@koda-sl/baker-cli 0.154.0 → 0.156.0

package/dist/cli.js

@@ -45,20 +45,22 @@ import {
   resolveAccountIdArg,
   resolveEffectiveStatus,
   todayIso
-} from "./chunk-UFBKUMN2.js";
+} from "./chunk-JOPBGFXC.js";
 import {
   buildQueryCacheKey,
   cacheGet,
   cacheSet,
+  connectionFixExplanation,
   getManagerIdForCustomer,
   getQueryTtl,
   handleConnectionError,
+  isNotConnectedError,
   resolveCustomerId,
   toCsvRow,
   writeAdsJson,
   writeAdsOutput,
   writeJsonEnvelope
-} from "./chunk-FBUVCOH6.js";
+} from "./chunk-R4PG6VCS.js";
 import {
   ApiError,
   apiGet,
@@ -75,7 +77,7 @@ import {
 } from "./chunk-RK67WL4O.js";
 
 // src/cli.ts
-import { defineCommand as defineCommand181, runMain } from "citty";
+import { defineCommand as defineCommand185, runMain } from "citty";
 
 // src/commands/actions/index.ts
 import { defineCommand as defineCommand18 } from "citty";
@@ -492,6 +494,141 @@ function looksScheduled(name, description) {
 ${description}`;
   return SCHEDULE_SIGNALS.some((re) => re.test(haystack));
 }
+var SURFACE_RULES = [
+  {
+    surface: "analysis",
+    nameOnly: true,
+    signals: [
+      /^\s*(?:re-?)?(?:investigate|analyse|analyze|audit|review|document|assess|evaluate|research|map|inventory|examine|diagnose)\b/i
+    ],
+    hint: "This names the analysis itself \u2014 investigating, auditing and documenting are work you do now, not work you file. Run it in this chat and deliver the finding; a Task is for a fix something genuinely blocks (bar: `__tooling__/docs/tools/baker/actions.md`)."
+  },
+  {
+    surface: "ask-user",
+    signals: [
+      /\bproduction\s+(?:domain|url|site|hostname)\b/i,
+      /\b(?:confirm|check|verify)\s+(?:with|w\/)\s+(?:the\s+)?(?:client|user|customer|team)\b/i,
+      /\bmissing\s+(?:the\s+)?(?:value|values|id|ids|url|budget|domain|credentials?|account\s+id|measurement\s+id)\b/i,
+      /\b(?:ask|get)\s+(?:the\s+)?(?:client|user)\s+for\b/i
+    ],
+    hint: "This is a missing input, not blocked work. Ask for it with AskUserQuestion (one question), then do the work in the same turn \u2014 filing the Task AND asking the question is the same request twice."
+  },
+  {
+    surface: "tag-manager",
+    signals: [
+      /\bgtm\b/i,
+      /\btag\s*manager\b/i,
+      /\bdata\s*layer\b/i,
+      /\bfiring\s+trigger\b/i,
+      /\bbuilt-?in\s+variables?\b/i,
+      /\bconsent\s+(?:mode|settings?|state)\b/i,
+      /\bga4\s+(?:config|configuration|event)\b/i,
+      /\bcontainer\s+(?:tag|trigger|variable)s?\b/i,
+      /\b(?:conversion|form|submit|submission|click|purchase|lead|custom)\s+event\b/i,
+      /\btrack\w*\b[\s\S]*\bevent\b/i
+    ],
+    except: [/\bserver-?\s?side\b/i, /\bsgtm\b/i, /\bhosting\b/i],
+    hint: "This is a change inside the GTM container \u2014 `baker tag-manager` stages it now and it applies at publish (guide: `__tooling__/docs/tools/baker/tag-manager.md`). Stage it instead of filing it, and if several container fixes really are blocked, they belong in ONE Task, not one per finding."
+  },
+  {
+    surface: "site-tags",
+    signals: [
+      /\bpixel\b/i,
+      /\binsight\s+tag\b/i,
+      /\bclarity\b/i,
+      /\bhotjar\b/i,
+      /\bgtm\s+snippet\b/i,
+      /\b(?:install|add|remove|swap)\b[\s\S]*\b(?:snippet|script|tag)\b/i
+    ],
+    hint: "This is a tag or script on the site \u2014 it goes through the `request_tag_input` approval form in this chat, which also collects any secret values (guide: `__tooling__/docs/tools/baker/tags.md`). Show the form instead of filing a Task."
+  },
+  {
+    surface: "ads-write",
+    signals: [
+      /\b(?:pause|unpause|enable|disable|launch|restructure|duplicate|clone|rebuild)\b[\s\S]*\b(?:campaign|ad\s*set|ad\s*group|adgroup)\b/i,
+      /\b(?:tcpa|troas|target\s+cpa|target\s+roas)\b/i,
+      /\b(?:daily|campaign|lifetime|ad\s*set)\s+budget\b/i,
+      /\b(?:raise|lower|increase|decrease|adjust|change|set|update)\s+(?:the\s+)?budget\b/i,
+      /\bbid\s+strateg/i,
+      /\bnegative\s+keywords?\b/i,
+      /\b(?:lookalike|custom)\s+audience\b/i,
+      /\bswap\s+(?:the\s+)?creative\b/i
+    ],
+    hint: "This is an ad-platform change the write surface covers \u2014 stage it now with `baker ads google|meta|linkedin` and it applies at publish (guides: `__tooling__/docs/tools/baker/ads-google.md`, `__tooling__/docs/tools/baker/ads-meta.md`, `__tooling__/docs/tools/baker/ads-linkedin.md`). Staging is not going live."
+  },
+  {
+    surface: "landing",
+    signals: [
+      /\b(?:landing\s+page|hero|headline|above\s+the\s+fold)\b/i,
+      /\b(?:rewrite|tighten|restyle)\b[\s\S]*\b(?:copy|page|section)\b/i
+    ],
+    hint: "This is a page change \u2014 build it in this chat with the `/landing` skill. Only file it if something outside the page blocks the work."
+  },
+  {
+    surface: "flow",
+    signals: [/\b(?:form|flow)\s+(?:step|steps|branching|logic|redirect|behaviou?r)\b/i, /\bthank\s*you\s+redirect\b/i],
+    hint: "This is form behaviour \u2014 change it in this chat with the `/flow-builder` skill. Only file it if something outside the form blocks the work."
+  }
+];
+var FAN_OUT_THRESHOLD = 3;
+var SCHEDULED_HINT = 'This reads as recurring/scheduled work. If it should run on a cadence or a future date, create a Scheduled Action instead \u2014 baker scheduled-actions create --cron "0 9 * * MON" (or --run-at; guide: `__tooling__/docs/tools/baker/scheduled-actions.md`). Do NOT capture "set up a scheduled action" as a Work Action.';
+function looksExecutable(name, description) {
+  const full = `${name}
+${description}`;
+  for (const rule of SURFACE_RULES) {
+    const haystack = rule.nameOnly ? name : full;
+    if (rule.except?.some((re) => re.test(full))) {
+      continue;
+    }
+    if (rule.signals.some((re) => re.test(haystack))) {
+      return { surface: rule.surface, hint: rule.hint };
+    }
+  }
+  return null;
+}
+function buildCreateHints({
+  name,
+  description,
+  tempId,
+  tags,
+  prioritySet,
+  draftCreateCount
+}) {
+  const hints = [];
+  const advisory = advisoryHint(name, description);
+  if (advisory) {
+    hints.push(
+      `${advisory.hint} If nothing actually blocks it: baker actions draft remove ${tempId}, then do the work.`
+    );
+  }
+  if (draftCreateCount >= FAN_OUT_THRESHOLD) {
+    hints.push(
+      `${draftCreateCount} Tasks are staged in this chat. Re-read them with \`baker actions draft\`: can any be done now with a surface you already have, and do any two touch the same system (same container, same campaign, same page)? Those belong in ONE Task \u2014 fold them together with \`baker actions update\` and drop the extras with \`baker actions draft remove <tempId>\`.`
+    );
+  }
+  hints.push(`Link dependencies: baker actions link --blocker <id> --blocked ${tempId}`);
+  if (!description) {
+    hints.push("Add description: baker actions update <tempId> --description '...' (what/why/where/done-when)");
+  }
+  if (!tags || tags.length === 0) {
+    hints.push(
+      "MISSING --tags. This action is invisible to the backlog's tag filter. Re-run with --tags <slug,...> (`baker actions tags list` for the taxonomy, `baker actions tags create --slug <slug>` to mint) \u2014 or `baker actions update <tempId> --tags <slug,...>`."
+    );
+  }
+  if (!prioritySet) {
+    hints.push(
+      `MISSING --priority. Without it this action ranks as 'normal' (medium) in the do-first ordering, so urgent/high client work won't surface first. Re-run with --priority ${ACTION_PRIORITIES.join("|")} \u2014 or \`baker actions update <tempId> --priority <level>\`.`
+    );
+  }
+  return hints;
+}
+function advisoryHint(name, description) {
+  if (looksScheduled(name, description)) {
+    return { kind: "scheduled", hint: SCHEDULED_HINT };
+  }
+  const executable = looksExecutable(name, description);
+  return executable ? { kind: "executable", ...executable } : null;
+}
 
