@koda-sl/baker-cli 0.448.0-dev.0d67e41b9 → 0.448.0-dev.ccc3c9a37

package/dist/chunk-ZJLETAOO.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/commands/flows/connect.ts"],"sourcesContent":["/**\n * `connect`: fill a Form's step or destination yourself once you know which\n * resource is meant, instead of parking the turn on the chat's picker card.\n *\n * Three sources, one write:\n *   - `--hubspot-form <id>` — a HubSpot form as a `hubspotForm` destination.\n *   - `--resource <id>` / `--new-sheet <title>` / nothing — Calendly, SavvyCal\n *     and GoHighLevel steps; Google Sheets, Pipedrive and GoHighLevel\n *     destinations. The backend reads the resource through the company's\n *     connected account and answers with exactly what the card would write,\n *     sealed under the flow key where it is a destination — so this command\n *     writes ciphertext it cannot read.\n *   - `--same-as <slug>:<id>` — the destination or step another Form already\n *     has, copied as-is. No platform is asked anything.\n *\n * `request_flow_input` stays the path when nothing is connected, when a\n * spreadsheet has never been chosen, or when the agent cannot tell which\n * resource is meant.\n */\n\nimport {\n  FLOW_AGENT_DESTINATION_KINDS,\n  FLOW_PROVIDER_TYPE,\n  type FlowAgentDestinationKind,\n  type FlowsResolveResponse,\n  type FlowsSealRequest,\n  type FlowsSealResponse,\n  type HubspotFormsDestinationResponse,\n} from \"@baker/api\";\nimport { defineCommand } from \"citty\";\nimport { ApiError, apiPost } from \"../../client.ts\";\nimport { writeJson } from \"../../output.ts\";\nimport { registerSchema } from \"../../schemas.ts\";\nimport { failApi } from \"../actions/shared.ts\";\nimport { hubspotRefusal } from \"../hubspot/refusal.ts\";\nimport { collectSideEffects, readFlowTree, walkNodes, writeFlowTree } from \"./shared.ts\";\n\ntype AnyRecord = Record<string, unknown>;\n\ntype Sealed = { oauthProviderId: string; encryptedConfig: string };\n\ntype Attached = { ok: true; nodeId: string; sideEffectId: string } | { ok: false; message: string; fix: string };\n\ntype Stepped = { ok: true; nodeId: string; type: string } | { ok: false; message: string; fix: string };\n\nconst STEP_KINDS = new Set([\"calendly\", \"savvycal\", \"highlevel\", \"highlevelForm\", \"hubspot\", \"hubspotMeeting\"]);\nconst OAUTH_SIDE_EFFECTS = new Set([\"hubspotForm\", \"googleSpreadsheet\", \"pipedrive\", \"goHighlevelContact\"]);\n\n/**\n * Put the sealed destination on the side effect `named` picks — or, with no\n * name, on the form's only one of `type`. Mutates `tree`; the caller writes it.\n */\nexport function attachDestination(\n  tree: AnyRecord,\n  named: string | undefined,\n  sealed: Sealed,\n  type = \"hubspotForm\",\n): Attached {\n  const ofType = collectSideEffects(tree).filter((entry) => entry.sideEffect.type === type);\n  const inventory = ofType.map((entry) => String(entry.sideEffect.id)).join(\", \") || \"none\";\n  const chosen = named\n    ? collectSideEffects(tree).find((entry) => entry.sideEffect.id === named)\n    : ofType.length === 1\n      ? ofType[0]\n      : undefined;\n  if (!chosen) {\n    return {\n      ok: false,\n      message: named\n        ? `No side effect with id \"${named}\" in this form.`\n        : `This form has ${ofType.length} ${type} side effects — name one with --side-effect <id>.`,\n      fix:\n        ofType.length === 0\n          ? `Add one first: baker flows add-side-effect <slug> --node <stepId> --type ${type}`\n          : `${type} side effects in this form: ${inventory}`,\n    };\n  }\n  if (chosen.sideEffect.type !== type) {\n    return {\n      ok: false,\n      message: `Side effect \"${named}\" is a ${String(chosen.sideEffect.type)}, not a ${type}.`,\n      fix: `${type} side effects in this form: ${inventory}`,\n    };\n  }\n  chosen.sideEffect.oauthProviderId = sealed.oauthProviderId;\n  chosen.sideEffect.encryptedConfig = sealed.encryptedConfig;\n  return { ok: true, nodeId: String(chosen.node.id), sideEffectId: String(chosen.sideEffect.id) };\n}\n\nfunction isSet(value: unknown): boolean {\n  return typeof value === \"string\" && value.length > 0;\n}\n\n/**\n * Every side effect of `type` that still lacks its account or its config — what\n * `--all` wires. One already wired is left alone, so re-running after a partial\n * setup never repoints a destination someone chose.\n */\nexport function unwiredSideEffects(tree: AnyRecord, type: string): string[] {\n  return collectSideEffects(tree)\n    .filter(({ sideEffect }) => sideEffect.type === type)\n    .filter(\n      ({ sideEffect }) =>\n        (OAUTH_SIDE_EFFECTS.has(type) && !isSet(sideEffect.oauthProviderId)) || !isSet(sideEffect.encryptedConfig),\n    )\n    .map(({ sideEffect }) => String(sideEffect.id));\n}\n\nexport function unwiredHubspotForms(tree: AnyRecord): string[] {\n  return unwiredSideEffects(tree, \"hubspotForm\");\n}\n\n/** Destinations with nothing confidential in them: the agent states them, no card. */\nconst STATED_KINDS = new Set([\"email\", \"httpWebhook\"]);\n\n/** The stated kind an `--email` / `--subject` / `--url` call is about. */\nfunction statedKind(args: AnyRecord): string | undefined {\n  if (typeof args.email === \"string\" || typeof args.subject === \"string\") return \"email\";\n  if (typeof args.url === \"string\") return \"httpWebhook\";\n  return undefined;\n}\n\ntype SealPlan = { ok: true; request: FlowsSealRequest } | { ok: false; message: string; fix: string };\n\n/** What `--email/--subject` or `--url` say, as the request the backend seals — or why not. */\nexport function sealRequestFor(kind: string, args: AnyRecord): SealPlan {\n  const text = (key: string) => (typeof args[key] === \"string\" && args[key].trim() ? args[key].trim() : undefined);\n  if (kind === \"email\") {\n    const email = text(\"email\");\n    const subject = text(\"subject\");\n    if (!email || !subject) {\n      return {\n        ok: false,\n        message: \"An email destination needs both who receives it and its subject.\",\n        fix: 'Pass --email \"a@x.com, b@x.com\" --subject \"New lead — <Form name>\". Write the subject yourself from the Form; ask the user only for an address you were not given.',\n      };\n    }\n    return { ok: true, request: { type: \"email\", email, subject } };\n  }\n  if (kind === \"httpWebhook\") {\n    const apiUrl = text(\"url\");\n    if (!apiUrl) {\n      return { ok: false, message: \"A webhook destination needs its address.\", fix: \"Pass --url https://…\" };\n    }\n    return { ok: true, request: { type: \"httpWebhook\", apiUrl } };\n  }\n  return {\n    ok: false,\n    message: `A ${kind} destination holds a credential, so it is not one you can state.`,\n    fix: \"Its token or URL is the user's to enter: request_flow_input.\",\n  };\n}\n\n/** Write sealed settings onto a destination that has no account (email, webhook). Mutates `tree`. */\nexport function attachSettings(tree: AnyRecord, id: string, encryptedConfig: string, type: string): Attached {\n  const chosen = collectSideEffects(tree).find((entry) => entry.sideEffect.id === id);\n  if (!chosen || chosen.sideEffect.type !== type) {\n    const ofType = collectSideEffects(tree).filter((entry) => entry.sideEffect.type === type);\n    return {\n      ok: false,\n      message: chosen\n        ? `Side effect \"${id}\" is a ${String(chosen.sideEffect.type)}, not a ${type}.`\n        : `No side effect with id \"${id}\" in this form.`,\n      fix: `${type} side effects in this form: ${ofType.map((entry) => String(entry.sideEffect.id)).join(\", \") || \"none\"}`,\n    };\n  }\n  chosen.sideEffect.encryptedConfig = encryptedConfig;\n  return { ok: true, nodeId: String(chosen.node.id), sideEffectId: id };\n}\n\nfunction stepType(node: AnyRecord | undefined): string | undefined {\n  const type = (node?.nodeData as AnyRecord | undefined)?.type;\n  return typeof type === \"string\" ? type : undefined;\n}\n\nfunction findStep(tree: AnyRecord, nodeId: string): AnyRecord | undefined {\n  return walkNodes(tree).find((node) => node.id === nodeId);\n}\n\n/** Write a picked resource into a step's `form.external`, keeping what the step autofills. */\nexport function attachStep(tree: AnyRecord, nodeId: string, external: AnyRecord): Stepped {\n  const node = findStep(tree, nodeId);\n  const type = stepType(node);\n  if (!node || !type) {\n    return {\n      ok: false,\n      message: `No step with id \"${nodeId}\" in this form.`,\n      fix: \"Step ids: baker flows show <slug>\",\n    };\n  }\n  if (!STEP_KINDS.has(type)) {\n    return {\n      ok: false,\n      message: `Step \"${nodeId}\" is a ${type}, which embeds nothing from another platform.`,\n      fix: \"Only calendly, savvycal, highlevel, highlevelForm, hubspot and hubspotMeeting steps take a resource.\",\n    };\n  }\n  const nodeData = node.nodeData as AnyRecord;\n  const form = (nodeData.form as AnyRecord | undefined) ?? {};\n  nodeData.form = { autofilledFields: {}, ...form, external };\n  return { ok: true, nodeId, type };\n}\n\n/** Steps of `type` with nothing picked yet — what `--all` fills for a step kind. */\nexport function unpickedSteps(tree: AnyRecord, type: string): string[] {\n  return walkNodes(tree)\n    .filter((node) => stepType(node) === type)\n    .filter((node) => ((node.nodeData as AnyRecord).form as AnyRecord | undefined)?.external == null)\n    .map((node) => String(node.id));\n}\n\n/**\n * Give `targetId` exactly the destination (or picked resource) `sourceId`\n * already has in another Form. Only between the same type: a sheet's sealed\n * config means nothing to Pipedrive.\n */\nexport function copyDestination(source: AnyRecord, sourceId: string, target: AnyRecord, targetId: string): Stepped {\n  const from = collectSideEffects(source).find((entry) => entry.sideEffect.id === sourceId);\n  if (from) {\n    const type = String(from.sideEffect.type);\n    if (!isSet(from.sideEffect.oauthProviderId) || !isSet(from.sideEffect.encryptedConfig)) {\n      return {\n        ok: false,\n        message: `\"${sourceId}\" is not wired itself — nothing to copy.