@koda-sl/baker-cli 0.497.0 → 0.498.0

package/dist/chunk-ANLLW3KZ.js

@@ -0,0 +1,228 @@
+import {
+  NUMERIC_ID_REGEX
+} from "./chunk-ERSL4WZT.js";
+
+// ../api/src/ads-google/change-history.ts
+var CHANGE_SCOPES = ["detail", "summary"];
+var CHANGE_SCOPE_MAX_DAYS = {
+  detail: 30,
+  summary: 90
+};
+var DEFAULT_CHANGE_DAYS = 7;
+var MAX_CHANGE_DAYS = CHANGE_SCOPE_MAX_DAYS.summary;
+function isChangeLookbackWithinReach(days, scope) {
+  return days <= CHANGE_SCOPE_MAX_DAYS[scope];
+}
+
+// ../api/src/ads-google/keyword-planning.ts
+import { z } from "zod";
+var ISO_DATE = /^\d{4}-\d{2}-\d{2}$/;
+var micros = z.number().int().positive();
+var FORECAST_MATCH_TYPES = ["EXACT", "PHRASE", "BROAD"];
+var googleForecastBiddingSchema = z.discriminatedUnion("strategy", [
+  z.object({ strategy: z.literal("MANUAL_CPC"), maxCpcBidMicros: micros, dailyBudgetMicros: micros.optional() }),
+  z.object({
+    strategy: z.literal("MAXIMIZE_CLICKS"),
+    dailyTargetSpendMicros: micros,
+    maxCpcBidCeilingMicros: micros.optional()
+  }),
+  z.object({ strategy: z.literal("MAXIMIZE_CONVERSIONS"), dailyTargetSpendMicros: micros })
+]);
+var googleKeywordForecastRequestSchema = z.object({
+  customerId: z.string().regex(NUMERIC_ID_REGEX, "customerId must be the bare numeric customer id"),
+  managerId: z.string().optional(),
+  /** One forecast ad group per entry; most forecasts are a single group. */
+  adGroups: z.array(
+    z.object({
+      keywords: z.array(z.object({ text: z.string().trim().min(1).max(80), matchType: z.enum(FORECAST_MATCH_TYPES) })).min(1)
+    })
+  ).min(1),
+  locationIds: z.array(z.string().regex(NUMERIC_ID_REGEX)).optional(),
+  languageId: z.string().regex(NUMERIC_ID_REGEX).optional(),
+  bidding: googleForecastBiddingSchema,
+  /** Must start in the future and end within a year. Without them Baker forecasts the 30 days from tomorrow. */
+  startDate: z.string().regex(ISO_DATE).optional(),
+  endDate: z.string().regex(ISO_DATE).optional(),
+  currencyCode: z.string().length(3).optional()
+}).refine((body) => body.startDate === void 0 === (body.endDate === void 0), {
+  message: "Give both --start and --end, or neither (the forecast then covers the 30 days from tomorrow)",
+  path: ["endDate"]
+});
+var KEYWORD_FORECAST_SOURCE = "keyword_planner_forecast";
+var googleKeywordForecastResponseSchema = z.object({
+  source: z.literal(KEYWORD_FORECAST_SOURCE),
+  period: z.object({ startDate: z.string(), endDate: z.string() }),
+  forecast_clicks: z.number().nullable(),
+  forecast_cost_micros: z.number().nullable(),
+  forecast_conversions: z.number().nullable(),
+  forecast_average_cpc_micros: z.number().nullable(),
+  forecast_average_cpa_micros: z.number().nullable()
+});
+var googleAdGroupThemesRequestSchema = z.object({
+  customerId: z.string().regex(NUMERIC_ID_REGEX, "customerId must be the bare numeric customer id"),
+  managerId: z.string().optional(),
+  keywords: z.array(z.string().trim().min(1)).min(1),
+  /** Existing ad groups to sort the keywords into: numeric ids or `customers/{cid}/adGroups/{id}`. */
+  adGroups: z.array(z.string().min(1)).min(1)
+});
+var googleAdGroupThemesResponseSchema = z.object({
+  suggestions: z.array(
+    z.object({
+      keyword: z.string(),
+      suggested_keyword: z.string(),
+      match_type: z.string(),
+      ad_group: z.string(),
+      campaign: z.string()
+    })
+  ),
+  unusable_ad_groups: z.array(z.object({ ad_group: z.string(), campaign: z.string() }))
+});
+
+// ../api/src/ads-google/url-options.ts
+import { z as z2 } from "zod";
+var URL_OPTION_LEVELS = ["account", "campaign", "ad_group", "ad"];
+var googleUrlOptionValueSchema = z2.discriminatedUnion("state", [
+  z2.object({ state: z2.literal("set"), value: z2.string() }),
+  z2.object({ state: z2.literal("not_set") }),
+  z2.object({ state: z2.literal("not_read"), reason: z2.string() })
+]);
+var googleUrlOptionsRequestSchema = z2.object({
+  customerId: z2.string().regex(NUMERIC_ID_REGEX, "customerId must be the bare numeric customer id"),
+  managerId: z2.string().optional(),
+  /** Compact by default: only campaigns that actually override the account. `full` lists every campaign. */
+  full: z2.boolean().optional(),
+  skipCache: z2.boolean().optional()
+});
+var googleUrlOptionsCampaignSchema = z2.object({
+  id: z2.string(),
+  name: z2.string(),
+  status: z2.string(),
+  final_url_suffix: googleUrlOptionValueSchema,
+  tracking_url_template: googleUrlOptionValueSchema
