@koda-sl/baker-cli 0.384.0 → 0.385.0-dev.ec7b0e42b

package/dist/{chunk-VLUGGVJL.js → chunk-WLDM2TRF.js}

@@ -13,6 +13,14 @@ import {
 // src/commands/ads/meta/shared.ts
 var DAY_MS = 864e5;
 function metaForbiddenFix(message) {
+  if (message.includes("has not accepted Meta's Lead Generation Terms")) {
+    return {
+      action: "reject",
+      explanation: `${message}
+
+Meta confirmed the Page's terms status using its Page access. Give the Page owner the terms link in the error and ask them to accept it before trying the form or lead ad set again. Do not suggest reconnecting Meta for this refusal; continue with other work that does not require the form or ad set.`
+    };
+  }
   return {
     action: "reject",
     explanation: [
@@ -125,4 +133,4 @@ export {
   resolveEffectiveStatus,
   statusFilterHints
 };
-//# sourceMappingURL=chunk-VLUGGVJL.js.map
+//# sourceMappingURL=chunk-WLDM2TRF.js.map

package/dist/chunk-WLDM2TRF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/ads/meta/shared.ts"],"sourcesContent":["import { ApiError } from \"../../../client.ts\";\nimport { getEnv } from \"../../../env.ts\";\nimport { handleConnectionError, needsConnectionFix } from \"../../../error-handler.ts\";\nimport { writeAdsJson } from \"../output.ts\";\nimport type { AdsErrorEnvelope, QueryFix } from \"../types.ts\";\n\nconst DAY_MS = 86_400_000;\n\n/**\n * Meta answers a permission refusal (Graph codes 200/10/294) with a bare\n * \"Permissions error\" that covers two causes needing opposite remedies: a\n * consent grant the connection never got — nothing validates Meta's granted\n * scopes after connect, unlike HubSpot's `requireCapability` — or a role the\n * user lacks on one asset, since a Pixel/Dataset, Page or catalog lives in a\n * Business and is assigned separately from the ad account. Only the blast radius\n * separates them, so hand the agent that test rather than a verdict: guessing\n * \"reconnect\" wastes the user's time on an unassigned asset, and ruling it out\n * strands a connection that really is short a scope.\n */\nexport function metaForbiddenFix(message: string): QueryFix {\n  if (message.includes(\"has not accepted Meta's Lead Generation Terms\")) {\n    return {\n      action: \"reject\",\n      explanation: `${message}\\n\\nMeta confirmed the Page's terms status using its Page access. Give the Page owner the terms link in the error and ask them to accept it before trying the form or lead ad set again. Do not suggest reconnecting Meta for this refusal; continue with other work that does not require the form or ad set.`,\n    };\n  }\n  return {\n    action: \"reject\",\n    explanation: [\n      message,\n      \"This is a permission refusal, not a dead connection, and Meta returns the same code for two causes with opposite remedies. Tell them apart by how much else works before you answer.\",\n      \"If other reads on this account are ALSO refused (campaigns, ad sets, insights), the connection is short a permission it was never granted. Only the user can widen it, by reconnecting Meta from the dashboard.\",\n      \"If those reads work and only this object is refused, the asset (pixel/dataset, Page, or catalog) belongs to a Business the connected user holds no role in. Ad-account access does not carry asset access and reconnecting cannot grant it — the client assigns that asset to the connected user or partner in Meta Business settings, under the asset's own section (Data sources → Datasets for a pixel).\",\n      \"Either way do not retry the same call, and do not abort the wider job. Continue with what you can read, and state in your answer that this specific check could not run and why — never present the task as verified when this step was skipped.\",\n    ].join(\"\\n\\n\"),\n  };\n}\n\nexport function handleMetaError(err: unknown): never {\n  if (err instanceof ApiError) {\n    if (needsConnectionFix(err.code, err.message)) {\n      handleConnectionError(\"meta_ads\", err.message);\n    }\n    const envelope: AdsErrorEnvelope = {\n      ok: false,\n      error: {\n        code: err.code,\n        message: err.message,\n        fix: err.code === \"FORBIDDEN\" ? metaForbiddenFix(err.message) : { action: \"reject\", explanation: err.message },\n        retryable: err.code === \"RATE_LIMITED\" || err.code === \"UNAVAILABLE\" || err.code === \"INTERNAL_ERROR\",\n      },\n    };\n    writeAdsJson(envelope);\n    process.exit(1);\n  }\n  const message = err instanceof Error ? err.message : \"Unexpected error\";\n  writeAdsJson({ ok: false, error: { code: \"NETWORK_ERROR\", message } });\n  process.exit(1);\n}\n\nconst ACCOUNT_ID_RE = /^(act_)?[0-9]+$/;\n\n/** Pull the default Meta ad account ID from `--account-id` arg or `BAKER_META_AD_ACCOUNT_ID` env. */\nexport function resolveAccountIdArg(args: Record<string, unknown>): string {\n  const fromArgs = args[\"account-id\"] as string | undefined;\n  const id = fromArgs || getEnv().BAKER_META_AD_ACCOUNT_ID;\n  if (!id) {\n    writeAdsJson({\n      ok: false,\n      error: {\n        code: \"MISSING_ACCOUNT_ID\",\n        message: \"Pass --account-id or set BAKER_META_AD_ACCOUNT_ID. Run `baker ads meta accounts` to find IDs.