@koda-sl/baker-cli 0.513.0 → 0.514.0

package/dist/mcp-EKLO2VD7.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../api/src/mcp-catalog.ts","../src/commands/mcp/index.ts","../src/commands/mcp/catalog.ts","../../api/src/mcp-tools.ts","../src/commands/mcp/execute.ts","../src/commands/mcp/platforms.ts"],"sourcesContent":["/**\n * Contract for `GET /api/mcp/catalog` — searching the managed-app catalog the\n * sandbox agent can ask the user to connect when a vendor publishes no MCP\n * server of its own.\n *\n * `connect` mirrors `ToolkitConnectMode` in `convex/composio/types.ts`, folded\n * to what the user will be asked for: a sign-in or a key. Apps that need no\n * sign-in are left out — Composio refuses to connect them.\n */\nimport { z } from \"zod\";\n\nexport const MCP_CATALOG_DEFAULT_LIMIT = 8;\nexport const MCP_CATALOG_DESCRIPTION_MAX = 160;\n\nexport const mcpCatalogRequestSchema = z.object({\n  search: z.string().trim().min(1, \"Provide --search\").max(100),\n  limit: z.coerce.number().int().min(1).max(20).default(MCP_CATALOG_DEFAULT_LIMIT),\n});\nexport type McpCatalogRequest = z.infer<typeof mcpCatalogRequestSchema>;\n\nexport const mcpCatalogConnectSchema = z.enum([\"sign-in\", \"key\"]);\nexport type McpCatalogConnect = z.infer<typeof mcpCatalogConnectSchema>;\n\nexport const mcpCatalogEntrySchema = z.object({\n  /** The toolkit slug — what request_connection `{ app }` takes. */\n  app: z.string(),\n  name: z.string(),\n  description: z.string().max(MCP_CATALOG_DESCRIPTION_MAX),\n  connect: mcpCatalogConnectSchema,\n  connected: z.boolean(),\n});\nexport type McpCatalogEntry = z.infer<typeof mcpCatalogEntrySchema>;\n\nexport const mcpCatalogResponseSchema = z.object({\n  apps: z.array(mcpCatalogEntrySchema),\n  /** Baker's own connections this search matched — ask for these with `{ platform }`, never a managed copy. */\n  platforms: z.array(z.string()).optional(),\n});\nexport type McpCatalogResponse = z.infer<typeof mcpCatalogResponseSchema>;\n","import {\n  type CustomMcpDisableResponse,\n  type CustomMcpVerifyResponse,\n  customMcpServerNameRequestSchema,\n} from \"@baker/api\";\nimport { type McpCatalogResponse, mcpCatalogRequestSchema } from \"@baker/api/mcp-catalog\";\nimport { defineCommand } from \"citty\";\nimport { ApiError, apiGet, apiPost } from \"../../client.ts\";\nimport { getEnv } from \"../../env.ts\";\nimport { repeatedValues } from \"../../lib/repeatedFlags.ts\";\nimport { writeJson } from \"../../output.ts\";\nimport { registerSchema } from \"../../schemas.ts\";\nimport { catalogHints } from \"./catalog.ts\";\nimport { executeCommand, toolsCommand } from \"./execute.ts\";\nimport { type ConnectedPlatform, platformEntry } from \"./platforms.ts\";\n\nconst SCOPES = [\"user\", \"user_org\", \"company\", \"org\"] as const;\ntype Scope = (typeof SCOPES)[number];\n\nfunction parseScope(raw: unknown): Scope {\n  const scope = raw === undefined ? \"company\" : String(raw);\n  if (!(SCOPES as readonly string[]).includes(scope)) {\n    throw new ApiError(\"VALIDATION_ERROR\", `Invalid --scope \"${scope}\". Use user | user_org | company | org.`);\n  }\n  return scope as Scope;\n}\n\n/** The turn's message sender, injected by the bridge — required only for user scope. */\nfunction actingUserId(): string | undefined {\n  return getEnv().BAKER_ACTING_USER_ID;\n}\n\ntype CustomMcpServer = {\n  _id: string;\n  scope: \"user\" | \"user_org\" | \"company\" | \"org\";\n  name: string;\n  url: string;\n  headerKeys: string[];\n  enabled: boolean;\n  /** Absent until the address has been checked; `ok: false` means it serves no tools. */\n  health?: { ok: boolean; message?: string; suggestedUrl?: string; transient?: boolean; checkedAt: number };\n  createdAt: number;\n};\n\n/**\n * What to report for one custom server. `problem` is the whole point: a server can\n * be signed in, enabled and still serve nothing (wrong address), and reporting it\n * as plain \"connected\" is how an agent ends up promising tools it does not have.\n * A `transient` failure is reported separately — the tool may well answer, so\n * declaring it broken would be its own kind of lie.\n */\nfunction customEntry(server: CustomMcpServer): Record<string, unknown> {\n  const failed = server.health && !server.health.ok;\n  const problem = server.health?.message ?? \"This server's address is not serving tools.\";\n  return {\n    name: server.name,\n    scope: server.scope,\n    enabled: server.enabled,\n    ...(failed && !server.health?.transient ? { usable: false, problem } : {}),\n    ...(failed && server.health?.transient ? { lastCheck: \"failed\", problem } : {}),\n    ...(failed && server.health?.suggestedUrl ? { suggestedAddress: server.health.suggestedUrl } : {}),\n  };\n}\n\n/** The hint an unusable server earns — the agent must not offer its tools or invent a reason. */\nconst BROKEN_SERVER_HINT =\n  \"A server marked usable=false will NOT answer: its tools are absent from this turn. Say plainly that the tool is not working and relay `problem`; never claim its tools are loading, coming next message, or temporarily unavailable. `problem` names what a person has to fix — the address, the sign-in, or the key the server was added with — so pass on that fix and no other: never tell the user to reconnect a server whose `problem` is its address or its key. The user makes the fix in the dashboard (Brain → Integrations → More apps). If `suggestedAddress` is present, that is the address to use.\";\n\n/** The hint for a server whose last check failed for a reason that may already have passed. */\nconst LAST_CHECK_FAILED_HINT =\n  \"A server with lastCheck=failed was unreachable or erroring when it was last checked — that may already have passed, and its tools ARE loaded this turn. Try the tool; if it works, say nothing about the check. If it fails, report `problem` as what happened rather than guessing.\";\n\n/** Turn repeated `--header \"K: V\"` (or `K=V`) flags into a headers record. */\n/** `--header` is repeatable, so its values come off the command line — citty keeps only the last. */\nfunction parseHeaders(raw: unknown, rawArgs?: readonly string[]): Record<string, string> | undefined {\n  const list = repeatedValues(rawArgs, \"header\", raw);\n  const headers: Record<string, string> = {};\n  for (const entry of list) {\n    const text = String(entry);\n    const sep = text.indexOf(\":\") >= 0 && (text.indexOf(\":\") < text.indexOf(\"=\") || text.indexOf(\"=\") < 0) ? \":\" : \"=\";\n    const at = text.indexOf(sep);\n    if (at <= 0) {\n      throw new ApiError(\"VALIDATION_ERROR\", `Invalid header \"${text}\". Use \"Key: Value\".`);\n    }\n    headers[text.slice(0, at).trim()] = text.slice(at + 1).trim();\n  }\n  return Object.keys(headers).length > 0 ? headers : undefined;\n}\n\nfunction fail(err: unknown): never {\n  if (err instanceof ApiError) {\n    writeJson({ ok: false, error: { code: err.code, message: err.message } });\n    process.exit(1);\n  }\n  writeJson({ ok: false, error: { code: \"NETWORK_ERROR\", message: \"Unexpected error\" } });\n  process.exit(1);\n}\n\ntype ManagedConnection = {\n  toolkitSlug: string;\n  scope: \"user\" | \"user_org\" | \"company\" | \"org\";\n  status: string;\n  accountLabel: string | null;\n  readOnly: boolean;\n};\n\ntype ConnectedResponse = {\n  managed: ManagedConnection[];\n  custom: CustomMcpServer[];\n  platforms: ConnectedPlatform[];\n};\n\n/** The one thing an agent must not do with this list: infer a platform's state from the MCP half. */\nconst PLATFORMS_HINT =\n  \"`platforms` are connected accounts you reach through `baker` commands (HubSpot, Google Ads, GA4, Search Console, Tag Manager, …), NOT mcp__* tools — there is no tool to call for them. A platform listed here IS connected: never tell the user to connect it, and never conclude it is missing because it has no mcp__* entry. Read what it holds with its own command family (`baker hubspot …`, `baker ads google …`, `baker ga4 …`, and so on).\";\n\nregisterSchema({\n  command: \"mcp.connected\",\n  description:\n    \"List everything this chat can reach: managed integrations (Attio, Slack, Gmail, Google Sheets, …), custom MCP servers, and the platforms the company signed in to (HubSpot, Google Ads, GA4, Search Console, Tag Manager) which you read through their own `baker` commands. Start here when the user mentions an external tool or platform.\",\n  args: {},\n});\n\nconst connectedCommand = defineCommand({\n  meta: {\n    name: \"connected\",\n    description: `Everything this chat can reach — managed integrations, custom MCP servers, and connected platforms.\n\nManaged tools ride the composio servers (mcp__composio_<scope>__*); custom servers expose mcp__<name>__*.\nPlatforms (HubSpot, Google Ads, GA4, …) have no mcp__* tools at all — you read them with their own\n\\`baker\\` command family, and one listed here is connected and ready to use.\nA tool or platform the user names that is NOT listed anywhere here is simply not connected yet.`,\n  },\n  run: async () => {\n    try {\n      const user = actingUserId();\n      const data = await apiGet<ConnectedResponse>(\"/api/mcp/connected\", user ? { actingUserId: user } : undefined);\n      const managed = data.managed.map((c) => ({\n        toolkit: c.toolkitSlug,\n        scope: c.scope,\n        ...