@koda-sl/baker-cli 0.573.0 → 0.574.0

package/dist/chunk-3WLUQ7DM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/ads/google/draft-account.ts","../src/commands/ads/google/write-shared.ts","../src/commands/ads/google/copy-list-usage.ts","../src/commands/ads/google/draft-status.ts","../src/commands/ads/google/stage-streak.ts"],"sourcesContent":["import type { GoogleDraftListResponse } from \"@baker/api/ads-google\";\n\n/**\n * `--customer-id` on the draft reads. A draft belongs to the chat, not to an account, and may span\n * several; every other Google Ads command takes the flag, so agents carry it here (BAKER-497).\n * `list` narrows to that account and says what the others still hold; `validate` and `show` keep\n * their whole answer, because publish sends every account together and a ref names one op.\n */\n\nfunction changes(n: number, staged: boolean): string {\n  const noun = staged ? \"staged change\" : \"change\";\n  return n === 1 ? `1 ${noun}` : `${n} ${noun}s`;\n}\n\n/**\n * The draft as one account holds it, with what the rest of the chat's draft holds. `empty` is the\n * readable line for an account holding none of it, where the whole-chat \"nothing staged\" would be false.\n * Only an active draft's other changes are still to publish; a published one's are already done.\n */\nexport function draftInAccount(\n  data: GoogleDraftListResponse,\n  customerId: string,\n): { data: GoogleDraftListResponse; hints: string[]; empty?: string } {\n  const ops = data.ops.filter((op) => op.customerId === customerId);\n  const narrowed = {\n    ...data,\n    count: ops.length,\n    ops,\n    ...(data.tree ? { tree: data.tree.filter((node) => node.customerId === customerId) } : {}),\n  };\n  const others = data.ops.filter((op) => op.customerId !== customerId);\n  if (others.length === 0) return { data: narrowed, hints: [] };\n  const staged = data.status === \"active\";\n  const accounts = [...new Set(others.map((op) => op.customerId))];\n  const where = `account${accounts.length === 1 ? \"\" : \"s\"} ${accounts.join(\", \")}`;\n  const one = others.length === 1;\n  if (ops.length === 0) {\n    return {\n      data: narrowed,\n      empty: `No Google Ads changes in account ${customerId} on this chat.`,\n      hints: [`This chat's ${changes(others.length, staged)} ${one ? \"is\" : \"are\"} in ${where}, not ${customerId}.`],\n    };\n  }\n  const more = `${others.length} more ${staged ? \"staged \" : \"\"}change${one ? \"\" : \"s\"}`;\n  const verb = staged ? (one ? \"publishes\" : \"publish\") : one ? \"is\" : \"are\";\n  return {\n    data: narrowed,\n    hints: [\n      `Showing account ${customerId} only. ${more} in ${where} ${verb} ${staged ? \"with this chat too\" : \"on this chat too\"}; \\`baker ads google draft list\\` without --customer-id shows ${one ? \"it\" : \"them\"}.`,\n    ],\n  };\n}\n\n/** `draft validate --customer-id`: said back, since the verdicts still cover every account. */\nexport function validateAccountHint(customerId: string): string {\n  return `Validated this chat's whole draft, not only account ${customerId}: publish sends every account's changes together, so each verdict above counts.`;\n}\n\n/** `draft show --customer-id` naming another account than the op's own. */\nexport function showAccountHint(customerId: string, opCustomerId: string): string | undefined {\n  return opCustomerId === customerId ? undefined : `This op is staged in account ${opCustomerId}, not ${customerId}.`;\n}\n","import { readFileSync } from \"node:fs\";\nimport {\n  GOOGLE_DRAFT_BATCH_MAX,\n  type GoogleDraftListResponse,\n  type GoogleDraftStageBatchResponse,\n  type GoogleDraftStageResponse,\n  googleDraftOpInputSchema,\n  OP_TOO_LARGE_FIX,\n  OP_TOO_LARGE_MESSAGE_START,\n  toMicros,\n} from \"@baker/api/ads-google\";\nimport { describeOpPayload } from \"@baker/api/capabilities\";\nimport { defineCommand } from \"citty\";\nimport { ApiError, apiPost } from \"../../../client.ts\";\nimport { requireChatId, resolveChatId } from \"../../../env.ts\";\nimport { handleConnectionError, isNotConnectedError } from \"../../../error-handler.ts\";\nimport { repeatedValues } from \"../../../lib/repeatedFlags.ts\";\nimport { payloadArg } from \"../../../schemas.ts\";\nimport { payloadFix } from \"../../capabilities/fix.ts\";\nimport { booleanWordPositionalError } from \"../boolean-word-positional.ts\";\nimport { adCopyHints } from \"../copy-hints.ts\";\nimport { hintLines, withHints } from \"../hints.ts\";\nimport { bareCustomerId, writeJsonEnvelope } from \"../output.ts\";\nimport { termsRefusalFix } from \"../terms-output.ts\";\nimport { copyListCountFix } from \"./copy-list-usage.ts\";\nimport { draftInAccount } from \"./draft-account.ts\";\nimport { renderDraftStatus } from \"./draft-status.ts\";\nimport { recordSingleStage } from \"./stage-streak.ts\";\n\n/**\n * Shared plumbing for the staged Google Ads write commands. Writes NEVER hit\n * the Google Ads API directly: every command stages an op against this chat's\n * draft (`/api/ads/google/draft/stage`), the dashboard shows it as a pending\n * Google Ads change, and the draft applies as one `GoogleAdsService.Mutate`\n * request per advertiser account when the chat is published. `--customer-id` is\n * required on every write — a draft may span several accounts, so nothing is\n * picked for you.\n */\n\nexport function failWriteValidation(message: string): never {\n  writeJsonEnvelope({ ok: false, error: { code: \"VALIDATION_ERROR\", message } });\n  process.exit(1);\n}\n\nexport function requireCustomerId(args: Record<string, unknown>): string {\n  const given = (args[\"customer-id\"] ?? args.customerId) as string | undefined;\n  const raw = given === undefined ? undefined : bareCustomerId(String(given));\n  if (!raw || !/^\\d{10}$/.test(raw)) {\n    failWriteValidation(\"pass --customer-id as the 10-digit Google Ads customer id (386-508-3115 or 3865083115)\");\n  }\n  return raw;\n}\n\nexport function requireTarget(args: Record<string, unknown>, entity: string): string {\n  // `--flag false` is refused, not documented: citty parses it as the flag set to TRUE plus a stray\n  // positional nobody consumes, so on `conversions update --primary` it silently PROMOTES an action\n  // into what every Maximize Conversions campaign bids toward. Caught here because this is the only\n  // place on this surface that reads positionals, and every target-taking command goes through it.\n  const booleanWord = booleanWordPositionalError(args, entity);\n  if (booleanWord) {\n    failWriteValidation(booleanWord);\n  }\n  const positional = Array.isArray(args._) ? args._[0] : undefined;\n  const target = args.id ?? args.target ?? args.ref ?? positional;\n  if (typeof target !== \"string\" || target.length === 0) {\n    failWriteValidation(`pass the ${entity} resource name or id as the positional argument`);\n  }\n  return target;\n}\n\n/**\n * The targets a bulk status command was given: every positional (comma-separated ones split), plus\n * `--file` with one target per line (blank lines and `#` comments skipped), deduped in order. One\n * call then stages them all as one batch instead of one command per row.\n */\nexport function targetEntries(args: Record<string, unknown>, entity: string): string[] {\n  const booleanWord = booleanWordPositionalError(args, entity);\n  if (booleanWord) {\n    failWriteValidation(booleanWord);\n  }\n  const positionals = Array.isArray(args._) ? args._.filter((v): v is string => typeof v === \"string\") : [];\n  const raw = [...positionals.flatMap((v) => v.split(\",\")), ...rawFileEntries(args.file)]\n    .map((v) => v.trim())\n    .filter(Boolean);\n  const targets = [...new Set(raw)];\n  if (targets.length === 0) {\n    failWriteValidation(`pass the ${entity} resource name(s) as positional arguments and/or --file (one per line)`);\n  }\n  if (targets.length > GOOGLE_DRAFT_BATCH_MAX) {\n    failWriteValidation(`${targets.length} targets exceeds the batch limit of ${GOOGLE_DRAFT_BATCH_MAX} — split them`);\n  }\n  return targets;\n}\n\nexport function requireStringFlag(value: unknown, flag: string): string {\n  if (typeof value !== \"string\" || value.length === 0) {\n    failWriteValidation(`${flag} is required`);\n  }\n  return value;\n}\n\n/** Money flag in major currency units → micros. */\nexport function microsFlag(value: unknown, flag: string): number | undefined {\n  if (value === undefined || value === null || value === \"\") {\n    return undefined;\n  }\n  const num = Number(value);\n  if (Number.isNaN(num) || num <= 0) {\n    failWriteValidation(`${flag} must be a positive amount (major currency units, e.g. 50 or 50.00)`);\n  }\n  return toMicros(num);\n}\n\n/** Split a comma-separated flag into trimmed non-empty values. */\nexport function listFlag(value: unknown): string[] | undefined {\n  if (typeof value !== \"string\" || value.length === 0) {\n    return undefined;\n  }\n  const items = value\n    .split(\",\")\n    .map((v) => v.trim())\n    .filter(Boolean);\n  return items.length > 0 ? items : undefined;\n}\n\nexport interface KeywordEntry {\n  text: string;\n  matchType: string;\n}\n\nconst MATCH_TYPES = new Set([\"EXACT\", \"PHRASE\", \"BROAD\"]);\n\n/**\n * One raw keyword entry → { text, matchType }. A trailing `:EXACT|:PHRASE|:BROAD`\n * suffix overrides the default match type; colons and commas aren't legal in Google\n * keyword text, so the syntax is unambiguous.\n */\nfunction parseKeywordEntry(raw: string, defaultMatch: string | undefined): KeywordEntry {\n  const colon = raw.lastIndexOf(\":\");\n  if (colon > 0) {\n    const suffix = raw\n      .slice(colon + 1)\n      .trim()\n      .toUpperCase();\n    if (MATCH_TYPES.has(suffix)) {\n      return { text: raw.slice(0, colon).trim(), matchType: suffix };\n    }\n    failWriteValidation(`\"${raw}\": \":${raw.slice(colon + 1)}\" is not a match type (EXACT | PHRASE | BROAD)`);\n  }\n  if (!defaultMatch) {\n    failWriteValidation(`\"${raw}\" has no match type — add a :EXACT/:PHRASE/:BROAD suffix or pass --match-type`);\n  }\n  return { text: raw, matchType: defaultMatch };\n}\n\n/**\n * Raw --text value(s) → individual entries: repeated flags and comma-separated\n * both work. The repeats have to come off `rawArgs`, because citty parses a\n * repeated flag down to its last value alone.\n */\nfunction rawTextEntries(value: unknown, rawArgs: readonly string[] | undefined): string[] {\n  return repeatedValues(rawArgs, \"text\", value)\n    .flatMap((v) => v.split(\",\"))\n    .map((v) => v.trim())\n    .filter(Boolean);\n}\n\n/** Newline-separated keyword file: one `text[:MATCH_TYPE]` per line; blank lines and `#` comments skipped. */\nfunction rawFileEntries(path: unknown): string[] {\n  return typeof path === \"string\" && path.length > 0 ? fileLines(path) : [];\n}\n\n/** A text file's entries: one per line, trimmed; blank lines and `#` comments skipped. */\nexport function fileLines(path: string): string[] {\n  return readFileSync(path, \"utf8\")\n    .split(/\\r?\\n/)\n    .map((line) => line.trim())\n    .filter((line) => line.length > 0 && !line.startsWith(\"#\"));\n}\n\n/**\n * The keyword batch a command was invoked with: comma-separated `--text` entries\n * (optional `:MATCH_TYPE` suffix each) plus `--file` lines, deduped, each falling\n * back to `--match-type`. One entry stages exactly like before; many stage as one batch.\n */\nexport function keywordEntries(args: Record<string, unknown>, rawArgs?: readonly string[]): KeywordEntry[] {\n  const defaultMatch = typeof args[\"match-type\"] === \"string\" ? args[\"match-type\"].toUpperCase() : undefined;\n  const raw = [...rawTextEntries(args.text, rawArgs), ...rawFileEntries(args.file)];\n  if (raw.length === 0) {\n    failWriteValidation(\"pass keywords via --text (comma-separated) and/or --file (one per line)\");\n  }\n  if (raw.length > GOOGLE_DRAFT_BATCH_MAX) {\n    failWriteValidation(`${raw.length} keywords exceeds the batch limit of ${GOOGLE_DRAFT_BATCH_MAX}`);\n  }\n  const entries: KeywordEntry[] = [];\n  const seen = new Set<string>();\n  for (const item of raw) {\n    const entry = parseKeywordEntry(item, defaultMatch);\n    const key = JSON.stringify([entry.text, entry.matchType]);\n    if (!seen.has(key)) {\n      seen.add(key);\n      entries.push(entry);\n    }\n  }\n  return entries;\n}\n\n/**\n * The payloads behind `--file`: a path to a JSON file, or the JSON written inline. The file holds one\n * payload object, a JSON array of them, or JSON Lines (one object per line) — many payloads stage as\n * one batch, which is how a bulk change lands in one call instead of hundreds.\n *\n * Inline is here because every doc example already writes it that way — `packages/cli/README.md`\n * and the scaffold's `ads-google.md` both show `--file '{\"type\":\"image\",…}'` — while the arg only\n * ever read a path, so following the documentation answered with a raw ENOENT stack trace. Reading\n * a leading `{` or `[` as the payload makes those examples true rather than making the agent re-learn\n * the one shape that works.\n */\nexport function loadJsonPayloads(path: unknown): Array<Record<string, unknown>> {\n  if (typeof path !== \"string\" || path.length === 0) {\n    return [];\n  }\n  const inline = /^\\s*[[{]/.test(path);\n  const source = inline ? \"inline JSON\" : path;\n  const text = inline ? path : readFileSync(path, \"utf8\");\n  return parsedPayloads(text, source).map((item, index, all) => {\n    if (item === null || typeof item !== \"object\" || Array.isArray(item)) {\n      failWriteValidation(\n        all.length === 1 ? `${source} must contain a JSON object` : `${source}: item ${index} must be a JSON object`,\n      );\n    }\n    return item as Record<string, unknown>;\n  });\n}\n\n/** One JSON value (an array spreads into its items), else JSON Lines; the JSON error when neither parses. */\nfunction parsedPayloads(text: string, source: string): unknown[] {\n  try {\n    const parsed = JSON.parse(text) as unknown;\n    return Array.isArray(parsed) ? parsed : [parsed];\n  } catch (err) {\n    if (!(err instanceof SyntaxError)) {\n      throw err;\n    }\n    const lines = text.split(/\\r?\\n/).filter((line) => line.trim().length > 0);\n    if (lines.length > 1) {\n      return lines.map((line, index) => parseJsonLine(line, index, source));\n    }\n    failWriteValidation(`${source} is not valid JSON: ${err.message}`);\n  }\n}\n\n/** One JSON Lines entry, or the line's own error naming where it is. */\nfunction parseJsonLine(line: string, index: number, source: string): unknown {\n  try {\n    return JSON.parse(line) as unknown;\n  } catch (err) {\n    return failWriteValidation(\n      `${source} line ${index + 1} is not valid JSON: ${err instanceof Error ? err.message : String(err)}`,\n    );\n  }\n}\n\n/** The ONE op payload behind `--file`, for commands that change a single entity. */\nexport function loadJsonFileArg(path: unknown): Record<string, unknown> {\n  const payloads = loadJsonPayloads(path);\n  if (payloads.length > 1) {\n    failWriteValidation(\n      `this command changes one entity, and --file holds ${payloads.length} payloads — stage many changes from one file with \\`baker ads google draft stage --file\\` (one op per item: {\"kind\",\"customerId\",\"target\"?,\"payload\"?})`,\n    );\n  }\n  return payloads[0] ?? {};\n}\n\n/** Flags override file keys — the file is the base, flags are the overrides. */\nexport function mergePayload(file: Record<string, unknown>, flags: Record<string, unknown>): Record<string, unknown> {\n  const merged: Record<string, unknown> = { ...file };\n  for (const [key, value] of Object.entries(flags)) {\n    if (value !