@wootsup/mcp 0.1.0-rc.1

package/dist/auth/profiles.js

@@ -0,0 +1,200 @@
+// src/auth/profiles.ts — Phase 5.2.
+//
+// Flat-file profile registry for the API Mapper MCP server. A "profile"
+// pairs a site URL + platform kind with a Keychain ref that points to the
+// raw token. Tokens themselves NEVER live in this file — the Keychain is
+// the single source of truth for secret material.
+//
+// Storage layout under <configDir>:
+//   profiles.json   — JSON array of Profile records.
+//   active          — single line containing the active profile name (or absent).
+//
+// Active pointer is split out so a torn write to profiles.json doesn't take
+// down "which profile am I using right now".
+import { mkdirSync, existsSync, readFileSync, writeFileSync, unlinkSync, } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+// ── Standard OS config dir resolution ────────────────────────────────────
+/**
+ * Resolve the canonical config directory for apimapper-mcp:
+ *
+ *   - macOS/Linux: $XDG_CONFIG_HOME/apimapper-mcp/ if set, else
+ *                  $HOME/.config/apimapper-mcp/
+ *   - Windows:     %APPDATA%/apimapper-mcp/
+ *
+ * Falls back to $HOME/.apimapper-mcp/ if none of the env vars are set
+ * (degenerate environment — better than failing).
+ */
+export function resolveConfigDir() {
+    const xdg = process.env.XDG_CONFIG_HOME;
+    if (xdg && xdg.length > 0)
+        return join(xdg, "apimapper-mcp");
+    if (process.platform === "win32") {
+        const appdata = process.env.APPDATA;
+        if (appdata && appdata.length > 0)
+            return join(appdata, "apimapper-mcp");
+    }
+    const home = homedir();
+    if (home && home.length > 0) {
+        return join(home, ".config", "apimapper-mcp");
+    }
+    return join(process.cwd(), ".apimapper-mcp");
+}
+// ── ProfileStore ─────────────────────────────────────────────────────────
+export class ProfileStore {
+    dir;
+    profilesPath;
+    activePath;
+    constructor(configDir = resolveConfigDir()) {
+        this.dir = configDir;
+        this.profilesPath = join(configDir, "profiles.json");
+        this.activePath = join(configDir, "active");
+        if (!existsSync(this.dir)) {
+            mkdirSync(this.dir, { recursive: true });
+        }
+    }
+    // ── reads ──────────────────────────────────────────────────────────────
+    readAll() {
+        if (!existsSync(this.profilesPath))
+            return [];
+        let raw;
+        try {
+            raw = readFileSync(this.profilesPath, "utf8");
+        }
+        catch {
+            return [];
+        }
+        if (!raw.trim())
+            return [];
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            return [];
+        }
+        if (!Array.isArray(parsed))
+            return [];
+        // Filter out malformed entries rather than throwing — a corrupt single
+        // record shouldn't take down the whole store.
+        return parsed.filter(isProfile);
+    }
+    writeAll(list) {
+        writeFileSync(this.profilesPath, JSON.stringify(list, null, 2), {
+            mode: 0o600,
+        });
+    }
+    readActiveName() {
+        if (!existsSync(this.activePath))
+            return null;
+        try {
+            const raw = readFileSync(this.activePath, "utf8").trim();
+            return raw.length > 0 ? raw : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    writeActiveName(name) {
+        if (name === null) {
+            if (existsSync(this.activePath)) {
+                try {
+                    unlinkSync(this.activePath);
+                }
+                catch {
+                    /* best-effort */
+                }
+            }
+            return;
+        }
+        writeFileSync(this.activePath, name, { mode: 0o600 });
+    }
+    // ── public API ─────────────────────────────────────────────────────────
+    async list() {
+        return this.readAll();
+    }
+    async get(name) {
+        const all = this.readAll();
+        return all.find((p) => p.name === name) ?? null;
+    }
+    async add(profile) {
+        const all = this.readAll();
+        if (all.some((p) => p.name === profile.name)) {
+            throw new Error(`Profile "${profile.name}" already exists`);
+        }
+        all.push(profile);
+        this.writeAll(all);
+        // Auto-promote the first profile to active. We check the on-disk pointer
+        // rather than `all.length === 1` so an externally-cleared active file
+        // doesn't accidentally leave the store with profiles but no active one.