\",\n      },\n    });\n    process.exit(1);\n  }\n  if (!ACCOUNT_ID_RE.test(id)) {\n    writeAdsJson({\n      ok: false,\n      error: {\n        code: \"INVALID_ACCOUNT_ID\",\n        message: `Invalid account ID \"${id}\". Expected numeric ID, optionally prefixed with \"act_\".`,\n      },\n    });\n    process.exit(1);\n  }\n  return id.startsWith(\"act_\") ? id : `act_${id}`;\n}\n\nexport function getDateRange(args: Record<string, unknown>): { datePreset?: string; since?: string; until?: string } {\n  const datePreset = args[\"date-preset\"] as string | undefined;\n  const since = args.since as string | undefined;\n  const until = args.until as string | undefined;\n  if (since && until) return { since, until };\n  return { datePreset: datePreset ?? \"last_7d\" };\n}\n\nexport function todayIso(): string {\n  return new Date().toISOString().slice(0, 10);\n}\n\nexport function daysAgoIso(days: number): string {\n  return new Date(Date.now() - days * DAY_MS).toISOString().slice(0, 10);\n}\n\nexport function csvOrJson(args: Record<string, unknown>): string {\n  return (args.output as string | undefined) ?? \"json\";\n}\n\n/**\n * Matched by Meta itself, so finding one entity by name reads only the rows that\n * match instead of the whole account.\n */\nexport const NAME_CONTAINS_ARG = {\n  type: \"string\",\n  description:\n    \"Only rows whose name contains this text, matched by Meta before anything is returned. Start here to find one entity by name: --name-contains octubre --all-statuses\",\n} as const;\n\n/**\n * Default to ACTIVE-only on listings — that's almost always what an AI agent or\n * a human glance wants. Pass `--effective-status ACTIVE,PAUSED` to override, or\n * `--all-statuses` to drop the filter entirely.\n */\nexport function resolveEffectiveStatus(args: Record<string, unknown>): string | undefined {\n  if (args[\"all-statuses\"]) {\n    return undefined;\n  }\n  const explicit = args[\"effective-status\"] as string | undefined;\n  if (explicit) {\n    return explicit;\n  }\n  return \"ACTIVE\";\n}\n\n/**\n * An empty listing under a status filter reads exactly like \"nothing exists\":\n * a paused campaign's ad sets are CAMPAIGN_PAUSED, so the ACTIVE default hides\n * every one of them. Say which filter produced the empty list and how to widen it.\n */\nexport function statusFilterHints(\n  rows: ReadonlyArray<unknown>,\n  effectiveStatus: string | undefined,\n  noun: string,\n): string[] {\n  if (rows.length > 0 || effectiveStatus === undefined) return [];\n  if (effectiveStatus === \"ACTIVE\") {\n    return [\n      `No ACTIVE ${noun}. The ACTIVE filter hides paused, archived and in-review ones (under a paused campaign or ad set that is all of them), so this does NOT mean none exist. Re-run with --all-statuses before concluding there are none.`,\n    ];\n  }\n  return [\n    `No ${noun} with effective_status ${effectiveStatus}. Re-run with --all-statuses to see every status before concluding there are none.`,\n  ];\n}\n"],"mappings":";;;;;;;;;;;;;AAMA,IAAM,SAAS;AAaR,SAAS,iBAAiB,SAA2B;AAC1D,MAAI,QAAQ,SAAS,+CAA+C,GAAG;AACrE,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,aAAa,GAAG,OAAO;AAAA;AAAA;AAAA,IACzB;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,aAAa;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,MAAM;AAAA,EACf;AACF;AAEO,SAAS,gBAAgB,KAAqB;AACnD,MAAI,eAAe,UAAU;AAC3B,QAAI,mBAAmB,IAAI,MAAM,IAAI,OAAO,GAAG;AAC7C,4BAAsB,YAAY,IAAI,OAAO;AAAA,IAC/C;AACA,UAAM,WAA6B;AAAA,MACjC,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,MAAM,IAAI;AAAA,QACV,SAAS,IAAI;AAAA,QACb,KAAK,IAAI,SAAS,cAAc,iBAAiB,IAAI,OAAO,IAAI,EAAE,QAAQ,UAAU,aAAa,IAAI,QAAQ;AAAA,QAC7G,WAAW,IAAI,SAAS,kBAAkB,IAAI,SAAS,iBAAiB,IAAI,SAAS;AAAA,MACvF;AAAA,IACF;AACA,iBAAa,QAAQ;AACrB,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AACrD,eAAa,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,QAAQ,EAAE,CAAC;AACrE,UAAQ,KAAK,CAAC;AAChB;AAEA,IAAM,gBAAgB;AAGf,SAAS,oBAAoB,MAAuC;AACzE,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,KAAK,YAAY,OAAO,EAAE;AAChC,MAAI,CAAC,IAAI;AACP,iBAAa;AAAA,MACX,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,IACF,CAAC;AACD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,CAAC,cAAc,KAAK,EAAE,GAAG;AAC3B,iBAAa;AAAA,MACX,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS,uBAAuB,EAAE;AAAA,MACpC;AAAA,IACF,CAAC;AACD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,SAAO,GAAG,WAAW,MAAM,IAAI,KAAK,OAAO,EAAE;AAC/C;AAEO,SAAS,aAAa,MAAwF;AACnH,QAAM,aAAa,KAAK,aAAa;AACrC,QAAM,QAAQ,KAAK;AACnB,QAAM,QAAQ,KAAK;AACnB,MAAI,SAAS,MAAO,QAAO,EAAE,OAAO,MAAM;AAC1C,SAAO,EAAE,YAAY,cAAc,UAAU;AAC/C;AAEO,SAAS,WAAmB;AACjC,UAAO,oBAAI,KAAK,GAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC7C;AAEO,SAAS,WAAW,MAAsB;AAC/C,SAAO,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AACvE;AAEO,SAAS,UAAU,MAAuC;AAC/D,SAAQ,KAAK,UAAiC;AAChD;AAMO,IAAM,oBAAoB;AAAA,EAC/B,MAAM;AAAA,EACN,aACE;AACJ;AAOO,SAAS,uBAAuB,MAAmD;AACxF,MAAI,KAAK,cAAc,GAAG;AACxB,WAAO;AAAA,EACT;AACA,QAAM,WAAW,KAAK,kBAAkB;AACxC,MAAI,UAAU;AACZ,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAOO,SAAS,kBACd,MACA,iBACA,MACU;AACV,MAAI,KAAK,SAAS,KAAK,oBAAoB,OAAW,QAAO,CAAC;AAC9D,MAAI,oBAAoB,UAAU;AAChC,WAAO;AAAA,MACL,aAAa,IAAI;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AAAA,IACL,MAAM,IAAI,0BAA0B,eAAe;AAAA,EACrD;AACF;","names":[]}