== undefined) {\n      merged[key] = value;\n    }\n  }\n  return merged;\n}\n\n/**\n * The `draft amend` patch: exactly one of `--file <path>` (JSON file) or `--patch '<json>'`\n * (inline string), and it must parse to a JSON object — RFC-7386 merge-patch needs an object to\n * merge, and a stray array/scalar would silently no-op or replace the whole payload.\n */\nexport function loadPatchArg(args: Record<string, unknown>): Record<string, unknown> {\n  const file = typeof args.file === \"string\" && args.file.length > 0 ? args.file : undefined;\n  const inline = typeof args.patch === \"string\" && args.patch.length > 0 ? args.patch : undefined;\n  if (Boolean(file) === Boolean(inline)) {\n    failWriteValidation(\"pass exactly one of --file <patch.json> or --patch '<json>'\");\n  }\n  if (file) {\n    return loadJsonFileArg(file);\n  }\n  try {\n    const parsed = JSON.parse(inline as string) as unknown;\n    if (parsed === null || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n      failWriteValidation(\"--patch must be a JSON object\");\n    }\n    return parsed as Record<string, unknown>;\n  } catch (err) {\n    if (err instanceof SyntaxError) {\n      failWriteValidation(`--patch is not valid JSON: ${err.message}`);\n    }\n    throw err;\n  }\n}\n\nexport function handleGoogleError(err: unknown): never {\n  if (err instanceof ApiError) {\n    // Covers both \"no connection\" and staging's 403 for an account this company\n    // never connected — same remedy either way: connect, and pick the account.\n    if (isNotConnectedError(err.code, err.message)) {\n      handleConnectionError(\"google_ads\", err.message);\n    }\n    const terms = termsRefusalFix(err.code, err.message);\n    if (terms) {\n      writeJsonEnvelope({\n        ok: false,\n        error: { code: terms.code, message: err.message, retryable: false, fix: terms.fix },\n      });\n      process.exit(1);\n    }\n    if (err.message.includes(OP_TOO_LARGE_MESSAGE_START)) {\n      writeJsonEnvelope({\n        ok: false,\n        error: {\n          code: \"OP_TOO_LARGE\",\n          message: err.message,\n          retryable: false,\n          fix: { action: \"split_the_change\", explanation: OP_TOO_LARGE_FIX },\n        },\n      });\n      process.exit(1);\n    }\n    writeJsonEnvelope({ ok: false, error: { code: err.code ?? \"API_ERROR\", message: err.message } });\n    process.exit(1);\n  }\n  writeJsonEnvelope({\n    ok: false,\n    error: { code: \"UNKNOWN\", message: err instanceof Error ? err.message : String(err) },\n  });\n  process.exit(1);\n}\n\ninterface StageEnvelope extends Record<string, unknown> {\n  ok: true;\n  data: GoogleDraftStageResponse;\n}\n\n/**\n * A no-op response isn't a failure — the change was already in place, so nothing was\n * staged. Say so explicitly, otherwise the agent re-stages it or reports work it\n * didn't do.\n */\nfunction noopHints(data: GoogleDraftStageResponse): string[] {\n  return data.staged\n    ? []\n    : [`NOT STAGED — ${data.reason}. Nothing to publish for this change; say so rather than reporting it as done.`];\n}\n\n/**\n * What to tell the agent about the ops a batch didn't stage.\n *\n * Two different things land in `skipped`: a change already in place, and a change Google refuses\n * outright (editing an experiment campaign's status, dates or budget). This hint used to assert the\n * first — \"already in the requested state\" — which read as \"done\" for a refusal the user never heard\n * about. So it leads with each op's own reason and asks for the refusals to be passed on.\n */\nexport function skippedHints(skipped: Array<{ summary: string; reason: string }>, total: number): string[] {\n  if (skipped.length === 0) {\n    return [];\n  }\n  const detail = skipped.map((s) => `${s.summary} — ${s.reason}`).join(\"; \");\n  return [\n    `${skipped.length} of ${total} op(s) NOT STAGED: ${detail}. Don't re-stage them; tell the user which changes couldn't be made and why, then carry on with the rest.`,\n  ];\n}\n\n/**\n * Preflight-validates the op against the shared `@baker/api/ads-google`\n * contract (the same schema the backend enforces), then stages it. Prints the\n * staged envelope — ref, mode (always `live`: publishing reaches the real\n * account), summary, warnings.\n */\nexport async function stageGoogleOp(raw: Record<string, unknown>, hints?: string[]): Promise<void> {\n  const preflight = googleDraftOpInputSchema.safeParse(raw);\n  if (!preflight.success) {\n    const fields = preflight.error.issues.map((issue) => ({ path: issue.path.join(\".\"), message: issue.message }));\n    writeJsonEnvelope({\n      ok: false,\n      error: {\n        code: \"VALIDATION_ERROR\",\n        message: fields.map((f) => (f.path ? `${f.path}: ${f.message}` : f.message)).join(\"; \"),\n        fields,\n        fix: copyListCountFix(raw, preflight.error.issues) ?? payloadFix(\"google-ads\", googleDraftOpInputSchema, raw),\n      },\n    });\n    process.exit(1);\n  }\n  try {\n    const chatId = requireChatId();\n    const response = await apiPost<StageEnvelope>(\"/api/ads/google/draft/stage\", { chatId, op: preflight.data });\n    const allHints = [\n      ...noopHints(response.data),\n      ...recordSingleStage(chatId, preflight.data.kind),\n      ...(hints ?? []),\n      ...(await adCopyHints(preflight.data)),\n    ];\n    writeJsonEnvelope(withHints(response, allHints));\n  } catch (err) {\n    handleGoogleError(err);\n  }\n}\n\n/** Stage a create op: `{ kind, customerId, payload }`. */\nexport async function stageCreate(\n  kind: string,\n  customerId: string,\n  payload: Record<string, unknown>,\n  hints?: string[],\n): Promise<void> {\n  await stageGoogleOp({ kind, customerId, payload }, hints);\n}\n\ninterface StageBatchEnvelope extends Record<string, unknown> {\n  ok: true;\n  data: GoogleDraftStageBatchResponse;\n}\n\n/**\n * A batch reads every target's before-state and checks each op against the account, which for a few\n * hundred removals outlasts the default 60 s. Timing out early reported a batch as failed that went on\n * to stage, so a retry then collided with the ops it had already staged.\n */\nconst STAGE_BATCH_TIMEOUT_MS = 5 * 60_000;\n\n/**\n * Stage several ops as ONE request (`/stage-batch`) — all-or-nothing on the backend,\n * one rate-limit hit instead of one per keyword. A single op falls through to the\n * plain stage path so its envelope (and amend behavior) stays exactly as before.\n */\nexport async function stageGoogleOps(rawOps: Array<Record<string, unknown>>, hints?: string[]): Promise<void> {\n  if (rawOps.length === 1 && rawOps[0]) {\n    await stageGoogleOp(rawOps[0], hints);\n    return;\n  }\n  const ops: unknown[] = [];\n  for (const [index, raw] of rawOps.entries()) {\n    const preflight = googleDraftOpInputSchema.safeParse(raw);\n    if (!preflight.success) {\n      const fields = preflight.error.issues.map((issue) => ({\n        path: `ops[${index}].${issue.path.join(\".\")}`,\n        message: issue.message,\n      }));\n      writeJsonEnvelope({\n        ok: false,\n        error: {\n          code: \"VALIDATION_ERROR\",\n          message: fields.map((f) => `${f.path}: ${f.message}`).join(\"; \"),\n          fields,\n          fix: copyListCountFix(raw, preflight.error.issues) ?? payloadFix(\"google-ads\", googleDraftOpInputSchema, raw),\n        },\n      });\n      process.exit(1);\n    }\n    ops.push(preflight.data);\n  }\n  try {\n    const chatId = requireChatId();\n    const response = await apiPost<StageBatchEnvelope>(\n      \"/api/ads/google/draft/stage-batch\",\n      { chatId, ops },\n      { timeoutMs: STAGE_BATCH_TIMEOUT_MS },\n    );\n    const allHints = [\n      ...skippedHints(response.data.skipped ?? [], ops.length),\n      ...(hints ?? []),\n      ...(await adCopyHints(ops)),\n    ];\n    writeJsonEnvelope(withHints(response, allHints));\n  } catch (err) {\n    handleGoogleError(err);\n  }\n}\n\n/** Stage an update op: `{ kind, customerId, target, payload }`. */\nexport async function stageUpdate(\n  kind: string,\n  customerId: string,\n  target: string,\n  payload: Record<string, unknown>,\n  hints?: string[],\n): Promise<void> {\n  await stageGoogleOp({ kind, customerId, target, payload }, hints);\n}\n\n/** Stage a target-only op (pause/resume/remove/detach): `{ kind, customerId, target }`. */\nexport async function stageTarget(kind: string, customerId: string, target: string, hints?: string[]): Promise<void> {\n  await stageGoogleOp({ kind, customerId, target }, hints);\n}\n\nexport async function draftAction(path: string, body: Record<string, unknown>, chat?: unknown): Promise<void> {\n  try {\n    const chatId = resolveChatId(chat);\n    const response = await apiPost<Record<string, unknown>>(path, { chatId, ...body });\n    writeJsonEnvelope(response);\n  } catch (err) {\n    handleGoogleError(err);\n  }\n}\n\ninterface DraftListEnvelope extends Record<string, unknown> {\n  ok: boolean;\n  data?: GoogleDraftListResponse;\n}\n\n/**\n * List the staged draft. By default renders a readable campaign ▸ ad group ▸ ad status tree so the\n * agent can review everything it has staged at a glance; `--json` returns the raw envelope for tools,\n * and `--full` that envelope with every op's payload.\n */\nexport async function draftListAction(json: boolean, chat?: unknown, full = false, customerId?: string): Promise<void> {\n  try {\n    const chatId = resolveChatId(chat);\n    const listed = await apiPost<DraftListEnvelope>(\"/api/ads/google/draft\", {\n      chatId,\n      ...(full ? { full: true } : {}),\n    });\n    const inAccount =\n      customerId !== undefined && listed.ok && listed.data ? draftInAccount(listed.data, customerId) : undefined;\n    const response = inAccount ? withHints({ ...listed, data: inAccount.data }, inAccount.hints) : listed;\n    if (json || full || !response.ok || !response.data) {\n      writeJsonEnvelope(response);\n      return;\n    }\n    process.stdout.write(`${inAccount?.empty ?? renderDraftStatus(response.data)}${hintLines(response)}\\n`);\n  } catch (err) {\n    handleGoogleError(err);\n  }\n}\n\nexport const customerIdArg = {\n  \"customer-id\": { type: \"string\" as const, description: \"10-digit Google Ads customer id\" },\n};\n/** The entity a command changes, read by position the way `requireTarget` reads it — declared so --help shows it. */\nexport function targetArg(entity: string) {\n  return {\n    id: {\n      type: \"positional\" as const,\n      description: `The ${entity} to change: its id or resource name (customers/…)`,\n      required: false,\n    },\n  };\n}\n\nconst PAYLOAD_FIELDS = \"run `baker schema` on this command for every field the payload takes\";\n\nfunction payloadShape(kind: string): () => string | undefined {\n  return () => describeOpPayload(googleDraftOpInputSchema, kind);\n}\n\n/** `--file` for a command that stages one `kind` op; `baker schema` prints that op's payload shape. */\nexport function fileArg(kind: string) {\n  return {\n    file: payloadArg(\n      {\n        type: \"string\" as const,\n        description: `The op payload: a JSON file path, or the JSON object inline (flags override it) — ${PAYLOAD_FIELDS}`,\n      },\n      payloadShape(kind),\n    ),\n  };\n}\n\n/** `--file` that stages one or many `kind` ops; `baker schema` prints that op's payload shape. */\nexport function fileBatchArg(kind: string) {\n  return {\n    file: payloadArg(\n      {\n        type: \"string\" as const,\n        description: `The op payload: a JSON file path or inline JSON — one object, or a JSON array / JSON Lines of objects to stage many in one call (up to 500) — ${PAYLOAD_FIELDS}`,\n      },\n      payloadShape(kind),\n    ),\n  };\n}\n\n/** A create command whose payload is a JSON file or inline JSON — one object or an array staged as one batch. */\nexport function fileCreateCommand(\n  name: string,\n  kind: string,\n  description: string,\n  hints?: string[] | ((payload: Record<string, unknown>) => string[]),\n) {\n  return defineCommand({\n    meta: { name, description },\n    args: { ...customerIdArg, ...fileBatchArg(kind) },\n    run: async ({ args }) => {\n      const customerId = requireCustomerId(args);\n      const payloads = loadJsonPayloads(args.file);\n      if (payloads.length === 0 || payloads.some((payload) => Object.keys(payload).length === 0)) {\n        failWriteValidation(`${kind} needs --file with the op payload (one object, or a JSON array to stage many)`);\n      }\n      if (payloads.length > GOOGLE_DRAFT_BATCH_MAX) {\n        failWriteValidation(\n          `${payloads.length} payloads exceeds the batch limit of ${GOOGLE_DRAFT_BATCH_MAX} — split the file`,\n        );\n      }\n      const payloadHints = [\n        ...new Set(payloads.flatMap((payload) => (typeof hints === \"function\" ? hints(payload) : (hints ?? [])))),\n      ];\n      await stageGoogleOps(\n        payloads.map((payload) => ({ kind, customerId, payload })),\n        payloadHints,\n      );\n    },\n  });\n}\n\n/**\n * `--bid-modifier` as a number, validated against the range Google actually accepts.\n *\n * Rejecting the (0, 0.1) gap here rather than at the backend is the point: 0 and 0.1 are a hundredth\n * apart in value and mean \"never serve\" versus \"bid a tenth\", so a typo between them is a real spend\n * decision, and the error should arrive before anything is staged.\n */\nexport function bidModifierFlag(value: unknown): number {\n  if (value === undefined || value === null || value === \"\") {\n    failWriteValidation(\n      \"--bid-modifier is required: 1 for no adjustment, 1.25 to bid 25% more, 0.9 to bid 10% less, 0 to stop serving on a device\",\n    );\n  }\n  const num = Number(value);\n  if (Number.isNaN(num) || num < 0 || num > 10 || (num > 0 && num < 0.1)) {\n    failWriteValidation(\"--bid-modifier must be 0 (stop serving on it) or between 0.1 and 10.0\");\n  }\n  return num;\n}\n","import type { z } from \"zod\";\n\n/** Appended to each copy flag's help, so `--help` and `baker schema` say how to pass a comma. */\nexport const AD_COPY_LIST_USAGE =\n  \"repeat the flag once per item, or pass one comma-separated list and wrap an item that contains a comma in double quotes: '\\\"Fast, free quotes\\\",Book today'. A flag given once is read as a list, so a lone item with a comma needs its double quotes too: '\\\"Fast, free quotes\\\"'\";\n\n/** The op's copy-list fields, by the flag an agent passes them with. */\nconst COPY_LIST_FLAG: Readonly<Record<string, string>> = {\n  headlines: \"--headlines\",\n  descriptions: \"--descriptions\",\n  longHeadlines: \"--long-headlines\",\n};\n\ninterface CountRefusal {\n  flag: string;\n  count: number | undefined;\n  bound: string;\n  tooMany: boolean;\n}\n\nfunction valueAt(root: unknown, path: readonly PropertyKey[]): unknown {\n  let node = root;\n  for (const key of path) {\n    if (node === null || typeof node !== \"object\") return undefined;\n    node = (node as Record<PropertyKey, unknown>)[key];\n  }\n  return node;\n}\n\nfunction countRefusal(op: unknown, issue: z.core.$ZodIssue): CountRefusal | undefined {\n  if ((issue.code !== \"too_big\" && issue.code !== \"too_small\") || issue.origin !== \"array\") return undefined;\n  const flag = COPY_LIST_FLAG[String(issue.path.at(-1))];\n  if (!flag) return undefined;\n  const value = valueAt(op, issue.path);\n  const count = Array.isArray(value) ? value.length : undefined;\n  return issue.code === \"too_big\"\n    ? { flag, count, bound: `at most ${issue.maximum}`, tooMany: true }\n    : { flag, count, bound: `at least ${issue.minimum}`, tooMany: false };\n}\n\n/**\n * The fix for a stage refused only for how many headlines, descriptions or long headlines it has.