+});
+var googleUrlOptionsAdGroupSchema = z2.object({
+  id: z2.string(),
+  name: z2.string(),
+  status: z2.string(),
+  campaign_id: z2.string(),
+  final_url_suffix: googleUrlOptionValueSchema,
+  tracking_url_template: googleUrlOptionValueSchema
+});
+var googleUrlOptionsAdSchema = z2.object({
+  id: z2.string(),
+  status: z2.string(),
+  ad_group_id: z2.string(),
+  campaign_id: z2.string(),
+  final_url_suffix: googleUrlOptionValueSchema,
+  tracking_url_template: googleUrlOptionValueSchema
+});
+var googleUrlOptionsResponseSchema = z2.object({
+  customer_id: z2.string(),
+  account: z2.object({
+    level: z2.literal("account"),
+    read: z2.boolean(),
+    final_url_suffix: googleUrlOptionValueSchema,
+    tracking_url_template: googleUrlOptionValueSchema
+  }),
+  campaigns: z2.object({
+    level: z2.literal("campaign"),
+    read: z2.boolean(),
+    /** Campaigns actually observed. 0 with `read: true` means the account has no non-removed campaigns. */
+    campaigns_read: z2.number().int().nonnegative(),
+    /** Campaigns observed to carry no override of their own — an explicit finding, not an omission. */
+    campaigns_without_override: z2.number().int().nonnegative(),
+    overrides: z2.array(googleUrlOptionsCampaignSchema),
+    /** Compact mode only: campaigns read but not listed because they carry no override. */
+    omitted: z2.number().int().nonnegative()
+  }),
+  /**
+   * Ad groups and ads that carry an override of their own — read by asking Google only for the
+   * entities whose suffix or template IS NOT NULL, so an account of thousands of ads costs one page.
+   * `read: true` with no overrides is a finding: nothing at this level overrides the levels above.
+   * `truncated` means more overriding entities exist than one page listed.
+   */
+  ad_groups: z2.object({
+    level: z2.literal("ad_group"),
+    read: z2.boolean(),
+    overrides: z2.array(googleUrlOptionsAdGroupSchema),
+    truncated: z2.boolean()
+  }),
+  ads: z2.object({
+    level: z2.literal("ad"),
+    read: z2.boolean(),
+    overrides: z2.array(googleUrlOptionsAdSchema),
+    truncated: z2.boolean()
+  }),
+  /** Levels this command could not read. Nothing here may be reported as "not configured". */
+  levels_not_read: z2.array(z2.object({ level: z2.enum(URL_OPTION_LEVELS), reason: z2.string() }))
+});
+var ACCOUNT_URL_OPTIONS_LOCATION = "Google Ads UI \u2192 Admin \u2192 Account settings \u2192 Tracking (account-level tracking template and final URL suffix)";
+var ACCOUNT_URL_OPTIONS_STAGE_COMMAND = 'baker ads google account update --customer-id <id> --final-url-suffix "utm_agency=baker"';
+function isSet(value) {
+  return value.state === "set";
+}
+function entityOverrideHints(label, plural, field, level) {
+  if (!level.read) return [];
+  const hints = [];
+  const overriding = level.overrides.filter((entity) => isSet(entity.final_url_suffix));
+  if (overriding.length > 0) {
+    const named = overriding.slice(0, 5).map((entity) => entity.name || entity.id).join(", ");
+    hints.push(
+      `${overriding.length} ${label}(s) set their own final URL suffix (${named}${overriding.length > 5 ? ", \u2026" : ""}). It REPLACES the campaign and account suffix for every click through it, so an account-wide parameter must be added to theirs too.`
+    );
+  }
+  if (level.truncated) {
+    hints.push(
+      `More ${plural} override the URL options than one page lists \u2014 read them all with \`baker ads google query\` on ${field}.final_url_suffix IS NOT NULL --all before saying which ones do.`
+    );
+  }
+  return hints;
+}
+function urlOptionsHints(report) {
+  const hints = [];
+  const { account, campaigns } = report;
+  if (!account.read) {
+    hints.push(
+      "The account level did NOT read \u2014 its URL options are unknown, not empty. Re-run before telling the user anything about account-wide tagging."
+    );
+  } else if (account.final_url_suffix.state === "not_set") {
+    hints.push(
+      `No account-level final URL suffix is set. An account-wide parameter (agency/partner tagging such as utm_agency=\u2026) belongs at the account level so it reaches every ad \u2014 stage it with \`${ACCOUNT_URL_OPTIONS_STAGE_COMMAND}\` (applies at Publish; the user sees it under ${ACCOUNT_URL_OPTIONS_LOCATION}).`
+    );
+  }
+  if (!campaigns.read) {
+    hints.push(
+      "Campaign-level URL options did NOT read \u2014 do not report that no campaign overrides exist. Re-run before concluding."