`,\n        fix: \"Copy from one that is.\",\n      };\n    }\n    const attached = attachDestination(\n      target,\n      targetId,\n      {\n        oauthProviderId: String(from.sideEffect.oauthProviderId),\n        encryptedConfig: String(from.sideEffect.encryptedConfig),\n      },\n      type,\n    );\n    return attached.ok ? { ok: true, nodeId: attached.nodeId, type } : attached;\n  }\n  const step = findStep(source, sourceId);\n  const external = ((step?.nodeData as AnyRecord | undefined)?.form as AnyRecord | undefined)?.external;\n  if (!step || external == null || typeof external !== \"object\") {\n    return {\n      ok: false,\n      message: `No wired side effect or picked step \"${sourceId}\" in the source form.`,\n      fix: \"Ids: baker flows show <slug>\",\n    };\n  }\n  const targetType = stepType(findStep(target, targetId));\n  if (targetType !== stepType(step)) {\n    return {\n      ok: false,\n      message: `\"${sourceId}\" is a ${String(stepType(step))} and \"${targetId}\" a ${String(targetType)} — copy only between the same type.`,\n      fix: \"Pick a source of the same type.\",\n    };\n  }\n  return attachStep(target, targetId, structuredClone(external as AnyRecord));\n}\n\nfunction refuse(\n  message: string,\n  fix: string | { action: string; explanation: string },\n  code = \"VALIDATION_ERROR\",\n): never {\n  writeJson({ ok: false, error: { code, message, fix } });\n  process.exit(1);\n}\n\ntype Target = { kind: string; on: \"node\" | \"sideEffect\"; ids: string[] };\n\nfunction allTargets(tree: AnyRecord, kind: string | undefined): Target {\n  if (!kind) refuse(\"--all needs --type <kind> to know what to wire.\", \"e.g. --all --type googleSpreadsheet\");\n  const on = STEP_KINDS.has(kind) ? \"node\" : \"sideEffect\";\n  // A stated destination is restated whole (\"every lead to Vicente and Fran\"), set or not.\n  const ids = STATED_KINDS.has(kind)\n    ? collectSideEffects(tree)\n        .filter(({ sideEffect }) => sideEffect.type === kind)\n        .map(({ sideEffect }) => String(sideEffect.id))\n    : on === \"node\"\n      ? unpickedSteps(tree, kind)\n      : unwiredSideEffects(tree, kind);\n  if (ids.length === 0 && STATED_KINDS.has(kind)) {\n    refuse(\n      `This Form has no ${kind} destination.`,\n      `Add one: baker flows add-side-effect <slug> --node <stepId> --type ${kind}`,\n    );\n  }\n  if (ids.length === 0) {\n    refuse(\n      `Every ${kind} in this Form is already wired.`,\n      \"Repoint one by naming it with --node / --side-effect instead of --all.\",\n    );\n  }\n  return { kind, on, ids };\n}\n\nfunction onlyOfType(tree: AnyRecord, type: string): string {\n  const probe = attachDestination(tree, undefined, { oauthProviderId: \"\", encryptedConfig: \"\" }, type);\n  if (!probe.ok) refuse(probe.message, probe.fix);\n  return probe.sideEffectId;\n}\n\nfunction stepTarget(tree: AnyRecord, node: string): Target {\n  const type = stepType(findStep(tree, node));\n  if (!type) refuse(`No step with id \"${node}\" in this form.`, \"Step ids: baker flows show <slug>\");\n  return { kind: type, on: \"node\", ids: [node] };\n}\n\nfunction sideEffectTarget(tree: AnyRecord, named: string): Target {\n  const found = collectSideEffects(tree).find((entry) => entry.sideEffect.id === named);\n  if (!found) refuse(`No side effect with id \"${named}\" in this form.`, \"Side-effect ids: baker flows show <slug>\");\n  return { kind: String(found.sideEffect.type), on: \"sideEffect\", ids: [named] };\n}\n\n/** Which steps or side effects this call fills, resolved before any platform is asked anything. */\nexport function targetsFor(tree: AnyRecord, args: AnyRecord): Target {\n  const node = typeof args.node === \"string\" ? args.node : undefined;\n  const named = typeof args[\"side-effect\"] === \"string\" ? args[\"side-effect\"] : undefined;\n  if ([node, named, args.all === true ? \"all\" : undefined].filter(Boolean).length > 1) {\n    refuse(\"Pass one of --node, --side-effect or --all.\", \"One target per call; --all for every unwired one.\");\n  }\n  if (args.all === true) {\n    const kind = typeof args.type === \"string\" ? args.type : args[\"hubspot-form\"] ? \"hubspotForm\" : statedKind(args);\n    return allTargets(tree, kind);\n  }\n  if (node) return stepTarget(tree, node);\n  if (named) return sideEffectTarget(tree, named);\n  if (args[\"hubspot-form\"]) return { kind: \"hubspotForm\", on: \"sideEffect\", ids: [onlyOfType(tree, \"hubspotForm\")] };\n  const stated = statedKind(args);\n  if (stated) return { kind: stated, on: \"sideEffect\", ids: [onlyOfType(tree, stated)] };\n  return refuse(\n    \"Name what to fill: --node <stepId>, --side-effect <id>, or --all --type <kind>.\",\n    \"Ids: baker flows show <slug>\",\n  );\n}\n\nasync function sealHubspotForm(formId: string): Promise<HubspotFormsDestinationResponse[\"data\"]> {\n  try {\n    return (await apiPost<HubspotFormsDestinationResponse>(\"/api/hubspot/forms/destination\", { formId })).data;\n  } catch (err) {\n    const refusal = err instanceof ApiError ? hubspotRefusal(err.code, err.message) : null;\n    if (err instanceof ApiError && refusal !== null) refuse(err.message, refusal.fix, refusal.code);\n    failApi(err);\n  }\n}\n\nfunction isAgentKind(kind: string): kind is FlowAgentDestinationKind {\n  return (FLOW_AGENT_DESTINATION_KINDS as readonly string[]).includes(kind);\n}\n\n/**\n * The refusals only the user can clear, as the call that clears them: nothing\n * connected is the connect card; two accounts is a question only when the\n * agent cannot tell which one the user means.\n */\nexport function destinationRefusal(\n  kind: FlowAgentDestinationKind,\n  err: ApiError,\n): { code: string; fix: string } | null {\n  if (err.code === \"NOT_FOUND\" && err.message.includes(\"is connected to this company\")) {\n    return {\n      code: \"NOT_CONNECTED\",\n      fix: `AGENT INSTRUCTION: only the user can connect it. Call request_connection with { platform: \"${FLOW_PROVIDER_TYPE[kind]}\", reason } — reason in their words — then run this again. Keep going with the rest of the task meanwhile.`,\n    };\n  }\n  if (err.code === \"CONFLICT\" && err.message.includes(\"--account\")) {\n    return {\n      code: \"SEVERAL_ACCOUNTS\",\n      fix: \"Pass --account <id> when the user or the brief makes clear which one; otherwise ask them which (AskUserQuestion), naming the accounts above.\",\n    };\n  }\n  return null;\n}\n\nfunction resolveBody(kind: FlowAgentDestinationKind, args: AnyRecord): AnyRecord {\n  const columns =\n    typeof args.columns === \"string\"\n      ? args.columns\n          .split(\",\")\n          .map((column) => column.trim())\n          .filter(Boolean)\n      : undefined;\n  return {\n    kind,\n    ...(typeof args.account === \"string\" ? { account: args.account } : {}),\n    ...(typeof args.resource === \"string\" ? { resourceId: args.resource } : {}),\n    ...(typeof args.tab === \"string\" ? { tab: args.tab } : {}),\n    ...(typeof args[\"new-sheet\"] === \"string\" ? { newSheet: { title: args[\"new-sheet\"], columns } } : {}),\n  };\n}\n\nasync function resolveDestination(\n  kind: FlowAgentDestinationKind,\n  args: AnyRecord,\n): Promise<FlowsResolveResponse[\"data\"]> {\n  try {\n    return (await apiPost<FlowsResolveResponse>(\"/api/flows/destinations/resolve\", resolveBody(kind, args))).data;\n  } catch (err) {\n    const refusal = err instanceof ApiError ? destinationRefusal(kind, err) : null;\n    if (err instanceof ApiError && refusal !== null) refuse(err.message, refusal.fix, refusal.code);\n    failApi(err);\n  }\n}\n\ntype Wired = { wired: { nodeId: string; sideEffectId?: string }[]; destination: unknown; hints: string[] };\n\nfunction applyAll(target: Target, apply: (id: string) => Stepped | Attached): Wired[\"wired\"] {\n  return target.ids.map((id) => {\n    const done = apply(id);\n    if (!done.ok) refuse(done.message, done.fix);\n    return \"sideEffectId\" in done ? { nodeId: done.nodeId, sideEffectId: done.sideEffectId } : { nodeId: done.nodeId };\n  });\n}\n\nfunction sameAs(tree: AnyRecord, target: Target, ref: string): Wired {\n  const [slug, id] = ref.split(\":\");\n  if (!slug || !id) refuse(`--same-as takes <slug>:<id>, got \"${ref}\".`, \"e.g. --same-as madrid:se-gsheet-1\");\n  const source = readFlowTree(slug);\n  const wired = applyAll(target, (targetId) => copyDestination(source, id, tree, targetId));\n  return { wired, destination: { sameAs: ref }, hints: [] };\n}\n\nasync function fromHubspot(tree: AnyRecord, target: Target, formId: string, slug: string): Promise<Wired> {\n  if (target.kind !== \"hubspotForm\") {\n    refuse(\n      `--hubspot-form wires a hubspotForm side effect, not a ${target.kind}.`,\n      \"A HubSpot step takes `baker hubspot forms view <id> --as-node` (or `meetings view <slug> --as-node`).\",\n    );\n  }\n  const sealed = await sealHubspotForm(formId);\n  const wired = applyAll(target, (id) => attachDestination(tree, id, sealed));\n  return {\n    wired,\n    destination: { formGuid: sealed.formGuid, formName: sealed.formName, portalId: sealed.portalId },\n    hints: [\n      `Now map each step's answers onto it: baker flows map ${slug} --side-effect <id> --hubspot-form ${sealed.formGuid} --map email=<value> … --write. Field names come from \\`baker hubspot forms view ${sealed.formGuid}\\`.`,\n    ],\n  };\n}\n\nfunction sheetHints(slug: string, data: Extract<FlowsResolveResponse[\"data\"], { target: \"sideEffect\" }>): string[] {\n  const sheet = data.destination;\n  if (!sheet)\n    return [`Now map the fields: baker flows map ${slug} --side-effect <id> --map <fieldKey>=<value> … --write.