 // src/commands/actions/skillCatalog.ts
 import { existsSync, readdirSync, readFileSync } from "fs";
@@ -811,7 +948,9 @@ var actionsCreateRequestSchema = z.object({
   tags: z.array(z.string()).optional(),
   priority: actionPrioritySchema.optional()
 });
-var actionsCreateResponseSchema = okResponse(z.object({ tempId: z.string() }));
+var actionsCreateResponseSchema = okResponse(
+  z.object({ tempId: z.string(), draftCreateCount: z.number().optional() })
+);
 var actionsGetRequestSchema = z.object({ actionId: z.string().min(1) });
 var actionsGetResponseSchema = okResponse(actionDetailSchema.nullable());
 var actionsListRequestSchema = z.object({
@@ -2184,6 +2323,7 @@ var chatChangeTypeSchema = z5.enum([
   "linkedin-ads",
   "google-ads",
   "meta-ads",
+  "tag-manager",
   // Immediate (already-applied) library effects — see lib/chatChanges.ts.
   "image",
   "video",
@@ -2521,7 +2661,8 @@ var historyCategorySchema = z7.enum([
   "creative",
   "report",
   "domain",
-  "integration"
+  "integration",
+  "tag_manager"
 ]);
 var historyListRequestSchema = z7.object({
   limit: z7.number().int().min(1).max(200).optional(),
@@ -3376,27 +3517,17 @@ var createCommand = defineCommand3({
         ...tags ? { tags } : {},
         ...priority !== void 0 && priority !== null ? { priority } : {}
       });
-      const hints = [];
-      if (looksScheduled(name, args.description ?? "")) {
-        hints.push(
-          'This reads as recurring/scheduled work. If it should run on a cadence or a future date, create a Scheduled Action instead \u2014 baker scheduled-actions create --cron "0 9 * * MON" (or --run-at; guide: __tooling__/docs/tools/baker/scheduled-actions.md). Do NOT capture "set up a scheduled action" as a Work Action.'
-        );
-      }
-      hints.push(`Link dependencies: baker actions link --blocker <id> --blocked ${tempId}`);
-      if (!args.description) {
-        hints.push("Add description: baker actions update <tempId> --description '...' (what/why/where/done-when)");
-      }
-      if (!tags || tags.length === 0) {
-        hints.push(
-          "MISSING --tags. This action is invisible to the backlog's tag filter. Re-run with --tags <slug,...> (`baker actions tags list` for the taxonomy, `baker actions tags create --slug <slug>` to mint) \u2014 or `baker actions update <tempId> --tags <slug,...>`."
-        );
-      }
-      if (priority === void 0) {
-        hints.push(
-          `MISSING --priority. Without it this action ranks as 'normal' (medium) in the do-first ordering, so urgent/high client work won't surface first. Re-run with --priority ${ACTION_PRIORITIES.join("|")} \u2014 or \`baker actions update <tempId> --priority <level>\`.`
-        );
-      }
-      writeJson({ ...response, hints });
+      writeJson({
+        ...response,
+        hints: buildCreateHints({
+          name,
+          description: args.description ?? "",
+          tempId,
+          tags,
+          prioritySet: priority !== void 0,
+          draftCreateCount: response.data.draftCreateCount ?? 0
+        })
+      });
     } catch (err) {
       failApi(err);
     }
@@ -5696,12 +5827,23 @@ function getRetryDelay(code) {
   if (code === "TIMEOUT") return 5e3;
   return void 0;
 }
-function parseApiError(errorMessage, originalQuery, customerId) {
+function parseApiError(errorMessage, originalQuery, customerId, apiCode) {
   const ctx = {
     originalQuery,
     customerId,
     apiErrorMessage: errorMessage
   };
+  if (apiCode && isNotConnectedError(apiCode, errorMessage)) {
+    return {
+      ok: false,
+      error: {
+        code: "NO_GOOGLE_ADS_CONNECTION",
+        message: errorMessage,
+        fix: { action: "request_connection", explanation: connectionFixExplanation("google_ads") },
+        retryable: false
+      }
+    };
+  }
   for (const rule of CORRECTION_RULES) {
     if (rule.matchApiError?.test(errorMessage)) {
       const fix = rule.fix(ctx);
@@ -5841,7 +5983,7 @@ Examples:
       writeJsonEnvelope({ ok: true, data, fields: fieldDescs, hints: window.hints });
     } catch (err) {
       if (err instanceof ApiError) {
-        writeAdsJson(parseApiError(err.message, "", customerId));
+        writeAdsJson(parseApiError(err.message, "", customerId, err.code));
         process.exit(1);
       }
       writeAdsJson({ ok: false, error: { code: "NETWORK_ERROR", message: "Unexpected error" } });
@@ -5902,7 +6044,7 @@ Examples:
       writeAdsJson({ ok: true, data });
     } catch (err) {
       if (err instanceof ApiError) {
-        writeAdsJson(parseApiError(err.message, "", customerId));
+        writeAdsJson(parseApiError(err.message, "", customerId, err.code));
         process.exit(1);
       }
       writeAdsJson({ ok: false, error: { code: "NETWORK_ERROR", message: "Unexpected error" } });
@@ -6156,6 +6298,9 @@ function loadPatchArg(args) {
 }
 function handleGoogleError(err) {
   if (err instanceof ApiError) {
+    if (isNotConnectedError(err.code, err.message)) {
+      handleConnectionError("google_ads", err.message);
+    }
     writeJsonEnvelope({ ok: false, error: { code: err.code ?? "API_ERROR", message: err.message } });
     process.exit(1);
   }
@@ -6594,6 +6739,9 @@ function buildDiscoverBody(customerId, args) {
 }
 function handleKeywordError(err) {
   if (err instanceof ApiError) {
+    if (isNotConnectedError(err.code, err.message)) {
+      handleConnectionError("google_ads", err.message);
+    }
     const envelope = {
       ok: false,
       error: {
@@ -6737,6 +6885,26 @@ registerSchema({
     output: { type: "string", description: "Format: json|csv|jsonl|md", required: false, default: "json" }
   }
 });
+function handleMetricsError(err) {
+  if (err instanceof ApiError) {
+    if (isNotConnectedError(err.code, err.message)) {
+      handleConnectionError("google_ads", err.message);
+    }
+    const envelope = {
+      ok: false,
+      error: {
+        code: err.code,
+        message: err.message,
+        fix: { action: "reject", explanation: err.message },
+        retryable: err.code === "RATE_LIMITED"
+      }
+    };
+    writeAdsJson(envelope);
+    process.exit(1);
+  }
+  writeAdsJson({ ok: false, error: { code: "NETWORK_ERROR", message: "Unexpected error" } });
+  process.exit(1);
+}
 var metricsCommand = defineCommand26({
   meta: {
     name: "metrics",
@@ -6804,21 +6972,7 @@ Examples:
       };
       writeAdsJson({ ok: true, data, fields, query_context: queryContext });
     } catch (err) {
-      if (err instanceof ApiError) {
-        const envelope = {
-          ok: false,
-          error: {
-            code: err.code,
-            message: err.message,
-            fix: { action: "reject", explanation: err.message },
-            retryable: err.code === "RATE_LIMITED"
-          }
-        };
-        writeAdsJson(envelope);
-        process.exit(1);
-      }
-      writeAdsJson({ ok: false, error: { code: "NETWORK_ERROR", message: "Unexpected error" } });
-      process.exit(1);
+      handleMetricsError(err);
     }
   }
 });
@@ -7385,7 +7539,7 @@ async function validateArgs(args) {
 }
 function handleQueryError(err, finalQuery, customerId) {
   if (err instanceof ApiError) {
-    const envelope = parseApiError(err.message, finalQuery, customerId);
+    const envelope = parseApiError(err.message, finalQuery, customerId, err.code);
     envelope.error.gaqlExecuted = finalQuery;
     writeAdsJson(envelope);
     process.exit(1);
@@ -8990,6 +9144,9 @@ function handleLinkedinError(err) {
     if (err.code === "NOT_FOUND") {
       handleConnectionError("linkedin_ads", err.message);
     }
+    if (isNoAccountsSelectedError(err.code, err.message)) {
+      handleConnectionError("linkedin_ads", err.message);
+    }
     const explanation = explainLinkedinError(err);
     const envelope = {
       ok: false,
@@ -9011,6 +9168,9 @@ function handleLinkedinError(err) {
   writeAdsJson({ ok: false, error: { code: "NETWORK_ERROR", message } });
   process.exit(1);
 }
+function isNoAccountsSelectedError(code, message) {
+  return code === "VALIDATION_ERROR" && /no linkedin ad accounts selected/i.test(message);
+}
 function explainLinkedinError(err) {
   const lower = err.message.toLowerCase();
   if (err.code === "VALIDATION_ERROR" && lower.includes("granularity") && lower.includes("daily")) {
@@ -13382,8 +13542,8 @@ function duplicateCommand2(entity, label) {
     run: async ({ args }) => {
       const { apiPost: apiPost2 } = await import("./client-R5ZSVIK3.js");
       const { requireChatId: requireChatId2 } = await import("./env-3JMYIH25.js");
-      const { writeJsonEnvelope: writeJsonEnvelope2 } = await import("./output-R534QTMO.js");
-      const { handleMetaError: handleMetaError2 } = await import("./shared-MUWU7BK5.js");
+      const { writeJsonEnvelope: writeJsonEnvelope2 } = await import("./output-KLK2GZXR.js");
+      const { handleMetaError: handleMetaError2 } = await import("./shared-AXAXNKGE.js");
       try {
         const accountId = bareAccountId2(args);
         const chatId = requireChatId2();
@@ -23550,7 +23710,10 @@ ${list}`
       }
     });
     process.exit(1);
-  } catch {
+  } catch (err) {
+    if (err instanceof ApiError && (err.code === "UNAUTHORIZED" || err.code === "NOT_FOUND")) {
+      handleConnectionError("ga4", err.message);
+    }
     writeJsonEnvelope({
       ok: false,
       error: {
@@ -23613,6 +23776,9 @@ Examples:
       writeJsonEnvelope(data);
     } catch (err) {
       if (err instanceof ApiError) {
+        if (isNotConnectedError(err.code, err.message)) {
+          handleConnectionError("ga4", err.message);
+        }
         writeJsonEnvelope({ ok: false, error: { code: err.code, message: err.message } });
         process.exit(1);
       }
@@ -23804,6 +23970,9 @@ function buildRequestBody(args, propertyId, useCache) {
 }
 function handleError(err) {
   if (err instanceof ApiError) {
+    if (isNotConnectedError(err.code, err.message)) {
+      handleConnectionError("ga4", err.message);
+    }
     writeJsonEnvelope({ ok: false, error: { code: err.code, message: err.message } });
     process.exit(1);
   }
@@ -23990,7 +24159,10 @@ ${list}`
       }
     });
     process.exit(1);
-  } catch {
+  } catch (err) {
+    if (err instanceof ApiError && (err.code === "UNAUTHORIZED" || err.code === "NOT_FOUND")) {
+      handleConnectionError("gsc", err.message);
+    }
     writeJsonEnvelope({
       ok: false,
       error: {
@@ -24092,6 +24264,9 @@ function buildRequestBody2(args, siteUrl, useCache) {
 }
 function handleError2(err) {
   if (err instanceof ApiError) {
+    if (isNotConnectedError(err.code, err.message)) {
+      handleConnectionError("gsc", err.message);
+    }
     writeJsonEnvelope({ ok: false, error: { code: err.code, message: err.message } });
     process.exit(1);
   }
@@ -24228,6 +24403,9 @@ Examples:
       writeJsonEnvelope({ ok: true, data });
     } catch (err) {
       if (err instanceof ApiError) {
+        if (isNotConnectedError(err.code, err.message)) {
+          handleConnectionError("gsc", err.message);
+        }
         writeJsonEnvelope({ ok: false, error: { code: err.code, message: err.message } });
         process.exit(1);
       }
@@ -30234,9 +30412,488 @@ var schemaCommand = defineCommand157({
   }
 });
 
