@koda-sl/baker-bridge 0.49.0 → 0.50.0-dev.36aef87f5

package/dist/hono/tag-input.js

@@ -0,0 +1,167 @@
+/**
+ * `baker_ui` — in-process SDK MCP server hosting interactive dashboard tools.
+ *
+ * `request_tag_input` is the blocking tag-change approval form. EVERY tag change
+ * (create / edit / delete) goes through it — the agent proposes one or more
+ * changes, and each becomes a tab in a single blocking form (mirroring
+ * AskUserQuestion's multi-question bundling). The bridge intercepts the call in
+ * `canUseTool`, parks the turn on a pending promise, and the dashboard renders
+ * the tabbed form. The user reviews/edits, fills any secrets (which the model
+ * must never see — API keys, OAuth connections), and approves or declines each
+ * tab. Submissions write straight into the chat's staged tag draft in Convex;
+ * the bridge receives only the REDACTED per-tab results, injects them into
+ * `updatedInput.resolution`, and this tool's trivial handler echoes them back.
+ */
+import { createSdkMcpServer, tool } from "@anthropic-ai/claude-agent-sdk";
+import { z } from "zod";
+export const BAKER_UI_SERVER_NAME = "baker_ui";
+export const TAG_INPUT_TOOL_NAME = "mcp__baker_ui__request_tag_input";
+// Mirror of `TAG_SECRET_FIELDS` in packages/api/src/tags.ts (the bridge is
+// published standalone and cannot depend on @baker/api). The backend strips
+// secret keys again at /api/chat/tag-input-request — this mirror is UX-side
+// defense in depth, not the enforcement point.
+const SECRET_FIELDS_BY_TYPE = {
+    meta: ["accessToken"],
+    amplitude: [],
+    googleAds: ["oauthProviderId", "customerAccountId", "customerId", "loginCustomerId"],
+    tiktok: ["accessToken"],
+    vwo: [],
+    hotjar: [],
+    clarity: [],
+    pinterest: ["conversionToken"],
+    code: [],
+    googleAnalytics: ["apiSecret"],
+    googleTagManager: ["authorizationToken"],
+    hubspot: [],
+    linkedinInsightTag: ["oauthProviderId"],
+    onetrust: [],
+    posthog: [],
+    datafast: ["apiKey"],
+    recaptcha: [],
+    twitterAds: ["oauthProviderId"],
+};
+export const TAG_TYPES = Object.keys(SECRET_FIELDS_BY_TYPE);
+const tagChangeShape = z.object({
+    mode: z.enum(["create", "edit", "delete"]).describe("create a new tag, edit an existing one, or delete one"),
+    tagType: z.enum(TAG_TYPES).describe("Marketing tag type (matches `baker tags list` types)"),
+    ref: z
+        .string()
+        .optional()
+        .describe("Edit/delete: the tag id or tag_temp_* ref from `baker tags list`. Omit for a fresh create."),
+    prefilledConfig: z
+        .record(z.string(), z.string())
+        .optional()
+        .describe("Non-secret config values to prefill this tab with. Never place secret values here."),
+    requestedSecretFields: z
+        .array(z.string())
+        .optional()
+        .describe("Secret field names the user should provide (e.g. accessToken, apiSecret, oauthProviderId)"),
+    message: z.string().optional().describe("One short sentence shown on this tab explaining the change"),
+});
+const tagInputRequestShape = {
+    changes: z
+        .array(tagChangeShape)
+        .min(1)
+        .max(8)
+        .describe("One or more tag changes; each becomes a tab in a single approval form the user resolves together"),
+    resolution: z
+        .record(z.string(), z.unknown())
+        .optional()
+        .describe("Internal — injected by the bridge after the user resolves the form. Never set this yourself."),
+};
+export const tagInputResultSchema = z.discriminatedUnion("status", [
+    z.object({
+        status: z.literal("submitted"),
+        ref: z.string(),
+        type: z.string(),
+        identifier: z.record(z.string(), z.string()).optional(),
+        secretFieldsSet: z.array(z.string()),
+        note: z.string().optional(),
+    }),
+    z.object({
+        status: z.literal("declined"),
+        reason: z.string().optional(),
+    }),
+]);
+/** The redacted resolution the bridge injects and echoes back: one result per requested change. */
+export const tagChangeResolutionSchema = z.object({ results: z.array(tagInputResultSchema) });