\n *\n * That is a limit on a field the agent named correctly, so the generic \"read `baker capabilities`,\n * do not guess another field name\" sent it through draft list, schema and --help before it saw the\n * cause. Too many items is usually copy cut at its commas — a flag given once is a comma-separated\n * list, so \"Rated 4,5/5\" becomes two items — which is why that case names the forms that keep a\n * comma. Undefined when anything else was refused too, so the capabilities pointer still covers it.\n */\nexport function copyListCountFix(\n  op: unknown,\n  issues: readonly z.core.$ZodIssue[],\n): { action: string; explanation: string } | undefined {\n  const refusals = issues.map((issue) => countRefusal(op, issue));\n  if (refusals.length === 0 || refusals.some((refusal) => refusal === undefined)) return undefined;\n  const counted = refusals.filter((refusal): refusal is CountRefusal => refusal !== undefined);\n  const limits = counted\n    .map(({ flag, count, bound }) => `${flag} has ${count ?? \"the wrong number of\"} items; this ad takes ${bound}.`)\n    .join(\" \");\n  const commaCause = counted.some((refusal) => refusal.tooMany)\n    ? ' If you meant fewer items, the copy was cut at its commas: a flag given once is read as a comma-separated list, so an item with a comma in it (\"Fast, free quotes\", a decimal like \"4,5/5\") becomes two. To keep a comma, ' +\n      `${AD_COPY_LIST_USAGE} — or put the content in --file as JSON.`\n    : \"\";\n  return {\n    action: \"fix_copy_list_count\",\n    explanation: `${limits}${commaCause} ${commaCause ? \"Otherwise add\" : \"Add\"} or drop items to fit the limit, then stage again; the field names are right.`,\n  };\n}\n","import type {\n  GoogleDraftListResponse,\n  GoogleDraftStatusCollection,\n  GoogleDraftStatusNode,\n} from \"@baker/api/ads-google\";\n\n/**\n * Render the staged Google Ads draft as a readable campaign ▸ ad group ▸ ad tree — the CLI\n * counterpart to the dashboard's Google Ads tab, so an agent can review everything it has staged\n * with one command instead of reading raw JSON. Pure: takes the draft-list response, returns text.\n */\n\nconst OPERATION_LABELS: Record<string, string> = {\n  create: \"Creating\",\n  update: \"Updating\",\n  pause: \"Pausing\",\n  resume: \"Resuming\",\n  remove: \"Removing\",\n};\n\nfunction badge(node: GoogleDraftStatusNode): string {\n  const label = node.operation ? OPERATION_LABELS[node.operation] : undefined;\n  if (label) {\n    return label;\n  }\n  return node.existing ? \"on Google Ads\" : \"staged\";\n}\n\nfunction collectionLine(collection: GoogleDraftStatusCollection): string | undefined {\n  const parts: string[] = [];\n  if (collection.added > 0) {\n    parts.push(`+${collection.added}`);\n  }\n  if (collection.existing > 0) {\n    parts.push(`${collection.existing} existing`);\n  }\n  if (collection.removed > 0) {\n    parts.push(`-${collection.removed}`);\n  }\n  // Neither an add nor a remove — a member that stays in the set with a changed value (a device's\n  // bid adjustment). Left out, a draft whose only criterion change is one printed no line at all.\n  if ((collection.updated ?? 0) > 0) {\n    parts.push(`~${collection.updated}`);\n  }\n  return parts.length > 0 ? `${collection.label}: ${parts.join(\", \")}` : undefined;\n}\n\n/**\n * Every advertiser account the tree touches. A draft may legitimately span\n * several, and a criterion id is derived from the keyword's text and match type\n * — so the same keyword carries the same id in every account. The account is\n * printed on each node once there is more than one, and left off when there is not.\n */\nfunction accountsInTree(nodes: readonly GoogleDraftStatusNode[]): Set<string> {\n  const accounts = new Set<string>();\n  const walk = (node: GoogleDraftStatusNode): void => {\n    accounts.add(node.customerId);\n    for (const child of node.children) {\n      walk(child);\n    }\n  };\n  for (const node of nodes) {\n    walk(node);\n  }\n  return accounts;\n}\n\nfunction renderNode(node: GoogleDraftStatusNode, depth: number, lines: string[], showAccount: boolean): void {\n  const indent = \"  \".repeat(depth);\n  const account = showAccount ? ` · account ${node.customerId}` : \"\";\n  lines.push(`${indent}• ${node.name} · ${badge(node)}${account}`);\n  for (const warning of node.warnings ?? []) {\n    lines.push(`${indent}    ⚠ ${warning}`);\n  }\n  for (const collection of node.collections) {\n    const line = collectionLine(collection);\n    if (line) {\n      lines.push(`${indent}    ${line}`);\n    }\n  }\n  for (const child of node.children) {\n    renderNode(child, depth + 1, lines, showAccount);\n  }\n}\n\nconst RESOURCE_ENTITIES = new Set([\n  \"sharedSet\",\n  \"biddingStrategy\",\n  \"audience\",\n  \"conversionAction\",\n  \"label\",\n  \"budget\",\n  \"asset\",\n]);\n\nfunction renderSection(title: string, nodes: GoogleDraftStatusNode[], lines: string[], showAccount: boolean): void {\n  if (nodes.length === 0) {\n    return;\n  }\n  lines.push(\"\");\n  lines.push(title);\n  for (const node of nodes) {\n    renderNode(node, 1, lines, showAccount);\n  }\n}\n\nfunction renderAdvisories(data: GoogleDraftListResponse, lines: string[]): void {\n  const advisories = data.advisories ?? [];\n  // Every advisory is phrased as something to settle BEFORE publishing. On a published draft there\n  // is nothing left to settle here, and printing them reads as work still outstanding on this chat.\n  if (advisories.length === 0 || data.status === \"applied\") {\n    return;\n  }\n  lines.push(\"\");\n  // Two kinds of finding share this block: build-out nudges (\"this ad group has one ad\") and\n  // whole-draft coherence findings (\"this campaign will report zero conversions\", \"two of your\n  // campaigns bid on the same keyword\"). The coherence ones come first and cost money, so the\n  // heading no longer frames the block as optional polish.\n  lines.push(\"Advisories (non-blocking, checked across the whole draft — settle these before you publish)\");\n  for (const advisory of advisories) {\n    lines.push(`  • ${advisory.message}`);\n  }\n}\n\n/**\n * What the publish did, once there is a publish to report.\n *\n * A published Google Ads draft rendered exactly like a staged one — same count, every op still\n * reading \"Creating\" — so the surface `.claude/rules/cli-env.md` sends an agent to for the outcome\n * could not answer, and a failed op was invisible in the human output while sitting in the JSON\n * envelope the whole time. Found by publishing a BUSINESS_LOGO link that Google refused with\n * \"Customer is not verified\": the draft still read \"4 staged changes\". LinkedIn fixed the same\n * shape first; this is its counterpart.\n */\nfunction renderOutcome(data: GoogleDraftListResponse, lines: string[]): void {\n  const counts = new Map<string, number>();\n  for (const op of data.ops) {\n    const status = op.result?.status ?? \"pending\";\n    counts.set(status, (counts.get(status) ?? 0) + 1);\n  }\n  const summary = [...counts].map(([status, count]) => `${count} ${status}`).join(\", \");\n  lines.push(`Google Ads — published · ${summary || `${data.count} op(s)`} · ${data.mode}`);\n  // A failure is the reason to read this at all, so it is named with its error rather than left as\n  // a number to go and look up.\n  for (const op of data.ops) {\n    const status = op.result?.status;\n    if (status !== \"failed\" && status !== \"skipped\") {\n      continue;\n    }\n    const reason = op.result?.error ?? op.result?.skippedBecause ?? \"no reason recorded\";\n    lines.push(`  ✗ ${op.summary} — ${status}: ${reason}`);\n  }\n}\n\nexport function renderDraftStatus(data: GoogleDraftListResponse): string {\n  if (data.status === \"none\" || data.count === 0) {\n    return \"No staged Google Ads changes on this chat.\";\n  }\n  const modeNote =\n    data.mode === \"live\"\n      ? \"Live — publishing writes directly to Google Ads.\"\n      : \"Simulated — publishing completes the whole draft without calling Google Ads.\";\n  const lines: string[] = [];\n  if (data.status === \"applied\") {\n    renderOutcome(data, lines);\n  } else if (data.status === \"publishing\") {\n    lines.push(`Google Ads — publishing ${data.count} change${data.count === 1 ? \"\" : \"s\"} · ${data.mode}`);\n  } else {\n    lines.push(`Google Ads — ${data.count} staged change${data.count === 1 ? \"\" : \"s\"} · ${data.mode}`);\n  }\n  lines.push(modeNote);\n\n  const tree = data.tree ?? [];\n  const showAccount = accountsInTree(tree).size > 1;\n  renderSection(\n    \"Shared resources\",\n    tree.filter((node) => RESOURCE_ENTITIES.has(node.entity)),\n    lines,\n    showAccount,\n  );\n  renderSection(\n    \"Campaigns\",\n    tree.filter((node) => node.entity === \"campaign\"),\n    lines,\n    showAccount,\n  );\n  const rest = tree.filter((node) => !RESOURCE_ENTITIES.has(node.entity) && node.entity !== \"campaign\");\n  renderSection(\"Other\", rest, lines, showAccount);\n  renderAdvisories(data, lines);\n\n  return lines.join(\"\\n\");\n}\n","import { cacheGet, cacheSet } from \"../cache.ts\";\n\n/**\n * Bulk work done as a loop of single commands — one `keywords update` per keyword, one\n * `negative-keywords remove` per term — is one request, one rate-limit hit and one tool call per row;\n * production saw 1,284 of them. The CLI cannot see the loop from inside one call, so it remembers the\n * last few single stages per chat and, once the same kind repeats, says how to do the rest in one call.\n */\n\nexport interface StageStreak {\n  kind: string;\n  count: number;\n  lastAt: number;\n}\n\n/** Singles further apart than this are separate decisions, not a loop. */\nconst STREAK_WINDOW_MS = 5 * 60_000;\n/** The streak length that reads as a loop. */\nconst STREAK_THRESHOLD = 5;\n\nexport function nextStageStreak(previous: StageStreak | undefined, kind: string, now: number): StageStreak {\n  const continues = previous && previous.kind === kind && now - previous.lastAt <= STREAK_WINDOW_MS;\n  return { kind, count: continues ? previous.count + 1 : 1, lastAt: now };\n}\n\n/** The one-call form of a kind, where a command has one beside `draft stage --file`. */\nconst BATCH_FORMS: Record<string, string> = {\n  \"google.keyword.add\": \"`keywords add --file keywords.txt` (one term[:MATCH_TYPE] per line)\",\n  \"google.keyword.update\":\n    \"`keywords pause|resume <resource name> <resource name>…` (or --file, one per line) for status\",\n  \"google.keyword.remove\": \"`draft stage --file` with one google.keyword.remove per target\",\n  \"google.negativeKeyword.add\": \"`negative-keywords add --file terms.txt`\",\n  \"google.sharedSetMember.add\": \"`keyword-lists add --file terms.txt`\",\n  \"google.sharedSetMember.remove\": '`keyword-lists remove --list-ref <id> --text \"a,b,c\"`',\n};\n\nexport function stageStreakHints(streak: StageStreak): string[] {\n  if (streak.count < STREAK_THRESHOLD) {\n    return [];\n  }\n  const form = BATCH_FORMS[streak.kind];\n  return [\n    `LOOP: that is ${streak.count} ${streak.kind} ops staged one command at a time. Stop looping — put every remaining change in one file and stage them in ONE call: \\`baker ads google draft stage --file ops.json --customer-id <id>\\` (a JSON array of {\"kind\",\"target\"?,\"payload\"?}, up to 500, any mix of kinds)${form ? `, or ${form}` : \"\"}. Fix staged ops together with \\`draft amend --file\\`.`,\n  ];\n}\n\nconst STREAK_CACHE = \"stage-streak\";\n\n/** Record one single stage on this chat and return the nudge it earns, if any. Never throws. */\nexport function recordSingleStage(chatId: string, kind: string): string[] {\n  try {\n    const streak = nextStageStreak(cacheGet<StageStreak>(STREAK_CACHE, chatId)?.data, kind, Date.now());\n    cacheSet(STREAK_CACHE, chatId, streak, STREAK_WINDOW_MS);\n    return stageStreakHints(streak);\n  } catch {\n    return [];\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,SAAS,QAAQ,GAAW,QAAyB;AACnD,QAAM,OAAO,SAAS,kBAAkB;AACxC,SAAO,MAAM,IAAI,KAAK,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI;AAC7C;AAOO,SAAS,eACd,MACA,YACoE;AACpE,QAAM,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,GAAG,eAAe,UAAU;AAChE,QAAM,WAAW;AAAA,IACf,GAAG;AAAA,IACH,OAAO,IAAI;AAAA,IACX;AAAA,IACA,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,OAAO,CAAC,SAAS,KAAK,eAAe,UAAU,EAAE,IAAI,CAAC;AAAA,EAC1F;AACA,QAAM,SAAS,KAAK,IAAI,OAAO,CAAC,OAAO,GAAG,eAAe,UAAU;AACnE,MAAI,OAAO,WAAW,EAAG,QAAO,EAAE,MAAM,UAAU,OAAO,CAAC,EAAE;AAC5D,QAAM,SAAS,KAAK,WAAW;AAC/B,QAAM,WAAW,CAAC,GAAG,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,CAAC;AAC/D,QAAM,QAAQ,UAAU,SAAS,WAAW,IAAI,KAAK,GAAG,IAAI,SAAS,KAAK,IAAI,CAAC;AAC/E,QAAM,MAAM,OAAO,WAAW;AAC9B,MAAI,IAAI,WAAW,GAAG;AACpB,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO,oCAAoC,UAAU;AAAA,MACrD,OAAO,CAAC,eAAe,QAAQ,OAAO,QAAQ,MAAM,CAAC,IAAI,MAAM,OAAO,KAAK,OAAO,KAAK,SAAS,UAAU,GAAG;AAAA,IAC/G;AAAA,EACF;AACA,QAAM,OAAO,GAAG,OAAO,MAAM,SAAS,SAAS,YAAY,EAAE,SAAS,MAAM,KAAK,GAAG;AACpF,QAAM,OAAO,SAAU,MAAM,cAAc,YAAa,MAAM,OAAO;AACrE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,MACL,mBAAmB,UAAU,UAAU,IAAI,OAAO,KAAK,IAAI,IAAI,IAAI,SAAS,uBAAuB,kBAAkB,iEAAiE,MAAM,OAAO,MAAM;AAAA,IAC3M;AAAA,EACF;AACF;AAGO,SAAS,oBAAoB,YAA4B;AAC9D,SAAO,uDAAuD,UAAU;AAC1E;AAGO,SAAS,gBAAgB,YAAoB,cAA0C;AAC5F,SAAO,iBAAiB,aAAa,SAAY,gCAAgC,YAAY,SAAS,UAAU;AAClH;;;AC7DA,SAAS,oBAAoB;AAY7B,SAAS,qBAAqB;;;ACTvB,IAAM,qBACX;AAGF,IAAM,iBAAmD;AAAA,EACvD,WAAW;AAAA,EACX,cAAc;AAAA,EACd,eAAe;AACjB;AASA,SAAS,QAAQ,MAAe,MAAuC;AACrE,MAAI,OAAO;AACX,aAAW,OAAO,MAAM;AACtB,QAAI,SAAS,QAAQ,OAAO,SAAS,SAAU,QAAO;AACtD,WAAQ,KAAsC,GAAG;AAAA,EACnD;AACA,SAAO;AACT;AAEA,SAAS,aAAa,IAAa,OAAmD;AACpF,MAAK,MAAM,SAAS,aAAa,MAAM,SAAS,eAAgB,MAAM,WAAW,QAAS,QAAO;AACjG,QAAM,OAAO,eAAe,OAAO,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC;AACrD,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,QAAQ,QAAQ,IAAI,MAAM,IAAI;AACpC,QAAM,QAAQ,MAAM,QAAQ,KAAK,IAAI,MAAM,SAAS;AACpD,SAAO,MAAM,SAAS,YAClB,EAAE,MAAM,OAAO,OAAO,WAAW,MAAM,OAAO,IAAI,SAAS,KAAK,IAChE,EAAE,MAAM,OAAO,OAAO,YAAY,MAAM,OAAO,IAAI,SAAS,MAAM;AACxE;AAWO,SAAS,iBACd,IACA,QACqD;AACrD,QAAM,WAAW,OAAO,IAAI,CAAC,UAAU,aAAa,IAAI,KAAK,CAAC;AAC9D,MAAI,SAAS,WAAW,KAAK,SAAS,KAAK,CAAC,YAAY,YAAY,MAAS,EAAG,QAAO;AACvF,QAAM,UAAU,SAAS,OAAO,CAAC,YAAqC,YAAY,MAAS;AAC3F,QAAM,SAAS,QACZ,IAAI,CAAC,EAAE,MAAM,OAAO,MAAM,MAAM,GAAG,IAAI,QAAQ,SAAS,qBAAqB,yBAAyB,KAAK,GAAG,EAC9G,KAAK,GAAG;AACX,QAAM,aAAa,QAAQ,KAAK,CAAC,YAAY,QAAQ,OAAO,IACxD,6NACG,kBAAkB,kDACrB;AACJ,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,aAAa,GAAG,MAAM,GAAG,UAAU,IAAI,aAAa,kBAAkB,KAAK;AAAA,EAC7E;AACF;;;ACvDA,IAAM,mBAA2C;AAAA,EAC/C,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,QAAQ;AACV;AAEA,SAAS,MAAM,MAAqC;AAClD,QAAM,QAAQ,KAAK,YAAY,iBAAiB,KAAK,SAAS,IAAI;AAClE,MAAI,OAAO;AACT,WAAO;AAAA,EACT;AACA,SAAO,KAAK,WAAW,kBAAkB;AAC3C;AAEA,SAAS,eAAe,YAA6D;AACnF,QAAM,QAAkB,CAAC;AACzB,MAAI,WAAW,QAAQ,GAAG;AACxB,UAAM,KAAK,IAAI,WAAW,KAAK,EAAE;AAAA,EACnC;AACA,MAAI,WAAW,WAAW,GAAG;AAC3B,UAAM,KAAK,GAAG,WAAW,QAAQ,WAAW;AAAA,EAC9C;AACA,MAAI,WAAW,UAAU,GAAG;AAC1B,UAAM,KAAK,IAAI,WAAW,OAAO,EAAE;AAAA,EACrC;AAGA,OAAK,WAAW,WAAW,KAAK,GAAG;AACjC,UAAM,KAAK,IAAI,WAAW,OAAO,EAAE;AAAA,EACrC;AACA,SAAO,MAAM,SAAS,IAAI,GAAG,WAAW,KAAK,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK;AACzE;AAQA,SAAS,eAAe,OAAsD;AAC5E,QAAM,WAAW,oBAAI,IAAY;AACjC,QAAM,OAAO,CAAC,SAAsC;AAClD,aAAS,IAAI,KAAK,UAAU;AAC5B,eAAW,SAAS,KAAK,UAAU;AACjC,WAAK,KAAK;AAAA,IACZ;AAAA,EACF;AACA,aAAW,QAAQ,OAAO;AACxB,SAAK,IAAI;AAAA,EACX;AACA,SAAO;AACT;AAEA,SAAS,WAAW,MAA6B,OAAe,OAAiB,aAA4B;AAC3G,QAAM,SAAS,KAAK,OAAO,KAAK;AAChC,QAAM,UAAU,cAAc