@koda-sl/baker-cli 0.551.0 → 0.554.0

package/dist/chunk-45D6WRCJ.js

@@ -0,0 +1,476 @@
+import {
+  writeJson
+} from "./chunk-CCYZJMZ7.js";
+
+// ../proxy/src/challenge.ts
+var CHALLENGE_PHRASES = [
+  "just a moment",
+  "attention required",
+  "verify you are human",
+  "checking your browser",
+  "enable javascript and cookies to continue",
+  "unusual traffic",
+  "access denied",
+  "you have been blocked",
+  "request unsuccessful",
+  "are you a robot",
+  "security check",
+  "ddos protection",
+  "captcha"
+];
+var CHALLENGE_MARKERS = ["cf-browser-verification", "cf_chl_", "px-captcha", "_incapsula_", "distil_r_captcha"];
+var CHALLENGE_LENGTH_CEILING = 2e3;
+function isChallengeBody(content, title) {
+  if (content.length <= CHALLENGE_LENGTH_CEILING) {
+    const haystack = `${title ?? ""}
+${content}`.toLowerCase();
+    if (CHALLENGE_PHRASES.some((phrase) => haystack.includes(phrase))) return true;
+  }
+  const whole = content.toLowerCase();
+  return CHALLENGE_MARKERS.some((marker) => whole.includes(marker));
+}
+
+// ../proxy/src/tiers.ts
+var PROXY_TIERS = {
+  datacenter: {
+    tier: "datacenter",
+    host: "dc.oxylabs.io",
+    port: 8e3,
+    usernamePrefix: "user-",
+    countryKey: "-country-",
+    sessionKey: null,
+    attempts: 3
+  },
+  residential: {
+    tier: "residential",
+    host: "pr.oxylabs.io",
+    port: 7777,
+    usernamePrefix: "customer-",
+    countryKey: "-cc-",
+    sessionKey: "-sessid-",
+    attempts: 1
+  }
+};
+var ESCALATION_ORDER = ["datacenter", "residential"];
+var KNOWN_USERNAME_PREFIXES = ["user-", "customer-"];
+
+// ../proxy/src/credentials.ts
+var PROXY_ENV_VARS = {
+  datacenter: { username: "OXYLABS_DATACENTER_USERNAME", password: "OXYLABS_DATACENTER_PASSWORD" },
+  residential: { username: "OXYLABS_RESIDENTIAL_USERNAME", password: "OXYLABS_RESIDENTIAL_PASSWORD" }
+};
+function readProxyCredentials(env) {
+  const credentials = {};
+  for (const tier of ESCALATION_ORDER) {
+    const username = env[PROXY_ENV_VARS[tier].username]?.trim();
+    const password = env[PROXY_ENV_VARS[tier].password]?.trim();
+    if (username && password) credentials[tier] = { username, password };
+  }
+  return credentials;
+}
+function configuredTiers(credentials) {
+  return ESCALATION_ORDER.filter((tier) => credentials[tier] !== void 0);
+}
+
+// ../proxy/src/escalate.ts
+var ESCALATABLE_STATUSES = /* @__PURE__ */ new Set([403, 429, 451]);
+var ESCALATABLE_NET_ERRORS = /* @__PURE__ */ new Set(["ERR_CONNECTION_RESET", "ERR_CONNECTION_CLOSED", "ERR_EMPTY_RESPONSE"]);
+var PROXY_NET_ERRORS = /* @__PURE__ */ new Set([
+  "ERR_TUNNEL_CONNECTION_FAILED",
+  "ERR_PROXY_CONNECTION_FAILED",
+  "ERR_PROXY_AUTH_REQUESTED",
+  "ERR_PROXY_CERTIFICATE_INVALID",
+  "ERR_UNEXPECTED_PROXY_AUTH",
+  "ERR_MANDATORY_PROXY_CONFIGURATION_FAILED",
+  "ERR_HTTPS_PROXY_TUNNEL_RESPONSE_REDIRECT"
+]);
+function isProxyFailure(signal) {
+  if (signal.status === 407) return true;
+  return signal.netError ? PROXY_NET_ERRORS.has(signal.netError) : false;
+}
+function shouldEscalate(signal) {
+  if (isProxyFailure(signal)) return false;
+  if (signal.timedOut) return false;
+  if (signal.challenge) return true;
+  if (signal.status != null && ESCALATABLE_STATUSES.has(signal.status)) return true;
+  return signal.netError ? ESCALATABLE_NET_ERRORS.has(signal.netError) : false;
+}
+
+// ../proxy/src/privateAddress.ts
+function isPrivateIpv4Octets(octets) {
+  const [a, b] = octets;
