@koda-sl/baker-cli 0.515.0-dev.14a31186e → 0.515.0-dev.8df53bffe

package/dist/{write-commands-NXJQQ62W.js → write-commands-OGVDWWBV.js}

@@ -7,7 +7,7 @@ import {
   budgetBoostsFromFlags,
   clearArg,
   clearFromFlags
-} from "./chunk-TYXZ2SRW.js";
+} from "./chunk-7BUIOP36.js";
 import {
   bareAccountId,
   failWriteValidation,
@@ -23,14 +23,14 @@ import {
   stageOp,
   stageStatusChange,
   upper
-} from "./chunk-ILPHIYAL.js";
+} from "./chunk-QDQZ62FL.js";
 import {
   buildCustomConversionRule
 } from "./chunk-Q3GSVLE5.js";
 import {
   VISUAL_ENHANCEMENT_FEATURES
 } from "./chunk-GDFJOCDO.js";
-import "./chunk-M7QZSEHF.js";
+import "./chunk-B2POVFR2.js";
 import {
   repeatedValues
 } from "./chunk-ERSX3MKH.js";
@@ -39,7 +39,7 @@ import "./chunk-4NZ47VXO.js";
 import "./chunk-D5FY4FAK.js";
 import "./chunk-QPESDKZC.js";
 import "./chunk-Y2JZX6JB.js";
-import "./chunk-6DPSWLGY.js";
+import "./chunk-ZRP7Y2DM.js";
 import "./chunk-E44NXCTL.js";
 import "./chunk-EJGAJHLB.js";
 import "./chunk-LNNTHEL7.js";
@@ -461,7 +461,7 @@ Example: baker ads meta adsets create --campaign 6123 --name "Reach ES" --optimi
     const file = loadJsonFileArg(args.file);
     const payload = mergePayload(file, adSetPayloadFromFlags(args, rawArgs, file));
     if (args["saved-audience"]) {
-      const { savedAudienceTargeting, targetingFromSavedAudience } = await import("./audience-writes-TXWPDJ2F.js");
+      const { savedAudienceTargeting, targetingFromSavedAudience } = await import("./audience-writes-CDKQB3SM.js");
       const saved = await savedAudienceTargeting(accountId, String(args["saved-audience"]));
       const merged = targetingFromSavedAudience(saved, payload.targeting);
       if ("refusal" in merged) failWriteValidation(merged.refusal);
@@ -872,8 +872,8 @@ Example: baker ads meta ads retag 120252158038400247 --url-tags "utm_source={{si
   run: async ({ args, rawArgs }) => {
     const { apiPost } = await import("./client-EYPNMTBH.js");
     const { requireChatId } = await import("./env-ABXQWHDO.js");
-    const { writeJsonEnvelope } = await import("./output-4QBQEM4C.js");
-    const { handleMetaError } = await import("./shared-CGEJI2RB.js");
+    const { writeJsonEnvelope } = await import("./output-WTEPRUPE.js");
+    const { handleMetaError } = await import("./shared-ZFULUOPQ.js");
     try {
       const accountId = bareAccountId(args);
       const urlTags = typeof args["url-tags"] === "string" ? args["url-tags"] : void 0;
@@ -1095,8 +1095,8 @@ function duplicateCommand(entity, label) {
     run: async ({ args }) => {
       const { apiPost } = await import("./client-EYPNMTBH.js");
       const { requireChatId } = await import("./env-ABXQWHDO.js");
-      const { writeJsonEnvelope } = await import("./output-4QBQEM4C.js");
-      const { handleMetaError } = await import("./shared-CGEJI2RB.js");
+      const { writeJsonEnvelope } = await import("./output-WTEPRUPE.js");
+      const { handleMetaError } = await import("./shared-ZFULUOPQ.js");
       try {
         const accountId = bareAccountId(args);
         const chatId = requireChatId();
@@ -1169,4 +1169,4 @@ export {
   retagSetPairs,
   targetingFromFlags
 };
-//# sourceMappingURL=write-commands-NXJQQ62W.js.map
+//# sourceMappingURL=write-commands-OGVDWWBV.js.map

package/dist/{write-commands-B25W4FP5.js → write-commands-OTWH6BKZ.js}

@@ -5,9 +5,9 @@ import {
   requireTarget,
   stageOp,
   stageOps
-} from "./chunk-HHVWV5BJ.js";
+} from "./chunk-GU5MXV2Y.js";
 import "./chunk-D5FY4FAK.js";
-import "./chunk-6DPSWLGY.js";
+import "./chunk-ZRP7Y2DM.js";
 import "./chunk-X7VQFLHI.js";
 import "./chunk-LU4HI4KI.js";
 import "./chunk-LGK7UWBN.js";
@@ -710,4 +710,4 @@ export {
   propertyCommand,
   retentionValue
 };
-//# sourceMappingURL=write-commands-B25W4FP5.js.map
+//# sourceMappingURL=write-commands-OTWH6BKZ.js.map

package/dist/{x-4GPADHQR.js → x-ZQNHYIDU.js}

@@ -25,23 +25,23 @@ The CLI auto-detects --account-id when exactly one X Ads account is connected, o
 Full guide: __tooling__/docs/tools/baker/ads-x.md`
   },
   subCommands: {
-    accounts: () => import("./accounts-5WF7VE7J.js").then((m) => m.accountsCommand),
-    funding: () => import("./funding-TCEPQXRQ.js").then((m) => m.fundingCommand),
-    campaigns: () => import("./campaigns-G24AEUCM.js").then((m) => m.campaignsCommand),
-    "line-items": () => import("./line-items-L4HQHJP3.js").then((m) => m.lineItemsCommand),
-    "promoted-tweets": () => import("./promoted-tweets-UFWAFTKD.js").then((m) => m.promotedTweetsCommand),
-    tweets: () => import("./tweets-JN6ARKF6.js").then((m) => m.tweetsCommand),
-    cards: () => import("./cards-NSNAFTEB.js").then((m) => m.cardsCommand),
-    draft: () => import("./draft-6XYWFCIO.js").then((m) => m.draftCommand),
-    media: () => import("./media-BPI2VE6A.js").then((m) => m.mediaCommand),
-    audiences: () => import("./audiences-YUG5JLL4.js").then((m) => m.audiencesCommand),
-    "targeting-criteria": () => import("./targeting-criteria-3RSGL4PU.js").then((m) => m.targetingCriteriaCommand),
-    "targeting-constants": () => import("./targeting-constants-MRQB4N5I.js").then((m) => m.targetingConstantsCommand),
-    "active-entities": () => import("./active-entities-WDPW7652.js").then((m) => m.activeEntitiesCommand),
-    stats: () => import("./stats-EGGNFTKI.js").then((m) => m.statsCommand)
+    accounts: () => import("./accounts-SNB65ZEW.js").then((m) => m.accountsCommand),
+    funding: () => import("./funding-5W4LX6DU.js").then((m) => m.fundingCommand),
+    campaigns: () => import("./campaigns-ZYU4BXDP.js").then((m) => m.campaignsCommand),
+    "line-items": () => import("./line-items-JR25T2C5.js").then((m) => m.lineItemsCommand),
+    "promoted-tweets": () => import("./promoted-tweets-W42FNWS7.js").then((m) => m.promotedTweetsCommand),
+    tweets: () => import("./tweets-IUINLOXF.js").then((m) => m.tweetsCommand),
+    cards: () => import("./cards-A7GQVC7B.js").then((m) => m.cardsCommand),
+    draft: () => import("./draft-5UUJC675.js").then((m) => m.draftCommand),
+    media: () => import("./media-XCTZJIW4.js").then((m) => m.mediaCommand),
+    audiences: () => import("./audiences-34IQKOGS.js").then((m) => m.audiencesCommand),
+    "targeting-criteria": () => import("./targeting-criteria-AU5CSMAU.js").then((m) => m.targetingCriteriaCommand),
+    "targeting-constants": () => import("./targeting-constants-236ES5HE.js").then((m) => m.targetingConstantsCommand),
+    "active-entities": () => import("./active-entities-3BAPHE4P.js").then((m) => m.activeEntitiesCommand),
+    stats: () => import("./stats-QP4LFQZJ.js").then((m) => m.statsCommand)
   }
 });
 export {
   xCommand
 };
-//# sourceMappingURL=x-4GPADHQR.js.map
+//# sourceMappingURL=x-ZQNHYIDU.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@koda-sl/baker-cli",
-  "version": "0.515.0-dev.14a31186e",
+  "version": "0.515.0-dev.8df53bffe",
   "description": "AI-agent-first CLI for interacting with Baker, including the Baker creative canvas.",
   "type": "module",
   "bin": {

package/dist/chunk-6DPSWLGY.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/error-handler.ts","../src/commands/ads/cache.ts","../src/commands/ads/output.ts"],"sourcesContent":["import { writeJsonEnvelope } from \"./commands/ads/output.ts\";\nimport { optionalTargetCompany } from \"./env.ts\";\n\ntype ConnectionPlatform = \"google_ads\" | \"ga4\" | \"gsc\" | \"x_ads\" | \"meta_ads\" | \"linkedin_ads\";\n\n/**\n * Platforms the agent can get connected without the user leaving the chat, via\n * the blocking `request_connection` tool, and the id that tool expects. Every\n * platform this CLI can talk to is here — keep it in step with\n * `CONNECTION_PLATFORMS` in `packages/bridge/src/hono/connection-input.ts`: a\n * platform the tool accepts but this map omits sends the user to Settings for a\n * door the agent could have opened itself.\n */\nconst REQUEST_CONNECTION_PLATFORM: Record<ConnectionPlatform, string> = {\n  google_ads: \"google-ads\",\n  ga4: \"google-analytics\",\n  gsc: \"google-search-console\",\n  linkedin_ads: \"linkedin\",\n  meta_ads: \"meta\",\n  x_ads: \"x-ads\",\n};\n\nconst PLATFORM_NAME: Record<ConnectionPlatform, string> = {\n  google_ads: \"Google Ads\",\n  ga4: \"Google Analytics 4\",\n  gsc: \"Google Search Console\",\n  x_ads: \"X Ads\",\n  meta_ads: \"Meta Ads\",\n  linkedin_ads: \"LinkedIn Ads\",\n};\n\n/**\n * How to tell the agent to get a platform connected. Never \"send them to\n * Settings\" for a platform `request_connection` covers — that ends the turn on a\n * wall the agent could have opened itself, and it now covers every platform this\n * CLI talks to. The fallback line matters too: if the `request_connection` call\n * fails, the agent must still be able to say where the connect button is instead\n * of stalling.\n */\nexport function connectionFixExplanation(platform: ConnectionPlatform, originalMessage?: string): string {\n  const name = PLATFORM_NAME[platform];\n  const slug = REQUEST_CONNECTION_PLATFORM[platform];\n  // Read with `--company` from the organization workspace: connecting from here\n  // would connect the workspace, not the company the read named.\n  if (optionalTargetCompany()) {\n    return (\n      `${name} is not connected for that company. It can only be connected in that company's own workspace, ` +\n      `never with \\`request_connection\\` from here. Show that company as not connected for ${name} and carry on ` +\n      \"with the others.\"\n    );\n  }\n  if (originalMessage !== undefined && SIGN_IN_ENDED.test(originalMessage)) {\n    return (\n      `${name} is connected, but its sign-in no longer works (it expired, or was revoked on the platform) — this is ` +\n      `not a Baker error, and retrying later cannot fix it: only the user signing in again can. Call the ` +\n      `\\`request_connection\\` tool now with { platform: \"${slug}\", reason } — the card offers Reconnect. If that call ` +\n      `fails, give the exact route: dashboard → Brain → Integrations → Platforms → ${name} → Reconnect. Then carry on ` +\n      \"with the rest of the task and say what stays unavailable until it is reconnected.\"\n    );\n  }\n  return (\n    `${name} is not connected for this company (or no account has been picked). Don't send the user to Settings ` +\n    `or end the turn here — call the \\`request_connection\\` tool with { platform: \"${slug}\", reason } and ` +\n    `they connect and pick their accounts from inside the chat. If the \\`request_connection\\` call fails, say so ` +\n    `plainly and give the exact route: dashboard → Brain → Integrations → Platforms → ${name}. Then carry on with the ` +\n    `rest of the task and say what stays unavailable until it is connected.`\n  );\n}\n\n/** How the backend says a stored sign-in stopped working (`reconnectMessage`, `convex/oauth/connectedPlatforms.ts`). */\nconst SIGN_IN_ENDED = /connection expired|must reconnect/i;\n\n/**\n * Shared error handler for \"No Connection\" scenarios.\n * Provides a structured error for AI agents with a suggested fix and alternative commands.\n */\nexport function handleConnectionError(platform: ConnectionPlatform, originalMessage?: string): never {\n  const platformName = PLATFORM_NAME[platform];\n\n  const alternative = {\n    google_ads: \"keywords-for-site or research advertisers\",\n    ga4: \"lighthouse for page performance\",\n    gsc: \"keywords-for-site or research keyword-gap\",\n    x_ads: \"research advertisers\",\n    meta_ads: \"research advertisers or research keyword-ideas\",\n    linkedin_ads: \"research advertisers (LinkedIn Ad Library) or research keyword-ideas\",\n  }[platform];\n\n  const code = {\n    google_ads: \"NO_GOOGLE_ADS_CONNECTION\",\n    ga4: \"NO_GA4_CONNECTION\",\n    gsc: \"NO_GSC_CONNECTION\",\n    x_ads: \"NO_X_ADS_CONNECTION\",\n    meta_ads: \"NO_META_ADS_CONNECTION\",\n    linkedin_ads: \"NO_LINKEDIN_ADS_CONNECTION\",\n  }[platform];\n\n  const envelope = {\n    ok: false,\n    error: {\n      code,\n      message: originalMessage || `No ${platformName} connection found for this company.`,\n      fix: optionalTargetCompany()\n        ? { action: \"continue_without\", explanation: connectionFixExplanation(platform) }\n        : {\n            action: \"request_connection\",\n            explanation: `${connectionFixExplanation(platform, originalMessage)} (Optional fallback for estimated external insights: 'baker research ${alternative}'.)`,\n          },\n      retryable: false,\n    },\n  };\n\n  writeJsonEnvelope(envelope);\n  process.exit(1);\n}\n\n/**\n * Does this API failure mean \"the platform isn't connected\"? The read commands\n * surface the backend's own 404/403 verbatim, so the connect fix has to be\n * recognised from the code the client mapped it to plus the message.\n */\nexport function isNotConnectedError(code: string, message: string): boolean {\n  if (code !== \"NOT_FOUND\" && code !== \"UNAUTHORIZED\" && code !== \"FORBIDDEN\") {\n    return false;\n  }\n  // The last alternative is the write-path 403 (\"customer X is not in this\n  // company's connected Google Ads accounts\") — a different sentence for the\n  // same remedy: connect, and pick the account.\n  return /no .* connection found|not connected|no .* (selected|picked)|is not in .* connected/i.test(message);\n}\n\n/**\n * Does this failure warrant the connect form? A dead token (401) always does —\n * whatever the wording, the remedy is to sign in again.\n *\n * A 404 or 403 only does when the backend says so. Both codes are overloaded:\n * 403 is also an asset-level refusal on a live connection (reconnecting cannot\n * grant it), and 404 is also how \"no staged op <ref> in this draft\" and a\n * mistyped `--chat` come back. Answering either with \"ask the user to connect\n * Meta Ads\" sends the agent to fix something that was never broken, and the\n * real missing-connection 404 says \"No <platform> connection found\" anyway.\n */\nexport function needsConnectionFix(code: string, message: string): boolean {\n  if (code === \"UNAUTHORIZED\") {\n    return true;\n  }\n  return isNotConnectedError(code, message);\n}\n\n/**\n * The organization workspace's refusal of a write to a company (`--company`).\n * It is about where the change belongs, not about the platform, so no\n * platform's permission advice applies to it.\n */\nexport function isOrganizationReadRefusal(message: string): boolean {\n  return message.startsWith(\"The organization workspace only reads its companies\");\n}\n","import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { optionalTargetCompany } from \"../../env.ts\";\nimport type { CacheEntry } from \"./types.ts\";\n\n/**\n * One folder per company a call reads (`--company`), so the organization\n * workspace never answers one company's read with another's cached accounts.\n * Resolved per call: the flag is read after the command's modules load.\n */\nfunction cacheDir(): string {\n  const company = optionalTargetCompany()?.replace(/[^a-zA-Z0-9_]/g, \"\");\n  return join(homedir(), \".baker\", \"cache\", \"ads\", ...(company ? [\"company\", company] : []));\n}\n\nfunction ensureDir(dir: string): void {\n  if (!existsSync(dir)) {\n    mkdirSync(dir, { recursive: true });\n  }\n}\n\nfunction hashKey(key: string): string {\n  return createHash(\"sha256\").update(key).digest(\"hex\").slice(0, 16);\n}\n\nfunction cachePath(category: string, key: string): string {\n  const dir = join(cacheDir(), category);\n  ensureDir(dir);\n  return join(dir, `${hashKey(key)}.json`);\n}\n\nexport function cacheGet<T>(category: string, key: string): CacheEntry<T> | null {\n  const path = cachePath(category, key);\n  if (!existsSync(path)) {\n    return null;\n  }\n  try {\n    const raw = readFileSync(path, \"utf-8\");\n    const entry = JSON.parse(raw) as CacheEntry<T>;\n    if (entry.expiresAt < Date.now()) {\n      rmSync(path, { force: true });\n      return null;\n    }\n    return entry;\n  } catch {\n    rmSync(path, { force: true });\n    return null;\n  }\n}\n\nexport function cacheSet<T>(\n  category: string,\n  key: string,\n  data: T,\n  ttlMs: number,\n  fields?: Record<string, string>,\n): void {\n  const path = cachePath(category, key);\n  const entry: CacheEntry<T> = {\n    expiresAt: Date.now() + ttlMs,\n    data,\n    fields,\n  };\n  writeFileSync(path, JSON.stringify(entry), \"utf-8\");\n}\n\nconst HOUR = 60 * 60 * 1000;\nconst MINUTE = 60 * 1000;\n\nexport function getQueryTtl(query: string): number {\n  const upper = query.toUpperCase();\n  if (upper.includes(\"TODAY\")) {\n    return 15 * MINUTE;\n  }\n  if (upper.includes(\"LAST_7_DAYS\") || upper.includes(\"LAST_14_DAYS\")) {\n    return 1 * HOUR;\n  }\n  // Historical data (BETWEEN, LAST_30_DAYS, LAST_90_DAYS, etc.)