-// src/commands/tags/index.ts
+// src/commands/tag-manager/index.ts
+import { defineCommand as defineCommand161 } from "citty";
+
+// src/commands/tag-manager/draft.ts
 import { defineCommand as defineCommand158 } from "citty";
 
+// src/commands/tag-manager/shared.ts
+import { readFileSync as readFileSync12 } from "fs";
+function failValidation3(message) {
+  writeJsonEnvelope({ ok: false, error: { code: "VALIDATION_ERROR", message } });
+  process.exit(1);
+}
+function requireTarget4(args, entity) {
+  const positional = Array.isArray(args._) ? args._[0] : void 0;
+  const target = args.id ?? args.target ?? positional;
+  if (typeof target !== "string" || target.length === 0) {
+    failValidation3(`pass the ${entity} id or path as the positional argument`);
+  }
+  return target;
+}
+function loadJsonArg(args, flag = "json") {
+  const inline = args[flag];
+  const file = args.file;
+  const raw = typeof file === "string" && file.length > 0 ? readFileSync12(file, "utf8") : typeof inline === "string" && inline.length > 0 ? inline : void 0;
+  if (raw === void 0) {
+    failValidation3(`pass --${flag} with inline JSON or --file with a path to a JSON file`);
+  }
+  try {
+    const parsed = JSON.parse(raw);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      failValidation3(`--${flag} must be a JSON object`);
+    }
+    return parsed;
+  } catch {
+    return failValidation3(`--${flag} is not valid JSON`);
+  }
+}
+var RETRYABLE_CODES = /* @__PURE__ */ new Set(["RATE_LIMITED", "INTERNAL_ERROR", "NETWORK_ERROR", "TIMEOUT"]);
+function handleError3(err) {
+  if (err instanceof ApiError) {
+    writeJsonEnvelope({
+      ok: false,
+      error: {
+        code: err.code,
+        message: err.message,
+        ...err.code === "UNAUTHORIZED" ? {
+          fix: {
+            action: "request_connection",
+            explanation: 'Tag Manager is not connected for this company yet, or no container has been picked. Do NOT send the user to Settings \u2014 call the `request_connection` tool with { platform: "google-tag-manager", reason } and they connect and pick the container from inside the chat. `request_tag_input` is NOT the route: that form manages the container snippet on the site, not what runs inside the container, and it cannot pick a container. If `request_connection` is not available to you, say so plainly and point them at dashboard \u2192 Brain \u2192 Integrations \u2192 Tools \u2192 Google Tag Manager, where they also pick the container. Carry on with the rest of the task meanwhile.'
+          }
+        } : {},
+        retryable: RETRYABLE_CODES.has(err.code)
+      }
+    });
+    process.exit(1);
+  }
+  writeJsonEnvelope({ ok: false, error: { code: "NETWORK_ERROR", message: "Unexpected error", retryable: true } });
+  process.exit(1);
+}
+var STAGE_HINTS = [
+  "Staged only \u2014 nothing has changed in Tag Manager yet. These apply when the chat completes, in dependency order, and close as a Tag Manager version. Whether that version goes live is a per-company setting, so never promise the user their tracking is live; say the changes are ready and will apply when you finish."
+];
+async function stageOp3(op) {
+  const chatId = requireChatId();
+  try {
+    const data = await apiPost("/api/tag-manager/draft/stage", { chatId, op });
+    writeJsonEnvelope({ ok: true, data, hints: STAGE_HINTS });
+  } catch (err) {
+    handleError3(err);
+  }
+}
+async function draftAction2(path28, body) {
+  const chatId = requireChatId();
+  try {
+    const data = await apiPost(path28, { chatId, ...body });
+    writeJsonEnvelope({ ok: true, data });
+    return data;
+  } catch (err) {
+    handleError3(err);
+  }
+}
+function renderDraft(response) {
+  if (response.count === 0) {
+    return "No Tag Manager changes staged on this chat.";
+  }
+  const lines = [
+    `${response.count} staged Tag Manager change(s)`,
+    ...response.ops.map((op) => {
+      const status = op.result ? ` [${op.result.status}]` : "";
+      return `  ${op.ref}  ${op.summary}${status}`;
+    })
+  ];
+  if (response.versionId) {
+    lines.push(
+      "",
+      response.published ? `Applied and published as Tag Manager version ${response.versionId}. These changes are live on the site.` : `Applied into Tag Manager version ${response.versionId}. It is NOT published \u2014 publish it in Tag Manager to go live.`
+    );
+  }
+  if (response.compilerError) {
+    lines.push("", `Tag Manager reported a problem building the version: ${response.compilerError}`);
+  }
+  return lines.join("\n");
+}
+async function draftList(json) {
+  const chatId = requireChatId();
+  try {
+    const data = await apiPost("/api/tag-manager/draft", { chatId });
+    if (json) {
+      writeJsonEnvelope({ ok: true, data });
+      return;
+    }
+    process.stdout.write(`${renderDraft(data)}
+`);
+  } catch (err) {
+    handleError3(err);
+  }
+}
+
+// src/commands/tag-manager/draft.ts
+registerSchema({
+  command: "tagManager.draft",
+  description: "Review and undo the Tag Manager changes staged on this chat. Use `list` to see everything staged, `show` to inspect one change in full before publish, `amend` to correct one in place, and `remove`/`clear` to drop them.",
+  args: {
+    json: { type: "boolean", description: "Print the raw JSON envelope instead of the readable list", required: false }
+  }
+});
+var draftCommand3 = defineCommand158({
+  meta: {
+    name: "draft",
+    description: "List, show, amend, remove, or clear staged Tag Manager changes for this chat"
+  },
+  subCommands: {
+    list: defineCommand158({
+      meta: {
+        name: "list",
+        description: "Review everything staged on this chat (--json for the raw envelope)"
+      },
+      args: { json: { type: "boolean", description: "Print the raw JSON envelope", required: false } },
+      run: async ({ args }) => {
+        await draftList(args.json === true);
+      }
+    }),
+    show: defineCommand158({
+      meta: {
+        name: "show",
+        description: "Print the full staged payload for one change \u2014 the receipt to verify it looks right before publish (never truncated)."
+      },
+      args: { ref: { type: "positional", description: "Staged ref (gtm_temp_*) or target", required: false } },
+      run: async ({ args }) => {
+        await draftAction2("/api/tag-manager/draft/show", {
+          ref: requireTarget4(args, "change")
+        });
+      }
+    }),
+    amend: defineCommand158({
+      meta: {
+        name: "amend",
+        description: "Update a staged change in place \u2014 merges a JSON patch into its payload (objects deep-merge, null deletes a key, arrays/scalars replace) and re-validates. Use this instead of remove + re-create."
+      },
+      args: {
+        ref: { type: "positional", description: "Staged ref (gtm_temp_*) or target", required: false },
+        patch: { type: "string", description: "Inline JSON patch object", required: false },
+        file: { type: "string", description: "JSON file with the patch object", required: false }
+      },
+      run: async ({ args }) => {
+        await draftAction2("/api/tag-manager/draft/amend", {
+          ref: requireTarget4(args, "change"),
+          patch: loadJsonArg(args, "patch")
+        });
+      }
+    }),
+    remove: defineCommand158({
+      meta: { name: "remove", description: "Remove one staged change (cascades to anything depending on it)" },
+      args: { ref: { type: "positional", description: "Staged ref (gtm_temp_*) or target", required: false } },
