@koda-sl/baker-cli 0.513.0 → 0.515.0

package/dist/chunk-EDLZGTGN.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../api/src/identity/digest.ts","../../api/src/identity/email.ts","../../api/src/identity/phone.ts","../../api/src/identity/index.ts","../../api/src/event-ingest/matching.ts","../../api/src/event-ingest/vocabulary.ts","../../api/src/event-sources/fields.ts","../../api/src/event-sources/template.ts"],"sourcesContent":["/**\n * The one hash, and the one way to recognise one.\n *\n * Web Crypto, so the same code runs in the Convex runtime, a Worker, Node and a\n * browser — an identity digest that differs by runtime is a digest that matches\n * nothing, and nothing about that failure is visible from either end.\n */\n\n/** SHA-256 in lowercase hex. The form every ad platform documents. */\nexport async function sha256Hex(value: string): Promise<string> {\n  const digest = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(value));\n  return Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nconst SHA256_HEX = /^[0-9a-fA-F]{64}$/;\n\n/**\n * Whether a value is already a SHA-256 digest — the check that decides whether\n * a field holds plain text to normalize and hash, or a digest someone else\n * computed. Hashing a hash produces a key that matches nothing, forever, with\n * no way to tell afterwards.\n */\nexport function isSha256Hex(value: string): boolean {\n  return SHA256_HEX.test(value);\n}\n\n/** The storable form of a supplied digest, or `null` if it is not one. */\nexport function normalizeSha256Hex(value: string): string | null {\n  const trimmed = value.trim();\n  return SHA256_HEX.test(trimmed) ? trimmed.toLowerCase() : null;\n}\n\n/**\n * The canonical form of a site's own id for a person, before it is hashed.\n *\n * Trim and lowercase, and deliberately nothing else. An `external_id` is an\n * opaque key in somebody else's system — a customer number, a CRM contact id, a\n * membership code — so there is no shape to check and no punctuation that means\n * anything. What matters is only that **both ends canonicalise it the same\n * way**: the browser hashing `Cust-4821` and the CRM hashing `cust-4821` would\n * produce two people out of one, with nothing anywhere to report it.\n *\n * Not part of the versioned normalizer beside it, on purpose. Those versions\n * exist because an address has a *correct* form that we learned late; this has\n * never had one and never will.\n */\nexport function normalizeExternalId(raw: string): string | null {\n  const trimmed = raw.trim().toLowerCase();\n  return trimmed === \"\" ? null : trimmed;\n}\n\n/** The digest a site's own id joins on, or `null` when there is nothing to hash. */\nexport async function externalIdDigest(raw: string): Promise<string | null> {\n  const canonical = normalizeExternalId(raw);\n  return canonical === null ? null : await sha256Hex(canonical);\n}\n","/**\n * Email normalization, one rule per version.\n *\n * A version is not a preference: a digest computed under v1 and stored a year\n * ago can never be recomputed, because the address that produced it was dropped\n * on purpose. So v1 is frozen at whatever the browser did on the day it ran, and\n * a better rule arrives as v2 alongside it rather than in place of it.\n */\n\n/**\n * **v1 — frozen.** Trim and lowercase, exactly what\n * the beacon's own rule (now `src/lib/tracking/identity-normalize.ts`) has always done. No shape check:\n * whatever the visitor typed was hashed, and every historical digest was\n * produced this way.\n *\n * `null` only for an empty result, which is the one case the beacon also\n * declines to report.\n */\nexport function normalizeEmailV1(raw: string): string | null {\n  const trimmed = raw.trim().toLowerCase();\n  return trimmed === \"\" ? null : trimmed;\n}\n\n/** No dots-as-separators, no length games: one `@`, a local part, a dotted domain. */\nconst EMAIL = /^[^\\s@]+@[^\\s@.]+(?:\\.[^\\s@.]+)+$/;\n\n/**\n * **v2.** v1 plus a shape check, so an unusable value is declined instead of\n * hashed into a key that can never match.\n */\nexport function normalizeEmailV2(raw: string): string | null {\n  const trimmed = raw.trim().toLowerCase();\n  return EMAIL.test(trimmed) ? trimmed : null;\n}\n\n/**\n * Google's own email canonicalization, applied on top of a normalized address:\n * for `gmail.com` and `googlemail.com`, drop the dots and any `+tag` from the\n * local part.\n *\n * `null` when there is no address left to send — a local part that was nothing\n * but a `+tag`. Google is the only platform that asks for this; Meta and\n * LinkedIn hash the address as written, which is why this is a provider step\n * and not part of the version.\n */\nexport function googleEmail(normalizedEmail: string): string | null {\n  const [localPart, domain, ...extraParts] = normalizedEmail.split(\"@\");\n  if (!localPart || !domain || extraParts.length > 0) return normalizedEmail;\n  if (domain !== \"gmail.com\" && domain !== \"googlemail.com\") return normalizedEmail;\n  const canonicalLocalPart = localPart.split(\"+\", 1)[0]?.replace(/\\./g, \"\") ?? \"\";\n  return canonicalLocalPart ? `${canonicalLocalPart}@${domain}` : null;\n}\n","/**\n * Phone normalization, one rule per version, plus the shape each platform\n * hashes.\n *\n * Three copies of this used to exist — the beacon's, the funnel contract's and\n * `lib/capi.ts` — and they disagreed on the `+`. A digest of `34600111222` and a\n * digest of `+34600111222` are two unrelated keys for one person, and neither\n * end reports anything when they fail to meet.\n */\n\n/**\n * **v1 — frozen.** Digits only, with a `+` in front, exactly what\n * the beacon's own rule (now `src/lib/tracking/identity-normalize.ts`) has always done. It guesses no\n * country code and validates nothing: a national number becomes `+600111222`,\n * and that is the digest sitting in the store for every visitor who identified\n * before v2 existed.\n */\nexport function normalizePhoneV1(raw: string): string | null {\n  const digits = raw\n    .trim()\n    .toLowerCase()\n    .replace(/[^0-9]/g, \"\");\n  return digits === \"\" ? null : `+${digits}`;\n}\n\n/** What a CRM writes around the digits and what E.164 does not keep. */\nconst PHONE_PUNCTUATION = /[\\s()./-]/g;\n/** E.164: `+`, a country code that cannot start at 0, up to 15 digits total. */\nconst E164 = /^\\+[1-9]\\d{7,14}$/;\n\n/**\n * **v2 — strict E.164.**\n *\n * A number with no international prefix is refused rather than guessed at. The\n * country code cannot be inferred from the value, and inventing one produces a\n * hash that silently matches nothing — worse than declining the key, because\n * the event still resolves by some other rung and nobody learns the phone was\n * lost. Both `+34…` and the access prefix `0034…` are accepted; a bare\n * `600111222` is not.\n */\nexport function normalizePhoneV2(raw: string): string | null {\n  const compact = raw.replace(PHONE_PUNCTUATION, \"\");\n  const e164 = compact.startsWith(\"00\") ? `+${compact.slice(2)}` : compact;\n  return E164.test(e164) ? e164 : null;\n}\n\n/**\n * E.164 without the `+` — what Meta, LinkedIn and Twitter hash.\n *\n * Google hashes the same number *with* the `+`, and that single character is\n * the whole reason this function has a name.\n */\nexport function phoneWithoutPlus(normalizedPhone: string): string {\n  return normalizedPhone.startsWith(\"+\") ? normalizedPhone.slice(1) : normalizedPhone;\n}\n","/**\n * Versioned identity normalization — one rule set, in one place, for the whole\n * platform.\n *\n * Several copies of \"normalize an email or a phone and hash it\" exist: the\n * browser beacon's, the one every Conversions API dispatcher shares\n * (`convex/lib/capi.ts`), and Google Ads' own on top of it\n * (`convex/sideEffects/googleAdsCapi/utils.ts`). They disagree about the `+` on\n * a phone, about whether a malformed address should be declined, and about\n * Gmail. Each disagreement is the same failure: two digests for one person, no\n * error anywhere, and an attribution that quietly matches nobody.\n *\n * **This module has taken over exactly one of them so far — the beacon's.** The\n * CAPI dispatchers still hold their own, because they sit on live conversion\n * uploads where a changed digest is money mis-attributed, so they move in their\n * own change with their own evidence. What is done instead, and now, is to make\n * the drift *detectable*: `capi.parity.test.ts` in `packages/backend` runs those\n * copies over the same table as these and fails when they stop agreeing. That is\n * the whole problem — the copies are identical today and nothing was watching.\n * One of them, Google Ads' phone rule, is genuinely a third rule and cannot be\n * pinned to either version; the test says so in place of pretending otherwise.\n *\n * Two ideas make that fixable rather than merely fixed:\n *\n * - **The version is data.** A digest cannot be recomputed — the plaintext was\n *   dropped on purpose, which is the point of holding a digest at all. So the\n *   rule that produced it is frozen as v1 and kept, and a better rule ships\n *   beside it as v2. Anything holding plaintext produces both and looks up\n *   both, which is why a normalization change cannot orphan the history.\n * - **The provider form is not the version.** Meta hashes E.164 without the\n *   `+`, Google hashes it with the `+` and canonicalizes Gmail addresses. Those\n *   are three digests of one canonical value, not three normalizations.\n */\n\nimport { sha256Hex } from \"./digest\";\nimport { normalizeEmailV1, normalizeEmailV2 } from \"./email\";\nimport { normalizePhoneV1, normalizePhoneV2 } from \"./phone\";\nimport { providerPlain } from \"./providers\";\nimport type { CanonicalIdentity, IdentityInput, NormalizationVersion } from \"./types\";\n\nexport { externalIdDigest, isSha256Hex, normalizeExternalId, normalizeSha256Hex, sha256Hex } from \"./digest\";\nexport { googleEmail, normalizeEmailV1, normalizeEmailV2 } from \"./email\";\nexport { normalizePhoneV1, normalizePhoneV2, phoneWithoutPlus } from \"./phone\";\nexport { type ProviderPlain, providerPlain } from \"./providers\";\nexport {\n  type CanonicalIdentity,\n  type IdentityInput,\n  type IdentityKind,\n  NORMALIZATION_VERSIONS,\n  type NormalizationVersion,\n} from \"./types\";\nexport { extractDomain, isPublicEmailDomain, workEmailDomain } from \"./workDomain\";\n\n/**\n * Apply one version's rule to plain text, or decline it.\n *\n * `null` means this version has no usable form of this value — not that the\n * person has no phone. Under v2 that happens to any national number, on\n * purpose: see {@link normalizePhoneV2}.