package/dist/cli.js

@@ -70,7 +70,7 @@ import {
   validateCanvasDeep,
   withoutCastName,
   ytDlpBlockSignal
-} from "./chunk-FGHMWBUD.js";
+} from "./chunk-JHKW6IDX.js";
 import {
   NAME_CONTAINS_ARG,
   csvOrJson,
@@ -81,7 +81,7 @@ import {
   resolveEffectiveStatus,
   statusFilterHints,
   todayIso
-} from "./chunk-VLUGGVJL.js";
+} from "./chunk-WLDM2TRF.js";
 import {
   buildQueryCacheKey,
   cacheGet,
@@ -5124,6 +5124,16 @@ var FLOW_SIDE_EFFECT_CATALOG = [
     },
     "`advancedMatching` is how Meta re-identifies the visitor, and it is the difference between a matched conversion and a discarded one. Fill at least `em` and `ph` from the form: `baker flows map <slug> --map em=email --map ph=phone`."
   ),
+  eventSideEffect(
+    "chatgptAds",
+    "Fires a ChatGPT Ads pixel conversion and mirrors it through the Conversions API when a key is configured.",
+    {
+      eventType: "standard",
+      eventParams: [],
+      advancedMatching: matchingSlots("em", "ph", "fn", "ln", "external_id", "ct", "st", "zp", "country")
+    },
+    "Use ChatGPT Ads event names such as lead_created, order_created or appointment_scheduled. For a custom event use a lowercase name of 1\u201364 letters, digits, underscores or dashes. Only value (major currency units) and currency are supported in eventParams. Map em from the form to improve conversion matching."
+  ),
   eventSideEffect("googleAnalytics", "Fires a GA4 event.", { eventType: "custom", eventParams: [] }),
   {
     kind: "side-effect",
@@ -8036,6 +8046,7 @@ var studioImproveResponseSchema = z27.object({ prompt: z27.string(), original: z
 import { z as z28 } from "zod";
 var TAG_TYPES = [
   "meta",
+  "chatgptAds",
   "amplitude",
   "googleAds",
   "tiktok",
@@ -8057,6 +8068,7 @@ var TAG_TYPES = [
 var tagTypeSchema = z28.enum(TAG_TYPES);
 var TAG_IDENTIFYING_FIELD = {
   meta: "pixelId",
+  chatgptAds: "pixelId",
   googleAds: "conversionID",
   tiktok: "pixelCode",
   pinterest: "tagId",
@@ -15027,7 +15039,14 @@ function parseEventKey(key) {
 }
 
 // ../api/src/analytics/sends.ts
-var SEND_PLATFORMS = ["meta", "googleAds", "linkedinInsightTag", "twitterAds", "googleAnalytics"];
+var SEND_PLATFORMS = [
+  "meta",
+  "chatgptAds",
+  "googleAds",
+  "linkedinInsightTag",
+  "twitterAds",
+  "googleAnalytics"
+];
 function isSendPlatform(value) {
   return SEND_PLATFORMS.includes(value);
 }
@@ -15039,6 +15058,13 @@ var SEND_PLATFORM_SPECS = {
     credentialFields: ["accessToken"],
     setupHint: "Add the Conversions API access token to the Meta pixel in Tracking"
   },
+  chatgptAds: {
+    title: "ChatGPT Ads",
+    eventMeans: "A ChatGPT Ads event \u2014 lead_created, order_created, or a custom name",
+    eventKind: "name",
+    credentialFields: ["apiKey"],
+    setupHint: "Add the Conversions API key to the ChatGPT Ads pixel in Tracking"
+  },
   googleAds: {
     title: "Google Ads",
     eventMeans: "One of the account's conversion actions, picked from its list",
@@ -15089,6 +15115,7 @@ function isConversionSend(type) {
 }
 var SERVER_SIDE_SENDER_TAG = {
   metaCapi: "meta",
+  chatgptAdsCapi: "chatgptAds",
   googleAdsCapi: "googleAds",
   linkedinCapi: "linkedinInsightTag",
   twitterAdsCapi: "twitterAds",
@@ -20545,9 +20572,8 @@ function requireTargets(args5, entity) {
 var CHAT_READ_ARG_DESCRIPTION = CHAT_READ_ARG.description;
 registerSchema({
   command: "ads.linkedin.accounts",
-  description: "List LinkedIn ad accounts in the company's connected scope. Pass --include-all to list every account the OAuth token can see.",
+  description: "List LinkedIn ad accounts in the company's connected scope.",
   args: {
-    "include-all": { type: "boolean", description: "Ignore picker scope", required: false },
     "no-cache": NO_CACHE_ARG,
     output: { type: "string", description: "json|csv|jsonl|md", required: false, default: "json" }
   }
@@ -22258,11 +22284,7 @@ Examples:
 