,iBAAc,KAAK,UAAU,KAAK;AAChE,QAAM,KAAK,GAAG,MAAM,UAAK,KAAK,IAAI,SAAM,MAAM,IAAI,CAAC,GAAG,OAAO,EAAE;AAC/D,aAAW,WAAW,KAAK,YAAY,CAAC,GAAG;AACzC,UAAM,KAAK,GAAG,MAAM,cAAS,OAAO,EAAE;AAAA,EACxC;AACA,aAAW,cAAc,KAAK,aAAa;AACzC,UAAM,OAAO,eAAe,UAAU;AACtC,QAAI,MAAM;AACR,YAAM,KAAK,GAAG,MAAM,OAAO,IAAI,EAAE;AAAA,IACnC;AAAA,EACF;AACA,aAAW,SAAS,KAAK,UAAU;AACjC,eAAW,OAAO,QAAQ,GAAG,OAAO,WAAW;AAAA,EACjD;AACF;AAEA,IAAM,oBAAoB,oBAAI,IAAI;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,cAAc,OAAe,OAAgC,OAAiB,aAA4B;AACjH,MAAI,MAAM,WAAW,GAAG;AACtB;AAAA,EACF;AACA,QAAM,KAAK,EAAE;AACb,QAAM,KAAK,KAAK;AAChB,aAAW,QAAQ,OAAO;AACxB,eAAW,MAAM,GAAG,OAAO,WAAW;AAAA,EACxC;AACF;AAEA,SAAS,iBAAiB,MAA+B,OAAuB;AAC9E,QAAM,aAAa,KAAK,cAAc,CAAC;AAGvC,MAAI,WAAW,WAAW,KAAK,KAAK,WAAW,WAAW;AACxD;AAAA,EACF;AACA,QAAM,KAAK,EAAE;AAKb,QAAM,KAAK,kGAA6F;AACxG,aAAW,YAAY,YAAY;AACjC,UAAM,KAAK,YAAO,SAAS,OAAO,EAAE;AAAA,EACtC;AACF;AAYA,SAAS,cAAc,MAA+B,OAAuB;AAC3E,QAAM,SAAS,oBAAI,IAAoB;AACvC,aAAW,MAAM,KAAK,KAAK;AACzB,UAAM,SAAS,GAAG,QAAQ,UAAU;AACpC,WAAO,IAAI,SAAS,OAAO,IAAI,MAAM,KAAK,KAAK,CAAC;AAAA,EAClD;AACA,QAAM,UAAU,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,GAAG,KAAK,IAAI,MAAM,EAAE,EAAE,KAAK,IAAI;AACpF,QAAM,KAAK,oCAA4B,WAAW,GAAG,KAAK,KAAK,QAAQ,SAAM,KAAK,IAAI,EAAE;AAGxF,aAAW,MAAM,KAAK,KAAK;AACzB,UAAM,SAAS,GAAG,QAAQ;AAC1B,QAAI,WAAW,YAAY,WAAW,WAAW;AAC/C;AAAA,IACF;AACA,UAAM,SAAS,GAAG,QAAQ,SAAS,GAAG,QAAQ,kBAAkB;AAChE,UAAM,KAAK,YAAO,GAAG,OAAO,WAAM,MAAM,KAAK,MAAM,EAAE;AAAA,EACvD;AACF;AAEO,SAAS,kBAAkB,MAAuC;AACvE,MAAI,KAAK,WAAW,UAAU,KAAK,UAAU,GAAG;AAC9C,WAAO;AAAA,EACT;AACA,QAAM,WACJ,KAAK,SAAS,SACV,0DACA;AACN,QAAM,QAAkB,CAAC;AACzB,MAAI,KAAK,WAAW,WAAW;AAC7B,kBAAc,MAAM,KAAK;AAAA,EAC3B,WAAW,KAAK,WAAW,cAAc;AACvC,UAAM,KAAK,gCAA2B,KAAK,KAAK,UAAU,KAAK,UAAU,IAAI,KAAK,GAAG,SAAM,KAAK,IAAI,EAAE;AAAA,EACxG,OAAO;AACL,UAAM,KAAK,qBAAgB,KAAK,KAAK,iBAAiB,KAAK,UAAU,IAAI,KAAK,GAAG,SAAM,KAAK,IAAI,EAAE;AAAA,EACpG;AACA,QAAM,KAAK,QAAQ;AAEnB,QAAM,OAAO,KAAK,QAAQ,CAAC;AAC3B,QAAM,cAAc,eAAe,IAAI,EAAE,OAAO;AAChD;AAAA,IACE;AAAA,IACA,KAAK,OAAO,CAAC,SAAS,kBAAkB,IAAI,KAAK,MAAM,CAAC;AAAA,IACxD;AAAA,IACA;AAAA,EACF;AACA;AAAA,IACE;AAAA,IACA,KAAK,OAAO,CAAC,SAAS,KAAK,WAAW,UAAU;AAAA,IAChD;AAAA,IACA;AAAA,EACF;AACA,QAAM,OAAO,KAAK,OAAO,CAAC,SAAS,CAAC,kBAAkB,IAAI,KAAK,MAAM,KAAK,KAAK,WAAW,UAAU;AACpG,gBAAc,SAAS,MAAM,OAAO,WAAW;AAC/C,mBAAiB,MAAM,KAAK;AAE5B,SAAO,MAAM,KAAK,IAAI;AACxB;;;AC/KA,IAAM,mBAAmB,IAAI;AAE7B,IAAM,mBAAmB;AAElB,SAAS,gBAAgB,UAAmC,MAAc,KAA0B;AACzG,QAAM,YAAY,YAAY,SAAS,SAAS,QAAQ,MAAM,SAAS,UAAU;AACjF,SAAO,EAAE,MAAM,OAAO,YAAY,SAAS,QAAQ,IAAI,GAAG,QAAQ,IAAI;AACxE;AAGA,IAAM,cAAsC;AAAA,EAC1C,sBAAsB;AAAA,EACtB,yBACE;AAAA,EACF,yBAAyB;AAAA,EACzB,8BAA8B;AAAA,EAC9B,8BAA8B;AAAA,EAC9B,iCAAiC;AACnC;AAEO,SAAS,iBAAiB,QAA+B;AAC9D,MAAI,OAAO,QAAQ,kBAAkB;AACnC,WAAO,CAAC;AAAA,EACV;AACA,QAAM,OAAO,YAAY,OAAO,IAAI;AACpC,SAAO;AAAA,IACL,iBAAiB,OAAO,KAAK,IAAI,OAAO,IAAI,6QAAwQ,OAAO,QAAQ,IAAI,KAAK,EAAE;AAAA,EAChV;AACF;AAEA,IAAM,eAAe;AAGd,SAAS,kBAAkB,QAAgB,MAAwB;AACxE,MAAI;AACF,UAAM,SAAS,gBAAgB,SAAsB,cAAc,MAAM,GAAG,MAAM,MAAM,KAAK,IAAI,CAAC;AAClG,aAAS,cAAc,QAAQ,QAAQ,gBAAgB;AACvD,WAAO,iBAAiB,MAAM;AAAA,EAChC,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;;;AHlBO,SAAS,oBAAoB,SAAwB;AAC1D,oBAAkB,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,oBAAoB,QAAQ,EAAE,CAAC;AAC7E,UAAQ,KAAK,CAAC;AAChB;AAEO,SAAS,kBAAkB,MAAuC;AACvE,QAAM,QAAS,KAAK,aAAa,KAAK,KAAK;AAC3C,QAAM,MAAM,UAAU,SAAY,SAAY,eAAe,OAAO,KAAK,CAAC;AAC1E,MAAI,CAAC,OAAO,CAAC,WAAW,KAAK,GAAG,GAAG;AACjC,wBAAoB,wFAAwF;AAAA,EAC9G;AACA,SAAO;AACT;AAEO,SAAS,cAAc,MAA+B,QAAwB;AAKnF,QAAM,cAAc,2BAA2B,MAAM,MAAM;AAC3D,MAAI,aAAa;AACf,wBAAoB,WAAW;AAAA,EACjC;AACA,QAAM,aAAa,MAAM,QAAQ,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI;AACvD,QAAM,SAAS,KAAK,MAAM,KAAK,UAAU,KAAK,OAAO;AACrD,MAAI,OAAO,WAAW,YAAY,OAAO,WAAW,GAAG;AACrD,wBAAoB,YAAY,MAAM,iDAAiD;AAAA,EACzF;AACA,SAAO;AACT;AAOO,SAAS,cAAc,MAA+B,QAA0B;AACrF,QAAM,cAAc,2BAA2B,MAAM,MAAM;AAC3D,MAAI,aAAa;AACf,wBAAoB,WAAW;AAAA,EACjC;AACA,QAAM,cAAc,MAAM,QAAQ,KAAK,CAAC,IAAI,KAAK,EAAE,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,IAAI,CAAC;AACxG,QAAM,MAAM,CAAC,GAAG,YAAY,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,GAAG,GAAG,eAAe,KAAK,IAAI,CAAC,EACnF,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACjB,QAAM,UAAU,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC;AAChC,MAAI,QAAQ,WAAW,GAAG;AACxB,wBAAoB,YAAY,MAAM,wEAAwE;AAAA,EAChH;AACA,MAAI,QAAQ,SAAS,wBAAwB;AAC3C,wBAAoB,GAAG,QAAQ,MAAM,uCAAuC,sBAAsB,oBAAe;AAAA,EACnH;AACA,SAAO;AACT;AAEO,SAAS,kBAAkB,OAAgB,MAAsB;AACtE,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACnD,wBAAoB,GAAG,IAAI,cAAc;AAAA,EAC3C;AACA,SAAO;AACT;AAGO,SAAS,WAAW,OAAgB,MAAkC;AAC3E,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,IAAI;AACzD,WAAO;AAAA,EACT;AACA,QAAM,MAAM,OAAO,KAAK;AACxB,MAAI,OAAO,MAAM,GAAG,KAAK,OAAO,GAAG;AACjC,wBAAoB,GAAG,IAAI,qEAAqE;AAAA,EAClG;AACA,SAAO,SAAS,GAAG;AACrB;AAGO,SAAS,SAAS,OAAsC;AAC7D,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACnD,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,MACX,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACjB,SAAO,MAAM,SAAS,IAAI,QAAQ;AACpC;AAOA,IAAM,cAAc,oBAAI,IAAI,CAAC,SAAS,UAAU,OAAO,CAAC;AAOxD,SAAS,kBAAkB,KAAa,cAAgD;AACtF,QAAM,QAAQ,IAAI,YAAY,GAAG;AACjC,MAAI,QAAQ,GAAG;AACb,UAAM,SAAS,IACZ,MAAM,QAAQ,CAAC,EACf,KAAK,EACL,YAAY;AACf,QAAI,YAAY,IAAI,MAAM,GAAG;AAC3B,aAAO,EAAE,MAAM,IAAI,MAAM,GAAG,KAAK,EAAE,KAAK,GAAG,WAAW,OAAO;AAAA,IAC/D;AACA,wBAAoB,IAAI,GAAG,QAAQ,IAAI,MAAM,QAAQ,CAAC,CAAC,gDAAgD;AAAA,EACzG;AACA,MAAI,CAAC,cAAc;AACjB,wBAAoB,IAAI,GAAG,oFAA+E;AAAA,EAC5G;AACA,SAAO,EAAE,MAAM,KAAK,WAAW,aAAa;AAC9C;AAOA,SAAS,eAAe,OAAgB,SAAkD;AACxF,SAAO,eAAe,SAAS,QAAQ,KAAK,EACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,EAC3B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACnB;AAGA,SAAS,eAAe,MAAyB;AAC/C,SAAO,OAAO,SAAS,YAAY,KAAK,SAAS,IAAI,UAAU,IAAI,IAAI,CAAC;AAC1E;AAGO,SAAS,UAAU,MAAwB;AAChD,SAAO,aAAa,MAAM,MAAM,EAC7B,MAAM,OAAO,EACb,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,KAAK,SAAS,KAAK,CAAC,KAAK,WAAW,GAAG,CAAC;AAC9D;AAOO,SAAS,eAAe,MAA+B,SAA6C;AACzG,QAAM,eAAe,OAAO,KAAK,YAAY,MAAM,WAAW,KAAK,YAAY,EAAE,YAAY,IAAI;AACjG,QAAM,MAAM,CAAC,GAAG,eAAe,KAAK,MAAM,OAAO,GAAG,GAAG,eAAe,KAAK,IAAI,CAAC;AAChF,MAAI,IAAI,WAAW,GAAG;AACpB,wBAAoB,yEAAyE;AAAA,EAC/F;AACA,MAAI,IAAI,SAAS,wBAAwB;AACvC,wBAAoB,GAAG,IAAI,MAAM,wCAAwC,sBAAsB,EAAE;AAAA,EACnG;AACA,QAAM,UAA0B,CAAC;AACjC,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,QAAQ,KAAK;AACtB,UAAM,QAAQ,kBAAkB,MAAM,YAAY;AAClD,UAAM,MAAM,KAAK,UAAU,CAAC,MAAM,MAAM,MAAM,SAAS,CAAC;AACxD,QAAI,CAAC,KAAK,IAAI,GAAG,GAAG;AAClB,WAAK,IAAI,GAAG;AACZ,cAAQ,KAAK,KAAK;AAAA,IACpB;AAAA,EACF;AACA,SAAO;AACT;AAaO,SAAS,iBAAiB,MAA+C;AAC9E,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG;AACjD,WAAO,CAAC;AAAA,EACV;AACA,QAAM,SAAS,WAAW,KAAK,IAAI;AACnC,QAAM,SAAS,SAAS,gBAAgB;AACxC,QAAM,OAAO,SAAS,OAAO,aAAa,MAAM,MAAM;AACtD,SAAO,eAAe,MAAM,MAAM,EAAE,IAAI,CAAC,MAAM,OAAO,QAAQ;AAC5D,QAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GAAG;AACpE;AAAA,QACE,IAAI,WAAW,IAAI,GAAG,MAAM,gCAAgC,GAAG,MAAM,UAAU,KAAK;AAAA,MACtF;AAAA,IACF;AACA,WAAO;AAAA,EACT,CAAC;AACH;AAGA,SAAS,eAAe,MAAc,QAA2B;AAC/D,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,WAAO,MAAM,QAAQ,MAAM,IAAI,SAAS,CAAC,MAAM;AAAA,EACjD,SAAS,KAAK;AACZ,QAAI,EAAE,eAAe,cAAc;AACjC,YAAM;AAAA,IACR;AACA,UAAM,QAAQ,KAAK,MAAM,OAAO,EAAE,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,SAAS,CAAC;AACzE,QAAI,MAAM,SAAS,GAAG;AACpB,aAAO,MAAM,IAAI,CAAC,MAAM,UAAU,cAAc,MAAM,OAAO,MAAM,CAAC;AAAA,IACtE;AACA,wBAAoB,GAAG,MAAM,uBAAuB,IAAI,OAAO,EAAE;AAAA,EACnE;AACF;AAGA,SAAS,cAAc,MAAc,OAAe,QAAyB;AAC3E,MAAI;AACF,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,GAAG,MAAM,SAAS,QAAQ,CAAC,uBAAuB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IACpG;AAAA,EACF;AACF;AAGO,SAAS,gBAAgB,MAAwC;AACtE,QAAM,WAAW,iBAAiB,IAAI;AACtC,MAAI,SAAS,SAAS,GAAG;AACvB;AAAA,MACE,qDAAqD,SAAS,MAAM;AAAA,IACtE;AAAA,EACF;AACA,SAAO,SAAS,CAAC,KAAK,CAAC;AACzB;AAGO,SAAS,aAAa,MAA+B,OAAyD;AACnH,QAAM,SAAkC,EAAE,GAAG,KAAK;AAClD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,QAAI,UAAU,QAAW;AACvB,aAAO,GAAG,IAAI;AAAA,IAChB;AAAA,EACF;AACA,SAAO;AACT;AAOO,SAAS,aAAa,MAAwD;AACnF,QAAM,OAAO,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,SAAS,IAAI,KAAK,OAAO;AACjF,QAAM,SAAS,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,SAAS,IAAI,KAAK,QAAQ;AACtF,MAAI,QAAQ,IAAI,MAAM,QAAQ,MAAM,GAAG;AACrC,wBAAoB,6DAA6D;AAAA,EACnF;AACA,MAAI,MAAM;AACR,WAAO,gBAAgB,IAAI;AAAA,EAC7B;AACA,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,MAAgB;AAC1C,QAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAC1E,0BAAoB,+BAA+B;AAAA,IACrD;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,eAAe,aAAa;AAC9B,0BAAoB,8BAA8B,IAAI,OAAO,EAAE;AAAA,IACjE;AACA,UAAM;AAAA,EACR;AACF;AAEO,SAAS,kBAAkB,KAAqB;AACrD,MAAI,eAAe,UAAU;AAG3B,QAAI,oBAAoB,IAAI,MAAM,IAAI,OAAO,GAAG;AAC9C,4BAAsB,cAAc,IAAI,OAAO;AAAA,IACjD;AACA,UAAM,QAAQ,gBAAgB,IAAI,MAAM,IAAI,OAAO;AACnD,QAAI,OAAO;AACT,wBAAkB;AAAA,QAChB,IAAI;AAAA,QACJ,OAAO,EAAE,MAAM,MAAM,MAAM,SAAS,IAAI,SAAS,WAAW,OAAO,KAAK,MAAM,IAAI;AAAA,MACpF,CAAC;AACD,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,QAAI,IAAI,QAAQ,SAAS,0BAA0B,GAAG;AACpD,wBAAkB;AAAA,QAChB,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,IAAI;AAAA,UACb,WAAW;AAAA,UACX,KAAK,EAAE,QAAQ,oBAAoB,aAAa,iBAAiB;AAAA,QACnE;AAAA,MACF,CAAC;AACD,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,sBAAkB,EAAE,IAAI,OAAO,OAAO,EAAE,MAAM,IAAI,QAAQ,aAAa,SAAS,IAAI,QAAQ,EAAE,CAAC;AAC/F,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,oBAAkB;AAAA,IAChB,IAAI;AAAA,IACJ,OAAO,EAAE,MAAM,WAAW,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE;AAAA,EACtF,CAAC;AACD,UAAQ,KAAK,CAAC;AAChB;AAYA,SAAS,UAAU,MAA0C;AAC3D,SAAO,KAAK,SACR,CAAC,IACD,CAAC,qBAAgB,KAAK,MAAM,gFAAgF;AAClH;AAUO,SAAS,aAAa,SAAqD,OAAyB;AACzG,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO,CAAC;AAAA,EACV;AACA,QAAM,SAAS,QAAQ,IAAI,CAAC,MAAM,GAAG,EAAE,OAAO,WAAM,EAAE,MAAM,EAAE,EAAE,KAAK,IAAI;AACzE,SAAO;AAAA,IACL,GAAG,QAAQ,MAAM,OAAO,KAAK,sBAAsB,MAAM;AAAA,EAC3D;AACF;AAQA,eAAsB,cAAc,KAA8B,OAAiC;AACjG,QAAM,YAAY,yBAAyB,UAAU,GAAG;AACxD,MAAI,CAAC,UAAU,SAAS;AACtB,UAAM,SAAS,UAAU,MAAM,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,MAAM,KAAK,KAAK,GAAG,GAAG,SAAS,MAAM,QAAQ,EAAE;AAC7G,sBAAkB;AAAA,MAChB,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,MAAM;AAAA,QACN,SAAS,OAAO,IAAI,CAAC,MAAO,EAAE,OAAO,GAAG,EAAE,IAAI,KAAK,EAAE,OAAO,KAAK,EAAE,OAAQ,EAAE,KAAK,IAAI;AAAA,QACtF;AAAA,QACA,KAAK,iBAAiB,KAAK,UAAU,MAAM,MAAM,KAAK,WAAW,cAAc,0BAA0B,GAAG;AAAA,MAC9G;AAAA,IACF,CAAC;AACD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI;AACF,UAAM,SAAS,cAAc;AAC7B,UAAM,WAAW,MAAM,QAAuB,+BAA+B,EAAE,QAAQ,IAAI,UAAU,KAAK,CAAC;AAC3G,UAAM,WAAW;AAAA,MACf,GAAG,UAAU,SAAS,IAAI;AAAA,MAC1B,GAAG,kBAAkB,QAAQ,UAAU,KAAK,IAAI;AAAA,MAChD,GAAI,SAAS,CAAC;AAAA,MACd,GAAI,MAAM,YAAY,UAAU,IAAI;AAAA,IACtC;AACA,sBAAkB,UAAU,UAAU,QAAQ,CAAC;AAAA,EACjD,SAAS,KAAK;AACZ,sBAAkB,GAAG;AAAA,EACvB;AACF;AAGA,eAAsB,YACpB,MACA,YACA,SACA,OACe;AACf,QAAM,cAAc,EAAE,MAAM,YAAY,QAAQ,GAAG,KAAK;AAC1D;AAYA,IAAM,yBAAyB,IAAI;AAOnC,eAAsB,eAAe,QAAwC,OAAiC;AAC5G,MAAI,OAAO,WAAW,KAAK,OAAO,CAAC,GAAG;AACpC,UAAM,cAAc,OAAO,CAAC,GAAG,KAAK;AACpC;AAAA,EACF;AACA,QAAM,MAAiB,CAAC;AACxB,aAAW,CAAC,OAAO,GAAG,KAAK,OAAO,QAAQ,GAAG;AAC3C,UAAM,YAAY,yBAAyB,UAAU,GAAG;AACxD,QAAI,CAAC,UAAU,SAAS;AACtB,YAAM,SAAS,UAAU,MAAM,OAAO,IAAI,CAAC,WAAW;AAAA,QACpD,MAAM,OAAO,KAAK,KAAK,MAAM,KAAK,KAAK,GAAG,CAAC;AAAA,QAC3C,SAAS,MAAM;AAAA,MACjB,EAAE;AACF,wBAAkB;AAAA,QAChB,IAAI;AAAA,QACJ,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI;AAAA,UAC/D;AAAA,UACA,KAAK,iBAAiB,KAAK,UAAU,MAAM,MAAM,KAAK,WAAW,cAAc,0BAA0B,GAAG;AAAA,QAC9G;AAAA,MACF,CAAC;AACD,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,QAAI,KAAK,UAAU,IAAI;AAAA,EACzB;AACA,MAAI;AACF,UAAM,SAAS,cAAc;AAC7B,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,MACd,EAAE,WAAW,uBAAuB;AAAA,IACtC;AACA,UAAM,WAAW;AAAA,MACf,GAAG,aAAa,SAAS,KAAK,WAAW,CAAC,GAAG,IAAI,MAAM;AAAA,MACvD,GAAI,SAAS,CAAC;AAAA,MACd,GAAI,MAAM,YAAY,GAAG;AAAA,IAC3B;AACA,sBAAkB,UAAU,UAAU,QAAQ,CAAC;AAAA,EACjD,SAAS,KAAK;AACZ,sBAAkB,GAAG;AAAA,EACvB;AACF;AAGA,eAAsB,YACpB,MACA,YACA,QACA,SACA,OACe;AACf,QAAM,cAAc,EAAE,MAAM,YAAY,QAAQ,QAAQ,GAAG,KAAK;AAClE;AAGA,eAAsB,YAAY,MAAc,YAAoB,QAAgB,OAAiC;AACnH,QAAM,cAAc,EAAE,MAAM,YAAY,OAAO,GAAG,KAAK;AACzD;AAEA,eAAsB,YAAY,MAAc,MAA+B,MAA+B;AAC5G,MAAI;AACF,UAAM,SAAS,cAAc,IAAI;AACjC,UAAM,WAAW,MAAM,QAAiC,MAAM,EAAE,QAAQ,GAAG,KAAK,CAAC;AACjF,sBAAkB,QAAQ;AAAA,EAC5B,SAAS,KAAK;AACZ,sBAAkB,GAAG;AAAA,EACvB;AACF;AAYA,eAAsB,gBAAgB,MAAe,MAAgB,OAAO,OAAO,YAAoC;AACrH,MAAI;AACF,UAAM,SAAS,cAAc,IAAI;AACjC,UAAM,SAAS,MAAM,QAA2B,yBAAyB;AAAA,MACvE;AAAA,MACA,GAAI,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAAA,IAC/B,CAAC;AACD,UAAM,YACJ,eAAe,UAAa,OAAO,MAAM,OAAO,OAAO,eAAe,OAAO,MAAM,UAAU,IAAI;AACnG,UAAM,WAAW,YAAY,UAAU,EAAE,GAAG,QAAQ,MAAM,UAAU,KAAK,GAAG,UAAU,KAAK,IAAI;AAC/F,QAAI,QAAQ,QAAQ,CAAC,SAAS,MAAM,CAAC,SAAS,MAAM;AAClD,wBAAkB,QAAQ;AAC1B;AAAA,IACF;AACA,YAAQ,OAAO,MAAM,GAAG,WAAW,SAAS,kBAAkB,SAAS,IAAI,CAAC,GAAG,UAAU,QAAQ,CAAC;AAAA,CAAI;AAAA,EACxG,SAAS,KAAK;AACZ,sBAAkB,GAAG;AAAA,EACvB;AACF;AAEO,IAAM,gBAAgB;AAAA,EAC3B,eAAe,EAAE,MAAM,UAAmB,aAAa,kCAAkC;AAC3F;AAEO,SAAS,UAAU,QAAgB;AACxC,SAAO;AAAA,IACL,IAAI;AAAA,MACF,MAAM;AAAA,MACN,aAAa,OAAO,MAAM;AAAA,MAC1B,UAAU;AAAA,IACZ;AAAA,EACF;AACF;AAEA,IAAM,iBAAiB;AAEvB,SAAS,aAAa,MAAwC;AAC5D,SAAO,MAAM,kBAAkB,0BAA0B,IAAI;AAC/D;AAGO,SAAS,QAAQ,MAAc;AACpC,SAAO;AAAA,IACL,MAAM;AAAA,MACJ;AAAA,QACE,MAAM;AAAA,QACN,aAAa,0FAAqF,cAAc;AAAA,MAClH;AAAA,MACA,aAAa,IAAI;AAAA,IACnB;AAAA,EACF;AACF;AAGO,SAAS,aAAa,MAAc;AACzC,SAAO;AAAA,IACL,MAAM;AAAA,MACJ;AAAA,QACE,MAAM;AAAA,QACN,aAAa,2JAAiJ,cAAc;AAAA,MAC9K;AAAA,MACA,aAAa,IAAI;AAAA,IACnB;AAAA,EACF;AACF;AAGO,SAAS,kBACd,MACA,MACA,aACA,OACA;AACA,SAAO,cAAc;AAAA,IACnB,MAAM,EAAE,MAAM,YAAY;AAAA,IAC1B,MAAM,EAAE,GAAG,eAAe,GAAG,aAAa,IAAI,EAAE;AAAA,IAChD,KAAK,OAAO,EAAE,KAAK,MAAM;AACvB,YAAM,aAAa,kBAAkB,IAAI;AACzC,YAAM,WAAW,iBAAiB,KAAK,IAAI;AAC3C,UAAI,SAAS,WAAW,KAAK,SAAS,KAAK,CAAC,YAAY,OAAO,KAAK,OAAO,EAAE,WAAW,CAAC,GAAG;AAC1F,4BAAoB,GAAG,IAAI,+EAA+E;AAAA,MAC5G;AACA,UAAI,SAAS,SAAS,wBAAwB;AAC5C;AAAA,UACE,GAAG,SAAS,MAAM,wCAAwC,sBAAsB;AAAA,QAClF;AAAA,MACF;AACA,YAAM,eAAe;AAAA,QACnB,GAAG,IAAI,IAAI,SAAS,QAAQ,CAAC,YAAa,OAAO,UAAU,aAAa,MAAM,OAAO,IAAK,SAAS,CAAC,CAAG,CAAC;AAAA,MAC1G;AACA,YAAM;AAAA,QACJ,SAAS,IAAI,CAAC,aAAa,EAAE,MAAM,YAAY,QAAQ,EAAE;AAAA,QACzD;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACH;AASO,SAAS,gBAAgB,OAAwB;AACtD,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,IAAI;AACzD;AAAA,MACE;AAAA,IACF;AAAA,EACF;AACA,QAAM,MAAM,OAAO,KAAK;AACxB,MAAI,OAAO,MAAM,GAAG,KAAK,MAAM,KAAK,MAAM,MAAO,MAAM,KAAK,MAAM,KAAM;AACtE,wBAAoB,uEAAuE;AAAA,EAC7F;AACA,SAAO;AACT;","names":[]}

package/dist/chunk-3WOFZTGC.js

@@ -0,0 +1,297 @@
+// ../api/src/capabilities/surfaces.ts
+var CAPABILITY_SURFACES = [
+  "google-ads",
+  "meta-ads",
+  "linkedin-ads",
+  "x-ads",
+  "chatgpt-ads",
+  "tag-manager",
+  "ga4",
+  "gsc",
+  "shopify"
+];
+var CAPABILITY_SURFACE_SPECS = {
+  "google-ads": {
+    id: "google-ads",
+    label: "Google Ads",
+    provider: "google-ads",
+    resourceNoun: "ad account",
+    writePath: "staged-live",
+    writeScopes: ["https://www.googleapis.com/auth/adwords"],
+    commands: "baker ads google"
+  },
+  "meta-ads": {
+    id: "meta-ads",
+    label: "Meta Ads",
+    provider: "meta",
+    resourceNoun: "ad account",
+    writePath: "staged-live",
+    writeScopes: ["ads_management"],
+    commands: "baker ads meta"
+  },
+  "linkedin-ads": {
+    id: "linkedin-ads",
+    label: "LinkedIn Ads",
+    provider: "linkedin",
+    resourceNoun: "ad account",
+    writePath: "staged-live",
+    writeScopes: ["rw_ads"],
+    commands: "baker ads linkedin"
+  },
+  "x-ads": {
+    id: "x-ads",
+    label: "X Ads",
+    provider: "x-ads",
+    resourceNoun: "ad account",
+    writePath: "staged-live",
+    /**
+     * Empty on purpose, and the one surface where that does NOT mean read-only.