\n */\nexport function normalizeIdentity(raw: IdentityInput, version: NormalizationVersion): CanonicalIdentity | null {\n  const value =\n    raw.kind === \"email\"\n      ? version === 1\n        ? normalizeEmailV1(raw.value)\n        : normalizeEmailV2(raw.value)\n      : version === 1\n        ? normalizePhoneV1(raw.value)\n        : normalizePhoneV2(raw.value);\n  return value === null ? null : { kind: raw.kind, value, normalizationVersion: version };\n}\n\n/**\n * The digests one canonical value produces, keyed by who asks for them.\n *\n * Snake case because this is a wire shape: it is what the browser sends, what\n * the ingest stores, and what an activation payload reads. `google_sha256` is\n * `null` when Google has no usable form of the value — a Gmail address whose\n * local part was only a `+tag`.\n */\nexport type IdentityDigests = {\n  canonical_sha256: string;\n  meta_sha256: string;\n  google_sha256: string | null;\n  normalization_version: NormalizationVersion;\n};\n\nexport async function providerDigests(canonical: CanonicalIdentity): Promise<IdentityDigests> {\n  const plain = providerPlain(canonical);\n  const [canonicalSha, metaSha, googleSha] = await Promise.all([\n    sha256Hex(plain.canonical),\n    sha256Hex(plain.meta),\n    plain.google === null ? Promise.resolve(null) : sha256Hex(plain.google),\n  ]);\n  return {\n    canonical_sha256: canonicalSha,\n    meta_sha256: metaSha,\n    google_sha256: googleSha,\n    normalization_version: canonical.normalizationVersion,\n  };\n}\n\n/**\n * The compact set a page sends and an ingest reads: one entry per version, plus\n * the two provider digests, for one plaintext value.\n *\n * `meta` and `google` are computed from the best version that produced a value\n * — v2 when it accepted the value, v1 otherwise — because a platform wants one\n * digest, not a history. `v1` and `v2` are both present when both rules\n * accepted the value, and they are equal when the two rules agreed.\n *\n * `null` when no version has a usable form: there is nothing to report, and\n * reporting an empty digest would be reporting the hash of the empty string.\n */\nexport type IdentityDigestSet = {\n  v1?: string;\n  v2?: string;\n  meta: string;\n  google?: string;\n};\n\nexport async function identityDigestSet(raw: IdentityInput): Promise<IdentityDigestSet | null> {\n  const v1 = normalizeIdentity(raw, 1);\n  const v2 = normalizeIdentity(raw, 2);\n  const best = v2 ?? v1;\n  if (best === null) return null;\n  const digests = await providerDigests(best);\n  return {\n    ...(v1 === null ? {} : { v1: v1.value === best.value ? digests.canonical_sha256 : await sha256Hex(v1.value) }),\n    ...(v2 === null ? {} : { v2: digests.canonical_sha256 }),\n    meta: digests.meta_sha256,\n    ...(digests.google_sha256 === null ? {} : { google: digests.google_sha256 }),\n  };\n}\n","/**\n * The customer-matching block: one vocabulary for everything Meta calls\n * *advanced matching* and Google calls *enhanced conversions*.\n *\n * ## Why these fields are here at all\n *\n * A server event is worth what it can be joined to. An email is the join that\n * works, and everything in this file is the second-best set for when the join\n * has to happen *outward* instead — Meta and Google both accept an event with\n * no email at all if it carries enough of a person: a name and a postcode, a\n * click id, a browser cookie. They disagree about spelling and about what has\n * to be hashed, and they do not disagree about the set.\n *\n * Two things follow, and they are the whole design:\n *\n * - **One block, one spelling.** A sender maps their CRM once, here, rather\n *   than once per destination. `MATCH_FIELD_FORWARDING` is the table that says\n *   what each field is called on the other side, so the mapping is published\n *   rather than folklore.\n * - **Kept in the form every destination can still be derived from.** That rule\n *   decides, per field, whether it is stored hashed or in the clear, and it is\n *   the only rule here worth remembering: **a digest can be computed later and\n *   never undone.** A city hashed on arrival can never be sent to Google, which\n *   wants `address_info.city` in plain text; a city kept in the clear can be\n *   hashed for Meta at the moment of sending, for free.\n *\n * So: hashed here are the fields **both** destinations want hashed and which\n * identify a person on their own — email, phone, the two names, the date of\n * birth, and the sender's own id. Kept in the clear are the coarse ones that\n * identify nobody by themselves and that Google wants unhashed: city, region,\n * postal code, country, and the gender letter. Hashing that second set would\n * buy no privacy — the digest of `es` is not a secret — and would cost the\n * ability to send them anywhere.\n *\n * ## A value that arrives already hashed\n *\n * Accepted for every field, and detected rather than declared. There is no\n * `email_sha256` beside `email` any more, because two fields for one idea is a\n * choice a sender should never have had to make: a 64-character hex string is\n * unambiguously a digest — no address, phone number, city or name can be one —\n * so the field can hold either and we can tell. What we cannot do is *unhash*,\n * so a digest arriving for a field this module would otherwise keep in the\n * clear is stored under `<field>_sha256`: the key says what is inside it, and a\n * forward that needs the plain value knows it does not have one.\n *\n * ## Normalization is Meta's, and the divergence is stated\n *\n * The hashed fields are normalized under the rule Meta publishes (lower case,\n * trimmed, punctuation and spacing removed) because a digest can only be\n * computed under one rule and Meta's is the stricter of the two. Google's rule\n * for a name is lower-case-and-trim only, so the two agree on every name\n * without punctuation in it and differ on `O'Brien`. Email and phone do not\n * have this problem: they go through `../identity`, which is the platform's one\n * versioned rule and the same one the browser beacon writes with — which is\n * what makes a server event and a Form submission land on one person.\n */\n\nimport { isSha256Hex, sha256Hex } from \"../identity\";\n\n/**\n * A field of `user_data` that describes the person rather than naming a click.\n *\n * `email` and `phone` are deliberately not here: they are resolved by\n * `./identity` into the row's own `identity_hash`, under the platform's\n * versioned rule, and this module reads that result rather than hashing them a\n * second time under a different one.\n */\nexport const MATCH_FIELDS = [\n  \"first_name\",\n  \"last_name\",\n  \"date_of_birth\",\n  \"gender\",\n  \"city\",\n  \"region\",\n  \"postal_code\",\n  \"country\",\n] as const;\nexport type MatchField = (typeof MATCH_FIELDS)[number];\n\n/**\n * The browser cookies Meta's pixel sets, which name a browser rather than a\n * person.\n *\n * `fbp` is the pixel's own first-party cookie and `fbc` is the one it derives\n * from a click. Both are sent to Meta **unhashed and verbatim** — they are\n * opaque strings of Meta's own making, and hashing one destroys it — so they\n * are stored exactly as they arrived.\n *\n * They are not in {@link MATCH_FIELDS} and not in the click-id list either.\n * They are not click ids: a `gclid` is stamped on a URL by the ad platform and\n * has a column of its own here because reports filter on it, while `fbp` is a\n * cookie a script wrote and nothing reports on. But they *do* name somebody,\n * which is why `namesSomebody` counts them — an event carrying only an `fbp` is\n * still an event Meta can attribute, and refusing it would lose exactly the\n * conversions this block exists to make sendable.\n */\nexport const MATCH_COOKIES = [\"fbp\", \"fbc\"] as const;\nexport type MatchCookie = (typeof MATCH_COOKIES)[number];\n\n/** How a field is stored, once it has been normalized. */\ntype Keeping = \"hashed\" | \"plain\";\n\ntype MatchSpec = {\n  keep: Keeping;\n  /** The canonical form, or `null` when the value says nothing usable. */\n  normalize: (value: string) => string | null;\n  /** What Meta and Google call this field, for the published mapping. */\n  meta: string;\n  google: string | null;\n};\n\n/** Lower-cased, trimmed, and stripped of everything that is not a letter or a digit. Meta's rule. */\nfunction tightened(value: string): string | null {\n  const stripped = value.toLowerCase().replace(/[^\\p{L}\\p{N}]/gu, \"\");\n  return stripped === \"\" ? null : stripped;\n}\n\n/** Lower-cased and trimmed, with runs of whitespace collapsed. Nothing else is removed. */\nfunction loosened(value: string): string | null {\n  const collapsed = value.trim().toLowerCase().replace(/\\s+/g, \" \");\n  return collapsed === \"\" ? null : collapsed;\n}\n\n/**\n * `1985-04-09`, `1985/04/09`, `19850409` — eight digits in year-month-day\n * order, however they are punctuated.\n *\n * The order is not guessed. `09/04/1985` is refused rather than read as the\n * ninth of April or the fourth of September: nothing in the value says which,\n * and a birth date hashed under the wrong reading is a digest that matches\n * nobody at Meta, with no error anywhere to say so. A refusal costs one field\n * on one event and is visible in the arrival log; a wrong guess costs the match\n * and is not.\n */\nfunction birthDate(value: string): string | null {\n  const digits = value.replace(/\\D/g, \"\");\n  if (!/^\\d{8}$/.test(digits)) return null;\n  const month = Number(digits.slice(4, 6));\n  const day = Number(digits.slice(6, 8));\n  if (month < 1 || month > 12 || day < 1 || day > 31) return null;\n  return digits;\n}\n\n/** `f` or `m`, from whatever word or letter the sender's system stores. */\nfunction genderLetter(value: string): string | null {\n  const first = value.trim().toLowerCase().charAt(0);\n  return first === \"f\" || first === \"m\" ? first : null;\n}\n\n/** ISO-3166 alpha-2, lower-cased. A country name is refused rather than guessed at. */\nfunction countryCode(value: string): string | null {\n  const code = value.trim().toLowerCase();\n  return /^[a-z]{2}$/.test(code) ? code : null;\n}\n\nexport const MATCH_SPECS: Readonly<Record<MatchField, MatchSpec>> = {\n  first_name: { keep: \"hashed\", normalize: tightened, meta: \"fn\", google: \"hashed_first_name\" },\n  last_name: { keep: \"hashed\", normalize: tightened, meta: \"ln\", google: \"hashed_last_name\" },\n  // Meta only. Google's enhanced conversions have no date of birth, so there is\n  // no destination wanting it in the clear and every reason not to keep one.