(c.status !== \"ACTIVE\" ? { status: c.status } : {}),\n        ...(c.accountLabel ? { account: c.accountLabel } : {}),\n        ...(c.readOnly ? { readOnly: true } : {}),\n      }));\n      const custom = data.custom.map(customEntry);\n      const platforms = (data.platforms ?? []).map(platformEntry);\n      const hints: string[] = [];\n      if (platforms.length > 0) {\n        hints.push(PLATFORMS_HINT);\n      }\n      if (data.custom.some((s) => s.health && !s.health.ok && !s.health.transient)) {\n        hints.push(BROKEN_SERVER_HINT);\n      }\n      if (data.custom.some((s) => s.health && !s.health.ok && s.health.transient)) {\n        hints.push(LAST_CHECK_FAILED_HINT);\n      }\n      if ([...data.managed, ...data.custom].some((e) => e.scope === \"user\" || e.scope === \"user_org\")) {\n        hints.push(\n          \"user/user_org entries are personal: they belong to the current message sender and load only in their turns — other users in this chat won't have them.\",\n        );\n      }\n      hints.push(\n        \"Not listed anywhere = not connected — connect it from the chat with request_connection, never by sending the user to the dashboard: a Baker platform (HubSpot, Google Ads, GA4, …) → { platform }; anything else → the vendor's own MCP server FIRST: use the address the user gave you, or WebSearch '<vendor> MCP server' and WebFetch its official docs for the remote https address and how it signs in, then { server: { name, url, auth, keyHeader } }; only when the vendor has none → `baker mcp catalog --search <name>`, then { app }. Research before you ask the user anything. What they connect loads into this same turn.\",\n      );\n      writeJson({\n        ok: true,\n        data: { managed, custom, platforms },\n        hints,\n      });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nconst catalogArgs = {\n  search: { type: \"string\", description: \"App or vendor name, e.g. notion, clarity, pipedrive\", required: true },\n  limit: { type: \"string\", description: \"Max apps to return, 1-20 (default 8)\", required: false },\n} as const;\n\nregisterSchema({\n  command: \"mcp.catalog\",\n  description:\n    \"Search the managed apps you can ask the user to connect when a vendor has no MCP server of its own. Each app says how the user connects it (sign-in | key) and whether this chat already reaches it. Example: baker mcp catalog --search notion\",\n  args: catalogArgs,\n});\n\nconst catalogCommand = defineCommand({\n  meta: {\n    name: \"catalog\",\n    description: `Managed apps you can ask the user to connect when a vendor has no MCP server of its own.\n\nFor a tool \\`baker mcp connected\\` does not list whose vendor has no official remote MCP server:\n  baker mcp catalog --search notion\n  baker mcp catalog --search \"microsoft clarity\" --limit 3\n\nEach app: app (slug for request_connection), name, description, connect (sign-in | key), connected.\nPrefer the vendor's own MCP server when it publishes one; a catalog app is the fallback.`,\n  },\n  args: catalogArgs,\n  run: async ({ args }) => {\n    const parsed = mcpCatalogRequestSchema.safeParse({ search: args.search, limit: args.limit });\n    if (!parsed.success) {\n      writeJson({\n        ok: false,\n        error: { code: \"VALIDATION_ERROR\", message: parsed.error.issues[0]?.message ?? \"Invalid arguments\" },\n      });\n      process.exit(1);\n    }\n    try {\n      const user = actingUserId();\n      const data = await apiGet<McpCatalogResponse>(\"/api/mcp/catalog\", {\n        search: parsed.data.search,\n        limit: String(parsed.data.limit),\n        ...(user ? { actingUserId: user } : {}),\n      });\n      writeJson({\n        ok: true,\n        data: {\n          apps: data.apps,\n          ...(data.platforms?.length ? { platforms: data.platforms } : {}),\n        },\n        hints: catalogHints(data.apps, { platforms: data.platforms ?? [] }),\n      });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nregisterSchema({\n  command: \"mcp.list\",\n  description: \"List the custom MCP servers this company's chats see (org + company + your own user scope).\",\n  args: {},\n});\n\nconst listCommand = defineCommand({\n  meta: { name: \"list\", description: \"List custom MCP servers visible to this company's chats.\" },\n  run: async () => {\n    try {\n      const user = actingUserId();\n      const data = await apiGet<{ servers: CustomMcpServer[] }>(\n        \"/api/mcp/custom\",\n        user ? { actingUserId: user } : undefined,\n      );\n      writeJson({\n        ok: true,\n        // Detail view: the full row (address included) plus the usability verdict.\n        // `health` itself is folded into `usable`/`problem` by `customEntry`.\n        data: data.servers.map((server) => ({ ...server, health: undefined, ...customEntry(server) })),\n        ...(data.servers.some((s) => s.health && !s.health.ok)\n          ? {\n              hints: data.servers.some((s) => s.health && !s.health.ok && !s.health.transient)\n                ? [BROKEN_SERVER_HINT]\n                : [LAST_CHECK_FAILED_HINT],\n            }\n          : {}),\n      });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nregisterSchema({\n  command: \"mcp.add\",\n  description:\n    \"Register a custom MCP server. Tools appear as mcp__<name>__* on the next message. URL must be HTTPS. Scope: company (default, all chats) | org (org admin key) | user (only the current sender).\",\n  args: {\n    name: { type: \"string\", description: \"Server name → tools appear as mcp__<name>__*\", required: true },\n    url: {\n      type: \"string\",\n      description: \"Full HTTPS MCP endpoint (commonly ends in /mcp, not just the domain)\",\n      required: true,\n    },\n    scope: { type: \"string\", description: \"user | user_org | company | org (default company)\", required: false },\n    header: { type: \"string\", description: 'Auth header \"Key: Value\" (repeatable)', required: false },\n  },\n});\n\nconst addCommand = defineCommand({\n  meta: {\n    name: \"add\",\n    description: `Register a custom MCP server. Tools appear as mcp__<name>__* on the NEXT message.\nFor a server the USER asks for, use request_connection { server } instead: they confirm who can use it,\ntype any key into the card (never the chat), and its tools load in this same turn.\n\nScope: company (default — every chat in the company) | org (all companies in the org; needs an admin key) | user (only the current message sender).\n\nExamples:\n  baker mcp add --name weather --url https://mcp.example.com/mcp\n  baker mcp add --name acme --url https://acme.dev/mcp --header \"Authorization: Bearer sk-…\"\n  baker mcp add --name mine --url https://my.dev/mcp --scope user`,\n  },\n  args: {\n    name: { type: \"string\", description: \"Server name (mcp__<name>__*)\", required: true },\n    url: {\n      type: \"string\",\n      description: \"Full HTTPS MCP endpoint (commonly ends in /mcp, not just the domain)\",\n      required: true,\n    },\n    scope: { type: \"string\", description: \"user | user_org | company | org (default company)\", required: false },\n    header: { type: \"string\", description: 'Auth header \"Key: Value\" (repeatable)', required: false },\n  },\n  run: async ({ args, rawArgs }) => {\n    try {\n      const scope = parseScope(args.scope);\n      const user = actingUserId();\n      const headers = parseHeaders(args.header, rawArgs);\n      const data = await apiPost<{ name: string }>(\"/api/mcp/custom\", {\n        name: args.name as string,\n        url: args.url as string,\n        scope,\n        ...(user ? { actingUserId: user } : {}),\n        ...(headers ? { headers } : {}),\n      });\n      writeJson({\n        ok: true,\n        data,\n        hints: [\n          \"The address must be the full MCP endpoint (commonly ending in /mcp), not just the domain — a domain on its own usually answers sign-in and then serves no tools.\",\n          \"The address is checked in the background. Run `baker mcp connected` on the next message to confirm it serves tools before promising the user anything.\",\n        ],\n      });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nregisterSchema({\n  command: \"mcp.remove\",\n  description: \"Remove a company custom MCP server by name.\",\n  args: { name: { type: \"string\", description: \"Server name to remove\", required: true } },\n});\n\nconst removeCommand = defineCommand({\n  meta: {\n    name: \"remove\",\n    description: `Remove a company custom MCP server by name.\n\nExample:\n  baker mcp remove --name weather`,\n  },\n  args: { name: { type: \"string\", description: \"Server name to remove\", required: true } },\n  run: async ({ args }) => {\n    try {\n      const user = actingUserId();\n      const data = await apiPost<{ removed: boolean }>(\"/api/mcp/custom/remove\", {\n        name: args.name as string,\n        ...(user ? { actingUserId: user } : {}),\n      });\n      writeJson({ ok: true, data });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nconst serverNameArgs = {\n  name: { type: \"string\", description: \"Custom server name, as `baker mcp list` shows it\", required: true },\n} as const;\n\nregisterSchema({\n  command: \"mcp.verify\",\n  description:\n    \"Check a custom MCP server now (the dashboard's 'Check now') and store the result. Use after the user fixed its address or sign-in, or when its tools failed this turn.