\n  return 6 * HOUR;\n}\n\nexport function buildQueryCacheKey(customerId: string, query: string): string {\n  const today = new Date().toISOString().slice(0, 10);\n  return `${customerId}:${today}:${query.trim().replace(/\\s+/g, \" \")}`;\n}\n\ninterface CachedAccount {\n  id: string;\n  access_type: \"direct\" | \"managed\";\n  manager_id?: string;\n}\n\nexport function getManagerIdForCustomer(customerId: string): string | undefined {\n  const cached = cacheGet<CachedAccount[]>(\"accounts\", \"list\");\n  if (!cached) return undefined;\n  const account = cached.data.find((a) => a.id === customerId);\n  if (account?.access_type === \"managed\") return account.manager_id;\n  return undefined;\n}\n","import { ApiError, apiGet } from \"../../client.ts\";\nimport { getEnv } from \"../../env.ts\";\nimport { handleConnectionError, isNotConnectedError } from \"../../error-handler.ts\";\nimport type { QueryContext } from \"../../geo-context.ts\";\nimport { cacheGet, cacheSet } from \"./cache.ts\";\nimport type { AdsErrorEnvelope, AdsFileSummary, AdsSuccessEnvelope } from \"./types.ts\";\n\ntype AdsOutput =\n  | AdsSuccessEnvelope<unknown>\n  | AdsErrorEnvelope\n  | AdsFileSummary\n  | { ok: true; data: unknown; query_context?: QueryContext; cached?: true; fields?: Record<string, string> }\n  | { ok: false; error: { code: string; message: string } };\n\nexport function writeAdsJson(envelope: AdsOutput): void {\n  process.stdout.write(`${JSON.stringify(envelope, null, 2)}\\n`);\n}\n\nexport function writeJsonEnvelope(envelope: Record<string, unknown>): void {\n  process.stdout.write(`${JSON.stringify(envelope, null, 2)}\\n`);\n}\n\n/** The formats `writeAdsOutput` prints. */\nexport const TABLE_OUTPUT_FORMATS = [\"json\", \"csv\", \"jsonl\", \"md\"] as const;\n\n/** Why `--output <format>` cannot be printed, or null — rather than quietly falling back to JSON. */\nexport function outputFormatRefusal(format: string, supported: readonly string[]): string | null {\n  if (supported.includes(format)) return null;\n  const list =\n    supported.length > 1 ? `${supported.slice(0, -1).join(\", \")} or ${supported.at(-1)}` : supported.join(\"\");\n  return `--output ${format} is not supported — use ${list}`;\n}\n\nexport function toCsvRow(values: string[]): string {\n  return values\n    .map((v) => {\n      if (v.includes(\",\") || v.includes('\"') || v.includes(\"\\n\")) {\n        return `\"${v.replace(/\"/g, '\"\"')}\"`;\n      }\n      return v;\n    })\n    .join(\",\");\n}\n\nfunction flattenRow(row: Record<string, unknown>): Record<string, string> {\n  const flat: Record<string, string> = {};\n  for (const [key, val] of Object.entries(row)) {\n    flat[key] = typeof val === \"object\" && val !== null ? JSON.stringify(val) : String(val ?? \"\");\n  }\n  return flat;\n}\n\n/**\n * One write per table: a line-by-line write piped into `head` hits a closed pipe on\n * the next line and crashes with EPIPE, where a single write lands in the pipe buffer.\n */\nfunction writeWhole(lines: string[]): void {\n  process.stdout.write(`${lines.join(\"\\n\")}\\n`);\n}\n\nfunction writeAdsCsv(data: Array<Record<string, unknown>>, fields?: string[]): void {\n  if (data.length === 0) return;\n  const cols = fields ?? Object.keys(data[0] ?? {});\n  const lines = [toCsvRow(cols)];\n  for (const row of data) {\n    const flat = flattenRow(row);\n    lines.push(toCsvRow(cols.map((f) => flat[f] ?? \"\")));\n  }\n  writeWhole(lines);\n}\n\nfunction writeAdsJsonl(data: Array<Record<string, unknown>>): void {\n  if (data.length === 0) return;\n  writeWhole(data.map((row) => JSON.stringify(row)));\n}\n\n/** A `|` or line break in a name would split its cell and shift every later column. */\nfunction mdCell(value: string): string {\n  return value.replace(/\\|/g, \"\\\\|\").replace(/\\r?\\n/g, \" \");\n}\n\nfunction writeAdsMd(data: Array<Record<string, unknown>>, fields?: string[]): void {\n  if (data.length === 0) return;\n  const cols = fields ?? Object.keys(data[0] ?? {});\n  const lines = [`| ${cols.join(\" | \")} |`, `| ${cols.map(() => \"---\").join(\" | \")} |`];\n  for (const row of data) {\n    const flat = flattenRow(row);\n    lines.push(`| ${cols.map((f) => mdCell(flat[f] ?? \"\")).join(\" | \")} |`);\n  }\n  writeWhole(lines);\n}\n\n/**\n * `hints` ride in the JSON envelope; csv/jsonl/md stdout has no room for them,\n * and an empty result is exactly when the hint matters, so they go to stderr.\n */\nexport function writeAdsOutput(\n  data: Array<Record<string, unknown>>,\n  format: string,\n  fields?: string[],\n  hints: string[] = [],\n): void {\n  switch (format) {\n    case \"csv\":\n      writeAdsCsv(data, fields);\n      break;\n    case \"jsonl\":\n      writeAdsJsonl(data);\n      break;\n    case \"md\":\n      writeAdsMd(data, fields);\n      break;\n    default:\n      writeJsonEnvelope(hints.length > 0 ? { ok: true, data, hints } : { ok: true, data });\n      return;\n  }\n  for (const hint of hints) process.stderr.write(`${hint}\\n`);\n}\n\ninterface AccountInfo {\n  id: string;\n  name: string;\n  access_type: \"direct\" | \"managed\";\n  level: number;\n  manager_id?: string;\n}\n\nasync function fetchAccounts(useCache = true): Promise<AccountInfo[]> {\n  if (useCache) {\n    const cached = cacheGet<AccountInfo[]>(\"accounts\", \"list\");\n    if (cached) return cached.data;\n  }\n  const params = !useCache ? { \"skip-cache\": \"true\" } : undefined;\n  const data = await apiGet<AccountInfo[]>(\"/api/ads/google/accounts\", params);\n  if (useCache) {\n    cacheSet(\"accounts\", \"list\", data, 60 * 60 * 1000);\n  }\n  return data;\n}\n\nexport async function resolveCustomerId(args: Record<string, unknown>): Promise<string> {\n  const fromArgs = args[\"customer-id\"] as string | undefined;\n  const customerId = fromArgs || getEnv().BAKER_GOOGLE_ADS_CUSTOMER_ID;\n\n  if (customerId) {\n    if (!/^\\d{10}$/.test(customerId)) {\n      writeAdsJson({\n        ok: false,\n        error: {\n          code: \"INVALID_CUSTOMER_ID\",\n          message:\n            \"Customer ID must be exactly 10 digits without dashes. Pass --customer-id or set BAKER_GOOGLE_ADS_CUSTOMER_ID.\",\n        },\n      });\n      process.exit(1);\n    }\n    return customerId;\n  }\n\n  const useCache = !args[\"no-cache\"];\n\n  try {\n    const accounts = await fetchAccounts(useCache);\n    const [single] = accounts;\n    if (accounts.length === 1 && single) {\n      process.stderr.write(`Using account \"${single.name}\" (${single.id})\\n`);\n      return single.id;\n    }\n    if (accounts.length === 0) {\n      handleConnectionError(\"google_ads\");\n    }\n    const list = accounts.map((a) => `  ${a.id}  ${a.name}`).join(\"\\n\");\n    writeAdsJson({\n      ok: false,\n      error: {\n        code: \"MULTIPLE_ACCOUNTS\",\n        message: `Multiple accounts found. Pass --customer-id or set BAKER_GOOGLE_ADS_CUSTOMER_ID:\\n${list}`,\n      },\n    });\n    process.exit(1);\n  } catch (err) {\n    // \"No connection\" reaches here as a 404/403 from the accounts lookup. Reporting it as\n    // an unusable customer id sends the agent hunting for an id that cannot exist yet.\n    if (err instanceof ApiError && isNotConnectedError(err.code, err.message)) {\n      handleConnectionError(\"google_ads\", err.message);\n    }\n    writeAdsJson({\n      ok: false,\n      error: {\n        code: \"INVALID_CUSTOMER_ID\",\n        message: \"Could not auto-detect account. Pass --customer-id or set BAKER_GOOGLE_ADS_CUSTOMER_ID.\",\n      },\n    });\n    process.exit(1);\n  }\n}\n"],"mappings":";;;;;;;;;;AAaA,IAAM,8BAAkE;AAAA,EACtE,YAAY;AAAA,EACZ,KAAK;AAAA,EACL,KAAK;AAAA,EACL,cAAc;AAAA,EACd,UAAU;AAAA,EACV,OAAO;AACT;AAEA,IAAM,gBAAoD;AAAA,EACxD,YAAY;AAAA,EACZ,KAAK;AAAA,EACL,KAAK;AAAA,EACL,OAAO;AAAA,EACP,UAAU;AAAA,EACV,cAAc;AAChB;AAUO,SAAS,yBAAyB,UAA8B,iBAAkC;AACvG,QAAM,OAAO,cAAc,QAAQ;AACnC,QAAM,OAAO,4BAA4B,QAAQ;AAGjD,MAAI,sBAAsB,GAAG;AAC3B,WACE,GAAG,IAAI,qLACgF,IAAI;AAAA,EAG/F;AACA,MAAI,oBAAoB,UAAa,cAAc,KAAK,eAAe,GAAG;AACxE,WACE,GAAG,IAAI,kQAE8C,IAAI,8JACsB,IAAI;AAAA,EAGvF;AACA,SACE,GAAG,IAAI,0LAC0E,IAAI,oOAED,IAAI;AAG5F;AAGA,IAAM,gBAAgB;AAMf,SAAS,sBAAsB,UAA8B,iBAAiC;AACnG,QAAM,eAAe,cAAc,QAAQ;AAE3C,QAAM,cAAc;AAAA,IAClB,YAAY;AAAA,IACZ,KAAK;AAAA,IACL,KAAK;AAAA,IACL,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA,EAChB,EAAE,QAAQ;AAEV,QAAM,OAAO;AAAA,IACX,YAAY;AAAA,IACZ,KAAK;AAAA,IACL,KAAK;AAAA,IACL,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA,EAChB,EAAE,QAAQ;AAEV,QAAM,WAAW;AAAA,IACf,IAAI;AAAA,IACJ,OAAO;AAAA,MACL;AAAA,MACA,SAAS,mBAAmB,MAAM,YAAY;AAAA,MAC9C,KAAK,sBAAsB,IACvB,EAAE,QAAQ,oBAAoB,aAAa,yBAAyB,QAAQ,EAAE,IAC9E;AAAA,QACE,QAAQ;AAAA,QACR,aAAa,GAAG,yBAAyB,UAAU,eAAe,CAAC,wEAAwE,WAAW;AAAA,MACxJ;AAAA,MACJ,WAAW;AAAA,IACb;AAAA,EACF;AAEA,oBAAkB,QAAQ;AAC1B,UAAQ,KAAK,CAAC;AAChB;AAOO,SAAS,oBAAoB,MAAc,SAA0B;AAC1E,MAAI,SAAS,eAAe,SAAS,kBAAkB,SAAS,aAAa;AAC3E,WAAO;AAAA,EACT;AAIA,SAAO,uFAAuF,KAAK,OAAO;AAC5G;AAaO,SAAS,mBAAmB,MAAc,SAA0B;AACzE,MAAI,SAAS,gBAAgB;AAC3B,WAAO;AAAA,EACT;AACA,SAAO,oBAAoB,MAAM,OAAO;AAC1C;AAOO,SAAS,0BAA0B,SAA0B;AAClE,SAAO,QAAQ,WAAW,qDAAqD;AACjF;;;AC5JA,SAAS,kBAAkB;AAC3B,SAAS,YAAY,WAAW,cAAc,QAAQ,qBAAqB;AAC3E,SAAS,eAAe;AACxB,SAAS,YAAY;AASrB,SAAS,WAAmB;AAC1B,QAAM,UAAU,sBAAsB,GAAG,QAAQ,kBAAkB,EAAE;AACrE,SAAO,KAAK,QAAQ,GAAG,UAAU,SAAS,OAAO,GAAI,UAAU,CAAC,WAAW,OAAO,IAAI,CAAC,CAAE;AAC3F;AAEA,SAAS,UAAU,KAAmB;AACpC,MAAI,CAAC,WAAW,GAAG,GAAG;AACpB,cAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AAAA,EACpC;AACF;AAEA,SAAS,QAAQ,KAAqB;AACpC,SAAO,WAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACnE;AAEA,SAAS,UAAU,UAAkB,KAAqB;AACxD,QAAM,MAAM,KAAK,SAAS,GAAG,QAAQ;AACrC,YAAU,GAAG;AACb,SAAO,KAAK,KAAK,GAAG,QAAQ,GAAG,CAAC,OAAO;AACzC;AAEO,SAAS,SAAY,UAAkB,KAAmC;AAC/E,QAAM,OAAO,UAAU,UAAU,GAAG;AACpC,MAAI,CAAC,WAAW,IAAI,GAAG;AACrB,WAAO;AAAA,EACT;AACA,MAAI;AACF,UAAM,MAAM,aAAa,MAAM,OAAO;AACtC,UAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,QAAI,MAAM,YAAY,KAAK,IAAI,GAAG;AAChC,aAAO,MAAM,EAAE,OAAO,KAAK,CAAC;AAC5B,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO,MAAM,EAAE,OAAO,KAAK,CAAC;AAC5B,WAAO;AAAA,EACT;AACF;AAEO,SAAS,SACd,UACA,KACA,MACA,OACA,QACM;AACN,QAAM,OAAO,UAAU,UAAU,GAAG;AACpC,QAAM,QAAuB;AAAA,IAC3B,WAAW,KAAK,IAAI,IAAI;AAAA,IACxB;AAAA,IACA;AAAA,EACF;AACA,gBAAc,MAAM,KAAK,UAAU,KAAK,GAAG,OAAO;AACpD;AAEA,IAAM,OAAO,KAAK,KAAK;AACvB,IAAM,SAAS,KAAK;AAEb,SAAS,YAAY,OAAuB;AACjD,QAAM,QAAQ,MAAM,YAAY;AAChC,MAAI,MAAM,SAAS,OAAO,GAAG;AAC3B,WAAO,KAAK;AAAA,EACd;AACA,MAAI,MAAM,SAAS,aAAa,KAAK,MAAM,SAAS,cAAc,GAAG;AACnE,WAAO,IAAI;AAAA,EACb;AAEA,SAAO,IAAI;AACb;AAEO,SAAS,mBAAmB,YAAoB,OAAuB;AAC5E,QAAM,SAAQ,oBAAI,KAAK,GAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAClD,SAAO,GAAG,UAAU,IAAI,KAAK,IAAI,MAAM,KAAK,EAAE,QAAQ,QAAQ,GAAG,CAAC;AACpE;AAQO,SAAS,wBAAwB,YAAwC;AAC9E,QAAM,SAAS,SAA0B,YAAY,MAAM;AAC3D,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,UAAU,OAAO,KAAK,KAAK,CAAC,MAAM,EAAE,OAAO,UAAU;AAC3D,MAAI,SAAS,gBAAgB,UAAW,QAAO,QAAQ;AACvD,SAAO;AACT;;;ACtFO,SAAS,aAAa,UAA2B;AACtD,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAAA,CAAI;AAC/D;AAEO,SAAS,kBAAkB,UAAyC;AACzE,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAAA,CAAI;AAC/D;AAGO,IAAM,uBAAuB,CAAC,QAAQ,OAAO,SAAS,IAAI;AAG1D,SAAS,oBAAoB,QAAgB,WAA6C;AAC/F,MAAI,UAAU,SAAS,MAAM,EAAG,QAAO;AACvC,QAAM,OACJ,UAAU,SAAS,IAAI,GAAG,UAAU,MAAM,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,OAAO,UAAU,GAAG,EAAE,CAAC,KAAK,UAAU,KAAK,EAAE;AAC1G,SAAO,YAAY,MAAM,gCAA2B,IAAI;AAC1D;AAEO,SAAS,SAAS,QAA0B;AACjD,SAAO,OACJ,IAAI,CAAC,MAAM;AACV,QAAI,EAAE,SAAS,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK,EAAE,SAAS,IAAI,GAAG;AAC1D,aAAO,IAAI,EAAE,QAAQ,MAAM,IAAI,CAAC;AAAA,IAClC;AACA,WAAO;AAAA,EACT,CAAC,EACA,KAAK,GAAG;AACb;AAEA,SAAS,WAAW,KAAsD;AACxE,QAAM,OAA+B,CAAC;AACtC,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC5C,SAAK,GAAG,IAAI,OAAO,QAAQ,YAAY,QAAQ,OAAO,KAAK,UAAU,GAAG,IAAI,OAAO,OAAO,EAAE;AAAA,EAC9F;AACA,SAAO;AACT;AAMA,SAAS,WAAW,OAAuB;AACzC,UAAQ,OAAO,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA,CAAI;AAC9C;AAEA,SAAS,YAAY,MAAsC,QAAyB;AAClF,MAAI,KAAK,WAAW,EAAG;AACvB,QAAM,OAAO,UAAU,OAAO,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;AAChD,QAAM,QAAQ,CAAC,SAAS,IAAI,CAAC;AAC7B,aAAW,OAAO,MAAM;AACtB,UAAM,OAAO,WAAW,GAAG;AAC3B,UAAM,KAAK,SAAS,KAAK,IAAI,CAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;AAAA,EACrD;AACA,aAAW,KAAK;AAClB;AAEA,SAAS,cAAc,MAA4C;AACjE,MAAI,KAAK,WAAW,EAAG;AACvB,aAAW,KAAK,IAAI,CAAC,QAAQ,KAAK,UAAU,GAAG,CAAC,CAAC;AACnD;AAGA,SAAS,OAAO,OAAuB;AACrC,SAAO,MAAM,QAAQ,OAAO,KAAK,EAAE,QAAQ,UAAU,GAAG;AAC1D;AAEA,SAAS,WAAW,MAAsC,QAAyB;AACjF,MAAI,KAAK,WAAW,EAAG;AACvB,QAAM,OAAO,UAAU,OAAO,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;AAChD,QAAM,QAAQ,CAAC,KAAK,KAAK,KAAK,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,EAAE,KAAK,KAAK,CAAC,IAAI;AACpF,aAAW,OAAO,MAAM;AACtB,UAAM,OAAO,WAAW,GAAG;AAC3B,UAAM,KAAK,KAAK,KAAK,IAAI,CAAC,MAAM,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,KAAK,CAAC,IAAI;AAAA,EACxE;AACA,aAAW,KAAK;AAClB;AAMO,SAAS,eACd,MACA,QACA,QACA,QAAkB,CAAC,GACb;AACN,UAAQ,QAAQ;AAAA,IACd,KAAK;AACH,kBAAY,MAAM,MAAM;AACxB;AAAA,IACF,KAAK;AACH,oBAAc,IAAI;AAClB;AAAA,IACF,KAAK;AACH,iBAAW,MAAM,MAAM;AACvB;AAAA,IACF;AACE,wBAAkB,MAAM,SAAS,IAAI,EAAE,IAAI,MAAM,MAAM,MAAM,IAAI,EAAE,IAAI,MAAM,KAAK,CAAC;AACnF;AAAA,EACJ;AACA,aAAW,QAAQ,MAAO,SAAQ,OAAO,MAAM,GAAG,IAAI;AAAA,CAAI;AAC5D;AAUA,eAAe,cAAc,WAAW,MAA8B;AACpE,MAAI,UAAU;AACZ,UAAM,SAAS,SAAwB,YAAY,MAAM;AACzD,QAAI,OAAQ,QAAO,OAAO;AAAA,EAC5B;AACA,QAAM,SAAS,CAAC,WAAW,EAAE,cAAc,OAAO,IAAI;AACtD,QAAM,OAAO,MAAM,OAAsB,4BAA4B,MAAM;AAC3E,MAAI,UAAU;AACZ,aAAS,YAAY,QAAQ,MAAM,KAAK,KAAK,GAAI;AAAA,EACnD;AACA,SAAO;AACT;AAEA,eAAsB,kBAAkB,MAAgD;AACtF,QAAM,WAAW,KAAK,aAAa;AACnC,QAAM,aAAa,YAAY,OAAO,EAAE;AAExC,MAAI,YAAY;AACd,QAAI,CAAC,WAAW,KAAK,UAAU,GAAG;AAChC,mBAAa;AAAA,QACX,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SACE;AAAA,QACJ;AAAA,MACF,CAAC;AACD,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,CAAC,KAAK,UAAU;AAEjC,MAAI;AACF,UAAM,WAAW,MAAM,cAAc,QAAQ;AAC7C,UAAM,CAAC,MAAM,IAAI;AACjB,QAAI,SAAS,WAAW,KAAK,QAAQ;AACnC,cAAQ,OAAO,MAAM,kBAAkB,OAAO,IAAI,MAAM,OAAO,EAAE;AAAA,CAAK;AACtE,aAAO,OAAO;AAAA,IAChB;AACA,QAAI,SAAS,WAAW,GAAG;AACzB,4BAAsB,YAAY;AAAA,IACpC;AACA,UAAM,OAAO,SAAS,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,IAAI;AAClE,iBAAa;AAAA,MACX,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,EAAqF,IAAI;AAAA,MACpG;AAAA,IACF,CAAC;AACD,YAAQ,KAAK,CAAC;AAAA,EAChB,SAAS,KAAK;AAGZ,QAAI,eAAe,YAAY,oBAAoB,IAAI,MAAM,IAAI,OAAO,GAAG;AACzE,4BAAsB,cAAc,IAAI,OAAO;AAAA,IACjD;AACA,iBAAa;AAAA,MACX,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,IACF,CAAC;AACD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":[]}

package/dist/chunk-ASRS37QE.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/command-loading.ts","../src/profile-help.ts","../src/agent-profile.ts"],"sourcesContent":["import type { Resolvable, SubCommandsDef } from \"citty\";\n\n/**\n * Which command families one `baker` invocation has to load.\n *\n * Loading every family is what made each `baker` process hold ~135 MB of heap\n * while it waited on one HTTP call: twenty parallel agents ran sixty of them and\n * filled an 8 GB Runtime. A command needs its own family and nothing else.\n */\nexport function familiesToLoad(argv: readonly string[], families: readonly string[]): string[] | \"all\" {\n  const first = argv.find((token) => !token.startsWith(\"-\"));\n  // `schema` reads the registry every family fills as it loads.\n  if (first !== undefined && first !== \"schema\" && families.includes(first)) return [first];\n  return \"all\";\n}\n\nexport type LoadableCommand = { meta?: Resolvable<unknown>; subCommands?: Resolvable<SubCommandsDef> };\n\nasync function resolved<T>(value: Resolvable<T>): Promise<T> {\n  return typeof value === \"function\" ? await (value as () => T | Promise<T>)() : await value;\n}\n\n/** The command's subcommands, loaded in place if they were declared lazily. */\nasync function subCommandsOf(command: LoadableCommand): Promise<SubCommandsDef | undefined> {\n  if (command.subCommands === undefined) return undefined;\n  const subCommands = await resolved(command.subCommands);\n  command.subCommands = subCommands;\n  return subCommands;\n}\n\n/**\n * The subcommand of `command` that `token` names, by its name or an alias, as\n * citty finds it — loaded in place. An alias lives in the subcommand's own\n * meta, so a token that is no name loads the siblings to read theirs.\n */\nexport async function loadSubCommandNamed(\n  command: LoadableCommand,\n  token: string,\n): Promise<[string, LoadableCommand] | null> {\n  const subCommands = await subCommandsOf(command);\n  if (!subCommands) return null;\n  const named = subCommands[token];\n  if (named !== undefined) {\n    const loaded = await resolved(named);\n    subCommands[token] = loaded;\n    return [token, loaded];\n  }\n  for (const [name, sub] of Object.entries(subCommands)) {\n    const loaded = await resolved(sub);\n    subCommands[name] = loaded;\n    const meta = (await resolved(loaded.meta ?? {})) as { alias?: unknown };\n    const aliases = Array.isArray(meta.alias) ? meta.alias : meta.alias === undefined ? [] : [meta.alias];\n    if (aliases.includes(token)) return [name, loaded];\n  }\n  return null;\n}\n\n/** Loads, in place, every command at every depth. */\nexport async function loadAllCommands(command: LoadableCommand): Promise<void> {\n  const subCommands = await subCommandsOf(command);\n  if (!subCommands) return;\n  for (const [name, sub] of Object.entries(subCommands)) {\n    const loaded = await resolved(sub);\n    subCommands[name] = loaded;\n    await loadAllCommands(loaded);\n  }\n}\n\n/**\n * Loads, in place, the command `argv` names and every parent on the way — and\n * nothing else, so the flag guards in `cli.ts` see the command they judge while\n * its siblings stay unloaded. Everything loads for `schema` and an unknown\n * name, which need the whole tree. It stops at the first flag: the organization\n * guard (`agent-profile.ts`) walks on past one itself, and loads the subtree a\n * `--help` lists.