\n  date_of_birth: { keep: \"hashed\", normalize: birthDate, meta: \"db\", google: null },\n  gender: { keep: \"plain\", normalize: genderLetter, meta: \"ge\", google: null },\n  city: { keep: \"plain\", normalize: loosened, meta: \"ct\", google: \"city\" },\n  region: { keep: \"plain\", normalize: loosened, meta: \"st\", google: \"state\" },\n  postal_code: { keep: \"plain\", normalize: loosened, meta: \"zp\", google: \"postal_code\" },\n  country: { keep: \"plain\", normalize: countryCode, meta: \"country\", google: \"country_code\" },\n};\n\n/** One row of the published mapping: our name, Meta's, Google's, and whether we hold it hashed. */\nexport type MatchFieldForwarding = {\n  field: string;\n  meta: string;\n  google: string | null;\n  hashed: boolean;\n};\n\n/**\n * What each field of the matching block is called at the destinations that\n * accept it — the table the dialog and the docs both read.\n *\n * Published rather than described, because \"it maps onto Meta's user_data\" is\n * a promise a sender cannot check and this is the same promise they can.\n */\nexport const MATCH_FIELD_FORWARDING: readonly MatchFieldForwarding[] = [\n  { field: \"email\", meta: \"em\", google: \"hashed_email\", hashed: true },\n  { field: \"phone\", meta: \"ph\", google: \"hashed_phone_number\", hashed: true },\n  // Kept in the clear — see `resolveOwnId`. The digest is still computed and\n  // still stored beside it, so a Meta forward has one; what changed is that the\n  // sender's own key is now readable, which is the entire reason they sent it.\n  { field: \"external_id\", meta: \"external_id\", google: null, hashed: false },\n  ...MATCH_FIELDS.map((field) => ({\n    field,\n    meta: MATCH_SPECS[field].meta,\n    google: MATCH_SPECS[field].google,\n    hashed: MATCH_SPECS[field].keep === \"hashed\",\n  })),\n  { field: \"fbp\", meta: \"fbp\", google: null, hashed: false },\n  { field: \"fbc\", meta: \"fbc\", google: null, hashed: false },\n];\n\n/** The longest a stored match value may be, matching the width the map's values are held at. */\nconst MAX_MATCH_VALUE = 255;\n\n/**\n * One field, resolved to the key it is stored under and the value stored there.\n *\n * `null` when the field said nothing usable — `gender: \"unknown\"`, a country\n * spelled out in full, a postcode of whitespace. A field that is present and\n * unusable contributes nothing rather than storing something that matches\n * nobody, which is the same rule the identity resolution follows.\n */\nexport async function resolveMatchField(\n  field: MatchField,\n  raw: string,\n): Promise<{ key: string; value: string } | null> {\n  const value = raw.trim();\n  if (value === \"\") return null;\n  const spec = MATCH_SPECS[field];\n  // Already a digest, whatever this field would otherwise keep. Taken at face\n  // value — hashing a hash matches nothing, forever — and keyed so that the\n  // name says what is inside, because a plain-text destination cannot use it.\n  if (isSha256Hex(value)) return { key: `${field}_sha256`, value: value.toLowerCase() };\n  const normalized = spec.normalize(value);\n  if (normalized === null) return null;\n  if (spec.keep === \"plain\") return { key: field, value: normalized.slice(0, MAX_MATCH_VALUE) };\n  return { key: `${field}_sha256`, value: await sha256Hex(normalized) };\n}\n\n/**\n * The two ids that are not facts about a person but *names the sender chose*,\n * kept exactly as they were sent.\n *\n * `external_id` is the client's own key — a HubSpot contact id, a Salesforce\n * record id — and `baker_id` is a cookie value one of our own pages minted.\n * Neither describes anybody: they are pointers, and a pointer is worth only\n * what it can be followed with.\n *\n * ## Why these are the exception to \"identifying fields are hashed\"\n *\n * `external_id` used to be hashed here and nothing else, on the reasoning that\n * it is sometimes an email or a document number in disguise. That reasoning\n * held and the consequence did not: it made the field **useless to the person\n * who sent it**. An integrator posting `external_id: \"hs:contact:12345\"` opened\n * the event and read *Provided, stored hashed* — no way to check we had read\n * the right record, no way to paste the id back into their CRM, and no way to\n * tell a working integration from one silently keyed on the wrong column. The\n * whole point of the field is to be recognised on the way back out.\n *\n * The privacy this bought was also smaller than it looked. The digest is still\n * computed, still what `identity_hash` stores and still what the identity graph\n * joins on — see `./identity` — so nothing about the joining changed. What is\n * new is a second copy in the clear, under the key that says so.\n *\n * A value that arrives *already* a digest still keeps `<field>_sha256`, for the\n * rule that governs every field here: a digest cannot be undone, so the key has\n * to say what is inside it.\n */\nexport function resolveOwnId(field: \"external_id\" | \"baker_id\", raw: string): { key: string; value: string } | null {\n  const value = raw.trim();\n  if (value === \"\") return null;\n  if (isSha256Hex(value)) return { key: `${field}_sha256`, value: value.toLowerCase() };\n  return { key: field, value: value.slice(0, MAX_MATCH_VALUE) };\n}\n\n/** A cookie value, as Meta minted it: bounded, and otherwise untouched. */\nexport function resolveMatchCookie(raw: string): string | null {\n  const value = raw.trim();\n  return value === \"\" ? null : value.slice(0, MAX_MATCH_VALUE);\n}\n\n/**\n * The `fbclid` hiding inside an `fbc`, or `null`.\n *\n * `fbc` is `fb.<subdomain index>.<timestamp>.<fbclid>` — Meta's own encoding of\n * a click id it already saw. A sender whose system stored the cookie has the\n * click id and does not know it, so reading it out costs one split and gives\n * the event the same paid-attribution column a landing page would have written\n * from the URL. Nothing is invented: the value was there.\n */\nexport function fbclidFromFbc(fbc: string): string | null {\n  const parts = fbc.split(\".\");\n  if (parts.length < 4 || parts[0] !== \"fb\") return null;\n  const id = parts.slice(3).join(\".\");\n  return id === \"\" ? null : id;\n}\n","/**\n * The click ids a sender may hand over, named the way their own system stored\n * them.\n *\n * The wire uses the **URL parameter** spelling (`li_fat_id`) rather than the\n * analytics row's field spelling (`liFatId`), because a client's CRM captured\n * these off a landing URL and that is the name it wrote them down under.\n * {@link clickIdsFromWire} is the one place the two vocabularies meet.\n *\n * Mirrored from `CLICK_ID_FIELDS` in `../analytics/normalize.ts`, which is the\n * source of truth for which click ids the store has columns for.\n * `vocabulary.parity.test.ts` reads that file and fails if the two drift — a\n * missing entry here is an attribution a client sent and we dropped.\n */\n\nimport type { ClickIdFields } from \"../analytics/normalize\";\n\nexport const INGEST_CLICK_ID_PARAMS = [\n  \"gclid\",\n  \"wbraid\",\n  \"gbraid\",\n  \"dclid\",\n  \"fbclid\",\n  \"ttclid\",\n  \"twclid\",\n  \"li_fat_id\",\n  \"msclkid\",\n  \"rdt_cid\",\n  \"epik\",\n  \"sccid\",\n  \"oppref\",\n] as const;\nexport type IngestClickIdParam = (typeof INGEST_CLICK_ID_PARAMS)[number];\n\nconst FIELD_FOR_PARAM: Readonly<Record<IngestClickIdParam, keyof ClickIdFields>> = {\n  gclid: \"gclid\",\n  wbraid: \"wbraid\",\n  gbraid: \"gbraid\",\n  dclid: \"dclid\",\n  fbclid: \"fbclid\",\n  ttclid: \"ttclid\",\n  twclid: \"twclid\",\n  li_fat_id: \"liFatId\",\n  msclkid: \"msclkid\",\n  rdt_cid: \"rdtCid\",\n  epik: \"epik\",\n  sccid: \"sccid\",\n  oppref: \"oppref\",\n};\n\n/** The wire's click block as the analytics row builder names its fields. Empty values are dropped. */\nexport function clickIdsFromWire(click: Partial<Record<IngestClickIdParam, string | null>> | null | undefined): {\n  clickIds: ClickIdFields;\n  kinds: IngestClickIdParam[];\n} {\n  const clickIds: ClickIdFields = {};\n  const kinds: IngestClickIdParam[] = [];\n  for (const param of INGEST_CLICK_ID_PARAMS) {\n    const value = click?.[param];\n    if (typeof value !== \"string\" || value === \"\") continue;\n    clickIds[FIELD_FOR_PARAM[param]] = value;\n    kinds.push(param);\n  }\n  return { clickIds, kinds };\n}\n","/**\n * What a source can be read into: the fields of an event, named the way\n * `POST /v1/events` already names them.\n *\n * Assembled from the ingest vocabulary rather than spelled a fourth time. A\n * mapping is `SourceField → dotted path`, and the field half of that pair has\n * to be a name the wire already accepts, because the whole of what a source\n * does is build an `IngestEventInput` and hand it to the same door the\n * client's own server would have used. A field that existed only here would be\n * a field the event could not carry.\n */\n\nimport { MATCH_FIELDS, type MatchField } from \"../event-ingest/matching\";\nimport type { IngestClickIdParam } from \"../event-ingest/vocabulary\";\nimport { INGEST_CLICK_ID_PARAMS } from \"../event-ingest/vocabulary\";\n\n/** Where a field sits on the sheet: one row per group, in this order. */\nexport type SourceFieldGroup = \"event\" | \"person\" | \"money\" | \"click\";\n\nexport type SourceField =\n  | \"event_name\"\n  | \"event_time\"\n  | \"event_id\"\n  | \"email\"\n  | \"phone\"\n  | \"external_id\"\n  | MatchField\n  | \"value\"\n  | \"currency\"\n  | IngestClickIdParam;\n\nexport interface SourceFieldSpec {\n  field: SourceField;\n  /** The product word for it — what the sheet and the CLI show. */\n  label: string;\n  group: SourceFieldGroup;\n}\n\nconst MATCH_LABELS: Readonly<Record<MatchField, string>> = {\n  first_name: \"First name\",\n  last_name: \"Last name\",\n  date_of_birth: \"Date of birth\",\n  gender: \"Gender\",\n  city: \"City\",\n  region: \"Region\",\n  postal_code: \"Postcode\",\n  country: \"Country\",\n};\n\nconst CLICK_LABELS: Readonly<Record<IngestClickIdParam, string>> = {\n  gclid: \"Google click id\",\n  wbraid: \"Google click id (iOS, web to app)\",\n  gbraid: \"Google click id (iOS, app)\",\n  dclid: \"Google click id (Display & Video)\",\n  fbclid: \"Meta click id\",\n  ttclid: \"TikTok click id\",\n  twclid: \"X click id\",\n  li_fat_id: \"LinkedIn click id\",\n  msclkid: \"Microsoft click id\",\n  rdt_cid: \"Reddit click id\",\n  epik: \"Pinterest click id\",\n  sccid: \"Snapchat click id\",\n  oppref: \"ChatGPT Ads click id\",\n};\n\nexport const SOURCE_FIELDS: readonly SourceFieldSpec[] = [\n  { field: \"event_name\", label: \"What happened\", group: \"event\" },\n  { field: \"event_time\", label: \"When it happened\", group: \"event\" },\n  { field: \"event_id\", label: \"Its id\", group: \"event\" },\n  { field: \"email\", label: \"Email\", group: \"person\" },\n  { field: \"phone\", label: \"Phone\", group: \"person\" },\n  { field: \"external_id\", label: \"Your own id for the person\", group: \"person\" },\n  ...MATCH_FIELDS.map((field) => ({ field, label: MATCH_LABELS[field], group: \"person\" as const })),\n  { field: \"value\", label: \"Amount\", group: \"money\" },\n  { field: \"currency\", label: \"Currency\", group: \"money\" },\n  ...INGEST_CLICK_ID_PARAMS.map((field) => ({ field, label: CLICK_LABELS[field], group: \"click\" as const })),\n];\n\nexport const SOURCE_FIELD_NAMES: readonly SourceField[] = SOURCE_FIELDS.map((spec) => spec.field);\n\nconst FIELD_SET: ReadonlySet<string> = new Set(SOURCE_FIELD_NAMES);\n\nexport function isSourceField(value: string): value is SourceField {\n  return FIELD_SET.has(value);\n}\n\nexport const SOURCE_FIELD_GROUPS: readonly { group: SourceFieldGroup; label: string; detail: string }[] = [\n  { group: \"event\", label: \"The event\", detail: \"What it is called, when it happened, and its own id.