+      run: async ({ args }) => {
+        await draftAction2("/api/tag-manager/draft/remove", {
+          ref: requireTarget4(args, "change")
+        });
+      }
+    }),
+    clear: defineCommand158({
+      meta: { name: "clear", description: "Discard all Tag Manager changes staged on this chat" },
+      run: async () => {
+        await draftAction2("/api/tag-manager/draft/clear", {});
+      }
+    })
+  }
+});
+
+// src/commands/tag-manager/read.ts
+import { defineCommand as defineCommand159 } from "citty";
+registerSchema({
+  command: "tagManager.containers",
+  description: "List the Google Tag Manager containers this company's connection can reach. The connected container is flagged. Start here to confirm which container you are managing.",
+  args: {}
+});
+registerSchema({
+  command: "tagManager.read",
+  description: "Read what is currently inside a Tag Manager container: tags, triggers, variables, folders and enabled built-in variables. Start here before proposing any change, so you edit what exists instead of duplicating it. Compact by default; pass --full for raw Tag Manager objects.",
+  args: {
+    container: { type: "string", description: "Numeric container id (defaults to the connected one)", required: false },
+    workspace: { type: "string", description: "Workspace id (defaults to the default workspace)", required: false },
+    entities: {
+      type: "string",
+      description: "Comma-separated subset: tag,trigger,variable,folder,builtInVariable",
+      required: false
+    },
+    full: { type: "boolean", description: "Include the raw Tag Manager object for each entity", required: false }
+  }
+});
+var containersCommand = defineCommand159({
+  meta: {
+    name: "containers",
+    description: `List Tag Manager containers reachable by this company's connection.
+
+Start here:
+  baker tag-manager containers`
+  },
+  run: async () => {
+    try {
+      const data = await apiGet("/api/tag-manager/containers");
+      writeJsonEnvelope({ ok: true, data });
+    } catch (err) {
+      handleError3(err);
+    }
+  }
+});
+var readCommand = defineCommand159({
+  meta: {
+    name: "read",
+    description: `Read the current contents of the Tag Manager container \u2014 always do this before staging changes.
+
+Examples:
+  baker tag-manager read
+  baker tag-manager read --entities tag,trigger
+  baker tag-manager read --full`
+  },
+  args: {
+    container: { type: "string", description: "Numeric container id", required: false },
+    workspace: { type: "string", description: "Workspace id", required: false },
+    entities: { type: "string", description: "Comma-separated entity subset", required: false },
+    full: { type: "boolean", description: "Include raw Tag Manager objects", required: false }
+  },
+  run: async ({ args }) => {
+    const entities = typeof args.entities === "string" && args.entities.length > 0 ? args.entities.split(",").map((entry) => entry.trim()) : void 0;
+    try {
+      const data = await apiPost("/api/tag-manager/read", {
+        containerId: args.container,
+        workspaceId: args.workspace,
+        entities,
+        full: args.full === true
+      });
+      const hints = [];
+      if (data.installedContainerMismatch) {
+        hints.push(data.installedContainerMismatch);
+      }
+      hints.push(
+        "Reference an existing trigger or variable by its numeric id or {{Name}}. To reference something you are staging in this same chat, use its gtm_temp_* ref and the executor resolves it at publish."
+      );
+      writeJsonEnvelope({ ok: true, data, hints });
+    } catch (err) {
+      handleError3(err);
+    }
+  }
+});
+
+// src/commands/tag-manager/write-commands.ts
+import { defineCommand as defineCommand160 } from "citty";
+var ENTITIES = [
+  {
+    entity: "tag",
+    noun: "tag",
+    createHint: 'Payload needs name + type (e.g. "gaawe" for a GA4 event) and usually parameter[] and firingTriggerId[]. Reference a trigger by its numeric id, or by a gtm_temp_* ref if you are staging it in this same chat.',
+    example: '{"name":"GA4 - Generate Lead","type":"gaawe","firingTriggerId":["gtm_temp_trigger_x_0"]}'
+  },
+  {
+    entity: "trigger",
+    noun: "trigger",
+    createHint: 'Payload needs name + type (e.g. "pageview", "click", "customEvent"). Stage the trigger BEFORE the tag that fires on it, then reference it by its gtm_temp_* ref.',
+    example: '{"name":"Form - Submit","type":"formSubmission"}'
+  },
+  {
+    entity: "variable",
+    noun: "variable",
+    createHint: 'Payload needs name + type (e.g. "v" for a data layer variable, "c" for a constant). Other entities reference a variable by NAME as {{Variable Name}}.',
+    example: '{"name":"DL - lead_id","type":"v","parameter":[{"type":"template","key":"name","value":"lead_id"}]}'
+  },
+  {
+    entity: "folder",
+    noun: "folder",
+    createHint: "Payload needs name. Use folders to keep a large container legible.",
+    example: '{"name":"Google Ads"}'
+  }
+];
+for (const { entity, noun, createHint } of ENTITIES) {
+  registerSchema({
+    command: `tagManager.${entity}.create`,
+    description: `Stage the creation of a Tag Manager ${noun}. ${createHint} Staged only \u2014 applies when the chat completes.`,
+    args: {
+      json: { type: "string", description: `Inline JSON ${noun} definition`, required: false },
+      file: { type: "string", description: `Path to a JSON file with the ${noun} definition`, required: false },
+      container: { type: "string", description: "Numeric container id", required: false }
+    }
+  });
+  registerSchema({
+    command: `tagManager.${entity}.update`,
+    description: `Stage an update to an existing Tag Manager ${noun}. Pass the ${noun} id or path as the positional argument and the changed fields as JSON. Read the container first so you send the fields you mean to change.`,
+    args: {
+      json: { type: "string", description: "Inline JSON with the changed fields", required: false },
+      file: { type: "string", description: "Path to a JSON file with the changed fields", required: false }
+    }
+  });
+  registerSchema({
+    command: `tagManager.${entity}.delete`,
+    description: `Stage the deletion of a Tag Manager ${noun}. Pass its id or path as the positional argument. Deleting is irreversible once the resulting version is published \u2014 confirm with the user first.`,
+    args: {}
+  });
+}
+function entityCommand(entity, noun, example) {
+  return defineCommand160({
+    meta: { name: entity, description: `Stage ${noun} changes on this chat's Tag Manager draft` },
+    subCommands: {
+      create: defineCommand160({
+        meta: {
+          name: "create",
+          description: `Stage a new ${noun}
+
+Examples:
+  baker tag-manager ${entity} create --json '${example}'
+  baker tag-manager ${entity} create --file ./${entity}.json`
+        },
+        args: {
+          json: { type: "string", description: "Inline JSON definition", required: false },
+          file: { type: "string", description: "Path to a JSON file", required: false },
+          container: { type: "string", description: "Numeric container id", required: false }
+        },
+        run: async ({ args }) => {
+          await stageOp3({
+            kind: `tagManager.${entity}.create`,
+            payload: loadJsonArg(args),
+            ...typeof args.container === "string" ? { containerId: args.container } : {}
+          });
+        }
+      }),