+        if (this.readActiveName() === null) {
+            this.writeActiveName(profile.name);
+        }
+    }
+    async remove(name) {
+        const all = this.readAll();
+        const idx = all.findIndex((p) => p.name === name);
+        if (idx < 0)
+            return false;
+        all.splice(idx, 1);
+        this.writeAll(all);
+        if (this.readActiveName() === name) {
+            // Active profile is gone; clear pointer rather than silently picking a
+            // new one. Caller must explicitly setActive() to choose a successor.
+            this.writeActiveName(null);
+        }
+        return true;
+    }
+    async update(name, partial) {
+        const all = this.readAll();
+        const idx = all.findIndex((p) => p.name === name);
+        if (idx < 0)
+            throw new Error(`Profile "${name}" not found`);
+        // Refuse to rewrite the immutable identity fields via update() — caller
+        // should remove + add for that to keep the active pointer + keychain ref
+        // story consistent.
+        const merged = {
+            ...all[idx],
+            ...partial,
+            name: all[idx].name,
+            addedAt: all[idx].addedAt,
+        };
+        all[idx] = merged;
+        this.writeAll(all);
+    }
+    async setActive(name) {
+        const all = this.readAll();
+        if (!all.some((p) => p.name === name)) {
+            throw new Error(`Profile "${name}" not found`);
+        }
+        this.writeActiveName(name);
+    }
+    async getActive() {
+        const name = this.readActiveName();
+        if (!name)
+            return null;
+        const all = this.readAll();
+        return all.find((p) => p.name === name) ?? null;
+    }
+}
+// ── guards ───────────────────────────────────────────────────────────────
+function isProfile(v) {
+    if (!v || typeof v !== "object")
+        return false;
+    const o = v;
+    if (typeof o.name !== "string")
+        return false;
+    if (typeof o.siteUrl !== "string")
+        return false;
+    if (o.platform !== "wordpress" &&
+        o.platform !== "joomla" &&
+        o.platform !== "standalone") {
+        return false;
+    }
+    if (typeof o.keychainRef !== "string")
+        return false;
+    if (typeof o.addedAt !== "string")
+        return false;
+    return true;
+}
+//# sourceMappingURL=profiles.js.map

package/dist/auth/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/auth/profiles.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,EAAE;AACF,wEAAwE;AACxE,0EAA0E;AAC1E,yEAAyE;AACzE,kDAAkD;AAClD,EAAE;AACF,oCAAoC;AACpC,qDAAqD;AACrD,kFAAkF;AAClF,EAAE;AACF,4EAA4E;AAC5E,6CAA6C;AAE7C,OAAO,EACL,SAAS,EACT,UAAU,EACV,YAAY,EACZ,aAAa,EACb,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA6BjC,4EAA4E;AAE5E;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAE7D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QACpC,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,gBAAgB,CAAC,CAAC;AAC/C,CAAC;AAED,4EAA4E;AAE5E,MAAM,OAAO,YAAY;IACN,GAAG,CAAS;IACZ,YAAY,CAAS;IACrB,UAAU,CAAS;IAEpC,YAAY,YAAoB,gBAAgB,EAAE;QAChD,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,0EAA0E;IAElE,OAAO;QACb,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9C,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC;QAC3B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,uEAAuE;QACvE,8CAA8C;QAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAEO,QAAQ,CAAC,IAAe;QAC9B,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YAC9D,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAEO,cAAc;QACpB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACzD,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,IAAmB;QACzC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChC,IAAI,CAAC;oBACH,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC9B,CAAC;gBAAC,MAAM,CAAC;oBACP,iBAAiB;gBACnB,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,