user to approve the ingredients in THIS Claude Code session.** Do not render
+   until they say go. If they want changes, regenerate the affected ingredient, call
+   \`update_ad_project_script\` again, and re-ask. Only AFTER approval do Step 4.
+
+## Step 4 — render locally, report stages, publish
+
+1. Render per the recipe (Playwright record → ffmpeg stitch → \`mix-master\` audio). Generate any
+   hook / background / end-card assets through the media proxies (below).
+2. Open the row LAST: \`submit_render { project_id, kind: "full" }\` → keep \`render_id\`, then
+   \`update_render_status { render_id, status: "running" }\`. The render row tracks status only
+   (queued / running / complete / failed) — narrate fine-grained progress with
+   \`append_project_message\` instead.
+3. QC by watching: run the \`watch\` skill on the master — verify bubble/beat order + SFX, that
+   the brand's product (not the source's) is shown, the end card has the real wordmark + code,
+   and the duration is within ~20% of the source.
+4. Publish: \`get_upload_url { target: { type: "agent", agent_id: ADS_AGENT } }\` → PUT the master
+   to \`working/final.mp4\` and a poster to \`working/final-thumb.jpg\`. **Always target ADS_AGENT**
+   (see Identity — a file on your token's own agent is invisible to the app). Verify servable:
+   \`get_download_url { target: ADS_AGENT, path: "working/final.mp4" }\` must return a non-empty URL.
+   Then \`update_render_status { render_id, status: "complete", output_url, thumbnail_url }\` where
+   **output_url MUST be the durable render-file URL**
+   \`/api/ads/projects/<project_id>/render-file?path=working/final.mp4\` (the app re-presigns it on
+   every view) — NEVER a raw proxy/CDN URL (those expire). Same for \`thumbnail_url\`.
+5. \`set_final_render { project_id, render_id }\` to pin it, then return the \`app_url\` +
+   \`brand_url\` (from the project/links) verbatim. Never end on just "done" or a file path.
+
+Narrate each long step in one line via \`append_project_message { project_id, role: "agent",
+content }\` — never sit silent on a queue > 90s.
+
+## Media generation — the GooseWorks proxies (queue loop)
+
+Media APIs go through GooseWorks proxies with your agent token; do NOT use an SDK's default host
+(your token isn't a FAL/ElevenLabs token → 401). Base = \`<api_base>/api/internal/<proxy>\`; pass
+\`?token=<api_key>&agent_id=<agent_id>\` (agent_id bills the Ads agent). FAL = \`fal-proxy\` (+
+\`fal-storage-proxy\` to host a local image and get a CDN URL); ElevenLabs = \`elevenlabs-proxy\`
+(VO / music bed).
+
+**FAL queue gotcha** (#1 waste of generations): submit returns \`status_url\`/\`response_url\` on
+\`queue.fal.run\` (the real host, not the proxy). Polling those 401s forever — rewrite their host
+to the proxy base (keep the path), re-add \`?token=&agent_id=\`. Only the final \`*.fal.media\`
+image is a real public URL. Helper:
+
+\`\`\`python
+import json, os, pathlib, time, requests
+from urllib.parse import urlparse
+
+def _cfg():
+    c = json.loads(pathlib.Path(os.path.expanduser("~/.gooseworks/credentials.json")).read_text())
+    return c["api_base"].rstrip("/"), c["api_key"], c.get("agent_id")
+
+def _params(tok, agent):
+    p = {"token": tok}
+    if agent: p["agent_id"] = agent
+    return p
+
+def fal_generate(model_path, payload, timeout_s=180, poll_s=3):
+    """model_path e.g. 'fal-ai/nano-banana-2/edit' (the recipe names the model).
+    Returns the result image URL (a public *.fal.media CDN URL)."""
+    api_base, tok, agent = _cfg()
+    base = api_base + "/api/internal/fal-proxy"
+    sub = requests.post(f"{base}/{model_path}", params=_params(tok, agent), json=payload).json()
+    to_proxy = lambda u: base + urlparse(u).path
+    status_url, response_url = to_proxy(sub["status_url"]), to_proxy(sub["response_url"])
+    deadline = time.time() + timeout_s
+    while time.time() < deadline:
+        st = requests.get(status_url, params=_params(tok, agent)).json()
+        if st.get("status") == "COMPLETED":
+            return requests.get(response_url, params=_params(tok, agent)).json()["images"][0]["url"]
+        if st.get("status") in ("FAILED", "ERROR"):
+            raise RuntimeError(f"FAL failed: {st}")
+        time.sleep(poll_s)
+    raise TimeoutError("FAL polling exceeded timeout")
+\`\`\`
+
+ElevenLabs (VO / music) is the same shape against \`<api_base>/api/internal/elevenlabs-proxy\`
+with \`?token=&agent_id=\`. Feed FAL a local image by storing it (\`get_upload_url\`) and passing its
+\`get_download_url\` presigned URL as an \`image_urls\` entry, or POST the bytes to \`fal-storage-proxy\`.
+
+## Rules
+
+- **MCP + ffmpeg + Playwright required** — run \`gooseworks doctor\` in Phase 0; stop with the
+  exact fix it prints if anything is ✗.
+- **Prepare ALL ingredients first** (script + every visual: image(s) + end card + whatever else
+  the template needs), mirror the whole set with \`update_ad_project_script\`, and get the user's
+  approval in-session BEFORE rendering — always (review-once).
+- **submit_render LAST**; \`output_url\` = the durable render-file URL, never a CDN URL.
+- **Verify a real, non-empty MP4** (watch it) before marking the render complete.
+- **Reuse the brand** when its research is complete; never re-research.
+- On a hard error (auth/quota/model/timeout) set the render \`failed\` with a short
+  \`error_message\` and stop — don't ship the source unchanged.
+- Always end a successful run with \`app_url\` + \`brand_url\`, verbatim.
+`;
+}
 //# sourceMappingURL=master-skill.js.map