 // src/commands/ads/linkedin/accounts.ts
 import { defineCommand as defineCommand35 } from "citty";
-var ACCOUNTS_TTL_MS = 60 * 60 * 1e3;
-function accountHints2(accounts, includeAll) {
-  if (includeAll) {
-    return [];
-  }
+function accountHints2(accounts) {
   return connectedResourceHints({
     plural: "LinkedIn ad accounts",
     singular: "LinkedIn ad account",
@@ -22277,44 +22299,23 @@ var accountsCommand2 = defineCommand35({
 
 Examples:
   baker ads linkedin accounts
-  baker ads linkedin accounts --include-all   # ignore picker scope, list every account the token can see
   baker ads linkedin accounts --output csv`
   },
   args: {
-    "include-all": { type: "boolean", description: "List all accessible accounts, ignoring picker scope" },
     "no-cache": NO_CACHE_ARG,
     output: { type: "string", description: "Output format: json|csv|jsonl|md", default: "json" }
   },
   run: async ({ args: args5 }) => {
-    const includeAll = args5["include-all"] === true;
-    const useCache = !args5["no-cache"];
-    const cacheKey = `accounts:${includeAll ? "all" : "scoped"}`;
-    if (useCache) {
-      const cached = cacheGet("linkedin-accounts", cacheKey);
-      if (cached) {
-        writeJsonEnvelope({
-          ok: true,
-          data: cached.data,
-          cached: true,
-          hints: accountHints2(cached.data, includeAll)
-        });
-        return;
-      }
-    }
     try {
       const params = {};
-      if (includeAll) params["include-all"] = "true";
-      if (!useCache) params["skip-cache"] = "true";
+      if (args5["no-cache"]) params["skip-cache"] = "true";
       const data = await apiGet("/api/ads/linkedin/accounts", params);
-      if (useCache) {
-        cacheSet("linkedin-accounts", cacheKey, data, ACCOUNTS_TTL_MS);
-      }
       const fmt = csvOrJson2(args5);
       if (fmt !== "json") {
         writeAdsOutput(data, fmt);
         return;
       }
-      writeJsonEnvelope({ ok: true, data, hints: accountHints2(data, includeAll) });
+      writeJsonEnvelope({ ok: true, data, hints: accountHints2(data) });
     } catch (err) {
       handleLinkedinError(err);
     }
@@ -24313,7 +24314,6 @@ var linkedinCommand = defineCommand53({
 
 Discovery:
   baker ads linkedin accounts                                    \u2014 accounts in this company's connected scope
-  baker ads linkedin accounts --include-all                      \u2014 every account the token can see
   baker ads linkedin account --account-id 503001492              \u2014 single-account detail (currency, type, status)
   baker ads linkedin url-params [--ad-sets]                      \u2014 UTMs in effect today, and keys set at two levels
 
@@ -24408,10 +24408,7 @@ Examples:
 
 // src/commands/ads/meta/accounts.ts
 import { defineCommand as defineCommand55 } from "citty";
-function accountHints3(accounts, includeAll) {
-  if (includeAll) {
-    return [];
-  }
+function accountHints3(accounts) {
   return connectedResourceHints({
     plural: "Meta ad accounts",
     singular: "Meta ad account",
@@ -24429,44 +24426,23 @@ var accountsCommand3 = defineCommand55({
 
 Examples:
   baker ads meta accounts
-  baker ads meta accounts --include-all   # ignore picker scope and list every account the token can see
   baker ads meta accounts --output csv`
   },
   args: {
-    "include-all": { type: "boolean", description: "List all accessible accounts, ignoring picker scope" },
     "no-cache": NO_CACHE_ARG,
     output: { type: "string", description: "Output format: json|csv|jsonl|md", default: "json" }
   },
   run: async ({ args: args5 }) => {
-    const includeAll = args5["include-all"] === true;
-    const useCache = !args5["no-cache"];
-    const cacheKey = `accounts:${includeAll ? "all" : "scoped"}`;
-    if (useCache) {
-      const cached = cacheGet("meta-accounts", cacheKey);
-      if (cached) {
-        writeJsonEnvelope({
-          ok: true,
-          data: cached.data,
-          cached: true,
-          hints: accountHints3(cached.data, includeAll)
-        });
-        return;
-      }
-    }
     try {
       const params = {};
-      if (includeAll) params["include-all"] = "true";
-      if (!useCache) params["skip-cache"] = "true";
+      if (args5["no-cache"]) params["skip-cache"] = "true";
       const data = await apiGet("/api/ads/meta/accounts", params);
-      if (useCache) {
-        cacheSet("meta-accounts", cacheKey, data, 60 * 60 * 1e3);
-      }
       const fmt = csvOrJson(args5);
       if (fmt !== "json") {
         writeAdsOutput(data, fmt);
         return;
       }
-      writeJsonEnvelope({ ok: true, data, hints: accountHints3(data, includeAll) });
+      writeJsonEnvelope({ ok: true, data, hints: accountHints3(data) });
     } catch (err) {
       handleMetaError(err);
     }
@@ -24767,7 +24743,7 @@ function leafRefusal(field, condition, path48) {
 }
 