`];\n  const columns = sheet.columns.map((column) => `${column.letter}=${column.header}`).join(\", \");\n  return [\n    ...(sheet.created\n      ? [\n          `Created \"${sheet.name}\" in the connected Google account${sheet.url ? ` (${sheet.url})` : \"\"} — tell the user where their leads will land.`,\n        ]\n      : []),\n    columns\n      ? `Columns: ${columns}. Map by letter: baker flows map ${slug} --side-effect <id> --map A=<value> … --write.`\n      : `The \"${sheet.tab}\" tab has no header row. Map by letter anyway, and say which column holds what.`,\n  ];\n}\n\nasync function fromStated(tree: AnyRecord, target: Target, args: AnyRecord): Promise<Wired> {\n  const plan = sealRequestFor(target.kind, args);\n  if (!plan.ok) refuse(plan.message, plan.fix);\n  let sealed: FlowsSealResponse[\"data\"];\n  try {\n    sealed = (await apiPost<FlowsSealResponse>(\"/api/flows/destinations/seal\", plan.request)).data;\n  } catch (err) {\n    failApi(err);\n  }\n  const wired = applyAll(target, (id) => attachSettings(tree, id, sealed.encryptedConfig, target.kind));\n  return {\n    wired,\n    destination: sealed.settings,\n    hints: [\n      target.kind === \"email\"\n        ? `Leads from these steps now go to ${String(sealed.settings.email)} with the subject \"${String(sealed.settings.subject)}\". Tell the user in those words.`\n        : `Submissions now go to ${String(sealed.settings.apiUrl)}.`,\n    ],\n  };\n}\n\nasync function fromPlatform(tree: AnyRecord, target: Target, args: AnyRecord, slug: string): Promise<Wired> {\n  const kind = target.kind;\n  if (!isAgentKind(kind)) {\n    const hubspotStep = kind === \"hubspot\" || kind === \"hubspotMeeting\";\n    refuse(\n      `A ${kind} ${target.on === \"node\" ? \"step\" : \"side effect\"} is not something this command can fill from a platform.`,\n      hubspotStep\n        ? \"Write the blob from `baker hubspot forms view <id> --as-node` (or `meetings view <slug> --as-node`) into the step's form.external.\"\n        : OAUTH_SIDE_EFFECTS.has(kind)\n          ? \"Pass --hubspot-form <formId>.\"\n          : \"It takes typed credentials only the user has: request_flow_input.\",\n    );\n  }\n  const data = await resolveDestination(kind, args);\n  if (data.target === \"node\") {\n    const wired = applyAll(target, (id) => attachStep(tree, id, data.external));\n    return {\n      wired,\n      destination: { name: data.name, account: data.account },\n      hints: [`Picked \"${data.name}\". Autofill its fields from earlier answers in the step's form.autofilledFields.`],\n    };\n  }\n  const sealed = { oauthProviderId: data.oauthProviderId, encryptedConfig: data.encryptedConfig };\n  const wired = applyAll(target, (id) => attachDestination(tree, id, sealed, kind));\n  return {\n    wired,\n    destination: data.destination ? { ...data.destination, account: data.account } : { account: data.account },\n    hints: sheetHints(slug, data),\n  };\n}\n\nregisterSchema({\n  command: \"flows.connect\",\n  description:\n    'Fill a Form\\'s step or destination yourself — no card for the user. Steps: Calendly, SavvyCal, GoHighLevel calendar/form (`--node <id> --resource <id>`). Destinations: HubSpot form (`--hubspot-form <id>`), Google Sheets (`--resource <spreadsheetId>` or `--new-sheet <title> --columns …`), Pipedrive and GoHighLevel contact (no resource: the connected account is the destination), email (`--email \"a@x.com, b@x.com\" --subject \"New lead — <Form>\"`, never a card), webhook without a credential (`--url`). `--same-as <slug>:<id>` copies what another Form already has. `--all --type <kind>` fills every unwired one of that kind at once. Ids come from `baker flows options <kind>`. Fall back to request_flow_input only when nothing is connected, the sheet was never chosen, or several resources plausibly match.',\n  args: {\n    slug: { type: \"positional\", description: \"Form slug\", required: true },\n    node: {\n      type: \"string\",\n      description: \"Step id to fill (calendly, savvycal, highlevel, highlevelForm)\",\n      required: false,\n    },\n    \"side-effect\": { type: \"string\", description: \"Side-effect id to wire\", required: false },\n    all: { type: \"boolean\", description: \"Every unwired one of --type in this Form\", required: false, default: false },\n    type: { type: \"string\", description: \"The kind --all wires (e.g. googleSpreadsheet, calendly)\", required: false },\n    resource: { type: \"string\", description: \"Option id from `baker flows options <kind>`\", required: false },\n    \"hubspot-form\": {\n      type: \"string\",\n      description: \"HubSpot form id (from `baker hubspot forms list`)\",\n      required: false,\n    },\n    \"new-sheet\": {\n      type: \"string\",\n      description: \"Create a Google spreadsheet with this title and wire it\",\n      required: false,\n    },\n    columns: {\n      type: \"string\",\n      description: \"With --new-sheet: header row, comma-separated, from column A\",\n      required: false,\n    },\n    tab: { type: \"string\", description: \"Google Sheets tab to append to (default: the first)\", required: false },\n    \"same-as\": {\n      type: \"string\",\n      description: \"<slug>:<id> — copy another Form's wired destination or picked step\",\n      required: false,\n    },\n    account: {\n      type: \"string\",\n      description: \"Connection id, when more than one account of the platform is connected\",\n      required: false,\n    },\n    email: {\n      type: \"string\",\n      description:\n        'Email destination: who receives each lead, comma-separated for several (--email \"ana@x.com, luis@x.com\"). Never a card: you state it.',\n      required: false,\n    },\n    subject: {\n      type: \"string\",\n      description:\n        'Email destination: the subject line. Write it yourself from the Form (\"New lead — Private events\").',\n      required: false,\n    },\n    url: {\n      type: \"string\",\n      description:\n        \"Webhook destination with no credential: its https address. One that needs a token goes to request_flow_input.\",\n      required: false,\n    },\n  },\n});\n\nexport const connectCommand = defineCommand({\n  meta: {\n    name: \"connect\",\n    description:\n      'Fill a step or destination yourself. Start here: baker flows options calendly, then baker flows connect contact --node book --resource <id>. Email: --side-effect se-email-1 --email \"ana@x.com, luis@x.com\" --subject \"New lead — Contact\". Sheets: --side-effect se-gsheet-1 --new-sheet \"Leads\" --columns \"Name,Email\". Same as another Form: --same-as madrid:se-gsheet-1',\n  },\n  args: {\n    slug: { type: \"positional\", description: \"Form slug\", required: true },\n    node: { type: \"string\", description: \"Step id to fill\" },\n    \"side-effect\": { type: \"string\", description: \"Side-effect id to wire\" },\n    all: { type: \"boolean\", description: \"Every unwired one of --type\" },\n    type: { type: \"string\", description: \"The kind --all wires\" },\n    resource: { type: \"string\", description: \"Option id from baker flows options <kind>\" },\n    \"hubspot-form\": { type: \"string\", description: \"HubSpot form id (from baker hubspot forms list)\" },\n    \"new-sheet\": { type: \"string\", description: \"Create a spreadsheet with this title\" },\n    columns: { type: \"string\", description: \"Header row for --new-sheet, comma-separated\" },\n    tab: { type: \"string\", description: \"Sheet tab (default: the first)\" },\n    \"same-as\": { type: \"string\", description: \"<slug>:<id> to copy\" },\n    account: { type: \"string\", description: \"Connection id when several are connected\" },\n    email: { type: \"string\", description: \"Email destination: recipients, comma-separated\" },\n    subject: { type: \"string\", description: \"Email destination: subject line\" },\n    url: { type: \"string\", description: \"Webhook destination with no credential: its address\" },\n  },\n  run: async ({ args }) => {\n    const slug = String(args.slug);\n    const target = targetsFor(readFlowTree(slug), args);\n\n    const tree = readFlowTree(slug);\n    const result =\n      typeof args[\"same-as\"] === \"string\"\n        ? sameAs(tree, target, args[\"same-as\"])\n        : typeof args[\"hubspot-form\"] === \"string\"\n          ? await fromHubspot(tree, target, args[\"hubspot-form\"], slug)\n          : STATED_KINDS.has(target.kind)\n            ? await fromStated(tree, target, args)\n            : await fromPlatform(tree, target, args, slug);\n    writeFlowTree(slug, tree);\n\n    writeJson({\n      ok: true,\n      data: {\n        slug,\n        kind: target.kind,\n        [target.on === \"node\" ? \"steps\" : \"sideEffects\"]: result.wired,\n        destination: result.destination,\n        connected: true,\n      },\n      hints: [...result.hints, \"Staged like any other edit in this chat: it goes live when the chat is published.