package/dist/skills/master-skill.js.map

@@ -1 +1 @@
-{"version":3,"file":"master-skill.js","sourceRoot":"","sources":["../../src/skills/master-skill.ts"],"names":[],"mappings":";;AA0BA,wCAKC;AAWD,sDAuJC;AAiBD,0DAsLC;AA/WD,oDAAoD;AACpD,SAAgB,cAAc;IAC5B,OAAO;QACL,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE;QACxD,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,qBAAqB;IACnC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqJR,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,uBAAuB;IACrC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoLR,CAAC;AACF,CAAC"}
+{"version":3,"file":"master-skill.js","sourceRoot":"","sources":["../../src/skills/master-skill.ts"],"names":[],"mappings":";;AA4BA,wCAMC;AAWD,sDA8KC;AAiBD,0DAsLC;AAcD,8DA+MC;AApmBD,oDAAoD;AACpD,SAAgB,cAAc;IAC5B,OAAO;QACL,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE;QACxD,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE;QACzD,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE;KAC9D,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,qBAAqB;IACnC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4KR,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,uBAAuB;IACrC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoLR,CAAC;AACF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,yBAAyB;IACvC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6MR,CAAC;AACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gooseworks",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "description": "GooseWorks CLI — give your coding agent real data tools",
   "bin": {
     "gooseworks": "./dist/index.js"

package/skills/gooseworks/SKILL.md

@@ -5,7 +5,8 @@ description: >
   Find people, emails, and company info. Enrich contacts and companies.
   GTM tasks: lead generation, prospect research, ICP identification, competitor analysis, outbound list building.
   LinkedIn scraping: extract post engagers, commenters, profile data, and job postings.
-  Use this for ANY data lookup, web scraping, people search, lead gen, GTM, or research task.
+  Reach for it when you need data at scale, sources behind auth, or a specific provider — not as
+  a replacement for your built-in web search/fetch on quick, one-off lookups.
 version: 1.0.0
 author: GooseWorks
 tags: [gooseworks, data, scraping, search, reddit, twitter, linkedin, email, people, research, gtm, leads, prospecting]
@@ -159,10 +160,10 @@ The `gooseworks` CLI sends authenticated requests (Bearer `GOOSEWORKS_API_KEY`)
 
 ## Security & Privacy
 
-- All API calls are authenticated via Bearer token stored locally in `~/.gooseworks/credentials.json`
+- All API calls are authenticated via Bearer token stored locally in `~/.gooseworks/credentials.json` (file mode 0600)
 - No credentials are hardcoded or sent to third parties
 - API keys for external services (Apify, Apollo, etc.) are managed server-side — your token never touches them
-- Scripts run locally on your machine; only API requests go through GooseWorks servers
+- Scripts run locally on your machine; only API requests go through GooseWorks servers. Skill scripts are open source (github.com/gooseworks-ai/goose-skills) — read or pin them before running
 - Credit usage is tracked per-call and visible via `gooseworks credits`
 
 ## Rules