\",\n  args: serverNameArgs,\n});\n\nconst verifyCommand = defineCommand({\n  meta: {\n    name: \"verify\",\n    description: `Check a custom MCP server now and store the result.\n\nExample:\n  baker mcp verify --name weather`,\n  },\n  args: serverNameArgs,\n  run: async ({ args }) => {\n    const parsed = customMcpServerNameRequestSchema.safeParse({ name: args.name, actingUserId: actingUserId() });\n    if (!parsed.success) {\n      fail(new ApiError(\"VALIDATION_ERROR\", parsed.error.issues[0]?.message ?? \"Invalid arguments\"));\n    }\n    try {\n      const data = await apiPost<CustomMcpVerifyResponse>(\"/api/mcp/custom/verify\", parsed.data);\n      writeJson({\n        ok: true,\n        data,\n        hints: [\n          data.ok\n            ? \"The server answers and serves tools. Its tools load on the next message.\"\n            : data.transient\n              ? LAST_CHECK_FAILED_HINT\n              : BROKEN_SERVER_HINT,\n        ],\n      });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nregisterSchema({\n  command: \"mcp.disable\",\n  description:\n    \"Switch a custom MCP server off so its tools stop loading; its address and sign-in are kept. Turning it back on is done by a person in the dashboard, never by the agent.\",\n  args: serverNameArgs,\n});\n\nconst disableCommand = defineCommand({\n  meta: {\n    name: \"disable\",\n    description: `Switch a custom MCP server off (its tools stop loading). Only a person can turn it back on, in the dashboard.\n\nExample:\n  baker mcp disable --name weather`,\n  },\n  args: serverNameArgs,\n  run: async ({ args }) => {\n    const parsed = customMcpServerNameRequestSchema.safeParse({ name: args.name, actingUserId: actingUserId() });\n    if (!parsed.success) {\n      fail(new ApiError(\"VALIDATION_ERROR\", parsed.error.issues[0]?.message ?? \"Invalid arguments\"));\n    }\n    try {\n      const data = await apiPost<CustomMcpDisableResponse>(\"/api/mcp/custom/disable\", parsed.data);\n      writeJson({\n        ok: true,\n        data,\n        hints: [\n          \"Its tools stop loading from the next message, and this applies right away — publishing or discarding this chat does not undo it. Tell the user they can turn it back on in Brain → Integrations → More apps.\",\n        ],\n      });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nexport const mcpCommand = defineCommand({\n  meta: {\n    name: \"mcp\",\n    description: `Third-party tools for this company — see what's connected, register custom HTTPS MCP endpoints.\n\nTools from a registered server appear as mcp__<name>__* on the next message.\nManaged here are **company-scoped** servers; user- and org-scoped servers are managed in the dashboard.\n\nStart here:\n  baker mcp connected   # everything this chat can reach: managed integrations, custom servers, connected platforms\n  baker mcp catalog --search notion   # managed apps you can connect when a vendor has no MCP server of its own\n\nRun a connected app's read-only tool from the command line (JSON on stdout — for reports and scripts):\n  baker mcp tools --app googlesheets --search \"read rows\"\n  baker mcp execute --tool GOOGLESHEETS_BATCH_GET --get-schema\n  baker mcp execute --tool GOOGLESHEETS_BATCH_GET --data '{\"spreadsheet_id\":\"…\",\"ranges\":[\"A1:D50\"]}'\n\nExamples:\n  baker mcp add --name weather --url https://mcp.example.com/mcp\n  baker mcp add --name acme --url https://acme.dev/mcp --header \"Authorization: Bearer sk-…\"\n  baker mcp remove --name weather\n  baker mcp verify --name weather    # check it now after the user fixed it\n  baker mcp disable --name weather   # stop its tools loading (only a person turns it back on)\nFull guide: __tooling__/docs/tools/baker/mcp.md`,\n  },\n  subCommands: {\n    connected: connectedCommand,\n    catalog: catalogCommand,\n    tools: toolsCommand,\n    execute: executeCommand,\n    list: listCommand,\n    add: addCommand,\n    remove: removeCommand,\n    verify: verifyCommand,\n    disable: disableCommand,\n  },\n});\n","/**\n * What `baker mcp catalog` tells the agent to do next with the managed apps it\n * found — the fallback when a vendor publishes no MCP server of its own.\n */\nimport type { McpCatalogEntry } from \"@baker/api/mcp-catalog\";\n\nconst PREFER_VENDOR_HINT =\n  'The vendor\\'s own MCP server comes before any app here. If you have not yet, WebSearch \"<vendor> MCP server\" and WebFetch its official docs for the remote https address and how it signs in, then ask for it with request_connection `{ server: { name, url, auth, keyHeader } }`. Only when the vendor has none, ask for an app from this catalog with request_connection `{ app: \"<slug>\", reason }` — the user connects it in the chat and its tools load right after, in this same turn.';\n\nconst ALREADY_CONNECTED_HINT =\n  \"An app marked connected is already reachable — use its mcp__composio_* tools; do not ask again.\";\n\nconst NO_MATCH_HINT =\n  \"Nothing in the catalog matches. WebSearch for the vendor's official remote MCP server (its docs, its developer site) before telling the user it can't be connected — if one exists, ask for it with request_connection `{ server }`. Only when the web shows no official remote server either, say plainly this tool can't be connected yet and offer a Task.\";\n\n/** Baker's own connection always wins over a catalog app or anyone's MCP server for the same tool. */\nfunction firstPartyHint(platforms: readonly string[]): string {\n  const asks = platforms.map((p) => `request_connection \\`{ platform: \"${p}\" }\\``).join(\" or \");\n  return `This is one of Baker's own connections — ask for it with ${asks}. It is the one Baker's commands, staging and publish work with, so never connect it as a catalog app or as an MCP server, even one the vendor publishes or the user names. If it is already connected, read it with its own baker command family instead.`;\n}\n\n/** What the agent should do next with a catalog answer. */\nexport function catalogHints(\n  apps: readonly McpCatalogEntry[],\n  { platforms = [] }: { platforms?: readonly string[] } = {},\n): string[] {\n  if (platforms.length > 0) {\n    return [firstPartyHint(platforms)];\n  }\n  const hints = [PREFER_VENDOR_HINT];\n  if (apps.some((a) => a.connected)) {\n    hints.push(ALREADY_CONNECTED_HINT);\n  }\n  if (apps.length === 0) {\n    hints.push(NO_MATCH_HINT);\n  }\n  return hints;\n}\n","/**\n * Contract for running a connected app's tools from the `baker` CLI —\n * `GET /api/mcp/tools` (find one), `GET /api/mcp/tool` (its inputs) and\n * `POST /api/mcp/execute` (run it).\n *\n * The same tools the chat reaches as `mcp__composio_*`, but answered as JSON on\n * stdout, so a Report's data endpoint can call one through `runBaker` and a\n * script can keep what it returned. Only tools the app marks read-only run here:\n * a published Report runs them for whoever opens it, and a chat stages every\n * change it makes until Publish.\n */\nimport { z } from \"zod\";\n\nexport const MCP_TOOLS_DEFAULT_LIMIT = 10;\nexport const MCP_TOOL_DESCRIPTION_MAX = 200;\n\n/** A Composio tool slug: `GMAIL_FETCH_EMAILS`, `GOOGLESHEETS_BATCH_GET`. */\nexport const mcpToolSlugSchema = z\n  .string()\n  .trim()\n  .min(1, \"Provide --tool\")\n  .max(120)\n  .regex(/^[A-Za-z0-9_]+$/, \"A tool is named like GMAIL_FETCH_EMAILS — find one with `baker mcp tools --search`\")\n  .transform((slug) => slug.toUpperCase());\n\n/** A toolkit slug as `baker mcp connected` lists it: `gmail`, `googlesheets`. */\nexport const mcpAppSlugSchema = z\n  .string()\n  .trim()\n  .min(1)\n  .max(60)\n  .regex(/^[a-z0-9_-]+$/i, \"Name the app as `baker mcp connected` lists it, e.g. gmail\")\n  .transform((slug) => slug.toLowerCase());\n\nexport const mcpToolsRequestSchema = z\n  .object({\n    search: z.string().trim().min(1).max(200).optional(),\n    app: mcpAppSlugSchema.optional(),\n    limit: z.coerce.number().int().min(1).max(50).default(MCP_TOOLS_DEFAULT_LIMIT),\n  })\n  .refine((request) => request.search !== undefined || request.app !