+  if (a === 0) return true;
+  if (a === 10) return true;
+  if (a === 127) return true;
+  if (a === 169 && b === 254) return true;
+  if (a === 172 && b >= 16 && b <= 31) return true;
+  if (a === 192 && b === 168) return true;
+  if (a === 100 && b >= 64 && b <= 127) return true;
+  if (a >= 224) return true;
+  return false;
+}
+function parseIpv4(value) {
+  const parts = value.split(".");
+  if (parts.length !== 4) return null;
+  const octets = parts.map((part) => /^\d{1,3}$/.test(part) ? Number(part) : Number.NaN);
+  if (octets.some((octet) => !Number.isInteger(octet) || octet < 0 || octet > 255)) return null;
+  return octets;
+}
+function expandGroups(part) {
+  if (part === "") return [];
+  const chunks = part.split(":");
+  const groups = [];
+  for (let index = 0; index < chunks.length; index++) {
+    const chunk = chunks[index];
+    if (chunk.includes(".")) {
+      if (index !== chunks.length - 1) return null;
+      const octets = parseIpv4(chunk);
+      if (!octets) return null;
+      groups.push(octets[0] << 8 | octets[1]);
+      groups.push(octets[2] << 8 | octets[3]);
+      continue;
+    }
+    if (!/^[0-9a-f]{1,4}$/.test(chunk)) return null;
+    groups.push(Number.parseInt(chunk, 16));
+  }
+  return groups;
+}
+function parseIpv6(value) {
+  const halves = value.split("::");
+  if (halves.length > 2) return null;
+  const head = expandGroups(halves[0]);
+  const tail = halves.length === 2 ? expandGroups(halves[1]) : [];
+  if (head === null || tail === null) return null;
+  if (halves.length === 1) return head.length === 8 ? head : null;
+  const missing = 8 - head.length - tail.length;
+  if (missing < 1) return null;
+  return [...head, ...new Array(missing).fill(0), ...tail];
+}
+function isPrivateAddress(ip) {
+  const address = ip.trim().toLowerCase();
+  if (!address) return true;
+  const v4 = parseIpv4(address);
+  if (v4) return isPrivateIpv4Octets(v4);
+  const v6 = parseIpv6(address);
+  if (!v6) return true;
+  const [g0, g1, g2, g3, g4, g5, g6, g7] = v6;
+  if (g0 === 0 && g1 === 0 && g2 === 0 && g3 === 0 && g4 === 0 && g5 === 0 && g6 === 0) return true;
+  const mappedV4 = g0 === 0 && g1 === 0 && g2 === 0 && g3 === 0;
+  if (mappedV4 && g4 === 0 && g5 === 65535) {
+    return isPrivateIpv4Octets([g6 >> 8, g6 & 255, g7 >> 8, g7 & 255]);
+  }
+  if (mappedV4 && g4 === 65535 && g5 === 0) {
+    return isPrivateIpv4Octets([g6 >> 8, g6 & 255, g7 >> 8, g7 & 255]);
+  }
+  if ((g0 & 65024) === 64512) return true;
+  if ((g0 & 65472) === 65152) return true;
+  return false;
+}
+
+// ../proxy/src/publicAddress.ts
+var PRIVATE_HOST = /^(localhost|.*\.localhost|.*\.local)$/;
+var SANDBOX_HOST = /\.e2b\.(app|dev)$/;
+function unwrapIpLiteral(host) {
+  if (host.startsWith("[") && host.endsWith("]")) return host.slice(1, -1);
+  if (/^[0-9.]+$/.test(host) || host.includes(":")) return host;
+  return null;
+}
+function isPrivateHostname(hostname) {
+  const host = hostname.trim().toLowerCase();
+  if (!host) return true;
+  if (PRIVATE_HOST.test(host) || SANDBOX_HOST.test(host)) return true;
+  const literal = unwrapIpLiteral(host);
+  return literal === null ? false : isPrivateAddress(literal);
+}
+var BROWSER_PROXY_BYPASS = [
+  "localhost",
+  "*.localhost",
+  "127.0.0.1",
+  "0.0.0.0",
+  "::1",
+  "*.local",
+  // A Session's own preview, which is served from the sandbox's public host —
+  // public in DNS, ours in every sense that matters here.