+     * X Ads authenticates with OAuth 1.0a, which has no scope strings at all —
+     * write access is granted to the *app* by X's Ads API access review, not
+     * per connection. There is therefore no scope to check, and inventing one
+     * would make `scopeBlockers` refuse every X write for a permission that
+     * does not exist.
+     */
+    writeScopes: [],
+    commands: "baker ads x"
+  },
+  "chatgpt-ads": {
+    id: "chatgpt-ads",
+    label: "ChatGPT Ads",
+    // Connected with the client's own Ads API key (`chatgptAdsConnections`), not an OAuth grant.
+    provider: "chatgpt-ads",
+    resourceNoun: "ad account",
+    writePath: "staged-live",
+    /**
+     * Empty because the pasted key has no scopes: it reaches its one account
+     * whole. When OpenAI approves Baker's OAuth app this becomes
+     * `ads.admin.all.write` and `connectsWith` goes away.
+     */
+    writeScopes: [],
+    commands: "baker ads chatgpt",
+    connectsWith: "api-key"
+  },
+  "tag-manager": {
+    id: "tag-manager",
+    label: "Tag Manager",
+    provider: "google-tag-manager",
+    resourceNoun: "container",
+    writePath: "staged-immediate",
+    writeScopes: [
+      "https://www.googleapis.com/auth/tagmanager.edit.containers",
+      "https://www.googleapis.com/auth/tagmanager.edit.containerversions",
+      "https://www.googleapis.com/auth/tagmanager.publish"
+    ],
+    commands: "baker tag-manager"
+  },
+  ga4: {
+    id: "ga4",
+    label: "Google Analytics 4",
+    provider: "google-analytics",
+    resourceNoun: "property",
+    // Like Tag Manager: staged during the chat, applied for real at publish,
+    // every time. A connection made before writes existed is
+    // read-only until it is reconnected, and `access` does NOT say so — it
+    // reports what the Baker app asks Google for, which is now app-wide
+    // read-write. The per-company signal is `scopeBlockers`, which compares
+    // `writeScopes` against the scopes that connection actually recorded.
+    writePath: "staged-immediate",
+    writeScopes: ["https://www.googleapis.com/auth/analytics.edit"],
+    commands: "baker ga4"
+  },
+  gsc: {
+    id: "gsc",
+    label: "Search Console",
+    provider: "google-search-console",
+    resourceNoun: "site",
+    writePath: "read-only",
+    writeScopes: ["https://www.googleapis.com/auth/webmasters"],
+    commands: "baker gsc"
+  },
+  shopify: {
+    id: "shopify",
+    label: "Shopify store",
+    provider: "shopify",
+    resourceNoun: "store",
+    // Staged during the chat and applied to the real store when it completes,
+    // every time; each applied change can be put back by another publish
+    // (`baker shopify undo`). The write permissions are optional scopes the
+    // store grants when a change first needs one, so `scopeBlockers` is the
+    // per-company signal.
+    writePath: "staged-immediate",
+    writeScopes: [
+      "write_products",
+      "write_publications",
+      "write_discounts",
+      "write_online_store_navigation",
+      "write_marketing_events"
+    ],
+    commands: "baker shopify"
+  }
+};
+
+// ../api/src/capabilities/index.ts
+import { z as z2 } from "zod";
+
+// ../api/src/capabilities/op-fields.ts
+import { z } from "zod";
+function def(schema) {
+  if (typeof schema !== "object" || schema === null) return void 0;
+  const internals = schema._zod;
+  return internals?.def;
+}
+function literalValue(schema) {
+  const values = def(schema)?.values;
+  const first = values?.[0];
+  return typeof first === "string" ? first : void 0;
+}
+function isObjectSchema(schema) {
+  return schema.properties !== void 0;
+}
+function unionText(members, at) {
+  const texts = [...new Set(members.map((member) => shapeText(member, { ...at, indent: `${at.indent}  ` })))];
+  if (!members.every(isObjectSchema) || texts.length < 2) return texts.join(" | ");
+  return texts.map((text, index) => index === 0 ? text : `
+${at.indent}| ${text}`).join("");
+}
+function objectText(schema, at) {
+  const required = new Set(schema.required ?? []);
+  const fields = Object.entries(schema.properties ?? {}).map(([name, field]) => {
+    const value = shapeText(field, at);
+    const optional = required.has(name) ? "" : "?";
+    return value.startsWith("\n") || !value.includes("\n") ? `${name}${optional}: ${value}` : `${name}${optional}:
+${at.indent}  ${value}`;
+  });
+  return fields.length === 0 ? "{}" : `{ ${fields.join(", ")} }`;
+}
+function typeText(type, schema, at) {
+  if (type === "array" && schema.prefixItems) {
+    return `[${schema.prefixItems.map((item) => shapeText(item, at)).join(", ")}]`;
+  }
+  if (type === "array") {
+    const item = schema.items ? shapeText(schema.items, at) : "unknown";
+    return item.includes(" ") ? `(${item})[]` : `${item}[]`;
+  }
+  if (type === "object") {
+    const values = typeof schema.additionalProperties === "object" ? shapeText(schema.additionalProperties, at) : "unknown";
+    return `{ [key: string]: ${values} }`;
+  }
+  return type === "integer" ? "number" : type;
+}
+function shapeText(schema, at) {
+  if (schema.$ref !== void 0) {
+    const name = schema.$ref.replace("#/$defs/", "");
+    const target = at.defs[name];
+    if (target === void 0 || at.expanding.has(name)) return "\u2026";
+    return shapeText(target, { ...at, expanding: /* @__PURE__ */ new Set([...at.expanding, name]) });
+  }
+  if (schema.const !== void 0) return JSON.stringify(schema.const);
+  if (schema.enum) return schema.enum.map((value) => JSON.stringify(value)).join(" | ");
+  const members = schema.oneOf ?? schema.anyOf;
+  if (members) return unionText(members, at);
+  if (isObjectSchema(schema)) return objectText(schema, at);
+  const types = Array.isArray(schema.type) ? schema.type : [schema.type ?? "unknown"];
+  return types.map((type) => typeText(type, schema, at)).join(" | ");
+}
+function describeOpPayload(union, kind) {
+  const options = def(union)?.options ?? union.options;
+  const option = options.find((candidate) => literalValue(def(candidate)?.shape?.kind) === kind);
+  const payload = def(option)?.shape?.payload;
+  if (payload === void 0) return void 0;
+  const schema = z.toJSONSchema(payload, { io: "input", unrepresentable: "any" });
+  return shapeText(schema, { defs: schema.$defs ?? {}, expanding: /* @__PURE__ */ new Set(), indent: "" });
+}
+
+// ../api/src/capabilities/index.ts
+var capabilitySurfaceSchema = z2.enum(CAPABILITY_SURFACES);
+var capabilitiesRequestSchema = z2.object({
+  /** Narrow to one surface. Omit for every surface the company could use. */
+  surface: capabilitySurfaceSchema.optional(),
+  /** Include the field-level contract of every op, not just the entity list. */
+  full: z2.boolean().optional(),
+  /**
+   * Who the chat acts as (`BAKER_ACTING_USER_ID`). Adds that person's own
+   * connected tools — they load for this turn, and for nobody else's.
+   */
+  actingUserId: z2.string().optional()
+});
+var capabilityResourceSchema = z2.object({
+  id: z2.string(),
+  name: z2.string().optional()
+});
+var capabilityOpSchema = z2.object({
+  kind: z2.string(),
+  /** True when the op changes something that already exists and must be named. */
+  needsTarget: z2.boolean(),
+  required: z2.array(z2.string()),
+  optional: z2.array(z2.string()),
+  /** Field → the values it accepts, for fields that take a fixed set. */
+  choices: z2.record(z2.string(), z2.array(z2.string())),
+  /** False when the platform accepts fields beyond the listed ones. */
+  fieldsAreComplete: z2.boolean()
+});
+var capabilityLimitViewSchema = z2.object({
+  capability: z2.string(),
+  cause: z2.enum(["not_built", "provider_forbids", "no_permission"]),
+  detail: z2.string()
+});
+var capabilityWriteModeSchema = z2.enum(["live", "applies-at-publish", "none"]);
+var capabilitySurfaceReportSchema = z2.object({
+  surface: capabilitySurfaceSchema,
+  label: z2.string(),
+  connected: z2.boolean(),
+  /** What the user picked when connecting. Empty when nothing is selected yet. */
+  resources: z2.array(capabilityResourceSchema),
+  access: z2.enum(["read-write", "read-only", "not-connected"]),
+  writeMode: capabilityWriteModeSchema,
+  /** One sentence about the write mode, safe to repeat to the user. */
+  writeModeNote: z2.string(),
+  /** Entities this surface can change at all, e.g. "campaign", "keyword". */
+  writableEntities: z2.array(z2.string()),
+  /** Things wrong with the connection itself: needs reconnecting, missing a permission. */
+  blockers: z2.array(z2.string()),
+  /** What cannot be done here, and why. */
+  limits: z2.array(capabilityLimitViewSchema),
+  /** The per-op contract. Present when one surface was asked for, or with `full`. */
+  ops: z2.array(capabilityOpSchema).optional(),
+  /** Where to look next: `baker ads google`, `baker ga4`, … */
+  commands: z2.string()
+});
+var capabilityToolSchema = z2.object({
+  /** `microsoft_clarity`, `hubspot`, or the name the user gave a custom server. */
+  key: z2.string(),
+  label: z2.string(),
+  /** `mcp` — tools in the agent's own list. `platform` — signed in, read through the CLI. `baker` — Baker's own, always there. */
+  kind: z2.enum(["mcp", "platform", "baker"]),
+  /** How to actually reach it, in one phrase the agent can act on. */
+  reach: z2.string(),
+  /**
+   * Whether it can be used right now.
+   *
+   * A connection that exists and is expired is worse than one that is absent:
+   * it reads as available and fails at the moment it is needed, which on an
+   * unattended run is a report with a hole in it and no explanation.
+   */
+  ready: z2.boolean(),
+  /** Why it is not ready, or what it is for. Absent when neither needs saying. */
+  note: z2.string().optional()
+});
+var capabilitiesResponseSchema = z2.object({
+  ok: z2.literal(true),
+  data: z2.object({
+    surfaces: z2.array(capabilitySurfaceReportSchema),
+    /**
+     * Everything else this company can reach. Shared connections only —
+     * a teammate's private per-user connection belongs to whoever started the
+     * session and is visible in the agent's own tool list, not here.