+      update: defineCommand160({
+        meta: {
+          name: "update",
+          description: `Stage an update to an existing ${noun} (pass its id or path)`
+        },
+        args: {
+          id: { type: "positional", description: `${noun} id or path`, required: false },
+          json: { type: "string", description: "Inline JSON with changed fields", required: false },
+          file: { type: "string", description: "Path to a JSON file", required: false },
+          container: { type: "string", description: "Numeric container id", required: false }
+        },
+        run: async ({ args }) => {
+          await stageOp3({
+            kind: `tagManager.${entity}.update`,
+            target: requireTarget4(args, noun),
+            payload: loadJsonArg(args),
+            ...typeof args.container === "string" ? { containerId: args.container } : {}
+          });
+        }
+      }),
+      delete: defineCommand160({
+        meta: { name: "delete", description: `Stage the deletion of a ${noun} (pass its id or path)` },
+        args: {
+          id: { type: "positional", description: `${noun} id or path`, required: false },
+          container: { type: "string", description: "Numeric container id", required: false }
+        },
+        run: async ({ args }) => {
+          await stageOp3({
+            kind: `tagManager.${entity}.delete`,
+            target: requireTarget4(args, noun),
+            ...typeof args.container === "string" ? { containerId: args.container } : {}
+          });
+        }
+      })
+    }
+  });
+}
+var exampleFor = (entity) => ENTITIES.find((e) => e.entity === entity)?.example ?? "{}";
+var tagCommand = entityCommand("tag", "tag", exampleFor("tag"));
+var triggerCommand2 = entityCommand("trigger", "trigger", exampleFor("trigger"));
+var variableCommand = entityCommand("variable", "variable", exampleFor("variable"));
+var folderCommand = entityCommand("folder", "folder", exampleFor("folder"));
+registerSchema({
+  command: "tagManager.builtin",
+  description: "Enable or disable Tag Manager built-in variables by type (e.g. clickUrl, pageUrl, formId). Built-in variables must be enabled before a trigger or tag can reference them as {{Click URL}}.",
+  args: {
+    types: { type: "string", description: "Comma-separated built-in variable types", required: true }
+  }
+});
+function builtinTypes(args) {
+  const raw = args.types;
+  if (typeof raw !== "string" || raw.length === 0) {
+    process.stdout.write(
+      `${JSON.stringify({ ok: false, error: { code: "VALIDATION_ERROR", message: "pass --types with comma-separated built-in variable types" } }, null, 2)}
+`
+    );
+    process.exit(1);
+  }
+  return raw.split(",").map((entry) => entry.trim());
+}
+var builtinCommand = defineCommand160({
+  meta: {
+    name: "builtin",
+    description: `Enable or disable built-in variables
+
+Examples:
+  baker tag-manager builtin enable --types clickUrl,clickText
+  baker tag-manager builtin disable --types formId`
+  },
+  subCommands: {
+    enable: defineCommand160({
+      meta: { name: "enable", description: "Stage enabling built-in variables" },
+      args: {
+        types: { type: "string", description: "Comma-separated types", required: false },
+        container: { type: "string", description: "Numeric container id", required: false }
+      },
+      run: async ({ args }) => {
+        await stageOp3({
+          kind: "tagManager.builtInVariable.enable",
+          payload: { type: builtinTypes(args) },
+          ...typeof args.container === "string" ? { containerId: args.container } : {}
+        });
+      }
+    }),
+    disable: defineCommand160({
+      meta: { name: "disable", description: "Stage disabling built-in variables" },
+      args: {
+        types: { type: "string", description: "Comma-separated types", required: false },
+        container: { type: "string", description: "Numeric container id", required: false }
+      },
+      run: async ({ args }) => {
+        await stageOp3({
+          kind: "tagManager.builtInVariable.disable",
+          payload: { type: builtinTypes(args) },
+          ...typeof args.container === "string" ? { containerId: args.container } : {}
+        });
+      }
+    })
+  }
+});
+
+// src/commands/tag-manager/index.ts
+var tagManagerCommand = defineCommand161({
+  meta: {
+    name: "tag-manager",
+    description: `Read and change what lives inside the client's Google Tag Manager container \u2014 tags, triggers, variables, folders and built-in variables.
+
+Start here:
+  baker tag-manager read                       \u2014 see what the container holds today
+
+Then stage changes (nothing is sent to Tag Manager until publish):
+  baker tag-manager trigger create --json '{"name":"Quote Submit","type":"customEvent"}'
+  baker tag-manager tag create --json '{"name":"GA4 Quote","type":"gaawe","firingTriggerId":["gtm_temp_trigger_..."]}'
+  baker tag-manager draft list                 \u2014 review everything staged
+
+On publish, staged changes are written into a new Tag Manager version that is NOT published.
+Tell the user to publish that version in Tag Manager to make it live.
+
+This owns the CONTENTS of the container. Installing the container snippet on the site is a
+different job \u2014 that is \`baker tags\` with the googleTagManager tag.
+
+Full guide: __tooling__/docs/tools/baker/tag-manager.md`
+  },
+  subCommands: {
+    containers: containersCommand,
+    read: readCommand,
+    tag: tagCommand,
+    trigger: triggerCommand2,
+    variable: variableCommand,
+    folder: folderCommand,
+    builtin: builtinCommand,
+    draft: draftCommand3
+  }
+});
+
+// src/commands/tags/index.ts
+import { defineCommand as defineCommand162 } from "citty";
+
 // src/commands/tags/shared.ts
 function failApi3(err) {
   if (err instanceof ApiError) {
@@ -30301,7 +30958,7 @@ async function listTags(json) {
     failApi3(err);
   }
 }
-var listCommand10 = defineCommand158({
+var listCommand10 = defineCommand162({
   meta: {
     name: "list",
     description: "Effective tags for this chat (production + staged), with each tag's full readable config (secrets excluded) \u2014 reuse a stored value to pre-fill a change rather than asking the user. Refs printed here are what flow side-effect tagIds should use. Example: baker tags list"
@@ -30320,7 +30977,7 @@ async function listDraft3() {
     failApi3(err);
   }
 }
-var draftCommand3 = defineCommand158({
+var draftCommand4 = defineCommand162({
   meta: {
     name: "draft",
     description: "Review the tag changes staged in this chat (read-only). Staged changes were approved via request_tag_input and apply when the chat is published; to amend or drop one, propose a follow-up change through the same tool (a delete on a tag_temp_* ref drops the staged create)."
@@ -30329,7 +30986,7 @@ var draftCommand3 = defineCommand158({
     await listDraft3();
   }
 });
-var tagsCommand3 = defineCommand158({
+var tagsCommand3 = defineCommand162({
   meta: {
     name: "tags",
     description: `Read the client's marketing/analytics tags (Meta pixel, GA4, Google Ads, GTM, Clarity, Hotjar, \u2026) \u2014 production tags plus the changes staged in this chat.
@@ -30347,7 +31004,7 @@ Full guide: __tooling__/docs/tools/baker/tags.md`
   },
   subCommands: {
     list: listCommand10,
-    draft: draftCommand3
+    draft: draftCommand4
   },
   run: async () => {
     await listTags(false);
@@ -30355,10 +31012,10 @@ Full guide: __tooling__/docs/tools/baker/tags.md`
 });
 