\n */\nexport async function loadCommands<T extends LoadableCommand>(root: T, argv: readonly string[]): Promise<T> {\n  const families = Object.keys((await subCommandsOf(root)) ?? {});\n  if (familiesToLoad(argv, families) === \"all\") {\n    await loadAllCommands(root);\n    return root;\n  }\n  let command: LoadableCommand = root;\n  for (const token of argv) {\n    if (token === \"--\" || token.startsWith(\"-\")) break;\n    const subCommands = await subCommandsOf(command);\n    const sub = subCommands?.[token];\n    if (!subCommands || sub === undefined) break;\n    const loaded = await resolved(sub);\n    subCommands[token] = loaded;\n    command = loaded;\n  }\n  return root;\n}\n","/**\n * What a command's help says, for the agent reading it.\n *\n * Descriptions are written for a company's agent, which may run every command:\n * they cite writes as examples (`baker ads meta campaigns create …`) and say a\n * family \"lists campaigns, or stages writes\". Read by the organization's agent,\n * which may only read, each is a call it would make and be refused. So a line\n * that names a command the reader may not run leaves its help, and where a\n * family holds commands the reader may not run, so does the talk of staging\n * them. A family the reader may change whole (the organization's own Scheduled\n * agents) keeps its staging, because it is how that family works.\n */\n\nimport type { AgentProfile } from \"./agent-profile.ts\";\n\ntype HelpNode = { meta?: unknown; subCommands?: unknown };\ntype Offers = (path: string) => boolean;\n\nfunction loadedSubCommands(node: HelpNode): Array<[string, HelpNode]> {\n  const subCommands = node.subCommands;\n  if (typeof subCommands !== \"object\" || subCommands === null) return [];\n  return Object.entries(subCommands as Record<string, unknown>).flatMap(([name, sub]) =>\n    typeof sub === \"object\" && sub !== null ? [[name, sub as HelpNode] as [string, HelpNode]] : [],\n  );\n}\n\nfunction subCommandNames(node: HelpNode): string[] {\n  const subCommands = node.subCommands;\n  return typeof subCommands === \"object\" && subCommands !== null ? Object.keys(subCommands) : [];\n}\n\n/**\n * The command words name (`baker <words>`, or a family's command in backticks),\n * as far as the tree reaches; none when the first is no family. Where the tree\n * is not loaded this far (another family, a sibling this call never needed),\n * the words as written stand for the command: `offers` reads a command by its\n * leading words, so an argument after them changes nothing.\n */\nfunction commandOf(root: HelpNode, mention: string): string[] {\n  const words = mention.trim().split(/\\s+/);\n  let node: HelpNode = root;\n  const path: string[] = [];\n  for (const word of words) {\n    const loaded = loadedSubCommands(node).find(([name]) => name === word)?.[1];\n    if (!loaded) {\n      // Not loaded is not \"not there\": a lazy entry of that name stands for the words written.\n      return subCommandNames(node).includes(word) ? [words.join(\" \")] : path.length > 0 ? [path.join(\" \")] : [];\n    }\n    node = loaded;\n    path.push(word);\n  }\n  return [path.join(\" \")];\n}\n\nfunction indentOf(line: string): number {\n  return line.length - line.trimStart().length;\n}\n\n/**\n * The lines without those `drops` says go, each taken with what continues it:\n * the lines indented under it, the next line after a trailing `\\`, and the rest\n * of a sentence wrapped onto the lines below. `drops` returns the kept text of\n * a line, or null to drop it.\n */\nfunction dropping(lines: string[], drops: (line: string) => string | null): string[] {\n  const kept: string[] = [];\n  let carried: ((line: string) => boolean) | null = null;\n  for (const line of lines) {\n    if (carried?.(line)) continue;\n    carried = null;\n    const rest = drops(line);\n    if (rest !== null) {\n      kept.push(rest);\n      continue;\n    }\n    const indent = indentOf(line);\n    if (/\\\\\\s*$/.test(line)) {\n      let open = true;\n      carried = (next) => {\n        const continues = open;\n        open = /\\\\\\s*$/.test(next);\n        return continues;\n      };\n    } else if (indent === 0 && !/[.:!?)]\\s*$/.test(line)) {\n      let open = true;\n      carried = (next) => {\n        const continues = open && next.trim() !== \"\" && indentOf(next) === 0;\n        open = continues && !/[.:!?)]\\s*$/.test(next);\n        return continues;\n      };\n    } else if (indent > 0) {\n      carried = (next) => next.trim() !== \"\" && indentOf(next) > indent;\n    }\n  }\n  return kept;\n}\n\n/** A line that stands alone — an example, a table row, a \"Label: …\" entry — goes whole. */\nconst STANDALONE_LINE = /^(?:\\s|baker\\b|[A-Z][\\w ]{0,30}:\\s)/;\n\nfunction balanced(text: string): boolean {\n  return (text.match(/\\(/g)?.length ?? 0) === (text.match(/\\)/g)?.length ?? 0);\n}\n\n/** Each command the text names, at where it names it: `baker <words>`, or a family's `<words>` in backticks. */\nfunction commandMentions(root: HelpNode, text: string): Array<{ at: number; words: string }> {\n  const families = new Set(subCommandNames(root));\n  const quoted = [...text.matchAll(/`([a-z][\\w-]*(?:[ \\t][a-z][\\w-]*)*)(?=[`\\s<])/g)].filter((match) =>\n    families.has((match[1] ?? \"\").split(/\\s+/)[0] ?? \"\"),\n  );\n  return [...text.matchAll(/`?\\bbaker ((?:[a-z][\\w-]*[ \\t]?)+)/g), ...quoted].map((match) => ({\n    at: match.index,\n    words: match[1] ?? \"\",\n  }));\n}\n\n/**\n * Where the text first mentions something the reader may not use — a command\n * it is not offered, or a flag it is refused (`--add-trigger`) — or -1.\n */\nfunction firstUnusable(root: HelpNode, text: string, offered: Offers, refusedFlags: readonly string[]): number {\n  const commands = commandMentions(root, text)\n    .filter(({ words }) => commandOf(root, words).some((path) => !offered(path)))\n    .map(({ at }) => at);\n  const flags = refusedFlags.flatMap((flag) => {\n    const match = new RegExp(`--${flag}(?![\\\\w-])`).exec(text);\n    return match ? [match.index] : [];\n  });\n  const at = [...commands, ...flags];\n  return at.length > 0 ? Math.min(...at) : -1;\n}\n\n/**\n * The sentence without what it says about something the reader may not use:\n * cut back to the clause before the mention when one stands on its own, else\n * dropped.\n */\nfunction sentenceWithout(sentence: string, unusableAt: number): string {\n  if (unusableAt === -1) return sentence;\n  const before = sentence.slice(0, unusableAt).replace(/`$/, \"\");\n  const cut = Math.max(before.lastIndexOf(\", \"), before.lastIndexOf(\" — \"), before.lastIndexOf(\"; \"));\n  const clause = cut === -1 ? \"\" : before.slice(0, cut).trim();\n  // \"To undo one, `baker …`\" only led to the command.\n  const leadsIn = /^(?:to|use|run|call|for|with)\\b/i.test(clause);\n  return clause.split(/\\s+/).length >= 3 && balanced(clause) && !leadsIn ? `${clause}.` : \"\";\n}\n\n/** A sentence that leans on the one before it (\"It never touches a live tag.\"). */\nconst LEANS_BACK = /^(?:it|they|this|that|these|those)\\b/i;\n\n/** The text without any mention of a command the reader may not run, or a flag it is refused. */\nexport function withoutUnoffered(\n  root: HelpNode,\n  text: string,\n  offered: Offers,\n  refusedFlags: readonly string[] = [],\n): string {\n  const unusable = (part: string) => firstUnusable(root, part, offered, refusedFlags);\n  return dropping(text.split(\"\\n\"), (line) => {\n    if (unusable(line) === -1) return line;\n    if (STANDALONE_LINE.test(line)) return null;\n    const kept: string[] = [];\n    let dropped = false;\n    for (const sentence of line.split(/(?<=[.!?])\\s+/)) {\n      const rest: string = dropped && LEANS_BACK.test(sentence) ? \"\" : sentenceWithout(sentence, unusable(sentence));\n      dropped = rest === \"\";\n      if (rest !== \"\") kept.push(rest);\n    }\n    return kept.length === 0 ? null : kept.join(\" \");\n  }).join(\"\\n\");\n}\n\n/** Whether anything loaded under `path` is a command the reader may not run. */\nfunction holdsUnoffered(node: HelpNode, path: string[], offered: Offers): boolean {\n  return loadedSubCommands(node).some(\n    ([name, sub]) => !offered([...path, name].join(\" \")) || holdsUnoffered(sub, [...path, name], offered),\n  );\n}\n\n/** A sentence or line that is about staging a change, from its first words. */\nconst WRITE_TALK =\n  /^(?:stage\\b|staged\\b|staging\\b|write subcommands\\b|writes\\b|then stage\\b|drafts:|staged vs published\\b|lifecycle:|nothing staged\\b|on publish\\b|\\w+(?: \\/ \\w+)*\\s+—\\s+stage\\b)/i;\n\n/** The tail of a sentence offering a change: \"List campaigns, or stage writes (…)\". */\nconst WRITE_CLAUSE =\n  /(?:\\s*(?:[,;]|\\s—|\\s-)\\s*(?:(?:or|plus|and)\\s+)?|\\s+(?:or|plus|and)\\s+)(?:stage[sd]?|staged)\\b[^.]*/gi;\n\n/** \"List, show, amend or clear …\": a sentence opening on a list of this command's own verbs. */\nconst VERB_LIST = /^((?:[A-Za-z]+, )*[A-Za-z]+,? (?:or|and) [a-z]+)\\b/;\n\n/** The sentence naming, of the verbs it opens on, only those the reader may run; \"\" when none. */\nfunction withOfferedVerbs(sentence: string, children: ReadonlySet<string>, unoffered: ReadonlySet<string>): string {\n  const list = VERB_LIST.exec(sentence)?.[1];\n  if (!list) return sentence;\n  const verbs = list.split(/,\\s*(?:(?:or|and)\\s+)?|\\s+(?:or|and)\\s+/).map((verb) => verb.toLowerCase());\n  if (!verbs.every((verb) => children.has(verb))) return sentence;\n  const kept = verbs.filter((verb) => !unoffered.has(verb));\n  if (kept.length === 0) return \"\";\n  const named = kept.length === 1 ? (kept[0] ?? \"\") : `${kept.slice(0, -1).join(\", \")} or ${kept.at(-1)}`;\n  return `${named.charAt(0).toUpperCase()}${named.slice(1)}${sentence.slice(list.length)}`;\n}\n\n/** Whether text opens on the name of a command here the reader may not run (\"Release if…\", \"  associate-campaign / …\"). */\nfunction opensOnUnoffered(text: string, unoffered: ReadonlySet<string>): boolean {\n  const first =\n    text\n      .trim()\n      .split(/[\\s/]+/)[0]\n      ?.toLowerCase() ?? \"\";\n  return unoffered.has(first);\n}\n\n/** A line that is about a change: staging talk, a command it may not run, or \"Library writes (…):\" over reads. */\nfunction isWriteLine(line: string, unoffered: ReadonlySet<string>): boolean {\n  if (WRITE_TALK.test(line.trim())) return true;\n  if (indentOf(line) > 0) return opensOnUnoffered(line, unoffered);\n  return /:\\s*$/.test(line) && /\\bwrites?\\b/i.test(line);\n}\n\nfunction withoutWriteTalk(paragraph: string, children: ReadonlySet<string>, unoffered: ReadonlySet<string>): string {\n  const prose = (text: string) =>\n    text\n      .replace(WRITE_CLAUSE, \"\")\n      .split(/(?<=[.!?])\\s+/)\n      .map((sentence) => withOfferedVerbs(sentence, children, unoffered))\n      .filter(\n        (sentence) => sentence !== \"\" && !WRITE_TALK.test(sentence.trim()) && !opensOnUnoffered(sentence, unoffered),\n      )\n      .join(\" \");\n  const lines = paragraph.split(\"\\n\");\n  // Examples, tables and headings are kept line by line, and a line of prose among them sentence by sentence.\n  if (lines.some((line) => /^\\s/.test(line) || STANDALONE_LINE.test(line) || /:\\s*$/.test(line))) {\n    return dropping(lines, (line) => {\n      if (isWriteLine(line, unoffered)) return null;\n      if (indentOf(line) > 0 || STANDALONE_LINE.test(line) || !/[.!?]\\s*$/.test(line)) return line;\n      const kept = prose(line);\n      return kept === \"\" ? null : kept;\n    }).join(\"\\n\");\n  }\n  return prose(lines.join(\" \"));\n}\n\n/** \"Subcommands: list (default), remove, clear.\" names only the ones the reader may run. */\nfunction withOfferedSubcommands(text: string, path: string[], offered: Offers): string {\n  return text.replace(/Subcommands: ([^.]*)\\./g, (_whole, list: string) => {\n    const kept = list.split(/,\\s*/).filter((item) => offered([...path, item.split(/\\s/)[0] ?? \"\"].join(\" \")));\n    return kept.length > 0 ? `Subcommands: ${kept.join(\", \")}.` : \"\";\n  });\n}\n\n/** Drops a heading whose block below it was emptied, and the blank lines left behind. */\nfunction tidy(text: string): string {\n  const lines = text.split(\"\\n\");\n  const kept = lines.filter((line, index) => {\n    if (!/:\\s*$/.test(line)) return true;\n    const next = lines.slice(index + 1).find((later) => later.trim() !== \"\");\n    return next !== undefined && /^\\s/.test(next) && lines[index + 1]?.trim() !== \"\";\n  });\n  return kept\n    .join(\"\\n\")\n    .replace(/\\n{3,}/g, \"\\n\\n\")\n    .replace(/^(?:[ \\t]*\\n)+/, \"\")\n    .trimEnd();\n}\n\nexport function describedFor(\n  root: HelpNode,\n  description: string,\n  path: string[],\n  node: HelpNode,\n  profile: AgentProfile,\n  offered: Offers,\n  refusedFlags: readonly string[] = [],\n): string {\n  const cited = withoutUnoffered(root, description, offered, refusedFlags);\n  if (profile === \"company\" || !holdsUnoffered(node, path, offered)) return tidy(cited);\n  const children = new Set(subCommandNames(node));\n  const unoffered = new Set([...children].filter((name) => !offered([...path, name].join(\" \"))));\n  const shaped = cited\n    .split(/\\n\\s*\\n/)\n    .map((paragraph) => withoutWriteTalk(withOfferedSubcommands(paragraph, path, offered), children, unoffered))\n    .join(\"\\n\\n\");\n  const text = tidy(shaped);\n  if (text !== \"\") return text;\n  const reads = loadedSubCommands(node).flatMap(([name]) => (offered([...path, name].join(\" \")) ? [name] : []));\n  return reads.length > 0 ? `Read: ${reads.join(\", \")}.` : \"\";\n}\n","import { type LoadableCommand, loadAllCommands, loadSubCommandNamed } from \"./command-loading.ts\";\nimport { optionalWorkspaceKind } from \"./env.ts\";\nimport { describedFor, withoutUnoffered } from \"./profile-help.ts\";\n\n/**\n * Which commands this CLI offers the agent running it.\n *\n * One CLI serves two agents. A company's agent works inside its own workspace\n * and changes it; it is offered everything, except the organization family,\n * which is for reading other companies and means nothing to it. The\n * organization workspace's agent reads every company of its organization and\n * changes none of them: it is offered the reads alone, plus the research and\n * judgment it runs as itself, and its own Scheduled agents.\n *\n * This is what the agent is shown, not what it is allowed: the backend refuses\n * a write naming a company whatever the CLI does (`readNamedCompany`). Kept as\n * an explicit list so a new command is hidden from the organization until\n * someone decides it only reads.\n */\n\nexport type AgentProfile = \"company\" | \"organization\";\n\n/** Set on the organization workspace's Runtime (`runtimeSession/nodeActions.ts`). */\nexport function agentProfile(workspaceKind: string | undefined = optionalWorkspaceKind()): AgentProfile {\n  return workspaceKind === \"organization\" ? \"organization\" : \"company\";\n}\n\n/** Families only the organization workspace runs: hidden from a company's agent. */\nconst ORGANIZATION_ONLY = [\"organization\"];\n\n/**\n * Every command the organization workspace's agent is offered, as typed. An\n * entry offers that command and everything under it.\n */\nexport const ORGANIZATION_COMMANDS: readonly string[] = [\n  \"schema\",\n  \"capabilities\",\n  \"organization\",\n  // What a company did and has.\n  \"chats\",\n  \"history\",\n  \"actions list\",\n  \"actions log\",\n  \"actions get\",\n  \"actions status\",\n  \"actions draft list\",\n  \"actions tags list\",\n  // The organization's own Scheduled agents, which live in this workspace:\n  // staged like a company's, applied at Publish. Naming a company is still a\n  // read only (`readNamedCompany`), so none of these reaches one.\n  \"scheduled-agents\",\n  \"experiment status\",\n  \"experiment history\",\n  \"flows list\",\n  \"flows show\",\n  \"flows schema\",\n  \"testimonials get\",\n  \"testimonials search\",\n  \"testimonials list\",\n  \"testimonials tags list\",\n  \"testimonials sources list\",\n  \"images get\",\n  \"images search\",\n  \"images library\",\n  \"images tags list\",\n  // A page's or a link's pictures and videos, to the workspace's own disk: a\n  // client's logo, the photos on its site, the video it sent. Firecrawl reads\n  // the page; nothing reaches any library (`--auto-ingest` is refused below).\n  \"images download\",\n  \"images extract\",\n  \"videos get\",\n  \"videos search\",\n  \"videos tags list\",\n  \"videos fetch\",\n  \"studio get\",\n  \"studio list\",\n  \"avatars list\",\n  \"avatars get\",\n  \"creatives performance\",\n  \"creatives feedback read\",\n  \"landing export status\",\n  \"landing export list\",\n  \"site show\",\n  \"site domain list\",\n  \"credentials list\",\n  \"setup-links list\",\n  \"media-sources list\",\n  \"posts list\",\n  \"posts get\",\n  \"posts search\",\n  \"mcp connected\",\n  \"mcp catalog\",\n  \"mcp tools\",\n  \"mcp execute\",\n  \"mcp list\",\n  // Ads, every platform: accounts, structure, results, staged drafts.