\"],\n    });\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AA6BA,SAAS,qBAAqB;AAgB9B,IAAM,aAAa,oBAAI,IAAI,CAAC,YAAY,YAAY,aAAa,iBAAiB,WAAW,gBAAgB,CAAC;AAC9G,IAAM,qBAAqB,oBAAI,IAAI,CAAC,eAAe,qBAAqB,aAAa,oBAAoB,CAAC;AAMnG,SAAS,kBACd,MACA,OACA,QACA,OAAO,eACG;AACV,QAAM,SAAS,mBAAmB,IAAI,EAAE,OAAO,CAAC,UAAU,MAAM,WAAW,SAAS,IAAI;AACxF,QAAM,YAAY,OAAO,IAAI,CAAC,UAAU,OAAO,MAAM,WAAW,EAAE,CAAC,EAAE,KAAK,IAAI,KAAK;AACnF,QAAM,SAAS,QACX,mBAAmB,IAAI,EAAE,KAAK,CAAC,UAAU,MAAM,WAAW,OAAO,KAAK,IACtE,OAAO,WAAW,IAChB,OAAO,CAAC,IACR;AACN,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,SAAS,QACL,2BAA2B,KAAK,oBAChC,iBAAiB,OAAO,MAAM,IAAI,IAAI;AAAA,MAC1C,KACE,OAAO,WAAW,IACd,4EAA4E,IAAI,KAChF,GAAG,IAAI,+BAA+B,SAAS;AAAA,IACvD;AAAA,EACF;AACA,MAAI,OAAO,WAAW,SAAS,MAAM;AACnC,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,SAAS,gBAAgB,KAAK,UAAU,OAAO,OAAO,WAAW,IAAI,CAAC,WAAW,IAAI;AAAA,MACrF,KAAK,GAAG,IAAI,+BAA+B,SAAS;AAAA,IACtD;AAAA,EACF;AACA,SAAO,WAAW,kBAAkB,OAAO;AAC3C,SAAO,WAAW,kBAAkB,OAAO;AAC3C,SAAO,EAAE,IAAI,MAAM,QAAQ,OAAO,OAAO,KAAK,EAAE,GAAG,cAAc,OAAO,OAAO,WAAW,EAAE,EAAE;AAChG;AAEA,SAAS,MAAM,OAAyB;AACtC,SAAO,OAAO,UAAU,YAAY,MAAM,SAAS;AACrD;AAOO,SAAS,mBAAmB,MAAiB,MAAwB;AAC1E,SAAO,mBAAmB,IAAI,EAC3B,OAAO,CAAC,EAAE,WAAW,MAAM,WAAW,SAAS,IAAI,EACnD;AAAA,IACC,CAAC,EAAE,WAAW,MACX,mBAAmB,IAAI,IAAI,KAAK,CAAC,MAAM,WAAW,eAAe,KAAM,CAAC,MAAM,WAAW,eAAe;AAAA,EAC7G,EACC,IAAI,CAAC,EAAE,WAAW,MAAM,OAAO,WAAW,EAAE,CAAC;AAClD;AAEO,SAAS,oBAAoB,MAA2B;AAC7D,SAAO,mBAAmB,MAAM,aAAa;AAC/C;AAGA,IAAM,eAAe,oBAAI,IAAI,CAAC,SAAS,aAAa,CAAC;AAGrD,SAAS,WAAW,MAAqC;AACvD,MAAI,OAAO,KAAK,UAAU,YAAY,OAAO,KAAK,YAAY,SAAU,QAAO;AAC/E,MAAI,OAAO,KAAK,QAAQ,SAAU,QAAO;AACzC,SAAO;AACT;AAKO,SAAS,eAAe,MAAc,MAA2B;AACtE,QAAM,OAAO,CAAC,QAAiB,OAAO,KAAK,GAAG,MAAM,YAAY,KAAK,GAAG,EAAE,KAAK,IAAI,KAAK,GAAG,EAAE,KAAK,IAAI;AACtG,MAAI,SAAS,SAAS;AACpB,UAAM,QAAQ,KAAK,OAAO;AAC1B,UAAM,UAAU,KAAK,SAAS;AAC9B,QAAI,CAAC,SAAS,CAAC,SAAS;AACtB,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,SAAS;AAAA,QACT,KAAK;AAAA,MACP;AAAA,IACF;AACA,WAAO,EAAE,IAAI,MAAM,SAAS,EAAE,MAAM,SAAS,OAAO,QAAQ,EAAE;AAAA,EAChE;AACA,MAAI,SAAS,eAAe;AAC1B,UAAM,SAAS,KAAK,KAAK;AACzB,QAAI,CAAC,QAAQ;AACX,aAAO,EAAE,IAAI,OAAO,SAAS,4CAA4C,KAAK,4BAAuB;AAAA,IACvG;AACA,WAAO,EAAE,IAAI,MAAM,SAAS,EAAE,MAAM,eAAe,OAAO,EAAE;AAAA,EAC9D;AACA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,SAAS,KAAK,IAAI;AAAA,IAClB,KAAK;AAAA,EACP;AACF;AAGO,SAAS,eAAe,MAAiB,IAAY,iBAAyB,MAAwB;AAC3G,QAAM,SAAS,mBAAmB,IAAI,EAAE,KAAK,CAAC,UAAU,MAAM,WAAW,OAAO,EAAE;AAClF,MAAI,CAAC,UAAU,OAAO,WAAW,SAAS,MAAM;AAC9C,UAAM,SAAS,mBAAmB,IAAI,EAAE,OAAO,CAAC,UAAU,MAAM,WAAW,SAAS,IAAI;AACxF,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,SAAS,SACL,gBAAgB,EAAE,UAAU,OAAO,OAAO,WAAW,IAAI,CAAC,WAAW,IAAI,MACzE,2BAA2B,EAAE;AAAA,MACjC,KAAK,GAAG,IAAI,+BAA+B,OAAO,IAAI,CAAC,UAAU,OAAO,MAAM,WAAW,EAAE,CAAC,EAAE,KAAK,IAAI,KAAK,MAAM;AAAA,IACpH;AAAA,EACF;AACA,SAAO,WAAW,kBAAkB;AACpC,SAAO,EAAE,IAAI,MAAM,QAAQ,OAAO,OAAO,KAAK,EAAE,GAAG,cAAc,GAAG;AACtE;AAEA,SAAS,SAAS,MAAiD;AACjE,QAAM,OAAQ,MAAM,UAAoC;AACxD,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;AAEA,SAAS,SAAS,MAAiB,QAAuC;AACxE,SAAO,UAAU,IAAI,EAAE,KAAK,CAAC,SAAS,KAAK,OAAO,MAAM;AAC1D;AAGO,SAAS,WAAW,MAAiB,QAAgB,UAA8B;AACxF,QAAM,OAAO,SAAS,MAAM,MAAM;AAClC,QAAM,OAAO,SAAS,IAAI;AAC1B,MAAI,CAAC,QAAQ,CAAC,MAAM;AAClB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,SAAS,oBAAoB,MAAM;AAAA,MACnC,KAAK;AAAA,IACP;AAAA,EACF;AACA,MAAI,CAAC,WAAW,IAAI,IAAI,GAAG;AACzB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,SAAS,SAAS,MAAM,UAAU,IAAI;AAAA,MACtC,KAAK;AAAA,IACP;AAAA,EACF;AACA,QAAM,WAAW,KAAK;AACtB,QAAM,OAAQ,SAAS,QAAkC,CAAC;AAC1D,WAAS,OAAO,EAAE,kBAAkB,CAAC,GAAG,GAAG,MAAM,SAAS;AAC1D,SAAO,EAAE,IAAI,MAAM,QAAQ,KAAK;AAClC;AAGO,SAAS,cAAc,MAAiB,MAAwB;AACrE,SAAO,UAAU,IAAI,EAClB,OAAO,CAAC,SAAS,SAAS,IAAI,MAAM,IAAI,EACxC,OAAO,CAAC,SAAW,KAAK,SAAuB,MAAgC,YAAY,IAAI,EAC/F,IAAI,CAAC,SAAS,OAAO,KAAK,EAAE,CAAC;AAClC;AAOO,SAAS,gBAAgB,QAAmB,UAAkB,QAAmB,UAA2B;AACjH,QAAM,OAAO,mBAAmB,MAAM,EAAE,KAAK,CAAC,UAAU,MAAM,WAAW,OAAO,QAAQ;AACxF,MAAI,MAAM;AACR,UAAM,OAAO,OAAO,KAAK,WAAW,IAAI;AACxC,QAAI,CAAC,MAAM,KAAK,WAAW,eAAe,KAAK,CAAC,MAAM,KAAK,WAAW,eAAe,GAAG;AACtF,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,SAAS,IAAI,QAAQ;AAAA,QACrB,KAAK;AAAA,MACP;AAAA,IACF;AACA,UAAM,WAAW;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,QACE,iBAAiB,OAAO,KAAK,WAAW,eAAe;AAAA,QACvD,iBAAiB,OAAO,KAAK,WAAW,eAAe;AAAA,MACzD;AAAA,MACA;AAAA,IACF;AACA,WAAO,SAAS,KAAK,EAAE,IAAI,MAAM,QAAQ,SAAS,QAAQ,KAAK,IAAI;AAAA,EACrE;AACA,QAAM,OAAO,SAAS,QAAQ,QAAQ;AACtC,QAAM,WAAa,MAAM,UAAoC,MAAgC;AAC7F,MAAI,CAAC,QAAQ,YAAY,QAAQ,OAAO,aAAa,UAAU;AAC7D,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,SAAS,wCAAwC,QAAQ;AAAA,MACzD,KAAK;AAAA,IACP;AAAA,EACF;AACA,QAAM,aAAa,SAAS,SAAS,QAAQ,QAAQ,CAAC;AACtD,MAAI,eAAe,SAAS,IAAI,GAAG;AACjC,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,SAAS,IAAI,QAAQ,UAAU,OAAO,SAAS,IAAI,CAAC,CAAC,SAAS,QAAQ,OAAO,OAAO,UAAU,CAAC;AAAA,MAC/F,KAAK;AAAA,IACP;AAAA,EACF;AACA,SAAO,WAAW,QAAQ,UAAU,gBAAgB,QAAqB,CAAC;AAC5E;AAEA,SAAS,OACP,SACA,KACA,OAAO,oBACA;AACP,YAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,SAAS,IAAI,EAAE,CAAC;AACtD,UAAQ,KAAK,CAAC;AAChB;AAIA,SAAS,WAAW,MAAiB,MAAkC;AACrE,MAAI,CAAC,KAAM,QAAO,mDAAmD,qCAAqC;AAC1G,QAAM,KAAK,WAAW,IAAI,IAAI,IAAI,SAAS;AAE3C,QAAM,MAAM,aAAa,IAAI,IAAI,IAC7B,mBAAmB,IAAI,EACpB,OAAO,CAAC,EAAE,WAAW,MAAM,WAAW,SAAS,IAAI,EACnD,IAAI,CAAC,EAAE,WAAW,MAAM,OAAO,WAAW,EAAE,CAAC,IAChD,OAAO,SACL,cAAc,MAAM,IAAI,IACxB,mBAAmB,MAAM,IAAI;AACnC,MAAI,IAAI,WAAW,KAAK,aAAa,IAAI,IAAI,GAAG;AAC9C;AAAA,MACE,oBAAoB,IAAI;AAAA,MACxB,sEAAsE,IAAI;AAAA,IAC5E;AAAA,EACF;AACA,MAAI,IAAI,WAAW,GAAG;AACpB;AAAA,MACE,SAAS,IAAI;AAAA,MACb;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,MAAM,IAAI,IAAI;AACzB;AAEA,SAAS,WAAW,MAAiB,MAAsB;AACzD,QAAM,QAAQ,kBAAkB,MAAM,QAAW,EAAE,iBAAiB,IAAI,iBAAiB,GAAG,GAAG,IAAI;AACnG,MAAI,CAAC,MAAM,GAAI,QAAO,MAAM,SAAS,MAAM,GAAG;AAC9C,SAAO,MAAM;AACf;AAEA,SAAS,WAAW,MAAiB,MAAsB;AACzD,QAAM,OAAO,SAAS,SAAS,MAAM,IAAI,CAAC;AAC1C,MAAI,CAAC,KAAM,QAAO,oBAAoB,IAAI,mBAAmB,mCAAmC;AAChG,SAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,KAAK,CAAC,IAAI,EAAE;AAC/C;AAEA,SAAS,iBAAiB,MAAiB,OAAuB;AAChE,QAAM,QAAQ,mBAAmB,IAAI,EAAE,KAAK,CAAC,UAAU,MAAM,WAAW,OAAO,KAAK;AACpF,MAAI,CAAC,MAAO,QAAO,2BAA2B,KAAK,mBAAmB,0CAA0C;AAChH,SAAO,EAAE,MAAM,OAAO,MAAM,WAAW,IAAI,GAAG,IAAI,cAAc,KAAK,CAAC,KAAK,EAAE;AAC/E;AAGO,SAAS,WAAW,MAAiB,MAAyB;AACnE,QAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;AACzD,QAAM,QAAQ,OAAO,KAAK,aAAa,MAAM,WAAW,KAAK,aAAa,IAAI;AAC9E,MAAI,CAAC,MAAM,OAAO,KAAK,QAAQ,OAAO,QAAQ,MAAS,EAAE,OAAO,OAAO,EAAE,SAAS,GAAG;AACnF,WAAO,+CAA+C,mDAAmD;AAAA,EAC3G;AACA,MAAI,KAAK,QAAQ,MAAM;AACrB,UAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,KAAK,cAAc,IAAI,gBAAgB,WAAW,IAAI;AAC/G,WAAO,WAAW,MAAM,IAAI;AAAA,EAC9B;AACA,MAAI,KAAM,QAAO,WAAW,MAAM,IAAI;AACtC,MAAI,MAAO,QAAO,iBAAiB,MAAM,KAAK;AAC9C,MAAI,KAAK,cAAc,EAAG,QAAO,EAAE,MAAM,eAAe,IAAI,cAAc,KAAK,CAAC,WAAW,MAAM,aAAa,CAAC,EAAE;AACjH,QAAM,SAAS,WAAW,IAAI;AAC9B,MAAI,OAAQ,QAAO,EAAE,MAAM,QAAQ,IAAI,cAAc,KAAK,CAAC,WAAW,MAAM,MAAM,CAAC,EAAE;AACrF,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,gBAAgB,QAAkE;AAC/F,MAAI;AACF,YAAQ,MAAM,QAAyC,kCAAkC,EAAE,OAAO,CAAC,GAAG;AAAA,EACxG,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,WAAW,eAAe,IAAI,MAAM,IAAI,OAAO,IAAI;AAClF,QAAI,eAAe,YAAY,YAAY,KAAM,QAAO,IAAI,SAAS,QAAQ,KAAK,QAAQ,IAAI;AAC9F,YAAQ,GAAG;AAAA,EACb;AACF;AAEA,SAAS,YAAY,MAAgD;AACnE,SAAQ,6BAAmD,SAAS,IAAI;AAC1E;AAOO,SAAS,mBACd,MACA,KACsC;AACtC,MAAI,IAAI,SAAS,eAAe,IAAI,QAAQ,SAAS,8BAA8B,GAAG;AACpF,WAAO;AAAA,MACL,MAAM;AAAA,MACN,KAAK,8FAA8F,mBAAmB,IAAI,CAAC;AAAA,IAC7H;AAAA,EACF;AACA,MAAI,IAAI,SAAS,cAAc,IAAI,QAAQ,SAAS,WAAW,GAAG;AAChE,WAAO;AAAA,MACL,MAAM;AAAA,MACN,KAAK;AAAA,IACP;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,YAAY,MAAgC,MAA4B;AAC/E,QAAM,UACJ,OAAO,KAAK,YAAY,WACpB,KAAK,QACF,MAAM,GAAG,EACT,IAAI,CAAC,WAAW,OAAO,KAAK,CAAC,EAC7B,OAAO,OAAO,IACjB;AACN,SAAO;AAAA,IACL;AAAA,IACA,GAAI,OAAO,KAAK,YAAY,WAAW,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,IACpE,GAAI,OAAO,KAAK,aAAa,WAAW,EAAE,YAAY,KAAK,SAAS,IAAI,CAAC;AAAA,IACzE,GAAI,OAAO,KAAK,QAAQ,WAAW,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;AAAA,IACxD,GAAI,OAAO,KAAK,WAAW,MAAM,WAAW,EAAE,UAAU,EAAE,OAAO,KAAK,WAAW,GAAG,QAAQ,EAAE,IAAI,CAAC;AAAA,EACrG;AACF;AAEA,eAAe,mBACb,MACA,MACuC;AACvC,MAAI;AACF,YAAQ,MAAM,QAA8B,mCAAmC,YAAY,MAAM,IAAI,CAAC,GAAG;AAAA,EAC3G,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,WAAW,mBAAmB,MAAM,GAAG,IAAI;AAC1E,QAAI,eAAe,YAAY,YAAY,KAAM,QAAO,IAAI,SAAS,QAAQ,KAAK,QAAQ,IAAI;AAC9F,YAAQ,GAAG;AAAA,EACb;AACF;AAIA,SAAS,SAAS,QAAgB,OAA2D;AAC3F,SAAO,OAAO,IAAI,IAAI,CAAC,OAAO;AAC5B,UAAM,OAAO,MAAM,EAAE;AACrB,QAAI,CAAC,KAAK,GAAI,QAAO,KAAK,SAAS,KAAK,GAAG;AAC3C,WAAO,kBAAkB,OAAO,EAAE,QAAQ,KAAK,QAAQ,cAAc,KAAK,aAAa,IAAI,EAAE,QAAQ,KAAK,OAAO;AAAA,EACnH,CAAC;AACH;AAEA,SAAS,OAAO,MAAiB,QAAgB,KAAoB;AACnE,QAAM,CAAC,MAAM,EAAE,IAAI,IAAI,MAAM,GAAG;AAChC,MAAI,CAAC,QAAQ,CAAC,GAAI,QAAO,qCAAqC,GAAG,MAAM,mCAAmC;AAC1G,QAAM,SAAS,aAAa,IAAI;AAChC,QAAM,QAAQ,SAAS,QAAQ,CAAC,aAAa,gBAAgB,QAAQ,IAAI,MAAM,QAAQ,CAAC;AACxF,SAAO,EAAE,OAAO,aAAa,EAAE,QAAQ,IAAI,GAAG,OAAO,CAAC,EAAE;AAC1D;AAEA,eAAe,YAAY,MAAiB,QAAgB,QAAgB,MAA8B;AACxG,MAAI,OAAO,SAAS,eAAe;AACjC;AAAA,MACE,yDAAyD,OAAO,IAAI;AAAA,MACpE;AAAA,IACF;AAAA,EACF;AACA,QAAM,SAAS,MAAM,gBAAgB,MAAM;AAC3C,QAAM,QAAQ,SAAS,QAAQ,CAAC,OAAO,kBAAkB,MAAM,IAAI,MAAM,CAAC;AAC1E,SAAO;AAAA,IACL;AAAA,IACA,aAAa,EAAE,UAAU,OAAO,UAAU,UAAU,OAAO,UAAU,UAAU,OAAO,SAAS;AAAA,IAC/F,OAAO;AAAA,MACL,wDAAwD,IAAI,sCAAsC,OAAO,QAAQ,yFAAoF,OAAO,QAAQ;AAAA,IACtN;AAAA,EACF;AACF;AAEA,SAAS,WAAW,MAAc,MAAiF;AACjH,QAAM,QAAQ,KAAK;AACnB,MAAI,CAAC;AACH,WAAO,CAAC,uCAAuC,IAAI,8DAAyD;AAC9G,QAAM,UAAU,MAAM,QAAQ,IAAI,CAAC,WAAW,GAAG,OAAO,MAAM,IAAI,OAAO,MAAM,EAAE,EAAE,KAAK,IAAI;AAC5F,SAAO;AAAA,IACL,GAAI,MAAM,UACN;AAAA,MACE,YAAY,MAAM,IAAI,oCAAoC,MAAM,MAAM,KAAK,MAAM,GAAG,MAAM,EAAE;AAAA,IAC9F,IACA,CAAC;AAAA,IACL,UACI,YAAY,OAAO,oCAAoC,IAAI,wDAC3D,QAAQ,MAAM,GAAG;AAAA,EACvB;AACF;AAEA,eAAe,WAAW,MAAiB,QAAgB,MAAiC;AAC1F,QAAM,OAAO,eAAe,OAAO,MAAM,IAAI;AAC7C,MAAI,CAAC,KAAK,GAAI,QAAO,KAAK,SAAS,KAAK,GAAG;AAC3C,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,QAA2B,gCAAgC,KAAK,OAAO,GAAG;AAAA,EAC5F,SAAS,KAAK;AACZ,YAAQ,GAAG;AAAA,EACb;AACA,QAAM,QAAQ,SAAS,QAAQ,CAAC,OAAO,eAAe,MAAM,IAAI,OAAO,iBAAiB,OAAO,IAAI,CAAC;AACpG,SAAO;AAAA,IACL;AAAA,IACA,aAAa,OAAO;AAAA,IACpB,OAAO;AAAA,MACL,OAAO,SAAS,UACZ,oCAAoC,OAAO,OAAO,SAAS,KAAK,CAAC,sBAAsB,OAAO,OAAO,SAAS,OAAO,CAAC,qCACtH,yBAAyB,OAAO,OAAO,SAAS,MAAM,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAEA,eAAe,aAAa,MAAiB,QAAgB,MAAiB,MAA8B;AAC1G,QAAM,OAAO,OAAO;AACpB,MAAI,CAAC,YAAY,IAAI,GAAG;AACtB,UAAM,cAAc,SAAS,aAAa,SAAS;AACnD;AAAA,MACE,KAAK,IAAI,IAAI,OAAO,OAAO,SAAS,SAAS,aAAa;AAAA,MAC1D,cACI,uIACA,mBAAmB,IAAI,IAAI,IACzB,kCACA;AAAA,IACR;AAAA,EACF;AACA,QAAM,OAAO,MAAM,mBAAmB,MAAM,IAAI;AAChD,MAAI,KAAK,WAAW,QAAQ;AAC1B,UAAMA,SAAQ,SAAS,QAAQ,CAAC,OAAO,WAAW,MAAM,IAAI,KAAK,QAAQ,CAAC;AAC1E,WAAO;AAAA,MACL,OAAAA;AAAA,MACA,aAAa,EAAE,MAAM,KAAK,MAAM,SAAS,KAAK,QAAQ;AAAA,MACtD,OAAO,CAAC,WAAW,KAAK,IAAI,kFAAkF;AAAA,IAChH;AAAA,EACF;AACA,QAAM,SAAS,EAAE,iBAAiB,KAAK,iBAAiB,iBAAiB,KAAK,gBAAgB;AAC