+  "*.e2b.app",
+  "*.e2b.dev",
+  "10.*",
+  "192.168.*",
+  "169.254.*",
+  ...Array.from({ length: 16 }, (_, i) => `172.${16 + i}.*`)
+].join(",");
+function refuseNonPublicUrl(url) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return "unparseable";
+  }
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") return "not_public";
+  return isPrivateHostname(parsed.hostname) ? "not_public" : null;
+}
+
+// ../proxy/src/route.ts
+var DIRECT_ROUTE = { kind: "direct" };
+function proxyUsername(spec, rawUsername, options) {
+  const raw = rawUsername.trim();
+  const foreignPrefix = KNOWN_USERNAME_PREFIXES.find(
+    (prefix) => prefix !== spec.usernamePrefix && raw.startsWith(prefix)
+  );
+  if (foreignPrefix) return { ok: false, problem: "wrong_prefix" };
+  let username = raw.startsWith(spec.usernamePrefix) ? raw : `${spec.usernamePrefix}${raw}`;
+  if (options?.country) username += `${spec.countryKey}${options.country.toUpperCase()}`;
+  if (options?.session && spec.sessionKey) username += `${spec.sessionKey}${options.session}`;
+  return { ok: true, username };
+}
+function buildProxyRoute(tier, credentials, options) {
+  const held = credentials[tier];
+  if (!held) return { ok: false, problem: "missing" };
+  const spec = PROXY_TIERS[tier];
+  const username = proxyUsername(spec, held.username, options);
+  if (!username.ok) return username;
+  return {
+    ok: true,
+    route: {
+      kind: "proxy",
+      tier,
+      server: `http://${spec.host}:${spec.port}`,
+      username: username.username,
+      password: held.password
+    }
+  };
+}
+
+// ../proxy/src/ladder.ts
+function plannedRoutes(url, credentials, options) {
+  if (refuseNonPublicUrl(url) !== null) return [DIRECT_ROUTE];
+  const routes = [DIRECT_ROUTE];
+  for (const tier of configuredTiers(credentials)) {
+    const built = buildProxyRoute(tier, credentials, options);
+    if (!built.ok) continue;
+    for (let attempt = 0; attempt < PROXY_TIERS[tier].attempts; attempt++) routes.push(built.route);
+  }
+  return routes;
+}
+function routeTier(route) {
+  return route.kind === "proxy" ? route.tier : "direct";
+}
+function nextPlannedRoute(routes, tried) {
+  const dead = new Set(tried.filter((attempt) => attempt.proxyFailure).map((attempt) => attempt.tier));
+  const spent = /* @__PURE__ */ new Map();
+  for (const attempt of tried) spent.set(attempt.tier, (spent.get(attempt.tier) ?? 0) + 1);
+  const offered = /* @__PURE__ */ new Map();
+  for (const route of routes) {
+    const tier = routeTier(route);
+    if (dead.has(tier)) continue;
+    const position = (offered.get(tier) ?? 0) + 1;
+    offered.set(tier, position);
+    if (position > (spent.get(tier) ?? 0)) return route;
+  }
+  return null;
+}
+
+// src/env.ts
+import { createEnv } from "@t3-oss/env-core";
+import { z } from "zod";
+
+// src/apiKeyFormat.ts
+var KEY_PREFIXES = ["bk_", "bkr_", "bkv_"];
+var API_KEY_FORMAT_MESSAGE = "API key must start with 'bk_', 'bkr_' or 'bkv_'";
+function isBakerApiKey(value) {
+  return KEY_PREFIXES.some((prefix) => value.startsWith(prefix));
+}
+
+// src/env.ts
+var cached;
+var CONNECTION = {
+  BAKER_API_KEY: z.string().refine(isBakerApiKey, API_KEY_FORMAT_MESSAGE),
+  BAKER_API_URL: z.url("BAKER_API_URL must be a valid URL")
+};
+function getEnv() {
+  if (!cached) {
+    cached = createEnv({
+      server: {
+        ...CONNECTION,
+        BAKER_PUBLIC_API_URL: z.url("BAKER_PUBLIC_API_URL must be a valid URL").optional(),
+        BAKER_CHAT_ID: z.string().optional(),
+        BAKER_THREAD_ID: z.string().optional(),
+        BAKER_KEY_SCOPE: z.enum(["report"]).optional(),
+        BAKER_TARGET_COMPANY_ID: z.string().optional(),
+        BAKER_ACTING_USER_ID: z.string().optional(),
+        BAKER_GOOGLE_ADS_CUSTOMER_ID: z.string().regex(/^\d{10}$/).optional(),