+    );
+  } else {
+    const overriding = campaigns.overrides.filter((c) => isSet(c.final_url_suffix));
+    if (overriding.length > 0) {
+      const named = overriding.slice(0, 5).map((c) => c.name || c.id).join(", ");
+      hints.push(
+        `A campaign's final URL suffix REPLACES the account-level one for that campaign \u2014 it does not merge. ${overriding.length} campaign(s) set their own (${named}${overriding.length > 5 ? ", \u2026" : ""}) and will not pick up an account-wide parameter until their own suffix carries it too. Every other campaign read here inherits the account level normally.`
+      );
+    }
+  }
+  hints.push(...entityOverrideHints("ad group", "ad groups", "ad_group", report.ad_groups));
+  hints.push(...entityOverrideHints("ad", "ads", "ad_group_ad.ad", report.ads));
+  const overridingLevelsNotRead = report.levels_not_read.filter((level) => level.level !== "account");
+  if (overridingLevelsNotRead.length > 0) {
+    hints.push(
+      `Not read at this level: ${overridingLevelsNotRead.map((l) => l.level).join(", ")}. A suffix set there still wins over the levels above it.`
+    );
+  }
+  if (campaigns.omitted > 0) {
+    hints.push(`${campaigns.omitted} campaign(s) read with no override of their own are not listed \u2014 pass --full.`);
+  }
+  return hints;
+}
+
+export {
+  CHANGE_SCOPES,
+  CHANGE_SCOPE_MAX_DAYS,
+  DEFAULT_CHANGE_DAYS,
+  isChangeLookbackWithinReach,
+  googleKeywordForecastRequestSchema,
+  urlOptionsHints
+};
+//# sourceMappingURL=chunk-ANLLW3KZ.js.map

package/dist/chunk-AQE4Q7K3.js

@@ -0,0 +1,149 @@
+import {
+  hintLines,
+  splitHints
+} from "./chunk-D5FY4FAK.js";
+import {
+  isNotConnectedError,
+  writeJsonEnvelope
+} from "./chunk-KBSWQKOT.js";
+import {
+  ApiError,
+  apiPost
+} from "./chunk-AS46I4WH.js";
+import {
+  requireChatId,
+  resolveChatId
+} from "./chunk-XOHXG5TG.js";
+
+// src/commands/tag-manager/shared.ts
+import { readFileSync } from "fs";
+function failValidation(message) {
+  writeJsonEnvelope({ ok: false, error: { code: "VALIDATION_ERROR", message } });
+  process.exit(1);
+}
+function requireTarget(args, entity) {
+  const positional = Array.isArray(args._) ? args._[0] : void 0;
+  const target = args.id ?? args.target ?? positional;
+  if (typeof target !== "string" || target.length === 0) {
+    failValidation(`pass the ${entity} id or path as the positional argument`);
+  }
+  return target;
+}
+function loadJsonArg(args, flag = "json") {
+  const inline = args[flag];
+  const file = args.file;
+  const raw = typeof file === "string" && file.length > 0 ? readFileSync(file, "utf8") : typeof inline === "string" && inline.length > 0 ? inline : void 0;
+  if (raw === void 0) {
+    failValidation(`pass --${flag} with inline JSON or --file with a path to a JSON file`);
+  }
+  try {
+    const parsed = JSON.parse(raw);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      failValidation(`--${flag} must be a JSON object`);
+    }
+    return parsed;
+  } catch {
+    return failValidation(`--${flag} is not valid JSON`);
+  }
+}
+var RETRYABLE_CODES = /* @__PURE__ */ new Set(["RATE_LIMITED", "UNAVAILABLE", "INTERNAL_ERROR", "NETWORK_ERROR", "TIMEOUT"]);
+function handleError(err) {
+  if (err instanceof ApiError) {
+    writeJsonEnvelope({
+      ok: false,
+      error: {
+        code: err.code,
+        message: err.message,
+        ...err.code === "UNAUTHORIZED" || err.code === "FORBIDDEN" && isNotConnectedError(err.code, err.message) ? {
+          fix: {
+            action: "request_connection",
+            explanation: 'Tag Manager is not connected for this company yet, or no container has been picked. Don\'t send the user to Settings \u2014 call the `request_connection` tool with { platform: "google-tag-manager", reason } and they connect and pick their containers (they can pick more than one) from inside the chat. `request_tag_input` is not the route: that form manages the container snippet on the site, not what runs inside the container, and it cannot pick a container. If the `request_connection` call fails, say so plainly and give the exact route: dashboard \u2192 Brain \u2192 Integrations \u2192 Platforms \u2192 Google Tag Manager, where they also pick the container. Then carry on with the rest of the task.'
+          }
+        } : {},
+        retryable: RETRYABLE_CODES.has(err.code)
+      }
+    });
+    process.exit(1);
+  }
+  writeJsonEnvelope({ ok: false, error: { code: "NETWORK_ERROR", message: "Unexpected error", retryable: true } });
+  process.exit(1);
+}
+var TAG_MANAGER_TIMEOUT_MS = 18e4;
+var STAGE_HINTS = [
+  "Staged only \u2014 nothing has changed in Tag Manager yet. These apply when the chat completes, in dependency order, and close as a Tag Manager version that is then published, so they do go live on the user's site. Say the changes are ready and go live when they publish \u2014 not that they are live already."