\n  \"ads google accounts\",\n  \"ads google currency\",\n  \"ads google url-options\",\n  \"ads google changes\",\n  \"ads google invoices\",\n  \"ads google identity-verification\",\n  \"ads google previews\",\n  \"ads google brands\",\n  \"ads google query\",\n  \"ads google keywords discover\",\n  \"ads google keywords metrics\",\n  \"ads google keywords forecast\",\n  \"ads google keywords themes\",\n  \"ads google keywords locations\",\n  \"ads google keywords languages\",\n  \"ads google keywords list\",\n  \"ads google budgets list\",\n  \"ads google campaigns list\",\n  \"ads google ad-groups list\",\n  \"ads google negative-keywords list\",\n  \"ads google keyword-lists list\",\n  \"ads google ads list\",\n  \"ads google assets list\",\n  \"ads google asset-groups list\",\n  \"ads google audiences list\",\n  \"ads google audiences targeting\",\n  \"ads google conversions list\",\n  \"ads google bidding-strategies list\",\n  \"ads google labels list\",\n  \"ads google campaign-criteria list\",\n  \"ads google ad-group-criteria list\",\n  \"ads google ad-group-bid-modifiers list\",\n  \"ads google account-exclusions list\",\n  \"ads google asset-group-signals list\",\n  \"ads google merchant-center list\",\n  \"ads google draft list\",\n  \"ads google draft show\",\n  \"ads meta accounts\",\n  \"ads meta account\",\n  \"ads meta businesses\",\n  \"ads meta pages\",\n  \"ads meta lead-forms list\",\n  \"ads meta leads\",\n  \"ads meta campaigns list\",\n  \"ads meta adsets list\",\n  \"ads meta ads list\",\n  \"ads meta creatives list\",\n  \"ads meta audiences list\",\n  \"ads meta custom-conversions list\",\n  \"ads meta pixels\",\n  \"ads meta activities\",\n  \"ads meta insights\",\n  \"ads meta draft list\",\n  \"ads meta draft show\",\n  \"ads linkedin accounts\",\n  \"ads linkedin account detail\",\n  \"ads linkedin campaign-groups list\",\n  \"ads linkedin campaigns list\",\n  \"ads linkedin creatives list\",\n  \"ads linkedin draft list\",\n  \"ads linkedin draft show\",\n  \"ads linkedin analytics\",\n  \"ads linkedin demographics\",\n  \"ads linkedin companies\",\n  \"ads linkedin top-companies\",\n  \"ads linkedin resolve\",\n  \"ads linkedin facets list\",\n  \"ads linkedin facets values\",\n  \"ads linkedin audience-size\",\n  \"ads linkedin bid-pricing\",\n  \"ads linkedin forecast\",\n  \"ads linkedin leads\",\n  \"ads linkedin conversions list\",\n  \"ads linkedin conversions health\",\n  \"ads linkedin conversation\",\n  \"ads linkedin audit\",\n  \"ads linkedin url-params\",\n  \"ads x accounts\",\n  \"ads x funding\",\n  \"ads x campaigns list\",\n  \"ads x line-items list\",\n  \"ads x promoted-tweets list\",\n  \"ads x tweets\",\n  \"ads x cards\",\n  \"ads x draft list\",\n  \"ads x draft show\",\n  \"ads x media\",\n  \"ads x audiences\",\n  \"ads x targeting-criteria list\",\n  \"ads x targeting-constants\",\n  \"ads x active-entities\",\n  \"ads x stats job-status\",\n  \"ads chatgpt account show\",\n  \"ads chatgpt campaigns list\",\n  \"ads chatgpt ad-groups list\",\n  \"ads chatgpt ads list\",\n  \"ads chatgpt conversions list\",\n  \"ads chatgpt conversions events\",\n  \"ads chatgpt conversions report\",\n  \"ads chatgpt audiences list\",\n  \"ads chatgpt catalogs list\",\n  \"ads chatgpt catalogs uploads\",\n  \"ads chatgpt catalogs products\",\n  \"ads chatgpt history\",\n  \"ads chatgpt insights\",\n  \"ads chatgpt locations\",\n  \"ads chatgpt draft list\",\n  \"ads chatgpt draft show\",\n  // Baker's synced copy of every platform's results, which the live reads above\n  // point at first. Reads only: each `show` beside its staged changes.\n  \"ads performance overview\",\n  \"ads performance trend\",\n  // Who the ads brought: counts per ad and per persona answer, and the ladder\n  // and persona map they are counted by (`adPerformance/peopleRoute.ts`).\n  \"ads performance people\",\n  \"ads performance personas\",\n  \"ads performance ladder\",\n  \"ads performance persona-fields\",\n  \"ads performance accounts\",\n  \"ads performance setup\",\n  \"ads performance entities\",\n  \"ads performance entity\",\n  \"ads performance changes\",\n  \"ads performance impact\",\n  \"ads performance creatives\",\n  \"ads performance families show\",\n  \"ads performance families choices\",\n  \"ads performance creative-health\",\n  \"ads performance creative-assets\",\n  \"ads performance health\",\n  \"ads performance breakdown\",\n  \"ads performance search-terms\",\n  \"ads performance pacing\",\n  \"ads performance funnel\",\n  \"ads performance tracking\",\n  \"ads performance landings\",\n  \"ads performance live-in\",\n  \"ads performance status\",\n  \"ads performance goals show\",\n  \"ads performance progress\",\n  \"ads performance diagnose\",\n  \"ads performance pulse\",\n  \"ads performance anomalies\",\n  \"ads performance recap\",\n  \"ads performance targets show\",\n  \"ads performance budget-recommendations\",\n  \"ads performance attention show\",\n  \"ads performance currency show\",\n  \"ads performance brand-split\",\n  \"ads performance impression-share\",\n  \"ads performance keyword-quality\",\n  \"ads performance google-report\",\n  \"ads performance budgets show\",\n  \"ads performance segments show\",\n  // Pages and measurement.\n  \"analytics overview\",\n  \"analytics traffic\",\n  \"analytics funnel\",\n  \"analytics flow\",\n  \"analytics page\",\n  \"analytics triggers\",\n  \"analytics releases\",\n  \"analytics paid\",\n  \"analytics delivery\",\n  \"analytics submissions\",\n  \"analytics geo\",\n  \"analytics bots\",\n  \"analytics landings\",\n  \"analytics tags\",\n  \"analytics events\",\n  \"analytics feed\",\n  \"analytics lookup\",\n  \"analytics devices\",\n  \"analytics ads\",\n  \"analytics conversions\",\n  \"analytics sends\",\n  \"analytics tracking\",\n  \"analytics arrivals\",\n  \"analytics sending-events\",\n  \"analytics sources\",\n  \"analytics website-tag\",\n  \"analytics sites\",\n  \"analytics questionnaire\",\n  \"analytics presets\",\n  \"funnel\",\n  \"ga4 properties\",\n  \"ga4 config\",\n  \"ga4 audit\",\n  \"ga4 query\",\n  \"ga4 draft list\",\n  \"ga4 draft show\",\n  \"gsc\",\n  \"tags list\",\n  \"tags draft\",\n  \"tag-manager containers\",\n  \"tag-manager read\",\n  \"tag-manager draft list\",\n  \"tag-manager draft show\",\n  // CRM and accounts.\n  \"hubspot\",\n  \"accounts influenced\",\n  \"accounts engagement\",\n  \"accounts warm\",\n  \"accounts company\",\n  \"accounts campaigns\",\n  \"accounts crm status\",\n  \"accounts crm check\",\n  \"accounts crm contract\",\n  // Research and judgment, run as the workspace itself (never with --company).\n  // Not `research customers`, which writes into a company's Knowledge, nor\n  // `winning-ads fit`, which judges an ad against a company's own COMPANY.md.\n  \"research web\",\n  \"research fetch\",\n  \"research linkedin-person\",\n  \"research transcript\",\n  \"research company\",\n  \"research google-ads\",\n  \"research reddit\",\n  \"research advertisers\",\n  \"research autocomplete\",\n  \"research countries\",\n  \"research intent\",\n  \"research keyword-metrics\",\n  \"research keywords-for-site\",\n  \"research keyword-gap\",\n  \"research languages\",\n  \"research lighthouse\",\n  \"research relevant-pages\",\n  \"decide\",\n  \"winning-ads search\",\n  \"winning-ads advertisers\",\n  // Adds a brand to Baker's shared library with nobody following it, so a\n  // client being set up can be read there: its channels, ads and landings.\n  \"winning-ads add\",\n  \"winning-ads discover\",\n  \"winning-ads following\",\n  \"winning-ads feed\",\n  \"winning-ads winners\",\n  \"winning-ads ads\",\n  \"winning-ads profile\",\n  \"winning-ads launches\",\n  \"winning-ads landings\",\n  \"winning-ads search-copy\",\n  \"winning-ads content\",\n  \"winning-ads hooks\",\n  \"winning-ads mechanisms\",\n  \"winning-ads formats\",\n];\n\nfunction covers(entry: string, path: string): boolean {\n  return path === entry || path.startsWith(`${entry} `);\n}\n\n/**\n * Whether `path` (a command as typed, `\"ads meta campaigns list\"`) is offered\n * to `profile`. A group is offered when anything under it is, so the way to an\n * offered command stays open.\n */\nexport function offers(profile: AgentProfile, path: string): boolean {\n  if (path === \"\") return true;\n  if (profile === \"company\") {\n    return !ORGANIZATION_ONLY.some((family) => covers(family, path));\n  }\n  return ORGANIZATION_COMMANDS.some((entry) => covers(entry, path) || covers(path, entry));\n}\n\n/**\n * The flags that change something, on commands the organization is offered to\n * read. `funnel` reads the funnel and `funnel --add-trigger` changes it, so the\n * command is offered and these are refused, and left out of its help.\n */\nexport const ORGANIZATION_WRITE_FLAGS: Readonly<Record<string, readonly string[]>> = {\n  \"images extract\": [\"auto-ingest\", \"context\"],\n  funnel: [\"steps\", \"step\", \"add-trigger\", \"remove-trigger\", \"event\", \"remove-step\", \"preset\"],\n  \"analytics conversions\": [\"event\", \"name\", \"rename\", \"to\", \"remove-name\", \"count-mode\", \"remove\"],\n  \"analytics sends\": [\n    \"set\",\n    \"source-event\",\n    \"from\",\n    \"platform\",\n    \"tag\",\n    \"event\",\n    \"account\",\n    \"parameter\",\n    \"id\",\n    \"remove\",\n  ],\n  \"analytics sources\": [\n    \"server\",\n    \"create\",\n    \"create-hubspot\",\n    \"create-activecampaign\",\n    \"events\",\n    \"account\",\n    \"set-trigger\",\n    \"set-amount\",\n    \"amount-property\",\n    \"currency\",\n    \"write\",\n    \"name\",\n    \"map\",\n    \"field\",\n    \"pause\",\n    \"resume\",\n    \"remove\",\n  ],\n  \"analytics sites\": [\"add\", \"remove\"],\n};\n\nfunction kebabCase(name: string): string {\n  return name.replace(/[A-Z]/g, (letter) => `-${letter.toLowerCase()}`);\n}\n\n/** The first flag in `argv` the organization is refused on the command at `path`, if any. */\nfunction refusedFlagIn(path: string, argv: readonly string[]): string | null {\n  const refused = ORGANIZATION_WRITE_FLAGS[path];\n  if (!refused) return null;\n  const end = argv.indexOf(\"--\");\n  for (const token of end === -1 ? argv : argv.slice(0, end)) {\n    if (!token.startsWith(\"--\")) continue;\n    const name = kebabCase(token.slice(2).split(\"=\")[0] ?? \"\").replace(/^no-/, \"\");\n    if (refused.includes(name)) return name;\n  }\n  return null;\n}\n\ntype ProfiledCommand = { meta?: unknown; subCommands?: unknown };\n\n/** What the organization's agent is told when it reaches for a command it is not offered. */\nexport const ORGANIZATION_REFUSAL =\n  \"The organization workspace only reads its companies, and this command changes something. A change to a company is made in that company's own chat; here, read it and show it in a Report.\";\n\nfunction hide(command: ProfiledCommand): void {\n  if (typeof command.meta === \"object\" && command.meta !== null) {\n    (command.meta as { hidden?: boolean }).hidden = true;\n  }\n}\n\n/**\n * Rewrites, in place, what each loaded command `profile` is shown says\n * (`profile-help.ts`), and takes off it the flags `profile` is refused. Args are\n * replaced rather than edited: one definition can be shared between commands.\n */\nfunction describeOffered(root: ProfiledCommand, command: ProfiledCommand, profile: AgentProfile, path: string[]): void {\n  const meta = command.meta as { hidden?: boolean; description?: unknown } | undefined;\n  if (meta?.hidden === true) return;\n  const offered = (cited: string) => offers(profile, cited);\n  const refusedFlags = profile === \"organization\" ? (ORGANIZATION_WRITE_FLAGS[path.join(\" \")] ?? []) : [];\n  if (typeof meta?.description === \"string\") {\n    meta.description = describedFor(root, meta.description, path, command, profile, offered, refusedFlags);\n  }\n  const shaped = command as { args?: unknown };\n  if (typeof shaped.args === \"object\" && shaped.args !== null) {\n    shaped.args = Object.fromEntries(\n      Object.entries(shaped.args as Record<string, unknown>).flatMap(([name, arg]) => {\n        if (refusedFlags.includes(kebabCase(name))) return [];\n        const description = (arg as { description?: unknown } | null)?.description;\n        return [\n          [\n            name,\n            typeof description === \"string\"\n              ? { ...(arg as object), description: withoutUnoffered(root, description, offered, refusedFlags) }\n              : arg,\n          ],\n        ];\n      }),\n    );\n  }\n  const subCommands = command.subCommands;\n  if (typeof subCommands !== \"object\" || subCommands === null) return;\n  for (const [name, sub] of Object.entries(subCommands as Record<string, unknown>)) {\n    if (typeof sub === \"object\" && sub !== null)\n      describeOffered(root, sub as ProfiledCommand, profile, [...path, name]);\n  }\n}\n\n/** Marks, in place, every loaded command `profile` is not offered as hidden from help. */\nfunction hideUnoffered(command: ProfiledCommand, profile: AgentProfile, path: string[]): void {\n  const subCommands = command.subCommands;\n  if (typeof subCommands !== \"object\" || subCommands === null) return;\n  for (const [name, sub] of Object.entries(subCommands as Record<string, unknown>)) {\n    if (typeof sub !== \"object\" || sub === null) continue;\n    const subPath = [...path, name];\n    if (!offers(profile, subPath.join(\" \"))) hide(sub as ProfiledCommand);\n    hideUnoffered(sub as ProfiledCommand, profile, subPath);\n  }\n}\n\ntype ArgDefinition = { type?: unknown; alias?: unknown };\n\nfunction camelCase(name: string): string {\n  return name.replace(/-([a-z0-9])/g, (_, letter: string) => letter.toUpperCase());\n}\n\nfunction aliases(of: unknown): unknown[] {\n  return Array.isArray(of) ? of : of === undefined ? [] : [of];\n}\n\n/** Whether `flag` takes the token after it as its value on `command`, as citty reads it. */\nfunction takesValue(command: ProfiledCommand & { args?: unknown }, flag: string): boolean {\n  if (flag.includes(\"=\") || typeof command.args !== \"object\" || command.args === null) return false;\n  const name = flag.replace(/^-{1,2}/, \"\");\n  return Object.entries(command.args as Record<string, ArgDefinition>).some(\n    ([key, definition]) =>\n      (definition.type === \"string\" || definition.type === \"enum\") &&\n      (camelCase(key) === camelCase(name) || aliases(definition.alias).includes(name)),\n  );\n}\n\n/**\n * The command `argv` addresses, found the way citty finds it: flags, and the\n * value after one that takes it, are skipped, so a flag before a command's name\n * cannot leave the path at its group. Each step is loaded on the way —\n * `loadCommands` stops at the first flag, and `--company` is taken off only\n * after it ran, so the guard cannot lean on what it loaded.\n */\nasync function addressedCommand(\n  root: ProfiledCommand,\n  argv: readonly string[],\n): Promise<{ path: string; command: ProfiledCommand }> {\n  const path: string[] = [];\n  let command: ProfiledCommand = root;\n  for (let index = 0; index < argv.length; index++) {\n    const token = argv[index] ?? \"\";\n    if (token === \"--\") break;\n    if (token.startsWith(\"-\")) {\n      if (takesValue(command, token)) index++;\n      continue;\n    }\n    const next = await loadSubCommandNamed(command as LoadableCommand, token);\n    if (!next) break;\n    path.push(next[0]);\n    command = next[1] as ProfiledCommand;\n  }\n  return { path: path.join(\" \"), command };\n}\n\n/**\n * Shapes the loaded command tree for the agent running it: what it is not\n * offered leaves its help, and the organization's agent is refused a command it\n * is not offered (the returned message; `null` when it may run). A company's\n * agent is never refused: the organization's commands are only out of its help,\n * because a Report published from the organization workspace runs them on a\n * runner that has no profile of its own.\n */\nexport async function applyAgentProfile(\n  root: ProfiledCommand,\n  profile: AgentProfile,\n  argv: readonly string[],\n): Promise<string | null> {\n  const { path, command } = await addressedCommand(root, argv);\n  // A walk that ends on a group prints its usage — `--help` anywhere, past `--`\n  // too, or no command or an unknown one — listing its subcommands, which are\n  // hidden only once loaded. A walk that reaches a command loads nothing more.\n  await loadAllCommands(command as LoadableCommand);\n  // Judged before the help is shaped, which takes the refused flags off the command.\n  const refused = profile === \"organization\" && (!offers(profile, path) || refusedFlagIn(path, argv) !