 // src/commands/testimonials/index.ts
-import { defineCommand as defineCommand162 } from "citty";
+import { defineCommand as defineCommand166 } from "citty";
 
 // src/commands/testimonials/get.ts
-import { defineCommand as defineCommand159 } from "citty";
+import { defineCommand as defineCommand163 } from "citty";
 registerSchema({
   command: "testimonials.get",
   description: "Get a single testimonial by ID",
@@ -30366,7 +31023,7 @@ registerSchema({
     id: { type: "string", description: "Testimonial ID", required: true }
   }
 });
-var getCommand4 = defineCommand159({
+var getCommand4 = defineCommand163({
   meta: { name: "get", description: "Get a single testimonial by ID. Example: baker testimonials get j571abc123" },
   args: {
     id: { type: "positional", description: "Testimonial ID", required: false },
@@ -30403,7 +31060,7 @@ var getCommand4 = defineCommand159({
 });
 
 // src/commands/testimonials/list.ts
-import { defineCommand as defineCommand160 } from "citty";
+import { defineCommand as defineCommand164 } from "citty";
 registerSchema({
   command: "testimonials.list",
   description: "List testimonials with optional filters.",
@@ -30433,7 +31090,7 @@ registerSchema({
     limit: { type: "number", description: "Max results (default 50)", required: false, default: 50 }
   }
 });
-var listCommand11 = defineCommand160({
+var listCommand11 = defineCommand164({
   meta: {
     name: "list",
     description: "List testimonials with optional filters. Example: baker testimonials list --source google --sentiment positive"
@@ -30482,7 +31139,7 @@ var listCommand11 = defineCommand160({
 });
 
 // src/commands/testimonials/search.ts
-import { defineCommand as defineCommand161 } from "citty";
+import { defineCommand as defineCommand165 } from "citty";
 function languageBiasHint(results, requestedLanguage) {
   if (requestedLanguage) {
     return null;
@@ -30560,7 +31217,7 @@ function buildSearchRequest(query, args) {
   }
   return body;
 }
-var searchCommand2 = defineCommand161({
+var searchCommand2 = defineCommand165({
   meta: {
     name: "search",
     description: "Semantic search testimonials by text query. Uses hybrid BM25 + vector + reranking. Example: baker testimonials search 'great service' --rating-min 4"
@@ -30616,7 +31273,7 @@ var searchCommand2 = defineCommand161({
 var tagsCommand4 = makeTagsCommand("testimonials", "testimonial", "/api/testimonials/tags");
 
 // src/commands/testimonials/index.ts
-var testimonialsCommand = defineCommand162({
+var testimonialsCommand = defineCommand166({
   meta: {
     name: "testimonials",
     description: `Find and browse testimonials in Baker. Subcommands: search, get, list, tags.
@@ -30638,10 +31295,10 @@ Full guide: __tooling__/docs/tools/baker/testimonials.md`
 });
 
 // src/commands/videos/index.ts
-import { defineCommand as defineCommand167 } from "citty";
+import { defineCommand as defineCommand171 } from "citty";
 
 // src/commands/videos/delete.ts
-import { defineCommand as defineCommand163 } from "citty";
+import { defineCommand as defineCommand167 } from "citty";
 registerSchema({
   command: "videos.delete",
   description: "Delete a video by ID",
@@ -30655,7 +31312,7 @@ registerSchema({
     }
   }
 });
-var deleteCommand3 = defineCommand163({
+var deleteCommand3 = defineCommand167({
   meta: {
     name: "delete",
     description: "Delete a video by ID. Use --dry-run to preview. Example: baker videos delete j571abc123 --dry-run"
@@ -30696,7 +31353,7 @@ var deleteCommand3 = defineCommand163({
 });
 