+     */
+    tools: z2.array(capabilityToolSchema)
+  })
+});
+
+export {
+  CAPABILITY_SURFACES,
+  CAPABILITY_SURFACE_SPECS,
+  describeOpPayload
+};
+//# sourceMappingURL=chunk-3WOFZTGC.js.map

package/dist/chunk-3WOFZTGC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../api/src/capabilities/surfaces.ts","../../api/src/capabilities/index.ts","../../api/src/capabilities/op-fields.ts"],"sourcesContent":["/**\n * The marketing surfaces Baker can reach, and — the part that exists nowhere\n * else — what it cannot do on each of them.\n *\n * Every other introspection surface (`baker schema <cmd>`, the family docs)\n * describes what the agent CAN do. An agent that needs to know a capability is\n * absent has, until now, only been able to find out by trying: promising a GA4\n * property merge and then discovering the connection is read-only, or probing\n * four spellings of a conversion-action field that does not exist. Both cost a\n * retraction in front of a client.\n *\n * This module is deliberately thin on prose and heavy on `evidence`. A\n * hand-maintained \"cannot do\" list rots the same way the Tag Manager built-in\n * trigger whitelist in this repo rotted down to one entry, so each limit carries\n * a machine-checkable claim about the code that makes it true, and\n * `packages/backend/convex/capabilities/coverage.test.ts` fails when a claim\n * stops holding — when the scope is finally requested, when the op ships, when\n * the guard is renamed away. `asserted` is the escape hatch for the handful of\n * facts that live outside this repo entirely, and it has to say why.\n */\n\nexport const CAPABILITY_SURFACES = [\n  \"google-ads\",\n  \"meta-ads\",\n  \"linkedin-ads\",\n  \"x-ads\",\n  \"chatgpt-ads\",\n  \"tag-manager\",\n  \"ga4\",\n  \"gsc\",\n  \"shopify\",\n] as const;\nexport type CapabilitySurfaceId = (typeof CAPABILITY_SURFACES)[number];\n\n/**\n * How a change on this surface reaches the outside world.\n *  - `staged-live`       — staged during the chat and applied against the real\n *                          ad account at publish. The per-company write flags\n *                          that could once make this simulated are retired, so\n *                          a completed chat spends the client's money.\n *  - `staged-immediate`  — staged during the chat and applied at publish for\n *                          real, every time. Tag Manager: completing the chat\n *                          changes the user's production container.\n *  - `read-only`         — nothing here writes.\n *\n * The first two split on consequence, not on certainty: both always apply, but\n * one costs ad spend and the other cuts a container version, and the agent has\n * to tell the user which.\n */\nexport type CapabilityWritePath = \"staged-live\" | \"staged-immediate\" | \"read-only\";\n\nexport interface CapabilitySurfaceSpec {\n  id: CapabilitySurfaceId;\n  /** How the user names it. */\n  label: string;\n  /** The `oauthProviders.type` this surface connects through; `chatgpt-ads` connects with a pasted key instead. */\n  provider: string;\n  /** What the user picks when connecting: \"ad account\", \"property\", \"container\". */\n  resourceNoun: string;\n  writePath: CapabilityWritePath;\n  /**\n   * OAuth scopes that would grant writes. Access is derived by intersecting these\n   * with the scopes the app actually requests — which is why \"GA4 is read-only\"\n   * is a fact about the connection, not a sentence someone typed.\n   */\n  writeScopes: string[];\n  /** Where to look next on this surface. */\n  commands: string;\n  /**\n   * How the company connects. Absent is an OAuth grant, whose scopes decide\n   * access. `api-key` is a pasted key that reaches one account whole, so the\n   * write path alone decides it.\n   */\n  connectsWith?: \"api-key\";\n}\n\nexport const CAPABILITY_SURFACE_SPECS: Readonly<Record<CapabilitySurfaceId, CapabilitySurfaceSpec>> = {\n  \"google-ads\": {\n    id: \"google-ads\",\n    label: \"Google Ads\",\n    provider: \"google-ads\",\n    resourceNoun: \"ad account\",\n    writePath: \"staged-live\",\n    writeScopes: [\"https://www.googleapis.com/auth/adwords\"],\n    commands: \"baker ads google\",\n  },\n  \"meta-ads\": {\n    id: \"meta-ads\",\n    label: \"Meta Ads\",\n    provider: \"meta\",\n    resourceNoun: \"ad account\",\n    writePath: \"staged-live\",\n    writeScopes: [\"ads_management\"],\n    commands: \"baker ads meta\",\n  },\n  \"linkedin-ads\": {\n    id: \"linkedin-ads\",\n    label: \"LinkedIn Ads\",\n    provider: \"linkedin\",\n    resourceNoun: \"ad account\",\n    writePath: \"staged-live\",\n    writeScopes: [\"rw_ads\"],\n    commands: \"baker ads linkedin\",\n  },\n  \"x-ads\": {\n    id: \"x-ads\",\n    label: \"X Ads\",\n    provider: \"x-ads\",\n    resourceNoun: \"ad account\",\n    writePath: \"staged-live\",\n    /**\n     * Empty on purpose, and the one surface where that does NOT mean read-only.\n     * X Ads authenticates with OAuth 1.0a, which has no scope strings at all —\n     * write access is granted to the *app* by X's Ads API access review, not\n     * per connection. There is therefore no scope to check, and inventing one\n     * would make `scopeBlockers` refuse every X write for a permission that\n     * does not exist.\n     */\n    writeScopes: [],\n    commands: \"baker ads x\",\n  },\n  \"chatgpt-ads\": {\n    id: \"chatgpt-ads\",\n    label: \"ChatGPT Ads\",\n    // Connected with the client's own Ads API key (`chatgptAdsConnections`), not an OAuth grant.\n    provider: \"chatgpt-ads\",\n    resourceNoun: \"ad account\",\n    writePath: \"staged-live\",\n    /**\n     * Empty because the pasted key has no scopes: it reaches its one account\n     * whole. When OpenAI approves Baker's OAuth app this becomes\n     * `ads.admin.all.write` and `connectsWith` goes away.\n     */\n    writeScopes: [],\n    commands: \"baker ads chatgpt\",\n    connectsWith: \"api-key\",\n  },\n  \"tag-manager\": {\n    id: \"tag-manager\",\n    label: \"Tag Manager\",\n    provider: \"google-tag-manager\",\n    resourceNoun: \"container\",\n    writePath: \"staged-immediate\",\n    writeScopes: [\n      \"https://www.googleapis.com/auth/tagmanager.edit.containers\",\n      \"https://www.googleapis.com/auth/tagmanager.edit.containerversions\",\n      \"https://www.googleapis.com/auth/tagmanager.publish\",\n    ],\n    commands: \"baker tag-manager\",\n  },\n  ga4: {\n    id: \"ga4\",\n    label: \"Google Analytics 4\",\n    provider: \"google-analytics\",\n    resourceNoun: \"property\",\n    // Like Tag Manager: staged during the chat, applied for real at publish,\n    // every time. A connection made before writes existed is\n    // read-only until it is reconnected, and `access` does NOT say so — it\n    // reports what the Baker app asks Google for, which is now app-wide\n    // read-write. The per-company signal is `scopeBlockers`, which compares\n    // `writeScopes` against the scopes that connection actually recorded.\n    writePath: \"staged-immediate\",\n    writeScopes: [\"https://www.googleapis.com/auth/analytics.edit\"],\n    commands: \"baker ga4\",\n  },\n  gsc: {\n    id: \"gsc\",\n    label: \"Search Console\",\n    provider: \"google-search-console\",\n    resourceNoun: \"site\",\n    writePath: \"read-only\",\n    writeScopes: [\"https://www.googleapis.com/auth/webmasters\"],\n    commands: \"baker gsc\",\n  },\n  shopify: {\n    id: \"shopify\",\n    label: \"Shopify store\",\n    provider: \"shopify\",\n    resourceNoun: \"store\",\n    // Staged during the chat and applied to the real store when it completes,\n    // every time; each applied change can be put back by another publish\n    // (`baker shopify undo`). The write permissions are optional scopes the\n    // store grants when a change first needs one, so `scopeBlockers` is the\n    // per-company signal.\n    writePath: \"staged-immediate\",\n    writeScopes: [\n      \"write_products\",\n      \"write_publications\",\n      \"write_discounts\",\n      \"write_online_store_navigation\",\n      \"write_marketing_events\",\n    ],\n    commands: \"baker shopify\",\n  },\n};\n\n/**\n * Why a capability is missing. The distinction is what decides what the agent\n * tells the user, so it is part of the contract rather than left to prose:\n *  - `not_built`        — the platform allows it, Baker has not built it. It may\n *                         be possible by hand in the platform's own interface.\n *  - `provider_forbids` — the platform rejects it however it is asked. Nobody can\n *                         do it, so do not hand the user a manual route.\n *  - `no_permission`    — the connection was never granted the access. Reading\n *                         works, changing does not; it is manual work today.\n */\nexport type CapabilityLimitCause = \"not_built\" | \"provider_forbids\" | \"no_permission\";\n\n/**\n * The checkable claim behind a limit. `coverage.test.ts` re-derives each one.\n */\nexport type CapabilityLimitEvidence =\n  /** The app never requests this OAuth scope, so nothing can write here. */\n  | { kind: \"scope\"; scope: string }\n  /** No staged op with these kinds exists, so there is nothing to stage. */\n  | { kind: \"noOpKind\"; kinds: string[] }\n  /** A field on a staged op does not accept this value. */\n  | { kind: \"noChoice\"; opKind: string; field: string; value: string }\n  /** A stage-time guard refuses it before anything is spent. */\n  | { kind: \"guard\"; module: string; symbol: string }\n  /** Nothing in this repository encodes it; the note says why. */\n  | { kind: \"asserted\"; note: string };\n\nexport interface CapabilityLimit {\n  surface: CapabilitySurfaceId;\n  /** What an agent would set out to do, in the words it would use. */\n  capability: string;\n  cause: CapabilityLimitCause;\n  /** Why it cannot happen and what to do instead. Agent-facing, plain English. */\n  detail: string;\n  evidence: CapabilityLimitEvidence;\n}\n\n/**\n * Ordered by how often getting it wrong has cost something. Keep entries to\n * things an agent would plausibly promise a client before checking.\n */\nexport const CAPABILITY_LIMITS: readonly CapabilityLimit[] = [\n  {\n    surface: \"shopify\",\n    capability: \"Edit the store's theme files — templates, sections, the theme's code or its stylesheet\",\n    cause: \"provider_forbids\",\n    detail:\n      \"Shopify only lets an app write theme files with an exemption it grants case by case, and editing a merchant's theme breaks the App Store's rules for an app like Baker. Say exactly what to change and where (Online Store → Themes → Customize), and carry on with the rest of the job.\",\n    evidence: {\n      kind: \"asserted\",\n      note: \"Shopify's rule, not this repository's: `write_themes` needs Shopify's exemption and App Store requirement 5.1.1 forbids theme edits by an app of this kind. The app's TOML declares no `write_themes` (scopes.test.ts holds the backend's list equal to it).\",\n    },\n  },\n  {\n    surface: \"shopify\",\n    capability: \"Create or delete products, change stock levels, or change whether a product is published\",\n    cause: \"not_built\",\n    detail:\n      \"Baker changes products' copy, SEO, tags, type, options' SKU, barcode, weight and price, custom fields, collections, discount codes, redirects and its own campaigns in Shopify Marketing. Making or removing a product, its stock and its status are the merchant's, in Shopify admin; say what to do there and carry on.\",\n    evidence: {\n      kind: \"noOpKind\",\n      kinds: [\"shopify.product.create\", \"shopify.product.delete\", \"shopify.inventory.set\", \"shopify.product.publish\"],\n    },\n  },\n  {\n    surface: \"shopify\",\n    capability: \"Make a discount code for named customers or a customer segment\",\n    cause: \"not_built\",\n    detail:\n      \"Every discount code Baker creates is for everyone who has the code. A code for named customers or a segment is made in Shopify admin → Discounts.\",\n    evidence: {\n      kind: \"noOpKind\",\n      kinds: [\"shopify.discountCode.createForCustomers\", \"shopify.discountAutomatic.create\"],\n    },\n  },\n  {\n    surface: \"shopify\",\n    capability: \"Make a collection whose products join by rules (a tag, a price, a type), or delete one\",\n    cause: \"not_built\",\n    detail:\n      \"Baker makes collections of hand-picked products and adds or removes products by hand. A collection whose products join by its rules is set up in Shopify admin; Baker refuses to delete one, because undo could not rebuild its rules.\",\n    evidence: { kind: \"guard\", module: \"shopify/writes/collectionRestore.ts\", symbol: \"restorability\" },\n  },\n  {\n    surface: \"ga4\",\n    capability:\n      \"Create, merge or delete a property; create a data stream or change its name, URL or cross-domain settings; change the property's time zone or currency\",\n    cause: \"not_built\",\n    detail:\n      \"Baker configures what a property MEASURES — key events, custom dimensions and metrics, custom events, audiences, the data retention window, a web stream's enhanced measurement (the events GA4 collects on its own) — plus the property's name, industry category and Google Ads link. It does not create or merge properties, create data streams or change a stream's name, URL or cross-domain settings. Time zone and currency are deliberately excluded even though the API allows them: both change how every future day is bucketed without reprocessing history, so a correction puts a step in the middle of every time series the user compares against. Tell the user exactly what to change in the Google Analytics admin screens and carry on with the rest of the job.\",\n    evidence: {\n      kind: \"noOpKind\",\n      kinds: [\"ga4.dataStream.create\", \"ga4.dataStream.update\", \"ga4.property.create\"],\n    },\n  },\n  {\n    surface: \"ga4\",\n    capability: \"Change who is already in an audience, or build one from a sequence of steps\",\n    cause: \"provider_forbids\",\n    detail:\n      \"An audience can be CREATED and ARCHIVED here, and its name and description changed. Everything that defines who is in it — the conditions, the membership window, the exclusion mode — is marked Immutable by Google and cannot be edited on an audience that exists, however it is asked. Fixing a definition therefore means archiving the audience and creating a replacement, which does NOT carry the users the first one gathered. Say that before staging the archive. Sequence-based audiences (`sequenceFilter`) are not offered: they are the easiest shape in this API to get subtly wrong and the mistake is permanent, so build them by hand in Google Analytics if one is genuinely needed.\",\n    evidence: {\n      kind: \"asserted\",\n      note: \"The immutability is Google's, declared in the Admin API v1alpha `Audience` resource (`filter_clauses`, `membership_duration_days` and `exclusion_duration_mode` are all marked Immutable) — no code in this repository can be read to confirm a rule the provider enforces. What this repo does hold is the consequence: `GA4_IMMUTABLE_FIELDS.audience` in `packages/api/src/ga4/ops.ts` drives the refusal, and `ga4.test.ts` pins that an update carrying one of those fields is rejected with the archive-and-recreate wording rather than a zod key error.\",\n    },\n  },\n  {\n    surface: \"ga4\",\n    capability: \"Try a Google Analytics configuration change without it taking effect\",\n    cause: \"not_built\",\n    detail:\n      \"Google Analytics changes always apply to the real property: staged changes apply when the chat completes, and an applied change is in effect immediately — there is no version to publish afterwards and no undo. The user reviewing the Analytics tab and completing the chat is the review, so agree the changes with them before you complete it.\",\n    evidence: {\n      kind: \"asserted\",\n      note: \"An absence: the GA4 executor has no simulated branch and GA4 drafts have no `mode` column, and no test can assert the absence of a mode that was never modelled. The nearest positive check is that the three ad surfaces do carry one — a `mode` column on their drafts and an `executeSimulated` branch in each executor — which the `staged-live` vs `staged-immediate` write paths already encode. Their per-company write gates are retired, so every ad draft is stamped `live`; the branch survives only for drafts published while the gates existed.\",\n    },\n  },\n  {\n    surface: \"gsc\",\n    capability:\n      \"Change anything in Search Console — add or verify a property, submit or delete a sitemap, set a preferred domain\",\n    cause: \"no_permission\",\n    detail:\n      \"Baker's Search Console connection is read-only (webmasters.readonly). `baker gsc sitemaps` lists what is already submitted; it cannot submit one. Hand submission to the user in Search Console and carry on.\",\n    evidence: { kind: \"scope\", scope: \"https://www.googleapis.com/auth/webmasters\" },\n  },\n  {\n    surface: \"google-ads\",\n    capability:\n      \"Change a conversion action that Google itself created — Smart campaign calls and directions, the in-ad lead form's submit, YouTube subscriptions and follow-on views, Floodlight and Search Ads 360 imports, store visits, codeless webpage actions\",\n    cause: \"provider_forbids\",\n    detail:\n      \"Google rejects every write against one of its own conversion actions, a rename as flatly as a removal. Baker refuses these at stage time so no publish is spent on them. There is no manual route either — the Google Ads interface will not change them — so do not hand the user one. Leave the action alone and say so.\",\n    evidence: {\n      module: \"ads/google/writes/conversionSafety.ts\",\n      kind: \"guard\",\n      symbol: \"googleOwnedConversionRefusal\",\n    },\n  },\n  {\n    surface: \"google-ads\",\n    capability:\n      \"Switch a demographic dimension — age, gender, parental status, household income — between Targeting and Observation\",\n    cause: \"not_built\",\n    detail:\n      \"`baker ads google audiences targeting` sets the AUDIENCE dimension only. The demographic rows are read before every write and sent back exactly as they were, so nothing is lost — but changing one is manual work in the Google Ads interface. Say which one to change and where, and carry on with the rest of the job.