== undefined, {\n    message: \"Provide --search, --app, or both\",\n  });\nexport type McpToolsRequest = z.infer<typeof mcpToolsRequestSchema>;\n\nexport const mcpToolSummarySchema = z.object({\n  tool: z.string(),\n  app: z.string(),\n  name: z.string(),\n  description: z.string().max(MCP_TOOL_DESCRIPTION_MAX),\n  /** Only read-only tools run through `baker mcp execute`. */\n  readOnly: z.boolean(),\n});\nexport type McpToolSummary = z.infer<typeof mcpToolSummarySchema>;\n\nexport const mcpToolsResponseSchema = z.object({\n  tools: z.array(mcpToolSummarySchema),\n  /** The connected apps the search ran over. */\n  apps: z.array(z.string()),\n});\nexport type McpToolsResponse = z.infer<typeof mcpToolsResponseSchema>;\n\nexport const mcpToolRequestSchema = z.object({\n  tool: mcpToolSlugSchema,\n  full: z.boolean().default(false),\n});\n\n/** One input, folded to what the agent needs to fill it. */\nexport const mcpToolInputSchema = z.object({\n  name: z.string(),\n  type: z.string(),\n  required: z.boolean(),\n  description: z.string().optional(),\n  enum: z.array(z.unknown()).optional(),\n  default: z.unknown().optional(),\n});\nexport type McpToolInput = z.infer<typeof mcpToolInputSchema>;\n\nexport const mcpToolResponseSchema = z.object({\n  tool: z.string(),\n  app: z.string(),\n  name: z.string(),\n  description: z.string(),\n  readOnly: z.boolean(),\n  inputs: z.array(mcpToolInputSchema),\n  /** The raw JSON schemas, with `--full` only. */\n  inputSchema: z.unknown().optional(),\n  outputSchema: z.unknown().optional(),\n});\nexport type McpToolResponse = z.infer<typeof mcpToolResponseSchema>;\n\nexport const mcpExecuteRequestSchema = z.object({\n  tool: mcpToolSlugSchema,\n  arguments: z.record(z.string(), z.unknown()).default({}),\n  actingUserId: z.string().optional(),\n});\nexport type McpExecuteRequest = z.infer<typeof mcpExecuteRequestSchema>;\n\nexport const mcpExecuteResponseSchema = z.object({\n  tool: z.string(),\n  app: z.string(),\n  /** Whose connection answered: `company` is the one a published Report reads. */\n  scope: z.enum([\"user\", \"user_org\", \"company\", \"org\"]),\n  account: z.string().nullable(),\n  /** What the tool returned, as the app returned it. */\n  data: z.unknown(),\n});\nexport type McpExecuteResponse = z.infer<typeof mcpExecuteResponseSchema>;\n","/**\n * `baker mcp tools` and `baker mcp execute`: a connected app's tools run from\n * the command line, so what they return is JSON on stdout — for a Report's data\n * endpoint (`runReportBaker`), a script, or a file — instead of a tool result\n * only the chat sees. The same tools as `mcp__composio_*`, reads only.\n */\nimport {\n  type McpExecuteResponse,\n  type McpToolResponse,\n  type McpToolsResponse,\n  mcpExecuteRequestSchema,\n  mcpToolRequestSchema,\n  mcpToolsRequestSchema,\n} from \"@baker/api/mcp-tools\";\nimport { defineCommand } from \"citty\";\nimport { ApiError, apiGet, apiPost } from \"../../client.ts\";\nimport { getEnv } from \"../../env.ts\";\nimport { writeJson } from \"../../output.ts\";\nimport { registerSchema } from \"../../schemas.ts\";\n\n/** A tool's run gets as long as a report gives one `baker` call, less its own margin. */\nconst EXECUTE_TIMEOUT_MS = 120_000;\n\nfunction fail(err: unknown): never {\n  if (err instanceof ApiError) {\n    writeJson({ ok: false, error: { code: err.code, message: err.message } });\n    process.exit(1);\n  }\n  writeJson({ ok: false, error: { code: \"NETWORK_ERROR\", message: \"Unexpected error\" } });\n  process.exit(1);\n}\n\nfunction invalid(message: string): never {\n  return fail(new ApiError(\"VALIDATION_ERROR\", message));\n}\n\n/** The turn's message sender, injected by the bridge; the backend vouches for it, and a report has none. */\nfunction actingUserId(): string | undefined {\n  return getEnv().BAKER_ACTING_USER_ID;\n}\n\n/** What to tell the agent after a run: above all, whether a published report will read the same thing. */\nexport function executeHints(ran: Pick<McpExecuteResponse, \"tool\" | \"app\" | \"scope\">): string[] {\n  const hints: string[] = [];\n  if (ran.scope !== \"company\") {\n    hints.push(\n      `This answer came from a ${ran.scope === \"org\" ? \"connection shared by the organization\" : \"connection of the person sending this message\"}. A published report reads only apps connected for the whole company, so ${ran.tool} will answer \"not connected\" there: ask the user to connect ${ran.app} for the whole company before building a report on it.`,\n    );\n  }\n  hints.push(\n    `In a report endpoint: runReportBaker(event, [\"mcp\", \"execute\", \"--tool\", \"${ran.tool}\", \"--data\", JSON.stringify(args)]) — return only the fields the page shows.`,\n  );\n  return hints;\n}\n\nconst toolsArgs = {\n  search: {\n    type: \"string\",\n    description: 'What the tool should do, e.g. \"fetch emails\", \"read sheet rows\"',\n    required: false,\n  },\n  app: {\n    type: \"string\",\n    description: \"Only this connected app, as `baker mcp connected` lists it (gmail)\",\n    required: false,\n  },\n  limit: { type: \"string\", description: \"Max tools to return, 1-50 (default 10)\", required: false },\n} as const;\n\nregisterSchema({\n  command: \"mcp.tools\",\n  description:\n    'Find a connected app\\'s tools to run with `baker mcp execute`. Searches the apps this chat reaches (or --app). Each tool: tool (slug), app, name, description, readOnly (only read-only tools run). Example: baker mcp tools --app googlesheets --search \"read rows\"',\n  args: toolsArgs,\n});\n\nexport const toolsCommand = defineCommand({\n  meta: {\n    name: \"tools\",\n    description: `Find a connected app's tools to run from the command line with \\`baker mcp execute\\`.\n\nStart here:\n  baker mcp tools --search \"fetch unread emails\"          # across every connected app\n  baker mcp tools --app googlesheets --search \"read rows\"\n  baker mcp tools --app hubspot --limit 20                # an app's tools, no search\n\nEach tool: tool (the slug execute takes), app, name, description, readOnly.\nOnly readOnly tools run through execute; a tool that changes things is the chat's own mcp__composio_* tool.`,\n  },\n  args: toolsArgs,\n  run: async ({ args }) => {\n    const parsed = mcpToolsRequestSchema.safeParse({ search: args.search, app: args.app, limit: args.limit });\n    if (!parsed.success) {\n      invalid(parsed.error.issues[0]?.message ?? \"Invalid arguments\");\n    }\n    try {\n      const user = actingUserId();\n      const data = await apiGet<McpToolsResponse>(\"/api/mcp/tools\", {\n        ...(parsed.data.search ? { search: parsed.data.search } : {}),\n        ...(parsed.data.app ? { app: parsed.data.app } : {}),\n        limit: String(parsed.data.limit),\n        ...(user ? { actingUserId: user } : {}),\n      });\n      const hints =\n        data.apps.length === 0\n          ? [\n              \"No app is connected here. Check `baker mcp connected`; connect one with request_connection, from the chat.\",\n            ]\n          : [\n              \"Run one with `baker mcp execute --tool <TOOL> --get-schema` first to see its inputs, then `--data '<json>'`.\",\n              ...(data.tools.some((tool) => !tool.readOnly)\n                ? [\n                    \"readOnly: false tools cannot run through execute — they change things; use the chat's mcp__composio_* tool.\",\n                  ]\n                : []),\n            ];\n      writeJson({ ok: true, data, hints });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nconst executeArgs = {\n  tool: { type: \"string\", description: \"Tool slug from `baker mcp tools`, e.g. GMAIL_FETCH_EMAILS\", required: true },\n  data: {\n    type: \"string\",\n    description: \"The tool's arguments as a JSON object, e.g. '{\\\"max_results\\\":10}'\",\n    required: false,\n  },\n  \"get-schema\": { type: \"boolean\", description: \"Show the tool's inputs instead of running it\", required: false },\n  full: {\n    type: \"boolean\",\n    description: \"With --get-schema: the raw input and output JSON schemas too\",\n    required: false,\n  },\n} as const;\n\nregisterSchema({\n  command: \"mcp.execute\",\n  description:\n    'Run one read-only tool of a connected app and print what it returned as JSON — for a report\\'s data endpoint, a script, or keeping the answer. `--get-schema` shows its inputs first. A published report reaches only apps connected for the whole company. Example: baker mcp execute --tool GOOGLESHEETS_BATCH_GET --data \\'{\"spreadsheet_id\":\"…\",\"ranges\":[\"A1:D50\"]}\\'',\n  args: executeArgs,\n});\n\nfunction parseData(raw: unknown): Record<string, unknown> {\n  if (raw === undefined || raw === \"\") {\n    return {};\n  }\n  let value: unknown;\n  try {\n    value = JSON.parse(String(raw));\n  } catch {\n    invalid(`--data must be a JSON object, e.g. '{\"max_results\":10}' (keys and strings in double quotes).`);\n  }\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    invalid(`--data must be a JSON object, e.g. '{\"max_results\":10}'.`);\n  }\n  return value as Record<string, unknown>;\n}\n\nexport const executeCommand = defineCommand({\n  meta: {\n    name: \"execute\",\n    description: `Run one read-only tool of a connected app; prints what it returned as JSON.\n\nThe same tools as the chat's mcp__composio_* servers, answered on stdout so a report's data endpoint,\na script or a file can keep it. Find the tool with \\`baker mcp tools\\`, read its inputs, then run it:\n  baker mcp execute --tool GOOGLESHEETS_BATCH_GET --get-schema\n  baker mcp execute --tool GOOGLESHEETS_BATCH_GET --data '{\"spreadsheet_id\":\"1AbC…\",\"ranges\":[\"Sheet1!A1:D50\"]}'\n  baker mcp execute --tool GMAIL_FETCH_EMAILS --data '{\"query\":\"is:unread newer_than:7d\",\"max_results\":20}' > /tmp/inbox.json\n\nReads only: a tool that changes things (send, create, update) is refused — use the chat's own tool for it.\nA published report runs as nobody, so it reaches only apps connected for the whole company; a\nperson's own connection answers in their chat and nowhere else.`,\n  },\n  args: executeArgs,\n  run: async ({ args }) => {\n    if (args[\"get-schema\"]) {\n      const parsed = mcpToolRequestSchema.safeParse({ tool: args.tool, full: args.full === true });\n      if (!parsed.success) {\n        invalid(parsed.error.issues[0]?.message ?? \"Invalid arguments\");\n      }\n      try {\n        const data = await apiGet<McpToolResponse>(\"/api/mcp/tool\", {\n          tool: parsed.data.tool,\n          ...