+        BAKER_GA4_PROPERTY_ID: z.string().optional(),
+        BAKER_GSC_SITE_URL: z.string().optional(),
+        BAKER_X_ADS_ACCOUNT_ID: z.string().regex(/^[a-z0-9]+$/, "X Ads account ID must be a base36 string").optional(),
+        BAKER_META_AD_ACCOUNT_ID: z.string().optional(),
+        BAKER_LINKEDIN_AD_ACCOUNT_ID: z.string().regex(/^\d+$/, "LinkedIn ad account ID must be the numeric portion of urn:li:sponsoredAccount:N").optional()
+      },
+      runtimeEnv: process.env,
+      onValidationError: refuseInvalidEnv
+    });
+  }
+  return cached;
+}
+function requireConnection() {
+  return createEnv({ server: CONNECTION, runtimeEnv: process.env, onValidationError: refuseInvalidEnv });
+}
+function issueVariable(issue) {
+  const first = issue.path?.[0];
+  const key = typeof first === "object" && first !== null ? first.key : first;
+  return key === void 0 ? "environment" : String(key);
+}
+var AGENT_SET_VARIABLES = /* @__PURE__ */ new Set([
+  "BAKER_GOOGLE_ADS_CUSTOMER_ID",
+  "BAKER_LINKEDIN_AD_ACCOUNT_ID",
+  "BAKER_X_ADS_ACCOUNT_ID"
+]);
+function listVariables(variables) {
+  return `${variables.join(", ")} ${variables.length === 1 ? "is" : "are"}`;
+}
+function refuseInvalidEnv(issues) {
+  const problems = issues.map((issue) => `${issueVariable(issue)}: ${issue.message}`).join("; ");
+  const variables = [...new Set(issues.map(issueVariable))];
+  if (variables.every((variable) => AGENT_SET_VARIABLES.has(variable))) {
+    writeJson({
+      ok: false,
+      error: {
+        code: "VALIDATION_ERROR",
+        message: `An environment variable has the wrong format \u2014 ${problems}.`,
+        retryable: false,
+        fix: {
+          action: "retry_with_changes",
+          explanation: `${listVariables(variables)} an optional override set in this workspace, not by the platform. Export it again in the format named above, or unset ${variables.join(" and ")} and pass the account with the command's flag instead, then re-run the command.`
+        }
+      }
+    });
+    process.exit(1);
+  }
+  writeJson({
+    ok: false,
+    error: {
+      code: "NOT_CONFIGURED",
+      message: `This workspace's Baker connection is misconfigured \u2014 ${problems}.`,
+      retryable: false,
+      fix: {
+        action: "continue_without",
+        explanation: `${listVariables(variables)} set by the platform when this workspace starts, and nothing in this workspace can correct it \u2014 do not retry, and do not set or edit it yourself. Every command that reads or writes Baker data will fail the same way. Carry on with work that does not need Baker's data (files in the repo, local checks), and tell the user that reading and saving their Baker data is unavailable in this conversation until the platform fixes it.`
+      }
+    }
+  });
+  process.exit(1);
+}
+function optionalChatId() {
+  return process.env.BAKER_CHAT_ID || void 0;
+}
+function optionalTargetCompany() {
+  return process.env.BAKER_TARGET_COMPANY_ID || void 0;
+}
+function optionalOwnChatId() {
+  return optionalTargetCompany() ? void 0 : optionalChatId();
+}
+function clearTargetCompany() {
+  delete process.env.BAKER_TARGET_COMPANY_ID;
+}
+function optionalWorkspaceKind() {
+  return process.env.BAKER_WORKSPACE_KIND || void 0;
+}
+function setTargetCompany(companyId) {
+  process.env.BAKER_TARGET_COMPANY_ID = companyId;
+}
+function optionalTurnId() {
+  return process.env.BAKER_TURN_ID || void 0;
+}
+function debugLogSetting() {
+  const raw = process.env.BAKER_DEBUG_LOG?.trim();
+  return raw ? raw : void 0;
+}
+var MissingChatIdError = class extends Error {
+  code = "MISSING_CHAT_ID";
+  constructor() {
+    super(
+      "BAKER_CHAT_ID is not set. This command stages changes against a chat \u2014 run it from a chat-attached environment."
