@koda-sl/baker-cli 0.510.0 → 0.511.0-dev.2d26314a2

package/dist/chunk-UUCFUACM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/scheduled-agents/shared.ts"],"sourcesContent":["import {\n  AUTO_PUBLISH_REFUSAL,\n  firstTimes,\n  isTriggerKind,\n  MAX_AI_CONDITION_CHARS,\n  parseConditionsExpression,\n  TRIGGER_KIND_IDS,\n  TRIGGER_KINDS,\n  TRIGGER_TARGET_FIELD_IDS,\n  TRIGGER_TARGET_FIELDS,\n  TRIGGER_TARGETS,\n  type TriggerKind,\n  type TriggerTargetField,\n} from \"@baker/api\";\nimport { type AgentProfile, agentProfile } from \"../../agent-profile.ts\";\nimport { ApiError, validateConvexId } from \"../../client.ts\";\nimport { getEnv } from \"../../env.ts\";\nimport { writeJson } from \"../../output.ts\";\n\nconst TEMP_SCHEDULED_AGENT_PREFIX = \"temp_agent_\";\nconst TEMP_ID_PREFIX = \"temp_\";\n\nexport function writeOk<T = null>(data?: T, hints?: string[]): void {\n  writeJson({ ok: true, data: (data ?? null) as T, ...(hints && hints.length > 0 ? { hints } : {}) });\n}\n\nexport function failValidation(message: string): never {\n  writeJson({ ok: false, error: { code: \"VALIDATION_ERROR\", message } });\n  process.exit(1);\n}\n\nexport function failApi(err: unknown): never {\n  if (err instanceof ApiError) {\n    writeJson({ ok: false, error: { code: err.code, message: err.message } });\n    process.exit(1);\n  }\n  if (err instanceof Error) {\n    writeJson({ ok: false, error: { code: \"INTERNAL_ERROR\", message: err.message } });\n    process.exit(1);\n  }\n  writeJson({ ok: false, error: { code: \"INTERNAL_ERROR\", message: \"Unexpected error\" } });\n  process.exit(1);\n}\n\n/**\n * `--auto-publish`, declared only to be refused. The dashboard's \"Publish its\n * work on its own\" is a standing authorization only a person can grant, and\n * citty drops a flag it does not declare — an agent asking for it would stage\n * the item and believe the switch was on.\n */\nexport const AUTO_PUBLISH_ARG = {\n  \"auto-publish\": {\n    type: \"string\" as const,\n    description:\n      \"Not available to the agent: publishing every run unreviewed is switched on by the user, on the item, after this chat is published. Passing it is refused and tells you what to ask them.\",\n    required: false,\n  },\n};\n\nexport function refuseAutoPublish(args: Record<string, unknown>): void {\n  if (args[\"auto-publish\"] === undefined) {\n    return;\n  }\n  writeJson({\n    ok: false,\n    error: {\n      code: \"FORBIDDEN\",\n      message: AUTO_PUBLISH_REFUSAL,\n      fix: {\n        action: \"ask_user\",\n        explanation:\n          'Run the command again without --auto-publish. After this chat is published, ask the user to open the item in Scheduled agents and switch on \"Publish its work on its own\" under \"When a run finishes\" — until then each run waits for their review.',\n      },\n    },\n  });\n  process.exit(1);\n}\n\nexport function isTempScheduledAgentId(id: string): boolean {\n  return id.startsWith(TEMP_SCHEDULED_AGENT_PREFIX);\n}\n\nfunction isOtherTempId(id: string): boolean {\n  return id.startsWith(TEMP_ID_PREFIX) && !isTempScheduledAgentId(id);\n}\n\nexport function validateScheduledAgentRef(ref: string): void {\n  if (isOtherTempId(ref)) {\n    failValidation(`Scheduled agent temp IDs must start with ${TEMP_SCHEDULED_AGENT_PREFIX}.`);\n  }\n  if (!isTempScheduledAgentId(ref)) {\n    validateConvexId(ref);\n  }\n}\n\n/**\n * Every trigger, named for the agent reading `--help` or `baker schema`.\n *\n * Built from `@baker/api`, which the backend and the dashboard read too, so the\n * wording the CLI puts in front of the agent is the wording the product puts in\n * front of the marketer. The CLI kept a hand-copy of the old modes for exactly\n * one release and it had already drifted.\n */\nexport const TRIGGER_ARG_DESCRIPTION = `What makes this run. ${TRIGGER_KIND_IDS.map(\n  (id) => `${id}: ${TRIGGER_KINDS[id].description}`,\n).join(\" \")} For the two time ones, pass --cron or --run-at instead and the kind is implied.`;\n\nexport const TRIGGER_KIND_LIST = [...TRIGGER_KIND_IDS];\n\n/**\n * The narrowing flags, in one place because `create` and `update` both take all\n * of them and a flag added to one and not the other is a trigger an agent can\n * set and then never change.\n */\nconst NARROWING_DESCRIPTIONS: Record<TriggerTargetField, string> = {\n  eventName:\n    \"With --trigger event.received: only this event name (a source's name, or one your site sends). Omit it to run on any event.\",\n  toolkit: \"With --trigger app.event (required): the connected tool, by its slug — gmail, slack, googlesheets.\",\n  account:\n    \"With --trigger app.event (required): which connected account of that tool, by id (a tool can be connected more than once).\",\n  appEvent:\n    \"With --trigger app.event (required): what happens in the tool, by the tool's own id — GMAIL_NEW_GMAIL_MESSAGE. `targets --field appEvent --app <tool>` lists them with the settings each needs.\",\n  provider:\n    \"With --trigger connection.created, connection.removed or connection.needs_reconnect: only this tool (google-ads, hubspot, meta, or a connected tool's slug such as slack). Omit it for any tool.\",\n  flowId:\n    \"With --trigger form.submitted or flow.step.submitted: which Form, by slug. Omit it on form.submitted for any Form.\",\n  stepId:\n    \"With --trigger flow.step.submitted: which step of that Form, by id — `targets --field stepId --form <slug>` lists them by name.\",\n  page: \"With --trigger landing.created or landing.published: only this page, by slug. Omit it for any page.\",\n  tag: \"With --trigger task.created, task.claimed, task.completed, landing.created or landing.published: only ones carrying this tag. Omit it for any.\",\n  experimentId:\n    'With --trigger experiment.decided, experiment.ended or experiment.concluded: only this test. Omit it for any test. Not for experiment.started — narrow that with --when \"page = <page>\".',\n  taskId:\n    \"With --trigger task.claimed or task.completed: only this Task, by id (a temp_ id of a Task staged in this chat works too). Omit it for any Task.\",\n  agentId:\n    \"With --trigger session.published, session.publish_failed or session.publish_incomplete: only the runs of this scheduled agent, by id (a temp_agent_ id staged in this chat works too). Omit it for any agent's work.\",\n  platform:\n    \"With --trigger session.publish_incomplete: only when this platform's changes did not all land — google-ads, meta-ads, linkedin-ads, x-ads, chatgpt-ads, tag-manager, ga4 or shopify. Omit it for any.\",\n  collection: \"With --trigger knowledge.updated: only this Knowledge collection. Omit it for any of them.\",\n  sourceId: \"With --trigger review.received: only reviews from this review source, by id. Omit it for any source.\",\n  advertiserId: \"With --trigger advertiser.new_ads: only this followed advertiser, by id. Omit it for any of them.