== null);\n  hideUnoffered(root, profile, []);\n  describeOffered(root, root, profile, []);\n  return refused ? ORGANIZATION_REFUSAL : null;\n}\n"],"mappings":";;;;;AASO,SAAS,eAAe,MAAyB,UAA+C;AACrG,QAAM,QAAQ,KAAK,KAAK,CAAC,UAAU,CAAC,MAAM,WAAW,GAAG,CAAC;AAEzD,MAAI,UAAU,UAAa,UAAU,YAAY,SAAS,SAAS,KAAK,EAAG,QAAO,CAAC,KAAK;AACxF,SAAO;AACT;AAIA,eAAe,SAAY,OAAkC;AAC3D,SAAO,OAAO,UAAU,aAAa,MAAO,MAA+B,IAAI,MAAM;AACvF;AAGA,eAAe,cAAc,SAA+D;AAC1F,MAAI,QAAQ,gBAAgB,OAAW,QAAO;AAC9C,QAAM,cAAc,MAAM,SAAS,QAAQ,WAAW;AACtD,UAAQ,cAAc;AACtB,SAAO;AACT;AAOA,eAAsB,oBACpB,SACA,OAC2C;AAC3C,QAAM,cAAc,MAAM,cAAc,OAAO;AAC/C,MAAI,CAAC,YAAa,QAAO;AACzB,QAAM,QAAQ,YAAY,KAAK;AAC/B,MAAI,UAAU,QAAW;AACvB,UAAM,SAAS,MAAM,SAAS,KAAK;AACnC,gBAAY,KAAK,IAAI;AACrB,WAAO,CAAC,OAAO,MAAM;AAAA,EACvB;AACA,aAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,WAAW,GAAG;AACrD,UAAM,SAAS,MAAM,SAAS,GAAG;AACjC,gBAAY,IAAI,IAAI;AACpB,UAAM,OAAQ,MAAM,SAAS,OAAO,QAAQ,CAAC,CAAC;AAC9C,UAAMA,WAAU,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,QAAQ,KAAK,UAAU,SAAY,CAAC,IAAI,CAAC,KAAK,KAAK;AACpG,QAAIA,SAAQ,SAAS,KAAK,EAAG,QAAO,CAAC,MAAM,MAAM;AAAA,EACnD;AACA,SAAO;AACT;AAGA,eAAsB,gBAAgB,SAAyC;AAC7E,QAAM,cAAc,MAAM,cAAc,OAAO;AAC/C,MAAI,CAAC,YAAa;AAClB,aAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,WAAW,GAAG;AACrD,UAAM,SAAS,MAAM,SAAS,GAAG;AACjC,gBAAY,IAAI,IAAI;AACpB,UAAM,gBAAgB,MAAM;AAAA,EAC9B;AACF;AAUA,eAAsB,aAAwC,MAAS,MAAqC;AAC1G,QAAM,WAAW,OAAO,KAAM,MAAM,cAAc,IAAI,KAAM,CAAC,CAAC;AAC9D,MAAI,eAAe,MAAM,QAAQ,MAAM,OAAO;AAC5C,UAAM,gBAAgB,IAAI;AAC1B,WAAO;AAAA,EACT;AACA,MAAI,UAA2B;AAC/B,aAAW,SAAS,MAAM;AACxB,QAAI,UAAU,QAAQ,MAAM,WAAW,GAAG,EAAG;AAC7C,UAAM,cAAc,MAAM,cAAc,OAAO;AAC/C,UAAM,MAAM,cAAc,KAAK;AAC/B,QAAI,CAAC,eAAe,QAAQ,OAAW;AACvC,UAAM,SAAS,MAAM,SAAS,GAAG;AACjC,gBAAY,KAAK,IAAI;AACrB,cAAU;AAAA,EACZ;AACA,SAAO;AACT;;;AC3EA,SAAS,kBAAkB,MAA2C;AACpE,QAAM,cAAc,KAAK;AACzB,MAAI,OAAO,gBAAgB,YAAY,gBAAgB,KAAM,QAAO,CAAC;AACrE,SAAO,OAAO,QAAQ,WAAsC,EAAE;AAAA,IAAQ,CAAC,CAAC,MAAM,GAAG,MAC/E,OAAO,QAAQ,YAAY,QAAQ,OAAO,CAAC,CAAC,MAAM,GAAe,CAAuB,IAAI,CAAC;AAAA,EAC/F;AACF;AAEA,SAAS,gBAAgB,MAA0B;AACjD,QAAM,cAAc,KAAK;AACzB,SAAO,OAAO,gBAAgB,YAAY,gBAAgB,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC;AAC/F;AASA,SAAS,UAAU,MAAgB,SAA2B;AAC5D,QAAM,QAAQ,QAAQ,KAAK,EAAE,MAAM,KAAK;AACxC,MAAI,OAAiB;AACrB,QAAM,OAAiB,CAAC;AACxB,aAAW,QAAQ,OAAO;AACxB,UAAM,SAAS,kBAAkB,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,MAAM,SAAS,IAAI,IAAI,CAAC;AAC1E,QAAI,CAAC,QAAQ;AAEX,aAAO,gBAAgB,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC,IAAI,CAAC;AAAA,IAC1G;AACA,WAAO;AACP,SAAK,KAAK,IAAI;AAAA,EAChB;AACA,SAAO,CAAC,KAAK,KAAK,GAAG,CAAC;AACxB;AAEA,SAAS,SAAS,MAAsB;AACtC,SAAO,KAAK,SAAS,KAAK,UAAU,EAAE;AACxC;AAQA,SAAS,SAAS,OAAiB,OAAkD;AACnF,QAAM,OAAiB,CAAC;AACxB,MAAI,UAA8C;AAClD,aAAW,QAAQ,OAAO;AACxB,QAAI,UAAU,IAAI,EAAG;AACrB,cAAU;AACV,UAAM,OAAO,MAAM,IAAI;AACvB,QAAI,SAAS,MAAM;AACjB,WAAK,KAAK,IAAI;AACd;AAAA,IACF;AACA,UAAM,SAAS,SAAS,IAAI;AAC5B,QAAI,SAAS,KAAK,IAAI,GAAG;AACvB,UAAI,OAAO;AACX,gBAAU,CAAC,SAAS;AAClB,cAAM,YAAY;AAClB,eAAO,SAAS,KAAK,IAAI;AACzB,eAAO;AAAA,MACT;AAAA,IACF,WAAW,WAAW,KAAK,CAAC,cAAc,KAAK,IAAI,GAAG;AACpD,UAAI,OAAO;AACX,gBAAU,CAAC,SAAS;AAClB,cAAM,YAAY,QAAQ,KAAK,KAAK,MAAM,MAAM,SAAS,IAAI,MAAM;AACnE,eAAO,aAAa,CAAC,cAAc,KAAK,IAAI;AAC5C,eAAO;AAAA,MACT;AAAA,IACF,WAAW,SAAS,GAAG;AACrB,gBAAU,CAAC,SAAS,KAAK,KAAK,MAAM,MAAM,SAAS,IAAI,IAAI;AAAA,IAC7D;AAAA,EACF;AACA,SAAO;AACT;AAGA,IAAM,kBAAkB;AAExB,SAAS,SAAS,MAAuB;AACvC,UAAQ,KAAK,MAAM,KAAK,GAAG,UAAU,QAAQ,KAAK,MAAM,KAAK,GAAG,UAAU;AAC5E;AAGA,SAAS,gBAAgB,MAAgB,MAAoD;AAC3F,QAAM,WAAW,IAAI,IAAI,gBAAgB,IAAI,CAAC;AAC9C,QAAM,SAAS,CAAC,GAAG,KAAK,SAAS,gDAAgD,CAAC,EAAE;AAAA,IAAO,CAAC,UAC1F,SAAS,KAAK,MAAM,CAAC,KAAK,IAAI,MAAM,KAAK,EAAE,CAAC,KAAK,EAAE;AAAA,EACrD;AACA,SAAO,CAAC,GAAG,KAAK,SAAS,qCAAqC,GAAG,GAAG,MAAM,EAAE,IAAI,CAAC,WAAW;AAAA,IAC1F,IAAI,MAAM;AAAA,IACV,OAAO,MAAM,CAAC,KAAK;AAAA,EACrB,EAAE;AACJ;AAMA,SAAS,cAAc,MAAgB,MAAc,SAAiB,cAAyC;AAC7G,QAAM,WAAW,gBAAgB,MAAM,IAAI,EACxC,OAAO,CAAC,EAAE,MAAM,MAAM,UAAU,MAAM,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,CAAC,EAC3E,IAAI,CAAC,EAAE,IAAAC,IAAG,MAAMA,GAAE;AACrB,QAAM,QAAQ,aAAa,QAAQ,CAAC,SAAS;AAC3C,UAAM,QAAQ,IAAI,OAAO,KAAK,IAAI,YAAY,EAAE,KAAK,IAAI;AACzD,WAAO,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC;AAAA,EAClC,CAAC;AACD,QAAM,KAAK,CAAC,GAAG,UAAU,GAAG,KAAK;AACjC,SAAO,GAAG,SAAS,IAAI,KAAK,IAAI,GAAG,EAAE,IAAI;AAC3C;AAOA,SAAS,gBAAgB,UAAkB,YAA4B;AACrE,MAAI,eAAe,GAAI,QAAO;AAC9B,QAAM,SAAS,SAAS,MAAM,GAAG,UAAU,EAAE,QAAQ,MAAM,EAAE;AAC7D,QAAM,MAAM,KAAK,IAAI,OAAO,YAAY,IAAI,GAAG,OAAO,YAAY,UAAK,GAAG,OAAO,YAAY,IAAI,CAAC;AAClG,QAAM,SAAS,QAAQ,KAAK,KAAK,OAAO,MAAM,GAAG,GAAG,EAAE,KAAK;AAE3D,QAAM,UAAU,mCAAmC,KAAK,MAAM;AAC9D,SAAO,OAAO,MAAM,KAAK,EAAE,UAAU,KAAK,SAAS,MAAM,KAAK,CAAC,UAAU,GAAG,MAAM,MAAM;AAC1F;AAGA,IAAM,aAAa;AAGZ,SAAS,iBACd,MACA,MACA,SACA,eAAkC,CAAC,GAC3B;AACR,QAAM,WAAW,CAAC,SAAiB,cAAc,MAAM,MAAM,SAAS,YAAY;AAClF,SAAO,SAAS,KAAK,MAAM,IAAI,GAAG,CAAC,SAAS;AAC1C,QAAI,SAAS,IAAI,MAAM,GAAI,QAAO;AAClC,QAAI,gBAAgB,KAAK,IAAI,EAAG,QAAO;AACvC,UAAM,OAAiB,CAAC;AACxB,QAAI,UAAU;AACd,eAAW,YAAY,KAAK,MAAM,eAAe,GAAG;AAClD,YAAM,OAAe,WAAW,WAAW,KAAK,QAAQ,IAAI,KAAK,gBAAgB,UAAU,SAAS,QAAQ,CAAC;AAC7G,gBAAU,SAAS;AACnB,UAAI,SAAS,GAAI,MAAK,KAAK,IAAI;AAAA,IACjC;AACA,WAAO,KAAK,WAAW,IAAI,OAAO,KAAK,KAAK,GAAG;AAAA,EACjD,CAAC,EAAE,KAAK,IAAI;AACd;AAGA,SAAS,eAAe,MAAgB,MAAgB,SAA0B;AAChF,SAAO,kBAAkB,IAAI,EAAE;AAAA,IAC7B,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,EAAE,KAAK,GAAG,CAAC,KAAK,eAAe,KAAK,CAAC,GAAG,MAAM,IAAI,GAAG,OAAO;AAAA,EACtG;AACF;AAGA,IAAM,aACJ;AAGF,IAAM,eACJ;AAGF,IAAM,YAAY;AAGlB,SAAS,iBAAiB,UAAkB,UAA+B,WAAwC;AACjH,QAAM,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC;AACzC,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,QAAQ,KAAK,MAAM,yCAAyC,EAAE,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC;AACpG,MAAI,CAAC,MAAM,MAAM,CAAC,SAAS,SAAS,IAAI,IAAI,CAAC,EAAG,QAAO;AACvD,QAAM,OAAO,MAAM,OAAO,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC;AACxD,MAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,QAAM,QAAQ,KAAK,WAAW,IAAK,KAAK,CAAC,KAAK,KAAM,GAAG,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC;AACrG,SAAO,GAAG,MAAM,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC,GAAG,SAAS,MAAM,KAAK,MAAM,CAAC;AACxF;AAGA,SAAS,iBAAiB,MAAc,WAAyC;AAC/E,QAAM,QACJ,KACG,KAAK,EACL,MAAM,QAAQ,EAAE,CAAC,GAChB,YAAY,KAAK;AACvB,SAAO,UAAU,IAAI,KAAK;AAC5B;AAGA,SAAS,YAAY,MAAc,WAAyC;AAC1E,MAAI,WAAW,KAAK,KAAK,KAAK,CAAC,EAAG,QAAO;AACzC,MAAI,SAAS,IAAI,IAAI,EAAG,QAAO,iBAAiB,MAAM,SAAS;AAC/D,SAAO,QAAQ,KAAK,IAAI,KAAK,eAAe,KAAK,IAAI;AACvD;AAEA,SAAS,iBAAiB,WAAmB,UAA+B,WAAwC;AAClH,QAAM,QAAQ,CAAC,SACb,KACG,QAAQ,cAAc,EAAE,EACxB,MAAM,eAAe,EACrB,IAAI,CAAC,aAAa,iBAAiB,UAAU,UAAU,SAAS,CAAC,EACjE;AAAA,IACC,CAAC,aAAa,aAAa,MAAM,CAAC,WAAW,KAAK,SAAS,KAAK,CAAC,KAAK,CAAC,iBAAiB,UAAU,SAAS;AAAA,EAC7G,EACC,KAAK,GAAG;AACb,QAAM,QAAQ,UAAU,MAAM,IAAI;AAElC,MAAI,MAAM,KAAK,CAAC,SAAS,MAAM,KAAK,IAAI,KAAK,gBAAgB,KAAK,IAAI,KAAK,QAAQ,KAAK,IAAI,CAAC,GAAG;AAC9F,WAAO,SAAS,OAAO,CAAC,SAAS;AAC/B,UAAI,YAAY,MAAM,SAAS,EAAG,QAAO;AACzC,UAAI,SAAS,IAAI,IAAI,KAAK,gBAAgB,KAAK,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAG,QAAO;AACxF,YAAM,OAAO,MAAM,IAAI;AACvB,aAAO,SAAS,KAAK,OAAO;AAAA,IAC9B,CAAC,EAAE,KAAK,IAAI;AAAA,EACd;AACA,SAAO,MAAM,MAAM,KAAK,GAAG,CAAC;AAC9B;AAGA,SAAS,uBAAuB,MAAc,MAAgB,SAAyB;AACrF,SAAO,KAAK,QAAQ,2BAA2B,CAAC,QAAQ,SAAiB;AACvE,UAAM,OAAO,KAAK,MAAM,MAAM,EAAE,OAAO,CAAC,SAAS,QAAQ,CAAC,GAAG,MAAM,KAAK,MAAM,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC;AACxG,WAAO,KAAK,SAAS,IAAI,gBAAgB,KAAK,KAAK,IAAI,CAAC,MAAM;AAAA,EAChE,CAAC;AACH;AAGA,SAAS,KAAK,MAAsB;AAClC,QAAM,QAAQ,KAAK,MAAM,IAAI;AAC7B,QAAM,OAAO,MAAM,OAAO,CAAC,MAAM,UAAU;AACzC,QAAI,CAAC,QAAQ,KAAK,IAAI,EAAG,QAAO;AAChC,UAAM,OAAO,MAAM,MAAM,QAAQ,CAAC,EAAE,KAAK,CAAC,UAAU,MAAM,KAAK,MAAM,EAAE;AACvE,WAAO,SAAS,UAAa,MAAM,KAAK,IAAI,KAAK,MAAM,QAAQ,CAAC,GAAG,KAAK,MAAM;AAAA,EAChF,CAAC;AACD,SAAO,KACJ,KAAK,IAAI,EACT,QAAQ,WAAW,MAAM,EACzB,QAAQ,kBAAkB,EAAE,EAC5B,QAAQ;AACb;AAEO,SAAS,aACd,MACA,aACA,MACA,MACA,SACA,SACA,eAAkC,CAAC,GAC3B;AACR,QAAM,QAAQ,iBAAiB,MAAM,aAAa,SAAS,YAAY;AACvE,MAAI,YAAY,aAAa,CAAC,eAAe,MAAM,MAAM,OAAO,EAAG,QAAO,KAAK,KAAK;AACpF,QAAM,WAAW,IAAI,IAAI,gBAAgB,IAAI,CAAC;AAC9C,QAAM,YAAY,IAAI,IAAI,CAAC,GAAG,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;AAC7F,QAAM,SAAS,MACZ,MAAM,SAAS,EACf,IAAI,CAAC,cAAc,iBAAiB,uBAAuB,WAAW,MAAM,OAAO,GAAG,UAAU,SAAS,CAAC,EAC1G,KAAK,MAAM;AACd,QAAM,OAAO,KAAK,MAAM;AACxB,MAAI,SAAS,GAAI,QAAO;AACxB,QAAM,QAAQ,kBAAkB,IAAI,EAAE,QAAQ,CAAC,CAAC,IAAI,MAAO,QAAQ,CAAC,GAAG,MAAM,IAAI,EAAE,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAE;AAC5G,SAAO,MAAM,SAAS,IAAI,SAAS,MAAM,KAAK,IAAI,CAAC,MAAM;AAC3D;;;ACvQO,SAAS,aAAa,gBAAoC,sBAAsB,GAAiB;AACtG,SAAO,kBAAkB,iBAAiB,iBAAiB;AAC7D;AAGA,IAAM,oBAAoB,CAAC,cAAc;AAMlC,IAAM,wBAA2C;AAAA,EACtD;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,OAAO,OAAe,MAAuB;AACpD,SAAO,SAAS,SAAS,KAAK,WAAW,GAAG,KAAK,GAAG;AACtD;AAOO,SAAS,OAAO,SAAuB,MAAuB;AACnE,MAAI,SAAS,GAAI,QAAO;AACxB,MAAI,YAAY,WAAW;AACzB,WAAO,CAAC,kBAAkB,KAAK,CAAC,WAAW,OAAO,QAAQ,IAAI,CAAC;AAAA,EACjE;AACA,SAAO,sBAAsB,KAAK,CAAC,UAAU,OAAO,OAAO,IAAI,KAAK,OAAO,MAAM,KAAK,CAAC;AACzF;AAOO,IAAM,2BAAwE;AAAA,EACnF,kBAAkB,CAAC,eAAe,SAAS;AAAA,EAC3C,QAAQ,CAAC,SAAS,QAAQ,eAAe,kBAAkB,SAAS,eAAe,QAAQ;AAAA,EAC3F,yBAAyB,CAAC,SAAS,QAAQ,UAAU,MAAM,eAAe,cAAc,QAAQ;AAAA,EAChG,mBAAmB;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,qBAAqB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,mBAAmB,CAAC,OAAO,QAAQ;AACrC;AAEA,SAAS,UAAU,MAAsB;AACvC,SAAO,KAAK,QAAQ,UAAU,CAAC,WAAW,IAAI,OAAO,YAAY,CAAC,EAAE;AACtE;AAGA,SAAS,cAAc,MAAc,MAAwC;AAC3E,QAAM,UAAU,yBAAyB,IAAI;AAC7C,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,MAAM,KAAK,QAAQ,IAAI;AAC7B,aAAW,SAAS,QAAQ,KAAK,OAAO,KAAK,MAAM,GAAG,GAAG,GAAG;AAC1D,QAAI,CAAC,MAAM,WAAW,IAAI,EAAG;AAC7B,UAAM,OAAO,UAAU,MAAM,MAAM,CAAC,EAAE,MAAM,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,QAAQ,QAAQ,EAAE;AAC7E,QAAI,QAAQ,SAAS,IAAI,EAAG,QAAO;AAAA,EACrC;AACA,SAAO;AACT;AAKO,IAAM,uBACX;AAEF,SAAS,KAAK,SAAgC;AAC5C,MAAI,OAAO,QAAQ,SAAS,YAAY,QAAQ,SAAS,MAAM;AAC7D,IAAC,QAAQ,KAA8B,SAAS;AAAA,EAClD;AACF;AAOA,SAAS,gBAAgB,MAAuB,SAA0B,SAAuB,MAAsB;AACrH,QAAM,OAAO,QAAQ;AACrB,MAAI,MAAM,WAAW,KAAM;AAC3B,QAAM,UAAU,CAAC,UAAkB,OAAO,SAAS,KAAK;AACxD,QAAM,eAAe,YAAY,iBAAkB,yBAAyB,KAAK,KAAK,GAAG,CAAC,KAAK,CAAC,IAAK,CAAC;AACtG,MAAI,OAAO,MAAM,gBAAgB,UAAU;AACzC,SAAK,cAAc,aAAa,MAAM,KAAK,aAAa,MAAM,SAAS,SAAS,SAAS,YAAY;AAAA,EACvG;AACA,QAAM,SAAS;AACf,MAAI,OAAO,OAAO,SAAS,YAAY,OAAO,SAAS,MAAM;AAC3D,WAAO,OAAO,OAAO;AAAA,MACnB,OAAO,QAAQ,OAAO,IAA+B,EAAE,QAAQ,CAAC,CAAC,MAAM,GAAG,MAAM;AAC9E,YAAI,aAAa,SAAS,UAAU,IAAI,CAAC,EAAG,QAAO,CAAC;AACpD,cAAM,cAAe,KAA0C;AAC/D,eAAO;AAAA,UACL;AAAA,YACE;AAAA,YACA,OAAO,gBAAgB,WACnB,EAAE,GAAI,KAAgB,aAAa,iBAAiB,MAAM,aAAa,SAAS,YAAY,EAAE,IAC9F;AAAA,UACN;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,cAAc,QAAQ;AAC5B,MAAI,OAAO,gBAAgB,YAAY,gBAAgB,KAAM;AAC7D,aAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,WAAsC,GAAG;AAChF,QAAI,OAAO,QAAQ,YAAY,QAAQ;AACrC,sBAAgB,MAAM,KAAwB,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC;AAAA,EAC1E;AACF;AAGA,SAAS,cAAc,SAA0B,SAAuB,MAAsB;AAC5F,QAAM,cAAc,QAAQ;AAC5B,MAAI,OAAO,gBAAgB,YAAY,gBAAgB,KAAM;AAC7D,aAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,WAAsC,GAAG;AAChF,QAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM;AAC7C,UAAM,UAAU,CAAC,GAAG,MAAM,IAAI;AAC9B,QAAI,CAAC,OAAO,SAAS,QAAQ,KAAK,GAAG,CAAC,EAAG,MAAK,GAAsB;AACpE,kBAAc,KAAwB,SAAS,OAAO;AAAA,EACxD;AACF;AAIA,SAAS,UAAU,MAAsB;AACvC,SAAO,KAAK,QAAQ,gBAAgB,CAAC,GAAG,WAAmB,OAAO,YAAY,CAAC;AACjF;AAEA,SAAS,QAAQ,IAAwB;AACvC,SAAO,MAAM,QAAQ,EAAE,IAAI,KAAK,OAAO,SAAY,CAAC,IAAI,CAAC,EAAE;AAC7D;AAGA,SAAS,WAAW,SAA+C,MAAuB;AACxF,MAAI,KAAK,SAAS,GAAG,KAAK,OAAO,QAAQ,SAAS,YAAY,QAAQ,SAAS,KAAM,QAAO;AAC5F,QAAM,OAAO,KAAK,QAAQ,WAAW,EAAE;AACvC,SAAO,OAAO,QAAQ,QAAQ,IAAqC,EAAE;AAAA,IACnE,CAAC,CAAC,KAAK,UAAU,OACd,WAAW,SAAS,YAAY,WAAW,SAAS,YACpD,UAAU,GAAG,MAAM,UAAU,IAAI,KAAK,QAAQ,WAAW,KAAK,EAAE,SAAS,IAAI;AAAA,EAClF;AACF;AASA,eAAe,iBACb,MACA,MACqD;AACrD,QAAM,OAAiB,CAAC;AACxB,MAAI,UAA2B;AAC/B,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS;AAChD,UAAM,QAAQ,KAAK,KAAK,KAAK;AAC7B,QAAI,UAAU,KAAM;AACpB,QAAI,MAAM,WAAW,GAAG,GAAG;AACzB,UAAI,WAAW,SAAS,KAAK,EAAG;AAChC;AAAA,IACF;AACA,UAAM,OAAO,MAAM,oBAAoB,SAA4B,KAAK;AACxE,QAAI,CAAC,KAAM;AACX,SAAK,KAAK,KAAK,CAAC,CAAC;AACjB,cAAU,KAAK,CAAC;AAAA,EAClB;AACA,SAAO,EAAE,MAAM,KAAK,KAAK,GAAG,GAAG,QAAQ;AACzC;AAUA,eAAsB,kBACpB,MACA,SACA,MACwB;AACxB,QAAM,EAAE,MAAM,QAAQ,IAAI,MAAM,iBAAiB,MAAM,IAAI;AAI3D,QAAM,gBAAgB,OAA0B;AAEhD,QAAM,UAAU,YAAY,mBAAmB,CAAC,OAAO,SAAS,IAAI,KAAK,cAAc,MAAM,IAAI,MAAM;AACvG,gBAAc,MAAM,SAAS,CAAC,CAAC;AAC/B,kBAAgB,MAAM,MAAM,SAAS,CAAC,CAAC;AACvC,SAAO,UAAU,uBAAuB;AAC1C;","names":["aliases","at"]}

package/dist/mcp-6T4PEZ5R.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../api/src/mcp-catalog.ts","../src/commands/mcp/index.ts","../src/commands/mcp/catalog.ts","../../api/src/mcp-tools.ts","../src/commands/mcp/execute.ts","../src/commands/mcp/platforms.ts"],"sourcesContent":["/**\n * Contract for `GET /api/mcp/catalog` — searching the managed-app catalog the\n * sandbox agent can ask the user to connect when a vendor publishes no MCP\n * server of its own.\n *\n * `connect` mirrors `ToolkitConnectMode` in `convex/composio/types.ts`, folded\n * to what the user will be asked for: a sign-in or a key. Apps that need no\n * sign-in are left out — Composio refuses to connect them.\n */\nimport { z } from \"zod\";\n\nexport const MCP_CATALOG_DEFAULT_LIMIT = 8;\nexport const MCP_CATALOG_DESCRIPTION_MAX = 160;\n\nexport const mcpCatalogRequestSchema = z.object({\n  search: z.string().trim().min(1, \"Provide --search\").max(100),\n  limit: z.coerce.number().int().min(1).max(20).default(MCP_CATALOG_DEFAULT_LIMIT),\n});\nexport type McpCatalogRequest = z.infer<typeof mcpCatalogRequestSchema>;\n\nexport const mcpCatalogConnectSchema = z.enum([\"sign-in\", \"key\"]);\nexport type McpCatalogConnect = z.infer<typeof mcpCatalogConnectSchema>;\n\nexport const mcpCatalogEntrySchema = z.object({\n  /** The toolkit slug — what request_connection `{ app }` takes. */\n  app: z.string(),\n  name: z.string(),\n  description: z.string().max(MCP_CATALOG_DESCRIPTION_MAX),\n  connect: mcpCatalogConnectSchema,\n  connected: z.boolean(),\n});\nexport type McpCatalogEntry = z.infer<typeof mcpCatalogEntrySchema>;\n\nexport const mcpCatalogResponseSchema = z.object({\n  apps: z.array(mcpCatalogEntrySchema),\n  /** Baker's own connections this search matched — ask for these with `{ platform }`, never a managed copy. */\n  platforms: z.array(z.string()).optional(),\n});\nexport type McpCatalogResponse = z.infer<typeof mcpCatalogResponseSchema>;\n","import {\n  type CustomMcpDisableResponse,\n  type CustomMcpVerifyResponse,\n  customMcpServerNameRequestSchema,\n} from \"@baker/api\";\nimport { type McpCatalogResponse, mcpCatalogRequestSchema } from \"@baker/api/mcp-catalog\";\nimport { defineCommand } from \"citty\";\nimport { ApiError, apiGet, apiPost } from \"../../client.ts\";\nimport { getEnv } from \"../../env.ts\";\nimport { repeatedValues } from \"../../lib/repeatedFlags.ts\";\nimport { writeJson } from \"../../output.ts\";\nimport { registerSchema } from \"../../schemas.ts\";\nimport { catalogHints } from \"./catalog.ts\";\nimport { executeCommand, toolsCommand } from \"./execute.ts\";\nimport { type ConnectedPlatform, platformEntry } from \"./platforms.ts\";\n\nconst SCOPES = [\"user\", \"user_org\", \"company\", \"org\"] as const;\ntype Scope = (typeof SCOPES)[number];\n\nfunction parseScope(raw: unknown): Scope {\n  const scope = raw === undefined ? \"company\" : String(raw);\n  if (!(SCOPES as readonly string[]).includes(scope)) {\n    throw new ApiError(\"VALIDATION_ERROR\", `Invalid --scope \"${scope}\". Use user | user_org | company | org.`);\n  }\n  return scope as Scope;\n}\n\n/** The turn's message sender, injected by the bridge — required only for user scope. */\nfunction actingUserId(): string | undefined {\n  return getEnv().BAKER_ACTING_USER_ID;\n}\n\ntype CustomMcpServer = {\n  _id: string;\n  scope: \"user\" | \"user_org\" | \"company\" | \"org\";\n  name: string;\n  url: string;\n  headerKeys: string[];\n  enabled: boolean;\n  /** Absent until the address has been checked; `ok: false` means it serves no tools. */\n  health?: { ok: boolean; message?: string; suggestedUrl?: string; transient?: boolean; checkedAt: number };\n  createdAt: number;\n};\n\n/**\n * What to report for one custom server. `problem` is the whole point: a server can\n * be signed in, enabled and still serve nothing (wrong address), and reporting it\n * as plain \"connected\" is how an agent ends up promising tools it does not have.\n * A `transient` failure is reported separately — the tool may well answer, so\n * declaring it broken would be its own kind of lie.\n */\nfunction customEntry(server: CustomMcpServer): Record<string, unknown> {\n  const failed = server.health && !server.health.ok;\n  const problem = server.health?.message ?? \"This server's address is not serving tools.\";\n  return {\n    name: server.name,\n    scope: server.scope,\n    enabled: server.enabled,\n    ...(failed && !server.health?.transient ? { usable: false, problem } : {}),\n    ...(failed && server.health?.transient ? { lastCheck: \"failed\", problem } : {}),\n    ...(failed && server.health?.suggestedUrl ? { suggestedAddress: server.health.suggestedUrl } : {}),\n  };\n}\n\n/** The hint an unusable server earns — the agent must not offer its tools or invent a reason. */\nconst BROKEN_SERVER_HINT =\n  \"A server marked usable=false will NOT answer: its tools are absent from this turn. Say plainly that the tool is not working and relay `problem`; never claim its tools are loading, coming next message, or temporarily unavailable. `problem` names what a person has to fix — the address, the sign-in, or the key the server was added with — so pass on that fix and no other: never tell the user to reconnect a server whose `problem` is its address or its key. The user makes the fix in the dashboard (Brain → Integrations → More apps). If `suggestedAddress` is present, that is the address to use.