+    );
+    this.name = "MissingChatIdError";
+  }
+};
+function canvasAssetOriginsSetting() {
+  const raw = process.env.BAKER_CANVAS_ASSET_ORIGINS?.trim();
+  return raw ? raw : void 0;
+}
+function optionalConnection() {
+  const apiKey = process.env.BAKER_API_KEY;
+  const baseUrl = process.env.BAKER_API_URL;
+  return apiKey && baseUrl ? { apiKey, baseUrl } : null;
+}
+function requireChatId() {
+  const env = getEnv();
+  if (!env.BAKER_CHAT_ID) {
+    throw new MissingChatIdError();
+  }
+  return env.BAKER_CHAT_ID;
+}
+function resolveChatId(chat) {
+  return typeof chat === "string" && chat.length > 0 ? chat : requireChatId();
+}
+function hasFrameVisionKey() {
+  return Boolean(frameVisionKey());
+}
+function frameVisionKey() {
+  return process.env.GEMINI_API_KEY;
+}
+function openRouterKey() {
+  return process.env.OPENROUTER_API_KEY;
+}
+function hasOpenRouterKey() {
+  return Boolean(openRouterKey());
+}
+function captureBudgetMs() {
+  const raw = Number(process.env.BAKER_CAPTURE_BUDGET_MS);
+  return Number.isFinite(raw) && raw > 0 ? raw : null;
+}
+function captureProxyCredentials() {
+  return readProxyCredentials(process.env);
+}
+function captureVimeoCookie() {
+  const raw = process.env.VIMEO_COOKIE?.trim();
+  return raw ? raw : void 0;
+}
+function childEnvWith(extra) {
+  return { ...process.env, ...extra };
+}
+
+export {
+  isChallengeBody,
+  isProxyFailure,
+  shouldEscalate,
+  isPrivateAddress,
+  refuseNonPublicUrl,
+  DIRECT_ROUTE,
+  plannedRoutes,
+  nextPlannedRoute,
+  API_KEY_FORMAT_MESSAGE,
+  isBakerApiKey,
+  getEnv,
+  requireConnection,
+  optionalChatId,
+  optionalTargetCompany,
+  optionalOwnChatId,
+  clearTargetCompany,
+  optionalWorkspaceKind,
+  setTargetCompany,
+  optionalTurnId,
+  debugLogSetting,
+  MissingChatIdError,
+  canvasAssetOriginsSetting,
+  optionalConnection,
+  requireChatId,
+  resolveChatId,
+  hasFrameVisionKey,
+  frameVisionKey,
+  openRouterKey,
+  hasOpenRouterKey,
+  captureBudgetMs,
+  captureProxyCredentials,
+  captureVimeoCookie,
+  childEnvWith
+};
+//# sourceMappingURL=chunk-45D6WRCJ.js.map

package/dist/chunk-4AEAL63J.js

@@ -0,0 +1,203 @@
+import {
+  ACTION_TEMP_ID_PREFIX
+} from "./chunk-RCNAKWK7.js";
+import {
+  ApiError
+} from "./chunk-GFWWHCBF.js";
+import {
+  MissingChatIdError
+} from "./chunk-45D6WRCJ.js";
+import {
+  writeJson
+} from "./chunk-CCYZJMZ7.js";
+
+// src/commands/actions/tagError.ts
+var UNKNOWN_TAG_RE = /Unknown action tag\(s\): ([^.]+)\. Valid tags: ([^.]+)\./;
+function splitSlugs(list) {
+  return list.split(",").map((slug) => slug.trim()).filter((slug) => slug.length > 0);
+}
+function actionTagFix(message) {
+  const match = UNKNOWN_TAG_RE.exec(message);
+  if (!match) {
+    return null;
+  }
+  const [, unknownList, validList] = match;
+  const unknownTags = splitSlugs(unknownList ?? "");
+  const validTags = splitSlugs(validList ?? "");
+  const first = unknownTags[0];
+  if (first === void 0 || validTags.length === 0) {
+    return null;
+  }
+  return {
+    action: "retry_with_a_valid_tag",
+    explanation: `The tag(s) ${unknownTags.join(", ")} are not in this company's taxonomy. \`validTags\` below is the complete accepted set \u2014 pick from it and re-run the same command. Only mint a new tag when none of them names this work; a near-duplicate of an existing tag splits the backlog's filter instead of extending it.`,