 // src/commands/videos/get.ts
-import { defineCommand as defineCommand164 } from "citty";
+import { defineCommand as defineCommand168 } from "citty";
 registerSchema({
   command: "videos.get",
   description: "Get a single video by ID",
@@ -30704,7 +31361,7 @@ registerSchema({
     id: { type: "string", description: "Video ID", required: true }
   }
 });
-var getCommand5 = defineCommand164({
+var getCommand5 = defineCommand168({
   meta: { name: "get", description: "Get a single video by ID. Example: baker videos get j571abc123" },
   args: {
     id: { type: "positional", description: "Video ID", required: false },
@@ -30741,7 +31398,7 @@ var getCommand5 = defineCommand164({
 });
 
 // src/commands/videos/search.ts
-import { defineCommand as defineCommand165 } from "citty";
+import { defineCommand as defineCommand169 } from "citty";
 registerSchema({
   command: "videos.search",
   description: "Search videos by text query. Only returns ready videos.",
@@ -30751,7 +31408,7 @@ registerSchema({
     tags: { type: "string", description: "Comma-separated tags to filter by", required: false }
   }
 });
-var searchCommand3 = defineCommand165({
+var searchCommand3 = defineCommand169({
   meta: {
     name: "search",
     description: "Semantic search videos by text query. Uses hybrid BM25 + vector + reranking. Example: baker videos search 'product demo' --tags tutorial"
@@ -30803,7 +31460,7 @@ var tagsCommand5 = makeTagsCommand("videos", "video", "/api/videos/tags");
 // src/commands/videos/upload.ts
 import { readFile as readFile23, stat as stat7 } from "fs/promises";
 import { extname as extname3 } from "path";
-import { defineCommand as defineCommand166 } from "citty";
+import { defineCommand as defineCommand170 } from "citty";
 var MIME_MAP = {
   ".mp4": "video/mp4",
   ".mov": "video/quicktime",
@@ -30837,7 +31494,7 @@ function detectContentType(filePath) {
   }
   return mime;
 }
-var uploadCommand2 = defineCommand166({
+var uploadCommand2 = defineCommand170({
   meta: {
     name: "upload",
     description: "Upload a video file to Baker via Mux direct upload. Auto-detects content type. Example: baker videos upload ./demo.mp4"
@@ -30891,7 +31548,7 @@ var uploadCommand2 = defineCommand166({
 });
 
 // src/commands/videos/index.ts
-var videosCommand = defineCommand167({
+var videosCommand = defineCommand171({
   meta: {
     name: "videos",
     description: `Find and manage videos in Baker. Subcommands: search, get, upload, delete, tags.
@@ -30915,10 +31572,10 @@ Full guide: __tooling__/docs/tools/baker/videos.md`
 });
 
 // src/commands/winning-ads/index.ts
-import { defineCommand as defineCommand180 } from "citty";
+import { defineCommand as defineCommand184 } from "citty";
 
 // src/commands/winning-ads/advertisers.ts
-import { defineCommand as defineCommand168 } from "citty";
+import { defineCommand as defineCommand172 } from "citty";
 
 // src/commands/winning-ads/shared.ts
 function splitList(value) {
@@ -30971,7 +31628,7 @@ function advertiserNormalizer(record, full) {
     last_synced_at: record.last_synced_at ?? null
   };
 }
-var advertisersCommand2 = defineCommand168({
+var advertisersCommand2 = defineCommand172({
   meta: {
     name: "advertisers",
     description: 'List corpus advertisers by name or domain. Find your own advertiser for --exclude-advertiser, or a competitor for --advertiser-id / winners. Example: baker winning-ads advertisers "Deel" --output md'
@@ -31029,7 +31686,7 @@ var advertisersCommand2 = defineCommand168({
 });
 
 // src/commands/winning-ads/brief.ts
-import { defineCommand as defineCommand169 } from "citty";
+import { defineCommand as defineCommand173 } from "citty";
 registerSchema({
   command: "winning-ads.brief",
   description: "Generate a creative brief grounded in strategically-similar winning ads. Optionally describe the target creative with --dna (JSON) and steer with --notes.",
@@ -31075,7 +31732,7 @@ function parseDna(raw) {
   }
   return parsed;
 }
-var briefCommand = defineCommand169({
+var briefCommand = defineCommand173({
   meta: {
     name: "brief",
     description: `Generate a creative brief from winning references. Example: baker winning-ads brief --dna '{"angle":"cost savings"}' --notes "B2B, LinkedIn video" --k 8`
@@ -31111,7 +31768,7 @@ var briefCommand = defineCommand169({
 });
 
 // src/commands/winning-ads/content.ts
-import { defineCommand as defineCommand170 } from "citty";
+import { defineCommand as defineCommand174 } from "citty";
 registerSchema({
   command: "winning-ads.content",
   description: "Read what's INSIDE one winning ad: the spoken transcript, the on-screen text, and the ad copy. Use this after `search`/`winners`/`feed` return a shortlist \u2014 pass an ad_id to understand a reference before reproducing it. Add --full for speech, pacing, and soundtrack detail. Video ads carry the transcript/on-screen text; static ads carry only the copy.",
@@ -31124,7 +31781,7 @@ registerSchema({
     }
   }
 });
-var contentCommand = defineCommand170({
+var contentCommand = defineCommand174({
   meta: {
     name: "content",
     description: "Read the transcript + on-screen text + copy of one winning ad. Example: baker winning-ads content adg_123 --platform meta --full --output md"
@@ -31173,7 +31830,7 @@ var contentCommand = defineCommand170({
 });
 
 // src/commands/winning-ads/feed.ts
-import { defineCommand as defineCommand171 } from "citty";
+import { defineCommand as defineCommand175 } from "citty";
 function buildFeedParams(input) {
   const params = {};
   const advertiser = splitList(input.advertiser);
@@ -31225,7 +31882,7 @@ registerSchema({
     format: { type: "string", description: "Comma-separated formats to include (e.g. static,video)", required: false }
   }
 });
-var feedCommand = defineCommand171({
+var feedCommand = defineCommand175({
   meta: {
     name: "feed",
     description: "Winners across every brand you follow (browse, then trim per advertiser). Example: baker winning-ads feed --per-advertiser 5 --output md"
@@ -31310,7 +31967,7 @@ var feedCommand = defineCommand171({
 });
 
 // src/commands/winning-ads/follow.ts
-import { defineCommand as defineCommand172 } from "citty";
+import { defineCommand as defineCommand176 } from "citty";
 var PLATFORMS = ["meta", "linkedin"];
 registerSchema({
   command: "winning-ads.follow",
@@ -31325,7 +31982,7 @@ registerSchema({
     label: { type: "string", description: "Optional display label (defaults to the resolved name)", required: false }
   }
 });
-var followCommand = defineCommand172({
+var followCommand = defineCommand176({
   meta: {
     name: "follow",
     description: 'Follow a brand to track ALL its ads \u2014 every platform and country. --platform is how we read your input, not a limit. A domain tracks both Meta + LinkedIn. Example: baker winning-ads follow "deel.com" --platform meta'
@@ -31372,7 +32029,7 @@ var followCommand = defineCommand172({
 });
 