\",\n  adAccount:\n    \"With --trigger ad_alert.opened, ad_alert.claimed, ad_alert.fixed or ad_alert.closed: only alerts on this ad account, as <platform>:<ad account id> (meta:123). Omit it for any account.\",\n  alertRule:\n    'With --trigger ad_alert.opened, ad_alert.claimed, ad_alert.fixed or ad_alert.closed: only this kind of alert, by the rule `baker ads performance attention` names (budget_cut, efficiency_degraded, tracking_broke). Omit it for any. Narrow by severity with --when \"severity = critical\".',\n  socialAccount:\n    \"With --trigger social.post_published: only posts by this followed account, by its key (linkedin:in/jacintofleta, instagram:nike — `baker media-sources list`). Omit it for any account.\",\n  personRole:\n    \"With --trigger social.post_published: only posts by people with this role — ceo, founder, cto, cmo, head_of_sales, sales, marketing, employee, creator. Omit it for any account, pages included.\",\n};\n\n/**\n * One flag per thing a trigger can be pointed at, read off the same table the\n * dashboard's picker offers. `baker scheduled-agents targets` lists the values\n * each one takes, so no flag needs an id the agent has to guess.\n */\nexport const NARROWING_ARGS = {\n  ...(Object.fromEntries(\n    TRIGGER_TARGET_FIELD_IDS.map((field) => [\n      TRIGGER_TARGET_FIELDS[field].flag,\n      {\n        type: \"string\" as const,\n        description: `${NARROWING_DESCRIPTIONS[field]} \\`baker scheduled-agents targets --trigger <kind> --field ${field}\\` lists the values.`,\n        required: false,\n      },\n    ]),\n  ) as Record<string, { type: \"string\"; description: string; required: false }>),\n  config: {\n    type: \"string\" as const,\n    description:\n      'With --trigger app.event: the event\\'s own settings as a JSON object — they filter inside the tool, before anything is sent. A Gmail search (\\'{\"query\":\"from:ana@acme.com\"}\\'), a label, a Slack channel, a GitHub repository (\\'{\"owner\":\"acme\",\"repo\":\"site\"}\\'). `targets --field appEvent --app <tool> --event <id>` lists each setting with its examples.',\n    required: false,\n  },\n};\n\n/**\n * A one-off run time, checked before it can be staged.\n *\n * A time that has already been overtaken cannot run, and until this existed\n * nothing said so: the backend took it, the change list showed the item, and\n * Publish created it switched off. Caught here it costs a round trip and the\n * user can still be asked what time they meant — converting a local time to UTC\n * the wrong way round is how it usually gets there.\n */\nfunction validateRunAt(runAt: string): void {\n  if (!runAt.endsWith(\"Z\")) {\n    failValidation(\"--run-at must be an ISO UTC timestamp ending in Z.\");\n  }\n  const parsed = Date.parse(runAt);\n  if (!Number.isFinite(parsed)) {\n    failValidation(\"--run-at must be a valid ISO timestamp.\");\n  }\n  if (parsed <= Date.now()) {\n    failValidation(\n      `--run-at ${runAt} has already passed. A one-off item only runs at a time still to come — pass a later ISO UTC timestamp, and check which timezone you converted from if you worked it out from a local time.`,\n    );\n  }\n}\n\nexport type TriggerBody =\n  | { cron: string; timezone?: string }\n  | { runAt: string; timezone?: string }\n  | { trigger: Record<string, unknown>; timezone?: string }\n  | { timezone: string };\n\n/**\n * The trigger a command is asking for, from the flags that name one.\n *\n * `--cron` and `--run-at` stay as the shorthands for the two time kinds: they\n * are what an agent reaches for and what every installed CLI already sends.\n * Everything else arrives as `--trigger <kind>` plus at most one narrowing flag,\n * so adding a kind is one entry in `@baker/api` and one case here.\n */\nexport function buildTriggerBody(\n  args: Record<string, unknown>,\n  options: { required: boolean },\n): TriggerBody | undefined {\n  const cron = args.cron as string | undefined;\n  const runAt = args[\"run-at\"] as string | undefined;\n  const timezone = args.timezone as string | undefined;\n  const kind = args.trigger as string | undefined;\n\n  const given = [cron, runAt, kind].filter(Boolean).length;\n  if (given > 1) {\n    failValidation(\"--cron, --run-at and --trigger are mutually exclusive.\");\n  }\n  refuseNarrowingWithoutKind(args, kind, given);\n  if (runAt) {\n    validateRunAt(runAt);\n    return { runAt, ...(timezone ? { timezone } : {}) };\n  }\n  if (cron) {\n    return { cron, ...(timezone ? { timezone } : {}) };\n  }\n  if (kind) {\n    return { trigger: triggerFromFlags(kind, args), ...(timezone ? { timezone } : {}) };\n  }\n  if (timezone && !options.required) {\n    // The item keeps its trigger; the backend applies the new timezone to it.\n    return { timezone };\n  }\n  if (options.required) {\n    failValidation(\n      `A trigger is required. Pass --cron or --run-at for a time-based one, or --trigger with one of: ${TRIGGER_KIND_IDS.join(\", \")}.`,\n    );\n  }\n  return undefined;\n}\n\nfunction flagText(args: Record<string, unknown>, key: string): string | undefined {\n  const value = args[key];\n  return typeof value === \"string\" && value.trim().length > 0 ? value.trim() : undefined;\n}\n\n/**\n * The two time kinds have their own flags, and `--trigger time.cron` with no\n * cadence is the mistake that would otherwise be accepted and then refused by\n * the backend, one round trip later. And a test that exists has already\n * started, so naming one on `experiment.started` can never fire.\n */\nfunction refuseMisusedKinds(kind: TriggerKind, args: Record<string, unknown>): void {\n  if (kind === \"time.once\") {\n    failValidation(\"Use --run-at for a one-off, rather than --trigger time.once.\");\n  }\n  if (kind === \"time.cron\") {\n    failValidation(\"Use --cron for a repeating schedule, rather than --trigger time.cron.\");\n  }\n  if (kind === \"experiment.started\" && flagText(args, \"experiment\")) {\n    failValidation(\n      'A test that exists has already started, so --experiment never fires on experiment.started. Leave it off and add --when \"page = <page>\" to watch one page.',\n    );\n  }\n}\n\n/** A narrowing flag the kind does not take would be silently dropped — the item would fire on everything. */\nfunction refuseStrayFlags(kind: TriggerKind, args: Record<string, unknown>): void {\n  const allowed = new Set(TRIGGER_TARGETS[kind].map((target) => TRIGGER_TARGET_FIELDS[target.field].flag));\n  const stray = TRIGGER_TARGET_FIELD_IDS.map((field) => TRIGGER_TARGET_FIELDS[field].flag).filter(\n    (flag) =>\n      !allowed.has(flag) &&\n      flagText(args, flag) !== undefined &&\n      !(kind === \"experiment.started\" && flag === \"experiment\"),\n  );\n  if (stray.length === 0) {\n    return;\n  }\n  failValidation(\n    `${stray.map((flag) => `--${flag}`).join(\", \")} does not narrow ${kind}. ${\n      allowed.size > 0\n        ? `It can be pointed with ${[...allowed].map((flag) => `--${flag}`).join(\", \")}.`\n        : \"It runs every time it happens — narrow it with --when rules over its payload instead.