+/** Parse-at-boundary for the bridge's `/tag-input-decision` endpoint. Returns null on any mismatch. */
+export function parseTagChangeResolution(value) {
+    const parsed = tagChangeResolutionSchema.safeParse(value);
+    return parsed.success ? parsed.data : null;
+}
+/**
+ * Normalize the raw tool input into a validated change list. `canUseTool` fires
+ * with the model's RAW input — before any MCP schema validation — so a model
+ * that ignores the schema (e.g. emits the legacy single-change shape with
+ * mode/tagType at the top level) reaches the bridge unchecked. Wrap the legacy
+ * shape, drop invalid entries, and return [] for garbage so the caller can
+ * DENY with an actionable message instead of parking the turn on a form the
+ * dashboard will never render.
+ */
+export function normalizeTagInputToolInput(input) {
+    const raw = Array.isArray(input.changes)
+        ? input.changes
+        : typeof input.tagType === "string"
+            ? [input]
+            : [];
+    return raw.flatMap((entry) => {
+        const parsed = tagChangeShape.safeParse(entry);
+        return parsed.success ? [parsed.data] : [];
+    });
+}
+/**
+ * Strip secret-field values a model may have (incorrectly) placed into any
+ * change's `prefilledConfig`, moving their NAMES into `requestedSecretFields` so
+ * the user is still asked — just without the leaked value travelling on.
+ */
+export function sanitizeTagChanges(changes) {
+    return changes.map((change) => {
+        const secretFields = SECRET_FIELDS_BY_TYPE[change.tagType] ?? [];
+        const prefilled = change.prefilledConfig ?? {};
+        const cleaned = {};
+        const leaked = [];
+        for (const [key, value] of Object.entries(prefilled)) {
+            if (secretFields.includes(key)) {
+                leaked.push(key);
+            }
+            else {
+                cleaned[key] = value;
+            }
+        }
+        const requested = [...new Set([...(change.requestedSecretFields ?? []), ...leaked])];
+        return {
+            mode: change.mode,
+            tagType: change.tagType,
+            ...(change.ref !== undefined ? { ref: change.ref } : {}),
+            ...(Object.keys(cleaned).length > 0 ? { prefilledConfig: cleaned } : {}),
+            ...(requested.length > 0 ? { requestedSecretFields: requested } : {}),
+            ...(change.message !== undefined ? { message: change.message } : {}),
+        };
+    });
+}
+const TAG_INPUT_TOOL_DESCRIPTION = [
+    "Propose one or more marketing-tag changes (create / edit / delete) for the user to approve in the dashboard chat. BLOCKS until the user resolves the form.",
+    "This is the ONLY way to change tags — every create, edit, and delete goes through this approval, so never stage tag changes silently.",
+    "Batch related changes into one call: each entry in `changes` becomes a tab the user reviews together.",
+    "Prefill every non-secret field you already know via prefilledConfig, and list needed secret fields (API keys, access tokens, OAuth connections) in requestedSecretFields — never put secret values in prefilledConfig and never ask for secrets in plain chat.",
+    "The user's secret values go straight into the staged tag draft; the results you receive are redacted (field names only). Staged changes apply to production only when the chat is published.",
+].join(" ");
+/**
+ * The handler runs only AFTER `canUseTool` resolved (the bridge blocks there
+ * and injects `resolution` into the input) — so it just echoes the redacted
+ * resolution as the tool result.
+ */
+export function createBakerUiServer() {
+    return createSdkMcpServer({
+        name: BAKER_UI_SERVER_NAME,
+        version: "1.0.0",
+        tools: [
+            tool("request_tag_input", TAG_INPUT_TOOL_DESCRIPTION, tagInputRequestShape, (args) => {
+                const resolution = args.resolution ?? { results: [] };
+                return Promise.resolve({ content: [{ type: "text", text: JSON.stringify(resolution) }] });
+            }),
+        ],
+    });
+}
+//# sourceMappingURL=tag-input.js.map