 // ../api/src/ads-meta/leadAds.ts
-var META_LEAD_ADS_NOT_ENABLED_MESSAGE = "Reading Meta instant forms and their leads is not switched on for this company. Everything else on Meta keeps working. Tell the user this needs switching on by the Baker team, and carry on with the rest of the job.";
+var META_LEAD_ADS_NOT_ENABLED_MESSAGE = "Using Meta instant forms and their leads is not switched on for this company. Everything else on Meta keeps working. Tell the user this needs switching on by the Baker team, and carry on with the rest of the job.";
 var META_LEAD_ADS_RECONNECT_MESSAGE = "This Meta connection was made before lead ads were switched on for this company, so it cannot work with instant forms or read their leads. Ask the user to reconnect Meta in the dashboard \u2014 that grants the extra permissions \u2014 then ask for this again. Everything else on Meta keeps working meanwhile.";
 function isMetaLeadAdsRefusal(message) {
   return message === META_LEAD_ADS_NOT_ENABLED_MESSAGE || message === META_LEAD_ADS_RECONNECT_MESSAGE;
@@ -25853,7 +25829,7 @@ var callToActionSchema = z37.strictObject({
    * Without it Meta refuses every ad in that ad set with subcode 3390001,
    * "Choose or create an instant form for your leads campaign".
    */
-  lead_gen_form_id: z37.string().regex(NUMERIC_ID_REGEX3).optional()
+  lead_gen_form_id: parentRefSchema3.optional()
 }).superRefine((p, ctx) => {
   if (p.lead_gen_form_id && !LEAD_FORM_CTA_TYPES.some((allowed) => allowed === p.type)) {
     ctx.addIssue({
@@ -26176,6 +26152,50 @@ var mediaUploadSchema = z37.strictObject({
     ctx.addIssue({ code: "custom", path: ["bakerVideoId"], message: "video uploads need a bakerVideoId" });
   }
 });
+var leadFormCreateSchema2 = z37.strictObject({
+  page_id: z37.string().regex(NUMERIC_ID_REGEX3),
+  name: z37.string().min(1).max(255),
+  locale: z37.enum(["EN_US", "EN_GB", "ES_ES", "ES_LA", "FR_FR", "DE_DE", "PT_BR", "PT_PT"]).default("EN_US"),
+  questionPageHeadline: z37.string().min(1).max(255).optional(),
+  questions: z37.array(
+    z37.strictObject({
+      type: z37.enum([
+        "FULL_NAME",
+        "FIRST_NAME",
+        "LAST_NAME",
+        "EMAIL",
+        "PHONE",
+        "CITY",
+        "STATE",
+        "COUNTRY",
+        "ZIP_CODE",
+        "COMPANY_NAME",
+        "JOB_TITLE",
+        "CUSTOM"
+      ]),
+      label: z37.string().min(1).max(255).optional()
+    })
+  ).min(1).max(15),
+  privacyPolicyUrl: httpsUrlSchema3,
+  privacyPolicyLinkText: z37.string().min(1).max(70).default("Privacy Policy"),
+  followUpActionUrl: httpsUrlSchema3,
+  optimizedForQuality: z37.boolean().default(false),
+  thankYou: z37.strictObject({
+    title: z37.string().min(1).max(255),
+    body: z37.string().min(1).max(1e3),
+    buttonText: z37.string().min(1).max(70).default("View website")
+  }).optional()
+}).superRefine((form, ctx) => {
+  const seen = /* @__PURE__ */ new Set();
+  for (const [index, question] of form.questions.entries()) {
+    if (question.type === "CUSTOM" && !question.label) {
+      ctx.addIssue({ code: "custom", path: ["questions", index, "label"], message: "custom questions need a label" });
+    }
+    const key = `${question.type}:${question.label ?? ""}`;
+    if (seen.has(key)) ctx.addIssue({ code: "custom", path: ["questions", index], message: "duplicate question" });
+    seen.add(key);
+  }
+});
 var META_DRAFT_OP_KINDS = [
   "campaign.create",
   "campaign.update",
@@ -26188,6 +26208,7 @@ var META_DRAFT_OP_KINDS = [
   "customAudience.create",
   "customAudience.update",
   "customConversion.create",
+  "leadForm.create",
   "media.upload"
 ];
 var metaDraftOpKindSchema = z37.enum(META_DRAFT_OP_KINDS);
@@ -26211,6 +26232,7 @@ var metaDraftOpInputSchema = z37.discriminatedUnion("kind", [
   createOp4("customAudience.create", customAudienceCreateSchema),
   updateOp4("customAudience.update", customAudienceUpdateSchema),
   createOp4("customConversion.create", customConversionCreateSchema),
+  createOp4("leadForm.create", leadFormCreateSchema2),
   createOp4("media.upload", mediaUploadSchema)
 ]);
 