\"\n    }`,\n  );\n}\n\n/** Every flag that only means something beside `--trigger <kind>`. */\nconst NARROWING_FLAGS = [...TRIGGER_TARGET_FIELD_IDS.map((field) => TRIGGER_TARGET_FIELDS[field].flag), \"config\"];\n\n/**\n * A narrowing flag with no `--trigger` to narrow would be dropped without a\n * word — `update <id> --page pricing` succeeding and still firing on every page.\n */\nfunction refuseNarrowingWithoutKind(args: Record<string, unknown>, kind: string | undefined, given: number): void {\n  if (kind) {\n    return;\n  }\n  const stray = NARROWING_FLAGS.filter((flag) => flagText(args, flag) !== undefined);\n  if (stray.length === 0) {\n    return;\n  }\n  const flags = stray.map((flag) => `--${flag}`).join(\", \");\n  failValidation(\n    given > 0\n      ? `${flags} does not narrow --cron or --run-at: a time trigger runs every time it comes round. Use --trigger <kind> with ${flags} instead, or leave ${flags} off.`\n      : `${flags} narrows a trigger, and no trigger was given. Pass --trigger <kind> too — the item's whole trigger, with ${flags} — or leave ${flags} off.`,\n  );\n}\n\n/** An `app.event`'s own settings, checked to be a JSON object before the round trip. */\nfunction configFromFlag(kind: TriggerKind, args: Record<string, unknown>): { configJson?: string } {\n  const config = flagText(args, \"config\");\n  if (!config) {\n    return {};\n  }\n  if (kind !== \"app.event\") {\n    failValidation(\"--config is only for --trigger app.event: the settings of what happens in the tool.\");\n  }\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(config);\n  } catch {\n    parsed = null;\n  }\n  if (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n    failValidation(`--config must be a JSON object, e.g. '{\"labelIds\":\"INBOX\"}'.`);\n  }\n  return { configJson: config };\n}\n\n/** The narrowing flags a kind takes, refused when they do not belong to it or one it needs is missing. */\n/** Ad accounts are stored by bare id (`meta:123`); Meta writes them `act_123`, so that spelling is taken too. */\nfunction withoutMetaActPrefix(adAccount: string): string {\n  return adAccount.replace(/^meta:act_/i, \"meta:\");\n}\n\nfunction triggerFromFlags(kind: string, args: Record<string, unknown>): Record<string, unknown> {\n  if (!isTriggerKind(kind)) {\n    failValidation(`--trigger must be one of: ${TRIGGER_KIND_IDS.join(\", \")}.`);\n  }\n  refuseMisusedKinds(kind, args);\n  refuseStrayFlags(kind, args);\n  const narrowings: Record<string, string> = {};\n  for (const { field, required } of TRIGGER_TARGETS[kind]) {\n    const value = flagText(args, TRIGGER_TARGET_FIELDS[field].flag);\n    if (value) {\n      narrowings[field] = field === \"adAccount\" ? withoutMetaActPrefix(value) : value;\n    } else if (required) {\n      failValidation(\n        `--trigger ${kind} needs --${TRIGGER_TARGET_FIELDS[field].flag}. \\`baker scheduled-agents targets --trigger ${kind} --field ${field}\\` lists what it can be.`,\n      );\n    }\n  }\n  // `webhook.received`, `brand.updated`, `creative.created`: the kind is the\n  // whole of it. The webhook's address is reserved when it is staged and comes\n  // back in the response.\n  return { kind, ...narrowings, ...configFromFlag(kind, args) };\n}\n\n/**\n * Which firings actually run it, 1-based: `--occurrences 1` is \"only the first\n * time this ever happens\".\n */\nexport function parseOccurrences(raw: unknown): number[] | undefined {\n  if (raw === undefined) {\n    return undefined;\n  }\n  if (typeof raw !== \"string\") {\n    failValidation(\"--occurrences must be a comma-separated list of whole numbers, e.g. 1 or 1,3.\");\n  }\n  const parts = raw\n    .split(\",\")\n    .map((part) => part.trim())\n    .filter((part) => part.length > 0);\n  const numbers = parts.map((part) => Number(part));\n  if (numbers.length === 0 || numbers.some((n) => !Number.isInteger(n) || n <= 0)) {\n    failValidation(\"--occurrences must be a comma-separated list of whole numbers above zero, e.g. 1 or 1,3.\");\n  }\n  return numbers;\n}\n\nexport function parseBooleanFlag(raw: unknown, flagName: string): boolean | undefined {\n  if (raw === undefined) {\n    return undefined;\n  }\n  if (raw === true || raw === \"true\") {\n    return true;\n  }\n  if (raw === false || raw === \"false\") {\n    return false;\n  }\n  failValidation(`${flagName} must be true or false.`);\n}\n\n/**\n * How the item reacts once woken, beyond what wakes it — shared by `create` and\n * `update` for the same reason `NARROWING_ARGS` is.\n */\nexport const REACTION_ARGS = {\n  when: {\n    type: \"string\" as const,\n    description:\n      \"Only run when what arrived passes these rules: `<field> <operator> <value>` joined by AND or by OR (either case). Fields are the trigger's payload fields (`baker scheduled-agents triggers --trigger <kind>` lists them; a webhook's are whatever was posted; an app.event's are what `targets --field appEvent --app <tool> --event <id>` says it sends). Operators: =, !=, contains, does not contain, starts with, ends with, >, <, >=, <=, in (comma list), exists, missing. Example: --when \\\"deal.stage = won AND amount > 10000\\\". A payload that fails is not counted and starts nothing. `none` clears the rules.\",\n    required: false,\n  },\n  \"ai-check\": {\n    type: \"string\" as const,\n    description:\n      'Only run when AI judges that what arrived meets this condition, in plain words — for what no --when rule can say: --ai-check \"the person writes on behalf of a company, not as a student or for personal use\". Checked after --when, on what passed it; a turned-down arrival is not counted and starts nothing, and shows in `history` with its score. Say the boundary cases (\"a freelancer counts as a company\"). Emails and phones are hidden from it, as from the run — an email domain is a --when rule. Not for a time-based start (--cron, --run-at). `none` removes it.',\n    required: false,\n  },\n  times: {\n    type: \"string\" as const,\n    description:\n      \"Only the first N times it fires (and its --when rules pass), then never again. `--times 1` is only the first time. Shorthand for --occurrences 1,2,…,N.\",\n    required: false,\n  },\n  payload: {\n    type: \"string\" as const,\n    description:\n      \"include (default) or omit. Whether the run's first message carries what arrived — the posted body, the event's properties, the Form's answers (emails and phones masked). Place single values in --prompt with {{payload.<field>}} instead; those are filled either way.\",\n    required: false,\n  },\n  cooldown: {\n    type: \"string\" as const,\n    description: \"At most one run per this many minutes, however often it fires. 0 removes it.\",\n    required: false,\n  },\n};\n\n/**\n * Where each run is told in Slack (docs/adr/0010-scheduled-agents-report-in-slack.md).\n * The run opens its own thread there and Baker's Slack agent reports on it.