9F,QAAM,QAAQ,SAAS,QAAQ,CAAC,OAAO,kBAAkB,MAAM,IAAI,QAAQ,IAAI,CAAC;AAChF,SAAO;AAAA,IACL;AAAA,IACA,aAAa,KAAK,cAAc,EAAE,GAAG,KAAK,aAAa,SAAS,KAAK,QAAQ,IAAI,EAAE,SAAS,KAAK,QAAQ;AAAA,IACzG,OAAO,WAAW,MAAM,IAAI;AAAA,EAC9B;AACF;AAEA,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AAAA,IACJ,MAAM,EAAE,MAAM,cAAc,aAAa,aAAa,UAAU,KAAK;AAAA,IACrE,MAAM;AAAA,MACJ,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,eAAe,EAAE,MAAM,UAAU,aAAa,0BAA0B,UAAU,MAAM;AAAA,IACxF,KAAK,EAAE,MAAM,WAAW,aAAa,4CAA4C,UAAU,OAAO,SAAS,MAAM;AAAA,IACjH,MAAM,EAAE,MAAM,UAAU,aAAa,2DAA2D,UAAU,MAAM;AAAA,IAChH,UAAU,EAAE,MAAM,UAAU,aAAa,+CAA+C,UAAU,MAAM;AAAA,IACxG,gBAAgB;AAAA,MACd,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,aAAa;AAAA,MACX,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,KAAK,EAAE,MAAM,UAAU,aAAa,uDAAuD,UAAU,MAAM;AAAA,IAC3G,WAAW;AAAA,MACT,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,aACE;AAAA,MACF,UAAU;AAAA,IACZ;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,aACE;AAAA,MACF,UAAU;AAAA,IACZ;AAAA,IACA,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aACE;AAAA,MACF,UAAU;AAAA,IACZ;AAAA,EACF;AACF,CAAC;AAEM,IAAM,iBAAiB,cAAc;AAAA,EAC1C,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aACE;AAAA,EACJ;AAAA,EACA,MAAM;AAAA,IACJ,MAAM,EAAE,MAAM,cAAc,aAAa,aAAa,UAAU,KAAK;AAAA,IACrE,MAAM,EAAE,MAAM,UAAU,aAAa,kBAAkB;AAAA,IACvD,eAAe,EAAE,MAAM,UAAU,aAAa,yBAAyB;AAAA,IACvE,KAAK,EAAE,MAAM,WAAW,aAAa,8BAA8B;AAAA,IACnE,MAAM,EAAE,MAAM,UAAU,aAAa,uBAAuB;AAAA,IAC5D,UAAU,EAAE,MAAM,UAAU,aAAa,4CAA4C;AAAA,IACrF,gBAAgB,EAAE,MAAM,UAAU,aAAa,kDAAkD;AAAA,IACjG,aAAa,EAAE,MAAM,UAAU,aAAa,uCAAuC;AAAA,IACnF,SAAS,EAAE,MAAM,UAAU,aAAa,8CAA8C;AAAA,IACtF,KAAK,EAAE,MAAM,UAAU,aAAa,iCAAiC;AAAA,IACrE,WAAW,EAAE,MAAM,UAAU,aAAa,sBAAsB;AAAA,IAChE,SAAS,EAAE,MAAM,UAAU,aAAa,2CAA2C;AAAA,IACnF,OAAO,EAAE,MAAM,UAAU,aAAa,iDAAiD;AAAA,IACvF,SAAS,EAAE,MAAM,UAAU,aAAa,kCAAkC;AAAA,IAC1E,KAAK,EAAE,MAAM,UAAU,aAAa,sDAAsD;AAAA,EAC5F;AAAA,EACA,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,UAAM,OAAO,OAAO,KAAK,IAAI;AAC7B,UAAM,SAAS,WAAW,aAAa,IAAI,GAAG,IAAI;AAElD,UAAM,OAAO,aAAa,IAAI;AAC9B,UAAM,SACJ,OAAO,KAAK,SAAS,MAAM,WACvB,OAAO,MAAM,QAAQ,KAAK,SAAS,CAAC,IACpC,OAAO,KAAK,cAAc,MAAM,WAC9B,MAAM,YAAY,MAAM,QAAQ,KAAK,cAAc,GAAG,IAAI,IAC1D,aAAa,IAAI,OAAO,IAAI,IAC1B,MAAM,WAAW,MAAM,QAAQ,IAAI,IACnC,MAAM,aAAa,MAAM,QAAQ,MAAM,IAAI;AACrD,kBAAc,MAAM,IAAI;AAExB,cAAU;AAAA,MACR,IAAI;AAAA,MACJ,MAAM;AAAA,QACJ;AAAA,QACA,MAAM,OAAO;AAAA,QACb,CAAC,OAAO,OAAO,SAAS,UAAU,aAAa,GAAG,OAAO;AAAA,QACzD,aAAa,OAAO;AAAA,QACpB,WAAW;AAAA,MACb;AAAA,MACA,OAAO,CAAC,GAAG,OAAO,OAAO,mFAAmF;AAAA,IAC9G,CAAC;AAAA,EACH;AACF,CAAC;","names":["wired"]}

package/dist/chunk-ZJWUBJYQ.js

@@ -1,204 +0,0 @@
-// ../api/src/capabilities/surfaces.ts
-var CAPABILITY_SURFACES = [
-  "google-ads",
-  "meta-ads",
-  "linkedin-ads",
-  "x-ads",
-  "chatgpt-ads",
-  "tag-manager",
-  "ga4",
-  "gsc"
-];
-var CAPABILITY_SURFACE_SPECS = {
-  "google-ads": {
-    id: "google-ads",
-    label: "Google Ads",
-    provider: "google-ads",
-    resourceNoun: "ad account",
-    writePath: "staged-live",
-    writeScopes: ["https://www.googleapis.com/auth/adwords"],
-    commands: "baker ads google"
-  },
-  "meta-ads": {
-    id: "meta-ads",
-    label: "Meta Ads",
-    provider: "meta",
-    resourceNoun: "ad account",
-    writePath: "staged-live",
-    writeScopes: ["ads_management"],
-    commands: "baker ads meta"
-  },
-  "linkedin-ads": {
-    id: "linkedin-ads",
-    label: "LinkedIn Ads",
-    provider: "linkedin",
-    resourceNoun: "ad account",
-    writePath: "staged-live",
-    writeScopes: ["rw_ads"],
-    commands: "baker ads linkedin"
-  },
-  "x-ads": {
-    id: "x-ads",
-    label: "X Ads",
-    provider: "x-ads",
-    resourceNoun: "ad account",
-    writePath: "staged-live",
-    /**
-     * Empty on purpose, and the one surface where that does NOT mean read-only.
-     * X Ads authenticates with OAuth 1.0a, which has no scope strings at all —
-     * write access is granted to the *app* by X's Ads API access review, not
-     * per connection. There is therefore no scope to check, and inventing one
-     * would make `scopeBlockers` refuse every X write for a permission that
-     * does not exist.
-     */
-    writeScopes: [],
-    commands: "baker ads x"
-  },
-  "chatgpt-ads": {
-    id: "chatgpt-ads",
-    label: "ChatGPT Ads",
-    // Connected with the client's own Ads API key (`chatgptAdsConnections`), not an OAuth grant.
-    provider: "chatgpt-ads",
-    resourceNoun: "ad account",
-    writePath: "staged-live",
-    /**
-     * Empty because the pasted key has no scopes: it reaches its one account
-     * whole. When OpenAI approves Baker's OAuth app this becomes
-     * `ads.admin.all.write` and `connectsWith` goes away.
-     */
-    writeScopes: [],
-    commands: "baker ads chatgpt",
-    connectsWith: "api-key"
-  },
-  "tag-manager": {
-    id: "tag-manager",
-    label: "Tag Manager",
-    provider: "google-tag-manager",
-    resourceNoun: "container",
-    writePath: "staged-immediate",
-    writeScopes: [
-      "https://www.googleapis.com/auth/tagmanager.edit.containers",
-      "https://www.googleapis.com/auth/tagmanager.edit.containerversions",
-      "https://www.googleapis.com/auth/tagmanager.publish"
-    ],
-    commands: "baker tag-manager"
-  },
-  ga4: {
-    id: "ga4",
-    label: "Google Analytics 4",
-    provider: "google-analytics",
-    resourceNoun: "property",
-    // Like Tag Manager: staged during the chat, applied for real at publish,
-    // every time. A connection made before writes existed is
-    // read-only until it is reconnected, and `access` does NOT say so — it
-    // reports what the Baker app asks Google for, which is now app-wide
-    // read-write. The per-company signal is `scopeBlockers`, which compares
-    // `writeScopes` against the scopes that connection actually recorded.
-    writePath: "staged-immediate",
-    writeScopes: ["https://www.googleapis.com/auth/analytics.edit"],
-    commands: "baker ga4"
-  },
-  gsc: {
-    id: "gsc",
-    label: "Search Console",
-    provider: "google-search-console",
-    resourceNoun: "site",
-    writePath: "read-only",
-    writeScopes: ["https://www.googleapis.com/auth/webmasters"],
-    commands: "baker gsc"
-  }
-};
-
-// ../api/src/capabilities/index.ts
-import { z } from "zod";
-var capabilitySurfaceSchema = z.enum(CAPABILITY_SURFACES);
-var capabilitiesRequestSchema = z.object({
-  /** Narrow to one surface. Omit for every surface the company could use. */
-  surface: capabilitySurfaceSchema.optional(),
-  /** Include the field-level contract of every op, not just the entity list. */
-  full: z.boolean().optional(),
-  /**
-   * Who the chat acts as (`BAKER_ACTING_USER_ID`). Adds that person's own
-   * connected tools — they load for this turn, and for nobody else's.
-   */
-  actingUserId: z.string().optional()
-});
-var capabilityResourceSchema = z.object({
-  id: z.string(),
-  name: z.string().optional()
-});
-var capabilityOpSchema = z.object({
-  kind: z.string(),
-  /** True when the op changes something that already exists and must be named. */
-  needsTarget: z.boolean(),
-  required: z.array(z.string()),
-  optional: z.array(z.string()),
-  /** Field → the values it accepts, for fields that take a fixed set. */
-  choices: z.record(z.string(), z.array(z.string())),
-  /** False when the platform accepts fields beyond the listed ones. */
-  fieldsAreComplete: z.boolean()
-});
-var capabilityLimitViewSchema = z.object({
-  capability: z.string(),
-  cause: z.enum(["not_built", "provider_forbids", "no_permission"]),
-  detail: z.string()
-});
-var capabilityWriteModeSchema = z.enum(["live", "applies-at-publish", "none"]);
-var capabilitySurfaceReportSchema = z.object({
-  surface: capabilitySurfaceSchema,
-  label: z.string(),
-  connected: z.boolean(),
-  /** What the user picked when connecting. Empty when nothing is selected yet. */
-  resources: z.array(capabilityResourceSchema),
-  access: z.enum(["read-write", "read-only", "not-connected"]),
-  writeMode: capabilityWriteModeSchema,
-  /** One sentence about the write mode, safe to repeat to the user. */
-  writeModeNote: z.string(),
-  /** Entities this surface can change at all, e.g. "campaign", "keyword". */
-  writableEntities: z.array(z.string()),
-  /** Things wrong with the connection itself: needs reconnecting, missing a permission. */
-  blockers: z.array(z.string()),
-  /** What cannot be done here, and why. */
-  limits: z.array(capabilityLimitViewSchema),
-  /** The per-op contract. Present when one surface was asked for, or with `full`. */
-  ops: z.array(capabilityOpSchema).optional(),
-  /** Where to look next: `baker ads google`, `baker ga4`, … */
-  commands: z.string()
-});
-var capabilityToolSchema = z.object({
-  /** `microsoft_clarity`, `hubspot`, or the name the user gave a custom server. */
-  key: z.string(),
-  label: z.string(),
-  /** `mcp` — tools in the agent's own list. `platform` — signed in, read through the CLI. */
-  kind: z.enum(["mcp", "platform"]),
-  /** How to actually reach it, in one phrase the agent can act on. */
-  reach: z.string(),
-  /**
-   * Whether it can be used right now.
-   *
-   * A connection that exists and is expired is worse than one that is absent:
-   * it reads as available and fails at the moment it is needed, which on an
-   * unattended run is a report with a hole in it and no explanation.
-   */
-  ready: z.boolean(),
-  /** Why it is not ready, or what it is for. Absent when neither needs saying. */
-  note: z.string().optional()
-});
-var capabilitiesResponseSchema = z.object({
-  ok: z.literal(true),
-  data: z.object({
-    surfaces: z.array(capabilitySurfaceReportSchema),
-    /**
-     * Everything else this company can reach. Shared connections only —
-     * a teammate's private per-user connection belongs to whoever started the
-     * session and is visible in the agent's own tool list, not here.