+];
+async function stageOp(op) {
+  const chatId = requireChatId();
+  try {
+    const { data, hints } = splitHints(
+      await apiPost(
+        "/api/tag-manager/draft/stage",
+        { chatId, op },
+        { timeoutMs: TAG_MANAGER_TIMEOUT_MS }
+      )
+    );
+    writeJsonEnvelope({ ok: true, data, hints: [...hints, ...STAGE_HINTS] });
+  } catch (err) {
+    handleError(err);
+  }
+}
+async function draftAction(path, body, chat) {
+  const chatId = resolveChatId(chat);
+  try {
+    const { data, hints } = splitHints(
+      await apiPost(path, { chatId, ...body }, { timeoutMs: TAG_MANAGER_TIMEOUT_MS })
+    );
+    writeJsonEnvelope({ ok: true, data, ...hints.length > 0 ? { hints } : {} });
+    return data;
+  } catch (err) {
+    handleError(err);
+  }
+}
+function renderDraft(response) {
+  if (response.count === 0) {
+    return "No Tag Manager changes staged on this chat.";
+  }
+  const lines = [
+    response.status === "discarded" ? `${response.count} Tag Manager change(s) discarded with their chat \u2014 none will apply` : `${response.count} staged Tag Manager change(s)`,
+    ...response.ops.flatMap((op) => {
+      const status = op.result ? ` [${op.result.status}]` : "";
+      return [`  ${op.ref}  ${op.summary}${status}`, ...(op.warnings ?? []).map((warning) => `    \u26A0 ${warning}`)];
+    })
+  ];
+  if (response.versionId) {
+    lines.push(
+      "",
+      response.published ? `Applied and published as Tag Manager version ${response.versionId}. These changes are live on the site.` : `Applied into Tag Manager version ${response.versionId}. It is NOT published \u2014 publish it in Tag Manager to go live.`
+    );
+  }
+  if (response.compilerError) {
+    lines.push("", `Tag Manager reported a problem building the version: ${response.compilerError}`);
+  }
+  return lines.join("\n");
+}
+async function draftList(json, chat) {
+  const chatId = resolveChatId(chat);
+  try {
+    const response = await apiPost("/api/tag-manager/draft", { chatId });
+    const { data, hints } = splitHints(response);
+    if (json) {
+      writeJsonEnvelope({ ok: true, data, ...hints.length > 0 ? { hints } : {} });
+      return;
+    }
+    process.stdout.write(`${renderDraft(data)}${hintLines(response)}
+`);
+  } catch (err) {
+    handleError(err);
+  }
+}
+
+export {
+  requireTarget,
+  loadJsonArg,
+  handleError,
+  TAG_MANAGER_TIMEOUT_MS,
+  stageOp,
+  draftAction,
+  draftList
+};
+//# sourceMappingURL=chunk-AQE4Q7K3.js.map

package/dist/chunk-AQE4Q7K3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/tag-manager/shared.ts"],"sourcesContent":["import { readFileSync } from \"node:fs\";\nimport type {\n  TagManagerDraftListResponse,\n  TagManagerDraftRemoveResponse,\n  TagManagerDraftShowResponse,\n  TagManagerDraftStageResponse,\n} from \"@baker/api/tag-manager\";\nimport { ApiError, apiPost } from \"../../client.ts\";\nimport { requireChatId, resolveChatId } from \"../../env.ts\";\nimport { isNotConnectedError } from \"../../error-handler.ts\";\nimport { hintLines, splitHints } from \"../ads/hints.ts\";\nimport { writeJsonEnvelope } from \"../ads/output.ts\";\n\n/**\n * Shared plumbing for the staged Tag Manager commands. Writes NEVER hit the\n * Tag Manager API directly: every command stages an op against this chat's\n * draft, and the whole draft applies when the chat is published — into the\n * container's working workspace, in dependency order, closing with a container\n * version that is published when every change applies cleanly.\n */\n\nexport function failValidation(message: string): never {\n  writeJsonEnvelope({ ok: false, error: { code: \"VALIDATION_ERROR\", message } });\n  process.exit(1);\n}\n\nexport function requireTarget(args: Record<string, unknown>, entity: string): string {\n  const positional = Array.isArray(args._) ? args._[0] : undefined;\n  const target = args.id ?? args.target ?? positional;\n  if (typeof target !