\n */\nexport const SLACK_ARG = {\n  slack: {\n    type: \"string\" as const,\n    description:\n      \"Tell each run in Slack: `here` (the Slack conversation this chat came from), `me` (a direct message to the person in this chat), `#channel` (a channel linked to this company), or `off`. Each run opens its own thread there and Baker reports on it: what it found, what it needs, whether to publish.\",\n    required: false,\n  },\n};\n\n/**\n * `--companies`, for the organization's own Scheduled agents and nobody else's:\n * a company's agent hears its own company, so it is never shown the flag.\n * Passed anyway, it reaches Baker, which refuses it on a company's item.\n */\nexport function companiesArg(\n  profile: AgentProfile = agentProfile(),\n): Record<string, { type: \"string\"; description: string; required: false }> {\n  return profile === \"organization\"\n    ? {\n        companies: {\n          type: \"string\" as const,\n          description:\n            \"The companies whose events it hears, by id, comma-separated (`baker organization companies` lists them), or `all`. Left out, it hears every company, including ones added later. Only on a trigger that happens in a company; one company's Form, page or tag is a --when rule instead.\",\n          required: false,\n        },\n      }\n    : {};\n}\n\n/** The `--companies` choice for the request body, as written; Baker checks the ids against the organization. */\nexport function companiesBody(args: Record<string, unknown>): { companies?: string } {\n  return typeof args.companies === \"string\" && args.companies.trim().length > 0\n    ? { companies: args.companies.trim() }\n    : {};\n}\n\n/** The `--slack` choice for the request body, as the person wrote it; Baker resolves it. */\nexport function slackBody(args: Record<string, unknown>): { slack?: string } {\n  return typeof args.slack === \"string\" && args.slack.trim().length > 0 ? { slack: args.slack.trim() } : {};\n}\n\n/** A whole number from a flag, or a refusal naming the flag. */\nfunction wholeNumber(raw: unknown, flag: string, { min }: { min: number }): number | undefined {\n  if (raw === undefined) {\n    return undefined;\n  }\n  const value = Number(raw);\n  if (!Number.isInteger(value) || value < min) {\n    failValidation(`${flag} must be a whole number of at least ${min}.`);\n  }\n  return value;\n}\n\nexport interface ReactionBody {\n  occurrences?: number[];\n  when?: string;\n  aiCondition?: string;\n  includePayload?: boolean;\n  cooldownMinutes?: number;\n}\n\n/**\n * The reaction flags as the API reads them. `--when` is checked here and sent\n * as written: the backend parses the same language with the same code, so the\n * text on the wire is the text the agent wrote.\n */\nexport function reactionBody(args: Record<string, unknown>): ReactionBody {\n  const occurrences = occurrencesFromFlags(args);\n  const when = whenFromFlag(args.when);\n  const includePayload = payloadFromFlag(args.payload);\n  const cooldownMinutes = wholeNumber(args.cooldown, \"--cooldown\", { min: 0 });\n  const aiCondition = aiCheckFromFlag(args[\"ai-check\"]);\n  return {\n    ...(occurrences !== undefined ? { occurrences } : {}),\n    ...(when !== undefined ? { when } : {}),\n    ...(aiCondition !== undefined ? { aiCondition } : {}),\n    ...(includePayload !== undefined ? { includePayload } : {}),\n    ...(cooldownMinutes !== undefined ? { cooldownMinutes } : {}),\n  };\n}\n\nfunction occurrencesFromFlags(args: Record<string, unknown>): number[] | undefined {\n  const times = wholeNumber(args.times, \"--times\", { min: 1 });\n  const occurrences = parseOccurrences(args.occurrences);\n  if (times !== undefined && occurrences !== undefined) {\n    failValidation(\"Pass --times or --occurrences, not both — --times 3 is --occurrences 1,2,3.\");\n  }\n  return times !== undefined ? firstTimes(times) : occurrences;\n}\n\nfunction whenFromFlag(raw: unknown): string | undefined {\n  if (typeof raw !== \"string\") {\n    return undefined;\n  }\n  const text = raw.trim();\n  if (text.length === 0 || text.toLowerCase() === \"none\") {\n    return \"none\";\n  }\n  const parsed = parseConditionsExpression(text);\n  if (!parsed.ok) {\n    failValidation(parsed.error);\n  }\n  return text;\n}\n\nfunction aiCheckFromFlag(raw: unknown): string | undefined {\n  if (typeof raw !== \"string\") {\n    return undefined;\n  }\n  const text = raw.trim();\n  if (text.length === 0 || text.toLowerCase() === \"none\") {\n    return \"none\";\n  }\n  if (text.length > MAX_AI_CONDITION_CHARS) {\n    failValidation(\n      `--ai-check is at most ${MAX_AI_CONDITION_CHARS} characters: say the condition, not the job. The job goes in --prompt.`,\n    );\n  }\n  return text;\n}\n\nfunction payloadFromFlag(raw: unknown): boolean | undefined {\n  if (raw === undefined) {\n    return undefined;\n  }\n  if (raw !== \"include\" && raw !== \"omit\") {\n    failValidation(\"--payload must be include or omit.\");\n  }\n  return raw === \"include\";\n}\n\n/**\n * The chat this turn belongs to, when the sandbox knows. The backend reads who\n * sent its latest message and lists that person's own connections beside the\n * company's — a personal inbox is theirs to listen to, and nobody else's.\n */\nexport function chatBody(): { chatId?: string } {\n  const id = getEnv().BAKER_CHAT_ID;\n  return id ? { chatId: id } : {};\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,IAAM,8BAA8B;AACpC,IAAM,iBAAiB;AAEhB,SAAS,QAAkB,MAAU,OAAwB;AAClE,YAAU,EAAE,IAAI,MAAM,MAAO,QAAQ,MAAY,GAAI,SAAS,MAAM,SAAS,IAAI,EAAE,MAAM,IAAI,CAAC,EAAG,CAAC;AACpG;AAEO,SAAS,eAAe,SAAwB;AACrD,YAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,oBAAoB,QAAQ,EAAE,CAAC;AACrE,UAAQ,KAAK,CAAC;AAChB;AAEO,SAAS,QAAQ,KAAqB;AAC3C,MAAI,eAAe,UAAU;AAC3B,cAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;AACxE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,eAAe,OAAO;AACxB,cAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,kBAAkB,SAAS,IAAI,QAAQ,EAAE,CAAC;AAChF,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,YAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,kBAAkB,SAAS,mBAAmB,EAAE,CAAC;AACvF,UAAQ,KAAK,CAAC;AAChB;AAQO,IAAM,mBAAmB;AAAA,EAC9B,gBAAgB;AAAA,IACd,MAAM;AAAA,IACN,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AACF;AAEO,SAAS,kBAAkB,MAAqC;AACrE,MAAI,KAAK,cAAc,MAAM,QAAW;AACtC;AAAA,EACF;AACA,YAAU;AAAA,IACR,IAAI;AAAA,IACJ,OAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS;AAAA,MACT,KAAK;AAAA,QACH,QAAQ;AAAA,QACR,aACE;AAAA,MACJ;AAAA,IACF;AAAA,EACF,CAAC;AACD,UAAQ,KAAK,CAAC;AAChB;AAEO,SAAS,uBAAuB,IAAqB;AAC1D,SAAO,GAAG,WAAW,2BAA2B;AAClD;AAEA,SAAS,cAAc,IAAqB;AAC1C,SAAO,GAAG,WAAW,cAAc,KAAK,CAAC,uBAAuB,EAAE;AACpE;AAEO,SAAS,0BAA0B,KAAmB;AAC3D,MAAI,cAAc,GAAG,GAAG;AACtB,mBAAe,4CAA4C,2BAA2B,GAAG;AAAA,EAC3F;AACA,MAAI,CAAC,uBAAuB,GAAG,GAAG;AAChC,qBAAiB,GAAG;AAAA,EACtB;AACF;AAUO,IAAM,0BAA0B,wBAAwB,iBAAiB;AAAA,EAC9E,CAAC,OAAO,GAAG,EAAE,KAAK,cAAc,EAAE,EAAE,WAAW;AACjD,EAAE,KAAK,GAAG,CAAC;AAEJ,IAAM,oBAAoB,CAAC,GAAG,gBAAgB;AAOrD,IAAM,yBAA6D;AAAA,EACjE,WACE;AAAA,EACF,SAAS;AAAA,EACT,SACE;AAAA,EACF,UACE;AAAA,EACF,UACE;AAAA,EACF,QACE;AAAA,EACF,QACE;AAAA,EACF,MAAM;AAAA,EACN,KAAK;AAAA,EACL,cACE;AAAA,EACF,QACE;AAAA,EACF,SACE;AAAA,EACF,UACE;AAAA,EACF,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,cAAc;AAAA,EACd,WACE;AAAA,EACF,WACE;AAAA,EACF,eACE;AAAA,EACF,YACE;AACJ;AAOO,IAAM,iBAAiB;AAAA,EAC5B,GAAI,OAAO;AAAA,IACT,yBAAyB,IAAI,CAAC,UAAU;AAAA,MACtC,sBAAsB,KAAK,EAAE;AAAA,MAC7B;AAAA,QACE,MAAM;AAAA,QACN,aAAa,GAAG,uBAAuB,KAAK,CAAC,8DAA8D,KAAK;AAAA,QAChH,UAAU;AAAA,MACZ;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EACA,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AACF;AAWA,SAAS,cAAc,OAAqB;AAC1C,MAAI,CAAC,MAAM,SAAS,GAAG,GAAG;AACxB,mBAAe,oDAAoD;AAAA,EACrE;AACA,QAAM,SAAS,KAAK,MAAM,KAAK;AAC/B,MAAI,CAAC,OAAO,SAAS,MAAM,GAAG;AAC5B,mBAAe,yCAAyC;AAAA,EAC1D;AACA,MAAI,UAAU,KAAK,IAAI,GAAG;AACxB;AAAA,MACE,YAAY,KAAK;AAAA,IACnB;AAAA,EACF;AACF;AAgBO,SAAS,iBACd,MACA,SACyB;AACzB,QAAM,OAAO,KAAK;AAClB,QAAM,QAAQ,KAAK,QAAQ;AAC3B,QAAM,WAAW,KAAK;AACtB,QAAM,OAAO,KAAK;AAElB,QAAM,QAAQ,CAAC,MAAM,OAAO,IAAI,EAAE,OAAO,OAAO,EAAE;AAClD,MAAI,QAAQ,GAAG;AACb,mBAAe,wDAAwD;AAAA,EACzE;AACA,6BAA2B,MAAM,MAAM,KAAK;AAC5C,MAAI,OAAO;AACT,kBAAc,KAAK;AACnB,WAAO,EAAE,OAAO,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC,EAAG;AAAA,EACpD;AACA,MAAI,MAAM;AACR,WAAO,EAAE,MAAM,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC,EAAG;AAAA,EACnD;AACA,MAAI,MAAM;AACR,WAAO,EAAE,SAAS,iBAAiB,MAAM,IAAI,GAAG,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC,EAAG;AAAA,EACpF;AACA,MAAI,YAAY,CAAC,QAAQ,UAAU;AAEjC,WAAO,EAAE,SAAS;AAAA,EACpB;AACA,MAAI,QAAQ,UAAU;AACpB;AAAA,MACE,kGAAkG,iBAAiB,KAAK,IAAI,CAAC;AAAA,IAC/H;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,SAAS,MAA+B,KAAiC;AAChF,QAAM,QAAQ,KAAK,GAAG;AACtB,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;AAQA,SAAS,mBAAmB,MAAmB,MAAqC;AAClF,MAAI,SAAS,aAAa;AACxB,mBAAe,8DAA8D;AAAA,EAC/E;AACA,MAAI,SAAS,aAAa;AACxB,mBAAe,uEAAuE;AAAA,EACxF;AACA,MAAI,SAAS,wBAAwB,SAAS,MAAM,YAAY,GAAG;AACjE;AAAA,MACE;AAAA,IACF;AAAA,EACF;AACF;AAGA,SAAS,iBAAiB,MAAmB,MAAqC;AAChF,QAAM,UAAU,IAAI,IAAI,gBAAgB,IAAI,EAAE,IAAI,CAAC,WAAW,sBAAsB,OAAO,KAAK,EAAE,IAAI,CAAC;AACvG,QAAM,QAAQ,yBAAyB,IAAI,CAAC,UAAU,sBAAsB,KAAK,EAAE,IAAI,EAAE;AAAA,IACvF,CAAC,SACC,CAAC,QAAQ,IAAI,IAAI,KACjB,SAAS,MAAM,IAAI,MAAM,UACzB,EAAE,SAAS,wBAAwB,SAAS;AAAA,EAChD;AACA,MAAI,MAAM,WAAW,GAAG;AACtB;AAAA,EACF;AACA;AAAA,IACE,GAAG,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,EAAE,KAAK,IAAI,CAAC,oBAAoB,IAAI,KACpE,QAAQ,OAAO,IACX,0BAA0B,CAAC,GAAG,OAAO,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,EAAE,KAAK,IAAI,CAAC,MAC5E,4FACN;AAAA,EACF;AACF;AAGA,IAAM,kBAAkB,CAAC,GAAG,yBAAyB,IAAI,CAAC,UAAU,sBAAsB,KAAK,EAAE,IAAI,GAAG,QAAQ;AAMhH,SAAS,2BAA2B,MAA+B,MAA0B,OAAqB;AAChH,MAAI,MAAM;AACR;AAAA,EACF;AACA,QAAM,QAAQ,gBAAgB,OAAO,CAAC,SAAS,SAAS,MAAM,IAAI,MAAM,MAAS;AACjF,MAAI,MAAM,WAAW,GAAG;AACtB;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,EAAE,KAAK,IAAI;AACxD;AAAA,IACE,QAAQ,IACJ,GAAG,KAAK,iHAAiH,KAAK,sBAAsB,KAAK,UACzJ,GAAG,KAAK,iHAA4G,KAAK,oBAAe,KAAK;AAAA,EACnJ;AACF;AAGA,SAAS,eAAe,MAAmB,MAAwD;AACjG,QAAM,SAAS,SAAS,MAAM,QAAQ;AACtC,MAAI,CAAC,QAAQ;AACX,WAAO,CAAC;AAAA,EACV;AACA,MAAI,SAAS,aAAa;AACxB,mBAAe,qFAAqF;AAAA,EACtG;AACA,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,MAAM;AAAA,EAC5B,QAAQ;AACN,aAAS;AAAA,EACX;AACA,MAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GAAG;AAC1E,mBAAe,8DAA8D;AAAA,EAC/E;AACA,SAAO,EAAE,YAAY,OAAO;AAC9B;AAIA,SAAS,qBAAqB,WAA2B;AACvD,SAAO,UAAU,QAAQ,eAAe,OAAO;AACjD;AAEA,SAAS,iBAAiB,MAAc,MAAwD;AAC9F,MAAI,CAAC,cAAc,IAAI,GAAG;AACxB,mBAAe,6BAA6B,iBAAiB,KAAK,IAAI,CAAC,GAAG;AAAA,EAC5E;AACA,qBAAmB,MAAM,IAAI;AAC7B,mBAAiB,MAAM,IAAI;AAC3B,QAAM,aAAqC,CAAC;AAC5C,aAAW,EAAE,OAAO,SAAS,KAAK,gBAAgB,IAAI,GAAG;AACvD,UAAM,QAAQ,SAAS,MAAM,sBAAsB,KAAK,EAAE,IAAI;AAC9D,QAAI,OAAO;AACT,iBAAW,KAAK,IAAI,UAAU,cAAc,qBAAqB,KAAK,IAAI;AAAA,IAC5E,WAAW,UAAU;AACnB;AAAA,QACE,aAAa,IAAI,YAAY,sBAAsB,KAAK,EAAE,IAAI,gDAAgD,IAAI,YAAY,KAAK;AAAA,MACrI;AAAA,IACF;AAAA,EACF;AAIA,SAAO,EAAE,MAAM,GAAG,YAAY,GAAG,eAAe,MAAM,IAAI,EAAE;AAC9D;AAMO,SAAS,iBAAiB,KAAoC;AACnE,MAAI,QAAQ,QAAW;AACrB,WAAO;AAAA,EACT;AACA,MAAI,OAAO,QAAQ,UAAU;AAC3B,mBAAe,+EAA+E;AAAA,EAChG;AACA,QAAM,QAAQ,IACX,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;AACnC,QAAM,UAAU,MAAM,IAAI,CAAC,SAAS,OAAO,IAAI,CAAC;AAChD,MAAI,QAAQ,WAAW,KAAK,QAAQ,KAAK,CAAC,MAAM,CAAC,OAAO,UAAU,CAAC,KAAK,KAAK,CAAC,GAAG;AAC/E,mBAAe,0FAA0F;AAAA,EAC3G;AACA,SAAO;AACT;AAEO,SAAS,iBAAiB,KAAc,UAAuC;AACpF,MAAI,QAAQ,QAAW;AACrB,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,QAAQ,QAAQ,QAAQ;AAClC,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,SAAS,QAAQ,SAAS;AACpC,WAAO;AAAA,EACT;AACA,iBAAe,GAAG,QAAQ,yBAAyB;AACrD;AAMO,IAAM,gBAAgB;AAAA,EAC3B,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AAAA,EACA,YAAY;AAAA,IACV,MAAM;AAAA,IACN,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AAAA,EACA,OAAO;AAAA,IACL,MAAM;AAAA,IACN,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AAAA,EACA,SAAS;AAAA,IACP,MAAM;AAAA,IACN,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AAAA,EACA,UAAU;AAAA,IACR,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AACF;AAMO,IAAM,YAAY;AAAA,EACvB,OAAO;AAAA,IACL,MAAM;AAAA,IACN,aACE;AAAA,IACF,UAAU;AAAA,EACZ;AACF;AAOO,SAAS,aACd,UAAwB,aAAa,GACqC;AAC1E,SAAO,YAAY,iBACf;AAAA,IACE,WAAW;AAAA,MACT,MAAM;AAAA,MACN,aACE;AAAA,MACF,UAAU;AAAA,IACZ;AAAA,EACF,IACA,CAAC;AACP;AAGO,SAAS,cAAc,MAAuD;AACnF,SAAO,OAAO,KAAK,cAAc,YAAY,KAAK,UAAU,KAAK,EAAE,SAAS,IACxE,EAAE,WAAW,KAAK,UAAU,KAAK,EAAE,IACnC,CAAC;AACP;AAGO,SAAS,UAAU,MAAmD;AAC3E,SAAO,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,KAAK,EAAE,SAAS,IAAI,EAAE,OAAO,KAAK,MAAM,KAAK,EAAE,IAAI,CAAC;AAC1G;AAGA,SAAS,YAAY,KAAc,MAAc,EAAE,IAAI,GAAwC;AAC7F,MAAI,QAAQ,QAAW;AACrB,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,OAAO,GAAG;AACxB,MAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK;AAC3C,mBAAe,GAAG,IAAI,uCAAuC,GAAG,GAAG;AAAA,EACrE;AACA,SAAO;AACT;AAeO,SAAS,aAAa,MAA6C;AACxE,QAAM,cAAc,qBAAqB,IAAI;AAC7C,QAAM,OAAO,aAAa,KAAK,IAAI;AACnC,QAAM,iBAAiB,gBAAgB,KAAK,OAAO;AACnD,QAAM,kBAAkB,YAAY,KAAK,UAAU,cAAc,EAAE,KAAK,EAAE,CAAC;AAC3E,QAAM,cAAc,gBAAgB,KAAK,UAAU,CAAC;AACpD,SAAO;AAAA,IACL,GAAI,gBAAgB,SAAY,EAAE,YAAY,IAAI,CAAC;AAAA,IACnD,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,IACrC,GAAI,gBAAgB,SAAY,EAAE,YAAY,IAAI,CAAC;AAAA,IACnD,GAAI,mBAAmB,SAAY,EAAE,eAAe,IAAI,CAAC;AAAA,IACzD,GAAI,oBAAoB,SAAY,EAAE,gBAAgB,IAAI,CAAC;AAAA,EAC7D;AACF;AAEA,SAAS,qBAAqB,MAAqD;AACjF,QAAM,QAAQ,YAAY,KAAK,OAAO,WAAW,EAAE,KAAK,EAAE,CAAC;AAC3D,QAAM,cAAc,iBAAiB,KAAK,WAAW;AACrD,MAAI,UAAU,UAAa,gBAAgB,QAAW;AACpD,mBAAe,kFAA6E;AAAA,EAC9F;AACA,SAAO,UAAU,SAAY,WAAW,KAAK,IAAI;AACnD;AAEA,SAAS,aAAa,KAAkC;AACtD,MAAI,OAAO,QAAQ,UAAU;AAC3B,WAAO;AAAA,EACT;AACA,QAAM,OAAO,IAAI,KAAK;AACtB,MAAI,KAAK,WAAW,KAAK,KAAK,YAAY,MAAM,QAAQ;AACtD,WAAO;AAAA,EACT;AACA,QAAM,SAAS,0BAA0B,IAAI;AAC7C,MAAI,CAAC,OAAO,IAAI;AACd,mBAAe,OAAO,KAAK;AAAA,EAC7B;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,KAAkC;AACzD,MAAI,OAAO,QAAQ,UAAU;AAC3B,WAAO;AAAA,EACT;AACA,QAAM,OAAO,IAAI,KAAK;AACtB,MAAI,KAAK,WAAW,KAAK,KAAK,YAAY,MAAM,QAAQ;AACtD,WAAO;AAAA,EACT;AACA,MAAI,KAAK,SAAS,wBAAwB;AACxC;AAAA,MACE,yBAAyB,sBAAsB;AAAA,IACjD;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,KAAmC;AAC1D,MAAI,QAAQ,QAAW;AACrB,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,aAAa,QAAQ,QAAQ;AACvC,mBAAe,oCAAoC;AAAA,EACrD;AACA,SAAO,QAAQ;AACjB;AAOO,SAAS,WAAgC;AAC9C,QAAM,KAAK,OAAO,EAAE;AACpB,SAAO,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC;AAChC;","names":[]}