\" },\n  {\n    group: \"person\",\n    label: \"Who it is about\",\n    detail: \"How the platforms find the person. Email or phone is the one that matters.\",\n  },\n  {\n    group: \"money\",\n    label: \"What it was worth\",\n    detail: \"The amount and its currency, for revenue and for the platforms.\",\n  },\n  {\n    group: \"click\",\n    label: \"The ad click that brought them\",\n    detail: \"When the source keeps the click id, the campaign gets the credit.\",\n  },\n];\n\n/**\n * A row that is not a field of the event but one of its own **properties** —\n * the flat `properties` object every event carries, which Measure → Events\n * breaks an event down by and which a send can forward to a platform as an\n * extra parameter (Meta's `custom_data`, a GA4 event parameter).\n *\n * Spelled `properties.<key>` in the mapping so the row shares the table with\n * the fields and the CLI's `--field` takes it unchanged, while an unknown bare\n * key is still refused: the namespace is what tells a deliberate extra\n * property from a typo that would otherwise silently map nothing.\n */\nexport const PROPERTY_ROW_PREFIX = \"properties.\";\n\n/** The longest a property's key may be. Keys are a shared dictionary in the store, so they are kept short and plain. */\nexport const PROPERTY_KEY_MAX = 64;\n\n/** Letters, digits, underscore, dash and dot — what a property key of `POST /v1/events` may be, and what a platform parameter name may be. */\nconst PROPERTY_KEY = /^[A-Za-z0-9_][A-Za-z0-9_.-]*$/;\n\n/** Keys a source writes itself; a row naming one would be overwritten in silence. */\nexport const RESERVED_PROPERTY_KEYS: readonly string[] = [\"baker_source\", \"hubspot_property\", \"hubspot_value\"];\n\n/** Whether a mapping row names a property rather than a field. */\nexport function isPropertyRow(row: string): boolean {\n  return row.startsWith(PROPERTY_ROW_PREFIX);\n}\n\n/** The property's own key, for a `properties.<key>` row; null for anything else. */\nexport function propertyKeyOf(row: string): string | null {\n  return isPropertyRow(row) ? row.slice(PROPERTY_ROW_PREFIX.length) : null;\n}\n\n/** The mapping row for a property key. */\nexport function propertyRow(key: string): string {\n  return `${PROPERTY_ROW_PREFIX}${key}`;\n}\n\n/**\n * Why a property key cannot be used, in one sentence, or null when it can.\n * The same rule for a source's extra properties and for a send's parameters.\n */\nexport function propertyKeyProblem(key: string): string | null {\n  const trimmed = key.trim();\n  if (trimmed === \"\") return \"A property needs a name.\";\n  if (trimmed.length > PROPERTY_KEY_MAX) return `A property name is at most ${PROPERTY_KEY_MAX} characters.`;\n  if (!PROPERTY_KEY.test(trimmed)) {\n    return `\"${trimmed}\" is not a property name: letters, digits, underscore, dash and dot only, starting with a letter or digit.`;\n  }\n  if (RESERVED_PROPERTY_KEYS.includes(trimmed)) return `\"${trimmed}\" is written by Baker itself; pick another name.`;\n  return null;\n}\n\n/**\n * Whether a mapping row is one a source can hold: a field of the event, or a\n * well-named property. The reason when it is not.\n */\nexport function mappingRowProblem(row: string): string | null {\n  if (isSourceField(row)) return null;\n  const key = propertyKeyOf(row);\n  if (key === null) {\n    return `\"${row}\" is not a field an event can carry. A field is one of ${SOURCE_FIELD_NAMES.join(\", \")}; an extra property is spelled properties.<name>.`;\n  }\n  return propertyKeyProblem(key);\n}\n\n/** The property rows of a mapping, as `key → template`, in the order stored. */\nexport function propertyRows(mapping: Readonly<Record<string, string>>): { key: string; template: string }[] {\n  return Object.entries(mapping).flatMap(([row, template]) => {\n    const key = propertyKeyOf(row);\n    return key === null ? [] : [{ key, template }];\n  });\n}\n","/**\n * A mapping row is a template: literal text with `{{mentions}}` in it.\n *\n * ## Why a template and not a path\n *\n * A row used to hold one dotted path, and one path answers one question —\n * \"which field of the payload is the email\". It cannot answer the next three:\n * a currency the tool never sends but the company knows (`EUR`), a name split\n * over two fields (`{{firstname}} {{lastname}}`), or an amount a HubSpot\n * contact carries under a property nobody would guess. A template answers all\n * of them with one rule the Forms builder already teaches: type text, insert\n * a variable. The same spelling is what the CLI takes, so an agent and a\n * person write the same thing.\n *\n * ## What a mention points at\n *\n * Whatever the source can read. For an address it is a dotted path into the\n * payload (`contact.email`, `deal.contacts.0.email`); for a HubSpot read it\n * is a contact property's internal name (`hs_google_click_id`), plus `id` for\n * the contact's own id. The template does not know which — the lookup passed\n * to `renderTemplate` does.\n *\n * A mention names exactly one thing. There was a `{{phone|mobilephone}}`\n * spelling for \"the first that holds anything\"; it is gone, because it was a\n * rule the Forms builder's variables do not have, and a row that reads\n * differently from every other variable field in the product is a row nobody\n * can predict. A person who wants the mobile picks the mobile.\n */\n\nconst MENTION = /\\{\\{\\s*([^{}]+?)\\s*\\}\\}/g;\n\n/** The path a mention names, with the braces on. */\nexport function mentionOf(path: string): string {\n  return `{{${path}}}`;\n}\n\n/** Every path a template reads, in order, once each. */\nexport function templateMentions(template: string): string[] {\n  const seen: string[] = [];\n  for (const match of template.matchAll(MENTION)) {\n    const path = (match[1] ?? \"\").trim();\n    if (path !== \"\" && !seen.includes(path)) seen.push(path);\n  }\n  return seen;\n}\n\n/**\n * The template with every mention replaced by what it points at, trimmed —\n * or nothing, when what is left is empty. An empty mention reads as empty\n * text rather than as its own spelling, so a template made only of mentions\n * the payload did not fill is \"not sent\", not the literal `{{phone}}`.\n */\nexport function renderTemplate(template: string, lookup: (path: string) => string | undefined): string | undefined {\n  const rendered = template.replace(MENTION, (_whole, path: string) => lookup(path.trim()) ?? \"\").trim();\n  return rendered === \"\" ? undefined : rendered;\n}\n\n/** The one path a template is, when it is exactly one mention and nothing else. */\nexport function isBareMention(template: string): string | null {\n  const match = /^\\{\\{\\s*([^{}]+?)\\s*\\}\\}$/.exec(template.trim());\n  return match === null ? null : (match[1] ?? null);\n}\n"],"mappings":";AAcA,IAAM,aAAa;AAQZ,SAAS,YAAY,OAAwB;AAClD,SAAO,WAAW,KAAK,KAAK;AAC9B;;;ACNO,SAAS,iBAAiB,KAA4B;AAC3D,QAAM,UAAU,IAAI,KAAK,EAAE,YAAY;AACvC,SAAO,YAAY,KAAK,OAAO;AACjC;AAGA,IAAM,QAAQ;AAMP,SAAS,iBAAiB,KAA4B;AAC3D,QAAM,UAAU,IAAI,KAAK,EAAE,YAAY;AACvC,SAAO,MAAM,KAAK,OAAO,IAAI,UAAU;AACzC;;;AChBO,SAAS,iBAAiB,KAA4B;AAC3D,QAAM,SAAS,IACZ,KAAK,EACL,YAAY,EACZ,QAAQ,WAAW,EAAE;AACxB,SAAO,WAAW,KAAK,OAAO,IAAI,MAAM;AAC1C;AAGA,IAAM,oBAAoB;AAE1B,IAAM,OAAO;AAYN,SAAS,iBAAiB,KAA4B;AAC3D,QAAM,UAAU,IAAI,QAAQ,mBAAmB,EAAE;AACjD,QAAM,OAAO,QAAQ,WAAW,IAAI,IAAI,IAAI,QAAQ,MAAM,CAAC,CAAC,KAAK;AACjE,SAAO,KAAK,KAAK,IAAI,IAAI,OAAO;AAClC;;;ACgBO,SAAS,kBAAkB,KAAoB,SAAyD;AAC7G,QAAM,QACJ,IAAI,SAAS,UACT,YAAY,IACV,iBAAiB,IAAI,KAAK,IAC1B,iBAAiB,IAAI,KAAK,IAC5B,YAAY,IACV,iBAAiB,IAAI,KAAK,IAC1B,iBAAiB,IAAI,KAAK;AAClC,SAAO,UAAU,OAAO,OAAO,EAAE,MAAM,IAAI,MAAM,OAAO,sBAAsB,QAAQ;AACxF;;;ACHO,IAAM,eAAe;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAoBO,IAAM,gBAAgB,CAAC,OAAO,KAAK;AAgB1C,SAAS,UAAU,OAA8B;AAC/C,QAAM,WAAW,MAAM,YAAY,EAAE,QAAQ,mBAAmB,EAAE;AAClE,SAAO,aAAa,KAAK,OAAO;AAClC;AAGA,SAAS,SAAS,OAA8B;AAC9C,QAAM,YAAY,MAAM,KAAK,EAAE,YAAY,EAAE,QAAQ,QAAQ,GAAG;AAChE,SAAO,cAAc,KAAK,OAAO;AACnC;AAaA,SAAS,UAAU,OAA8B;AAC/C,QAAM,SAAS,MAAM,QAAQ,OAAO,EAAE;AACtC,MAAI,CAAC,UAAU,KAAK,MAAM,EAAG,QAAO;AACpC,QAAM,QAAQ,OAAO,OAAO,MAAM,GAAG,CAAC,CAAC;AACvC,QAAM,MAAM,OAAO,OAAO,MAAM,GAAG,CAAC,CAAC;AACrC,MAAI,QAAQ,KAAK,QAAQ,MAAM,MAAM,KAAK,MAAM,GAAI,QAAO;AAC3D,SAAO;AACT;AAGA,SAAS,aAAa,OAA8B;AAClD,QAAM,QAAQ,MAAM,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC;AACjD,SAAO,UAAU,OAAO,UAAU,MAAM,QAAQ;AAClD;AAGA,SAAS,YAAY,OAA8B;AACjD,QAAM,OAAO,MAAM,KAAK,EAAE,YAAY;AACtC,SAAO,aAAa,KAAK,IAAI,IAAI,OAAO;AAC1C;AAEO,IAAM,cAAuD;AAAA,EAClE,YAAY,EAAE,MAAM,UAAU,WAAW,WAAW,MAAM,MAAM,QAAQ,oBAAoB;AAAA,EAC5F,WAAW,EAAE,MAAM,UAAU,WAAW,WAAW,MAAM,MAAM,QAAQ,mBAAmB;AAAA;AAAA;AAAA,EAG1F,eAAe,EAAE,MAAM,UAAU,WAAW,WAAW,MAAM,MAAM,QAAQ,KAAK;AAAA,EAChF,QAAQ,EAAE,MAAM,SAAS,WAAW,cAAc,MAAM,MAAM,QAAQ,KAAK;AAAA,EAC3E,MAAM,EAAE,MAAM,SAAS,WAAW,UAAU,MAAM,MAAM,QAAQ,OAAO;AAAA,EACvE,QAAQ,EAAE,MAAM,SAAS,WAAW,UAAU,MAAM,MAAM,QAAQ,QAAQ;AAAA,EAC1E,aAAa,EAAE,MAAM,SAAS,WAAW,UAAU,MAAM,MAAM,QAAQ,cAAc;AAAA,EACrF,SAAS,EAAE,MAAM,SAAS,WAAW,aAAa,MAAM,WAAW,QAAQ,eAAe;AAC5F;AAiBO,IAAM,yBAA0D;AAAA,EACrE,EAAE,OAAO,SAAS,MAAM,MAAM,QAAQ,gBAAgB,QAAQ,KAAK;AAAA,EACnE,EAAE,OAAO,SAAS,MAAM,MAAM,QAAQ,uBAAuB,QAAQ,KAAK;AAAA;AAAA;AAAA;AAAA,EAI1E,EAAE,OAAO,eAAe,MAAM,eAAe,QAAQ,MAAM,QAAQ,MAAM;AAAA,EACzE,GAAG,aAAa,IAAI,CAAC,WAAW;AAAA,IAC9B;AAAA,IACA,MAAM,YAAY,KAAK,EAAE;AAAA,IACzB,QAAQ,YAAY,KAAK,EAAE;AAAA,IAC3B,QAAQ,YAAY,KAAK,EAAE,SAAS;AAAA,EACtC,EAAE;AAAA,EACF,EAAE,OAAO,OAAO,MAAM,OAAO,QAAQ,MAAM,QAAQ,MAAM;AAAA,EACzD,EAAE,OAAO,OAAO,MAAM,OAAO,QAAQ,MAAM,QAAQ,MAAM;AAC3D;;;ACrLO,IAAM,yBAAyB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;;;ACOA,IAAM,eAAqD;AAAA,EACzD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,SAAS;AACX;AAEA,IAAM,eAA6D;AAAA,EACjE,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,SAAS;AAAA,EACT,SAAS;AAAA,EACT,MAAM;AAAA,EACN,OAAO;AAAA,EACP,QAAQ;AACV;AAEO,IAAM,gBAA4C;AAAA,EACvD,EAAE,OAAO,cAAc,OAAO,iBAAiB,OAAO,QAAQ;AAAA,EAC9D,EAAE,OAAO,cAAc,OAAO,oBAAoB,OAAO,QAAQ;AAAA,EACjE,EAAE,OAAO,YAAY,OAAO,UAAU,OAAO,QAAQ;AAAA,EACrD,EAAE,OAAO,SAAS,OAAO,SAAS,OAAO,SAAS;AAAA,EAClD,EAAE,OAAO,SAAS,OAAO,SAAS,OAAO,SAAS;AAAA,EAClD,EAAE,OAAO,eAAe,OAAO,8BAA8B,OAAO,SAAS;AAAA,EAC7E,GAAG,aAAa,IAAI,CAAC,WAAW,EAAE,OAAO,OAAO,aAAa,KAAK,GAAG,OAAO,SAAkB,EAAE;AAAA,EAChG,EAAE,OAAO,SAAS,OAAO,UAAU,OAAO,QAAQ;AAAA,EAClD,EAAE,OAAO,YAAY,OAAO,YAAY,OAAO,QAAQ;AAAA,EACvD,GAAG,uBAAuB,IAAI,CAAC,WAAW,EAAE,OAAO,OAAO,aAAa,KAAK,GAAG,OAAO,QAAiB,EAAE;AAC3G;AAEO,IAAM,qBAA6C,cAAc,IAAI,CAAC,SAAS,KAAK,KAAK;AAEhG,IAAM,YAAiC,IAAI,IAAI,kBAAkB;AAE1D,SAAS,cAAc,OAAqC;AACjE,SAAO,UAAU,IAAI,KAAK;AAC5B;AAgCO,IAAM,sBAAsB;AAG5B,IAAM,mBAAmB;AAGhC,IAAM,eAAe;AAGd,IAAM,yBAA4C,CAAC,gBAAgB,oBAAoB,eAAe;AAGtG,SAAS,cAAc,KAAsB;AAClD,SAAO,IAAI,WAAW,mBAAmB;AAC3C;AAGO,SAAS,cAAc,KAA4B;AACxD,SAAO,cAAc,GAAG,IAAI,IAAI,MAAM,oBAAoB,MAAM,IAAI;AACtE;AAWO,SAAS,mBAAmB,KAA4B;AAC7D,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,YAAY,GAAI,QAAO;AAC3B,MAAI,QAAQ,SAAS,iBAAkB,QAAO,8BAA8B,gBAAgB;AAC5F,MAAI,CAAC,aAAa,KAAK,OAAO,GAAG;AAC/B,WAAO,IAAI,OAAO;AAAA,EACpB;AACA,MAAI,uBAAuB,SAAS,OAAO,EAAG,QAAO,IAAI,OAAO;AAChE,SAAO;AACT;AAMO,SAAS,kBAAkB,KAA4B;AAC5D,MAAI,cAAc,GAAG,EAAG,QAAO;AAC/B,QAAM,MAAM,cAAc,GAAG;AAC7B,MAAI,QAAQ,MAAM;AAChB,WAAO,IAAI,GAAG,0DAA0D,mBAAmB,KAAK,IAAI,CAAC;AAAA,EACvG;AACA,SAAO,mBAAmB,GAAG;AAC/B;;;AC3IA,IAAM,UAAU;AAGT,SAAS,UAAU,MAAsB;AAC9C,SAAO,KAAK,IAAI;AAClB;AAGO,SAAS,iBAAiB,UAA4B;AAC3D,QAAM,OAAiB,CAAC;AACxB,aAAW,SAAS,SAAS,SAAS,OAAO,GAAG;AAC9C,UAAM,QAAQ,MAAM,CAAC,KAAK,IAAI,KAAK;AACnC,QAAI,SAAS,MAAM,CAAC,KAAK,SAAS,IAAI,EAAG,MAAK,KAAK,IAAI;AAAA,EACzD;AACA,SAAO;AACT;","names":[]}