package/dist/hono/tag-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tag-input.js","sourceRoot":"","sources":["../../src/hono/tag-input.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAAC;AAC/C,MAAM,CAAC,MAAM,mBAAmB,GAAG,kCAAkC,CAAC;AAEtE,2EAA2E;AAC3E,4EAA4E;AAC5E,4EAA4E;AAC5E,+CAA+C;AAC/C,MAAM,qBAAqB,GAAsC;IAC/D,IAAI,EAAE,CAAC,aAAa,CAAC;IACrB,SAAS,EAAE,EAAE;IACb,SAAS,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,YAAY,EAAE,iBAAiB,CAAC;IACpF,MAAM,EAAE,CAAC,aAAa,CAAC;IACvB,GAAG,EAAE,EAAE;IACP,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,EAAE;IACX,SAAS,EAAE,CAAC,iBAAiB,CAAC;IAC9B,IAAI,EAAE,EAAE;IACR,eAAe,EAAE,CAAC,WAAW,CAAC;IAC9B,gBAAgB,EAAE,CAAC,oBAAoB,CAAC;IACxC,OAAO,EAAE,EAAE;IACX,kBAAkB,EAAE,CAAC,iBAAiB,CAAC;IACvC,QAAQ,EAAE,EAAE;IACZ,OAAO,EAAE,EAAE;IACX,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACpB,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,CAAC,iBAAiB,CAAC;CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAA0B,CAAC;AAErF,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC5G,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IAC3F,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,4FAA4F,CAAC;IACzG,eAAe,EAAE,CAAC;SACf,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAC9B,QAAQ,EAAE;SACV,QAAQ,CAAC,oFAAoF,CAAC;IACjG,qBAAqB,EAAE,CAAC;SACrB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,2FAA2F,CAAC;IACxG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;CACtG,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG;IAC3B,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,cAAc,CAAC;SACrB,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,kGAAkG,CAAC;IAC/G,UAAU,EAAE,CAAC;SACV,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/B,QAAQ,EAAE;SACV,QAAQ,CAAC,8FAA8F,CAAC;CAC5G,CAAC;AAgBF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACjE,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC9B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvD,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;CACH,CAAC,CAAC;AAIH,mGAAmG;AACnG,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;AAG9F,uGAAuG;AACvG,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAA8B;IACvE,MAAM,GAAG,GAAc,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QACjD,CAAC,CAAC,KAAK,CAAC,OAAO;QACf,CAAC,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,CAAC,CAAC,CAAC,KAAK,CAAC;YACT,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAoB,EAAE;QAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAyB;IAC1D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5B,MAAM,YAAY,GAAG,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;QAC/C,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACvB,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrF,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,0BAA0B,GAAG;IACjC,4JAA4J;IAC5J,uIAAuI;IACvI,uGAAuG;IACvG,gQAAgQ;IAChQ,8LAA8L;CAC/L,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,kBAAkB,CAAC;QACxB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE;YACL,IAAI,CACF,mBAAmB,EACnB,0BAA0B,EAC1B,oBAAoB,EACpB,CAAC,IAAI,EAA+D,EAAE;gBACpE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAK,EAAE,OAAO,EAAE,EAAE,EAAiC,CAAC;gBACtF,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5F,CAAC,CACF;SACF;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/hono/tag-input.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tag-input.test.d.ts.map