(parsed.data.full ? { full: \"true\" } : {}),\n        });\n        writeJson({\n          ok: true,\n          data,\n          hints: data.readOnly\n            ? [`Run it: baker mcp execute --tool ${data.tool} --data '<json object of the inputs above>'`]\n            : [\n                `${data.tool} changes things, so execute refuses it. In a chat, use the app's own mcp__composio_* tool.`,\n              ],\n        });\n      } catch (err) {\n        fail(err);\n      }\n      return;\n    }\n    const parsed = mcpExecuteRequestSchema.safeParse({\n      tool: args.tool,\n      arguments: parseData(args.data),\n      actingUserId: actingUserId(),\n    });\n    if (!parsed.success) {\n      invalid(parsed.error.issues[0]?.message ?? \"Invalid arguments\");\n    }\n    try {\n      const data = await apiPost<McpExecuteResponse>(\"/api/mcp/execute\", parsed.data, {\n        timeoutMs: EXECUTE_TIMEOUT_MS,\n      });\n      writeJson({ ok: true, data, hints: executeHints(data) });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n","/**\n * How a connected platform reads back to the agent.\n *\n * A platform (HubSpot, Google Ads, GA4, …) is an account the company signed in\n * to, reached through its own `baker` command family rather than an `mcp__*`\n * tool. It rides `mcp connected` because that is the one answer to \"what can\n * this chat reach\" — and because an agent that only saw the tool half had no\n * way to tell a working HubSpot connection from a missing one.\n */\n\nexport interface ConnectedPlatform {\n  type: string;\n  label: string;\n  account: string | null;\n  reads: string[];\n  readsLabel: string | null;\n}\n\n/** \"Ad Accounts\" -> `adAccounts`, \"Properties\" -> `properties`. */\nfunction readsKey(label: string): string {\n  const [first = \"\", ...rest] = label.split(\" \");\n  return [first.toLowerCase(), ...rest].join(\"\");\n}\n\n/**\n * One platform as the agent sees it. The resources are keyed by the platform's\n * own word for them — `properties` for GA4, `containers` for Tag Manager,\n * `adAccounts` for the ad platforms — so what the agent reads back matches what\n * the user sees in the dashboard.\n */\nexport function platformEntry(platform: ConnectedPlatform): Record<string, unknown> {\n  return {\n    platform: platform.label,\n    ...(platform.account ? { account: platform.account } : {}),\n    ...(platform.readsLabel && platform.reads.length > 0 ? { [readsKey(platform.readsLabel)]: platform.reads } : {}),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,SAAS,SAAS;AAEX,IAAM,4BAA4B;AAClC,IAAM,8BAA8B;AAEpC,IAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,kBAAkB,EAAE,IAAI,GAAG;AAAA,EAC5D,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,yBAAyB;AACjF,CAAC;AAGM,IAAM,0BAA0B,EAAE,KAAK,CAAC,WAAW,KAAK,CAAC;AAGzD,IAAM,wBAAwB,EAAE,OAAO;AAAA;AAAA,EAE5C,KAAK,EAAE,OAAO;AAAA,EACd,MAAM,EAAE,OAAO;AAAA,EACf,aAAa,EAAE,OAAO,EAAE,IAAI,2BAA2B;AAAA,EACvD,SAAS;AAAA,EACT,WAAW,EAAE,QAAQ;AACvB,CAAC;AAGM,IAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,MAAM,EAAE,MAAM,qBAAqB;AAAA;AAAA,EAEnC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAC1C,CAAC;;;AC/BD,SAAS,iBAAAA,sBAAqB;;;ACA9B,IAAM,qBACJ;AAEF,IAAM,yBACJ;AAEF,IAAM,gBACJ;AAGF,SAAS,eAAe,WAAsC;AAC5D,QAAM,OAAO,UAAU,IAAI,CAAC,MAAM,qCAAqC,CAAC,OAAO,EAAE,KAAK,MAAM;AAC5F,SAAO,iEAA4D,IAAI;AACzE;AAGO,SAAS,aACd,MACA,EAAE,YAAY,CAAC,EAAE,IAAuC,CAAC,GAC/C;AACV,MAAI,UAAU,SAAS,GAAG;AACxB,WAAO,CAAC,eAAe,SAAS,CAAC;AAAA,EACnC;AACA,QAAM,QAAQ,CAAC,kBAAkB;AACjC,MAAI,KAAK,KAAK,CAAC,MAAM,EAAE,SAAS,GAAG;AACjC,UAAM,KAAK,sBAAsB;AAAA,EACnC;AACA,MAAI,KAAK,WAAW,GAAG;AACrB,UAAM,KAAK,aAAa;AAAA,EAC1B;AACA,SAAO;AACT;;;AC1BA,SAAS,KAAAC,UAAS;AAEX,IAAM,0BAA0B;AAChC,IAAM,2BAA2B;AAGjC,IAAM,oBAAoBA,GAC9B,OAAO,EACP,KAAK,EACL,IAAI,GAAG,gBAAgB,EACvB,IAAI,GAAG,EACP,MAAM,mBAAmB,yFAAoF,EAC7G,UAAU,CAAC,SAAS,KAAK,YAAY,CAAC;AAGlC,IAAM,mBAAmBA,GAC7B,OAAO,EACP,KAAK,EACL,IAAI,CAAC,EACL,IAAI,EAAE,EACN,MAAM,kBAAkB,4DAA4D,EACpF,UAAU,CAAC,SAAS,KAAK,YAAY,CAAC;AAElC,IAAM,wBAAwBA,GAClC,OAAO;AAAA,EACN,QAAQA,GAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACnD,KAAK,iBAAiB,SAAS;AAAA,EAC/B,OAAOA,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,uBAAuB;AAC/E,CAAC,EACA,OAAO,CAAC,YAAY,QAAQ,WAAW,UAAa,QAAQ,QAAQ,QAAW;AAAA,EAC9E,SAAS;AACX,CAAC;AAGI,IAAM,uBAAuBA,GAAE,OAAO;AAAA,EAC3C,MAAMA,GAAE,OAAO;AAAA,EACf,KAAKA,GAAE,OAAO;AAAA,EACd,MAAMA,GAAE,OAAO;AAAA,EACf,aAAaA,GAAE,OAAO,EAAE,IAAI,wBAAwB;AAAA;AAAA,EAEpD,UAAUA,GAAE,QAAQ;AACtB,CAAC;AAGM,IAAM,yBAAyBA,GAAE,OAAO;AAAA,EAC7C,OAAOA,GAAE,MAAM,oBAAoB;AAAA;AAAA,EAEnC,MAAMA,GAAE,MAAMA,GAAE,OAAO,CAAC;AAC1B,CAAC;AAGM,IAAM,uBAAuBA,GAAE,OAAO;AAAA,EAC3C,MAAM;AAAA,EACN,MAAMA,GAAE,QAAQ,EAAE,QAAQ,KAAK;AACjC,CAAC;AAGM,IAAM,qBAAqBA,GAAE,OAAO;AAAA,EACzC,MAAMA,GAAE,OAAO;AAAA,EACf,MAAMA,GAAE,OAAO;AAAA,EACf,UAAUA,GAAE,QAAQ;AAAA,EACpB,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,MAAMA,GAAE,MAAMA,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpC,SAASA,GAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;AAGM,IAAM,wBAAwBA,GAAE,OAAO;AAAA,EAC5C,MAAMA,GAAE,OAAO;AAAA,EACf,KAAKA,GAAE,OAAO;AAAA,EACd,MAAMA,GAAE,OAAO;AAAA,EACf,aAAaA,GAAE,OAAO;AAAA,EACtB,UAAUA,GAAE,QAAQ;AAAA,EACpB,QAAQA,GAAE,MAAM,kBAAkB;AAAA;AAAA,EAElC,aAAaA,GAAE,QAAQ,EAAE,SAAS;AAAA,EAClC,cAAcA,GAAE,QAAQ,EAAE,SAAS;AACrC,CAAC;AAGM,IAAM,0BAA0BA,GAAE,OAAO;AAAA,EAC9C,MAAM;AAAA,EACN,WAAWA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EACvD,cAAcA,GAAE,OAAO,EAAE,SAAS;AACpC,CAAC;AAGM,IAAM,2BAA2BA,GAAE,OAAO;AAAA,EAC/C,MAAMA,GAAE,OAAO;AAAA,EACf,KAAKA,GAAE,OAAO;AAAA;AAAA,EAEd,OAAOA,GAAE,KAAK,CAAC,QAAQ,YAAY,WAAW,KAAK,CAAC;AAAA,EACpD,SAASA,GAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAE7B,MAAMA,GAAE,QAAQ;AAClB,CAAC;;;AC5FD,SAAS,qBAAqB;AAO9B,IAAM,qBAAqB;AAE3B,SAAS,KAAK,KAAqB;AACjC,MAAI,eAAe,UAAU;AAC3B,cAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;AACxE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,YAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,mBAAmB,EAAE,CAAC;AACtF,UAAQ,KAAK,CAAC;AAChB;AAEA,SAAS,QAAQ,SAAwB;AACvC,SAAO,KAAK,IAAI,SAAS,oBAAoB,OAAO,CAAC;AACvD;AAGA,SAAS,eAAmC;AAC1C,SAAO,OAAO,EAAE;AAClB;AAGO,SAAS,aAAa,KAAmE;AAC9F,QAAM,QAAkB,CAAC;AACzB,MAAI,IAAI,UAAU,WAAW;AAC3B,UAAM;AAAA,MACJ,2BAA2B,IAAI,UAAU,QAAQ,0CAA0C,+CAA+C,4EAA4E,IAAI,IAAI,+DAA+D,IAAI,GAAG;AAAA,IACtS;AAAA,EACF;AACA,QAAM;AAAA,IACJ,6EAA6E,IAAI,IAAI;AAAA,EACvF;AACA,SAAO;AACT;AAEA,IAAM,YAAY;AAAA,EAChB,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA,KAAK;AAAA,IACH,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA,OAAO,EAAE,MAAM,UAAU,aAAa,0CAA0C,UAAU,MAAM;AAClG;AAEA,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AACR,CAAC;AAEM,IAAM,eAAe,cAAc;AAAA,EACxC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASf;AAAA,EACA,MAAM;AAAA,EACN,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,UAAM,SAAS,sBAAsB,UAAU,EAAE,QAAQ,KAAK,QAAQ,KAAK,KAAK,KAAK,OAAO,KAAK,MAAM,CAAC;AACxG,QAAI,CAAC,OAAO,SAAS;AACnB,cAAQ,OAAO,MAAM,OAAO,CAAC,GAAG,WAAW,mBAAmB;AAAA,IAChE;AACA,QAAI;AACF,YAAM,OAAO,aAAa;AAC1B,YAAM,OAAO,MAAM,OAAyB,kBAAkB;AAAA,QAC5D,GAAI,OAAO,KAAK,SAAS,EAAE,QAAQ,OAAO,KAAK,OAAO,IAAI,CAAC;AAAA,QAC3D,GAAI,OAAO,KAAK,MAAM,EAAE,KAAK,OAAO,KAAK,IAAI,IAAI,CAAC;AAAA,QAClD,OAAO,OAAO,OAAO,KAAK,KAAK;AAAA,QAC/B,GAAI,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;AAAA,MACvC,CAAC;AACD,YAAM,QACJ,KAAK,KAAK,WAAW,IACjB;AAAA,QACE;AAAA,MACF,IACA;AAAA,QACE;AAAA,QACA,GAAI,KAAK,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ,IACxC;AAAA,UACE;AAAA,QACF,IACA,CAAC;AAAA,MACP;AACN,gBAAU,EAAE,IAAI,MAAM,MAAM,MAAM,CAAC;AAAA,IACrC,SAAS,KAAK;AACZ,WAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAED,IAAM,cAAc;AAAA,EAClB,MAAM,EAAE,MAAM,UAAU,aAAa,6DAA6D,UAAU,KAAK;AAAA,EACjH,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA,cAAc,EAAE,MAAM,WAAW,aAAa,gDAAgD,UAAU,MAAM;AAAA,EAC9G,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AACF;AAEA,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AACR,CAAC;AAED,SAAS,UAAU,KAAuC;AACxD,MAAI,QAAQ,UAAa,QAAQ,IAAI;AACnC,WAAO,CAAC;AAAA,EACV;AACA,MAAI;AACJ,MAAI;AACF,YAAQ,KAAK,MAAM,OAAO,GAAG,CAAC;AAAA,EAChC,QAAQ;AACN,YAAQ,8FAA8F;AAAA,EACxG;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GAAG;AACvE,YAAQ,0DAA0D;AAAA,EACpE;AACA,SAAO;AACT;AAEO,IAAM,iBAAiB,cAAc;AAAA,EAC1C,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWf;AAAA,EACA,MAAM;AAAA,EACN,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,QAAI,KAAK,YAAY,GAAG;AACtB,YAAMC,UAAS,qBAAqB,UAAU,EAAE,MAAM,KAAK,MAAM,MAAM,KAAK,SAAS,KAAK,CAAC;AAC3F,UAAI,CAACA,QAAO,SAAS;AACnB,gBAAQA,QAAO,MAAM,OAAO,CAAC,GAAG,WAAW,mBAAmB;AAAA,MAChE;AACA,UAAI;AACF,cAAM,OAAO,MAAM,OAAwB,iBAAiB;AAAA,UAC1D,MAAMA,QAAO,KAAK;AAAA,UAClB,GAAIA,QAAO,KAAK,OAAO,EAAE,MAAM,OAAO,IAAI,CAAC;AAAA,QAC7C,CAAC;AACD,kBAAU;AAAA,UACR,IAAI;AAAA,UACJ;AAAA,UACA,OAAO,KAAK,WACR,CAAC,oCAAoC,KAAK,IAAI,6CAA6C,IAC3F;AAAA,YACE,GAAG,KAAK,IAAI;AAAA,UACd;AAAA,QACN,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,aAAK,GAAG;AAAA,MACV;AACA;AAAA,IACF;AACA,UAAM,SAAS,wBAAwB,UAAU;AAAA,MAC/C,MAAM,KAAK;AAAA,MACX,WAAW,UAAU,KAAK,IAAI;AAAA,MAC9B,cAAc,aAAa;AAAA,IAC7B,CAAC;AACD,QAAI,CAAC,OAAO,SAAS;AACnB,cAAQ,OAAO,MAAM,OAAO,CAAC,GAAG,WAAW,mBAAmB;AAAA,IAChE;AACA,QAAI;AACF,YAAM,OAAO,MAAM,QAA4B,oBAAoB,OAAO,MAAM;AAAA,QAC9E,WAAW;AAAA,MACb,CAAC;AACD,gBAAU,EAAE,IAAI,MAAM,MAAM,OAAO,aAAa,IAAI,EAAE,CAAC;AAAA,IACzD,SAAS,KAAK;AACZ,WAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;;;ACxMD,SAAS,SAAS,OAAuB;AACvC,QAAM,CAAC,QAAQ,IAAI,GAAG,IAAI,IAAI,MAAM,MAAM,GAAG;AAC7C,SAAO,CAAC,MAAM,YAAY,GAAG,GAAG,IAAI,EAAE,KAAK,EAAE;AAC/C;AAQO,SAAS,cAAc,UAAsD;AAClF,SAAO;AAAA,IACL,UAAU,SAAS;AAAA,IACnB,GAAI,SAAS,UAAU,EAAE,SAAS,SAAS,QAAQ,IAAI,CAAC;AAAA,IACxD,GAAI,SAAS,cAAc,SAAS,MAAM,SAAS,IAAI,EAAE,CAAC,SAAS,SAAS,UAAU,CAAC,GAAG,SAAS,MAAM,IAAI,CAAC;AAAA,EAChH;AACF;;;AJpBA,IAAM,SAAS,CAAC,QAAQ,YAAY,WAAW,KAAK;AAGpD,SAAS,WAAW,KAAqB;AACvC,QAAM,QAAQ,QAAQ,SAAY,YAAY,OAAO,GAAG;AACxD,MAAI,CAAE,OAA6B,SAAS,KAAK,GAAG;AAClD,UAAM,IAAI,SAAS,oBAAoB,oBAAoB,KAAK,yCAAyC;AAAA,EAC3G;AACA,SAAO;AACT;AAGA,SAASC,gBAAmC;AAC1C,SAAO,OAAO,EAAE;AAClB;AAqBA,SAAS,YAAY,QAAkD;AACrE,QAAM,SAAS,OAAO,UAAU,CAAC,OAAO,OAAO;AAC/C,QAAM,UAAU,OAAO,QAAQ,WAAW;AAC1C,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,OAAO,OAAO;AAAA,IACd,SAAS,OAAO;AAAA,IAChB,GAAI,UAAU,CAAC,OAAO,QAAQ,YAAY,EAAE,QAAQ,OAAO,QAAQ,IAAI,CAAC;AAAA,IACxE,GAAI,UAAU,OAAO,QAAQ,YAAY,EAAE,WAAW,UAAU,QAAQ,IAAI,CAAC;AAAA,IAC7E,GAAI,UAAU,OAAO,QAAQ,eAAe,EAAE,kBAAkB,OAAO,OAAO,aAAa,IAAI,CAAC;AAAA,EAClG;AACF;AAGA,IAAM,qBACJ;AAGF,IAAM,yBACJ;AAIF,SAAS,aAAa,KAAc,SAAiE;AACnG,QAAM,OAAO,eAAe,SAAS,UAAU,GAAG;AAClD,QAAM,UAAkC,CAAC;AACzC,aAAW,SAAS,MAAM;AACxB,UAAM,OAAO,OAAO,KAAK;AACzB,UAAM,MAAM,KAAK,QAAQ,GAAG,KAAK,MAAM,KAAK,QAAQ,GAAG,IAAI,KAAK,QAAQ,GAAG,KAAK,KAAK,QAAQ,GAAG,IAAI,KAAK,MAAM;AAC/G,UAAM,KAAK,KAAK,QAAQ,GAAG;AAC3B,QAAI,MAAM,GAAG;AACX,YAAM,IAAI,SAAS,oBAAoB,mBAAmB,IAAI,sBAAsB;AAAA,IACtF;AACA,YAAQ,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK;AAAA,EAC9D;AACA,SAAO,OAAO,KAAK,OAAO,EAAE,SAAS,IAAI,UAAU;AACrD;AAEA,SAASC,MAAK,KAAqB;AACjC,MAAI,eAAe,UAAU;AAC3B,cAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;AACxE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,YAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,mBAAmB,EAAE,CAAC;AACtF,UAAQ,KAAK,CAAC;AAChB;AAiBA,IAAM,iBACJ;AAEF,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM,CAAC;AACT,CAAC;AAED,IAAM,mBAAmBC,eAAc;AAAA,EACrC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMf;AAAA,EACA,KAAK,YAAY;AACf,QAAI;AACF,YAAM,OAAOF,cAAa;AAC1B,YAAM,OAAO,MAAM,OAA0B,sBAAsB,OAAO,EAAE,cAAc,KAAK,IAAI,MAAS;AAC5G,YAAM,UAAU,KAAK,QAAQ,IAAI,CAAC,OAAO;AAAA,QACvC,SAAS,EAAE;AAAA,QACX,OAAO,EAAE;AAAA,QACT,GAAI,EAAE,WAAW,WAAW,EAAE,QAAQ,EAAE,OAAO,IAAI,CAAC;AAAA,QACpD,GAAI,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,IAAI,CAAC;AAAA,QACpD,GAAI,EAAE,WAAW,EAAE,UAAU,KAAK,IAAI,CAAC;AAAA,MACzC,EAAE;AACF,YAAM,SAAS,KAAK,OAAO,IAAI,WAAW;AAC1C,YAAM,aAAa,KAAK,aAAa,CAAC,GAAG,IAAI,aAAa;AAC1D,YAAM,QAAkB,CAAC;AACzB,UAAI,UAAU,SAAS,GAAG;AACxB,cAAM,KAAK,cAAc;AAAA,MAC3B;AACA,UAAI,KAAK,OAAO,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,MAAM,CAAC,EAAE,OAAO,SAAS,GAAG;AAC5E,cAAM,KAAK,kBAAkB;AAAA,MAC/B;AACA,UAAI,KAAK,OAAO,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,MAAM,EAAE,OAAO,SAAS,GAAG;AAC3E,cAAM,KAAK,sBAAsB;AAAA,MACnC;AACA,UAAI,CAAC,GAAG,KAAK,SAAS,GAAG,KAAK,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,UAAU,EAAE,UAAU,UAAU,GAAG;AAC/F,cAAM;AAAA,UACJ;AAAA,QACF;AAAA,MACF;AACA,YAAM;AAAA,QACJ;AAAA,MACF;AACA,gBAAU;AAAA,QACR,IAAI;AAAA,QACJ,MAAM,EAAE,SAAS,QAAQ,UAAU;AAAA,QACnC;AAAA,MACF,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,MAAAC,MAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAED,IAAM,cAAc;AAAA,EAClB,QAAQ,EAAE,MAAM,UAAU,aAAa,uDAAuD,UAAU,KAAK;AAAA,EAC7G,OAAO,EAAE,MAAM,UAAU,aAAa,wCAAwC,UAAU,MAAM;AAChG;AAEA,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AACR,CAAC;AAED,IAAM,iBAAiBC,eAAc;AAAA,EACnC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQf;AAAA,EACA,MAAM;AAAA,EACN,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,UAAM,SAAS,wBAAwB,UAAU,EAAE,QAAQ,KAAK,QAAQ,OAAO,KAAK,MAAM,CAAC;AAC3F,QAAI,CAAC,OAAO,SAAS;AACnB,gBAAU;AAAA,QACR,IAAI;AAAA,QACJ,OAAO,EAAE,MAAM,oBAAoB,SAAS,OAAO,MAAM,OAAO,CAAC,GAAG,WAAW,oBAAoB;AAAA,MACrG,CAAC;AACD,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,QAAI;AACF,YAAM,OAAOF,cAAa;AAC1B,YAAM,OAAO,MAAM,OAA2B,oBAAoB;AAAA,QAChE,QAAQ,OAAO,KAAK;AAAA,QACpB,OAAO,OAAO,OAAO,KAAK,KAAK;AAAA,QAC/B,GAAI,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;AAAA,MACvC,CAAC;AACD,gBAAU;AAAA,QACR,IAAI;AAAA,QACJ,MAAM;AAAA,UACJ,MAAM,KAAK;AAAA,UACX,GAAI,KAAK,WAAW,SAAS,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,QAChE;AAAA,QACA,OAAO,aAAa,KAAK,MAAM,EAAE,WAAW,KAAK,aAAa,CAAC,EAAE,CAAC;AAAA,MACpE,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,MAAAC,MAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAED,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC;AACT,CAAC;AAED,IAAM,cAAcC,eAAc;AAAA,EAChC,MAAM,EAAE,MAAM,QAAQ,aAAa,2DAA2D;AAAA,EAC9F,KAAK,YAAY;AACf,QAAI;AACF,YAAM,OAAOF,cAAa;AAC1B,YAAM,OAAO,MAAM;AAAA,QACjB;AAAA,QACA,OAAO,EAAE,cAAc,KAAK,IAAI;AAAA,MAClC;AACA,gBAAU;AAAA,QACR,IAAI;AAAA;AAAA;AAAA,QAGJ,MAAM,KAAK,QAAQ,IAAI,CAAC,YAAY,EAAE,GAAG,QAAQ,QAAQ,QAAW,GAAG,YAAY,MAAM,EAAE,EAAE;AAAA,QAC7F,GAAI,KAAK,QAAQ,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,IACjD;AAAA,UACE,OAAO,KAAK,QAAQ,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,MAAM,CAAC,EAAE,OAAO,SAAS,IAC3E,CAAC,kBAAkB,IACnB,CAAC,sBAAsB;AAAA,QAC7B,IACA,CAAC;AAAA,MACP,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,MAAAC,MAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAED,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AAAA,IACJ,MAAM,EAAE,MAAM,UAAU,aAAa,qDAAgD,UAAU,KAAK;AAAA,IACpG,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,OAAO,EAAE,MAAM,UAAU,aAAa,qDAAqD,UAAU,MAAM;AAAA,IAC3G,QAAQ,EAAE,MAAM,UAAU,aAAa,yCAAyC,UAAU,MAAM;AAAA,EAClG;AACF,CAAC;AAED,IAAM,aAAaC,eAAc;AAAA,EAC/B,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUf;AAAA,EACA,MAAM;AAAA,IACJ,MAAM,EAAE,MAAM,UAAU,aAAa,gCAAgC,UAAU,KAAK;AAAA,IACpF,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,OAAO,EAAE,MAAM,UAAU,aAAa,qDAAqD,UAAU,MAAM;AAAA,IAC3G,QAAQ,EAAE,MAAM,UAAU,aAAa,yCAAyC,UAAU,MAAM;AAAA,EAClG;AAAA,EACA,KAAK,OAAO,EAAE,MAAM,QAAQ,MAAM;AAChC,QAAI;AACF,YAAM,QAAQ,WAAW,KAAK,KAAK;AACnC,YAAM,OAAOF,cAAa;AAC1B,YAAM,UAAU,aAAa,KAAK,QAAQ,OAAO;AACjD,YAAM,OAAO,MAAM,QAA0B,mBAAmB;AAAA,QAC9D,MAAM,KAAK;AAAA,QACX,KAAK,KAAK;AAAA,QACV;AAAA,QACA,GAAI,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;AAAA,QACrC,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,MAC/B,CAAC;AACD,gBAAU;AAAA,QACR,IAAI;AAAA,QACJ;AAAA,QACA,OAAO;AAAA,UACL;AAAA,UACA;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,MAAAC,MAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAED,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,EAAE,MAAM,EAAE,MAAM,UAAU,aAAa,yBAAyB,UAAU,KAAK,EAAE;AACzF,CAAC;AAED,IAAM,gBAAgBC,eAAc;AAAA,EAClC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA,EAIf;AAAA,EACA,MAAM,EAAE,MAAM,EAAE,MAAM,UAAU,aAAa,yBAAyB,UAAU,KAAK,EAAE;AAAA,EACvF,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,QAAI;AACF,YAAM,OAAOF,cAAa;AAC1B,YAAM,OAAO,MAAM,QAA8B,0BAA0B;AAAA,QACzE,MAAM,KAAK;AAAA,QACX,GAAI,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;AAAA,MACvC,CAAC;AACD,gBAAU,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,IAC9B,SAAS,KAAK;AACZ,MAAAC,MAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAED,IAAM,iBAAiB;AAAA,EACrB,MAAM,EAAE,MAAM,UAAU,aAAa,oDAAoD,UAAU,KAAK;AAC1G;AAEA,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AACR,CAAC;AAED,IAAM,gBAAgBC,eAAc;AAAA,EAClC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA,EAIf;AAAA,EACA,MAAM;AAAA,EACN,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,UAAM,SAAS,iCAAiC,UAAU,EAAE,MAAM,KAAK,MAAM,cAAcF,cAAa,EAAE,CAAC;AAC3G,QAAI,CAAC,OAAO,SAAS;AACnB,MAAAC,MAAK,IAAI,SAAS,oBAAoB,OAAO,MAAM,OAAO,CAAC,GAAG,WAAW,mBAAmB,CAAC;AAAA,IAC/F;AACA,QAAI;AACF,YAAM,OAAO,MAAM,QAAiC,0BAA0B,OAAO,IAAI;AACzF,gBAAU;AAAA,QACR,IAAI;AAAA,QACJ;AAAA,QACA,OAAO;AAAA,UACL,KAAK,KACD,6EACA,KAAK,YACH,yBACA;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,MAAAA,MAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAED,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AACR,CAAC;AAED,IAAM,iBAAiBC,eAAc;AAAA,EACnC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA,EAIf;AAAA,EACA,MAAM;AAAA,EACN,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,UAAM,SAAS,iCAAiC,UAAU,EAAE,MAAM,KAAK,MAAM,cAAcF,cAAa,EAAE,CAAC;AAC3G,QAAI,CAAC,OAAO,SAAS;AACnB,MAAAC,MAAK,IAAI,SAAS,oBAAoB,OAAO,MAAM,OAAO,CAAC,GAAG,WAAW,mBAAmB,CAAC;AAAA,IAC/F;AACA,QAAI;AACF,YAAM,OAAO,MAAM,QAAkC,2BAA2B,OAAO,IAAI;AAC3F,gBAAU;AAAA,QACR,IAAI;AAAA,QACJ;AAAA,QACA,OAAO;AAAA,UACL;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,MAAAA,MAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,IAAM,aAAaC,eAAc;AAAA,EACtC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAqBf;AAAA,EACA,aAAa;AAAA,IACX,WAAW;AAAA,IACX,SAAS;AAAA,IACT,OAAO;AAAA,IACP,SAAS;AAAA,IACT,MAAM;AAAA,IACN,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,SAAS;AAAA,EACX;AACF,CAAC;","names":["defineCommand","z","parsed","actingUserId","fail","defineCommand"]}

package/dist/media-ZWN7E777.js

@@ -1,18 +0,0 @@
-import "./chunk-YQSBHWOI.js";
-
-// src/commands/ads/meta/media.ts
-import { defineCommand } from "citty";
-var metaMediaCommand = defineCommand({
-  meta: {
-    name: "media",
-    description: "Stage Baker library media uploads to Meta so creatives can reference them (upload), or take an image out of the account's image library (delete --image-hash). Upload publishes an ad-image hash or video id a creative binds via --image-ref/--video-ref."