package/dist/chunk-EXSHBYNQ.js

@@ -1,349 +0,0 @@
-import {
-  handleLinkedinError,
-  resolveAccountIdArg
-} from "./chunk-PFTYKINE.js";
-import {
-  adCopyHints,
-  booleanWordPositionalError,
-  capabilityFix
-} from "./chunk-SCAGMX2I.js";
-import {
-  withHints
-} from "./chunk-D5FY4FAK.js";
-import {
-  writeJsonEnvelope
-} from "./chunk-ZRP7Y2DM.js";
-import {
-  LINKEDIN_DRAFT_BATCH_MAX,
-  linkedinDraftOpInputSchema,
-  listColumnField
-} from "./chunk-ZNNQK366.js";
-import {
-  apiPost
-} from "./chunk-X7VQFLHI.js";
-import {
-  requireChatId
-} from "./chunk-LGK7UWBN.js";
-
-// src/commands/ads/linkedin/write-shared.ts
-import { createHash } from "crypto";
-import { readFileSync } from "fs";
-var TOTAL_BUDGET_HELP = "Lifetime budget \u2014 on something already running it must exceed spend to date, or LinkedIn rejects it";
-function bareAccountId(args) {
-  const raw = resolveAccountIdArg(args);
-  return raw.replace(/^urn:li:sponsoredAccount:/, "").replace(/^sponsoredAccount:/, "");
-}
-function failWriteValidation(message) {
-  writeJsonEnvelope({ ok: false, error: { code: "VALIDATION_ERROR", message } });
-  process.exit(1);
-}
-function loadJsonFileArg(path) {
-  if (typeof path !== "string" || path.length === 0) {
-    return {};
-  }
-  try {
-    const parsed = JSON.parse(readFileSync(path, "utf8"));
-    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-      failWriteValidation(`${path} must contain a JSON object`);
-    }
-    return parsed;
-  } catch (err) {
-    if (err instanceof SyntaxError) {
-      failWriteValidation(`${path} is not valid JSON: ${err.message}`);
-    }
-    throw err;
-  }
-}
-function mergePayload(file, flags) {
-  const merged = { ...file };
-  for (const [key, value] of Object.entries(flags)) {
-    if (value !== void 0) {
-      merged[key] = value;
-    }
-  }
-  return merged;
-}
-function loadPatchArg(args) {
-  const file = typeof args.file === "string" && args.file.length > 0 ? args.file : void 0;
-  const inline = typeof args.patch === "string" && args.patch.length > 0 ? args.patch : void 0;
-  if (Boolean(file) === Boolean(inline)) {
-    failWriteValidation("pass exactly one of --file <patch.json> or --patch '<json>'");
-  }
-  if (file) {
-    return loadJsonFileArg(file);
-  }
-  try {
-    const parsed = JSON.parse(inline);
-    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-      failWriteValidation("--patch must be a JSON object");
-    }
-    return parsed;
-  } catch (err) {
-    if (err instanceof SyntaxError) {
-      failWriteValidation(`--patch is not valid JSON: ${err.message}`);
-    }
-    throw err;
-  }
-}
-function parseMoneyFlag(amount, currency, flag) {
-  if (amount === void 0 || amount === null || amount === "") {
-    return void 0;
-  }
-  if (currency === void 0 || currency === null || currency === "") {
-    return { amount: String(amount) };
-  }
-  if (typeof currency !== "string" || currency.length !== 3) {
-    failWriteValidation(`${flag} got an invalid --currency (expected a 3-letter code like EUR)`);
-  }
-  return { amount: String(amount), currencyCode: currency.toUpperCase() };
-}
-function parseDateFlag(value, flag) {
-  if (value === void 0 || value === null || value === "") {
-    return void 0;
-  }
-  const raw = String(value);
-  if (/^\d{10,}$/.test(raw)) {
-    return Number(raw);
-  }
-  const parsed = Date.parse(raw);
-  if (Number.isNaN(parsed)) {
-    failWriteValidation(`${flag} must be an ISO date (2026-07-10) or epoch milliseconds`);
-  }
-  return parsed;
-}
-function parseOnOffFlag(value, flag) {
-  if (value === void 0 || value === null || value === "") {
-    return void 0;
-  }
-  const raw = String(value).toLowerCase();
-  if (raw === "on" || raw === "true") {
-    return true;
-  }
-  if (raw === "off" || raw === "false") {
-    return false;
-  }
-  failWriteValidation(`${flag} must be on|off`);
-}
-function parseLocaleFlag(value) {
-  if (value === void 0 || value === null || value === "") {
-    return void 0;
-  }
-  const match = /^([a-z]{2})[_-]([A-Za-z]{2})$/.exec(String(value));
-  if (!match) {
-    failWriteValidation("--locale must look like en_US (language_COUNTRY)");
-  }
-  return { language: match[1], country: match[2].toUpperCase() };
-}
-function loadTargetingFileArg(path) {
-  if (typeof path !== "string" || path.length === 0) {
-    return void 0;
-  }
-  const parsed = loadJsonFileArg(path);
-  const criteria = parsed.targetingCriteria ?? parsed;
-  if (!criteria.include) {
-    failWriteValidation(
-      `${path} must contain targeting criteria with an "include" block (see baker schema ads.linkedin.campaigns.create)`
-    );
-  }
-  return criteria;
-}
-var SHA256_HEX = /^[0-9a-f]{64}$/i;
-function sha256Lower(value) {
-  const email = value.trim().toLowerCase();
-  return SHA256_HEX.test(email) ? email : createHash("sha256").update(email).digest("hex");
-}
-function parseCsvLine(line) {
-  const cells = [];
-  let current = "";
-  let inQuotes = false;
-  for (let i = 0; i < line.length; i++) {
-    const char = line[i];
-    if (inQuotes) {
-      if (char === '"' && line[i + 1] === '"') {
-        current += '"';
-        i++;
-      } else if (char === '"') {
-        inQuotes = false;
-      } else {
-        current += char;
-      }
-    } else if (char === '"') {
-      inQuotes = true;
-    } else if (char === ",") {
-      cells.push(current);
-      current = "";
-    } else {
-      current += char;
-    }
-  }
-  cells.push(current);
-  return cells.map((cell) => cell.trim());
-}
-function parseListFileArg(path, maxRows) {
-  if (typeof path !== "string" || path.length === 0) {
-    return void 0;
-  }
-  const raw = readFileSync(path, "utf8");
-  const lines = raw.split(/\r?\n/).filter((line) => line.trim().length > 0);
-  if (lines.length < 2) {
-    failWriteValidation(`${path} needs a header row and at least one data row`);
-  }
-  const columns = parseCsvLine(lines[0]).map((column) => column.trim());
-  const rows = [];
-  for (const line of lines.slice(1)) {
-    const cells = parseCsvLine(line);
-    const row = {};
-    columns.forEach((column, index) => {
-      const value = cells[index] ?? "";
-      if (!value) {
-        return;
-      }
-      row[column] = listColumnField(column) === "email" ? sha256Lower(value) : value;
-    });
-    if (Object.keys(row).length > 0) {
-      rows.push(row);
-    }
-  }
-  if (rows.length > maxRows) {
-    failWriteValidation(`${path} has ${rows.length} rows \u2014 the inline limit is ${maxRows}. Split the list.`);
-  }
-  return { columns, rows };
-}
-function failPreflight(fields) {
-  writeJsonEnvelope({
-    ok: false,
-    error: {
-      code: "VALIDATION_ERROR",
-      message: fields.map((field) => field.path ? `${field.path}: ${field.message}` : field.message).join("; "),
-      fields,
-      fix: capabilityFix("linkedin-ads")
-    }
-  });
-  process.exit(1);
-}
-var BATCH_NUDGE = "This command takes several ids at once \u2014 pass them comma-separated or with --ids-file instead of one call per id.";
-function batchNudge(data) {
-  return data.sameKindStaged === void 0 ? [] : [BATCH_NUDGE];
-}
-async function stageOp(raw, hints) {
-  const preflight = linkedinDraftOpInputSchema.safeParse(raw);
-  if (!preflight.success) {
-    failPreflight(preflight.error.issues.map((issue) => ({ path: issue.path.join("."), message: issue.message })));
-  }
-  try {
-    const chatId = requireChatId();
-    const response = await apiPost("/api/ads/linkedin/draft/stage", {
-      chatId,
-      op: preflight.data
-    });
-    const allHints = [...batchNudge(response.data), ...hints ?? [], ...await adCopyHints(preflight.data)];
-    writeJsonEnvelope(withHints(response, allHints));
-  } catch (err) {
-    handleLinkedinError(err);
-  }
-}
-async function stageLinkedinOps(rawOps, hints) {
-  if (rawOps.length === 1 && rawOps[0]) {
-    await stageOp(rawOps[0], hints);
-    return;
-  }
-  const ops = [];
-  for (const [index, raw] of rawOps.entries()) {
-    const preflight = linkedinDraftOpInputSchema.safeParse(raw);
-    if (!preflight.success) {
-      failPreflight(
-        preflight.error.issues.map((issue) => ({
-          path: `ops[${index}]${issue.path.length > 0 ? `.${issue.path.join(".")}` : ""}`,
-          message: issue.message
-        }))
-      );
-    }
-    ops.push(preflight.data);
-  }
-  try {
-    const chatId = requireChatId();
-    const response = await apiPost("/api/ads/linkedin/draft/stage-batch", { chatId, ops });
-    const allHints = [...hints ?? [], ...await adCopyHints(ops)];
-    writeJsonEnvelope(withHints(response, allHints));
-  } catch (err) {
-    handleLinkedinError(err);
-  }
-}
-async function stageStatusChange(input) {
-  const payload = input.kind === "creative.update" ? { intendedStatus: input.status } : { status: input.status };
-  await stageLinkedinOps(
-    input.targets.map((target) => ({ kind: input.kind, accountId: input.accountId, target, payload }))
-  );
-}
-function requireTarget(args, entity) {
-  const inverted = booleanWordPositionalError(args, entity);
-  if (inverted !== void 0) {
-    failWriteValidation(inverted);
-  }
-  const positionals = readPositionals(args);