 // src/commands/winning-ads/follow-competitors.ts
-import { defineCommand as defineCommand173 } from "citty";
+import { defineCommand as defineCommand177 } from "citty";
 var PLATFORMS2 = ["meta", "linkedin"];
 var BATCH_TIMEOUT_MS = 3e5;
 function buildFollowBatchBody(input) {
@@ -31405,7 +32062,7 @@ registerSchema({
     }
   }
 });
-var followCompetitorsCommand = defineCommand173({
+var followCompetitorsCommand = defineCommand177({
   meta: {
     name: "follow-competitors",
     description: 'Follow many brands at once by domain \u2014 add every competitor in one call. Example: baker winning-ads follow-competitors "deel.com,notion.so,hubspot.com"'
@@ -31480,7 +32137,7 @@ var followCompetitorsCommand = defineCommand173({
 });
 
 // src/commands/winning-ads/following.ts
-import { defineCommand as defineCommand174 } from "citty";
+import { defineCommand as defineCommand178 } from "citty";
 registerSchema({
   command: "winning-ads.following",
   description: "List the brands you follow in your ad-dna library, with each one's status (ready vs still adding) and cached ad counts.",
@@ -31513,7 +32170,7 @@ function followingNormalizer(record, full) {
     platforms: Array.isArray(record.platforms) ? record.platforms : []
   };
 }
-var followingCommand = defineCommand174({
+var followingCommand = defineCommand178({
   meta: {
     name: "following",
     description: "List brands you follow, with status (ready / adding\u2026) and cached counts. Example: baker winning-ads following --output md"
@@ -31548,7 +32205,7 @@ var followingCommand = defineCommand174({
 });
 
 // src/commands/winning-ads/patterns.ts
-import { defineCommand as defineCommand175 } from "citty";
+import { defineCommand as defineCommand179 } from "citty";
 registerSchema({
   command: "winning-ads.patterns",
   description: "Mine what separates two cohorts of ads: pass a comma-list of winning ad ids (--winners) and a comma-list of weaker ad ids (--duds). Returns the discriminating DNA fields.",
@@ -31587,7 +32244,7 @@ function discriminatorRow(record) {
     top_values_duds: Array.isArray(record.top_values_b) ? record.top_values_b.join(", ") : ""
   };
 }
-var patternsCommand = defineCommand175({
+var patternsCommand = defineCommand179({
   meta: {
     name: "patterns",
     description: "Discover what separates winning ads from weak ones. Example: baker winning-ads patterns --winners a_1,a_2,a_3 --duds a_9,a_8 --output md"
@@ -31643,7 +32300,7 @@ var patternsCommand = defineCommand175({
 });
 
 // src/commands/winning-ads/search.ts
-import { defineCommand as defineCommand176 } from "citty";
+import { defineCommand as defineCommand180 } from "citty";
 registerSchema({
   command: "winning-ads.search",
   description: "Search the ad-dna corpus of scored winning ads. Returns a lean shortlist (advertiser, summary, scores, media_url) to pick a reference to reproduce.",
@@ -31751,7 +32408,7 @@ function buildSearchBody(args) {
   }
   return body;
 }
-var searchCommand4 = defineCommand176({
+var searchCommand4 = defineCommand180({
   meta: {
     name: "search",
     description: "Search winning reference ads. Example: baker winning-ads search 'B2B SaaS before/after AI automation' --platform meta --format static --winner-category winner --exclude-advertiser adv_123 --output md"
@@ -31866,7 +32523,7 @@ var searchCommand4 = defineCommand176({
 });
 
 // src/commands/winning-ads/seeds.ts
-import { defineCommand as defineCommand177 } from "citty";
+import { defineCommand as defineCommand181 } from "citty";
 function leanRow(r) {
   return {
     key: r.key,
@@ -31894,7 +32551,7 @@ function makeSeedCommand(opts) {
       limit: { type: "number", description: "Max keys 1-100 (default 20)", required: false, default: 20 }
     }
   });
-  return defineCommand177({
+  return defineCommand181({
     meta: { name: opts.name, description: opts.description },
     args: {
       platform: { type: "string", description: "Single platform to segment on", required: false },
@@ -31943,7 +32600,7 @@ var formatsCommand = makeSeedCommand({
 });
 
 // src/commands/winning-ads/unfollow.ts
-import { defineCommand as defineCommand178 } from "citty";
+import { defineCommand as defineCommand182 } from "citty";
 registerSchema({
   command: "winning-ads.unfollow",
   description: "Stop following a brand \u2014 removes it from your ad-dna library by advertiser id.",
@@ -31951,7 +32608,7 @@ registerSchema({
     advertiser: { type: "string", description: "Advertiser id to unfollow", required: true }
   }
 });
-var unfollowCommand = defineCommand178({
+var unfollowCommand = defineCommand182({
   meta: {
     name: "unfollow",
     description: "Stop following a brand by advertiser id. Example: baker winning-ads unfollow adv_123"
@@ -31972,7 +32629,7 @@ var unfollowCommand = defineCommand178({
 });
 
 // src/commands/winning-ads/winners.ts
-import { defineCommand as defineCommand179 } from "citty";
+import { defineCommand as defineCommand183 } from "citty";
 registerSchema({
   command: "winning-ads.winners",
   description: "Top winning ads for one advertiser id (from `advertisers` or `following`). Returns lean winner cards; add --full for DNA + longevity.",
@@ -31982,7 +32639,7 @@ registerSchema({
     platform: { type: "string", description: "Filter to a single platform: meta|linkedin", required: false }
   }
 });
-var winnersCommand = defineCommand179({
+var winnersCommand = defineCommand183({
   meta: {
     name: "winners",
     description: "Top winning ads for a specific advertiser id. Example: baker winning-ads winners adv_123 --top 15 --output md"
@@ -32032,7 +32689,7 @@ var winnersCommand = defineCommand179({
 });
 
 // src/commands/winning-ads/index.ts
-var winningAdsCommand = defineCommand180({
+var winningAdsCommand = defineCommand184({
   meta: {
     name: "winning-ads",
     description: `Search the ad-dna corpus of scored "winning" ads for reference creatives to reproduce, and manage the brands your library tracks. Proxied through the Baker backend (BAKER_API_KEY) \u2014 no separate token needed.
@@ -32088,7 +32745,7 @@ Full guide: __tooling__/docs/tools/baker/winning-ads.md`
 });
 
 // src/version.ts
-import { readFileSync as readFileSync12 } from "fs";
+import { readFileSync as readFileSync13 } from "fs";
 function packageJsonUrl() {
   return new URL("../package.json", import.meta.url);
 }
@@ -32100,15 +32757,15 @@ function parsePackageVersion(raw) {
   throw new Error("Invalid CLI package.json: missing version");
 }
 function getCliVersion() {
-  return parsePackageVersion(readFileSync12(packageJsonUrl(), "utf8"));
+  return parsePackageVersion(readFileSync13(packageJsonUrl(), "utf8"));
 }
 
 // src/cli.ts
-var main = defineCommand181({
+var main = defineCommand185({
   meta: {
     name: "baker",
     version: getCliVersion(),
-    description: `AI-agent CLI for finding and managing images, videos, testimonials, action items, scheduled actions, marketing tags, account history, and ad platform data in Baker.
+    description: `AI-agent CLI for finding and managing images, videos, testimonials, action items, scheduled actions, marketing tags, Tag Manager containers, account history, and ad platform data in Baker.
 
 Auth: Set BAKER_API_KEY (starts with bk_) and BAKER_API_URL environment variables.
 Chat: Set BAKER_CHAT_ID for action and scheduled-action commands that stage changes against a chat.
@@ -32132,6 +32789,7 @@ Introspection: Run 'baker schema <command>' to inspect argument schemas.`
     testimonials: testimonialsCommand,
     canvas: canvasCommand,
     tags: tagsCommand3,
+    "tag-manager": tagManagerCommand,
     chats: chatsCommand,
     history: historyCommand,
     hubspot: hubspotCommand,