-     */
-    tools: z.array(capabilityToolSchema)
-  })
-});
-
-export {
-  CAPABILITY_SURFACES,
-  CAPABILITY_SURFACE_SPECS
-};
-//# sourceMappingURL=chunk-ZJWUBJYQ.js.map

package/dist/chunk-ZJWUBJYQ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../api/src/capabilities/surfaces.ts","../../api/src/capabilities/index.ts"],"sourcesContent":["/**\n * The marketing surfaces Baker can reach, and — the part that exists nowhere\n * else — what it cannot do on each of them.\n *\n * Every other introspection surface (`baker schema <cmd>`, the family docs)\n * describes what the agent CAN do. An agent that needs to know a capability is\n * absent has, until now, only been able to find out by trying: promising a GA4\n * property merge and then discovering the connection is read-only, or probing\n * four spellings of a conversion-action field that does not exist. Both cost a\n * retraction in front of a client.\n *\n * This module is deliberately thin on prose and heavy on `evidence`. A\n * hand-maintained \"cannot do\" list rots the same way the Tag Manager built-in\n * trigger whitelist in this repo rotted down to one entry, so each limit carries\n * a machine-checkable claim about the code that makes it true, and\n * `packages/backend/convex/capabilities/coverage.test.ts` fails when a claim\n * stops holding — when the scope is finally requested, when the op ships, when\n * the guard is renamed away. `asserted` is the escape hatch for the handful of\n * facts that live outside this repo entirely, and it has to say why.\n */\n\nexport const CAPABILITY_SURFACES = [\n  \"google-ads\",\n  \"meta-ads\",\n  \"linkedin-ads\",\n  \"x-ads\",\n  \"chatgpt-ads\",\n  \"tag-manager\",\n  \"ga4\",\n  \"gsc\",\n] as const;\nexport type CapabilitySurfaceId = (typeof CAPABILITY_SURFACES)[number];\n\n/**\n * How a change on this surface reaches the outside world.\n *  - `staged-live`       — staged during the chat and applied against the real\n *                          ad account at publish. The per-company write flags\n *                          that could once make this simulated are retired, so\n *                          a completed chat spends the client's money.\n *  - `staged-immediate`  — staged during the chat and applied at publish for\n *                          real, every time. Tag Manager: completing the chat\n *                          changes the user's production container.\n *  - `read-only`         — nothing here writes.\n *\n * The first two split on consequence, not on certainty: both always apply, but\n * one costs ad spend and the other cuts a container version, and the agent has\n * to tell the user which.\n */\nexport type CapabilityWritePath = \"staged-live\" | \"staged-immediate\" | \"read-only\";\n\nexport interface CapabilitySurfaceSpec {\n  id: CapabilitySurfaceId;\n  /** How the user names it. */\n  label: string;\n  /** The `oauthProviders.type` this surface connects through; `chatgpt-ads` connects with a pasted key instead. */\n  provider: string;\n  /** What the user picks when connecting: \"ad account\", \"property\", \"container\". */\n  resourceNoun: string;\n  writePath: CapabilityWritePath;\n  /**\n   * OAuth scopes that would grant writes. Access is derived by intersecting these\n   * with the scopes the app actually requests — which is why \"GA4 is read-only\"\n   * is a fact about the connection, not a sentence someone typed.\n   */\n  writeScopes: string[];\n  /** Where to look next on this surface. */\n  commands: string;\n  /**\n   * How the company connects. Absent is an OAuth grant, whose scopes decide\n   * access. `api-key` is a pasted key that reaches one account whole, so the\n   * write path alone decides it.\n   */\n  connectsWith?: \"api-key\";\n}\n\nexport const CAPABILITY_SURFACE_SPECS: Readonly<Record<CapabilitySurfaceId, CapabilitySurfaceSpec>> = {\n  \"google-ads\": {\n    id: \"google-ads\",\n    label: \"Google Ads\",\n    provider: \"google-ads\",\n    resourceNoun: \"ad account\",\n    writePath: \"staged-live\",\n    writeScopes: [\"https://www.googleapis.com/auth/adwords\"],\n    commands: \"baker ads google\",\n  },\n  \"meta-ads\": {\n    id: \"meta-ads\",\n    label: \"Meta Ads\",\n    provider: \"meta\",\n    resourceNoun: \"ad account\",\n    writePath: \"staged-live\",\n    writeScopes: [\"ads_management\"],\n    commands: \"baker ads meta\",\n  },\n  \"linkedin-ads\": {\n    id: \"linkedin-ads\",\n    label: \"LinkedIn Ads\",\n    provider: \"linkedin\",\n    resourceNoun: \"ad account\",\n    writePath: \"staged-live\",\n    writeScopes: [\"rw_ads\"],\n    commands: \"baker ads linkedin\",\n  },\n  \"x-ads\": {\n    id: \"x-ads\",\n    label: \"X Ads\",\n    provider: \"x-ads\",\n    resourceNoun: \"ad account\",\n    writePath: \"staged-live\",\n    /**\n     * Empty on purpose, and the one surface where that does NOT mean read-only.\n     * X Ads authenticates with OAuth 1.0a, which has no scope strings at all —\n     * write access is granted to the *app* by X's Ads API access review, not\n     * per connection. There is therefore no scope to check, and inventing one\n     * would make `scopeBlockers` refuse every X write for a permission that\n     * does not exist.\n     */\n    writeScopes: [],\n    commands: \"baker ads x\",\n  },\n  \"chatgpt-ads\": {\n    id: \"chatgpt-ads\",\n    label: \"ChatGPT Ads\",\n    // Connected with the client's own Ads API key (`chatgptAdsConnections`), not an OAuth grant.\n    provider: \"chatgpt-ads\",\n    resourceNoun: \"ad account\",\n    writePath: \"staged-live\",\n    /**\n     * Empty because the pasted key has no scopes: it reaches its one account\n     * whole. When OpenAI approves Baker's OAuth app this becomes\n     * `ads.admin.all.write` and `connectsWith` goes away.\n     */\n    writeScopes: [],\n    commands: \"baker ads chatgpt\",\n    connectsWith: \"api-key\",\n  },\n  \"tag-manager\": {\n    id: \"tag-manager\",\n    label: \"Tag Manager\",\n    provider: \"google-tag-manager\",\n    resourceNoun: \"container\",\n    writePath: \"staged-immediate\",\n    writeScopes: [\n      \"https://www.googleapis.com/auth/tagmanager.edit.containers\",\n      \"https://www.googleapis.com/auth/tagmanager.edit.containerversions\",\n      \"https://www.googleapis.com/auth/tagmanager.publish\",\n    ],\n    commands: \"baker tag-manager\",\n  },\n  ga4: {\n    id: \"ga4\",\n    label: \"Google Analytics 4\",\n    provider: \"google-analytics\",\n    resourceNoun: \"property\",\n    // Like Tag Manager: staged during the chat, applied for real at publish,\n    // every time. A connection made before writes existed is\n    // read-only until it is reconnected, and `access` does NOT say so — it\n    // reports what the Baker app asks Google for, which is now app-wide\n    // read-write. The per-company signal is `scopeBlockers`, which compares\n    // `writeScopes` against the scopes that connection actually recorded.\n    writePath: \"staged-immediate\",\n    writeScopes: [\"https://www.googleapis.com/auth/analytics.edit\"],\n    commands: \"baker ga4\",\n  },\n  gsc: {\n    id: \"gsc\",\n    label: \"Search Console\",\n    provider: \"google-search-console\",\n    resourceNoun: \"site\",\n    writePath: \"read-only\",\n    writeScopes: [\"https://www.googleapis.com/auth/webmasters\"],\n    commands: \"baker gsc\",\n  },\n};\n\n/**\n * Why a capability is missing. The distinction is what decides what the agent\n * tells the user, so it is part of the contract rather than left to prose:\n *  - `not_built`        — the platform allows it, Baker has not built it. It may\n *                         be possible by hand in the platform's own interface.\n *  - `provider_forbids` — the platform rejects it however it is asked. Nobody can\n *                         do it, so do not hand the user a manual route.\n *  - `no_permission`    — the connection was never granted the access. Reading\n *                         works, changing does not; it is manual work today.\n */\nexport type CapabilityLimitCause = \"not_built\" | \"provider_forbids\" | \"no_permission\";\n\n/**\n * The checkable claim behind a limit. `coverage.test.ts` re-derives each one.\n */\nexport type CapabilityLimitEvidence =\n  /** The app never requests this OAuth scope, so nothing can write here. */\n  | { kind: \"scope\"; scope: string }\n  /** No staged op with these kinds exists, so there is nothing to stage. */\n  | { kind: \"noOpKind\"; kinds: string[] }\n  /** A field on a staged op does not accept this value. */\n  | { kind: \"noChoice\"; opKind: string; field: string; value: string }\n  /** A stage-time guard refuses it before anything is spent. */\n  | { kind: \"guard\"; module: string; symbol: string }\n  /** Nothing in this repository encodes it; the note says why. */\n  | { kind: \"asserted\"; note: string };\n\nexport interface CapabilityLimit {\n  surface: CapabilitySurfaceId;\n  /** What an agent would set out to do, in the words it would use. */\n  capability: string;\n  cause: CapabilityLimitCause;\n  /** Why it cannot happen and what to do instead. Agent-facing, plain English. */\n  detail: string;\n  evidence: CapabilityLimitEvidence;\n}\n\n/**\n * Ordered by how often getting it wrong has cost something. Keep entries to\n * things an agent would plausibly promise a client before checking.\n */\nexport const CAPABILITY_LIMITS: readonly CapabilityLimit[] = [\n  {\n    surface: \"ga4\",\n    capability:\n      \"Create, merge or delete a property; add or edit a data stream; change the property's time zone or currency\",\n    cause: \"not_built\",\n    detail:\n      \"Baker configures what a property MEASURES — key events, custom dimensions and metrics, custom events, audiences, the data retention window — plus the property's name, industry category and Google Ads link. It does not create or merge properties or touch data streams. Time zone and currency are deliberately excluded even though the API allows them: both change how every future day is bucketed without reprocessing history, so a correction puts a step in the middle of every time series the user compares against. Tell the user exactly what to change in the Google Analytics admin screens and carry on with the rest of the job.\",\n    evidence: {\n      kind: \"noOpKind\",\n      kinds: [\"ga4.dataStream.create\", \"ga4.dataStream.update\", \"ga4.property.create\"],\n    },\n  },\n  {\n    surface: \"ga4\",\n    capability: \"Change who is already in an audience, or build one from a sequence of steps\",\n    cause: \"provider_forbids\",\n    detail:\n      \"An audience can be CREATED and ARCHIVED here, and its name and description changed. Everything that defines who is in it — the conditions, the membership window, the exclusion mode — is marked Immutable by Google and cannot be edited on an audience that exists, however it is asked. Fixing a definition therefore means archiving the audience and creating a replacement, which does NOT carry the users the first one gathered. Say that before staging the archive. Sequence-based audiences (`sequenceFilter`) are not offered: they are the easiest shape in this API to get subtly wrong and the mistake is permanent, so build them by hand in Google Analytics if one is genuinely needed.\",\n    evidence: {\n      kind: \"asserted\",\n      note: \"The immutability is Google's, declared in the Admin API v1alpha `Audience` resource (`filter_clauses`, `membership_duration_days` and `exclusion_duration_mode` are all marked Immutable) — no code in this repository can be read to confirm a rule the provider enforces. What this repo does hold is the consequence: `GA4_IMMUTABLE_FIELDS.audience` in `packages/api/src/ga4/ops.ts` drives the refusal, and `ga4.test.ts` pins that an update carrying one of those fields is rejected with the archive-and-recreate wording rather than a zod key error.\",\n    },\n  },\n  {\n    surface: \"ga4\",\n    capability: \"Try a Google Analytics configuration change without it taking effect\",\n    cause: \"not_built\",\n    detail:\n      \"Google Analytics changes always apply to the real property: staged changes apply when the chat completes, and an applied change is in effect immediately — there is no version to publish afterwards and no undo. The user reviewing the Analytics tab and completing the chat is the review, so agree the changes with them before you complete it.\",\n    evidence: {\n      kind: \"asserted\",\n      note: \"An absence: the GA4 executor has no simulated branch and GA4 drafts have no `mode` column, and no test can assert the absence of a mode that was never modelled. The nearest positive check is that the three ad surfaces do carry one — a `mode` column on their drafts and an `executeSimulated` branch in each executor — which the `staged-live` vs `staged-immediate` write paths already encode. Their per-company write gates are retired, so every ad draft is stamped `live`; the branch survives only for drafts published while the gates existed.\",\n    },\n  },\n  {\n    surface: \"gsc\",\n    capability:\n      \"Change anything in Search Console — add or verify a property, submit or delete a sitemap, set a preferred domain\",\n    cause: \"no_permission\",\n    detail:\n      \"Baker's Search Console connection is read-only (webmasters.readonly). `baker gsc sitemaps` lists what is already submitted; it cannot submit one. Hand submission to the user in Search Console and carry on.\",\n    evidence: { kind: \"scope\", scope: \"https://www.googleapis.com/auth/webmasters\" },\n  },\n  {\n    surface: \"x-ads\",\n    capability: \"Change anything in X Ads — create or edit campaigns, line items, or promoted posts\",\n    cause: \"not_built\",\n    detail:\n      \"X Ads is a read-only surface in Baker: there are no staged write ops for it, so nothing can be staged and nothing publishes. Report on it freely; route any change to the user in X Ads Manager.