-  const target = args.id ?? args.target ?? args.ref ?? positionals[0];
-  if (typeof target !== "string" || target.length === 0) {
-    failWriteValidation(`pass the ${entity} id or URN as the positional argument`);
-  }
-  if (positionals.length > 1 || splitIdList(target).length > 1) {
-    failWriteValidation(
-      `this command takes one ${entity} id \u2014 run it once per id. Only pause/resume/archive/delete and 'creatives update' accept several ids in one call.`
-    );
-  }
-  return target;
-}
-function readPositionals(args) {
-  if (!Array.isArray(args._)) {
-    return [];
-  }
-  return args._.filter((value) => typeof value === "string" && value.length > 0);
-}
-function splitIdList(raw) {
-  return raw.split(",").map((id) => id.trim()).filter(Boolean);
-}
-function idsFileEntries(path) {
-  if (typeof path !== "string" || path.length === 0) {
-    return [];
-  }
-  return readFileSync(path, "utf8").split(/\r?\n/).map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#")).flatMap(splitIdList);
-}
-function requireTargets(args, entity) {
-  const positionals = readPositionals(args);
-  const named = [args.id, args.target, args.ref].filter(
-    (value) => typeof value === "string" && value.length > 0
-  );
-  const fromArgs = positionals.length > 0 ? positionals : named;
-  const targets = [.../* @__PURE__ */ new Set([...fromArgs.flatMap(splitIdList), ...idsFileEntries(args["ids-file"])])];
-  if (targets.length === 0) {
-    failWriteValidation(
-      `pass the ${entity} id or URN as the positional argument (comma-separated for several), or --ids-file <path>`
-    );
-  }
-  if (targets.length > LINKEDIN_DRAFT_BATCH_MAX) {
-    failWriteValidation(
-      `${targets.length} ids exceeds the batch limit of ${LINKEDIN_DRAFT_BATCH_MAX} \u2014 split the list`
-    );
-  }
-  return targets;
-}
-
-export {
-  TOTAL_BUDGET_HELP,
-  bareAccountId,
-  failWriteValidation,
-  loadJsonFileArg,
-  mergePayload,
-  loadPatchArg,
-  parseMoneyFlag,
-  parseDateFlag,
-  parseOnOffFlag,
-  parseLocaleFlag,
-  loadTargetingFileArg,
-  parseListFileArg,
-  stageOp,
-  stageLinkedinOps,
-  stageStatusChange,
-  requireTarget,
-  requireTargets
-};
-//# sourceMappingURL=chunk-EXSHBYNQ.js.map

package/dist/chunk-EXSHBYNQ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/commands/ads/linkedin/write-shared.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { readFileSync } from \"node:fs\";\nimport {\n  LINKEDIN_DRAFT_BATCH_MAX,\n  type LinkedinDraftStageBatchResponse,\n  type LinkedinDraftStageResponse,\n  linkedinDraftOpInputSchema,\n  listColumnField,\n} from \"@baker/api\";\nimport { apiPost } from \"../../../client.ts\";\nimport { requireChatId } from \"../../../env.ts\";\nimport { capabilityFix } from \"../../capabilities/fix.ts\";\nimport { booleanWordPositionalError } from \"../boolean-word-positional.ts\";\nimport { adCopyHints } from \"../copy-hints.ts\";\nimport { withHints } from \"../hints.ts\";\nimport { writeJsonEnvelope } from \"../output.ts\";\nimport { handleLinkedinError, resolveAccountIdArg } from \"./shared.ts\";\n\n/**\n * Shared plumbing for the staged write commands. Writes NEVER hit LinkedIn\n * directly: every command stages an op against this chat's draft\n * (`/api/ads/linkedin/draft/stage`), the dashboard shows it as a pending\n * LinkedIn change, and it applies when the chat is published.\n */\n\n/**\n * LinkedIn rejects a lifetime budget at or below what the entity has already\n * spent, so the flag needs the constraint wherever it is offered — the same\n * text on every surface (`--help` and `baker schema`) so the two can't drift.\n */\nexport const TOTAL_BUDGET_HELP =\n  \"Lifetime budget — on something already running it must exceed spend to date, or LinkedIn rejects it\";\n\nexport function bareAccountId(args: Record<string, unknown>): string {\n  const raw = resolveAccountIdArg(args);\n  return raw.replace(/^urn:li:sponsoredAccount:/, \"\").replace(/^sponsoredAccount:/, \"\");\n}\n\nexport function failWriteValidation(message: string): never {\n  writeJsonEnvelope({ ok: false, error: { code: \"VALIDATION_ERROR\", message } });\n  process.exit(1);\n}\n\nexport function loadJsonFileArg(path: unknown): Record<string, unknown> {\n  if (typeof path !== \"string\" || path.length === 0) {\n    return {};\n  }\n  try {\n    const parsed = JSON.parse(readFileSync(path, \"utf8\")) as unknown;\n    if (parsed === null || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n      failWriteValidation(`${path} must contain a JSON object`);\n    }\n    return parsed as Record<string, unknown>;\n  } catch (err) {\n    if (err instanceof SyntaxError) {\n      failWriteValidation(`${path} is not valid JSON: ${err.message}`);\n    }\n    throw err;\n  }\n}\n\n/** Flags override file keys — the file is the base, flags are the overrides. */\nexport function mergePayload(file: Record<string, unknown>, flags: Record<string, unknown>): Record<string, unknown> {\n  const merged: Record<string, unknown> = { ...file };\n  for (const [key, value] of Object.entries(flags)) {\n    if (value !== undefined) {\n      merged[key] = value;\n    }\n  }\n  return merged;\n}\n\n/**\n * The `draft amend` patch: exactly one of `--file <path>` (JSON file) or `--patch '<json>'`\n * (inline string), and it must parse to a JSON object — RFC-7386 merge-patch needs an object to\n * merge, and a stray array/scalar would silently no-op or replace the whole payload.\n */\nexport function loadPatchArg(args: Record<string, unknown>): Record<string, unknown> {\n  const file = typeof args.file === \"string\" && args.file.length > 0 ? args.file : undefined;\n  const inline = typeof args.patch === \"string\" && args.patch.length > 0 ? args.patch : undefined;\n  if (Boolean(file) === Boolean(inline)) {\n    failWriteValidation(\"pass exactly one of --file <patch.json> or --patch '<json>'\");\n  }\n  if (file) {\n    return loadJsonFileArg(file);\n  }\n  try {\n    const parsed = JSON.parse(inline as string) as unknown;\n    if (parsed === null || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n      failWriteValidation(\"--patch must be a JSON object\");\n    }\n    return parsed as Record<string, unknown>;\n  } catch (err) {\n    if (err instanceof SyntaxError) {\n      failWriteValidation(`--patch is not valid JSON: ${err.message}`);\n    }\n    throw err;\n  }\n}\n\nexport function parseMoneyFlag(\n  amount: unknown,\n  currency: unknown,\n  flag: string,\n): { amount: string; currencyCode?: string } | undefined {\n  if (amount === undefined || amount === null || amount === \"\") {\n    return undefined;\n  }\n  if (currency === undefined || currency === null || currency === \"\") {\n    // LinkedIn ad accounts are single-currency — the backend fills it in.\n    return { amount: String(amount) };\n  }\n  if (typeof currency !== \"string\" || currency.length !== 3) {\n    failWriteValidation(`${flag} got an invalid --currency (expected a 3-letter code like EUR)`);\n  }\n  return { amount: String(amount), currencyCode: currency.toUpperCase() };\n}\n\n/** Accepts ISO dates (2026-07-10), ISO datetimes, or epoch millis. */\nexport function parseDateFlag(value: unknown, flag: string): number | undefined {\n  if (value === undefined || value === null || value === \"\") {\n    return undefined;\n  }\n  const raw = String(value);\n  if (/^\\d{10,}$/.test(raw)) {\n    return Number(raw);\n  }\n  const parsed = Date.parse(raw);\n  if (Number.isNaN(parsed)) {\n    failWriteValidation(`${flag} must be an ISO date (2026-07-10) or epoch milliseconds`);\n  }\n  return parsed;\n}\n\nexport function parseOnOffFlag(value: unknown, flag: string): boolean | undefined {\n  if (value === undefined || value === null || value === \"\") {\n    return undefined;\n  }\n  const raw = String(value).toLowerCase();\n  if (raw === \"on\" || raw === \"true\") {\n    return true;\n  }\n  if (raw === \"off\" || raw === \"false\") {\n    return false;\n  }\n  failWriteValidation(`${flag} must be on|off`);\n}\n\nexport function parseLocaleFlag(value: unknown): { country: string; language: string } | undefined {\n  if (value === undefined || value === null || value === \"\") {\n    return undefined;\n  }\n  const match = /^([a-z]{2})[_-]([A-Za-z]{2})$/.exec(String(value));\n  if (!match) {\n    failWriteValidation(\"--locale must look like en_US (language_COUNTRY)\");\n  }\n  return { language: match[1] as string, country: (match[2] as string).toUpperCase() };\n}\n\nexport function loadTargetingFileArg(path: unknown): Record<string, unknown> | undefined {\n  if (typeof path !== \"string\" || path.length === 0) {\n    return undefined;\n  }\n  const parsed = loadJsonFileArg(path);\n  // Accept either the bare criteria object or a { targetingCriteria } wrapper.\n  const criteria = (parsed.targetingCriteria as Record<string, unknown> | undefined) ?? parsed;\n  if (!criteria.include) {\n    failWriteValidation(\n      `${path} must contain targeting criteria with an \"include\" block (see baker schema ads.linkedin.campaigns.create)`,\n    );\n  }\n  return criteria;\n}\n\nconst SHA256_HEX = /^[0-9a-f]{64}$/i;\n\n/** An email the export already hashed is kept as it is: hashing it again would match nobody. */\nfunction sha256Lower(value: string): string {\n  const email = value.trim().toLowerCase();\n  return SHA256_HEX.test(email) ? email : createHash(\"sha256\").update(email).digest(\"hex\");\n}\n\nfunction parseCsvLine(line: string): string[] {\n  const cells: string[] = [];\n  let current = \"\";\n  let inQuotes = false;\n  for (let i = 0; i < line.length; i++) {\n    const char = line[i];\n    if (inQuotes) {\n      if (char === '\"' && line[i + 1] === '\"') {\n        current += '\"';\n        i++;\n      } else if (char === '\"') {\n        inQuotes = false;\n      } else {\n        current += char;\n      }\n    } else if (char === '\"') {\n      inQuotes = true;\n    } else if (char === \",\") {\n      cells.push(current);\n      current = \"\";\n    } else {\n      current += char;\n    }\n  }\n  cells.push(current);\n  return cells.map((cell) => cell.trim());\n}\n\nexport interface ParsedList {\n  columns: string[];\n  rows: Array<Record<string, string>>;\n}\n\n/**\n * Parses a header-first CSV into row objects. Email columns (any header\n * `listColumnField` reads as email) are SHA-256 hashed here, unless already hashed, so raw addresses never leave the machine or sit in the draft.\n */\nexport function parseListFileArg(path: unknown, maxRows: number): ParsedList | undefined {\n  if (typeof path !== \"string\" || path.length === 0) {\n    return undefined;\n  }\n  const raw = readFileSync(path, \"utf8\");\n  const lines = raw.split(/\\r?