\";\n\n/** The hint for a server whose last check failed for a reason that may already have passed. */\nconst LAST_CHECK_FAILED_HINT =\n  \"A server with lastCheck=failed was unreachable or erroring when it was last checked — that may already have passed, and its tools ARE loaded this turn. Try the tool; if it works, say nothing about the check. If it fails, report `problem` as what happened rather than guessing.\";\n\n/** Turn repeated `--header \"K: V\"` (or `K=V`) flags into a headers record. */\n/** `--header` is repeatable, so its values come off the command line — citty keeps only the last. */\nfunction parseHeaders(raw: unknown, rawArgs?: readonly string[]): Record<string, string> | undefined {\n  const list = repeatedValues(rawArgs, \"header\", raw);\n  const headers: Record<string, string> = {};\n  for (const entry of list) {\n    const text = String(entry);\n    const sep = text.indexOf(\":\") >= 0 && (text.indexOf(\":\") < text.indexOf(\"=\") || text.indexOf(\"=\") < 0) ? \":\" : \"=\";\n    const at = text.indexOf(sep);\n    if (at <= 0) {\n      throw new ApiError(\"VALIDATION_ERROR\", `Invalid header \"${text}\". Use \"Key: Value\".`);\n    }\n    headers[text.slice(0, at).trim()] = text.slice(at + 1).trim();\n  }\n  return Object.keys(headers).length > 0 ? headers : undefined;\n}\n\nfunction fail(err: unknown): never {\n  if (err instanceof ApiError) {\n    writeJson({ ok: false, error: { code: err.code, message: err.message } });\n    process.exit(1);\n  }\n  writeJson({ ok: false, error: { code: \"NETWORK_ERROR\", message: \"Unexpected error\" } });\n  process.exit(1);\n}\n\ntype ManagedConnection = {\n  toolkitSlug: string;\n  scope: \"user\" | \"user_org\" | \"company\" | \"org\";\n  status: string;\n  accountLabel: string | null;\n  readOnly: boolean;\n};\n\ntype ConnectedResponse = {\n  managed: ManagedConnection[];\n  custom: CustomMcpServer[];\n  platforms: ConnectedPlatform[];\n};\n\n/** The one thing an agent must not do with this list: infer a platform's state from the MCP half. */\nconst PLATFORMS_HINT =\n  \"`platforms` are connected accounts you reach through `baker` commands (HubSpot, Google Ads, GA4, Search Console, Tag Manager, …), NOT mcp__* tools — there is no tool to call for them. A platform listed here IS connected: never tell the user to connect it, and never conclude it is missing because it has no mcp__* entry. The one exception is a platform whose `status` says its sign-in no longer works: ask the user to reconnect it with request_connection before reading it — that is their sign-in ending, not a Baker error. Read what it holds with its own command family (`baker hubspot …`, `baker ads google …`, `baker ga4 …`, and so on).\";\n\nregisterSchema({\n  command: \"mcp.connected\",\n  description:\n    \"List everything this chat can reach: managed integrations (Attio, Slack, Gmail, Google Sheets, …), custom MCP servers, and the platforms the company signed in to (HubSpot, Google Ads, GA4, Search Console, Tag Manager) which you read through their own `baker` commands. Start here when the user mentions an external tool or platform.\",\n  args: {},\n});\n\nconst connectedCommand = defineCommand({\n  meta: {\n    name: \"connected\",\n    description: `Everything this chat can reach — managed integrations, custom MCP servers, and connected platforms.\n\nManaged tools ride the composio servers (mcp__composio_<scope>__*); custom servers expose mcp__<name>__*.\nPlatforms (HubSpot, Google Ads, GA4, …) have no mcp__* tools at all — you read them with their own\n\\`baker\\` command family, and one listed here is connected and ready to use.\nA tool or platform the user names that is NOT listed anywhere here is simply not connected yet.`,\n  },\n  run: async () => {\n    try {\n      const user = actingUserId();\n      const data = await apiGet<ConnectedResponse>(\"/api/mcp/connected\", user ? { actingUserId: user } : undefined);\n      const managed = data.managed.map((c) => ({\n        toolkit: c.toolkitSlug,\n        scope: c.scope,\n        ...(c.status !== \"ACTIVE\" ? { status: c.status } : {}),\n        ...(c.accountLabel ? { account: c.accountLabel } : {}),\n        ...(c.readOnly ? { readOnly: true } : {}),\n      }));\n      const custom = data.custom.map(customEntry);\n      const platforms = (data.platforms ?? []).map(platformEntry);\n      const hints: string[] = [];\n      if (platforms.length > 0) {\n        hints.push(PLATFORMS_HINT);\n      }\n      if (data.custom.some((s) => s.health && !s.health.ok && !s.health.transient)) {\n        hints.push(BROKEN_SERVER_HINT);\n      }\n      if (data.custom.some((s) => s.health && !s.health.ok && s.health.transient)) {\n        hints.push(LAST_CHECK_FAILED_HINT);\n      }\n      if ([...data.managed, ...data.custom].some((e) => e.scope === \"user\" || e.scope === \"user_org\")) {\n        hints.push(\n          \"user/user_org entries are personal: they belong to the current message sender and load only in their turns — other users in this chat won't have them.\",\n        );\n      }\n      hints.push(\n        \"Not listed anywhere = not connected — connect it from the chat with request_connection, never by sending the user to the dashboard: a Baker platform (HubSpot, Google Ads, GA4, …) → { platform }; anything else → the vendor's own MCP server FIRST: use the address the user gave you, or WebSearch '<vendor> MCP server' and WebFetch its official docs for the remote https address and how it signs in, then { server: { name, url, auth, keyHeader } }; only when the vendor has none → `baker mcp catalog --search <name>`, then { app }. Research before you ask the user anything. What they connect loads into this same turn.\",\n      );\n      writeJson({\n        ok: true,\n        data: { managed, custom, platforms },\n        hints,\n      });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nconst catalogArgs = {\n  search: { type: \"string\", description: \"App or vendor name, e.g. notion, clarity, pipedrive\", required: true },\n  limit: { type: \"string\", description: \"Max apps to return, 1-20 (default 8)\", required: false },\n} as const;\n\nregisterSchema({\n  command: \"mcp.catalog\",\n  description:\n    \"Search the managed apps you can ask the user to connect when a vendor has no MCP server of its own. Each app says how the user connects it (sign-in | key) and whether this chat already reaches it. Example: baker mcp catalog --search notion\",\n  args: catalogArgs,\n});\n\nconst catalogCommand = defineCommand({\n  meta: {\n    name: \"catalog\",\n    description: `Managed apps you can ask the user to connect when a vendor has no MCP server of its own.\n\nFor a tool \\`baker mcp connected\\` does not list whose vendor has no official remote MCP server:\n  baker mcp catalog --search notion\n  baker mcp catalog --search \"microsoft clarity\" --limit 3\n\nEach app: app (slug for request_connection), name, description, connect (sign-in | key), connected.\nPrefer the vendor's own MCP server when it publishes one; a catalog app is the fallback.`,\n  },\n  args: catalogArgs,\n  run: async ({ args }) => {\n    const parsed = mcpCatalogRequestSchema.safeParse({ search: args.search, limit: args.limit });\n    if (!parsed.success) {\n      writeJson({\n        ok: false,\n        error: { code: \"VALIDATION_ERROR\", message: parsed.error.issues[0]?.message ?? \"Invalid arguments\" },\n      });\n      process.exit(1);\n    }\n    try {\n      const user = actingUserId();\n      const data = await apiGet<McpCatalogResponse>(\"/api/mcp/catalog\", {\n        search: parsed.data.search,\n        limit: String(parsed.data.limit),\n        ...(user ? { actingUserId: user } : {}),\n      });\n      writeJson({\n        ok: true,\n        data: {\n          apps: data.apps,\n          ...(data.platforms?.length ? { platforms: data.platforms } : {}),\n        },\n        hints: catalogHints(data.apps, { platforms: data.platforms ?? [] }),\n      });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nregisterSchema({\n  command: \"mcp.list\",\n  description: \"List the custom MCP servers this company's chats see (org + company + your own user scope).\",\n  args: {},\n});\n\nconst listCommand = defineCommand({\n  meta: { name: \"list\", description: \"List custom MCP servers visible to this company's chats.\" },\n  run: async () => {\n    try {\n      const user = actingUserId();\n      const data = await apiGet<{ servers: CustomMcpServer[] }>(\n        \"/api/mcp/custom\",\n        user ? { actingUserId: user } : undefined,\n      );\n      writeJson({\n        ok: true,\n        // Detail view: the full row (address included) plus the usability verdict.\n        // `health` itself is folded into `usable`/`problem` by `customEntry`.\n        data: data.servers.map((server) => ({ ...server, health: undefined, ...customEntry(server) })),\n        ...(data.servers.some((s) => s.health && !s.health.ok)\n          ? {\n              hints: data.servers.some((s) => s.health && !s.health.ok && !s.health.transient)\n                ? [BROKEN_SERVER_HINT]\n                : [LAST_CHECK_FAILED_HINT],\n            }\n          : {}),\n      });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nregisterSchema({\n  command: \"mcp.add\",\n  description:\n    \"Register a custom MCP server. Tools appear as mcp__<name>__* on the next message. URL must be HTTPS. Scope: company (default, all chats) | org (org admin key) | user (only the current sender).\",\n  args: {\n    name: { type: \"string\", description: \"Server name → tools appear as mcp__<name>__*\", required: true },\n    url: {\n      type: \"string\",\n      description: \"Full HTTPS MCP endpoint (commonly ends in /mcp, not just the domain)\",\n      required: true,\n    },\n    scope: { type: \"string\", description: \"user | user_org | company | org (default company)\", required: false },\n    header: { type: \"string\", description: 'Auth header \"Key: Value\" (repeatable)', required: false },\n  },\n});\n\nconst addCommand = defineCommand({\n  meta: {\n    name: \"add\",\n    description: `Register a custom MCP server. Tools appear as mcp__<name>__* on the NEXT message.\nFor a server the USER asks for, use request_connection { server } instead: they confirm who can use it,\ntype any key into the card (never the chat), and its tools load in this same turn.\n\nScope: company (default — every chat in the company) | org (all companies in the org; needs an admin key) | user (only the current message sender).\n\nExamples:\n  baker mcp add --name weather --url https://mcp.example.com/mcp\n  baker mcp add --name acme --url https://acme.dev/mcp --header \"Authorization: Bearer sk-…\"\n  baker mcp add --name mine --url https://my.dev/mcp --scope user`,\n  },\n  args: {\n    name: { type: \"string\", description: \"Server name (mcp__<name>__*)\", required: true },\n    url: {\n      type: \"string\",\n      description: \"Full HTTPS MCP endpoint (commonly ends in /mcp, not just the domain)\",\n      required: true,\n    },\n    scope: { type: \"string\", description: \"user | user_org | company | org (default company)\", required: false },\n    header: { type: \"string\", description: 'Auth header \"Key: Value\" (repeatable)', required: false },\n  },\n  run: async ({ args, rawArgs }) => {\n    try {\n      const scope = parseScope(args.scope);\n      const user = actingUserId();\n      const headers = parseHeaders(args.header, rawArgs);\n      const data = await apiPost<{ name: string }>(\"/api/mcp/custom\", {\n        name: args.name as string,\n        url: args.url as string,\n        scope,\n        ...(user ? { actingUserId: user } : {}),\n        ...(headers ? { headers } : {}),\n      });\n      writeJson({\n        ok: true,\n        data,\n        hints: [\n          \"The address must be the full MCP endpoint (commonly ending in /mcp), not just the domain — a domain on its own usually answers sign-in and then serves no tools.\",\n          \"The address is checked in the background. Run `baker mcp connected` on the next message to confirm it serves tools before promising the user anything.\",\n        ],\n      });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nregisterSchema({\n  command: \"mcp.remove\",\n  description: \"Remove a company custom MCP server by name.\",\n  args: { name: { type: \"string\", description: \"Server name to remove\", required: true } },\n});\n\nconst removeCommand = defineCommand({\n  meta: {\n    name: \"remove\",\n    description: `Remove a company custom MCP server by name.\n\nExample:\n  baker mcp remove --name weather`,\n  },\n  args: { name: { type: \"string\", description: \"Server name to remove\", required: true } },\n  run: async ({ args }) => {\n    try {\n      const user = actingUserId();\n      const data = await apiPost<{ removed: boolean }>(\"/api/mcp/custom/remove\", {\n        name: args.name as string,\n        ...(user ? { actingUserId: user } : {}),\n      });\n      writeJson({ ok: true, data });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nconst serverNameArgs = {\n  name: { type: \"string\", description: \"Custom server name, as `baker mcp list` shows it\", required: true },\n} as const;\n\nregisterSchema({\n  command: \"mcp.verify\",\n  description:\n    \"Check a custom MCP server now (the dashboard's 'Check now') and store the result. Use after the user fixed its address or sign-in, or when its tools failed this turn.\",\n  args: serverNameArgs,\n});\n\nconst verifyCommand = defineCommand({\n  meta: {\n    name: \"verify\",\n    description: `Check a custom MCP server now and store the result.\n\nExample:\n  baker mcp verify --name weather`,\n  },\n  args: serverNameArgs,\n  run: async ({ args }) => {\n    const parsed = customMcpServerNameRequestSchema.safeParse({ name: args.name, actingUserId: actingUserId() });\n    if (!parsed.success) {\n      fail(new ApiError(\"VALIDATION_ERROR\", parsed.error.issues[0]?.message ?? \"Invalid arguments\"));\n    }\n    try {\n      const data = await apiPost<CustomMcpVerifyResponse>(\"/api/mcp/custom/verify\", parsed.data);\n      writeJson({\n        ok: true,\n        data,\n        hints: [\n          data.ok\n            ? \"The server answers and serves tools. Its tools load on the next message.\"\n            : data.transient\n              ? LAST_CHECK_FAILED_HINT\n              : BROKEN_SERVER_HINT,\n        ],\n      });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nregisterSchema({\n  command: \"mcp.disable\",\n  description:\n    \"Switch a custom MCP server off so its tools stop loading; its address and sign-in are kept. Turning it back on is done by a person in the dashboard, never by the agent.\",\n  args: serverNameArgs,\n});\n\nconst disableCommand = defineCommand({\n  meta: {\n    name: \"disable\",\n    description: `Switch a custom MCP server off (its tools stop loading). Only a person can turn it back on, in the dashboard.\n\nExample:\n  baker mcp disable --name weather`,\n  },\n  args: serverNameArgs,\n  run: async ({ args }) => {\n    const parsed = customMcpServerNameRequestSchema.safeParse({ name: args.name, actingUserId: actingUserId() });\n    if (!parsed.success) {\n      fail(new ApiError(\"VALIDATION_ERROR\", parsed.error.issues[0]?.message ?? \"Invalid arguments\"));\n    }\n    try {\n      const data = await apiPost<CustomMcpDisableResponse>(\"/api/mcp/custom/disable\", parsed.data);\n      writeJson({\n        ok: true,\n        data,\n        hints: [\n          \"Its tools stop loading from the next message, and this applies right away — publishing or discarding this chat does not undo it. Tell the user they can turn it back on in Brain → Integrations → More apps.\",\n        ],\n      });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nexport const mcpCommand = defineCommand({\n  meta: {\n    name: \"mcp\",\n    description: `Third-party tools for this company — see what's connected, register custom HTTPS MCP endpoints.\n\nTools from a registered server appear as mcp__<name>__* on the next message.\nManaged here are **company-scoped** servers; user- and org-scoped servers are managed in the dashboard.