\",\n    evidence: { kind: \"noOpKind\", kinds: [\"x.campaign.create\", \"x.campaign.update\", \"x.lineItem.create\"] },\n  },\n  {\n    surface: \"google-ads\",\n    capability:\n      \"Change a conversion action that Google itself created — Smart campaign calls and directions, the in-ad lead form's submit, YouTube subscriptions and follow-on views, Floodlight and Search Ads 360 imports, store visits, codeless webpage actions\",\n    cause: \"provider_forbids\",\n    detail:\n      \"Google rejects every write against one of its own conversion actions, a rename as flatly as a removal. Baker refuses these at stage time so no publish is spent on them. There is no manual route either — the Google Ads interface will not change them — so do not hand the user one. Leave the action alone and say so.\",\n    evidence: {\n      module: \"ads/google/writes/conversionSafety.ts\",\n      kind: \"guard\",\n      symbol: \"googleOwnedConversionRefusal\",\n    },\n  },\n  {\n    surface: \"google-ads\",\n    capability:\n      \"Switch a demographic dimension — age, gender, parental status, household income — between Targeting and Observation\",\n    cause: \"not_built\",\n    detail:\n      \"`baker ads google audiences targeting` sets the AUDIENCE dimension only. The demographic rows are read before every write and sent back exactly as they were, so nothing is lost — but changing one is manual work in the Google Ads interface. Say which one to change and where, and carry on with the rest of the job.\",\n    evidence: { kind: \"noChoice\", opKind: \"google.targetingSetting.set\", field: \"audience\", value: \"AGE_RANGE\" },\n  },\n  {\n    surface: \"google-ads\",\n    capability: \"Hide a conversion action (status HIDDEN)\",\n    cause: \"provider_forbids\",\n    detail:\n      'Google denies HIDDEN on every conversion-action write (\"the field\\'s value is on a deny-list for this field\"), so it is not part of the write contract — even though actions hidden long ago still read back as HIDDEN. To take an action out of automated bidding while it keeps measuring, demote it: `baker ads google conversions update <id> --no-primary`. To stop it counting, set status REMOVED.',\n    evidence: { kind: \"noChoice\", opKind: \"google.conversionAction.update\", field: \"status\", value: \"HIDDEN\" },\n  },\n  {\n    surface: \"google-ads\",\n    capability: \"Remove a device setting from a campaign once it has one\",\n    cause: \"provider_forbids\",\n    detail:\n      \"A device criterion can be added with `campaign-criteria add` and re-bid afterwards, but Google rejects every removal of one — including a criterion the same account created itself days earlier (observed). So the undo for a bid boost is NOT a removal: it is `baker ads google campaign-criteria update <criterion-resource-name> --bid-modifier 1`, where 0 stops ads serving on that device and 0.1–10.0 bid down or up. Read `campaign_criterion.resource_name` and `campaign_criterion.bid_modifier` (type = DEVICE) first to see which devices the campaign already has. Baker refuses a staged device removal before publish; don't abort the job over it.\",\n    evidence: {\n      kind: \"guard\",\n      module: \"ads/google/writes/stage.ts\",\n      symbol: \"deviceCriterionRemovalRefusal\",\n    },\n  },\n  {\n    surface: \"google-ads\",\n    capability: \"Change account settings, billing, payment methods, or account-level spend limits\",\n    cause: \"not_built\",\n    detail:\n      \"Nothing that touches money setup is stageable — no op exists for it. Report on spend, then hand billing changes to the user in Google Ads.\",\n    evidence: {\n      kind: \"noOpKind\",\n      kinds: [\"google.account.update\", \"google.billingSetup.create\", \"google.accountBudget.create\"],\n    },\n  },\n  {\n    surface: \"meta-ads\",\n    capability:\n      \"Push delivery to an ad — dedicate a share of the campaign or ad-set budget to one ad for a set number of days\",\n    cause: \"not_built\",\n    detail:\n      'Meta ships push delivery as an Ads Manager control only: the Marketing API\\'s ad object takes a schedule, a display sequence and tracking, and nothing that dedicates budget to one ad. So nothing can stage it and no publish can apply it — do not offer to switch it on, and never report a starved ad as pushed. Hand the user the click path and the settings you are recommending: Ad level > Ad setup > \"show more settings\" (next to ad scheduling) > \"Help ensure delivery by dedicating a portion of your budget to your ad\", then the percentage of budget and the number of days, for the one ad you name. It needs at least 2 ads in the ad set, and only one ad per ad set should be pushed. Then carry on with the rest of the job.',\n    evidence: { kind: \"noOpKind\", kinds: [\"ad.pushDelivery\"] },\n  },\n  {\n    surface: \"linkedin-ads\",\n    capability: \"Move a live ad to another ad set, or change a live ad set's type, locale, or associated organization\",\n    cause: \"provider_forbids\",\n    detail:\n      \"LinkedIn treats these as create-only: they can be corrected while the change is still staged, but not on something already live. Baker refuses the amend rather than staging a write LinkedIn will reject. Create the replacement instead, and say why.\",\n    evidence: { kind: \"guard\", module: \"ads/linkedin/writes/amend.ts\", symbol: \"rejectedLiveKeys\" },\n  },\n  {\n    surface: \"linkedin-ads\",\n    capability: \"Use a video from the Baker media library, or a document, as LinkedIn ad creative\",\n    cause: \"not_built\",\n    detail:\n      \"Only images upload to LinkedIn today; video and document creative are not built. Stage an image creative, or tell the user to upload the video in Campaign Manager, and carry on with the rest of the job.\",\n    evidence: {\n      kind: \"asserted\",\n      note: \"Enforced by a throw inside the LinkedIn media uploader (ads/linkedin/writes/media.ts), not by the shared op contract — the op kind exists and accepts the reference, so no schema or op-kind check can see it.\",\n    },\n  },\n  {\n    surface: \"tag-manager\",\n    capability: \"Create, delete, or move a Tag Manager account, container, or workspace\",\n    cause: \"not_built\",\n    detail:\n      \"Baker works inside the containers the company connected — it changes tags, triggers, variables, folders, built-in variables and container settings, and nothing above that level. Ask the user to create the container in Tag Manager and connect it, then carry on.\",\n    evidence: {\n      kind: \"noOpKind\",\n      kinds: [\n        \"tagManager.container.create\",\n        \"tagManager.container.delete\",\n        \"tagManager.account.create\",\n        \"tagManager.workspace.create\",\n      ],\n    },\n  },\n  {\n    surface: \"tag-manager\",\n    capability: \"Try a container change without it going live\",\n    cause: \"not_built\",\n    detail:\n      \"Tag Manager changes always apply to the real container: staged changes apply to its working workspace when the chat completes, and a clean run cuts and publishes a container version, which takes them live on the site. Completing the chat is the review, so get the user's agreement before you complete it.\",\n    evidence: {\n      kind: \"asserted\",\n      note: \"An absence: the Tag Manager executor has no simulated branch and its drafts have no `mode` column, and no test can assert the absence of a mode that was never modelled. The nearest positive check is that the three ad surfaces do carry one — a `mode` column on their drafts and an `executeSimulated` branch in each executor — which the `staged-live` vs `staged-immediate` write paths already encode. Their per-company write gates are retired, so every ad draft is stamped `live`; the branch survives only for drafts published while the gates existed.\",\n    },\n  },\n];\n","/**\n * Contract for `/api/capabilities` — what Baker can and cannot do for this\n * company, answered before any work starts (`baker capabilities`).\n *\n * Convex `Id<T>` values are plain `z.string()`; this package must not depend on\n * `convex`. Nothing here carries a token, key, or anything a credential could be\n * reconstructed from — the response names accounts and permissions, never\n * secrets.\n */\nimport { z } from \"zod\";\nimport { CAPABILITY_SURFACES } from \"./surfaces\";\n\nexport { describeOpUnion, type OpDescription } from \"./op-fields\";\nexport {\n  CAPABILITY_LIMITS,\n  CAPABILITY_SURFACE_SPECS,\n  CAPABILITY_SURFACES,\n  type CapabilityLimit,\n  type CapabilityLimitCause,\n  type CapabilityLimitEvidence,\n  type CapabilitySurfaceId,\n  type CapabilitySurfaceSpec,\n  type CapabilityWritePath,\n} from \"./surfaces\";\n\nexport const capabilitySurfaceSchema = z.enum(CAPABILITY_SURFACES);\n\nexport const capabilitiesRequestSchema = z.object({\n  /** Narrow to one surface. Omit for every surface the company could use. */\n  surface: capabilitySurfaceSchema.optional(),\n  /** Include the field-level contract of every op, not just the entity list. */\n  full: z.boolean().optional(),\n  /**\n   * Who the chat acts as (`BAKER_ACTING_USER_ID`). Adds that person's own\n   * connected tools — they load for this turn, and for nobody else's.\n   */\n  actingUserId: z.string().optional(),\n});\nexport type CapabilitiesRequest = z.infer<typeof capabilitiesRequestSchema>;\n\n/** A connected account, property, site or container. Identity only. */\nexport const capabilityResourceSchema = z.object({\n  id: z.string(),\n  name: z.string().optional(),\n});\nexport type CapabilityResource = z.infer<typeof capabilityResourceSchema>;\n\nexport const capabilityOpSchema = z.object({\n  kind: z.string(),\n  /** True when the op changes something that already exists and must be named. */\n  needsTarget: z.boolean(),\n  required: z.array(z.string()),\n  optional: z.array(z.string()),\n  /** Field → the values it accepts, for fields that take a fixed set. */\n  choices: z.record(z.string(), z.array(z.string())),\n  /** False when the platform accepts fields beyond the listed ones. */\n  fieldsAreComplete: z.boolean(),\n});\nexport type CapabilityOp = z.infer<typeof capabilityOpSchema>;\n\nexport const capabilityLimitViewSchema = z.object({\n  capability: z.string(),\n  cause: z.enum([\"not_built\", \"provider_forbids\", \"no_permission\"]),\n  detail: z.string(),\n});\nexport type CapabilityLimitView = z.infer<typeof capabilityLimitViewSchema>;\n\n/**\n * `live` — writes reach the real platform at publish.\n * `applies-at-publish` — publishing changes the real thing, with no version step after.\n * `none` — this surface does not write.\n *\n * There is no `simulated`: the per-company gates that produced it on Google,\n * Meta and LinkedIn are all retired, so no surface can report a write that\n * touches nothing. Leaving the value in the contract would keep alive the one\n * sentence this report exists to prevent — \"your ads are only a preview\".\n */\nexport const capabilityWriteModeSchema = z.enum([\"live\", \"applies-at-publish\", \"none\"]);\nexport type CapabilityWriteMode = z.infer<typeof capabilityWriteModeSchema>;\n\nexport const capabilitySurfaceReportSchema = z.object({\n  surface: capabilitySurfaceSchema,\n  label: z.string(),\n  connected: z.boolean(),\n  /** What the user picked when connecting. Empty when nothing is selected yet. */\n  resources: z.array(capabilityResourceSchema),\n  access: z.enum([\"read-write\", \"read-only\", \"not-connected\"]),\n  writeMode: capabilityWriteModeSchema,\n  /** One sentence about the write mode, safe to repeat to the user. */\n  writeModeNote: z.string(),\n  /** Entities this surface can change at all, e.g. \"campaign\", \"keyword\". */\n  writableEntities: z.array(z.string()),\n  /** Things wrong with the connection itself: needs reconnecting, missing a permission. */\n  blockers: z.array(z.string()),\n  /** What cannot be done here, and why. */\n  limits: z.array(capabilityLimitViewSchema),\n  /** The per-op contract. Present when one surface was asked for, or with `full`. */\n  ops: z.array(capabilityOpSchema).optional(),\n  /** Where to look next: `baker ads google`, `baker ga4`, … */\n  commands: z.string(),\n});\nexport type CapabilitySurfaceReport = z.infer<typeof capabilitySurfaceReportSchema>;\n\n/**\n * A source that is available to this company but is not one of the seven\n * marketing surfaces above.\n *\n * These exist because \"what do I have?\" had no single answer, and the gap was\n * not academic: Microsoft Clarity arrives over MCP and HubSpot is read through\n * the CLI, so neither appears in `surfaces` — and an agent that checked only\n * this command concluded it had no Clarity while Clarity was sitting in its own\n * tool list. That is the source most likely to change what it decides.\n *\n * Deliberately NOT modelled as a surface. A surface carries `ops`,\n * `writableEntities` and a write mode, all of which describe a staged-write\n * contract Baker owns. An MCP toolkit has none of that — Baker did not define\n * its tools and cannot enumerate their fields — so filing one under `surfaces`\n * would mean either lying about the contract or leaving four fields empty on\n * every row and inviting the reader to wonder which.\n */\nexport const capabilityToolSchema = z.object({\n  /** `microsoft_clarity`, `hubspot`, or the name the user gave a custom server. */\n  key: z.string(),\n  label: z.string(),\n  /** `mcp` — tools in the agent's own list. `platform` — signed in, read through the CLI. */\n  kind: z.enum([\"mcp\", \"platform\"]),\n  /** How to actually reach it, in one phrase the agent can act on. */\n  reach: z.string(),\n  /**\n   * Whether it can be used right now.\n   *\n   * A connection that exists and is expired is worse than one that is absent:\n   * it reads as available and fails at the moment it is needed, which on an\n   * unattended run is a report with a hole in it and no explanation.