package/dist/chunk-UWHAVADJ.js

@@ -0,0 +1,479 @@
+import {
+  INGEST_MODES,
+  INGEST_MODE_HEADER
+} from "./chunk-GRQ2AXDX.js";
+import {
+  EVENT_ITEMS_MAX
+} from "./chunk-7J3NZBPV.js";
+import {
+  MATCH_FIELD_FORWARDING
+} from "./chunk-EDLZGTGN.js";
+import {
+  EVENT_INGEST_BATCH_MAX,
+  EVENT_INGEST_BODY_MAX_BYTES,
+  EVENT_INGEST_REQUESTS_PER_MINUTE,
+  FUTURE_TOLERANCE_MS,
+  MAX_EVENT_NAME,
+  MAX_ITEM_QUANTITY,
+  REJECTION_CODES,
+  STANDARD_EVENT_NAMES
+} from "./chunk-4CNR3MNJ.js";
+
+// ../api/src/event-ingest/arrivals.ts
+import { z } from "zod";
+var INGEST_ARRIVALS_MAX = 200;
+var INGEST_ARRIVALS_DEFAULT = 25;
+var ingestArrivalsRequestSchema = z.object({
+  /** `test` shows only rehearsals, `live` only real traffic. Absent shows both. */
+  mode: z.enum(INGEST_MODES).optional(),
+  /** `rejected` is the one worth asking for on its own — it is the whole reason to look. */
+  outcome: z.enum(["accepted", "rejected"]).optional(),
+  /** Narrow to one event name, for a company posting several kinds. */
+  eventName: z.string().max(120).optional(),
+  limit: z.coerce.number().int().positive().max(INGEST_ARRIVALS_MAX).optional().default(INGEST_ARRIVALS_DEFAULT),
+  /** Include the masked raw body and the per-field previews. Off by default — it is most of the bytes. */
+  full: z.boolean().optional()
+});
+
+// ../api/src/event-ingest/endpoint.ts
+var EVENT_INGEST_PATH = "/v1/events";
+function eventIngestUrl(brandedUrl, convexSiteUrl) {
+  if (brandedUrl) return `${brandedUrl.replace(/\/$/, "")}${EVENT_INGEST_PATH}`;
+  return `${convexSiteUrl.replace(/\/$/, "")}${EVENT_INGEST_PATH}`;
+}
+var MODE_HINT = `
+# Rehearse the same request: add -H '${INGEST_MODE_HEADER}: test'
+# It is validated and answered exactly the same way, and nothing is written.`;
+function eventIngestCurl(url, apiKey) {
+  const body = JSON.stringify({
+    events: [
+      {
+        event_name: "deal_won",
+        user_data: { email: "person@example.com" },
+        value: "1200.00",
+        currency: "EUR"
+      }
+    ]
+  });
+  return [
+    `curl -X POST ${url} \\`,
+    `  -H 'Authorization: Bearer ${apiKey}' \\`,
+    `  -H 'Content-Type: application/json' \\`,
+    `  -d '${body}'`
+  ].join("\n") + MODE_HINT;
+}
+function eventSourceCurl(url) {
+  const body = JSON.stringify({
+    events: [
+      {
+        event_name: "deal_won",
+        user_data: { email: "person@example.com" },
+        value: "1200.00",
+        currency: "EUR"
+      }
+    ]
+  });
+  return [`curl -X POST ${url} \\`, `  -H 'Content-Type: application/json' \\`, `  -d '${body}'`].join("\n");
+}
+
+// ../api/src/event-ingest/fields.ts
+var BODY_MAX_MB = EVENT_INGEST_BODY_MAX_BYTES / (1024 * 1024);
+var FUTURE_TOLERANCE_MINUTES = FUTURE_TOLERANCE_MS / 6e4;
+var HEADER_FIELDS = [
+  { name: "Authorization", need: "required", takes: "Bearer <your sending key>" },
+  { name: "Content-Type", need: "required", takes: "application/json" },
+  {
+    name: "X-Baker-Mode",
+    need: "optional",
+    takes: "live (the default) or test.",
+    // Deliberately says what a test send *is* rather than "see step 4". Every
+    // note here is read twice — on this screen, where the step below explains
+    // it in full, and inside the Markdown brief, where there are no steps and
+    // a cross-reference points at nothing.
+    note: "A test send is authenticated and validated identically and stores nothing. An unrecognised value is refused rather than assumed."
+  }
+];
+var EVENT_FIELDS = [
+  {
+    name: "event_name",
+    need: "required",
+    takes: `What happened. Up to ${MAX_EVENT_NAME} characters of letters, digits, spaces, . _ and -, starting with a letter or a digit`,
+    note: 'The only required field. Use one of the standard names below wherever one fits \u2014 anything else is yours to invent, in whatever language you name things in: a letter is a letter in any script, and "Matr\xEDcula Realizada" is a name.'
+  },
+  {
+    name: "event_time",
+    need: "optional",
+    takes: "ISO-8601 with an offset (2026-09-08T13:23:41Z), or Unix seconds (1757337821).",
+    note: `Left out, it is the moment we received it. Nothing is refused for being old \u2014 a backfill of last year's history is what this is for. More than ${FUTURE_TOLERANCE_MINUTES} minutes in the future is refused.`
+  },
+  {
+    name: "event_id",
+    need: "optional",
+    takes: "Your own id for this event: 1\u2013128 characters of letters, digits, and . _ : -",
+    note: "Send one only if you want it deduplicated \u2014 the same id twice is counted once. Send none and every post is its own event."
+  },
+  {
+    name: "user_data",
+    need: "required",
+    takes: "Who it was about. At least one field below \u2014 this is the whole of how a server event finds the person who visited a Baker page or your website.",
+    note: "No field is required on its own and the block is: an event naming nobody is refused with missing_identity. The one exception is a page_view carrying a url, because a page serve is a fact about a page."
+  },
+  {
+    name: "email",
+    need: "optional",
+    under: true,
+    takes: "The address, or its SHA-256 digest if you already hash. Either \u2014 we tell them apart.",
+    note: "Send this one if you can. It is the road that cannot silently fail: we normalise and hash it here, so it lands on exactly the person a Baker page or the pixel already recorded."
+  },
+  {
+    name: "phone",
+    need: "optional",
+    under: true,
+    takes: "The number with its country code, or its digest. Same treatment as email."
+  },
+  {
+    name: "external_id",
+    need: "optional",
+    under: true,
+    takes: "Your own id for the person \u2014 a CRM contact key.",
+    note: "Kept exactly as you send it, and hashed alongside so it joins: your own events to each other, and to a browser once one event carries it beside an email or a baker_id."
+  },
+  {
+    name: "baker_id",
+    need: "optional",
+    under: true,
+    takes: "The Baker ID one of our pages already gave this browser, if you kept it.",
+    note: "The strongest of all of them: it names the visit, so the event lands on that person's timeline rather than beside it."
+  },
+  {
+    name: "the ad click ids",
+    need: "optional",
+    under: true,
+    takes: "The click id that brought them, if you kept it, under the name the platform stamps on the link: gclid, wbraid, gbraid, dclid, fbclid, ttclid, twclid, li_fat_id, msclkid, rdt_cid, epik, sccid (Snapchat's ScCid, in any case), oppref (ChatGPT Ads).",
+    note: "A click id names a person too \u2014 it is enough on its own, and it attributes the event to the campaign that earned it."