0EAA0E;IAE1E,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAgB;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,YAAY,OAAO,CAAC,IAAI,kBAAkB,CAAC,CAAC;QAC9D,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnB,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,IAAI,IAAI,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAClD,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,IAAI,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;YACnC,uEAAuE;YACvE,qEAAqE;YACrE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,OAAyB;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAClD,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,aAAa,CAAC,CAAC;QAC5D,wEAAwE;QACxE,yEAAyE;QACzE,oBAAoB;QACpB,MAAM,MAAM,GAAY;YACtB,GAAG,GAAG,CAAC,GAAG,CAAE;YACZ,GAAG,OAAO;YACV,IAAI,EAAE,GAAG,CAAC,GAAG,CAAE,CAAC,IAAI;YACpB,OAAO,EAAE,GAAG,CAAC,GAAG,CAAE,CAAC,OAAO;SAC3B,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,aAAa,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;IAClD,CAAC;CACF;AAED,4EAA4E;AAE5E,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChD,IACE,CAAC,CAAC,QAAQ,KAAK,WAAW;QAC1B,CAAC,CAAC,QAAQ,KAAK,QAAQ;QACvB,CAAC,CAAC,QAAQ,KAAK,YAAY,EAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/auth/token.d.ts

@@ -0,0 +1,27 @@
+export interface TokenPayload {
+    /** Schema version — currently always 1. */
+    v: 1;
+    /** Issuer — typically the site URL (e.g. "https://example.com/wp"). */
+    iss: string;
+    /** Key ID — server-assigned identifier for this key (e.g. "key_abc"). */
+    kid: string;
+    /** Subject — user ID this key was issued to. */
+    sub: string;
+    /** Scope — list of permissions granted (e.g. ["read", "admin"]). */
+    scope: string[];
+    /** Issued-at (unix seconds). */
+    iat: number;
+    /** Expiry (unix seconds). Optional — keys can be non-expiring. */
+    exp?: number;
+    /** Human-readable label set by the user at key creation time. */
+    name?: string;
+}
+/**
+ * Decode a token payload without verifying the signature. Returns the
+ * TokenPayload on success, or `null` on ANY failure (malformed format,
+ * invalid base64, non-JSON, non-object payload, missing required fields,
+ * unsupported schema version).
+ *
+ * No network call is made.
+ */
+export declare function decodeToken(token: string): TokenPayload | null;

package/dist/auth/token.js

@@ -0,0 +1,88 @@
+// src/auth/token.ts — client-side, network-free token payload decode.
+//
+// Token format (matches src/modules/core/src/Mcp/KeyService.php):
+//
+//   amk_<env>_<payloadB64url>.<sigB64url>
+//
+// where env ∈ {live, test} and payloadB64url is a JSON object with the
+// shape declared by TokenPayload below.
+//
+// IMPORTANT: this module deliberately does NOT verify the HMAC signature.
+// The signing secret never leaves the PHP plugin; client-side decode is
+// purely informational (display issuer, scope, expiry in setup CLI, etc.).
+// Every actual authorisation decision happens server-side on each request.
+// Token layout: amk_(live|test)_<payloadB64url>.<sigB64url>
+// b64url alphabet is [A-Za-z0-9_-] (no padding).
+const TOKEN_RE = /^amk_(live|test)_([A-Za-z0-9_-]+)\.([A-Za-z0-9_-]+)$/;
+/** Decode a base64url-encoded string to UTF-8. Returns null on invalid b64. */
+function b64urlDecode(s) {
+    try {
+        const padded = s.replaceAll("-", "+").replaceAll("_", "/");
+        // Add back stripped '=' padding (length must be multiple of 4).
+        const padLen = (4 - (padded.length % 4)) % 4;
+        const buf = Buffer.from(padded + "=".repeat(padLen), "base64");
+        return buf.toString("utf8");
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Decode a token payload without verifying the signature. Returns the
+ * TokenPayload on success, or `null` on ANY failure (malformed format,
+ * invalid base64, non-JSON, non-object payload, missing required fields,
+ * unsupported schema version).