-  },
-  subCommands: {
-    upload: () => import("./write-commands-K6M3RTVK.js").then((m) => m.mediaUploadCommand),
-    delete: () => import("./asset-writes-72DEVXGO.js").then((m) => m.mediaDeleteCommand)
-  }
-});
-export {
-  metaMediaCommand
-};
-//# sourceMappingURL=media-ZWN7E777.js.map

package/dist/media-sources-7L622UTF.js

@@ -1,35 +0,0 @@
-import "./chunk-YQSBHWOI.js";
-
-// src/commands/media-sources/index.ts
-import { defineCommand } from "citty";
-var mediaSourcesCommand = defineCommand({
-  meta: {
-    name: "media-sources",
-    description: `Follow social accounts \u2014 the company's pages and its key people (CEO, CTO, head of sales\u2026) \u2014 on Instagram, TikTok, YouTube (videos), LinkedIn (pages and /in/ profiles) and Facebook. Their posts fill Posts (\`baker posts\`), their images and videos the libraries. A Google Drive folder is picked by the user in the chat (request_connection, platform google-drive, choose media-folder), never added here; once connected, list, sync, schedule and remove manage it like any source. Subcommands: add, update, list, sync, schedule, reset, remove.
-
-Examples:
-  baker media-sources add https://www.tiktok.com/@acme
-  baker media-sources add @acme --platform instagram --every daily
-  baker media-sources add https://www.linkedin.com/in/jane-doe --role ceo
-  baker media-sources update linkedin:in/jane-doe --role ceo --title "CEO & co-founder"
-  baker media-sources list
-  baker media-sources sync youtube:acme
-  baker media-sources schedule linkedin:acme --every monthly
-  baker media-sources reset instagram:acme        # unstick an import that never finished
-  baker media-sources remove facebook:acme
-Full guide: __tooling__/docs/tools/baker/media-sources.md`
-  },
-  subCommands: {
-    add: () => import("./add-6TDY6LPL.js").then((m) => m.addCommand),
-    update: () => import("./update-MCUXTMIZ.js").then((m) => m.updateCommand),
-    list: () => import("./list-R3TZDYXS.js").then((m) => m.listCommand),
-    sync: () => import("./sync-GSDC2OK2.js").then((m) => m.syncCommand),
-    schedule: () => import("./schedule-P6MVM7TK.js").then((m) => m.scheduleCommand),
-    reset: () => import("./reset-R4SIQXFH.js").then((m) => m.resetCommand),
-    remove: () => import("./remove-2ISYRP4H.js").then((m) => m.removeCommand)
-  }
-});
-export {
-  mediaSourcesCommand
-};
-//# sourceMappingURL=media-sources-7L622UTF.js.map

package/dist/members-QK5M5NCJ.js

@@ -1,45 +0,0 @@
-import {
-  failApi
-} from "./chunk-C6CBBZBO.js";
-import "./chunk-ZNNQK366.js";
-import "./chunk-CAZGM2NX.js";
-import "./chunk-NZS3KEQ2.js";
-import "./chunk-GIWHHCD6.js";
-import "./chunk-NSBNIPIW.js";
-import "./chunk-2TOIY2WN.js";
-import {
-  apiPost
-} from "./chunk-X7VQFLHI.js";
-import "./chunk-LU4HI4KI.js";
-import "./chunk-LGK7UWBN.js";
-import {
-  registerSchema,
-  writeJson
-} from "./chunk-Q7US4OOA.js";
-import "./chunk-YQSBHWOI.js";
-
-// src/commands/actions/members.ts
-import { defineCommand } from "citty";
-registerSchema({
-  command: "actions.members",
-  description: "The teammates a Task can be assigned to \u2014 everyone with access to this company that the person behind this chat can see, as { userId, name, email, role }. Pass a userId or email from here to `baker actions assign --to`. Read-only.",
-  args: {}
-});
-var membersCommand = defineCommand({
-  meta: {
-    name: "members",
-    description: "Teammates a Task can be assigned to. Example: baker actions members"
-  },
-  run: async () => {
-    try {
-      const response = await apiPost("/api/actions/members", {});
-      writeJson(response);
-    } catch (err) {
-      failApi(err);
-    }
-  }
-});
-export {
-  membersCommand
-};
-//# sourceMappingURL=members-QK5M5NCJ.js.map

package/dist/members-QK5M5NCJ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/commands/actions/members.ts"],"sourcesContent":["import type { ActionsMembersResponse } from \"@baker/api\";\nimport { defineCommand } from \"citty\";\nimport { apiPost } from \"../../client.ts\";\nimport { writeJson } from \"../../output.ts\";\nimport { registerSchema } from \"../../schemas.ts\";\nimport { failApi } from \"./shared.ts\";\n\nregisterSchema({\n  command: \"actions.members\",\n  description:\n    \"The teammates a Task can be assigned to — everyone with access to this company that the person behind this chat can see, as { userId, name, email, role }. Pass a userId or email from here to `baker actions assign --to`. Read-only.\",\n  args: {},\n});\n\nexport const membersCommand = defineCommand({\n  meta: {\n    name: \"members\",\n    description: \"Teammates a Task can be assigned to. Example: baker actions members\",\n  },\n  run: async () => {\n    try {\n      const response = await apiPost<ActionsMembersResponse>(\"/api/actions/members\", {});\n      writeJson(response);\n    } catch (err) {\n      failApi(err);\n    }\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AACA,SAAS,qBAAqB;AAM9B,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM,CAAC;AACT,CAAC;AAEM,IAAM,iBAAiB,cAAc;AAAA,EAC1C,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,EACf;AAAA,EACA,KAAK,YAAY;AACf,QAAI;AACF,YAAM,WAAW,MAAM,QAAgC,wBAAwB,CAAC,CAAC;AACjF,gBAAU,QAAQ;AAAA,IACpB,SAAS,KAAK;AACZ,cAAQ,GAAG;AAAA,IACb;AAAA,EACF;AACF,CAAC;","names":[]}

package/dist/meta-EHKXH257.js

@@ -1,122 +0,0 @@
-import "./chunk-YQSBHWOI.js";
-
-// src/commands/ads/meta/index.ts
-import { defineCommand } from "citty";
-var metaCommand = defineCommand({
-  meta: {
-    name: "meta",
-    description: `Meta Marketing API \u2014 AI-first command surface (Facebook + Instagram ads).
-
-Discovery:
-  baker ads meta accounts                                \u2014 accounts in this company's connected scope
-  baker ads meta businesses                              \u2014 Business Manager IDs
-  baker ads meta pages                                   \u2014 Facebook Pages the selected ad accounts can promote (an ad's identity)
-  baker ads meta lead-forms --page-id 100635183117758    \u2014 instant (lead) forms on a Page, with lead counts
-  baker ads meta lead-forms create --account-id act_123 --page-id 555 --file form.json \u2014 stage a new form
-  baker ads meta leads --form-id 987654321               \u2014 the leads one form collected (contact details masked)
-
-Snapshot a running account (default = ACTIVE only):
-  baker ads meta campaigns --account-id act_123
-  baker ads meta adsets --campaign-id 6123
-  baker ads meta ads --adset-id 6123
-  baker ads meta campaigns --account-id act_123 --all-statuses        \u2014 include paused, archived
-
-Build targeting (Meta takes ids, never names \u2014 look them up first):
-  baker ads meta targeting search --account-id act_123 --q "solar energy"  \u2014 interest/behavior/employer\u2026 ids
-  baker ads meta targeting geo --account-id act_123 --q Madrid             \u2014 location keys
-  baker ads meta targeting validate --account-id act_123 --targeting-file t.json
-  baker ads meta targeting estimate --account-id act_123 --targeting-file t.json --optimization-goal LEAD_GENERATION
-  baker ads meta targeting describe --account-id act_123 --adset-id 6123   \u2014 the audience in Meta's words
-
-Identities and libraries:
-  baker ads meta instagram-accounts --account-id act_123              \u2014 the --instagram-user an ad can run as
-  baker ads meta apps --account-id act_123                            \u2014 apps it can promote
-  baker ads meta dsa-recommendations --account-id act_123             \u2014 EU DSA beneficiary/payor names
-  baker ads meta images --account-id act_123                          \u2014 image hashes already on Meta
-  baker ads meta labels --account-id act_123
-  baker ads meta catalogs --business-id 601050769212882               \u2014 product catalogs; --catalog-id for product sets; products/sets/feeds/diagnostics
-  baker ads meta page-photos upload --page-id \u2026 --image-id \u2026           \u2014 a photo on a Page, not posted (Instant Experiences)
-  baker ads meta instant-experiences --page-id 904238019441800        \u2014 full-screen pages an ad can open (collection ads)
-  baker ads meta studies --account-id act_123                         \u2014 A/B tests; --study-id for results
-  baker ads meta high-demand-periods --campaign-id 6123               \u2014 budget boosts
-  baker ads meta page-posts --page-id 904238019441800                 \u2014 posts an ad can boost; instagram-media for Instagram
-  baker ads meta block-lists --account-id act_123                     \u2014 sites and apps ads stay off (brand safety)
-  baker ads meta reach-frequency --account-id act_123                 \u2014 reach & frequency quotes; predict | reserve | cancel
-  baker ads meta account-settings --account-id act_123 --spending-limit 5000 \u2014 account name / spending limit (staged)
-  baker ads meta comments --ad-id 120211234567890                     \u2014 comments on an ad's post
-  baker ads meta account-details --account-id act_123 --show users    \u2014 people, Meta's suggestions, Advantage+ controls, playables, page sets
-
-Drill in:
-  baker ads meta account --account-id act_123                         \u2014 currency, balance, business, whether it can deliver
-  baker ads meta creatives --creative-id 9988                         \u2014 single creative detail
-  baker ads meta audiences --account-id act_123
-  baker ads meta custom-conversions --account-id act_123              \u2014 the marketer's own conversions ("my conversions")
-  baker ads meta pixels --account-id act_123                          \u2014 pixel list
-  baker ads meta pixels --pixel-id 9988 --stats --days 7              \u2014 firing health
-
-Performance (the workhorse):
-  baker ads meta insights --object act_123                                                    \u2014 defaults: level=account, intent=baseline, last_7d
-  baker ads meta insights --object act_123 --intent revenue --date-preset last_28d
-  baker ads meta insights --object act_123 --level ad --intent ranking                        \u2014 flag creatives to refresh
-  baker ads meta insights --object act_123 --level adset --breakdowns publisher_platform,age  \u2014 placement \xD7 age
-  baker ads meta insights --object act_123 --level ad --since 2026-01-01 --until 2026-03-31   \u2014 auto-async
-  baker ads meta insights --list-intents
-
-Automated rules (run on Meta, unattended, once published):
-  baker ads meta rules --account-id act_123                           \u2014 every rule and what it does
-  baker ads meta rules history --rule-id 1132635173044914             \u2014 what a rule did and when