+  },
+  {
+    name: "fbp, fbc",
+    need: "optional",
+    under: true,
+    takes: "Meta's own browser cookies (_fbp, _fbc), exactly as your site stored them.",
+    note: "Enough on their own, and worth sending: they are what Meta matches a server event on. We read the click id out of an fbc for you."
+  },
+  {
+    name: "the matching fields",
+    need: "optional",
+    under: true,
+    takes: "first_name, last_name, date_of_birth, gender, city, region, postal_code, country \u2014 Meta's advanced matching and Google's enhanced conversions, in one block. Plain or already hashed.",
+    note: "They name nobody here, so they never satisfy user_data on their own. They are kept so this event can be sent on to Meta or Google later without asking you for it all again."
+  },
+  {
+    name: "url",
+    need: "optional",
+    takes: "The full page URL this happened on.",
+    note: "Its query string is where campaign parameters and ad click ids are read from. Without it the event counts, and belongs to no page."
+  },
+  {
+    name: "value",
+    need: "optional",
+    takes: "What it was worth: a decimal string or a JSON number. No thousands separator, no sign, no exponent.",
+    note: 'Rounded to what the currency holds \u2014 1200.999 EUR is stored as 1201.00. "1,200" is refused.'
+  },
+  {
+    name: "currency",
+    need: "conditional",
+    takes: "An ISO-4217 code, e.g. EUR. Required whenever value is present, and refused on its own."
+  },
+  {
+    name: "properties",
+    need: "optional",
+    takes: "A flat object of strings \u2014 anything you want to break the event down by later."
+  },
+  {
+    name: "items",
+    need: "optional",
+    takes: "What was bought, one entry per product line \u2014 for a purchase, a cart or a refund.",
+    note: `Each line names its product by at least one of the ids below. value still carries the whole event's money. An order with more than ${EVENT_ITEMS_MAX} lines keeps the first ${EVENT_ITEMS_MAX}.`
+  },
+  {
+    name: "product_id, variant_id, feed_id",
+    need: "conditional",
+    under: true,
+    takes: "Your store's product id, its variant id, or the id the product has in your ads catalog. At least one per line, up to 255 characters each."
+  },
+  {
+    name: "quantity",
+    need: "optional",
+    under: true,
+    takes: `How many: a whole number from 1 to ${MAX_ITEM_QUANTITY.toLocaleString("en-US")}.`
+  },
+  {
+    name: "price",
+    need: "optional",
+    under: true,
+    takes: "The price of one unit, in the event's currency \u2014 so it needs currency. A decimal like value."
+  },
+  {
+    name: "consent",
+    need: "optional",
+    takes: "What the person allowed, if your site asked them.",
+    note: "Send it whenever you know it. A person who said no to marketing is still counted in your reports, and is never matched or sent to an ad platform."
+  },
+  {
+    name: "analytics",
+    need: "optional",
+    under: true,
+    takes: "granted or denied \u2014 whether they allowed being measured. Denied keeps the event and forgets who it was."
+  },
+  {
+    name: "marketing",
+    need: "optional",
+    under: true,
+    takes: "granted or denied \u2014 whether they allowed their visit to be used for advertising."
+  }
+];
+var RESPONSE_FIELDS = [
+  {
+    name: "mode",
+    need: "required",
+    takes: "live or test, echoed back \u2014 so a forgotten header is visible in the reply rather than in a report next week."
+  },
+  { name: "received", need: "required", takes: "How many events we read, so you can detect a truncated body." },
+  { name: "accepted", need: "required", takes: "How many were counted." },
+  {
+    name: "rejected",
+    need: "required",
+    takes: "One entry per refused event: index, event_id, code, message.",
+    note: "index is the position in your own array, and is the one to branch on \u2014 event_id is empty for an event that sent none."
+  }
+];
+var REJECTION_CODE_LIST = REJECTION_CODES;
+var BATCH_LIMITS = {
+  events: EVENT_INGEST_BATCH_MAX,
+  megabytes: BODY_MAX_MB,
+  requestsPerMinute: EVENT_INGEST_REQUESTS_PER_MINUTE
+};
+
+// ../api/src/event-ingest/brief.ts
+var KEY_ENV_VAR = "BAKER_EVENTS_KEY";
+var KEY_PLACEHOLDER = "<your sending key>";
+var NEED_WORD = {
+  required: "required",
+  optional: "optional",
+  conditional: "conditional"
+};
+function cell(text) {
+  return text.replaceAll("<", "\\<").replaceAll("|", "\\|");
+}
+function table(fields) {
+  const rows = fields.map((field) => {
+    const name = field.under === true ? `\u21B3 \`${field.name}\`` : `\`${field.name}\``;
+    const note = field.note === void 0 ? "" : `<br>${cell(field.note)}`;
+    return `| ${name} | ${NEED_WORD[field.need]} | ${cell(field.takes)}${note} |`;
+  });
+  return ["| Field | | What it takes |", "| --- | --- | --- |", ...rows].join("\n");
+}
+function standardNames() {
+  return [
+    "| Name | Means |",
+    "| --- | --- |",
+    ...STANDARD_EVENT_NAMES.map((standard) => `| \`${standard.name}\` | ${standard.means} |`)
+  ].join("\n");
+}
+function forwarding() {
+  return [
+    "| Field | Meta | Google | Held as |",
+    "| --- | --- | --- | --- |",
+    ...MATCH_FIELD_FORWARDING.map(
+      (row) => `| \`${row.field}\` | \`${row.meta}\` | ${row.google === null ? "\u2014" : `\`${row.google}\``} | ${row.hashed ? "SHA-256" : "plain text"} |`
+    )
+  ].join("\n");
+}
+function ingestBrief(endpointUrl) {
+  return brief(endpointUrl, "key");
+}
+function keyRules(door) {
+  if (door === "address") {
+    return `1. **The address is the credential. Never put it in source, and never paste it into a chat.**
+   Read it from \`BAKER_EVENTS_URL\` and ask the person for the value \u2014 they can copy it
+   from Baker \u2192 Measure \u2192 Sources, on the source's own page.
+2. **The first send is a rehearsal.** While the source reads "Waiting for your first event"
+   in Baker, every request is parsed, validated and answered exactly as a live one and
+   **stores nothing**; the person then confirms what to read from it and it counts from
+   there. Nothing about the integration changes when it does.`;
+  }
+  return `1. **Never put the sending key in source, and never paste it into a chat.** It is
+   deliberately not in this document. Read it from \`${KEY_ENV_VAR}\` and ask the person
+   for the value \u2014 they can copy it from Baker \u2192 Measure \u2192 Events \u2192 Sending events.
+2. **Send \`X-Baker-Mode: test\` while you build.** A test request is authenticated,
+   parsed and validated in exactly the same way and answers in exactly the same shape,
+   and **stores nothing**. Remove the header to go live. There is no separate test key
+   and no separate endpoint, so nothing about the integration changes when it does.`;
+}
+function brief(endpointUrl, door) {
+  const { events, megabytes, requestsPerMinute } = BATCH_LIMITS;
+  const headers = door === "address" ? HEADER_FIELDS.filter((field) => field.name === "Content-Type") : HEADER_FIELDS;
+  const credentialRow = door === "address" ? "| `404` | Nothing is listening at this address: it is wrong, or the source was removed. | Fix the address. Do not retry. |" : "| `401` | The key is missing, wrong, or not a sending key. | Fix the credential. Do not retry. |";
+  const request = door === "address" ? eventSourceCurl(endpointUrl) : eventIngestCurl(endpointUrl, KEY_PLACEHOLDER);
+  return `# Send events to Baker's API from your server
+
+You are being handed this by somebody who wants an integration built against it. It is
+the complete contract for ${door === "address" ? "a Baker source's address" : "`POST /v1/events`"} on **their own Baker endpoint**, taken from
+the code that enforces it. Build from this document; you should not need to look
+anything else up.
+
+Baker measures what happens on the pages it publishes. This endpoint is how everything
+that happens *away* from those pages \u2014 a deal closing in a CRM, a subscription starting,
+an order shipping \u2014 reaches the same reports, joined to the same person.
+
+## Read this before you write anything
+
+${keyRules(door)}
+3. **A \`200\` does not mean it counted.** The body carries \`rejected[]\`, one entry per
+   refused event. Read it and log it on every response. Throwing it away is the single
+   most common way an integration against this endpoint is wrong and looks right.
+4. **Batch.** Up to ${events} events and ${megabytes} MB per request, and at most
+   ${requestsPerMinute} requests per minute for the whole company. One event per request
+   works and will exhaust that budget on any real backfill. Every event is judged on its
+   own, so one bad row is refused and the rest of the batch still counts.