+ *
+ * No network call is made.
+ */
+export function decodeToken(token) {
+    if (typeof token !== "string" || token.length === 0)
+        return null;
+    const m = TOKEN_RE.exec(token);
+    if (!m)
+        return null;
+    const payloadB64 = m[2];
+    const rawJson = b64urlDecode(payloadB64);
+    if (rawJson === null)
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(rawJson);
+    }
+    catch {
+        return null;
+    }
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return null;
+    }
+    const p = parsed;
+    // Schema-version guard — refuse anything we don't recognise.
+    if (p.v !== 1)
+        return null;
+    // Required fields with the right runtime types.
+    if (typeof p.iss !== "string")
+        return null;
+    if (typeof p.kid !== "string")
+        return null;
+    if (typeof p.sub !== "string")
+        return null;
+    if (typeof p.iat !== "number")
+        return null;
+    if (!Array.isArray(p.scope) || !p.scope.every((s) => typeof s === "string")) {
+        return null;
+    }
+    const out = {
+        v: 1,
+        iss: p.iss,
+        kid: p.kid,
+        sub: p.sub,
+        scope: p.scope,
+        iat: p.iat,
+    };
+    if (typeof p.exp === "number")
+        out.exp = p.exp;
+    if (typeof p.name === "string")
+        out.name = p.name;
+    return out;
+}
+//# sourceMappingURL=token.js.map

package/dist/auth/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/auth/token.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,kEAAkE;AAClE,EAAE;AACF,0CAA0C;AAC1C,EAAE;AACF,uEAAuE;AACvE,wCAAwC;AACxC,EAAE;AACF,0EAA0E;AAC1E,wEAAwE;AACxE,2EAA2E;AAC3E,2EAA2E;AAqB3E,4DAA4D;AAC5D,iDAAiD;AACjD,MAAM,QAAQ,GAAG,sDAAsD,CAAC;AAExE,+EAA+E;AAC/E,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3D,gEAAgE;QAChE,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC/D,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjE,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpB,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAElC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,GAAG,MAAiC,CAAC;IAE5C,6DAA6D;IAC7D,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3B,gDAAgD;IAChD,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAiB;QACxB,CAAC,EAAE,CAAC;QACJ,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,KAAK,EAAE,CAAC,CAAC,KAAiB;QAC1B,GAAG,EAAE,CAAC,CAAC,GAAG;KACX,CAAC;IACF,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;IAC/C,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IAElD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+/**
+ * Constructs the McpServer with bundled skill instructions wired into the
+ * `instructions` field. Extracted as a factory for testability.
+ *
+ * The instructions string is sent to MCP clients (Claude / ChatGPT / Cursor)
+ * as system-prompt context on every session — see Phase 7.2 of the
+ * apimapper-mcp implementation plan.
+ */
+export declare function createServer(): McpServer;
+declare const server: McpServer;
+export { server };

package/dist/index.js

@@ -0,0 +1,137 @@
+#!/usr/bin/env node
+// @customgraph/mcp-adapter-apimapper-rest — API Mapper REST MCP Server
+// Full coverage of /wp-json/api-mapper/v1/* (~65 tools across 12 modules)
+//
+// Auth: WordPress Application Password (1Password Claude-Secrets vault) or
+// API Mapper MCP-key (amk_live_...) for DXT/GUI installs.
+// See README.md for setup + smoke-test.
+// ── DXT environment bootstrap (Phase 9.3) ─────────────────────────────
+// When installed via Claude Desktop's DXT bundle path, the runtime is
+// invoked with three user_config env vars:
+//   APIMAPPER_TOKEN     — amk_live_... MCP key
+//   APIMAPPER_SITE_URL  — site base URL (https://example.com)
+//   APIMAPPER_PLATFORM  — "wordpress" | "joomla"
+// The existing client.ts module reads legacy APIMAPPER_WP_* vars — we
+// bridge here so both setup paths work without duplicating wiring.
+// This MUST happen before any module imports that read process.env.