@@ -26801,7 +26823,7 @@ Example: baker ads meta creatives create --page 555 --message "Save now" --link
     cta: { type: "string", description: "Call-to-action type (SHOP_NOW|LEARN_MORE|SIGN_UP|\u2026)" },
     "lead-form": {
       type: "string",
-      description: "Instant form id the button opens \u2014 REQUIRED for an ad set that collects leads on the ad. List them with `baker ads meta lead-forms`. With a form, --cta must be APPLY_NOW|DOWNLOAD|GET_QUOTE|LEARN_MORE|SIGN_UP|SUBSCRIBE"
+      description: "Instant form id or meta_temp_* ref from `baker ads meta lead-forms create` \u2014 REQUIRED for an ad set that collects leads on the ad. With a form, --cta must be APPLY_NOW|DOWNLOAD|GET_QUOTE|LEARN_MORE|SIGN_UP|SUBSCRIBE"
     },
     "image-hash": { type: "string", description: "Meta ad-image hash (already uploaded)" },
     "image-ref": { type: "string", description: "meta_temp_* ref of a staged media upload" },
@@ -26945,7 +26967,7 @@ Example: baker ads meta ads retag 120252158038400247 --url-tags "utm_source={{si
     const { apiPost: apiPost2 } = await import("./client-GR6YL3YX.js");
     const { requireChatId: requireChatId2 } = await import("./env-4P5HOGNA.js");
     const { writeJsonEnvelope: writeJsonEnvelope2 } = await import("./output-NMQXZF3Z.js");
-    const { handleMetaError: handleMetaError2 } = await import("./shared-J7DQZ2ED.js");
+    const { handleMetaError: handleMetaError2 } = await import("./shared-6762QE6R.js");
     try {
       const accountId = bareAccountId2(args5);
       const urlTags = typeof args5["url-tags"] === "string" ? args5["url-tags"] : void 0;
@@ -27099,7 +27121,7 @@ function duplicateCommand2(entity, label) {
       const { apiPost: apiPost2 } = await import("./client-GR6YL3YX.js");
       const { requireChatId: requireChatId2 } = await import("./env-4P5HOGNA.js");
       const { writeJsonEnvelope: writeJsonEnvelope2 } = await import("./output-NMQXZF3Z.js");
-      const { handleMetaError: handleMetaError2 } = await import("./shared-J7DQZ2ED.js");
+      const { handleMetaError: handleMetaError2 } = await import("./shared-6762QE6R.js");
       try {
         const accountId = bareAccountId2(args5);
         const chatId = requireChatId2();
@@ -27352,7 +27374,7 @@ import { defineCommand as defineCommand61 } from "citty";
 var businessesCommand = defineCommand61({
   meta: {
     name: "businesses",
-    description: `List Meta Business Manager accounts the connected user has access to. Required for ad-studies and product-catalogs commands.
+    description: `List Meta Business Manager accounts linked to this company's selected ad accounts. Required for ad-studies and product-catalogs commands.
 