== \"string\" || target.length === 0) {\n    failValidation(`pass the ${entity} id or path as the positional argument`);\n  }\n  return target;\n}\n\n/** `--json '<inline>'` or `--file <path>` → a parsed object. */\nexport function loadJsonArg(args: Record<string, unknown>, flag: \"patch\" | \"json\" = \"json\"): Record<string, unknown> {\n  const inline = args[flag];\n  const file = args.file;\n  const raw =\n    typeof file === \"string\" && file.length > 0\n      ? readFileSync(file, \"utf8\")\n      : typeof inline === \"string\" && inline.length > 0\n        ? inline\n        : undefined;\n  if (raw === undefined) {\n    failValidation(`pass --${flag} with inline JSON or --file with a path to a JSON file`);\n  }\n  try {\n    const parsed: unknown = JSON.parse(raw);\n    if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n      failValidation(`--${flag} must be a JSON object`);\n    }\n    return parsed as Record<string, unknown>;\n  } catch {\n    return failValidation(`--${flag} is not valid JSON`);\n  }\n}\n\n/**\n * Transient by nature — worth one more go. Saying so is the difference between\n * the agent retrying a blip and abandoning a multi-step job over one. Every\n * other code is a real answer that a second call returns again.\n */\nconst RETRYABLE_CODES = new Set([\"RATE_LIMITED\", \"UNAVAILABLE\", \"INTERNAL_ERROR\", \"NETWORK_ERROR\", \"TIMEOUT\"]);\n\n/**\n * The one error shape for the whole family.\n *\n * Only the 403s raised while resolving the company's container mean \"not\n * connected\", which is why the fix is keyed to the message and not just the\n * status: other 403s are real permission refusals a reconnect cannot fix.\n * `NOT_FOUND` deliberately does NOT trigger the connect form either — it is also\n * what a missing tag returns, and asking the user to reconnect a working\n * connection because a tag id was wrong wastes their time and fixes nothing.\n */\nexport function handleError(err: unknown): never {\n  if (err instanceof ApiError) {\n    writeJsonEnvelope({\n      ok: false,\n      error: {\n        code: err.code,\n        message: err.message,\n        ...(err.code === \"UNAUTHORIZED\" || (err.code === \"FORBIDDEN\" && isNotConnectedError(err.code, err.message))\n          ? {\n              fix: {\n                action: \"request_connection\",\n                explanation:\n                  \"Tag Manager is not connected for this company yet, or no container has been picked. Don't send \" +\n                  \"the user to Settings — call the `request_connection` tool with \" +\n                  '{ platform: \"google-tag-manager\", reason } and they connect and pick their containers (they can ' +\n                  \"pick more than one) from inside the chat. `request_tag_input` is not the route: that form \" +\n                  \"manages the container snippet on the \" +\n                  \"site, not what runs inside the container, and it cannot pick a container. If the \" +\n                  \"`request_connection` call fails, say so plainly and give the exact route: dashboard → Brain → \" +\n                  \"Integrations → Platforms → Google Tag Manager, where they also pick the container. Then carry on \" +\n                  \"with the rest of the task.\",\n              },\n            }\n          : {}),\n        retryable: RETRYABLE_CODES.has(err.code),\n      },\n    });\n    process.exit(1);\n  }\n  writeJsonEnvelope({ ok: false, error: { code: \"NETWORK_ERROR\", message: \"Unexpected error\", retryable: true } });\n  process.exit(1);\n}\n\n/**\n * Tag Manager allows Baker a few requests a second across every company, so a\n * call that reads the container can queue behind another company's publish. It\n * still finishes on the server, so giving up early only invites a repeat.\n */\nexport const TAG_MANAGER_TIMEOUT_MS = 180_000;\n\n/** Nudges returned after a stage so the agent's next step is obvious. */\nconst STAGE_HINTS = [\n  \"Staged only — nothing has changed in Tag Manager yet. These apply when the chat completes, in dependency \" +\n    \"order, and close as a Tag Manager version that is then published, so they do go live on the user's site. \" +\n    \"Say the changes are ready and go live when they publish — not that they are live already.