\n\nStart here:\n  baker mcp connected   # everything this chat can reach: managed integrations, custom servers, connected platforms\n  baker mcp catalog --search notion   # managed apps you can connect when a vendor has no MCP server of its own\n\nRun a connected app's read-only tool from the command line (JSON on stdout — for reports and scripts):\n  baker mcp tools --app googlesheets --search \"read rows\"\n  baker mcp execute --tool GOOGLESHEETS_BATCH_GET --get-schema\n  baker mcp execute --tool GOOGLESHEETS_BATCH_GET --data '{\"spreadsheet_id\":\"…\",\"ranges\":[\"A1:D50\"]}'\n\nExamples:\n  baker mcp add --name weather --url https://mcp.example.com/mcp\n  baker mcp add --name acme --url https://acme.dev/mcp --header \"Authorization: Bearer sk-…\"\n  baker mcp remove --name weather\n  baker mcp verify --name weather    # check it now after the user fixed it\n  baker mcp disable --name weather   # stop its tools loading (only a person turns it back on)\nFull guide: __tooling__/docs/tools/baker/mcp.md`,\n  },\n  subCommands: {\n    connected: connectedCommand,\n    catalog: catalogCommand,\n    tools: toolsCommand,\n    execute: executeCommand,\n    list: listCommand,\n    add: addCommand,\n    remove: removeCommand,\n    verify: verifyCommand,\n    disable: disableCommand,\n  },\n});\n","/**\n * What `baker mcp catalog` tells the agent to do next with the managed apps it\n * found — the fallback when a vendor publishes no MCP server of its own.\n */\nimport type { McpCatalogEntry } from \"@baker/api/mcp-catalog\";\n\nconst PREFER_VENDOR_HINT =\n  'The vendor\\'s own MCP server comes before any app here. If you have not yet, WebSearch \"<vendor> MCP server\" and WebFetch its official docs for the remote https address and how it signs in, then ask for it with request_connection `{ server: { name, url, auth, keyHeader } }`. Only when the vendor has none, ask for an app from this catalog with request_connection `{ app: \"<slug>\", reason }` — the user connects it in the chat and its tools load right after, in this same turn.';\n\nconst ALREADY_CONNECTED_HINT =\n  \"An app marked connected is already reachable — use its mcp__composio_* tools; do not ask again.\";\n\nconst NO_MATCH_HINT =\n  \"Nothing in the catalog matches. WebSearch for the vendor's official remote MCP server (its docs, its developer site) before telling the user it can't be connected — if one exists, ask for it with request_connection `{ server }`. Only when the web shows no official remote server either, say plainly this tool can't be connected yet and offer a Task.\";\n\n/** Baker's own connection always wins over a catalog app or anyone's MCP server for the same tool. */\nfunction firstPartyHint(platforms: readonly string[]): string {\n  const asks = platforms.map((p) => `request_connection \\`{ platform: \"${p}\" }\\``).join(\" or \");\n  return `This is one of Baker's own connections — ask for it with ${asks}. It is the one Baker's commands, staging and publish work with, so never connect it as a catalog app or as an MCP server, even one the vendor publishes or the user names. If it is already connected, read it with its own baker command family instead.`;\n}\n\n/** What the agent should do next with a catalog answer. */\nexport function catalogHints(\n  apps: readonly McpCatalogEntry[],\n  { platforms = [] }: { platforms?: readonly string[] } = {},\n): string[] {\n  if (platforms.length > 0) {\n    return [firstPartyHint(platforms)];\n  }\n  const hints = [PREFER_VENDOR_HINT];\n  if (apps.some((a) => a.connected)) {\n    hints.push(ALREADY_CONNECTED_HINT);\n  }\n  if (apps.length === 0) {\n    hints.push(NO_MATCH_HINT);\n  }\n  return hints;\n}\n","/**\n * Contract for running a connected app's tools from the `baker` CLI —\n * `GET /api/mcp/tools` (find one), `GET /api/mcp/tool` (its inputs) and\n * `POST /api/mcp/execute` (run it).\n *\n * The same tools the chat reaches as `mcp__composio_*`, but answered as JSON on\n * stdout, so a Report's data endpoint can call one through `runBaker` and a\n * script can keep what it returned. Only tools the app marks read-only run here:\n * a published Report runs them for whoever opens it, and a chat stages every\n * change it makes until Publish.\n */\nimport { z } from \"zod\";\n\nexport const MCP_TOOLS_DEFAULT_LIMIT = 10;\nexport const MCP_TOOL_DESCRIPTION_MAX = 200;\n\n/** A Composio tool slug: `GMAIL_FETCH_EMAILS`, `GOOGLESHEETS_BATCH_GET`. */\nexport const mcpToolSlugSchema = z\n  .string()\n  .trim()\n  .min(1, \"Provide --tool\")\n  .max(120)\n  .regex(/^[A-Za-z0-9_]+$/, \"A tool is named like GMAIL_FETCH_EMAILS — find one with `baker mcp tools --search`\")\n  .transform((slug) => slug.toUpperCase());\n\n/** A toolkit slug as `baker mcp connected` lists it: `gmail`, `googlesheets`. */\nexport const mcpAppSlugSchema = z\n  .string()\n  .trim()\n  .min(1)\n  .max(60)\n  .regex(/^[a-z0-9_-]+$/i, \"Name the app as `baker mcp connected` lists it, e.g. gmail\")\n  .transform((slug) => slug.toLowerCase());\n\nexport const mcpToolsRequestSchema = z\n  .object({\n    search: z.string().trim().min(1).max(200).optional(),\n    app: mcpAppSlugSchema.optional(),\n    limit: z.coerce.number().int().min(1).max(50).default(MCP_TOOLS_DEFAULT_LIMIT),\n  })\n  .refine((request) => request.search !== undefined || request.app !== undefined, {\n    message: \"Provide --search, --app, or both\",\n  });\nexport type McpToolsRequest = z.infer<typeof mcpToolsRequestSchema>;\n\nexport const mcpToolSummarySchema = z.object({\n  tool: z.string(),\n  app: z.string(),\n  name: z.string(),\n  description: z.string().max(MCP_TOOL_DESCRIPTION_MAX),\n  /** Only read-only tools run through `baker mcp execute`. */\n  readOnly: z.boolean(),\n});\nexport type McpToolSummary = z.infer<typeof mcpToolSummarySchema>;\n\nexport const mcpToolsResponseSchema = z.object({\n  tools: z.array(mcpToolSummarySchema),\n  /** The connected apps the search ran over. */\n  apps: z.array(z.string()),\n});\nexport type McpToolsResponse = z.infer<typeof mcpToolsResponseSchema>;\n\nexport const mcpToolRequestSchema = z.object({\n  tool: mcpToolSlugSchema,\n  full: z.boolean().default(false),\n});\n\n/** One input, folded to what the agent needs to fill it. */\nexport const mcpToolInputSchema = z.object({\n  name: z.string(),\n  type: z.string(),\n  required: z.boolean(),\n  description: z.string().optional(),\n  enum: z.array(z.unknown()).optional(),\n  default: z.unknown().optional(),\n});\nexport type McpToolInput = z.infer<typeof mcpToolInputSchema>;\n\nexport const mcpToolResponseSchema = z.object({\n  tool: z.string(),\n  app: z.string(),\n  name: z.string(),\n  description: z.string(),\n  readOnly: z.boolean(),\n  inputs: z.array(mcpToolInputSchema),\n  /** The raw JSON schemas, with `--full` only. */\n  inputSchema: z.unknown().optional(),\n  outputSchema: z.unknown().optional(),\n});\nexport type McpToolResponse = z.infer<typeof mcpToolResponseSchema>;\n\nexport const mcpExecuteRequestSchema = z.object({\n  tool: mcpToolSlugSchema,\n  arguments: z.record(z.string(), z.unknown()).default({}),\n  actingUserId: z.string().optional(),\n});\nexport type McpExecuteRequest = z.infer<typeof mcpExecuteRequestSchema>;\n\nexport const mcpExecuteResponseSchema = z.object({\n  tool: z.string(),\n  app: z.string(),\n  /** Whose connection answered: `company` is the one a published Report reads. */\n  scope: z.enum([\"user\", \"user_org\", \"company\", \"org\"]),\n  account: z.string().nullable(),\n  /** What the tool returned, as the app returned it. */\n  data: z.unknown(),\n});\nexport type McpExecuteResponse = z.infer<typeof mcpExecuteResponseSchema>;\n","/**\n * `baker mcp tools` and `baker mcp execute`: a connected app's tools run from\n * the command line, so what they return is JSON on stdout — for a Report's data\n * endpoint (`runReportBaker`), a script, or a file — instead of a tool result\n * only the chat sees. The same tools as `mcp__composio_*`, reads only.\n */\nimport {\n  type McpExecuteResponse,\n  type McpToolResponse,\n  type McpToolsResponse,\n  mcpExecuteRequestSchema,\n  mcpToolRequestSchema,\n  mcpToolsRequestSchema,\n} from \"@baker/api/mcp-tools\";\nimport { defineCommand } from \"citty\";\nimport { ApiError, apiGet, apiPost } from \"../../client.ts\";\nimport { getEnv } from \"../../env.ts\";\nimport { writeJson } from \"../../output.ts\";\nimport { registerSchema } from \"../../schemas.ts\";\n\n/** A tool's run gets as long as a report gives one `baker` call, less its own margin. */\nconst EXECUTE_TIMEOUT_MS = 120_000;\n\nfunction fail(err: unknown): never {\n  if (err instanceof ApiError) {\n    writeJson({ ok: false, error: { code: err.code, message: err.message } });\n    process.exit(1);\n  }\n  writeJson({ ok: false, error: { code: \"NETWORK_ERROR\", message: \"Unexpected error\" } });\n  process.exit(1);\n}\n\nfunction invalid(message: string): never {\n  return fail(new ApiError(\"VALIDATION_ERROR\", message));\n}\n\n/** The turn's message sender, injected by the bridge; the backend vouches for it, and a report has none. */\nfunction actingUserId(): string | undefined {\n  return getEnv().BAKER_ACTING_USER_ID;\n}\n\n/** What to tell the agent after a run: above all, whether a published report will read the same thing. */\nexport function executeHints(ran: Pick<McpExecuteResponse, \"tool\" | \"app\" | \"scope\">): string[] {\n  const hints: string[] = [];\n  if (ran.scope !== \"company\") {\n    hints.push(\n      `This answer came from a ${ran.scope === \"org\" ? \"connection shared by the organization\" : \"connection of the person sending this message\"}. A published report reads only apps connected for the whole company, so ${ran.tool} will answer \"not connected\" there: ask the user to connect ${ran.app} for the whole company before building a report on it.`,\n    );\n  }\n  hints.push(\n    `In a report endpoint: runReportBaker(event, [\"mcp\", \"execute\", \"--tool\", \"${ran.tool}\", \"--data\", JSON.stringify(args)]) — return only the fields the page shows.`,\n  );\n  return hints;\n}\n\nconst toolsArgs = {\n  search: {\n    type: \"string\",\n    description: 'What the tool should do, e.g. \"fetch emails\", \"read sheet rows\"',\n    required: false,\n  },\n  app: {\n    type: \"string\",\n    description: \"Only this connected app, as `baker mcp connected` lists it (gmail)\",\n    required: false,\n  },\n  limit: { type: \"string\", description: \"Max tools to return, 1-50 (default 10)\", required: false },\n} as const;\n\nregisterSchema({\n  command: \"mcp.tools\",\n  description:\n    'Find a connected app\\'s tools to run with `baker mcp execute`. Searches the apps this chat reaches (or --app). Each tool: tool (slug), app, name, description, readOnly (only read-only tools run). Example: baker mcp tools --app googlesheets --search \"read rows\"',\n  args: toolsArgs,\n});\n\nexport const toolsCommand = defineCommand({\n  meta: {\n    name: \"tools\",\n    description: `Find a connected app's tools to run from the command line with \\`baker mcp execute\\`.\n\nStart here:\n  baker mcp tools --search \"fetch unread emails\"          # across every connected app\n  baker mcp tools --app googlesheets --search \"read rows\"\n  baker mcp tools --app hubspot --limit 20                # an app's tools, no search\n\nEach tool: tool (the slug execute takes), app, name, description, readOnly.\nOnly readOnly tools run through execute; a tool that changes things is the chat's own mcp__composio_* tool.`,\n  },\n  args: toolsArgs,\n  run: async ({ args }) => {\n    const parsed = mcpToolsRequestSchema.safeParse({ search: args.search, app: args.app, limit: args.limit });\n    if (!parsed.success) {\n      invalid(parsed.error.issues[0]?.message ?? \"Invalid arguments\");\n    }\n    try {\n      const user = actingUserId();\n      const data = await apiGet<McpToolsResponse>(\"/api/mcp/tools\", {\n        ...(parsed.data.search ? { search: parsed.data.search } : {}),\n        ...(parsed.data.app ? { app: parsed.data.app } : {}),\n        limit: String(parsed.data.limit),\n        ...(user ? { actingUserId: user } : {}),\n      });\n      const hints =\n        data.apps.length === 0\n          ? [\n              \"No app is connected here. Check `baker mcp connected`; connect one with request_connection, from the chat.\",\n            ]\n          : [\n              \"Run one with `baker mcp execute --tool <TOOL> --get-schema` first to see its inputs, then `--data '<json>'`.\",\n              ...(data.tools.some((tool) => !tool.readOnly)\n                ? [\n                    \"readOnly: false tools cannot run through execute — they change things; use the chat's mcp__composio_* tool.\",\n                  ]\n                : []),\n            ];\n      writeJson({ ok: true, data, hints });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n\nconst executeArgs = {\n  tool: { type: \"string\", description: \"Tool slug from `baker mcp tools`, e.g. GMAIL_FETCH_EMAILS\", required: true },\n  data: {\n    type: \"string\",\n    description: \"The tool's arguments as a JSON object, e.g. '{\\\"max_results\\\":10}'\",\n    required: false,\n  },\n  \"get-schema\": { type: \"boolean\", description: \"Show the tool's inputs instead of running it\", required: false },\n  full: {\n    type: \"boolean\",\n    description: \"With --get-schema: the raw input and output JSON schemas too\",\n    required: false,\n  },\n} as const;\n\nregisterSchema({\n  command: \"mcp.execute\",\n  description:\n    'Run one read-only tool of a connected app and print what it returned as JSON — for a report\\'s data endpoint, a script, or keeping the answer. `--get-schema` shows its inputs first. A published report reaches only apps connected for the whole company. Example: baker mcp execute --tool GOOGLESHEETS_BATCH_GET --data \\'{\"spreadsheet_id\":\"…\",\"ranges\":[\"A1:D50\"]}\\'',\n  args: executeArgs,\n});\n\nfunction parseData(raw: unknown): Record<string, unknown> {\n  if (raw === undefined || raw === \"\") {\n    return {};\n  }\n  let value: unknown;\n  try {\n    value = JSON.parse(String(raw));\n  } catch {\n    invalid(`--data must be a JSON object, e.g. '{\"max_results\":10}' (keys and strings in double quotes).`);\n  }\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    invalid(`--data must be a JSON object, e.g. '{\"max_results\":10}'.`);\n  }\n  return value as Record<string, unknown>;\n}\n\nexport const executeCommand = defineCommand({\n  meta: {\n    name: \"execute\",\n    description: `Run one read-only tool of a connected app; prints what it returned as JSON.\n\nThe same tools as the chat's mcp__composio_* servers, answered on stdout so a report's data endpoint,\na script or a file can keep it. Find the tool with \\`baker mcp tools\\`, read its inputs, then run it:\n  baker mcp execute --tool GOOGLESHEETS_BATCH_GET --get-schema\n  baker mcp execute --tool GOOGLESHEETS_BATCH_GET --data '{\"spreadsheet_id\":\"1AbC…\",\"ranges\":[\"Sheet1!A1:D50\"]}'\n  baker mcp execute --tool GMAIL_FETCH_EMAILS --data '{\"query\":\"is:unread newer_than:7d\",\"max_results\":20}' > /tmp/inbox.json\n\nReads only: a tool that changes things (send, create, update) is refused — use the chat's own tool for it.\nA published report runs as nobody, so it reaches only apps connected for the whole company; a\nperson's own connection answers in their chat and nowhere else.`,\n  },\n  args: executeArgs,\n  run: async ({ args }) => {\n    if (args[\"get-schema\"]) {\n      const parsed = mcpToolRequestSchema.safeParse({ tool: args.tool, full: args.full === true });\n      if (!parsed.success) {\n        invalid(parsed.error.issues[0]?.message ?? \"Invalid arguments\");\n      }\n      try {\n        const data = await apiGet<McpToolResponse>(\"/api/mcp/tool\", {\n          tool: parsed.data.tool,\n          ...(parsed.data.full ? { full: \"true\" } : {}),\n        });\n        writeJson({\n          ok: true,\n          data,\n          hints: data.readOnly\n            ? [`Run it: baker mcp execute --tool ${data.tool} --data '<json object of the inputs above>'`]\n            : [\n                `${data.tool} changes things, so execute refuses it. In a chat, use the app's own mcp__composio_* tool.`,\n              ],\n        });\n      } catch (err) {\n        fail(err);\n      }\n      return;\n    }\n    const parsed = mcpExecuteRequestSchema.safeParse({\n      tool: args.tool,\n      arguments: parseData(args.data),\n      actingUserId: actingUserId(),\n    });\n    if (!parsed.success) {\n      invalid(parsed.error.issues[0]?.message ?? \"Invalid arguments\");\n    }\n    try {\n      const data = await apiPost<McpExecuteResponse>(\"/api/mcp/execute\", parsed.data, {\n        timeoutMs: EXECUTE_TIMEOUT_MS,\n      });\n      writeJson({ ok: true, data, hints: executeHints(data) });\n    } catch (err) {\n      fail(err);\n    }\n  },\n});\n","/**\n * How a connected platform reads back to the agent.\n *\n * A platform (HubSpot, Google Ads, GA4, …) is an account the company signed in\n * to, reached through its own `baker` command family rather than an `mcp__*`\n * tool. It rides `mcp connected` because that is the one answer to \"what can\n * this chat reach\" — and because an agent that only saw the tool half had no\n * way to tell a working HubSpot connection from a missing one.\n */\n\nexport interface ConnectedPlatform {\n  type: string;\n  label: string;\n  account: string | null;\n  reads: string[];\n  readsLabel: string | null;\n  /** Absent when the sign-in is good; see `connectedPlatforms` in the backend. */\n  signIn?: \"needs_reconnect\" | \"expiring\";\n}\n\n/** \"Ad Accounts\" -> `adAccounts`, \"Properties\" -> `properties`. */\nfunction readsKey(label: string): string {\n  const [first = \"\", ...rest] = label.split(\" \");\n  return [first.toLowerCase(), ...rest].join(\"\");\n}\n\n/**\n * One platform as the agent sees it. The resources are keyed by the platform's\n * own word for them — `properties` for GA4, `containers` for Tag Manager,\n * `adAccounts` for the ad platforms — so what the agent reads back matches what\n * the user sees in the dashboard.