+if (process.env.APIMAPPER_TOKEN && !process.env.APIMAPPER_WP_APP_PASS) {
+    process.env.APIMAPPER_WP_APP_PASS = process.env.APIMAPPER_TOKEN;
+}
+if (process.env.APIMAPPER_SITE_URL && !process.env.APIMAPPER_WP_BASE) {
+    process.env.APIMAPPER_WP_BASE = process.env.APIMAPPER_SITE_URL;
+}
+// APIMAPPER_PLATFORM is consumed by the platform factory once wired
+// (Phase 4 abstraction lands per-tool). Surfaced as a no-op read here so
+// the build-dxt grep gate verifies every user_config key has a runtime
+// consumer — see scripts/build-dxt.js.
+void process.env.APIMAPPER_PLATFORM;
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { loadModules, formatResult, readOnly } from "@getimo/mcp-toolkit";
+import { apimapperRestModule } from "./modules/apimapper/index.js";
+import { loadSkillInstructions } from "./skill-instructions.js";
+import { connectStdio } from "./transports/stdio.js";
+import { createKeychain } from "./auth/keychain.js";
+import { ProfileStore, resolveConfigDir } from "./auth/profiles.js";
+import { registerUseProfileTool } from "./modules/apimapper/use-profile.js";
+/**
+ * Constructs the McpServer with bundled skill instructions wired into the
+ * `instructions` field. Extracted as a factory for testability.
+ *
+ * The instructions string is sent to MCP clients (Claude / ChatGPT / Cursor)
+ * as system-prompt context on every session — see Phase 7.2 of the
+ * apimapper-mcp implementation plan.
+ */
+export function createServer() {
+    return new McpServer({
+        name: "apimapper-rest",
+        version: "0.2.0",
+    }, {
+        instructions: loadSkillInstructions(),
+    });
+}
+const server = createServer();
+let moduleStatuses = [];
+// Root tool: module-loading status. Distinct from `apimapper_health` (which
+// probes connectivity + auth against the live REST surface). Names diverge
+// to avoid agent confusion.
+server.registerTool("apimapper_rest_modules_status", {
+    title: "Adapter Modules Status",
+    description: "Module-loading status for this MCP adapter (which sub-modules registered cleanly). " +
+        "For runtime connectivity + auth checks against the API Mapper REST surface, use apimapper_health.",
+    inputSchema: {},
+    annotations: readOnly(),
+}, async () => {
+    const ok = moduleStatuses.filter((m) => m.status === "ok").length;
+    const failed = moduleStatuses.filter((m) => m.status === "error").length;
+    return formatResult({
+        version: "0.2.0",
+        modules_loaded: ok,
+        modules_total: moduleStatuses.length,
+        modules_failed: failed,
+        modules: moduleStatuses.map((m) => ({
+            name: m.name,
+            status: m.status,
+            description: m.description,
+            error: m.error,
+        })),
+        next: "Use apimapper_health to verify live connectivity + auth.",
+    }, false, { maxChars: 2000 });
+});
+async function main() {
+    moduleStatuses = await loadModules(server, [apimapperRestModule]);
+    // Profile + keychain wiring for apimapper_use_profile.
+    // Phase 5 deferred this to the server entrypoint because constructing the
+    // keychain is async (it probes the OS Secret-Service, falling back to a
+    // file impl) and the module-level register() signature is sync.
+    // Best-effort: log + skip if the keychain init throws on a locked-down host
+    // so the rest of the MCP surface still boots.
+    try {
+        const configDir = resolveConfigDir();
+        const keychain = await createKeychain({ configDir });
+        const profileStore = new ProfileStore(configDir);
+        registerUseProfileTool(server, { store: profileStore, keychain });
+    }
+    catch (err) {
+        console.error("[apimapper-rest] use-profile tool disabled — keychain/profile init failed:", err instanceof Error ? err.message : err);
+    }
+    process.stdout.on("error", (err) => {
+        if (err.code === "EPIPE" || err.code === "ERR_STREAM_DESTROYED")
+            process.exit(0);
+        throw err;
+    });
+    await connectStdio(server);
+    const ok = moduleStatuses.filter((m) => m.status === "ok").length;
+    console.error(`[apimapper-rest] MCP Server v0.2.0 running — ${ok}/${moduleStatuses.length} modules loaded`);
+}
+// ── Subcommand dispatch (Phase 6 setup CLI integration) ──────────────
+// AI clients invoke `apimapper-mcp` with stdio piped and no subcommand;
+// in that case we boot the MCP server (default branch below).