+    unknownTags,
+    validTags,
+    mintCommand: `baker actions tags create --slug ${first} --description "<what ${first} groups>"`,
+    listCommand: "baker actions tags list"
+  };
+}
+
+// src/commands/actions/shared.ts
+function writeOk(data) {
+  writeJson({ ok: true, data: data ?? null });
+}
+function failValidation(message) {
+  writeJson({ ok: false, error: { code: "VALIDATION_ERROR", message } });
+  process.exit(1);
+}
+function apiFailure(err) {
+  if (err instanceof ApiError) {
+    const fix = err.fix ?? actionTagFix(err.message);
+    return { ok: false, error: { code: err.code, message: err.message, ...fix ? { fix } : {} } };
+  }
+  if (err instanceof MissingChatIdError) {
+    const explanation = "This command stages its change on the chat this run belongs to, and this run has none. Don't retry: carry on with the rest of the job and tell the user this change couldn't be staged from here.";
+    return { ok: false, error: { code: err.code, message: err.message, fix: { action: "reject", explanation } } };
+  }
+  return {
+    ok: false,
+    error: { code: "INTERNAL_ERROR", message: err instanceof Error ? err.message : "Unexpected error" }
+  };
+}
+function failApi(err) {
+  writeJson(apiFailure(err));
+  process.exit(1);
+}
+function generateTempId() {
+  return `${ACTION_TEMP_ID_PREFIX}${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 10)}`;
+}
+function isTempId(id) {
+  return id.startsWith(ACTION_TEMP_ID_PREFIX);
+}
+function parseTagList(value) {
+  if (typeof value !== "string") {
+    return void 0;
+  }
+  const tags = value.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
+  return [...new Set(tags)];
+}
+var ACTION_PRIORITIES = ["urgent", "high", "medium", "low"];
+function parsePriority(value, { allowClear }) {
+  if (value === void 0) {
+    return void 0;
+  }
+  if (typeof value !== "string") {
+    failValidation(
+      `--priority must be one of: ${ACTION_PRIORITIES.join(", ")}${allowClear ? ", or 'none' to clear" : ""}.`
+    );
+  }
+  const trimmed = value.trim().toLowerCase();
+  if (trimmed === "") {
+    if (allowClear) {
+      return null;
+    }
+    return void 0;
+  }
+  if (allowClear && (trimmed === "none" || trimmed === "clear")) {
+    return null;
+  }
+  if (ACTION_PRIORITIES.includes(trimmed)) {
+    return trimmed;
+  }
+  failValidation(
+    `Unknown --priority "${value}". Expected one of: ${ACTION_PRIORITIES.join(", ")}${allowClear ? ", or 'none' to clear" : ""}.`
+  );
+}
+var FAN_OUT_NUDGE_THRESHOLD = 2;
+var FAN_OUT_THRESHOLD = 3;
+function buildCreateHints({
+  advisory,
+  name,
+  description,
+  tempId,
+  tags,
+  prioritySet,
+  draftCreateCount
+}) {
+  const hints = [];
+  const expanded = shellExpandedIn(`${name}
+${description}`);
+  if (expanded) {
+    hints.push(
+      `The text says \u201C${expanded}\u201D: the shell replaced a $ amount (like $0) inside double quotes before Baker saw it. Fix it now: baker actions update ${tempId} --description '<the text, with the amounts as you read them>' (and --name '\u2026' if the name has it) \u2014 single quotes keep $ as written.`
+    );
+  }
+  if (advisory) {
+    hints.push(
+      `${advisory.hint} If nothing actually blocks it: baker actions draft remove ${tempId}, then do the work.`