\",\n    evidence: { kind: \"noChoice\", opKind: \"google.targetingSetting.set\", field: \"audience\", value: \"AGE_RANGE\" },\n  },\n  {\n    surface: \"google-ads\",\n    capability: \"Hide a conversion action (status HIDDEN)\",\n    cause: \"provider_forbids\",\n    detail:\n      'Google denies HIDDEN on every conversion-action write (\"the field\\'s value is on a deny-list for this field\"), so it is not part of the write contract — even though actions hidden long ago still read back as HIDDEN. To take an action out of automated bidding while it keeps measuring, demote it: `baker ads google conversions update <id> --no-primary`. To stop it counting, set status REMOVED.',\n    evidence: { kind: \"noChoice\", opKind: \"google.conversionAction.update\", field: \"status\", value: \"HIDDEN\" },\n  },\n  {\n    surface: \"google-ads\",\n    capability:\n      \"Build a combined, converters or lookalike audience from an audience or conversion action created in the same chat\",\n    cause: \"provider_forbids\",\n    detail:\n      \"Google builds these lists from audiences and conversion actions that already exist in the account; one created in the same publish is not found. Stage and publish the parts first, then build the combined, converters or lookalike audience on their ids in a later chat — and tell the user it takes two publishes.\",\n    evidence: {\n      kind: \"asserted\",\n      note: \"Enforced by `existingRefSchema` inside `audienceCreateSchema` (packages/api ops.ts), which no capability check reads; the provider half is live on v25: a logical operand on a list created in the same request was RESOURCE_NOT_FOUND, a basic list over a conversion action created with it INVALID_CONVERSION_TYPE, and lookalike seeds are int64 ids.\",\n    },\n  },\n  {\n    surface: \"google-ads\",\n    capability: \"Create a Google Analytics (GA4) conversion action in Google Ads\",\n    cause: \"provider_forbids\",\n    detail:\n      \"Google's API cannot create a Google Analytics conversion — they are imported, not created. Make sure the event is a key event in Google Analytics and the property is linked to Google Ads, then ask the user to import it in Google Ads (Goals → Conversions → New conversion action → Import → Google Analytics 4). To measure it with a Google Ads tag instead, stage a WEBPAGE conversion.\",\n    evidence: {\n      kind: \"noChoice\",\n      opKind: \"google.conversionAction.create\",\n      field: \"type\",\n      value: \"GOOGLE_ANALYTICS_4_CUSTOM\",\n    },\n  },\n  {\n    surface: \"google-ads\",\n    capability: \"Target the area around the business's own locations (a location group)\",\n    cause: \"not_built\",\n    detail:\n      'A location group targets a radius around the account\\'s location assets, and Baker cannot stage location assets yet — Google refuses a location group on an account without them. Target a radius around an address or a point instead (`criterionType: \"proximity\"` on `campaign-criteria add`), or tell the user to add the business locations in Google Ads; carry on with the rest of the job.',\n    evidence: {\n      kind: \"asserted\",\n      note: 'The refusal is in the shared criterion contract, not a Convex guard: `criterionSpecSchema` in `packages/api/src/ads-google/criteria.ts` answers `criterionType: \"locationGroup\"` with LOCATION_GROUP_MESSAGE, pinned by `criteria.test.ts`. Live on v25 (3865083115, no location assets) every location-group variant was refused — `enable_customer_level_location_asset_set` with \"The error code is not in this version.\", a geo-constant group with `location_group.feed` REQUIRED.',\n    },\n  },\n  {\n    surface: \"google-ads\",\n    capability: \"Create a Video or Local campaign\",\n    cause: \"provider_forbids\",\n    detail:\n      \"Google's API does not create Video campaigns at all (refused for every sub-type and bidding), and Local campaigns were retired into Performance Max. For video on YouTube, stage a Demand Gen campaign with a Demand Gen video ad; for store visits, Performance Max. A Video views or reach campaign is the user's to create in Google Ads — say so, with the settings you recommend. Existing Video campaigns can still be read, paused and edited.\",\n    evidence: { kind: \"noChoice\", opKind: \"google.campaign.create\", field: \"channelType\", value: \"VIDEO\" },\n  },\n  {\n    surface: \"google-ads\",\n    capability: \"Create a Smart campaign\",\n    cause: \"not_built\",\n    detail:\n      \"A Smart campaign's business details (phone, website, business profile) are a setting Google refuses to check before publishing (RESOURCE_DOES_NOT_SUPPORT_VALIDATE_ONLY), so Baker cannot stage one it could validate. Stage a Search or Performance Max campaign instead, or hand the Smart campaign to the user in Google Ads and carry on with the rest of the job. Shopping, App, Travel and Hotel campaigns ARE stageable — each with the account link it needs. Existing Smart campaigns can still be read, paused and edited.\",\n    evidence: { kind: \"noChoice\", opKind: \"google.campaign.create\", field: \"channelType\", value: \"SMART\" },\n  },\n  {\n    surface: \"google-ads\",\n    capability:\n      \"Create a campaign of a retired sub-type — Search or Display Express, Gmail, Smart Display, Smart Shopping, Video action, app promotion on Search\",\n    cause: \"provider_forbids\",\n    detail:\n      \"Google refuses every one of these on a create. Leave the sub-type out for a standard campaign of the same type; Gmail and Video action now run through Demand Gen, Smart Shopping through Performance Max.\",\n    evidence: {\n      kind: \"noChoice\",\n      opKind: \"google.campaign.create\",\n      field: \"channelSubType\",\n      value: \"DISPLAY_GMAIL_AD\",\n    },\n  },\n  {\n    surface: \"google-ads\",\n    capability: \"Set a campaign budget to accelerated delivery\",\n    cause: \"provider_forbids\",\n    detail:\n      \"Google still stores a budget set to accelerated delivery, but refuses to attach it to any campaign, so it can never spend. Every budget is staged with standard delivery (Google paces it across the day). If the user wants to spend faster, raise the daily amount instead — and say that is what you did.\",\n    evidence: { kind: \"noChoice\", opKind: \"google.budget.create\", field: \"deliveryMethod\", value: \"ACCELERATED\" },\n  },\n  {\n    surface: \"google-ads\",\n    capability: \"Create or edit a call ad (call-only ad)\",\n    cause: \"provider_forbids\",\n    detail:\n      \"Google removed the call ad from its API, so nobody can create one or change an existing one through it. To take phone calls from search, stage a responsive search ad and tell the user to add the phone number as a call asset in Google Ads (Baker cannot stage call assets yet). Carry on with the rest of the job.\",\n    evidence: {\n      kind: \"asserted\",\n      note: 'The format sits inside the ad content union, not on a top-level payload field, so no `noChoice` check can see it. `adContentSchema` answers `format: \"call\"` with CALL_AD_RETIRED_MESSAGE (packages/api ops.test.ts pins it); the provider half is v25\\'s `Ad` message having no `call_ad` — a validateOnly request on 3865083115 was refused `Unknown name \"callAd\"` (2026-10-08).',\n    },\n  },\n  {\n    surface: \"google-ads\",\n    capability: \"Remove a device setting from a campaign once it has one\",\n    cause: \"provider_forbids\",\n    detail:\n      \"A device criterion can be added with `campaign-criteria add` and re-bid afterwards, but Google rejects every removal of one — including a criterion the same account created itself days earlier (observed). So the undo for a bid boost is NOT a removal: it is `baker ads google campaign-criteria update <criterion-resource-name> --bid-modifier 1`, where 0 stops ads serving on that device and 0.1–10.0 bid down or up. Read `campaign_criterion.resource_name` and `campaign_criterion.bid_modifier` (type = DEVICE) first to see which devices the campaign already has. Baker refuses a staged device removal before publish; don't abort the job over it.\",\n    evidence: {\n      kind: \"guard\",\n      module: \"ads/google/writes/stage.ts\",\n      symbol: \"deviceCriterionRemovalRefusal\",\n    },\n  },\n  {\n    surface: \"google-ads\",\n    capability: \"Change which conversion action counts calls from ads (account call reporting)\",\n    cause: \"provider_forbids\",\n    detail:\n      \"Google's API refuses any write of the account's call conversion action, even the one it already uses. Call reporting itself and whether calls count as conversions ARE stageable (`baker ads google account update --call-reporting --call-conversions`). Hand the action choice to the user: Google Ads → Admin → Account settings → Call reporting. Carry on with the rest of the job.\",\n    evidence: {\n      kind: \"asserted\",\n      note: '`customerUpdateSchema` is strict and carries no callConversionAction, so an op naming it is refused at stage; the provider half: a validateOnly customer update of `call_reporting_setting.call_conversion_action` on 3865083115 — with the live value and with another action — was refused \"The error code is not in this version.\" (v25, 2026-10-08).',\n    },\n  },\n  {\n    surface: \"google-ads\",\n    capability: \"Put a label on an asset (sitelink, image, callout …)\",\n    cause: \"provider_forbids\",\n    detail:\n      \"Google Ads has no labels on assets — its API labels campaigns, ad groups, ads and keywords only, and staging refuses an asset. Label the campaign or ad group that uses the asset, or give the asset a findable name, and carry on with the rest of the job.\",\n    evidence: { kind: \"noChoice\", opKind: \"google.label.attach\", field: \"level\", value: \"asset\" },\n  },\n  {\n    surface: \"google-ads\",\n    capability: \"Put a label on the advertiser account itself\",\n    cause: \"provider_forbids\",\n    detail:\n      \"Google applies a label to an account only from the manager account above it (CANNOT_ATTACH_NON_MANAGER_LABEL_TO_CUSTOMER, live v25), and Baker works inside the advertiser account. Label the campaigns instead, or tell the user to label the account from their manager account in Google Ads; carry on with the rest of the job.\",\n    evidence: { kind: \"noChoice\", opKind: \"google.label.attach\", field: \"level\", value: \"customer\" },\n  },\n  {\n    surface: \"google-ads\",\n    capability: \"Change billing, payment methods, or account-level spend limits\",\n    cause: \"not_built\",\n    detail:\n      \"Nothing that touches money setup is stageable — no op exists for it. Report on spend, then hand billing changes to the user in Google Ads. Account settings that are not money (auto-tagging, the account tracking template and final URL suffix, call reporting, video inventory) ARE stageable: `baker ads google account update`.\",\n    evidence: {\n      kind: \"noOpKind\",\n      kinds: [\"google.billingSetup.create\", \"google.accountBudget.create\"],\n    },\n  },\n  {\n    surface: \"meta-ads\",\n    capability:\n      \"Push delivery to an ad — dedicate a share of the campaign or ad-set budget to one ad for a set number of days\",\n    cause: \"not_built\",\n    detail:\n      'Meta ships push delivery as an Ads Manager control only: the Marketing API\\'s ad object takes a schedule, a display sequence and tracking, and nothing that dedicates budget to one ad. So nothing can stage it and no publish can apply it — do not offer to switch it on, and never report a starved ad as pushed. Hand the user the click path and the settings you are recommending: Ad level > Ad setup > \"show more settings\" (next to ad scheduling) > \"Help ensure delivery by dedicating a portion of your budget to your ad\", then the percentage of budget and the number of days, for the one ad you name. It needs at least 2 ads in the ad set, and only one ad per ad set should be pushed. Then carry on with the rest of the job.',\n    evidence: { kind: \"noOpKind\", kinds: [\"ad.pushDelivery\"] },\n  },\n  {\n    surface: \"linkedin-ads\",\n    capability: \"Move a live ad to another ad set, or change a live ad set's type, locale, or associated organization\",\n    cause: \"provider_forbids\",\n    detail:\n      \"LinkedIn treats these as create-only: they can be corrected while the change is still staged, but not on something already live. Baker refuses the amend rather than staging a write LinkedIn will reject. Create the replacement instead, and say why.\",\n    evidence: { kind: \"guard\", module: \"ads/linkedin/writes/amend.ts\", symbol: \"rejectedLiveKeys\" },\n  },\n  {\n    surface: \"tag-manager\",\n    capability: \"Create, delete, or move a Tag Manager account, container, or workspace\",\n    cause: \"not_built\",\n    detail:\n      \"Baker works inside the containers the company connected — it changes tags, triggers, variables, folders, built-in variables and container settings, and nothing above that level. Ask the user to create the container in Tag Manager and connect it, then carry on.\",\n    evidence: {\n      kind: \"noOpKind\",\n      kinds: [\n        \"tagManager.container.create\",\n        \"tagManager.container.delete\",\n        \"tagManager.account.create\",\n        \"tagManager.workspace.create\",\n      ],\n    },\n  },\n  {\n    surface: \"tag-manager\",\n    capability: \"Try a container change without it going live\",\n    cause: \"not_built\",\n    detail:\n      \"Tag Manager changes always apply to the real container: staged changes apply to its working workspace when the chat completes, and a clean run cuts and publishes a container version, which takes them live on the site. Completing the chat is the review, so get the user's agreement before you complete it.\",\n    evidence: {\n      kind: \"asserted\",\n      note: \"An absence: the Tag Manager executor has no simulated branch and its drafts have no `mode` column, and no test can assert the absence of a mode that was never modelled. The nearest positive check is that the three ad surfaces do carry one — a `mode` column on their drafts and an `executeSimulated` branch in each executor — which the `staged-live` vs `staged-immediate` write paths already encode. Their per-company write gates are retired, so every ad draft is stamped `live`; the branch survives only for drafts published while the gates existed.\",\n    },\n  },\n];\n","/**\n * Contract for `/api/capabilities` — what Baker can and cannot do for this\n * company, answered before any work starts (`baker capabilities`).\n *\n * Convex `Id<T>` values are plain `z.string()`; this package must not depend on\n * `convex`. Nothing here carries a token, key, or anything a credential could be\n * reconstructed from — the response names accounts and permissions, never\n * secrets.\n */\nimport { z } from \"zod\";\nimport { CAPABILITY_SURFACES } from \"./surfaces\";\n\nexport { describeOpPayload, describeOpUnion, type OpDescription } from \"./op-fields\";\nexport {\n  CAPABILITY_LIMITS,\n  CAPABILITY_SURFACE_SPECS,\n  CAPABILITY_SURFACES,\n  type CapabilityLimit,\n  type CapabilityLimitCause,\n  type CapabilityLimitEvidence,\n  type CapabilitySurfaceId,\n  type CapabilitySurfaceSpec,\n  type CapabilityWritePath,\n} from \"./surfaces\";\n\nexport const capabilitySurfaceSchema = z.enum(CAPABILITY_SURFACES);\n\nexport const capabilitiesRequestSchema = z.object({\n  /** Narrow to one surface. Omit for every surface the company could use. */\n  surface: capabilitySurfaceSchema.optional(),\n  /** Include the field-level contract of every op, not just the entity list. */\n  full: z.boolean().optional(),\n  /**\n   * Who the chat acts as (`BAKER_ACTING_USER_ID`). Adds that person's own\n   * connected tools — they load for this turn, and for nobody else's.\n   */\n  actingUserId: z.string().optional(),\n});\nexport type CapabilitiesRequest = z.infer<typeof capabilitiesRequestSchema>;\n\n/** A connected account, property, site or container. Identity only. */\nexport const capabilityResourceSchema = z.object({\n  id: z.string(),\n  name: z.string().optional(),\n});\nexport type CapabilityResource = z.infer<typeof capabilityResourceSchema>;\n\nexport const capabilityOpSchema = z.object({\n  kind: z.string(),\n  /** True when the op changes something that already exists and must be named. */\n  needsTarget: z.boolean(),\n  required: z.array(z.string()),\n  optional: z.array(z.string()),\n  /** Field → the values it accepts, for fields that take a fixed set. */\n  choices: z.record(z.string(), z.array(z.string())),\n  /** False when the platform accepts fields beyond the listed ones. */\n  fieldsAreComplete: z.boolean(),\n});\nexport type CapabilityOp = z.infer<typeof capabilityOpSchema>;\n\nexport const capabilityLimitViewSchema = z.object({\n  capability: z.string(),\n  cause: z.enum([\"not_built\", \"provider_forbids\", \"no_permission\"]),\n  detail: z.string(),\n});\nexport type CapabilityLimitView = z.infer<typeof capabilityLimitViewSchema>;\n\n/**\n * `live` — writes reach the real platform at publish.\n * `applies-at-publish` — publishing changes the real thing, with no version step after.\n * `none` — this surface does not write.\n *\n * There is no `simulated`: the per-company gates that produced it on Google,\n * Meta and LinkedIn are all retired, so no surface can report a write that\n * touches nothing. Leaving the value in the contract would keep alive the one\n * sentence this report exists to prevent — \"your ads are only a preview\".\n */\nexport const capabilityWriteModeSchema = z.enum([\"live\", \"applies-at-publish\", \"none\"]);\nexport type CapabilityWriteMode = z.infer<typeof capabilityWriteModeSchema>;\n\nexport const capabilitySurfaceReportSchema = z.object({\n  surface: capabilitySurfaceSchema,\n  label: z.string(),\n  connected: z.boolean(),\n  /** What the user picked when connecting. Empty when nothing is selected yet. */\n  resources: z.array(capabilityResourceSchema),\n  access: z.enum([\"read-write\", \"read-only\", \"not-connected\"]),\n  writeMode: capabilityWriteModeSchema,\n  /** One sentence about the write mode, safe to repeat to the user. */\n  writeModeNote: z.string(),\n  /** Entities this surface can change at all, e.g. \"campaign\", \"keyword\". */\n  writableEntities: z.array(z.string()),\n  /** Things wrong with the connection itself: needs reconnecting, missing a permission. */\n  blockers: z.array(z.string()),\n  /** What cannot be done here, and why. */\n  limits: z.array(capabilityLimitViewSchema),\n  /** The per-op contract. Present when one surface was asked for, or with `full`. */\n  ops: z.array(capabilityOpSchema).optional(),\n  /** Where to look next: `baker ads google`, `baker ga4`, … */\n  commands: z.string(),\n});\nexport type CapabilitySurfaceReport = z.infer<typeof capabilitySurfaceReportSchema>;\n\n/**\n * A source that is available to this company but is not one of the seven\n * marketing surfaces above.\n *\n * These exist because \"what do I have?\" had no single answer, and the gap was\n * not academic: Microsoft Clarity arrives over MCP and HubSpot is read through\n * the CLI, so neither appears in `surfaces` — and an agent that checked only\n * this command concluded it had no Clarity while Clarity was sitting in its own\n * tool list. That is the source most likely to change what it decides.