\",\n];\n\nexport async function stageOp(op: Record<string, unknown>): Promise<void> {\n  const chatId = requireChatId();\n  try {\n    const { data, hints } = splitHints(\n      await apiPost<TagManagerDraftStageResponse>(\n        \"/api/tag-manager/draft/stage\",\n        { chatId, op },\n        { timeoutMs: TAG_MANAGER_TIMEOUT_MS },\n      ),\n    );\n    writeJsonEnvelope({ ok: true, data, hints: [...hints, ...STAGE_HINTS] });\n  } catch (err) {\n    handleError(err);\n  }\n}\n\nexport async function draftAction(\n  path: string,\n  body: Record<string, unknown>,\n  chat?: unknown,\n): Promise<TagManagerDraftRemoveResponse | TagManagerDraftShowResponse | Record<string, unknown>> {\n  const chatId = resolveChatId(chat);\n  try {\n    const { data, hints } = splitHints(\n      await apiPost<Record<string, unknown>>(path, { chatId, ...body }, { timeoutMs: TAG_MANAGER_TIMEOUT_MS }),\n    );\n    writeJsonEnvelope({ ok: true, data, ...(hints.length > 0 ? { hints } : {}) });\n    return data;\n  } catch (err) {\n    handleError(err);\n  }\n}\n\n/** A compact, readable view of everything staged on this chat. */\nexport function renderDraft(response: TagManagerDraftListResponse): string {\n  if (response.count === 0) {\n    return \"No Tag Manager changes staged on this chat.\";\n  }\n  const lines = [\n    response.status === \"discarded\"\n      ? `${response.count} Tag Manager change(s) discarded with their chat — none will apply`\n      : `${response.count} staged Tag Manager change(s)`,\n    ...response.ops.flatMap((op) => {\n      const status = op.result ? ` [${op.result.status}]` : \"\";\n      return [`  ${op.ref}  ${op.summary}${status}`, ...(op.warnings ?? []).map((warning) => `    ⚠ ${warning}`)];\n    }),\n  ];\n  if (response.versionId) {\n    lines.push(\n      \"\",\n      response.published\n        ? `Applied and published as Tag Manager version ${response.versionId}. These changes are live on the site.`\n        : `Applied into Tag Manager version ${response.versionId}. It is NOT published — publish it in Tag Manager to go live.`,\n    );\n  }\n  if (response.compilerError) {\n    lines.push(\"\", `Tag Manager reported a problem building the version: ${response.compilerError}`);\n  }\n  return lines.join(\"\\n\");\n}\n\nexport async function draftList(json: boolean, chat?: unknown): Promise<void> {\n  const chatId = resolveChatId(chat);\n  try {\n    const response = await apiPost<TagManagerDraftListResponse>(\"/api/tag-manager/draft\", { chatId });\n    const { data, hints } = splitHints(response);\n    if (json) {\n      writeJsonEnvelope({ ok: true, data, ...(hints.length > 0 ? { hints } : {}) });\n      return;\n    }\n    process.stdout.write(`${renderDraft(data)}${hintLines(response)}\\n`);\n  } catch (err) {\n    handleError(err);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,SAAS,oBAAoB;AAqBtB,SAAS,eAAe,SAAwB;AACrD,oBAAkB,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,oBAAoB,QAAQ,EAAE,CAAC;AAC7E,UAAQ,KAAK,CAAC;AAChB;AAEO,SAAS,cAAc,MAA+B,QAAwB;AACnF,QAAM,aAAa,MAAM,QAAQ,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI;AACvD,QAAM,SAAS,KAAK,MAAM,KAAK,UAAU;AACzC,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,GAAG;AACrD,mBAAe,YAAY,MAAM,wCAAwC;AAAA,EAC3E;AACA,SAAO;AACT;AAGO,SAAS,YAAY,MAA+B,OAAyB,QAAiC;AACnH,QAAM,SAAS,KAAK,IAAI;AACxB,QAAM,OAAO,KAAK;AAClB,QAAM,MACJ,OAAO,SAAS,YAAY,KAAK,SAAS,IACtC,aAAa,MAAM,MAAM,IACzB,OAAO,WAAW,YAAY,OAAO,SAAS,IAC5C,SACA;AACR,MAAI,QAAQ,QAAW;AACrB,mBAAe,UAAU,IAAI,wDAAwD;AAAA,EACvF;AACA,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,GAAG;AACtC,QAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAClE,qBAAe,KAAK,IAAI,wBAAwB;AAAA,IAClD;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO,eAAe,KAAK,IAAI,oBAAoB;AAAA,EACrD;AACF;AAOA,IAAM,kBAAkB,oBAAI,IAAI,CAAC,gBAAgB,eAAe,kBAAkB,iBAAiB,SAAS,CAAC;AAYtG,SAAS,YAAY,KAAqB;AAC/C,MAAI,eAAe,UAAU;AAC3B,sBAAkB;AAAA,MAChB,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,MAAM,IAAI;AAAA,QACV,SAAS,IAAI;AAAA,QACb,GAAI,IAAI,SAAS,kBAAmB,IAAI,SAAS,eAAe,oBAAoB,IAAI,MAAM,IAAI,OAAO,IACrG;AAAA,UACE,KAAK;AAAA,YACH,QAAQ;AAAA,YACR,aACE;AAAA,UASJ;AAAA,QACF,IACA,CAAC;AAAA,QACL,WAAW,gBAAgB,IAAI,IAAI,IAAI;AAAA,MACzC;AAAA,IACF,CAAC;AACD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,oBAAkB,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