\n   */\n  ready: z.boolean(),\n  /** Why it is not ready, or what it is for. Absent when neither needs saying. */\n  note: z.string().optional(),\n});\nexport type CapabilityTool = z.infer<typeof capabilityToolSchema>;\n\nexport const capabilitiesResponseSchema = z.object({\n  ok: z.literal(true),\n  data: z.object({\n    surfaces: z.array(capabilitySurfaceReportSchema),\n    /**\n     * Everything else this company can reach. Shared connections only —\n     * a teammate's private per-user connection belongs to whoever started the\n     * session and is visible in the agent's own tool list, not here.\n     */\n    tools: z.array(capabilityToolSchema),\n  }),\n});\nexport type CapabilitiesResponse = z.infer<typeof capabilitiesResponseSchema>;\n"],"mappings":";AAqBO,IAAM,sBAAsB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AA6CO,IAAM,2BAAyF;AAAA,EACpG,cAAc;AAAA,IACZ,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA,IACd,WAAW;AAAA,IACX,aAAa,CAAC,yCAAyC;AAAA,IACvD,UAAU;AAAA,EACZ;AAAA,EACA,YAAY;AAAA,IACV,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA,IACd,WAAW;AAAA,IACX,aAAa,CAAC,gBAAgB;AAAA,IAC9B,UAAU;AAAA,EACZ;AAAA,EACA,gBAAgB;AAAA,IACd,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA,IACd,WAAW;AAAA,IACX,aAAa,CAAC,QAAQ;AAAA,IACtB,UAAU;AAAA,EACZ;AAAA,EACA,SAAS;AAAA,IACP,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA,IACd,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASX,aAAa,CAAC;AAAA,IACd,UAAU;AAAA,EACZ;AAAA,EACA,eAAe;AAAA,IACb,IAAI;AAAA,IACJ,OAAO;AAAA;AAAA,IAEP,UAAU;AAAA,IACV,cAAc;AAAA,IACd,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMX,aAAa,CAAC;AAAA,IACd,UAAU;AAAA,IACV,cAAc;AAAA,EAChB;AAAA,EACA,eAAe;AAAA,IACb,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA,IACd,WAAW;AAAA,IACX,aAAa;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,UAAU;AAAA,EACZ;AAAA,EACA,KAAK;AAAA,IACH,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOd,WAAW;AAAA,IACX,aAAa,CAAC,gDAAgD;AAAA,IAC9D,UAAU;AAAA,EACZ;AAAA,EACA,KAAK;AAAA,IACH,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA,IACd,WAAW;AAAA,IACX,aAAa,CAAC,4CAA4C;AAAA,IAC1D,UAAU;AAAA,EACZ;AACF;;;ACpKA,SAAS,SAAS;AAgBX,IAAM,0BAA0B,EAAE,KAAK,mBAAmB;AAE1D,IAAM,4BAA4B,EAAE,OAAO;AAAA;AAAA,EAEhD,SAAS,wBAAwB,SAAS;AAAA;AAAA,EAE1C,MAAM,EAAE,QAAQ,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAK3B,cAAc,EAAE,OAAO,EAAE,SAAS;AACpC,CAAC;AAIM,IAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,OAAO,EAAE,SAAS;AAC5B,CAAC;AAGM,IAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,MAAM,EAAE,OAAO;AAAA;AAAA,EAEf,aAAa,EAAE,QAAQ;AAAA,EACvB,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EAC5B,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA;AAAA,EAE5B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAAA;AAAA,EAEjD,mBAAmB,EAAE,QAAQ;AAC/B,CAAC;AAGM,IAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,YAAY,EAAE,OAAO;AAAA,EACrB,OAAO,EAAE,KAAK,CAAC,aAAa,oBAAoB,eAAe,CAAC;AAAA,EAChE,QAAQ,EAAE,OAAO;AACnB,CAAC;AAaM,IAAM,4BAA4B,EAAE,KAAK,CAAC,QAAQ,sBAAsB,MAAM,CAAC;AAG/E,IAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,SAAS;AAAA,EACT,OAAO,EAAE,OAAO;AAAA,EAChB,WAAW,EAAE,QAAQ;AAAA;AAAA,EAErB,WAAW,EAAE,MAAM,wBAAwB;AAAA,EAC3C,QAAQ,EAAE,KAAK,CAAC,cAAc,aAAa,eAAe,CAAC;AAAA,EAC3D,WAAW;AAAA;AAAA,EAEX,eAAe,EAAE,OAAO;AAAA;AAAA,EAExB,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA;AAAA,EAEpC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA;AAAA,EAE5B,QAAQ,EAAE,MAAM,yBAAyB;AAAA;AAAA,EAEzC,KAAK,EAAE,MAAM,kBAAkB,EAAE,SAAS;AAAA;AAAA,EAE1C,UAAU,EAAE,OAAO;AACrB,CAAC;AAoBM,IAAM,uBAAuB,EAAE,OAAO;AAAA;AAAA,EAE3C,KAAK,EAAE,OAAO;AAAA,EACd,OAAO,EAAE,OAAO;AAAA;AAAA,EAEhB,MAAM,EAAE,KAAK,CAAC,OAAO,UAAU,CAAC;AAAA;AAAA,EAEhC,OAAO,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQhB,OAAO,EAAE,QAAQ;AAAA;AAAA,EAEjB,MAAM,EAAE,OAAO,EAAE,SAAS;AAC5B,CAAC;AAGM,IAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,IAAI,EAAE,QAAQ,IAAI;AAAA,EAClB,MAAM,EAAE,OAAO;AAAA,IACb,UAAU,EAAE,MAAM,6BAA6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAM/C,OAAO,EAAE,MAAM,oBAAoB;AAAA,EACrC,CAAC;AACH,CAAC;","names":[]}

package/dist/chunk-ZZQXVYUY.js

@@ -1,66 +0,0 @@
-import {
-  canvasOutputsRoot
-} from "./chunk-DZSIUEGH.js";
-import {
-  optionalChatId
-} from "./chunk-NAWWC5I3.js";
-
-// src/commands/canvas/creative-limit.ts
-import { existsSync } from "fs";
-import { mkdir, readdir, writeFile } from "fs/promises";
-import path from "path";
-var NEW_CREATIVES_PER_CHAT = 10;
-function claimNewCreative(made, slug) {
-  if (made.includes(slug)) return { allowed: true, count: made.length };
-  if (made.length >= NEW_CREATIVES_PER_CHAT) return { allowed: false, count: made.length };
-  return { allowed: true, count: made.length + 1 };
-}
-function chatDir(canvasRoot, chatId) {
-  return path.join(canvasRoot, ".creative-limit", (chatId ?? "no-chat").replace(/[^A-Za-z0-9_-]/g, "_"));
-}
-async function madeInChat(dir) {
-  return readdir(dir).catch(() => []);
-}
-async function claimNewCreativeInWorkspace(canvasRoot, slug, chatId, definitionPath, exists = existsSync) {
-  const dir = chatDir(canvasRoot, chatId);
-  const made = await madeInChat(dir);
-  if (!made.includes(slug) && exists(definitionPath)) return { allowed: true, count: made.length };
-  const claim = claimNewCreative(made, slug);
-  if (claim.allowed && !made.includes(slug)) {
-    try {
-      await mkdir(dir, { recursive: true });
-      await writeFile(path.join(dir, slug), "", { flag: "wx" });
-    } catch {
-    }
-  }
-  return claim;
-}
-function creativeLimitRefusal(slug) {
-  return {
-    ok: false,
-    error: {
-      code: "CREATIVE_LIMIT",
-      message: `${slug} would be new creative number ${NEW_CREATIVES_PER_CHAT + 1} in this chat. A chat makes at most ${NEW_CREATIVES_PER_CHAT} new creatives.`,
-      fix: `Build nothing more. Finish and show the ${NEW_CREATIVES_PER_CHAT} you have, and tell the person in one line that a chat makes up to ${NEW_CREATIVES_PER_CHAT} new creatives, so the rest go in a new chat. Editing or resizing the ones already made still works here. Working as a subagent: return now and say the limit was reached.`
-    }
-  };
-}
-async function enforceNewCreativeLimit(slug, canvasPath) {
-  const claim = await claimNewCreativeInWorkspace(
-    canvasOutputsRoot(canvasPath),
-    slug,
-    optionalChatId() ?? null,
-    path.join(path.dirname(path.resolve(canvasPath)), "_definition.md")
-  );
-  if (claim.allowed) return;
-  process.stderr.write(`${JSON.stringify(creativeLimitRefusal(slug), null, 2)}
-`);
-  process.exit(2);
-}
-
-export {
-  claimNewCreativeInWorkspace,
-  creativeLimitRefusal,
-  enforceNewCreativeLimit
-};
-//# sourceMappingURL=chunk-ZZQXVYUY.js.map

package/dist/claim-25JJM4AG.js

@@ -1,197 +0,0 @@
-import {
-  failApi,
-  failValidation
-} from "./chunk-ZDNOCKKY.js";
-import "./chunk-K6WVV74H.js";
-import "./chunk-GXDLWBOY.js";
-import "./chunk-TEINLN64.js";
-import "./chunk-ZJWUBJYQ.js";
-import "./chunk-NE4F3FHN.js";
-import {
-  apiPost,
-  validateConvexId
-} from "./chunk-XBOK23HI.js";
-import "./chunk-IFWP3ZDO.js";
-import {
-  requireChatId
-} from "./chunk-NAWWC5I3.js";
-import {
-  registerSchema,
-  writeJson
-} from "./chunk-NU7JSWVA.js";
-import "./chunk-YQSBHWOI.js";
-
-// src/commands/actions/claim.ts
-import { defineCommand } from "citty";
-
-// src/commands/actions/skillCatalog.ts
-import { existsSync, readdirSync, readFileSync } from "fs";
-import { dirname, join } from "path";
-var DESCRIPTION_MAX = 600;
-var SKILLS_SUBPATH = join(".claude", "skills");
-var EXCLUDED_SKILLS = /* @__PURE__ */ new Set(["actions"]);
-function stripQuotes(value) {
-  const trimmed = value.trim();
-  if (trimmed.startsWith('"') && trimmed.endsWith('"')) {
-    return trimmed.slice(1, -1).replace(/\\"/g, '"').replace(/\\n/g, "\n");
-  }
-  if (trimmed.startsWith("'") && trimmed.endsWith("'")) {
-    return trimmed.slice(1, -1).replace(/''/g, "'");
-  }
-  return trimmed;
-}
-function extractFrontmatterLines(md) {
-  if (!md.startsWith("---")) return null;
-  const end = md.indexOf("\n---", 3);
-  if (end === -1) return null;
-  return md.slice(md.indexOf("\n", 3) + 1, end).split("\n");
-}
-var BLOCK_SCALAR = /^([|>])[+-]?$/;
-function collectBlockLines(lines, start) {
-  const collected = [];
-  for (let i = start; i < lines.length; i++) {
-    const line = lines[i] ?? "";
-    if (line.trim() === "") {
-      collected.push("");
-    } else if (/^\s/.test(line)) {
-      collected.push(line.trim());
-    } else {
-      break;
-    }
-  }
-  while (collected.length > 0 && collected.at(-1) === "") collected.pop();
-  return collected;
-}
-function foldLines(collected) {
-  const paragraphs = [];
-  let buffer = [];
-  for (const line of collected) {
-    if (line === "") {
-      if (buffer.length > 0) paragraphs.push(buffer.join(" "));
-      buffer = [];
-    } else {
-      buffer.push(line);
-    }
-  }
-  if (buffer.length > 0) paragraphs.push(buffer.join(" "));
-  return paragraphs.join("\n");
-}
-function readBlockScalar(lines, start, style) {
-  const collected = collectBlockLines(lines, start);
-  return style === "|" ? collected.join("\n") : foldLines(collected);
-}
-function readField(lines, field) {
-  for (let i = 0; i < lines.length; i++) {
-    const match = (lines[i] ?? "").match(/^([A-Za-z0-9_-]+):\s*(.*)$/);
-    if (!match || match[1] !== field) continue;
-    const inline = (match[2] ?? "").trim();
-    const scalar = inline.match(BLOCK_SCALAR);
-    if (scalar) {
-      return readBlockScalar(lines, i + 1, scalar[1]);
-    }
-    return stripQuotes(inline);
-  }
-  return null;
-}
-function parseSkillFrontmatter(md) {
-  const lines = extractFrontmatterLines(md);
-  if (!lines) return null;
-  const name = readField(lines, "name");
-  const description = readField(lines, "description");
-  if (!name || !description) return null;
-  const trimmed = description.length > DESCRIPTION_MAX ? `${description.slice(0, DESCRIPTION_MAX)}\u2026` : description;
-  return { name, description: trimmed };
-}
-function findSkillsDir(startDir) {
-  let dir = startDir;
-  for (; ; ) {
-    const candidate = join(dir, SKILLS_SUBPATH);
-    if (existsSync(candidate)) return candidate;
-    const parent = dirname(dir);
-    if (parent === dir) return null;
-    dir = parent;
-  }
-}
-function readSkillCatalog(startDir) {
-  const skillsDir = findSkillsDir(startDir);
-  if (!skillsDir) return [];
-  const entries = [];
-  for (const dirent of readdirSync(skillsDir, { withFileTypes: true })) {
-    if (!dirent.isDirectory() || EXCLUDED_SKILLS.has(dirent.name)) continue;
-    const skillFile = join(skillsDir, dirent.name, "SKILL.md");
-    if (!existsSync(skillFile)) continue;
-    try {
-      const parsed = parseSkillFrontmatter(readFileSync(skillFile, "utf8"));
-      if (parsed) entries.push(parsed);
-    } catch {
-    }
-  }
-  return entries.sort((a, b) => a.name.localeCompare(b.name));
-}
-
-// src/commands/actions/claim.ts
-registerSchema({
-  command: "actions.claim",
-  description: "Claim an action for the current chat (live \u2014 visible to other chats immediately). Claim only what you're actively working on now: it's required before `complete`, but NOT for `update` or `discard` (those stage without a claim). Returns action details plus a fast-model recommendation of which skills to load for the work (`recommendedSkills`) and a routing hint: load every skill that owns part of the work and the tool doc for each baker CLI family you'll use.",
-  args: {
-    id: { type: "string", description: "Action ID", required: true }
-  }
-});
-async function recommendSkills(actionId) {
-  const skills = readSkillCatalog(process.cwd());
-  if (skills.length === 0) return [];
-  const response = await apiPost("/api/actions/recommend-skills", {
-    actionId,
-    skills
-  });
-  return response.data.recommendations;
-}
-var ROUTING_HINT = "Actions often span several surfaces (a landing page plus a Google Ads change, a sheet pull plus an audience upload). Before starting, load EVERY skill that owns part of the work and read the tool doc (__tooling__/docs/tools/baker/<family>.md) for each baker CLI family you'll use. If the action references source material living in a connected tool (an email attachment, a call, a CRM record, a spreadsheet), reach for that tool too. If it describes recurring or future-dated work, it belongs on a schedule \u2014 see __tooling__/docs/tools/baker/scheduled-agents.md.";
-function buildHints(recommendations) {
-  if (recommendations.length === 0) {
-    return ["Review the action name, description, and tags above.", ROUTING_HINT];
-  }
-  return [
-    "Recommended skills for this action (load the ones you'll use):",
-    ...recommendations.map((r) => `  /${r.name} \u2014 ${r.reason}`),
-    "Suggestions come from the action's name/description/tags only \u2014 the work may need more.",
-    ROUTING_HINT
-  ];
-}
-var claimCommand = defineCommand({
-  meta: {
-    name: "claim",
-    description: "Claim an action so other chats see you're working on it. Required before `complete` (update and discard don't need a claim). Example: baker actions claim <action-id>"
-  },
-  args: {
-    id: { type: "positional", description: "Action ID", required: false },
-    "action-id": { type: "string", description: "Action ID", required: false }
-  },
-  run: async ({ args }) => {
-    try {
-      const id = args.id || args["action-id"];
-      if (!id) {
-        failValidation("Action ID is required.");
-      }
-      validateConvexId(id);
-      const chatId = requireChatId();
-      const response = await apiPost("/api/actions/claim", {
-        actionId: id,
-        chatId
-      });
-      let recommendedSkills = [];
-      try {
-        recommendedSkills = await recommendSkills(id);
-      } catch {
-      }
-      const data = response.data ? { ...response.data, recommendedSkills } : response.data;
-      writeJson({ ok: response.ok, data, hints: buildHints(recommendedSkills) });
-    } catch (err) {
-      failApi(err);
-    }
-  }
-});
-export {
-  claimCommand
-};
-//# sourceMappingURL=claim-25JJM4AG.js.map