\n *\n * Deliberately NOT modelled as a surface. A surface carries `ops`,\n * `writableEntities` and a write mode, all of which describe a staged-write\n * contract Baker owns. An MCP toolkit has none of that — Baker did not define\n * its tools and cannot enumerate their fields — so filing one under `surfaces`\n * would mean either lying about the contract or leaving four fields empty on\n * every row and inviting the reader to wonder which.\n */\nexport const capabilityToolSchema = z.object({\n  /** `microsoft_clarity`, `hubspot`, or the name the user gave a custom server. */\n  key: z.string(),\n  label: z.string(),\n  /** `mcp` — tools in the agent's own list. `platform` — signed in, read through the CLI. `baker` — Baker's own, always there. */\n  kind: z.enum([\"mcp\", \"platform\", \"baker\"]),\n  /** How to actually reach it, in one phrase the agent can act on. */\n  reach: z.string(),\n  /**\n   * Whether it can be used right now.\n   *\n   * A connection that exists and is expired is worse than one that is absent:\n   * it reads as available and fails at the moment it is needed, which on an\n   * unattended run is a report with a hole in it and no explanation.\n   */\n  ready: z.boolean(),\n  /** Why it is not ready, or what it is for. Absent when neither needs saying. */\n  note: z.string().optional(),\n});\nexport type CapabilityTool = z.infer<typeof capabilityToolSchema>;\n\nexport const capabilitiesResponseSchema = z.object({\n  ok: z.literal(true),\n  data: z.object({\n    surfaces: z.array(capabilitySurfaceReportSchema),\n    /**\n     * Everything else this company can reach. Shared connections only —\n     * a teammate's private per-user connection belongs to whoever started the\n     * session and is visible in the agent's own tool list, not here.\n     */\n    tools: z.array(capabilityToolSchema),\n  }),\n});\nexport type CapabilitiesResponse = z.infer<typeof capabilitiesResponseSchema>;\n","import { z } from \"zod\";\n\n/**\n * What each staged write op actually accepts, read off the contract itself.\n *\n * The alternative is a hand-written table of \"fields you can set\", and the\n * repository already knows how that ends: a list nobody re-reads drifts from the\n * schema, and the agent trusts it until a publish fails. Every fact here is\n * derived from the same `z.discriminatedUnion` the CLI preflights against and\n * the backend parses with, so it cannot disagree with what a write will accept.\n *\n * Zod internals are read through `_zod.def` on purpose: zod 4 exposes no public\n * introspection API, and the alternative (parsing probe payloads) can only ever\n * tell you a field was rejected, never that it exists. `unwrapObject` and the\n * `optional`/`default` handling are the whole surface of that coupling — if zod\n * changes it, `op-fields.test.ts` fails on the real shipped unions, not just on\n * toy fixtures, which is why those two cases are in the test.\n */\n\n/**\n * A payload field's own metadata never crosses this boundary — only names and,\n * where the field takes a fixed set, its accepted values.\n */\nexport interface OpDescription {\n  /** The op kind, e.g. `google.conversionAction.update`. */\n  kind: string;\n  /** True when the op changes an entity that already exists and must be named. */\n  needsTarget: boolean;\n  /** Payload fields that must be supplied. */\n  required: string[];\n  /** Payload fields that may be supplied (a defaulted field counts — it can be omitted). */\n  optional: string[];\n  /** Field name → the values it accepts, for fields that take a fixed set. */\n  choices: Record<string, string[]>;\n  /**\n   * False when the platform accepts fields beyond the declared ones — Tag Manager\n   * payloads pass unknown keys straight through to Google, so \"not listed here\"\n   * does not mean \"not accepted\" there.\n   */\n  fieldsAreComplete: boolean;\n}\n\ninterface ZodDef {\n  type?: string;\n  shape?: Record<string, unknown>;\n  options?: unknown[];\n  values?: unknown[];\n  entries?: Record<string, unknown>;\n  innerType?: unknown;\n  catchall?: unknown;\n}\n\nfunction def(schema: unknown): ZodDef | undefined {\n  if (typeof schema !== \"object\" || schema === null) return undefined;\n  const internals = (schema as { _zod?: { def?: ZodDef } })._zod;\n  return internals?.def;\n}\n\n/** Peel `.optional()` / `.default()` / `.nullable()` wrappers off a field. */\nfunction unwrap(schema: unknown): { inner: unknown; omittable: boolean } {\n  let current = schema;\n  let omittable = false;\n  for (let depth = 0; depth < 8; depth += 1) {\n    const d = def(current);\n    if (!d) break;\n    if (d.type === \"optional\" || d.type === \"default\" || d.type === \"prefault\") {\n      omittable = true;\n      current = d.innerType;\n      continue;\n    }\n    if (d.type === \"nullable\" || d.type === \"readonly\") {\n      current = d.innerType;\n      continue;\n    }\n    break;\n  }\n  return { inner: current, omittable };\n}\n\n/**\n * The object underneath a payload schema, or undefined when the payload is not\n * an object at all (a discriminated union of formats, say). A cross-field rule\n * added with `.refine()` keeps the shape in zod 4, but `.innerType` is followed\n * anyway so a wrapped schema degrades to the object rather than to nothing.\n */\nfunction unwrapObject(schema: unknown): ZodDef | undefined {\n  let current = schema;\n  for (let depth = 0; depth < 8; depth += 1) {\n    const d = def(current);\n    if (!d) return undefined;\n    if (d.shape) return d;\n    if (d.innerType === undefined) return undefined;\n    current = d.innerType;\n  }\n  return undefined;\n}\n\nfunction literalValue(schema: unknown): string | undefined {\n  const values = def(schema)?.values;\n  const first = values?.[0];\n  return typeof first === \"string\" ? first : undefined;\n}\n\nfunction acceptedValues(schema: unknown): string[] | undefined {\n  const d = def(schema);\n  if (d?.type === \"enum\" && d.entries) return Object.keys(d.entries);\n  if (d?.type === \"literal\" && d.values) {\n    const values = d.values.filter((value): value is string => typeof value === \"string\");\n    return values.length > 0 ? values : undefined;\n  }\n  return undefined;\n}\n\n/** Anything with `.options` — the shipped op unions, or a fixture built in a test. */\ninterface DiscriminatedUnionLike {\n  options: readonly unknown[];\n}\n\ntype PayloadFields = Pick<OpDescription, \"required\" | \"optional\" | \"choices\">;\n\nfunction payloadFields(payload: ZodDef | undefined): PayloadFields {\n  const required: string[] = [];\n  const optional: string[] = [];\n  const choices: Record<string, string[]> = {};\n  for (const [name, field] of Object.entries(payload?.shape ?? {})) {\n    const { inner, omittable } = unwrap(field);\n    (omittable ? optional : required).push(name);\n    const values = acceptedValues(inner);\n    if (values) choices[name] = values;\n  }\n  return { required, optional, choices };\n}\n\n/**\n * True when a key outside the shape cannot get through: stripped (plain object) or refused (a\n * strict object's catchall is `never`). A `looseObject` / `.catchall(z.unknown())` passes it on.\n */\nfunction refusesUnknownKeys(payload: ZodDef): boolean {\n  return payload.catchall === undefined || def(payload.catchall)?.type === \"never\";\n}\n\nfunction describeOption(option: unknown): OpDescription | undefined {\n  const shape = def(option)?.shape;\n  if (!shape) return undefined;\n  const kind = literalValue(shape.kind);\n  if (kind === undefined) return undefined;\n  const payload = unwrapObject(shape.payload);\n  return {\n    kind,\n    needsTarget: shape.target !== undefined,\n    ...payloadFields(payload),\n    fieldsAreComplete: shape.payload === undefined || (payload !== undefined && refusesUnknownKeys(payload)),\n  };\n}\n\n/**\n * One description per member of a staged-write op union, in declaration order.\n */\nexport function describeOpUnion(union: DiscriminatedUnionLike): OpDescription[] {\n  const options = def(union)?.options ?? union.options;\n  return options.map(describeOption).filter((entry): entry is OpDescription => entry !== undefined);\n}\n\n/** The slice of JSON Schema `z.toJSONSchema` writes that a payload's shape is read from. */\ninterface JsonSchema {\n  type?: string | string[];\n  const?: unknown;\n  enum?: unknown[];\n  anyOf?: JsonSchema[];\n  oneOf?: JsonSchema[];\n  properties?: Record<string, JsonSchema>;\n  required?: string[];\n  items?: JsonSchema;\n  prefixItems?: JsonSchema[];\n  additionalProperties?: boolean | JsonSchema;\n  $ref?: string;\n  $defs?: Record<string, JsonSchema>;\n}\n\n/**\n * A shape that contains itself (a Tag Manager parameter holds a list of parameters) arrives as a\n * `$ref` into `$defs`: it is spelled out the first time and written `…` inside itself.\n */\ninterface Rendering {\n  defs: Record<string, JsonSchema>;\n  expanding: ReadonlySet<string>;\n  indent: string;\n}\n\nfunction isObjectSchema(schema: JsonSchema): boolean {\n  return schema.properties !== undefined;\n}\n\n/** Members of a union of objects go one per line, so a reader scans the variants, not a wall. */\nfunction unionText(members: JsonSchema[], at: Rendering): string {\n  const texts = [...new Set(members.map((member) => shapeText(member, { ...at, indent: `${at.indent}  ` })))];\n  if (!members.every(isObjectSchema) || texts.length < 2) return texts.join(\" | \");\n  return texts.map((text, index) => (index === 0 ? text : `\\n${at.indent}| ${text}`)).join(\"\");\n}\n\nfunction objectText(schema: JsonSchema, at: Rendering): string {\n  const required = new Set(schema.required ?? []);\n  const fields = Object.entries(schema.properties ?? {}).map(([name, field]) => {\n    const value = shapeText(field, at);\n    const optional = required.has(name) ? \"\" : \"?\";\n    return value.startsWith(\"\\n\") || !value.includes(\"\\n\")\n      ? `${name}${optional}: ${value}`\n      : `${name}${optional}:\\n${at.indent}  ${value}`;\n  });\n  return fields.length === 0 ? \"{}\" : `{ ${fields.join(\", \")} }`;\n}\n\nfunction typeText(type: string, schema: JsonSchema, at: Rendering): string {\n  if (type === \"array\" && schema.prefixItems) {\n    return `[${schema.prefixItems.map((item) => shapeText(item, at)).join(\", \")}]`;\n  }\n  if (type === \"array\") {\n    const item = schema.items ? shapeText(schema.items, at) : \"unknown\";\n    return item.includes(\" \") ? `(${item})[]` : `${item}[]`;\n  }\n  if (type === \"object\") {\n    const values =\n      typeof schema.additionalProperties === \"object\" ? shapeText(schema.additionalProperties, at) : \"unknown\";\n    return `{ [key: string]: ${values} }`;\n  }\n  return type === \"integer\" ? \"number\" : type;\n}\n\n/** A TypeScript-like one-glance rendering: names, nesting, literals and enums — no patterns or bounds. */\nfunction shapeText(schema: JsonSchema, at: Rendering): string {\n  if (schema.$ref !== undefined) {\n    const name = schema.$ref.replace(\"#/$defs/\", \"\");\n    const target = at.defs[name];\n    if (target === undefined || at.expanding.has(name)) return \"…\";\n    return shapeText(target, { ...at, expanding: new Set([...at.expanding, name]) });\n  }\n  if (schema.const !== undefined) return JSON.stringify(schema.const);\n  if (schema.enum) return schema.enum.map((value) => JSON.stringify(value)).join(\" | \");\n  const members = schema.oneOf ?? schema.anyOf;\n  if (members) return unionText(members, at);\n  if (isObjectSchema(schema)) return objectText(schema, at);\n  const types = Array.isArray(schema.type) ? schema.type : [schema.type ?? \"unknown\"];\n  return types.map((type) => typeText(type, schema, at)).join(\" | \");\n}\n\n/**\n * The payload an op kind takes, as one readable shape: every field, nested objects and each member\n * of a union with its own fields, the literals and enum values each accepts. Read off the contract\n * with zod's own `toJSONSchema`, so it is the shape `--file` is parsed with — undefined for a kind\n * the union does not hold, or one whose op carries no payload.\n */\nexport function describeOpPayload(union: DiscriminatedUnionLike, kind: string): string | undefined {\n  const options = def(union)?.options ?? union.options;\n  const option = options.find((candidate) => literalValue(def(candidate)?.shape?.kind) === kind);\n  const payload = def(option)?.shape?.payload;\n  if (payload === undefined) return undefined;\n  const schema = z.toJSONSchema(payload as z.ZodType, { io: \"input\", unrepresentable: \"any\" }) as JsonSchema;\n  return shapeText(schema, { defs: schema.$defs ?? {}, expanding: new Set(), indent: \"\" });\n}\n\n/** The close of a refusal that names the payload the op takes, or nothing when there is none to name. */\nexport function payloadShapeSentence(union: DiscriminatedUnionLike, kind: string): string {\n  const shape = describeOpPayload(union, kind);\n  return shape === undefined ? \"\" : `. ${kind} takes this payload (a field marked ? may be left out):\\n${shape}`;\n}\n"],"mappings":";AAqBO,IAAM,sBAAsB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AA6CO,IAAM,2BAAyF;AAAA,EACpG,cAAc;AAAA,IACZ,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA,IACd,WAAW;AAAA,IACX,aAAa,CAAC,yCAAyC;AAAA,IACvD,UAAU;AAAA,EACZ;AAAA,EACA,YAAY;AAAA,IACV,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA,IACd,WAAW;AAAA,IACX,aAAa,CAAC,gBAAgB;AAAA,IAC9B,UAAU;AAAA,EACZ;AAAA,EACA,gBAAgB;AAAA,IACd,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA,IACd,WAAW;AAAA,IACX,aAAa,CAAC,QAAQ;AAAA,IACtB,UAAU;AAAA,EACZ;AAAA,EACA,SAAS;AAAA,IACP,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA,IACd,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASX,aAAa,CAAC;AAAA,IACd,UAAU;AAAA,EACZ;AAAA,EACA,eAAe;AAAA,IACb,IAAI;AAAA,IACJ,OAAO;AAAA;AAAA,IAEP,UAAU;AAAA,IACV,cAAc;AAAA,IACd,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMX,aAAa,CAAC;AAAA,IACd,UAAU;AAAA,IACV,cAAc;AAAA,EAChB;AAAA,EACA,eAAe;AAAA,IACb,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA,IACd,WAAW;AAAA,IACX,aAAa;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,UAAU;AAAA,EACZ;AAAA,EACA,KAAK;AAAA,IACH,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOd,WAAW;AAAA,IACX,aAAa,CAAC,gDAAgD;AAAA,IAC9D,UAAU;AAAA,EACZ;AAAA,EACA,KAAK;AAAA,IACH,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA,IACd,WAAW;AAAA,IACX,aAAa,CAAC,4CAA4C;AAAA,IAC1D,UAAU;AAAA,EACZ;AAAA,EACA,SAAS;AAAA,IACP,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,UAAU;AAAA,IACV,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMd,WAAW;AAAA,IACX,aAAa;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,UAAU;AAAA,EACZ;AACF;;;ACzLA,SAAS,KAAAA,UAAS;;;ACTlB,SAAS,SAAS;AAoDlB,SAAS,IAAI,QAAqC;AAChD,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,YAAa,OAAuC;AAC1D,SAAO,WAAW;AACpB;AAyCA,SAAS,aAAa,QAAqC;AACzD,QAAM,SAAS,IAAI,MAAM,GAAG;AAC5B,QAAM,QAAQ,SAAS,CAAC;AACxB,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;AAwFA,SAAS,eAAe,QAA6B;AACnD,SAAO,OAAO,eAAe;AAC/B;AAGA,SAAS,UAAU,SAAuB,IAAuB;AAC/D,QAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,QAAQ,IAAI,CAAC,WAAW,UAAU,QAAQ,EAAE,GAAG,IAAI,QAAQ,GAAG,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1G,MAAI,CAAC,QAAQ,MAAM,cAAc,KAAK,MAAM,SAAS,EAAG,QAAO,MAAM,KAAK,KAAK;AAC/E,SAAO,MAAM,IAAI,CAAC,MAAM,UAAW,UAAU,IAAI,OAAO;AAAA,EAAK,GAAG,MAAM,KAAK,IAAI,EAAG,EAAE,KAAK,EAAE;AAC7F;AAEA,SAAS,WAAW,QAAoB,IAAuB;AAC7D,QAAM,WAAW,IAAI,IAAI,OAAO,YAAY,CAAC,CAAC;AAC9C,QAAM,SAAS,OAAO,QAAQ,OAAO,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;AAC5E,UAAM,QAAQ,UAAU,OAAO,EAAE;AACjC,UAAM,WAAW,SAAS,IAAI,IAAI,IAAI,KAAK;AAC3C,WAAO,MAAM,WAAW,IAAI,KAAK,CAAC,MAAM,SAAS,IAAI,IACjD,GAAG,IAAI,GAAG,QAAQ,KAAK,KAAK,KAC5B,GAAG,IAAI,GAAG,QAAQ;AAAA,EAAM,GAAG,MAAM,KAAK,KAAK;AAAA,EACjD,CAAC;AACD,SAAO,OAAO,WAAW,IAAI,OAAO,KAAK,OAAO,KAAK,IAAI,CAAC;AAC5D;AAEA,SAAS,SAAS,MAAc,QAAoB,IAAuB;AACzE,MAAI,SAAS,WAAW,OAAO,aAAa;AAC1C,WAAO,IAAI,OAAO,YAAY,IAAI,CAAC,SAAS,UAAU,MAAM,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC;AAAA,EAC7E;AACA,MAAI,SAAS,SAAS;AACpB,UAAM,OAAO,OAAO,QAAQ,UAAU,OAAO,OAAO,EAAE,IAAI;AAC1D,WAAO,KAAK,SAAS,GAAG,IAAI,IAAI,IAAI,QAAQ,GAAG,IAAI;AAAA,EACrD;AACA,MAAI,SAAS,UAAU;AACrB,UAAM,SACJ,OAAO,OAAO,yBAAyB,WAAW,UAAU,OAAO,sBAAsB,EAAE,IAAI;AACjG,WAAO,oBAAoB,MAAM;AAAA,EACnC;AACA,SAAO,SAAS,YAAY,WAAW;AACzC;AAGA,SAAS,UAAU,QAAoB,IAAuB;AAC5D,MAAI,OAAO,SAAS,QAAW;AAC7B,UAAM,OAAO,OAAO,KAAK,QAAQ,YAAY,EAAE;AAC/C,UAAM,SAAS,GAAG,KAAK,IAAI;AAC3B,QAAI,WAAW,UAAa,GAAG,UAAU,IAAI,IAAI,EAAG,QAAO;AAC3D,WAAO,UAAU,QAAQ,EAAE,GAAG,IAAI,WAAW,oBAAI,IAAI,CAAC,GAAG,GAAG,WAAW,IAAI,CAAC,EAAE,CAAC;AAAA,EACjF;AACA,MAAI,OAAO,UAAU,OAAW,QAAO,KAAK,UAAU,OAAO,KAAK;AAClE,MAAI,OAAO,KAAM,QAAO,OAAO,KAAK,IAAI,CAAC,UAAU,KAAK,UAAU,KAAK,CAAC,EAAE,KAAK,KAAK;AACpF,QAAM,UAAU,OAAO,SAAS,OAAO;AACvC,MAAI,QAAS,QAAO,UAAU,SAAS,EAAE;AACzC,MAAI,eAAe,MAAM,EAAG,QAAO,WAAW,QAAQ,EAAE;AACxD,QAAM,QAAQ,MAAM,QAAQ,OAAO,IAAI,IAAI,OAAO,OAAO,CAAC,OAAO,QAAQ,SAAS;AAClF,SAAO,MAAM,IAAI,CAAC,SAAS,SAAS,MAAM,QAAQ,EAAE,CAAC,EAAE,KAAK,KAAK;AACnE;AAQO,SAAS,kBAAkB,OAA+B,MAAkC;AACjG,QAAM,UAAU,IAAI,KAAK,GAAG,WAAW,MAAM;AAC7C,QAAM,SAAS,QAAQ,KAAK,CAAC,cAAc,aAAa,IAAI,SAAS,GAAG,OAAO,IAAI,MAAM,IAAI;AAC7F,QAAM,UAAU,IAAI,MAAM,GAAG,OAAO;AACpC,MAAI,YAAY,OAAW,QAAO;AAClC,QAAM,SAAS,EAAE,aAAa,SAAsB,EAAE,IAAI,SAAS,iBAAiB,MAAM,CAAC;AAC3F,SAAO,UAAU,QAAQ,EAAE,MAAM,OAAO,SAAS,CAAC,GAAG,WAAW,oBAAI,IAAI,GAAG,QAAQ,GAAG,CAAC;AACzF;;;ADzOO,IAAM,0BAA0BC,GAAE,KAAK,mBAAmB;AAE1D,IAAM,4BAA4BA,GAAE,OAAO;AAAA;AAAA,EAEhD,SAAS,wBAAwB,SAAS;AAAA;AAAA,EAE1C,MAAMA,GAAE,QAAQ,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAK3B,cAAcA,GAAE,OAAO,EAAE,SAAS;AACpC,CAAC;AAIM,IAAM,2BAA2BA,GAAE,OAAO;AAAA,EAC/C,IAAIA,GAAE,OAAO;AAAA,EACb,MAAMA,GAAE,OAAO,EAAE,SAAS;AAC5B,CAAC;AAGM,IAAM,qBAAqBA,GAAE,OAAO;AAAA,EACzC,MAAMA,GAAE,OAAO;AAAA;AAAA,EAEf,aAAaA,GAAE,QAAQ;AAAA,EACvB,UAAUA,GAAE,MAAMA,GAAE,OAAO,CAAC;AAAA,EAC5B,UAAUA,GAAE,MAAMA,GAAE,OAAO,CAAC;AAAA;AAAA,EAE5B,SAASA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,MAAMA,GAAE,OAAO,CAAC,CAAC;AAAA;AAAA,EAEjD,mBAAmBA,GAAE,QAAQ;AAC/B,CAAC;AAGM,IAAM,4BAA4BA,GAAE,OAAO;AAAA,EAChD,YAAYA,GAAE,OAAO;AAAA,EACrB,OAAOA,GAAE,KAAK,CAAC,aAAa,oBAAoB,eAAe,CAAC;AAAA,EAChE,QAAQA,GAAE,OAAO;AACnB,CAAC;AAaM,IAAM,4BAA4BA,GAAE,KAAK,CAAC,QAAQ,sBAAsB,MAAM,CAAC;AAG/E,IAAM,gCAAgCA,GAAE,OAAO;AAAA,EACpD,SAAS;AAAA,EACT,OAAOA,GAAE,OAAO;AAAA,EAChB,WAAWA,GAAE,QAAQ;AAAA;AAAA,EAErB,WAAWA,GAAE,MAAM,wBAAwB;AAAA,EAC3C,QAAQA,GAAE,KAAK,CAAC,cAAc,aAAa,eAAe,CAAC;AAAA,EAC3D,WAAW;AAAA;AAAA,EAEX,eAAeA,GAAE,OAAO;AAAA;AAAA,EAExB,kBAAkBA,GAAE,MAAMA,GAAE,OAAO,CAAC;AAAA;AAAA,EAEpC,UAAUA,GAAE,MAAMA,GAAE,OAAO,CAAC;AAAA;AAAA,EAE5B,QAAQA,GAAE,MAAM,yBAAyB;AAAA;AAAA,EAEzC,KAAKA,GAAE,MAAM,kBAAkB,EAAE,SAAS;AAAA;AAAA,EAE1C,UAAUA,GAAE,OAAO;AACrB,CAAC;AAoBM,IAAM,uBAAuBA,GAAE,OAAO;AAAA;AAAA,EAE3C,KAAKA,GAAE,OAAO;AAAA,EACd,OAAOA,GAAE,OAAO;AAAA;AAAA,EAEhB,MAAMA,GAAE,KAAK,CAAC,OAAO,YAAY,OAAO,CAAC;AAAA;AAAA,EAEzC,OAAOA,GAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQhB,OAAOA,GAAE,QAAQ;AAAA;AAAA,EAEjB,MAAMA,GAAE,OAAO,EAAE,SAAS;AAC5B,CAAC;AAGM,IAAM,6BAA6BA,GAAE,OAAO;AAAA,EACjD,IAAIA,GAAE,QAAQ,IAAI;AAAA,EAClB,MAAMA,GAAE,OAAO;AAAA,IACb,UAAUA,GAAE,MAAM,6BAA6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAM/C,OAAOA,GAAE,MAAM,oBAAoB;AAAA,EACrC,CAAC;AACH,CAAC;","names":["z","z"]}