package/dist/hono/tag-input.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tag-input.test.d.ts","sourceRoot":"","sources":["../../src/hono/tag-input.test.ts"],"names":[],"mappings":""}

package/dist/hono/tag-input.test.js

@@ -0,0 +1,96 @@
+import { describe, expect, it } from "vitest";
+import { normalizeTagInputToolInput, parseTagChangeResolution, sanitizeTagChanges } from "./tag-input.js";
+describe("normalizeTagInputToolInput", () => {
+    it("passes a valid changes array through", () => {
+        const changes = normalizeTagInputToolInput({
+            changes: [{ mode: "create", tagType: "meta", prefilledConfig: { pixelId: "123" } }],
+        });
+        expect(changes).toHaveLength(1);
+        expect(changes[0]).toMatchObject({ mode: "create", tagType: "meta" });
+    });
+    it("wraps the legacy single-change shape (mode/tagType at top level) instead of hanging the turn", () => {
+        const changes = normalizeTagInputToolInput({
+            mode: "create",
+            tagType: "meta",
+            prefilledConfig: { pixelId: "555000111" },
+            requestedSecretFields: ["accessToken"],
+            message: "Adding Meta pixel",
+        });
+        expect(changes).toHaveLength(1);
+        expect(changes[0]).toMatchObject({ mode: "create", tagType: "meta", prefilledConfig: { pixelId: "555000111" } });
+    });
+    it("drops invalid entries and returns [] for garbage so the caller can deny with a clear error", () => {
+        expect(normalizeTagInputToolInput({ changes: [{ mode: "explode", tagType: "meta" }] })).toEqual([]);
+        expect(normalizeTagInputToolInput({ changes: "nope" })).toEqual([]);
+        expect(normalizeTagInputToolInput({})).toEqual([]);
+    });
+});
+describe("sanitizeTagChanges", () => {
+    it("moves leaked secret prefill values into requested fields, dropping the value", () => {
+        const [sanitized] = sanitizeTagChanges([
+            { mode: "create", tagType: "meta", prefilledConfig: { pixelId: "123", accessToken: "EAAB-leak" } },
+        ]);
+        expect(sanitized.prefilledConfig).toEqual({ pixelId: "123" });
+        expect(sanitized.requestedSecretFields).toEqual(["accessToken"]);
+        expect(JSON.stringify(sanitized)).not.toContain("EAAB-leak");
+    });
+    it("keeps non-secret prefill and merges requested fields without duplicates", () => {
+        const [sanitized] = sanitizeTagChanges([
+            {
+                mode: "edit",
+                tagType: "googleAnalytics",
+                ref: "jd7tag",
+                prefilledConfig: { measurementId: "G-ABC", apiSecret: "shhh" },
+                requestedSecretFields: ["apiSecret"],
+                message: "Rotate the secret",
+            },
+        ]);
+        expect(sanitized.prefilledConfig).toEqual({ measurementId: "G-ABC" });
+        expect(sanitized.requestedSecretFields).toEqual(["apiSecret"]);
+        expect(sanitized.message).toBe("Rotate the secret");
+    });
+    it("sanitizes every change in a batch independently", () => {
+        const sanitized = sanitizeTagChanges([
+            { mode: "create", tagType: "meta", prefilledConfig: { pixelId: "1", accessToken: "leak-1" } },
+            { mode: "delete", tagType: "clarity", ref: "abc123" },
+        ]);
+        expect(sanitized).toHaveLength(2);
+        expect(sanitized[0]?.prefilledConfig).toEqual({ pixelId: "1" });
+        expect(JSON.stringify(sanitized)).not.toContain("leak-1");
+        expect(sanitized[1]).toMatchObject({ mode: "delete", tagType: "clarity", ref: "abc123" });
+    });
+    it("leaves unknown tag types untouched (backend validates)", () => {
+        const [sanitized] = sanitizeTagChanges([
+            { mode: "create", tagType: "not-a-type", prefilledConfig: { anything: "goes" } },
+        ]);
+        expect(sanitized.prefilledConfig).toEqual({ anything: "goes" });
+    });
+});
+describe("parseTagChangeResolution", () => {
+    it("accepts a per-tab results array", () => {
+        const resolution = parseTagChangeResolution({
+            results: [
+                {
+                    status: "submitted",
+                    ref: "tag_temp_x",
+                    type: "meta",
+                    identifier: { pixelId: "123" },
+                    secretFieldsSet: ["accessToken"],
+                },
+                { status: "declined", reason: "skipped" },
+            ],
+        });
+        expect(resolution?.results).toHaveLength(2);
+        expect(resolution?.results[0]).toMatchObject({ status: "submitted", ref: "tag_temp_x" });
+        expect(resolution?.results[1]).toEqual({ status: "declined", reason: "skipped" });
+    });
+    it("accepts an empty results array (all declined / nothing resolved)", () => {
+        expect(parseTagChangeResolution({ results: [] })).toEqual({ results: [] });
+    });
+    it("rejects malformed payloads", () => {
+        expect(parseTagChangeResolution({ results: [{ status: "submitted" }] })).toBeNull();
+        expect(parseTagChangeResolution({ results: "nope" })).toBeNull();
+        expect(parseTagChangeResolution(null)).toBeNull();
+    });
+});
+//# sourceMappingURL=tag-input.test.js.map

package/dist/hono/tag-input.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tag-input.test.js","sourceRoot":"","sources":["../../src/hono/tag-input.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAE1G,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,OAAO,GAAG,0BAA0B,CAAC;YACzC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;SACpF,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8FAA8F,EAAE,GAAG,EAAE;QACtG,MAAM,OAAO,GAAG,0BAA0B,CAAC;YACzC,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,MAAM;YACf,eAAe,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;YACzC,qBAAqB,EAAE,CAAC,aAAa,CAAC;YACtC,OAAO,EAAE,mBAAmB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IACnH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,MAAM,CAAC,0BAA0B,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpG,MAAM,CAAC,0BAA0B,CAAC,EAAE,OAAO,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7E,MAAM,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,CAAC,SAAS,CAAC,GAAG,kBAAkB,CAAC;YACrC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE;SACnG,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,CAAC,SAAS,CAAC,GAAG,kBAAkB,CAAC;YACrC;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,iBAAiB;gBAC1B,GAAG,EAAE,QAAQ;gBACb,eAAe,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9D,qBAAqB,EAAE,CAAC,WAAW,CAAC;gBACpC,OAAO,EAAE,mBAAmB;aAC7B;SACF,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,SAAS,GAAG,kBAAkB,CAAC;YACnC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;YAC7F,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE;SACtD,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,SAAS,CAAC,GAAG,kBAAkB,CAAC;YACrC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;SACjF,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,UAAU,GAAG,wBAAwB,CAAC;YAC1C,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,WAAW;oBACnB,GAAG,EAAE,YAAY;oBACjB,IAAI,EAAE,MAAM;oBACZ,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;oBAC9B,eAAe,EAAE,CAAC,aAAa,CAAC;iBACjC;gBACD,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE;aAC1C;SACF,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,wBAAwB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,wBAAwB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpF,MAAM,CAAC,wBAAwB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjE,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@koda-sl/baker-bridge",
-  "version": "0.49.0",
+  "version": "0.50.0-dev.36aef87f5",
   "description": "HTTP server wrapping the Claude Agent SDK. Persists chat events to Convex; the dashboard subscribes via Convex realtime",
   "license": "MIT",
   "type": "module",