 Examples:
   baker ads meta businesses`
@@ -28222,13 +28244,47 @@ Async is automatic for heavy queries; pass --async to force it, or --no-async to
 import { defineCommand as defineCommand67 } from "citty";
 registerSchema({
   command: "ads.meta.lead-forms",
-  description: "List the instant (lead) forms on a Facebook Page, with how many leads each has collected. Start here: a lead is fetched by form id, and `baker ads meta pages` gives the page id.",
+  description: "List the instant (lead) forms on a Facebook Page, with how many leads each has collected. Start here: a lead is fetched by form id. Use a Page from `baker ads meta pages` with hasPageAccessToken: true.",
   args: {
-    "page-id": { type: "string", description: "Facebook Page ID \u2014 from `baker ads meta pages`", required: true },
+    "page-id": {
+      type: "string",
+      description: "Facebook Page ID \u2014 from `baker ads meta pages` with hasPageAccessToken: true",
+      required: true
+    },
     full: { type: "boolean", description: "Include each form's questions", required: false },
     output: { type: "string", description: "json|csv", required: false, default: "json" }
   }
 });
+registerSchema({
+  command: "ads.meta.lead-forms.create",
+  description: "Start here to stage a Page-owned Meta Instant Form. The form is created only when this Session publishes. Use the returned meta_temp_* ref as --lead-form on a creative in the same Session.",
+  args: {
+    "account-id": { type: "string", description: "Selected Meta ad account, act_<id>", required: true },
+    "page-id": {
+      type: "string",
+      description: "Facebook Page that owns the form \u2014 choose one with this account in promotingAccountIds and hasPageAccessToken: true from `baker ads meta pages`",
+      required: true
+    },
+    name: { type: "string", description: "Form name", required: true },
+    questions: {
+      type: "string",
+      description: "Comma-separated Meta fields, e.g. FULL_NAME,EMAIL,PHONE",
+      required: true
+    },
+    "privacy-policy-url": { type: "string", description: "Public HTTPS privacy policy", required: true },
+    "follow-up-url": { type: "string", description: "Public HTTPS link after submission", required: true },
+    "optimized-for-quality": {
+      type: "boolean",
+      description: "Ask Meta to optimize form leads for quality",
+      required: false
+    },
+    file: {
+      type: "string",
+      description: "JSON file with full form payload, including thankYou and custom questions",
+      required: false
+    }
+  }
+});
 registerSchema({
   command: "ads.meta.leads",
   description: "Read the leads an instant form collected. Contact details (email, phone) come back masked; pass --full only when the raw values are genuinely needed, e.g. handing them to a CRM.",
@@ -28294,25 +28350,56 @@ function leadPageHints(page, full) {
   }
   return hints2;
 }
-var leadFormsCommand2 = defineCommand67({
+var leadFormsCreateCommand2 = defineCommand67({
   meta: {
-    name: "lead-forms",
-    description: `List the instant (lead) forms on a Facebook Page, with each form's lead count. A lead is read by form id, so start here \u2014 get the Page id from \`baker ads meta pages\`.
-
-Examples:
-  baker ads meta lead-forms --page-id 100635183117758
-  baker ads meta lead-forms --page-id 100635183117758 --full   # also lists each form's questions`
+    name: "create",
+    description: `Stage a Meta Instant Form on a Facebook Page. The form appears in review and is created only when the Session publishes.
+Choose a Page with this account in promotingAccountIds and hasPageAccessToken: true from \`baker ads meta pages\`.
+Example: baker ads meta lead-forms create --account-id act_123 --page-id 456 --name "Free audit" --questions FULL_NAME,EMAIL,PHONE --privacy-policy-url https://example.com/privacy --follow-up-url https://example.com`
   },
   args: {
+    "account-id": { type: "string", description: "Selected Meta ad account" },
     "page-id": { type: "string", description: "Facebook Page ID" },
-    full: { type: "boolean", description: "Include each form's questions" },
-    output: { type: "string", description: "Output format", default: "json" }
+    name: { type: "string", description: "Form name" },
+    questions: { type: "string", description: "FULL_NAME,EMAIL,PHONE or other Meta fields" },
+    "privacy-policy-url": { type: "string", description: "HTTPS privacy policy" },
+    "follow-up-url": { type: "string", description: "HTTPS thank-you link" },
+    "optimized-for-quality": { type: "boolean", description: "Optimize form leads for quality" },
+    file: { type: "string", description: "JSON form payload; flags override file keys" }
   },
+  run: async ({ args: args5 }) => {
+    const accountId = bareAccountId2(args5);
+    const payload = mergePayload3(loadJsonFileArg3(args5.file), {
+      page_id: args5["page-id"],
+      name: args5.name,
+      questions: typeof args5.questions === "string" ? args5.questions.split(",").map((type) => ({ type: type.trim().toUpperCase() })) : void 0,
+      privacyPolicyUrl: args5["privacy-policy-url"],
+      followUpActionUrl: args5["follow-up-url"],
+      optimizedForQuality: args5["optimized-for-quality"]
+    });
+    await stageOp2({ kind: "leadForm.create", accountId, payload });
+  }
+});
+var leadFormsListArgs = {
+  "page-id": { type: "string", description: "Facebook Page ID" },
+  full: { type: "boolean", description: "Include each form's questions" },
+  output: { type: "string", description: "Output format", default: "json" }
+};
+var leadFormsListCommand = defineCommand67({
+  meta: {
+    name: "list",
+    description: "List the Instant Forms on a Facebook Page, with lead counts. Choose a Page with hasPageAccessToken: true from `baker ads meta pages`. Pass --full to include questions."
+  },
+  args: leadFormsListArgs,
   run: async ({ args: args5 }) => {
     try {
       const pageId = args5["page-id"];
       if (!pageId) {
-        handleLeadsError(new Error("--page-id is required. Run `baker ads meta pages` to find it."));
+        handleLeadsError(
+          new Error(
+            "--page-id is required. Run `baker ads meta pages` and choose a Page with hasPageAccessToken: true."
+          )
+        );
       }
       const params = { "page-id": pageId };
       if (args5.full) params.full = "true";
@@ -28329,6 +28416,19 @@ Examples:
     }
   }
 });
+var leadFormsCommand2 = defineCommand67({
+  meta: {
+    name: "lead-forms",
+    description: `List Instant Forms on a Facebook Page or stage a new one.
+Examples:
+  baker ads meta lead-forms --page-id 100635183117758
+  baker ads meta lead-forms --page-id 100635183117758 --full
+  baker ads meta lead-forms create --account-id act_123 --page-id 555 --file form.json`
+  },
+  args: leadFormsListArgs,
+  subCommands: { list: leadFormsListCommand, create: leadFormsCreateCommand2 },
+  default: "list"
+});
 var leadsCommand2 = defineCommand67({
   meta: {
     name: "leads",
@@ -28398,27 +28498,21 @@ var metaMediaCommand = defineCommand68({
 
 // src/commands/ads/meta/pages.ts
 import { defineCommand as defineCommand69 } from "citty";
-function advertisablePages(data) {
-  return data.filter((p) => Array.isArray(p.tasks) && p.tasks.includes("ADVERTISE"));
-}
 function pageSelectionHints(data) {
-  const advertisable = advertisablePages(data);
-  if (advertisable.length > 1) {
+  if (data.length === 0) return [];
+  const accountHint = "Use a Page only with an ad account listed in its promotingAccountIds. hasPageAccessToken must be true to read instant forms; null means Meta could not check it. Form reads also require the company's lead-ads permissions.";
+  if (data.length > 1) {
     return [
-      "MULTIPLE Pages can run ads \u2014 do NOT guess. Confirm with the user which Page an ad should run from before passing --page to `creatives create`; a wrong Page publishes the ad under the wrong brand identity and staging will not catch it."
+      accountHint,
+      "MULTIPLE Pages can run ads from the selected Meta ad accounts \u2014 do NOT guess. Confirm with the user which Page an ad should run from before passing --page to `creatives create`; a wrong Page publishes the ad under the wrong brand identity and staging will not catch it."
     ];
   }
-  if (data.length > 0 && advertisable.length === 0) {
-    return [
-      "NO Page can run ads \u2014 none of the connected user's Pages carry the ADVERTISE task. Ask the user to grant Advertise access to the right Page before creating an ad; a readable-but-non-advertising Page still passes staging and would fail or run under the wrong identity."
-    ];
-  }
-  return [];
+  return [accountHint];
 }
 var pagesCommand = defineCommand69({
   meta: {
     name: "pages",
-    description: `List the Facebook Pages the connected user manages. Every Meta ad publishes from a Page, so use this to identify the Page an ad should run from. The 'tasks' field shows what the user can do on each Page (ADVERTISE means it can back ads). If exactly one Page can ADVERTISE, use it; if more than one can, confirm with the user which Page to use; if none can, ask the user to grant Advertise access \u2014 a wrong or non-advertising Page publishes under the wrong brand identity.
+    description: `List the Facebook Pages that the selected Meta ad accounts can promote, showing which accounts can promote each Page. Every Meta ad publishes from a Page, so match its promotingAccountIds to the target account. hasPageAccessToken shows whether the connected person can also read that Page's instant forms. If more than one Page is listed, confirm the brand with the user.
 