+    );
+  }
+  if (draftCreateCount >= FAN_OUT_THRESHOLD) {
+    hints.push(
+      `${draftCreateCount} Tasks are staged in this chat. Re-read them with \`baker actions draft\`: can any be done now with a surface you already have, and do any two touch the same system (same container, same campaign, same page)? Those belong in ONE Task \u2014 fold them together with \`baker actions update\` and drop the extras with \`baker actions draft remove <tempId>\`.`
+    );
+  } else if (draftCreateCount === FAN_OUT_NUDGE_THRESHOLD) {
+    hints.push(
+      `Second Task staged in this chat. If these two land on the same system (same container, same campaign, same page) they are ONE Task \u2014 fold them with \`baker actions update\` and drop the extra with \`baker actions draft remove ${tempId}\`.`
+    );
+  }
+  hints.push(`Link dependencies: baker actions link --blocker <id> --blocked ${tempId}`);
+  if (!description) {
+    hints.push("Add description: baker actions update <tempId> --description '...' (what/why/where/done-when)");
+  }
+  if (!tags || tags.length === 0) {
+    hints.push(
+      "MISSING --tags. This action is invisible to the backlog's tag filter. Re-run with --tags <slug,...> (`baker actions tags list` for the taxonomy, `baker actions tags create --slug <slug>` to mint) \u2014 or `baker actions update <tempId> --tags <slug,...>`."
+    );
+  }
+  if (!prioritySet) {
+    hints.push(
+      `MISSING --priority. Without it this action ranks as 'normal' (medium) in the do-first ordering, so urgent/high client work won't surface first. Re-run with --priority ${ACTION_PRIORITIES.join("|")} \u2014 or \`baker actions update <tempId> --priority <level>\`.`
+    );
+  }
+  return hints;
+}
+var SHELL_PATH = /(?:^|[\s(])((?:\/usr)?\/bin\/(?:ba|z|da|k)?sh|-(?:ba|z|da|k)sh)\b/;
+var MONEY_WORD = "spend|spent|spending|budget|revenue|sales|cost|costs|cpa|cpc|cpm|cpl|roas|profit|paid|earned";
+var BARE_SHELL = new RegExp(
+  `(?:\\b(?:${MONEY_WORD}|at|to|from|was|were|is)\\s+(bash|zsh)\\b|(?:^|[\\s(])(bash|zsh)(?=\\.\\d|\\s+(?:${MONEY_WORD})\\b))`,
+  "gi"
+);
+function shellExpandedIn(text) {
+  const path = SHELL_PATH.exec(text)?.[1];
+  if (path) return path;
+  for (const match of text.matchAll(BARE_SHELL)) {
+    const name = match[1] ?? match[2];
+    if (name && name === name.toLowerCase()) return name;
+  }
+  return null;
+}
+var ACTIONS_LIST_DEFAULT_LIMIT = 500;
+function buildListHints({ returned, limit }) {
+  if (returned < limit) {
+    return [];
+  }
+  return [
+    `This list is capped at ${limit} Tasks and came back full, so older Tasks exist that are NOT shown. Do not treat it as the whole backlog \u2014 re-run with --limit ${limit * 2} (or narrow with --status / --search).`
+  ];
+}
+function buildGetHints(detail) {
+  if (detail?.action.status !== "pending" || detail.activeChat !== null) {
+    return [];
+  }
+  return [
+    `If you are working on this Task in this chat, claim it first so the Tasks page shows it in progress: baker actions claim ${detail.action._id}`
+  ];
+}
+
+export {
+  writeOk,
+  failValidation,
+  failApi,
+  generateTempId,
+  isTempId,
+  parseTagList,
+  ACTION_PRIORITIES,
+  parsePriority,
+  buildCreateHints,
+  ACTIONS_LIST_DEFAULT_LIMIT,
+  buildListHints,
+  buildGetHints
+};
+//# sourceMappingURL=chunk-4AEAL63J.js.map