+5. **Retry \`5xx\` and \`429\`, never \`4xx\`.** A \`4xx\` means the request is wrong and
+   will be wrong again. If you retry, send the same \`event_id\` \u2014 that is what makes the
+   retry count once.
+6. **A refund is its own event, not a negative amount.** \`value\` may not be negative.
+   Send an event with its own name and let the reports subtract.
+7. **You cannot declare a conversion.** Whether an event counts as one is a decision the
+   client makes in Baker, against the event's name, and it applies retroactively to
+   everything already sent under that name. Nothing in the payload can assert it.
+8. **Ask, do not guess.** Which events matter and where the person's email lives in their
+   system are things this document cannot tell you. Ask.
+
+## Endpoint
+
+\`\`\`
+POST ${endpointUrl}
+\`\`\`
+
+### Headers
+
+${table(headers)}
+
+### Body
+
+\`\`\`json
+{ "events": [ { "event_name": "..." } ] }
+\`\`\`
+
+Up to ${events} events and ${megabytes} MB per request.
+
+## The event
+
+The field names are Meta's. If you have written an integration against Meta's Conversions
+API or Google Ads' offline conversion upload, this is the same payload: \`event_name\`,
+\`event_time\`, \`event_id\`, \`user_data\`, \`value\`, \`currency\`.
+
+${table(EVENT_FIELDS)}
+
+### Naming the person is the part that matters
+
+\`user_data\` is required and every field in it is optional, which is not a contradiction:
+the event has to name **somebody**, and there are several ways to do it. An event that
+names nobody is refused with \`missing_identity\`.
+
+Ranked by how well each works, best first:
+
+1. \`baker_id\` \u2014 the id a Baker page already gave that browser. It names the *visit*, so
+   the event lands on a real session's timeline. Send it if the client's system kept it.
+2. \`email\` or \`phone\` \u2014 the road that cannot silently fail. Send the plain value if you
+   can: we normalise and hash it here under the same rule the browser uses, so it lands
+   on exactly the person the pages already recorded. If policy forbids sending it plain,
+   send the SHA-256 digest **in the same field** \u2014 we detect which it is. Hash the
+   trimmed, lower-cased address; for a phone, digits with a leading \`+\`.
+3. \`external_id\` \u2014 the client's own key for the person, a CRM contact id. Stored as sent,
+   and hashed alongside so it joins.
+   On its own it joins that system's events to each other; send it **once** alongside an
+   email or a \`baker_id\` and every later event carrying only the contact id joins the
+   person too. That link is retroactive: it reaches back to everything already sent.
+4. A click id, \`fbp\` or \`fbc\` \u2014 names the click or the browser that brought them, which
+   is what a report attributes the event to.
+
+Send every one you have, not just the best. They cost nothing extra and each is a
+separate chance to match.
+
+### The matching fields, and where they go afterwards
+
+\`first_name\` \u2026 \`country\` never satisfy \`user_data\` on their own \u2014 they describe a
+person and name nobody. They are worth sending anyway: they are exactly what Meta's
+advanced matching and Google's enhanced conversions match on, and keeping them means the
+event can be forwarded later without going back to the client's CRM for it.
+
+${forwarding()}
+
+## Standard event names
+
+Nothing is refused for being absent from this list \u2014 send whatever the business calls a
+thing. These are the spellings Baker publishes so that two companies measuring the same
+thing measure it under the same word. \`page_view\` is the one with behaviour: it becomes
+a page view rather than a named event, and it is the only event that may arrive without a
+person as long as it carries a \`url\`.
+
+${standardNames()}
+
+## The response
+
+\`\`\`json
+{ "ok": true, "data": { "mode": "live", "received": 2, "accepted": 1,
+  "rejected": [ { "index": 1, "event_id": "", "code": "invalid_value",
+    "message": "value and currency go together: a non-negative decimal and an ISO-4217 code" } ] } }
+\`\`\`
+
+${table(RESPONSE_FIELDS)}
+
+\`code\` is a closed set \u2014 branch on it, not on \`message\`:
+
+${REJECTION_CODE_LIST.map((code) => `- \`${code}\``).join("\n")}
+
+There is no duplicate count, on purpose. A repeated \`event_id\` is accepted like any other
+event and counted **once** \u2014 one conversion, one event, its value added once \u2014 so a retry
+is safe and needs no branch of its own. Both requests are shown in Baker, with the later
+one marked "Already counted", so a retry is visible without being counted.
+
+The same holds **across connections**, which is the reason to use it. If the page also
+reports this outcome with Baker's website tag, pass one string as \`event_id\` here and as
+\`eventId\` in \`window.baker.track(name, { eventId })\`: the browser event and the
+server event are then one event and count once, whichever arrives first and whether or not
+the other ever does. Report an important outcome from both \u2014 a browser can be blocked, a
+server cannot \u2014 and always pair them with an id. Send no id and the two are two conversions,
+with nothing anywhere reporting an error.
+
+### HTTP statuses
+
+| Status | Means | Do |
+| --- | --- | --- |
+| \`200\` | The request was read. Individual events may still have been refused. | Read \`rejected[]\`. |
+| \`400\` | The body is not the shape above \u2014 an unknown field, or the wrong JSON type. | Fix the payload. Do not retry. |
+${credentialRow}
+| \`413\` | Over ${events} events or ${megabytes} MB. | Split the batch and re-post. |
+| \`429\` | Over ${requestsPerMinute} requests a minute for this company. | Back off and retry. |
+| \`5xx\` | Nothing was written. | Retry with the same \`event_id\`s. |
+
+## A request that works
+
+\`\`\`bash
+${request}
+\`\`\`
+
+## Once it is sending
+
+Every accepted event appears in Baker under **Measure \u2192 Events**, live, with what was
+sent. Test sends and refusals appear there too, filed separately and marked, with the
+payload \u2014 so "did my request arrive and what did it say" is answered on the screen rather
+than in the client's own logs. To make an event count as a conversion, the client marks
+it by name under **Conversions**.
+`;
+}
+
+export {
+  INGEST_ARRIVALS_MAX,
+  eventIngestUrl,
+  ingestBrief
+};
+//# sourceMappingURL=chunk-UWHAVADJ.js.map

package/dist/chunk-XOGQJYXH.js

@@ -0,0 +1,64 @@
+import {
+  REF_PREFIX
+} from "./chunk-AULSX5ZA.js";
+
+// src/commands/canvas/node-preview.ts
+var MAX_PARAMS_PREVIEW_LENGTH = 4e3;
+var SPEC_KEYS = [
+  "model",
+  "format",
+  "mode",
+  "aspect_ratio",
+  "image_size",
+  "resolution",
+  "duration",
+  "subject_type",
+  "font_size",
+  "expect",
+  "source",
+  "path",
+  "url"
+];
+var BODY_KEYS = ["prompt", "text", "subject_description"];
+function scalarField(params, key) {
+  const value = params[key];
+  if (typeof value === "number") return String(value);
+  if (typeof value !== "string") return void 0;
+  const trimmed = value.trim();
+  return trimmed && !trimmed.startsWith(REF_PREFIX) ? trimmed : void 0;
+}
+function compactJson(params) {
+  try {
+    const json = JSON.stringify(params);
+    return json && json !== "{}" ? json : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function cap(text) {
+  return text.length > MAX_PARAMS_PREVIEW_LENGTH ? `${text.slice(0, MAX_PARAMS_PREVIEW_LENGTH - 1)}\u2026` : text;
+}
+function nodeParamsPreview(params, deps) {
+  const refsLine = deps && deps.length > 0 ? `refs: ${deps.join(", ")}` : void 0;
+  if (!params || typeof params !== "object") return refsLine;
+  const own = params;
+  const nested = (key) => own[key] && typeof own[key] === "object" && !Array.isArray(own[key]) ? own[key] : {};
+  const record = { ...nested("paint"), ...nested("words"), ...own };
+  const spec = [];
+  for (const key of SPEC_KEYS) {
+    const value = scalarField(record, key);
+    if (value !== void 0) spec.push(`${key}: ${value}`);
+  }
+  if (refsLine) spec.push(refsLine);
+  const body = BODY_KEYS.map((key) => scalarField(record, key)).find(Boolean);
+  const header = spec.join("\n");
+  const composed = header && body ? `${header}
+
+${body}` : header || body || compactJson(record);
+  return composed ? cap(composed) : void 0;
+}
+
+export {
+  nodeParamsPreview
+};
+//# sourceMappingURL=chunk-XOGQJYXH.js.map