-  baker ads meta rules create --name "Stop expensive ads" --apply-to ad --when "cost_per_result>20" --action pause
-
-A/B tests (Meta splits the audience between versions and calls the winner):
-  baker ads meta adsets duplicate 6123 --name "\u2026 \u2013 lookalike"         \u2014 then change ONE thing on the copy
-  baker ads meta studies create --name "Broad vs lookalike" --adsets 6123,meta_temp_ab12 --start 2026-10-20T08:00Z --days 14
-
-Audit & review:
-  baker ads meta activities --account-id act_123 --days 14
-  baker ads meta preview --creative-id 9988 --ad-format MOBILE_FEED_STANDARD --out-file /tmp/p.html
-Full guide: __tooling__/docs/tools/baker/ads-meta.md`
-  },
-  subCommands: {
-    accounts: () => import("./accounts-FT2SRKMD.js").then((m) => m.accountsCommand),
-    account: () => import("./account-ZY655BIU.js").then((m) => m.accountCommand),
-    businesses: () => import("./businesses-MGP2YCEU.js").then((m) => m.businessesCommand),
-    pages: () => import("./pages-J6AF5NDU.js").then((m) => m.pagesCommand),
-    "lead-forms": () => import("./leads-SZOGCQFK.js").then((m) => m.leadFormsCommand),
-    "instant-experiences": () => import("./instant-experiences-HT3HB4QZ.js").then((m) => m.instantExperiencesCommand),
-    leads: () => import("./leads-SZOGCQFK.js").then((m) => m.leadsCommand),
-    campaigns: () => import("./campaigns-XZOQ2VTK.js").then((m) => m.campaignsCommand),
-    adsets: () => import("./adsets-YWBJFPAZ.js").then((m) => m.adsetsCommand),
-    ads: () => import("./ads-KBE5JXCH.js").then((m) => m.adsListCommand),
-    creatives: () => import("./creatives-JPKA2RHU.js").then((m) => m.creativesCommand),
-    audiences: () => import("./audiences-QAH42HIM.js").then((m) => m.audiencesCommand),
-    "custom-conversions": () => import("./custom-conversions-5HJBB5XL.js").then((m) => m.customConversionsCommand),
-    pixels: () => import("./pixels-ZZTB6NWF.js").then((m) => m.pixelsCommand),
-    activities: () => import("./activities-LKLPORDI.js").then((m) => m.activitiesCommand),
-    insights: () => import("./insights-M3CYB22P.js").then((m) => m.insightsCommand),
-    preview: () => import("./preview-CWRGDFCP.js").then((m) => m.previewCommand),
-    targeting: () => import("./targeting-VBQY3HUN.js").then((m) => m.targetingCommand),
-    "instagram-accounts": () => import("./account-assets-O7IA37RE.js").then((m) => m.instagramAccountsCommand),
-    apps: () => import("./account-assets-O7IA37RE.js").then((m) => m.appsCommand),
-    "dsa-recommendations": () => import("./account-assets-O7IA37RE.js").then((m) => m.dsaRecommendationsCommand),
-    images: () => import("./account-assets-O7IA37RE.js").then((m) => m.imagesCommand),
-    labels: () => import("./account-assets-O7IA37RE.js").then((m) => m.labelsCommand),
-    studies: () => import("./studies-ZOEUY6YP.js").then((m) => m.studiesCommand),
-    catalogs: () => import("./catalogs-JLCSFZYC.js").then((m) => m.catalogsCommand),
-    "page-photos": () => import("./page-photos-HWKQOSCU.js").then((m) => m.pagePhotosCommand),
-    "page-posts": () => import("./account-level-EU7BWCO7.js").then((m) => m.pagePostsCommand),
-    "instagram-media": () => import("./account-level-EU7BWCO7.js").then((m) => m.instagramMediaCommand),
-    comments: () => import("./account-level-EU7BWCO7.js").then((m) => m.commentsCommand),
-    "account-settings": () => import("./account-level-EU7BWCO7.js").then((m) => m.accountSettingsCommand),
-    "account-details": () => import("./account-level-EU7BWCO7.js").then((m) => m.accountDetailsCommand),
-    "block-lists": () => import("./account-level-EU7BWCO7.js").then((m) => m.blockListsCommand),
-    "reach-frequency": () => import("./account-level-EU7BWCO7.js").then((m) => m.reachFrequencyCommand),
-    "high-demand-periods": () => import("./account-assets-O7IA37RE.js").then((m) => m.highDemandPeriodsCommand),
-    rules: () => import("./rules-KTJ2ZZ62.js").then((m) => m.rulesCommand),
-    media: () => import("./media-ZWN7E777.js").then((m) => m.metaMediaCommand),
-    draft: () => import("./draft-RIR2V6A2.js").then((m) => m.metaDraftCommand)
-  }
-});
-export {
-  metaCommand
-};
-//# sourceMappingURL=meta-EHKXH257.js.map

package/dist/metrics-K6FDCMK7.js

@@ -1,152 +0,0 @@
-import {
-  PLANNER_FIELD_DESCRIPTIONS,
-  PLANNER_SOURCE,
-  stampPlannerRows
-} from "./chunk-2Y5V23PU.js";
-import {
-  buildAdsQueryContext,
-  warnDefaults
-} from "./chunk-ZNRGH4NS.js";
-import "./chunk-4GAEB6NK.js";
-import {
-  buildQueryCacheKey,
-  cacheGet,
-  cacheSet,
-  getManagerIdForCustomer,
-  handleConnectionError,
-  isNotConnectedError,
-  resolveCustomerId,
-  writeAdsJson,
-  writeAdsOutput
-} from "./chunk-ZRP7Y2DM.js";
-import "./chunk-2TOIY2WN.js";
-import {
-  ApiError,
-  apiPost
-} from "./chunk-X7VQFLHI.js";
-import "./chunk-LU4HI4KI.js";
-import "./chunk-LGK7UWBN.js";
-import {
-  registerSchema
-} from "./chunk-Q7US4OOA.js";
-import "./chunk-YQSBHWOI.js";
-
-// src/commands/ads/google/keywords/metrics.ts
-import { defineCommand } from "citty";
-registerSchema({
-  command: "ads.google.keywords.metrics",
-  description: 'Get historical market metrics for specific keywords. Returns { source: "keyword_planner_estimate", historical_metrics: [...] }. These are Keyword Planner estimates of total market search volume, not this account\'s data: every row carries a source column and every metric is prefixed planner_ (planner_avg_monthly_searches, planner_competition, ...). Never report a planner_ number as impressions, clicks or any account metric \u2014 read those with `baker ads google query` against the account. If --location and --language are omitted, they default to United States (2840) and English (1000); `query_context` shows which were used.',
-  args: {
-    "customer-id": {
-      type: "string",
-      description: "Google Ads customer ID (10 digits, no dashes). Falls back to BAKER_GOOGLE_ADS_CUSTOMER_ID env var.",
-      required: false
-    },
-    keywords: { type: "string", description: "Comma-separated keywords to analyze (max 200)", required: true },
-    location: {
-      type: "string",
-      description: "Geo target ID. Defaults to 2840 (United States) if omitted \u2014 always set this for non-US markets",
-      required: false
-    },
-    language: {
-      type: "string",
-      description: "Language ID. Defaults to 1000 (English) if omitted \u2014 always set this for non-English markets",
-      required: false
-    },
-    output: { type: "string", description: "Format: json|csv|jsonl|md", required: false, default: "json" },
-    "no-cache": { type: "boolean", description: "Skip cache", required: false }
-  }
-});
-function stampMetricsResponse(data) {
-  return { ...data, source: PLANNER_SOURCE, historical_metrics: stampPlannerRows(data.historical_metrics ?? []) };
-}
-function handleMetricsError(err) {
-  if (err instanceof ApiError) {
-    if (isNotConnectedError(err.code, err.message)) {
-      handleConnectionError("google_ads", err.message);
-    }
-    const envelope = {
-      ok: false,
-      error: {
-        code: err.code,
-        message: err.message,
-        fix: { action: "reject", explanation: err.message },
-        retryable: err.code === "RATE_LIMITED"
-      }
-    };
-    writeAdsJson(envelope);
-    process.exit(1);
-  }
-  writeAdsJson({ ok: false, error: { code: "NETWORK_ERROR", message: "Unexpected error" } });
-  process.exit(1);
-}
-var metricsCommand = defineCommand({
-  meta: {
-    name: "metrics",
-    description: `Get historical search metrics for specific keywords.
-
-Returns Keyword Planner ESTIMATES of market search volume, not this account's numbers. Every row carries source=keyword_planner_estimate and planner_-prefixed metrics; keep those names when you quote a figure, and never present one as an impression or click count.
-
-Examples:
-  baker ads google keywords metrics --customer-id 1234567890 --keywords "running shoes,nike shoes,adidas shoes"
-  baker ads google keywords metrics --customer-id 1234567890 --keywords "seo tools" --location 2826`
-  },
-  args: {
-    "customer-id": { type: "string", description: "Google Ads customer ID", required: false },
-    keywords: { type: "string", description: "Comma-separated keywords", required: true },
-    location: { type: "string", description: "Geo target ID (default 2840)", required: false },
-    language: { type: "string", description: "Language ID (default 1000)", required: false },
-    "no-cache": { type: "boolean", description: "Skip cache", required: false },
-    output: { type: "string", description: "Format: json|csv|jsonl|md", required: false, default: "json" }
-  },
-  run: async ({ args }) => {
-    const customerId = await resolveCustomerId(args);
-    const queryContext = buildAdsQueryContext(args.location, args.language);
-    const keywords = args.keywords.split(",").map((k) => k.trim()).filter(Boolean);
-    if (keywords.length === 0) {
-      writeAdsJson({ ok: false, error: { code: "VALIDATION_ERROR", message: "At least one keyword is required" } });
-      process.exit(1);
-    }
-    if (keywords.length > 200) {
-      writeAdsJson({ ok: false, error: { code: "VALIDATION_ERROR", message: "Maximum 200 keywords per request" } });
-      process.exit(1);
-    }
-    const body = { customerId, keywords };
-    const managerId = getManagerIdForCustomer(customerId);
-    if (managerId) body.managerId = managerId;
-    if (args.location) body.locationIds = [args.location];
-    if (args.language) body.languageId = args.language;
-    const useCache = !args["no-cache"];
-    if (!useCache) body.skipCache = true;
-    const cacheKey = buildQueryCacheKey(customerId, JSON.stringify(body));
-    if (useCache) {
-      const cached = cacheGet("keywords", cacheKey);
-      if (cached) {
-        warnDefaults(queryContext);
-        writeAdsJson({ ok: true, data: stampMetricsResponse(cached.data), cached: true, query_context: queryContext });
-        return;
-      }
-    }
-    try {
-      const data = await apiPost("/api/ads/google/keywords/metrics", body);
-      if (useCache) {
-        cacheSet("keywords", cacheKey, data, 24 * 60 * 60 * 1e3);
-      }
-      warnDefaults(queryContext);
-      const stamped = stampMetricsResponse(data);
-      const format = args.output || "json";
-      if (format !== "json") {
-        writeAdsOutput(stamped.historical_metrics, format);
-        return;
-      }
-      writeAdsJson({ ok: true, data: stamped, fields: PLANNER_FIELD_DESCRIPTIONS, query_context: queryContext });
-    } catch (err) {
-      handleMetricsError(err);
-    }
-  }
-});
-export {
-  metricsCommand,
-  stampMetricsResponse
-};
-//# sourceMappingURL=metrics-K6FDCMK7.js.map