\\n/).filter((line) => line.trim().length > 0);\n  if (lines.length < 2) {\n    failWriteValidation(`${path} needs a header row and at least one data row`);\n  }\n  const columns = parseCsvLine(lines[0] as string).map((column) => column.trim());\n  const rows: Array<Record<string, string>> = [];\n  for (const line of lines.slice(1)) {\n    const cells = parseCsvLine(line);\n    const row: Record<string, string> = {};\n    columns.forEach((column, index) => {\n      const value = cells[index] ?? \"\";\n      if (!value) {\n        return;\n      }\n      row[column] = listColumnField(column) === \"email\" ? sha256Lower(value) : value;\n    });\n    if (Object.keys(row).length > 0) {\n      rows.push(row);\n    }\n  }\n  if (rows.length > maxRows) {\n    failWriteValidation(`${path} has ${rows.length} rows — the inline limit is ${maxRows}. Split the list.`);\n  }\n  return { columns, rows };\n}\n\ninterface StageEnvelope extends Record<string, unknown> {\n  ok: true;\n  data: LinkedinDraftStageResponse;\n}\n\n/** Structured preflight failure — the agent learns WHICH field (and, in a batch, which op) is wrong. */\nfunction failPreflight(fields: Array<{ path: string; message: string }>): never {\n  writeJsonEnvelope({\n    ok: false,\n    error: {\n      code: \"VALIDATION_ERROR\",\n      message: fields.map((field) => (field.path ? `${field.path}: ${field.message}` : field.message)).join(\"; \"),\n      fields,\n      fix: capabilityFix(\"linkedin-ads\"),\n    },\n  });\n  process.exit(1);\n}\n\n/**\n * The agent is staging one id per call for a kind it has already staged in this\n * draft — the exact loop these commands' id lists exist to replace.\n */\nconst BATCH_NUDGE =\n  \"This command takes several ids at once — pass them comma-separated or with --ids-file instead of one call per id.\";\n\nfunction batchNudge(data: LinkedinDraftStageResponse): string[] {\n  return data.sameKindStaged === undefined ? [] : [BATCH_NUDGE];\n}\n\n/**\n * Preflight-validates the op against the shared `@baker/api` contract (same\n * schema the backend enforces), then stages it. Prints the staged envelope —\n * ref, mode (always `live`: publishing reaches the real ad account), summary,\n * warnings.\n */\nexport async function stageOp(raw: Record<string, unknown>, hints?: string[]): Promise<void> {\n  const preflight = linkedinDraftOpInputSchema.safeParse(raw);\n  if (!preflight.success) {\n    failPreflight(preflight.error.issues.map((issue) => ({ path: issue.path.join(\".\"), message: issue.message })));\n  }\n  try {\n    const chatId = requireChatId();\n    const response = await apiPost<StageEnvelope>(\"/api/ads/linkedin/draft/stage\", {\n      chatId,\n      op: preflight.data,\n    });\n    const allHints = [...batchNudge(response.data), ...(hints ?? []), ...(await adCopyHints(preflight.data))];\n    writeJsonEnvelope(withHints(response, allHints));\n  } catch (err) {\n    handleLinkedinError(err);\n  }\n}\n\ninterface StageBatchEnvelope extends Record<string, unknown> {\n  ok: true;\n  data: LinkedinDraftStageBatchResponse;\n}\n\n/**\n * Stage several ops as ONE request (`/stage-batch`) — all-or-nothing on the\n * backend, one rate-limit hit instead of one per id. A single op falls through to\n * the plain stage path so its envelope, its amend behaviour and its hints stay\n * exactly as before.\n */\nexport async function stageLinkedinOps(rawOps: Array<Record<string, unknown>>, hints?: string[]): Promise<void> {\n  if (rawOps.length === 1 && rawOps[0]) {\n    await stageOp(rawOps[0], hints);\n    return;\n  }\n  const ops: unknown[] = [];\n  for (const [index, raw] of rawOps.entries()) {\n    const preflight = linkedinDraftOpInputSchema.safeParse(raw);\n    if (!preflight.success) {\n      failPreflight(\n        preflight.error.issues.map((issue) => ({\n          path: `ops[${index}]${issue.path.length > 0 ? `.${issue.path.join(\".\")}` : \"\"}`,\n          message: issue.message,\n        })),\n      );\n    }\n    ops.push(preflight.data);\n  }\n  try {\n    const chatId = requireChatId();\n    const response = await apiPost<StageBatchEnvelope>(\"/api/ads/linkedin/draft/stage-batch\", { chatId, ops });\n    const allHints = [...(hints ?? []), ...(await adCopyHints(ops))];\n    writeJsonEnvelope(withHints(response, allHints));\n  } catch (err) {\n    handleLinkedinError(err);\n  }\n}\n\nexport async function stageStatusChange(input: {\n  kind: \"campaignGroup.update\" | \"campaign.update\" | \"creative.update\";\n  accountId: string;\n  targets: string[];\n  status: \"ACTIVE\" | \"PAUSED\" | \"ARCHIVED\";\n}): Promise<void> {\n  const payload = input.kind === \"creative.update\" ? { intendedStatus: input.status } : { status: input.status };\n  await stageLinkedinOps(\n    input.targets.map((target) => ({ kind: input.kind, accountId: input.accountId, target, payload })),\n  );\n}\n\n/**\n * Reads the target from whichever positional the command declared. Commands\n * name it `id` (entity writes) or `ref` (draft show/amend), and citty also\n * leaves every positional in `args._` — so we accept all three rather than\n * making the receipt depend on one command's arg name.\n *\n * `--flag false` is refused BEFORE the one-id check below, which would otherwise\n * blame the stray word on a second id: on `campaigns url-params 123456 --clear\n * false` that sends the agent back with `--clear` alone, which is TRUE again and\n * wipes every tracking parameter on a live ad set.\n */\nexport function requireTarget(args: Record<string, unknown>, entity: string): string {\n  const inverted = booleanWordPositionalError(args, entity);\n  if (inverted !== undefined) {\n    failWriteValidation(inverted);\n  }\n  const positionals = readPositionals(args);\n  const target = args.id ?? args.target ?? args.ref ?? positionals[0];\n  if (typeof target !== \"string\" || target.length === 0) {\n    failWriteValidation(`pass the ${entity} id or URN as the positional argument`);\n  }\n  // This command applies one payload to one id. Accepting the first of several and\n  // dropping the rest would report success for work it never staged, so say so.\n  if (positionals.length > 1 || splitIdList(target).length > 1) {\n    failWriteValidation(\n      `this command takes one ${entity} id — run it once per id. Only pause/resume/archive/delete and 'creatives update' accept several ids in one call.`,\n    );\n  }\n  return target;\n}\n\n/** Every positional citty left in `_`, as strings. Numeric ids arrive as strings via `node:util parseArgs`. */\nfunction readPositionals(args: Record<string, unknown>): string[] {\n  if (!Array.isArray(args._)) {\n    return [];\n  }\n  return args._.filter((value): value is string => typeof value === \"string\" && value.length > 0);\n}\n\n/** Ids in the positional: `123,456` or `urn:li:sponsoredCreative:1, urn:…:2` (URNs never contain commas). */\nfunction splitIdList(raw: string): string[] {\n  return raw\n    .split(\",\")\n    .map((id) => id.trim())\n    .filter(Boolean);\n}\n\n/**\n * `--ids-file` lines: one id per line, or comma-separated on a line — the agent\n * writes whichever is convenient. Blank lines and `#` comments are skipped.\n */\nfunction idsFileEntries(path: unknown): string[] {\n  if (typeof path !== \"string\" || path.length === 0) {\n    return [];\n  }\n  return readFileSync(path, \"utf8\")\n    .split(/\\r?\\n/)\n    .map((line) => line.trim())\n    .filter((line) => line.length > 0 && !line.startsWith(\"#\"))\n    .flatMap(splitIdList);\n}\n\n/**\n * Every id a write command was invoked with: **all** positionals (each of which may\n * itself be comma-separated) plus `--ids-file` lines, deduped in first-seen order.\n * One id stages exactly as before; several stage as one batch.\n *\n * All positionals, not just the first: an agent writing `creatives pause 111 222 333`\n * — space-separated, as most CLIs accept — used to stage one op and be told `ok: true`,\n * so it believed three ads were paused.\n */\nexport function requireTargets(args: Record<string, unknown>, entity: string): string[] {\n  // `args._` is the superset: citty copies the FIRST positional into the declared\n  // arg (`id`/`ref`) but leaves every positional in `_`. Reading the named arg alone\n  // is what dropped ids 2..n. The named arg is the fallback for a command that ever\n  // declares its id as a flag instead, where `_` would be empty.\n  const positionals = readPositionals(args);\n  const named = [args.id, args.target, args.ref].filter(\n    (value): value is string => typeof value === \"string\" && value.length > 0,\n  );\n  const fromArgs = positionals.length > 0 ? positionals : named;\n  const targets = [...new Set([...fromArgs.flatMap(splitIdList), ...idsFileEntries(args[\"ids-file\"])])];\n  if (targets.length === 0) {\n    failWriteValidation(\n      `pass the ${entity} id or URN as the positional argument (comma-separated for several), or --ids-file <path>`,\n    );\n  }\n  if (targets.length > LINKEDIN_DRAFT_BATCH_MAX) {\n    failWriteValidation(\n      `${targets.length} ids exceeds the batch limit of ${LINKEDIN_DRAFT_BATCH_MAX} — split the list`,\n    );\n  }\n  return targets;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,oBAAoB;AA6BtB,IAAM,oBACX;AAEK,SAAS,cAAc,MAAuC;AACnE,QAAM,MAAM,oBAAoB,IAAI;AACpC,SAAO,IAAI,QAAQ,6BAA6B,EAAE,EAAE,QAAQ,sBAAsB,EAAE;AACtF;AAEO,SAAS,oBAAoB,SAAwB;AAC1D,oBAAkB,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,oBAAoB,QAAQ,EAAE,CAAC;AAC7E,UAAQ,KAAK,CAAC;AAChB;AAEO,SAAS,gBAAgB,MAAwC;AACtE,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG;AACjD,WAAO,CAAC;AAAA,EACV;AACA,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AACpD,QAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAC1E,0BAAoB,GAAG,IAAI,6BAA6B;AAAA,IAC1D;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,eAAe,aAAa;AAC9B,0BAAoB,GAAG,IAAI,uBAAuB,IAAI,OAAO,EAAE;AAAA,IACjE;AACA,UAAM;AAAA,EACR;AACF;AAGO,SAAS,aAAa,MAA+B,OAAyD;AACnH,QAAM,SAAkC,EAAE,GAAG,KAAK;AAClD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,QAAI,UAAU,QAAW;AACvB,aAAO,GAAG,IAAI;AAAA,IAChB;AAAA,EACF;AACA,SAAO;AACT;AAOO,SAAS,aAAa,MAAwD;AACnF,QAAM,OAAO,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,SAAS,IAAI,KAAK,OAAO;AACjF,QAAM,SAAS,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,SAAS,IAAI,KAAK,QAAQ;AACtF,MAAI,QAAQ,IAAI,MAAM,QAAQ,MAAM,GAAG;AACrC,wBAAoB,6DAA6D;AAAA,EACnF;AACA,MAAI,MAAM;AACR,WAAO,gBAAgB,IAAI;AAAA,EAC7B;AACA,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,MAAgB;AAC1C,QAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAC1E,0BAAoB,+BAA+B;AAAA,IACrD;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,eAAe,aAAa;AAC9B,0BAAoB,8BAA8B,IAAI,OAAO,EAAE;AAAA,IACjE;AACA,UAAM;AAAA,EACR;AACF;AAEO,SAAS,eACd,QACA,UACA,MACuD;AACvD,MAAI,WAAW,UAAa,WAAW,QAAQ,WAAW,IAAI;AAC5D,WAAO;AAAA,EACT;AACA,MAAI,aAAa,UAAa,aAAa,QAAQ,aAAa,IAAI;AAElE,WAAO,EAAE,QAAQ,OAAO,MAAM,EAAE;AAAA,EAClC;AACA,MAAI,OAAO,aAAa,YAAY,SAAS,WAAW,GAAG;AACzD,wBAAoB,GAAG,IAAI,gEAAgE;AAAA,EAC7F;AACA,SAAO,EAAE,QAAQ,OAAO,MAAM,GAAG,cAAc,SAAS,YAAY,EAAE;AACxE;AAGO,SAAS,cAAc,OAAgB,MAAkC;AAC9E,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,IAAI;AACzD,WAAO;AAAA,EACT;AACA,QAAM,MAAM,OAAO,KAAK;AACxB,MAAI,YAAY,KAAK,GAAG,GAAG;AACzB,WAAO,OAAO,GAAG;AAAA,EACnB;AACA,QAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,MAAI,OAAO,MAAM,MAAM,GAAG;AACxB,wBAAoB,GAAG,IAAI,yDAAyD;AAAA,EACtF;AACA,SAAO;AACT;AAEO,SAAS,eAAe,OAAgB,MAAmC;AAChF,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,IAAI;AACzD,WAAO;AAAA,EACT;AACA,QAAM,MAAM,OAAO,KAAK,EAAE,YAAY;AACtC,MAAI,QAAQ,QAAQ,QAAQ,QAAQ;AAClC,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,SAAS,QAAQ,SAAS;AACpC,WAAO;AAAA,EACT;AACA,sBAAoB,GAAG,IAAI,iBAAiB;AAC9C;AAEO,SAAS,gBAAgB,OAAmE;AACjG,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,IAAI;AACzD,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,gCAAgC,KAAK,OAAO,KAAK,CAAC;AAChE,MAAI,CAAC,OAAO;AACV,wBAAoB,kDAAkD;AAAA,EACxE;AACA,SAAO,EAAE,UAAU,MAAM,CAAC,GAAa,SAAU,MAAM,CAAC,EAAa,YAAY,EAAE;AACrF;AAEO,SAAS,qBAAqB,MAAoD;AACvF,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG;AACjD,WAAO;AAAA,EACT;AACA,QAAM,SAAS,gBAAgB,IAAI;AAEnC,QAAM,WAAY,OAAO,qBAA6D;AACtF,MAAI,CAAC,SAAS,SAAS;AACrB;AAAA,MACE,GAAG,IAAI;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,IAAM,aAAa;AAGnB,SAAS,YAAY,OAAuB;AAC1C,QAAM,QAAQ,MAAM,KAAK,EAAE,YAAY;AACvC,SAAO,WAAW,KAAK,KAAK,IAAI,QAAQ,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AACzF;AAEA,SAAS,aAAa,MAAwB;AAC5C,QAAM,QAAkB,CAAC;AACzB,MAAI,UAAU;AACd,MAAI,WAAW;AACf,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,OAAO,KAAK,CAAC;AACnB,QAAI,UAAU;AACZ,UAAI,SAAS,OAAO,KAAK,IAAI,CAAC,MAAM,KAAK;AACvC,mBAAW;AACX;AAAA,MACF,WAAW,SAAS,KAAK;AACvB,mBAAW;AAAA,MACb,OAAO;AACL,mBAAW;AAAA,MACb;AAAA,IACF,WAAW,SAAS,KAAK;AACvB,iBAAW;AAAA,IACb,WAAW,SAAS,KAAK;AACvB,YAAM,KAAK,OAAO;AAClB,gBAAU;AAAA,IACZ,OAAO;AACL,iBAAW;AAAA,IACb;AAAA,EACF;AACA,QAAM,KAAK,OAAO;AAClB,SAAO,MAAM,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;AACxC;AAWO,SAAS,iBAAiB,MAAe,SAAyC;AACvF,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG;AACjD,WAAO;AAAA,EACT;AACA,QAAM,MAAM,aAAa,MAAM,MAAM;AACrC,QAAM,QAAQ,IAAI,MAAM,OAAO,EAAE,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,SAAS,CAAC;AACxE,MAAI,MAAM,SAAS,GAAG;AACpB,wBAAoB,GAAG,IAAI,+CAA+C;AAAA,EAC5E;AACA,QAAM,UAAU,aAAa,MAAM,CAAC,CAAW,EAAE,IAAI,CAAC,WAAW,OAAO,KAAK,CAAC;AAC9E,QAAM,OAAsC,CAAC;AAC7C,aAAW,QAAQ,MAAM,MAAM,CAAC,GAAG;AACjC,UAAM,QAAQ,aAAa,IAAI;AAC/B,UAAM,MAA8B,CAAC;AACrC,YAAQ,QAAQ,CAAC,QAAQ,UAAU;AACjC,YAAM,QAAQ,MAAM,KAAK,KAAK;AAC9B,UAAI,CAAC,OAAO;AACV;AAAA,MACF;AACA,UAAI,MAAM,IAAI,gBAAgB,MAAM,MAAM,UAAU,YAAY,KAAK,IAAI;AAAA,IAC3E,CAAC;AACD,QAAI,OAAO,KAAK,GAAG,EAAE,SAAS,GAAG;AAC/B,WAAK,KAAK,GAAG;AAAA,IACf;AAAA,EACF;AACA,MAAI,KAAK,SAAS,SAAS;AACzB,wBAAoB,GAAG,IAAI,QAAQ,KAAK,MAAM,oCAA+B,OAAO,mBAAmB;AAAA,EACzG;AACA,SAAO,EAAE,SAAS,KAAK;AACzB;AAQA,SAAS,cAAc,QAAyD;AAC9E,oBAAkB;AAAA,IAChB,IAAI;AAAA,IACJ,OAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS,OAAO,IAAI,CAAC,UAAW,MAAM,OAAO,GAAG,MAAM,IAAI,KAAK,MAAM,OAAO,KAAK,MAAM,OAAQ,EAAE,KAAK,IAAI;AAAA,MAC1G;AAAA,MACA,KAAK,cAAc,cAAc;AAAA,IACnC;AAAA,EACF,CAAC;AACD,UAAQ,KAAK,CAAC;AAChB;AAMA,IAAM,cACJ;AAEF,SAAS,WAAW,MAA4C;AAC9D,SAAO,KAAK,mBAAmB,SAAY,CAAC,IAAI,CAAC,WAAW;AAC9D;AAQA,eAAsB,QAAQ,KAA8B,OAAiC;AAC3F,QAAM,YAAY,2BAA2B,UAAU,GAAG;AAC1D,MAAI,CAAC,UAAU,SAAS;AACtB,kBAAc,UAAU,MAAM,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,MAAM,KAAK,KAAK,GAAG,GAAG,SAAS,MAAM,QAAQ,EAAE,CAAC;AAAA,EAC/G;AACA,MAAI;AACF,UAAM,SAAS,cAAc;AAC7B,UAAM,WAAW,MAAM,QAAuB,iCAAiC;AAAA,MAC7E;AAAA,MACA,IAAI,UAAU;AAAA,IAChB,CAAC;AACD,UAAM,WAAW,CAAC,GAAG,WAAW,SAAS,IAAI,GAAG,GAAI,SAAS,CAAC,GAAI,GAAI,MAAM,YAAY,UAAU,IAAI,CAAE;AACxG,sBAAkB,UAAU,UAAU,QAAQ,CAAC;AAAA,EACjD,SAAS,KAAK;AACZ,wBAAoB,GAAG;AAAA,EACzB;AACF;AAaA,eAAsB,iBAAiB,QAAwC,OAAiC;AAC9G,MAAI,OAAO,WAAW,KAAK,OAAO,CAAC,GAAG;AACpC,UAAM,QAAQ,OAAO,CAAC,GAAG,KAAK;AAC9B;AAAA,EACF;AACA,QAAM,MAAiB,CAAC;AACxB,aAAW,CAAC,OAAO,GAAG,KAAK,OAAO,QAAQ,GAAG;AAC3C,UAAM,YAAY,2BAA2B,UAAU,GAAG;AAC1D,QAAI,CAAC,UAAU,SAAS;AACtB;AAAA,QACE,UAAU,MAAM,OAAO,IAAI,CAAC,WAAW;AAAA,UACrC,MAAM,OAAO,KAAK,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,MAAM,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE;AAAA,UAC7E,SAAS,MAAM;AAAA,QACjB,EAAE;AAAA,MACJ;AAAA,IACF;AACA,QAAI,KAAK,UAAU,IAAI;AAAA,EACzB;AACA,MAAI;AACF,UAAM,SAAS,cAAc;AAC7B,UAAM,WAAW,MAAM,QAA4B,uCAAuC,EAAE,QAAQ,IAAI,CAAC;AACzG,UAAM,WAAW,CAAC,GAAI,SAAS,CAAC,GAAI,GAAI,MAAM,YAAY,GAAG,CAAE;AAC/D,sBAAkB,UAAU,UAAU,QAAQ,CAAC;AAAA,EACjD,SAAS,KAAK;AACZ,wBAAoB,GAAG;AAAA,EACzB;AACF;AAEA,eAAsB,kBAAkB,OAKtB;AAChB,QAAM,UAAU,MAAM,SAAS,oBAAoB,EAAE,gBAAgB,MAAM,OAAO,IAAI,EAAE,QAAQ,MAAM,OAAO;AAC7G,QAAM;AAAA,IACJ,MAAM,QAAQ,IAAI,CAAC,YAAY,EAAE,MAAM,MAAM,MAAM,WAAW,MAAM,WAAW,QAAQ,QAAQ,EAAE;AAAA,EACnG;AACF;AAaO,SAAS,cAAc,MAA+B,QAAwB;AACnF,QAAM,WAAW,2BAA2B,MAAM,MAAM;AACxD,MAAI,aAAa,QAAW;AAC1B,wBAAoB,QAAQ;AAAA,EAC9B;AACA,QAAM,cAAc,gBAAgB,IAAI;AACxC,QAAM,SAAS,KAAK,MAAM,KAAK,UAAU,KAAK,OAAO,YAAY,CAAC;AAClE,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,GAAG;AACrD,wBAAoB,YAAY,MAAM,uCAAuC;AAAA,EAC/E;AAGA,MAAI,YAAY,SAAS,KAAK,YAAY,MAAM,EAAE,SAAS,GAAG;AAC5D;AAAA,MACE,0BAA0B,MAAM;AAAA,IAClC;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,gBAAgB,MAAyC;AAChE,MAAI,CAAC,MAAM,QAAQ,KAAK,CAAC,GAAG;AAC1B,WAAO,CAAC;AAAA,EACV;AACA,SAAO,KAAK,EAAE,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC;AAChG;AAGA,SAAS,YAAY,KAAuB;AAC1C,SAAO,IACJ,MAAM,GAAG,EACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,EACrB,OAAO,OAAO;AACnB;AAMA,SAAS,eAAe,MAAyB;AAC/C,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG;AACjD,WAAO,CAAC;AAAA,EACV;AACA,SAAO,aAAa,MAAM,MAAM,EAC7B,MAAM,OAAO,EACb,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,KAAK,SAAS,KAAK,CAAC,KAAK,WAAW,GAAG,CAAC,EACzD,QAAQ,WAAW;AACxB;AAWO,SAAS,eAAe,MAA+B,QAA0B;AAKtF,QAAM,cAAc,gBAAgB,IAAI;AACxC,QAAM,QAAQ,CAAC,KAAK,IAAI,KAAK,QAAQ,KAAK,GAAG,EAAE;AAAA,IAC7C,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS;AAAA,EAC1E;AACA,QAAM,WAAW,YAAY,SAAS,IAAI,cAAc;AACxD,QAAM,UAAU,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,SAAS,QAAQ,WAAW,GAAG,GAAG,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC;AACpG,MAAI,QAAQ,WAAW,GAAG;AACxB;AAAA,MACE,YAAY,MAAM;AAAA,IACpB;AAAA,EACF;AACA,MAAI,QAAQ,SAAS,0BAA0B;AAC7C;AAAA,MACE,GAAG,QAAQ,MAAM,mCAAmC,wBAAwB;AAAA,IAC9E;AAAA,EACF;AACA,SAAO;AACT;","names":[]}

package/dist/chunk-FFFJBNHA.js

@@ -1,63 +0,0 @@
-import {
-  sheetDelimiter,
-  targetAccountsFrom
-} from "./chunk-MGYC2IRC.js";
-
-// src/commands/accounts/targets.ts
-import { parse } from "csv-parse/sync";
-var COLUMN_OF_HEADER = {
-  domain: "domain",
-  website: "domain",
-  url: "domain",
-  companydomain: "domain",
-  companywebsite: "domain",
-  name: "name",
-  company: "name",
-  companyname: "name",
-  account: "name",
-  accountname: "name",
-  tier: "tier"
-};
-var headerKey = (header) => header.toLowerCase().replace(/[\s_-]+/g, "");
-function csvEntries(text) {
-  const rows = parse(text, {
-    bom: true,
-    columns: true,
-    delimiter: sheetDelimiter(text),
-    skip_empty_lines: true,
-    relax_column_count: true,
-    trim: true
-  });
-  const columns = Object.keys(rows[0] ?? {}).flatMap((header) => {
-    const field = COLUMN_OF_HEADER[headerKey(header)];
-    return field ? [[header, field]] : [];
-  });
-  if (!columns.some(([, field]) => field === "domain")) {
-    throw new Error(
-      `The file has no domain column (found: ${Object.keys(rows[0] ?? {}).join(", ") || "nothing"}). Name one "domain" or "website".`
-    );
-  }
-  return rows.map((row) => {
-    const entry = {};
-    for (const [header, field] of columns) entry[field] ??= row[header] ?? "";
-    return entry;
-  });
-}
-function jsonEntries(text) {
-  const parsed = JSON.parse(text);
-  if (!Array.isArray(parsed)) {
-    throw new Error('The JSON file must be an array: ["acme.com", \u2026] or [{"domain": "acme.com", "tier": 1}, \u2026].');
-  }
-  return parsed.map(
-    (item) => typeof item === "string" ? { domain: item } : typeof item === "object" && item !== null ? item : {}
-  );
-}
-function readTargetsFile(path, text) {
-  const entries = path.toLowerCase().endsWith(".json") ? jsonEntries(text) : csvEntries(text);
-  return targetAccountsFrom(entries);
-}
-
-export {
-  readTargetsFile
-};
-//# sourceMappingURL=chunk-FFFJBNHA.js.map

package/dist/chunk-FKQK22IX.js

@@ -1,51 +0,0 @@
-import {
-  failApi
-} from "./chunk-C6CBBZBO.js";
-import {
-  HUBSPOT_MISSING_GRANT_MARKER,
-  HUBSPOT_NOT_CONNECTED_MESSAGE
-} from "./chunk-ZNNQK366.js";
-import {
-  ApiError
-} from "./chunk-X7VQFLHI.js";
-import {
-  writeJson
-} from "./chunk-Q7US4OOA.js";
-
-// src/commands/hubspot/refusal.ts
-var CONTINUE = "Keep going with the wider task: say which part you could not read, skip it, and finish everything else. If the `request_connection` call fails, say so plainly and give the exact route: dashboard \u2192 Brain \u2192 Integrations \u2192 Platforms \u2192 HubSpot.";
-function hubspotRefusal(code, message, reason = "so I can count a contact becoming a customer") {
-  if (code === "NOT_FOUND" && message.includes(HUBSPOT_NOT_CONNECTED_MESSAGE)) {
-    return {
-      code: "NO_HUBSPOT_CONNECTION",
-      fix: {
-        action: "request_connection",
-        explanation: `AGENT INSTRUCTION: HubSpot is not connected, and only the user can connect it. Call the \`request_connection\` tool with { platform: "hubspot", reason } \u2014 reason in their words, e.g. "${reason}" \u2014 and they connect it inside the chat; then run this command again. ` + CONTINUE
-      }
-    };
-  }
-  if (code === "FORBIDDEN" && message.includes(HUBSPOT_MISSING_GRANT_MARKER)) {
-    return {
-      code: "HUBSPOT_RECONNECT_REQUIRED",
-      fix: {
-        action: "request_connection",
-        explanation: 'AGENT INSTRUCTION: HubSpot is connected \u2014 do not tell the user it is missing, and do not retry. Its access does not cover this read (it was connected before Baker asked for it, or the access was withdrawn), and only the user can widen it. Call the `request_connection` tool with { platform: "hubspot", reason } naming what you need to read; the card offers them a Reconnect button. Run this command again once they have. ' + CONTINUE
-      }
-    };
-  }
-  return null;
-}
-function failNotConnected(err, reason) {
-  const refusal = err instanceof ApiError ? hubspotRefusal(err.code, err.message, reason) : null;
-  if (err instanceof ApiError && refusal !== null) {
-    writeJson({ ok: false, error: { code: refusal.code, message: err.message, fix: refusal.fix } });
-    process.exit(1);
-  }
-  failApi(err);
-}
-
-export {
-  hubspotRefusal,
-  failNotConnected
-};
-//# sourceMappingURL=chunk-FKQK22IX.js.map