 Examples:
   baker ads meta pages`
@@ -28677,10 +28771,10 @@ var metaCommand = defineCommand72({
 
 Discovery:
   baker ads meta accounts                                \u2014 accounts in this company's connected scope
-  baker ads meta accounts --include-all                  \u2014 every account the token can see
   baker ads meta businesses                              \u2014 Business Manager IDs
-  baker ads meta pages                                   \u2014 Facebook Pages the user manages (an ad's identity)
+  baker ads meta pages                                   \u2014 Facebook Pages the selected ad accounts can promote (an ad's identity)
   baker ads meta lead-forms --page-id 100635183117758    \u2014 instant (lead) forms on a Page, with lead counts
+  baker ads meta lead-forms create --account-id act_123 --page-id 555 --file form.json \u2014 stage a new form
   baker ads meta leads --form-id 987654321               \u2014 the leads one form collected (contact details masked)
 
 Snapshot a running account (default = ACTIVE only):
@@ -49569,6 +49663,14 @@ var MAPPING_SLOTS = {
   code: [PAYLOAD("eventProperties")],
   datafast: [PAYLOAD("goalParams")],
   meta: [PAYLOAD("eventParams"), { kind: "record", key: "advancedMatching", allowed: META_MATCHING }],
+  chatgptAds: [
+    PAYLOAD("eventParams"),
+    {
+      kind: "record",
+      key: "advancedMatching",
+      allowed: ["em", "ph", "fn", "ln", "external_id", "ct", "st", "zp", "country"]
+    }
+  ],
   tiktok: [
     PAYLOAD("eventParams"),
     { kind: "record", key: "identify", allowed: ["email", "phone_number", "external_id"] }
@@ -66965,7 +67067,7 @@ var draftCommand5 = defineCommand218({
 import { defineCommand as defineCommand219 } from "citty";
 registerSchema({
   command: "tagManager.containers",
-  description: "List the Google Tag Manager containers this company's connection can reach. Every container the company connected is flagged `connected: true` \u2014 there can be several, and Baker may read and change all of them. Start here to confirm which containers you are managing.",
+  description: "List the Google Tag Manager containers this company selected. There can be several, and Baker may read and change all of them. Start here to confirm which containers you are managing.",
   args: {}
 });
 registerSchema({
@@ -66986,27 +67088,34 @@ registerSchema({
     full: { type: "boolean", description: "Include the raw Tag Manager object for each entity", required: false }
   }
 });
-function containersHints(containers) {
-  const connected = containers.filter((container) => container.connected);
-  if (connected.length === 0) {
-    return [
-      "None of the containers this company connected came back from Tag Manager. The connected Google account may have lost access to them \u2014 ask the user to reconnect or pick a container again."
-    ];
-  }
-  return connectedResourceHints({
+function containersHints(containers, unavailableContainers = []) {
+  const hints2 = connectedResourceHints({
     plural: "Tag Manager containers",
     singular: "Tag Manager container",
     flag: "--container",
-    resources: connected.map((container) => ({
+    resources: containers.map((container) => ({
       id: container.containerId,
       label: `${container.publicId} \xB7 ${container.name}`
     }))
   });
+  if (unavailableContainers.length > 0) {
+    const [available] = containers;
+    if (containers.length === 1 && available) {
+      hints2.length = 0;
+      hints2.push(
+        `Use --container ${available.containerId} for ${available.publicId} (${available.name}); another selected container cannot be opened.`
+      );
+    }
+    hints2.push(
+      `Tag Manager cannot open ${unavailableContainers.map((container) => `${container.publicId} (${container.name})`).join(", ")}. Ask the user to reconnect with a Google account that has access to these containers.`
+    );
+  }
+  return hints2;
 }
 var containersCommand = defineCommand219({
   meta: {
     name: "containers",
-    description: `List Tag Manager containers reachable by this company's connection.
+    description: `List Tag Manager containers selected by this company.
 
 Start here:
   baker tag-manager containers`
@@ -67014,7 +67123,7 @@ Start here:
   run: async () => {
     try {
       const data = await apiGet("/api/tag-manager/containers");
-      writeJsonEnvelope({ ok: true, data, hints: containersHints(data.containers) });
+      writeJsonEnvelope({ ok: true, data, hints: containersHints(data.containers, data.unavailableContainers) });
     } catch (err) {
       handleError8(err);
     }