,oBAAoB,WAAW,KAAK,EAAE,CAAC;AAC/G,UAAQ,KAAK,CAAC;AAChB;AAOO,IAAM,yBAAyB;AAGtC,IAAM,cAAc;AAAA,EAClB;AAGF;AAEA,eAAsB,QAAQ,IAA4C;AACxE,QAAM,SAAS,cAAc;AAC7B,MAAI;AACF,UAAM,EAAE,MAAM,MAAM,IAAI;AAAA,MACtB,MAAM;AAAA,QACJ;AAAA,QACA,EAAE,QAAQ,GAAG;AAAA,QACb,EAAE,WAAW,uBAAuB;AAAA,MACtC;AAAA,IACF;AACA,sBAAkB,EAAE,IAAI,MAAM,MAAM,OAAO,CAAC,GAAG,OAAO,GAAG,WAAW,EAAE,CAAC;AAAA,EACzE,SAAS,KAAK;AACZ,gBAAY,GAAG;AAAA,EACjB;AACF;AAEA,eAAsB,YACpB,MACA,MACA,MACgG;AAChG,QAAM,SAAS,cAAc,IAAI;AACjC,MAAI;AACF,UAAM,EAAE,MAAM,MAAM,IAAI;AAAA,MACtB,MAAM,QAAiC,MAAM,EAAE,QAAQ,GAAG,KAAK,GAAG,EAAE,WAAW,uBAAuB,CAAC;AAAA,IACzG;AACA,sBAAkB,EAAE,IAAI,MAAM,MAAM,GAAI,MAAM,SAAS,IAAI,EAAE,MAAM,IAAI,CAAC,EAAG,CAAC;AAC5E,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,gBAAY,GAAG;AAAA,EACjB;AACF;AAGO,SAAS,YAAY,UAA+C;AACzE,MAAI,SAAS,UAAU,GAAG;AACxB,WAAO;AAAA,EACT;AACA,QAAM,QAAQ;AAAA,IACZ,SAAS,WAAW,cAChB,GAAG,SAAS,KAAK,4EACjB,GAAG,SAAS,KAAK;AAAA,IACrB,GAAG,SAAS,IAAI,QAAQ,CAAC,OAAO;AAC9B,YAAM,SAAS,GAAG,SAAS,KAAK,GAAG,OAAO,MAAM,MAAM;AACtD,aAAO,CAAC,KAAK,GAAG,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,IAAI,IAAI,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC,YAAY,cAAS,OAAO,EAAE,CAAC;AAAA,IAC5G,CAAC;AAAA,EACH;AACA,MAAI,SAAS,WAAW;AACtB,UAAM;AAAA,MACJ;AAAA,MACA,SAAS,YACL,gDAAgD,SAAS,SAAS,0CAClE,oCAAoC,SAAS,SAAS;AAAA,IAC5D;AAAA,EACF;AACA,MAAI,SAAS,eAAe;AAC1B,UAAM,KAAK,IAAI,wDAAwD,SAAS,aAAa,EAAE;AAAA,EACjG;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,eAAsB,UAAU,MAAe,MAA+B;AAC5E,QAAM,SAAS,cAAc,IAAI;AACjC,MAAI;AACF,UAAM,WAAW,MAAM,QAAqC,0BAA0B,EAAE,OAAO,CAAC;AAChG,UAAM,EAAE,MAAM,MAAM,IAAI,WAAW,QAAQ;AAC3C,QAAI,MAAM;AACR,wBAAkB,EAAE,IAAI,MAAM,MAAM,GAAI,MAAM,SAAS,IAAI,EAAE,MAAM,IAAI,CAAC,EAAG,CAAC;AAC5E;AAAA,IACF;AACA,YAAQ,OAAO,MAAM,GAAG,YAAY,IAAI,CAAC,GAAG,UAAU,QAAQ,CAAC;AAAA,CAAI;AAAA,EACrE,SAAS,KAAK;AACZ,gBAAY,GAAG;AAAA,EACjB;AACF;","names":[]}

package/dist/chunk-AS46I4WH.js

@@ -0,0 +1,220 @@
+import {
+  debugLogHttp,
+  readBodyForLog
+} from "./chunk-6UW4J6IU.js";
+import {
+  getEnv,
+  optionalTargetCompany
+} from "./chunk-XOHXG5TG.js";
+
+// src/client.ts
+var MAX_RATE_LIMIT_RETRIES = 3;
+var MAX_TOTAL_WAIT_MS = 2 * 60 * 1e3;
+async function fetchWithRateLimitRetry(url, init) {
+  let totalWaited = 0;
+  for (let attempt = 0; attempt <= MAX_RATE_LIMIT_RETRIES; attempt++) {
+    const response = await fetch(url, init);
+    if (response.status !== 429 || attempt >= MAX_RATE_LIMIT_RETRIES) {
+      return response;
+    }
+    const retryAfterHeader = response.headers.get("Retry-After");
+    const waitMs = retryAfterHeader ? Number(retryAfterHeader) * 1e3 : 2e3 * 2 ** attempt;
+    if (totalWaited + waitMs > MAX_TOTAL_WAIT_MS) {
+      return response;
+    }
+    totalWaited += waitMs;
+    await new Promise((resolve) => setTimeout(resolve, waitMs));
+  }
+  return fetch(url, init);
+}
+var ApiError = class extends Error {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.name = "ApiError";
+    this.code = code;
+  }
+};
+var CONVEX_ID_RE = /^[a-zA-Z0-9_]+$/;
+function hasControlCharacters(value) {
+  for (let i = 0; i < value.length; i++) {
+    const code = value.charCodeAt(i);
+    if (code < 32 && code !== 9 && code !== 10 && code !== 13) {
+      return true;
+    }
+  }
+  return false;
+}
+function validateStringValue(value) {
+  if (hasControlCharacters(value)) {
+    throw new ApiError("VALIDATION_ERROR", "String value contains invalid control characters");
+  }
+}
+function validateConvexId(id) {
+  if (!CONVEX_ID_RE.test(id)) {
+    throw new ApiError("VALIDATION_ERROR", `Invalid ID format: "${id}". Expected alphanumeric string.`);
+  }
+}
+function sanitizeParams(params) {
+  const sanitized = {};
+  for (const [key, value] of Object.entries(params)) {
+    validateStringValue(value);
+    sanitized[key] = value;
+  }
+  return sanitized;
+}
+function chatHeader() {
+  const { BAKER_CHAT_ID: chatId, BAKER_THREAD_ID: threadId, BAKER_KEY_SCOPE: keyScope } = getEnv();
+  const targetCompany = optionalTargetCompany();
+  return {
+    ...chatId ? { "x-baker-chat-id": chatId } : {},
+    ...threadId ? { "x-baker-thread-id": threadId } : {},
+    // Only ever narrows the key (`KEY_SCOPE_HEADER` in the backend).