\n */\nexport function platformEntry(platform: ConnectedPlatform): Record<string, unknown> {\n  const status = signInStatus(platform);\n  return {\n    platform: platform.label,\n    ...(platform.account ? { account: platform.account } : {}),\n    ...(platform.readsLabel && platform.reads.length > 0 ? { [readsKey(platform.readsLabel)]: platform.reads } : {}),\n    ...(status ? { status } : {}),\n  };\n}\n\n/**\n * A sign-in that is not simply good, said with what to do about it. A listed\n * platform reads as connected, so one whose sign-in died would otherwise be\n * trusted until a read failed — and then reported to the user as Baker's fault.\n */\nfunction signInStatus(platform: ConnectedPlatform): string | null {\n  const request = `request_connection { platform: \"${platform.type}\" }`;\n  if (platform.signIn === \"needs_reconnect\") {\n    return `sign-in no longer works — needs reconnecting: call ${request}`;\n  }\n  if (platform.signIn === \"expiring\") {\n    return `signed in, but the sign-in lapses within days — tell the user and offer to renew it now with ${request}`;\n  }\n  return null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,SAAS,SAAS;AAEX,IAAM,4BAA4B;AAClC,IAAM,8BAA8B;AAEpC,IAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,kBAAkB,EAAE,IAAI,GAAG;AAAA,EAC5D,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,yBAAyB;AACjF,CAAC;AAGM,IAAM,0BAA0B,EAAE,KAAK,CAAC,WAAW,KAAK,CAAC;AAGzD,IAAM,wBAAwB,EAAE,OAAO;AAAA;AAAA,EAE5C,KAAK,EAAE,OAAO;AAAA,EACd,MAAM,EAAE,OAAO;AAAA,EACf,aAAa,EAAE,OAAO,EAAE,IAAI,2BAA2B;AAAA,EACvD,SAAS;AAAA,EACT,WAAW,EAAE,QAAQ;AACvB,CAAC;AAGM,IAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,MAAM,EAAE,MAAM,qBAAqB;AAAA;AAAA,EAEnC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAC1C,CAAC;;;AC/BD,SAAS,iBAAAA,sBAAqB;;;ACA9B,IAAM,qBACJ;AAEF,IAAM,yBACJ;AAEF,IAAM,gBACJ;AAGF,SAAS,eAAe,WAAsC;AAC5D,QAAM,OAAO,UAAU,IAAI,CAAC,MAAM,qCAAqC,CAAC,OAAO,EAAE,KAAK,MAAM;AAC5F,SAAO,iEAA4D,IAAI;AACzE;AAGO,SAAS,aACd,MACA,EAAE,YAAY,CAAC,EAAE,IAAuC,CAAC,GAC/C;AACV,MAAI,UAAU,SAAS,GAAG;AACxB,WAAO,CAAC,eAAe,SAAS,CAAC;AAAA,EACnC;AACA,QAAM,QAAQ,CAAC,kBAAkB;AACjC,MAAI,KAAK,KAAK,CAAC,MAAM,EAAE,SAAS,GAAG;AACjC,UAAM,KAAK,sBAAsB;AAAA,EACnC;AACA,MAAI,KAAK,WAAW,GAAG;AACrB,UAAM,KAAK,aAAa;AAAA,EAC1B;AACA,SAAO;AACT;;;AC1BA,SAAS,KAAAC,UAAS;AAEX,IAAM,0BAA0B;AAChC,IAAM,2BAA2B;AAGjC,IAAM,oBAAoBA,GAC9B,OAAO,EACP,KAAK,EACL,IAAI,GAAG,gBAAgB,EACvB,IAAI,GAAG,EACP,MAAM,mBAAmB,yFAAoF,EAC7G,UAAU,CAAC,SAAS,KAAK,YAAY,CAAC;AAGlC,IAAM,mBAAmBA,GAC7B,OAAO,EACP,KAAK,EACL,IAAI,CAAC,EACL,IAAI,EAAE,EACN,MAAM,kBAAkB,4DAA4D,EACpF,UAAU,CAAC,SAAS,KAAK,YAAY,CAAC;AAElC,IAAM,wBAAwBA,GAClC,OAAO;AAAA,EACN,QAAQA,GAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACnD,KAAK,iBAAiB,SAAS;AAAA,EAC/B,OAAOA,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,uBAAuB;AAC/E,CAAC,EACA,OAAO,CAAC,YAAY,QAAQ,WAAW,UAAa,QAAQ,QAAQ,QAAW;AAAA,EAC9E,SAAS;AACX,CAAC;AAGI,IAAM,uBAAuBA,GAAE,OAAO;AAAA,EAC3C,MAAMA,GAAE,OAAO;AAAA,EACf,KAAKA,GAAE,OAAO;AAAA,EACd,MAAMA,GAAE,OAAO;AAAA,EACf,aAAaA,GAAE,OAAO,EAAE,IAAI,wBAAwB;AAAA;AAAA,EAEpD,UAAUA,GAAE,QAAQ;AACtB,CAAC;AAGM,IAAM,yBAAyBA,GAAE,OAAO;AAAA,EAC7C,OAAOA,GAAE,MAAM,oBAAoB;AAAA;AAAA,EAEnC,MAAMA,GAAE,MAAMA,GAAE,OAAO,CAAC;AAC1B,CAAC;AAGM,IAAM,uBAAuBA,GAAE,OAAO;AAAA,EAC3C,MAAM;AAAA,EACN,MAAMA,GAAE,QAAQ,EAAE,QAAQ,KAAK;AACjC,CAAC;AAGM,IAAM,qBAAqBA,GAAE,OAAO;AAAA,EACzC,MAAMA,GAAE,OAAO;AAAA,EACf,MAAMA,GAAE,OAAO;AAAA,EACf,UAAUA,GAAE,QAAQ;AAAA,EACpB,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,MAAMA,GAAE,MAAMA,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpC,SAASA,GAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;AAGM,IAAM,wBAAwBA,GAAE,OAAO;AAAA,EAC5C,MAAMA,GAAE,OAAO;AAAA,EACf,KAAKA,GAAE,OAAO;AAAA,EACd,MAAMA,GAAE,OAAO;AAAA,EACf,aAAaA,GAAE,OAAO;AAAA,EACtB,UAAUA,GAAE,QAAQ;AAAA,EACpB,QAAQA,GAAE,MAAM,kBAAkB;AAAA;AAAA,EAElC,aAAaA,GAAE,QAAQ,EAAE,SAAS;AAAA,EAClC,cAAcA,GAAE,QAAQ,EAAE,SAAS;AACrC,CAAC;AAGM,IAAM,0BAA0BA,GAAE,OAAO;AAAA,EAC9C,MAAM;AAAA,EACN,WAAWA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EACvD,cAAcA,GAAE,OAAO,EAAE,SAAS;AACpC,CAAC;AAGM,IAAM,2BAA2BA,GAAE,OAAO;AAAA,EAC/C,MAAMA,GAAE,OAAO;AAAA,EACf,KAAKA,GAAE,OAAO;AAAA;AAAA,EAEd,OAAOA,GAAE,KAAK,CAAC,QAAQ,YAAY,WAAW,KAAK,CAAC;AAAA,EACpD,SAASA,GAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAE7B,MAAMA,GAAE,QAAQ;AAClB,CAAC;;;AC5FD,SAAS,qBAAqB;AAO9B,IAAM,qBAAqB;AAE3B,SAAS,KAAK,KAAqB;AACjC,MAAI,eAAe,UAAU;AAC3B,cAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;AACxE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,YAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,mBAAmB,EAAE,CAAC;AACtF,UAAQ,KAAK,CAAC;AAChB;AAEA,SAAS,QAAQ,SAAwB;AACvC,SAAO,KAAK,IAAI,SAAS,oBAAoB,OAAO,CAAC;AACvD;AAGA,SAAS,eAAmC;AAC1C,SAAO,OAAO,EAAE;AAClB;AAGO,SAAS,aAAa,KAAmE;AAC9F,QAAM,QAAkB,CAAC;AACzB,MAAI,IAAI,UAAU,WAAW;AAC3B,UAAM;AAAA,MACJ,2BAA2B,IAAI,UAAU,QAAQ,0CAA0C,+CAA+C,4EAA4E,IAAI,IAAI,+DAA+D,IAAI,GAAG;AAAA,IACtS;AAAA,EACF;AACA,QAAM;AAAA,IACJ,6EAA6E,IAAI,IAAI;AAAA,EACvF;AACA,SAAO;AACT;AAEA,IAAM,YAAY;AAAA,EAChB,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA,KAAK;AAAA,IACH,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA,OAAO,EAAE,MAAM,UAAU,aAAa,0CAA0C,UAAU,MAAM;AAClG;AAEA,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AACR,CAAC;AAEM,IAAM,eAAe,cAAc;AAAA,EACxC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASf;AAAA,EACA,MAAM;AAAA,EACN,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,UAAM,SAAS,sBAAsB,UAAU,EAAE,QAAQ,KAAK,QAAQ,KAAK,KAAK,KAAK,OAAO,KAAK,MAAM,CAAC;AACxG,QAAI,CAAC,OAAO,SAAS;AACnB,cAAQ,OAAO,MAAM,OAAO,CAAC,GAAG,WAAW,mBAAmB;AAAA,IAChE;AACA,QAAI;AACF,YAAM,OAAO,aAAa;AAC1B,YAAM,OAAO,MAAM,OAAyB,kBAAkB;AAAA,QAC5D,GAAI,OAAO,KAAK,SAAS,EAAE,QAAQ,OAAO,KAAK,OAAO,IAAI,CAAC;AAAA,QAC3D,GAAI,OAAO,KAAK,MAAM,EAAE,KAAK,OAAO,KAAK,IAAI,IAAI,CAAC;AAAA,QAClD,OAAO,OAAO,OAAO,KAAK,KAAK;AAAA,QAC/B,GAAI,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;AAAA,MACvC,CAAC;AACD,YAAM,QACJ,KAAK,KAAK,WAAW,IACjB;AAAA,QACE;AAAA,MACF,IACA;AAAA,QACE;AAAA,QACA,GAAI,KAAK,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ,IACxC;AAAA,UACE;AAAA,QACF,IACA,CAAC;AAAA,MACP;AACN,gBAAU,EAAE,IAAI,MAAM,MAAM,MAAM,CAAC;AAAA,IACrC,SAAS,KAAK;AACZ,WAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAED,IAAM,cAAc;AAAA,EAClB,MAAM,EAAE,MAAM,UAAU,aAAa,6DAA6D,UAAU,KAAK;AAAA,EACjH,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AAAA,EACA,cAAc,EAAE,MAAM,WAAW,aAAa,gDAAgD,UAAU,MAAM;AAAA,EAC9G,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,UAAU;AAAA,EACZ;AACF;AAEA,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AACR,CAAC;AAED,SAAS,UAAU,KAAuC;AACxD,MAAI,QAAQ,UAAa,QAAQ,IAAI;AACnC,WAAO,CAAC;AAAA,EACV;AACA,MAAI;AACJ,MAAI;AACF,YAAQ,KAAK,MAAM,OAAO,GAAG,CAAC;AAAA,EAChC,QAAQ;AACN,YAAQ,8FAA8F;AAAA,EACxG;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GAAG;AACvE,YAAQ,0DAA0D;AAAA,EACpE;AACA,SAAO;AACT;AAEO,IAAM,iBAAiB,cAAc;AAAA,EAC1C,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWf;AAAA,EACA,MAAM;AAAA,EACN,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,QAAI,KAAK,YAAY,GAAG;AACtB,YAAMC,UAAS,qBAAqB,UAAU,EAAE,MAAM,KAAK,MAAM,MAAM,KAAK,SAAS,KAAK,CAAC;AAC3F,UAAI,CAACA,QAAO,SAAS;AACnB,gBAAQA,QAAO,MAAM,OAAO,CAAC,GAAG,WAAW,mBAAmB;AAAA,MAChE;AACA,UAAI;AACF,cAAM,OAAO,MAAM,OAAwB,iBAAiB;AAAA,UAC1D,MAAMA,QAAO,KAAK;AAAA,UAClB,GAAIA,QAAO,KAAK,OAAO,EAAE,MAAM,OAAO,IAAI,CAAC;AAAA,QAC7C,CAAC;AACD,kBAAU;AAAA,UACR,IAAI;AAAA,UACJ;AAAA,UACA,OAAO,KAAK,WACR,CAAC,oCAAoC,KAAK,IAAI,6CAA6C,IAC3F;AAAA,YACE,GAAG,KAAK,IAAI;AAAA,UACd;AAAA,QACN,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,aAAK,GAAG;AAAA,MACV;AACA;AAAA,IACF;AACA,UAAM,SAAS,wBAAwB,UAAU;AAAA,MAC/C,MAAM,KAAK;AAAA,MACX,WAAW,UAAU,KAAK,IAAI;AAAA,MAC9B,cAAc,aAAa;AAAA,IAC7B,CAAC;AACD,QAAI,CAAC,OAAO,SAAS;AACnB,cAAQ,OAAO,MAAM,OAAO,CAAC,GAAG,WAAW,mBAAmB;AAAA,IAChE;AACA,QAAI;AACF,YAAM,OAAO,MAAM,QAA4B,oBAAoB,OAAO,MAAM;AAAA,QAC9E,WAAW;AAAA,MACb,CAAC;AACD,gBAAU,EAAE,IAAI,MAAM,MAAM,OAAO,aAAa,IAAI,EAAE,CAAC;AAAA,IACzD,SAAS,KAAK;AACZ,WAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;;;ACtMD,SAAS,SAAS,OAAuB;AACvC,QAAM,CAAC,QAAQ,IAAI,GAAG,IAAI,IAAI,MAAM,MAAM,GAAG;AAC7C,SAAO,CAAC,MAAM,YAAY,GAAG,GAAG,IAAI,EAAE,KAAK,EAAE;AAC/C;AAQO,SAAS,cAAc,UAAsD;AAClF,QAAM,SAAS,aAAa,QAAQ;AACpC,SAAO;AAAA,IACL,UAAU,SAAS;AAAA,IACnB,GAAI,SAAS,UAAU,EAAE,SAAS,SAAS,QAAQ,IAAI,CAAC;AAAA,IACxD,GAAI,SAAS,cAAc,SAAS,MAAM,SAAS,IAAI,EAAE,CAAC,SAAS,SAAS,UAAU,CAAC,GAAG,SAAS,MAAM,IAAI,CAAC;AAAA,IAC9G,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,EAC7B;AACF;AAOA,SAAS,aAAa,UAA4C;AAChE,QAAM,UAAU,mCAAmC,SAAS,IAAI;AAChE,MAAI,SAAS,WAAW,mBAAmB;AACzC,WAAO,2DAAsD,OAAO;AAAA,EACtE;AACA,MAAI,SAAS,WAAW,YAAY;AAClC,WAAO,qGAAgG,OAAO;AAAA,EAChH;AACA,SAAO;AACT;;;AJxCA,IAAM,SAAS,CAAC,QAAQ,YAAY,WAAW,KAAK;AAGpD,SAAS,WAAW,KAAqB;AACvC,QAAM,QAAQ,QAAQ,SAAY,YAAY,OAAO,GAAG;AACxD,MAAI,CAAE,OAA6B,SAAS,KAAK,GAAG;AAClD,UAAM,IAAI,SAAS,oBAAoB,oBAAoB,KAAK,yCAAyC;AAAA,EAC3G;AACA,SAAO;AACT;AAGA,SAASC,gBAAmC;AAC1C,SAAO,OAAO,EAAE;AAClB;AAqBA,SAAS,YAAY,QAAkD;AACrE,QAAM,SAAS,OAAO,UAAU,CAAC,OAAO,OAAO;AAC/C,QAAM,UAAU,OAAO,QAAQ,WAAW;AAC1C,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,OAAO,OAAO;AAAA,IACd,SAAS,OAAO;AAAA,IAChB,GAAI,UAAU,CAAC,OAAO,QAAQ,YAAY,EAAE,QAAQ,OAAO,QAAQ,IAAI,CAAC;AAAA,IACxE,GAAI,UAAU,OAAO,QAAQ,YAAY,EAAE,WAAW,UAAU,QAAQ,IAAI,CAAC;AAAA,IAC7E,GAAI,UAAU,OAAO,QAAQ,eAAe,EAAE,kBAAkB,OAAO,OAAO,aAAa,IAAI,CAAC;AAAA,EAClG;AACF;AAGA,IAAM,qBACJ;AAGF,IAAM,yBACJ;AAIF,SAAS,aAAa,KAAc,SAAiE;AACnG,QAAM,OAAO,eAAe,SAAS,UAAU,GAAG;AAClD,QAAM,UAAkC,CAAC;AACzC,aAAW,SAAS,MAAM;AACxB,UAAM,OAAO,OAAO,KAAK;AACzB,UAAM,MAAM,KAAK,QAAQ,GAAG,KAAK,MAAM,KAAK,QAAQ,GAAG,IAAI,KAAK,QAAQ,GAAG,KAAK,KAAK,QAAQ,GAAG,IAAI,KAAK,MAAM;AAC/G,UAAM,KAAK,KAAK,QAAQ,GAAG;AAC3B,QAAI,MAAM,GAAG;AACX,YAAM,IAAI,SAAS,oBAAoB,mBAAmB,IAAI,sBAAsB;AAAA,IACtF;AACA,YAAQ,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK;AAAA,EAC9D;AACA,SAAO,OAAO,KAAK,OAAO,EAAE,SAAS,IAAI,UAAU;AACrD;AAEA,SAASC,MAAK,KAAqB;AACjC,MAAI,eAAe,UAAU;AAC3B,cAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;AACxE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,YAAU,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,iBAAiB,SAAS,mBAAmB,EAAE,CAAC;AACtF,UAAQ,KAAK,CAAC;AAChB;AAiBA,IAAM,iBACJ;AAEF,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM,CAAC;AACT,CAAC;AAED,IAAM,mBAAmBC,eAAc;AAAA,EACrC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMf;AAAA,EACA,KAAK,YAAY;AACf,QAAI;AACF,YAAM,OAAOF,cAAa;AAC1B,YAAM,OAAO,MAAM,OAA0B,sBAAsB,OAAO,EAAE,cAAc,KAAK,IAAI,MAAS;AAC5G,YAAM,UAAU,KAAK,QAAQ,IAAI,CAAC,OAAO;AAAA,QACvC,SAAS,EAAE;AAAA,QACX,OAAO,EAAE;AAAA,QACT,GAAI,EAAE,WAAW,WAAW,EAAE,QAAQ,EAAE,OAAO,IAAI,CAAC;AAAA,QACpD,GAAI,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,IAAI,CAAC;AAAA,QACpD,GAAI,EAAE,WAAW,EAAE,UAAU,KAAK,IAAI,CAAC;AAAA,MACzC,EAAE;AACF,YAAM,SAAS,KAAK,OAAO,IAAI,WAAW;AAC1C,YAAM,aAAa,KAAK,aAAa,CAAC,GAAG,IAAI,aAAa;AAC1D,YAAM,QAAkB,CAAC;AACzB,UAAI,UAAU,SAAS,GAAG;AACxB,cAAM,KAAK,cAAc;AAAA,MAC3B;AACA,UAAI,KAAK,OAAO,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,MAAM,CAAC,EAAE,OAAO,SAAS,GAAG;AAC5E,cAAM,KAAK,kBAAkB;AAAA,MAC/B;AACA,UAAI,KAAK,OAAO,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,MAAM,EAAE,OAAO,SAAS,GAAG;AAC3E,cAAM,KAAK,sBAAsB;AAAA,MACnC;AACA,UAAI,CAAC,GAAG,KAAK,SAAS,GAAG,KAAK,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,UAAU,EAAE,UAAU,UAAU,GAAG;AAC/F,cAAM;AAAA,UACJ;AAAA,QACF;AAAA,MACF;AACA,YAAM;AAAA,QACJ;AAAA,MACF;AACA,gBAAU;AAAA,QACR,IAAI;AAAA,QACJ,MAAM,EAAE,SAAS,QAAQ,UAAU;AAAA,QACnC;AAAA,MACF,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,MAAAC,MAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAED,IAAM,cAAc;AAAA,EAClB,QAAQ,EAAE,MAAM,UAAU,aAAa,uDAAuD,UAAU,KAAK;AAAA,EAC7G,OAAO,EAAE,MAAM,UAAU,aAAa,wCAAwC,UAAU,MAAM;AAChG;AAEA,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AACR,CAAC;AAED,IAAM,iBAAiBC,eAAc;AAAA,EACnC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQf;AAAA,EACA,MAAM;AAAA,EACN,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,UAAM,SAAS,wBAAwB,UAAU,EAAE,QAAQ,KAAK,QAAQ,OAAO,KAAK,MAAM,CAAC;AAC3F,QAAI,CAAC,OAAO,SAAS;AACnB,gBAAU;AAAA,QACR,IAAI;AAAA,QACJ,OAAO,EAAE,MAAM,oBAAoB,SAAS,OAAO,MAAM,OAAO,CAAC,GAAG,WAAW,oBAAoB;AAAA,MACrG,CAAC;AACD,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,QAAI;AACF,YAAM,OAAOF,cAAa;AAC1B,YAAM,OAAO,MAAM,OAA2B,oBAAoB;AAAA,QAChE,QAAQ,OAAO,KAAK;AAAA,QACpB,OAAO,OAAO,OAAO,KAAK,KAAK;AAAA,QAC/B,GAAI,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;AAAA,MACvC,CAAC;AACD,gBAAU;AAAA,QACR,IAAI;AAAA,QACJ,MAAM;AAAA,UACJ,MAAM,KAAK;AAAA,UACX,GAAI,KAAK,WAAW,SAAS,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,QAChE;AAAA,QACA,OAAO,aAAa,KAAK,MAAM,EAAE,WAAW,KAAK,aAAa,CAAC,EAAE,CAAC;AAAA,MACpE,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,MAAAC,MAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAED,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC;AACT,CAAC;AAED,IAAM,cAAcC,eAAc;AAAA,EAChC,MAAM,EAAE,MAAM,QAAQ,aAAa,2DAA2D;AAAA,EAC9F,KAAK,YAAY;AACf,QAAI;AACF,YAAM,OAAOF,cAAa;AAC1B,YAAM,OAAO,MAAM;AAAA,QACjB;AAAA,QACA,OAAO,EAAE,cAAc,KAAK,IAAI;AAAA,MAClC;AACA,gBAAU;AAAA,QACR,IAAI;AAAA;AAAA;AAAA,QAGJ,MAAM,KAAK,QAAQ,IAAI,CAAC,YAAY,EAAE,GAAG,QAAQ,QAAQ,QAAW,GAAG,YAAY,MAAM,EAAE,EAAE;AAAA,QAC7F,GAAI,KAAK,QAAQ,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,IACjD;AAAA,UACE,OAAO,KAAK,QAAQ,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO,MAAM,CAAC,EAAE,OAAO,SAAS,IAC3E,CAAC,kBAAkB,IACnB,CAAC,sBAAsB;AAAA,QAC7B,IACA,CAAC;AAAA,MACP,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,MAAAC,MAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAED,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AAAA,IACJ,MAAM,EAAE,MAAM,UAAU,aAAa,qDAAgD,UAAU,KAAK;AAAA,IACpG,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,OAAO,EAAE,MAAM,UAAU,aAAa,qDAAqD,UAAU,MAAM;AAAA,IAC3G,QAAQ,EAAE,MAAM,UAAU,aAAa,yCAAyC,UAAU,MAAM;AAAA,EAClG;AACF,CAAC;AAED,IAAM,aAAaC,eAAc;AAAA,EAC/B,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUf;AAAA,EACA,MAAM;AAAA,IACJ,MAAM,EAAE,MAAM,UAAU,aAAa,gCAAgC,UAAU,KAAK;AAAA,IACpF,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aAAa;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,IACA,OAAO,EAAE,MAAM,UAAU,aAAa,qDAAqD,UAAU,MAAM;AAAA,IAC3G,QAAQ,EAAE,MAAM,UAAU,aAAa,yCAAyC,UAAU,MAAM;AAAA,EAClG;AAAA,EACA,KAAK,OAAO,EAAE,MAAM,QAAQ,MAAM;AAChC,QAAI;AACF,YAAM,QAAQ,WAAW,KAAK,KAAK;AACnC,YAAM,OAAOF,cAAa;AAC1B,YAAM,UAAU,aAAa,KAAK,QAAQ,OAAO;AACjD,YAAM,OAAO,MAAM,QAA0B,mBAAmB;AAAA,QAC9D,MAAM,KAAK;AAAA,QACX,KAAK,KAAK;AAAA,QACV;AAAA,QACA,GAAI,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;AAAA,QACrC,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,MAC/B,CAAC;AACD,gBAAU;AAAA,QACR,IAAI;AAAA,QACJ;AAAA,QACA,OAAO;AAAA,UACL;AAAA,UACA;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,MAAAC,MAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAED,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,EAAE,MAAM,EAAE,MAAM,UAAU,aAAa,yBAAyB,UAAU,KAAK,EAAE;AACzF,CAAC;AAED,IAAM,gBAAgBC,eAAc;AAAA,EAClC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA,EAIf;AAAA,EACA,MAAM,EAAE,MAAM,EAAE,MAAM,UAAU,aAAa,yBAAyB,UAAU,KAAK,EAAE;AAAA,EACvF,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,QAAI;AACF,YAAM,OAAOF,cAAa;AAC1B,YAAM,OAAO,MAAM,QAA8B,0BAA0B;AAAA,QACzE,MAAM,KAAK;AAAA,QACX,GAAI,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;AAAA,MACvC,CAAC;AACD,gBAAU,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,IAC9B,SAAS,KAAK;AACZ,MAAAC,MAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAED,IAAM,iBAAiB;AAAA,EACrB,MAAM,EAAE,MAAM,UAAU,aAAa,oDAAoD,UAAU,KAAK;AAC1G;AAEA,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AACR,CAAC;AAED,IAAM,gBAAgBC,eAAc;AAAA,EAClC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA,EAIf;AAAA,EACA,MAAM;AAAA,EACN,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,UAAM,SAAS,iCAAiC,UAAU,EAAE,MAAM,KAAK,MAAM,cAAcF,cAAa,EAAE,CAAC;AAC3G,QAAI,CAAC,OAAO,SAAS;AACnB,MAAAC,MAAK,IAAI,SAAS,oBAAoB,OAAO,MAAM,OAAO,CAAC,GAAG,WAAW,mBAAmB,CAAC;AAAA,IAC/F;AACA,QAAI;AACF,YAAM,OAAO,MAAM,QAAiC,0BAA0B,OAAO,IAAI;AACzF,gBAAU;AAAA,QACR,IAAI;AAAA,QACJ;AAAA,QACA,OAAO;AAAA,UACL,KAAK,KACD,6EACA,KAAK,YACH,yBACA;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,MAAAA,MAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAED,eAAe;AAAA,EACb,SAAS;AAAA,EACT,aACE;AAAA,EACF,MAAM;AACR,CAAC;AAED,IAAM,iBAAiBC,eAAc;AAAA,EACnC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA,EAIf;AAAA,EACA,MAAM;AAAA,EACN,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,UAAM,SAAS,iCAAiC,UAAU,EAAE,MAAM,KAAK,MAAM,cAAcF,cAAa,EAAE,CAAC;AAC3G,QAAI,CAAC,OAAO,SAAS;AACnB,MAAAC,MAAK,IAAI,SAAS,oBAAoB,OAAO,MAAM,OAAO,CAAC,GAAG,WAAW,mBAAmB,CAAC;AAAA,IAC/F;AACA,QAAI;AACF,YAAM,OAAO,MAAM,QAAkC,2BAA2B,OAAO,IAAI;AAC3F,gBAAU;AAAA,QACR,IAAI;AAAA,QACJ;AAAA,QACA,OAAO;AAAA,UACL;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,MAAAA,MAAK,GAAG;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,IAAM,aAAaC,eAAc;AAAA,EACtC,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAqBf;AAAA,EACA,aAAa;AAAA,IACX,WAAW;AAAA,IACX,SAAS;AAAA,IACT,OAAO;AAAA,IACP,SAAS;AAAA,IACT,MAAM;AAAA,IACN,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,SAAS;AAAA,EACX;AACF,CAAC;","names":["defineCommand","z","parsed","actingUserId","fail","defineCommand"]}