+    ...keyScope ? { "x-baker-key-scope": keyScope } : {},
+    // `--company`: read another company of the organization (`TARGET_COMPANY_HEADER`).
+    ...targetCompany ? { "x-baker-company": targetCompany } : {}
+  };
+}
+function mapHttpError(status) {
+  if (status === 401) {
+    return "UNAUTHORIZED";
+  }
+  if (status === 403) {
+    return "FORBIDDEN";
+  }
+  if (status === 404) {
+    return "NOT_FOUND";
+  }
+  if (status === 422 || status === 400) {
+    return "VALIDATION_ERROR";
+  }
+  if (status === 409) {
+    return "CONFLICT";
+  }
+  if (status === 429) {
+    return "RATE_LIMITED";
+  }
+  if (status === 503) {
+    return "UNAVAILABLE";
+  }
+  return "INTERNAL_ERROR";
+}
+async function handleResponse(response) {
+  const body = await response.text();
+  if (!response.ok) {
+    let message = `HTTP ${response.status}: ${response.statusText}`;
+    try {
+      const parsed = JSON.parse(body);
+      if (typeof parsed.error === "string") {
+        message = parsed.error;
+      } else if (parsed.error?.message) {
+        message = parsed.error.message;
+      } else if (parsed.message) {
+        message = parsed.message;
+      }
+    } catch {
+    }
+    throw new ApiError(mapHttpError(response.status), message);
+  }
+  try {
+    return JSON.parse(body);
+  } catch {
+    throw new ApiError("INTERNAL_ERROR", "Failed to parse API response as JSON");
+  }
+}
+async function apiGetWithHeaders(path, params) {
+  const env = getEnv();
+  const url = new URL(path, env.BAKER_API_URL);
+  if (params) {
+    const clean = sanitizeParams(params);
+    for (const [key, value] of Object.entries(clean)) {
+      url.searchParams.set(key, value);
+    }
+  }
+  const urlStr = url.toString();
+  const startedAt = Date.now();
+  let response;
+  try {
+    response = await fetchWithRateLimitRetry(urlStr, {
+      method: "GET",
+      headers: {
+        Authorization: `Bearer ${env.BAKER_API_KEY}`,
+        Accept: "application/json",
+        ...chatHeader()
+      },
+      signal: AbortSignal.timeout(6e4)
+    });
+  } catch (err) {
+    debugLogHttp({ source: "cli", method: "GET", url: urlStr, durationMs: Date.now() - startedAt, error: err });
+    if (err instanceof Error && (err.name === "TimeoutError" || err.name === "AbortError")) {
+      throw new ApiError("TIMEOUT", "Request timed out after 60 seconds");
+    }
+    throw new ApiError("NETWORK_ERROR", `Request failed: ${err instanceof Error ? err.message : "Unknown error"}`);
+  }
+  debugLogHttp({
+    source: "cli",
+    method: "GET",
+    url: urlStr,
+    status: response.status,
+    ok: response.ok,
+    responseBody: await readBodyForLog(response),
+    durationMs: Date.now() - startedAt
+  });
+  return { data: await handleResponse(response), headers: response.headers };
+}
+async function apiGet(path, params) {
+  return (await apiGetWithHeaders(path, params)).data;
+}
+async function apiPost(path, body, opts) {
+  const env = getEnv();
+  const timeoutMs = opts?.timeoutMs ?? 6e4;
+  const urlStr = new URL(path, env.BAKER_API_URL).toString();
+  const startedAt = Date.now();
+  let response;
+  try {
+    response = await fetchWithRateLimitRetry(urlStr, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${env.BAKER_API_KEY}`,
+        "Content-Type": "application/json",
+        Accept: "application/json",
+        ...chatHeader()
+      },
+      body: JSON.stringify(body),
+      signal: AbortSignal.timeout(timeoutMs)
+    });
+  } catch (err) {
+    debugLogHttp({
+      source: "cli",
+      method: "POST",
+      url: urlStr,
+      requestBody: body,
+      durationMs: Date.now() - startedAt,
+      error: err
+    });
+    if (err instanceof Error && (err.name === "TimeoutError" || err.name === "AbortError")) {
+      throw new ApiError("TIMEOUT", `Request timed out after ${Math.round(timeoutMs / 1e3)} seconds`);
+    }
+    throw new ApiError("NETWORK_ERROR", `Request failed: ${err instanceof Error ? err.message : "Unknown error"}`);
+  }
+  debugLogHttp({
+    source: "cli",
+    method: "POST",
+    url: urlStr,
+    requestBody: body,
+    status: response.status,
+    ok: response.ok,
+    responseBody: await readBodyForLog(response),
+    durationMs: Date.now() - startedAt
+  });
+  return handleResponse(response);
+}
+
+export {
+  ApiError,
+  validateConvexId,
+  apiGetWithHeaders,
+  apiGet,
+  apiPost
+};
+//# sourceMappingURL=chunk-AS46I4WH.js.map