+// Humans run `apimapper-mcp setup` / `install-skill` / `help` from a
+// terminal — those subcommands route to setup-cli.ts's runCli().
+//
+// Setup-cli also handles wizard/help/install-skill flows. We import it
+// lazily inside the subcommand branch so the AI-client startup path
+// stays free of clack/prompts side-effects.
+const subcommand = process.argv[2];
+const CLI_SUBCOMMANDS = new Set(["setup", "install-skill", "install", "help", "--help", "-h"]);
+if (subcommand && CLI_SUBCOMMANDS.has(subcommand)) {
+    void (async () => {
+        try {
+            const { runCli } = await import("./setup-cli.js");
+            const code = await runCli(process.argv.slice(2));
+            process.exit(code);
+        }
+        catch (err) {
+            console.error("[apimapper-mcp] CLI fatal error:", err);
+            process.exit(99);
+        }
+    })();
+}
+else {
+    main().catch((error) => {
+        console.error("[apimapper-rest] Fatal error:", error);
+        process.exit(1);
+    });
+}
+export { server };
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,uEAAuE;AACvE,0EAA0E;AAC1E,EAAE;AACF,2EAA2E;AAC3E,0DAA0D;AAC1D,wCAAwC;AAExC,yEAAyE;AACzE,sEAAsE;AACtE,2CAA2C;AAC3C,+CAA+C;AAC/C,8DAA8D;AAC9D,iDAAiD;AACjD,sEAAsE;AACtE,mEAAmE;AACnE,oEAAoE;AACpE,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AAClE,CAAC;AACD,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AACjE,CAAC;AACD,oEAAoE;AACpE,yEAAyE;AACzE,uEAAuE;AACvE,uCAAuC;AACvC,KAAK,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAqB,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAE5E;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,SAAS,CAClB;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,OAAO;KACjB,EACD;QACE,YAAY,EAAE,qBAAqB,EAAE;KACtC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;AAE9B,IAAI,cAAc,GAAmB,EAAE,CAAC;AAExC,4EAA4E;AAC5E,2EAA2E;AAC3E,4BAA4B;AAC5B,MAAM,CAAC,YAAY,CACjB,+BAA+B,EAC/B;IACE,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EACT,qFAAqF;QACrF,mGAAmG;IACrG,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,QAAQ,EAAE;CACxB,EACD,KAAK,IAAI,EAAE;IACT,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IAClE,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACzE,OAAO,YAAY,CACjB;QACE,OAAO,EAAE,OAAO;QAChB,cAAc,EAAE,EAAE;QAClB,aAAa,EAAE,cAAc,CAAC,MAAM;QACpC,cAAc,EAAE,MAAM;QACtB,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,CAAC,CAAC;QACH,IAAI,EAAE,0DAA0D;KACjE,EACD,KAAK,EACL,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,KAAK,UAAU,IAAI;IACjB,cAAc,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAElE,uDAAuD;IACvD,0EAA0E;IAC1E,wEAAwE;IACxE,gEAAgE;IAChE,4EAA4E;IAC5E,8CAA8C;IAC9C,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;QACjD,sBAAsB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,4EAA4E,EAC5E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CACzC,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;QACxD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,sBAAsB;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,GAAG,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IAClE,OAAO,CAAC,KAAK,CACX,gDAAgD,EAAE,IAAI,cAAc,CAAC,MAAM,iBAAiB,CAC7F,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,wEAAwE;AACxE,8DAA8D;AAC9D,qEAAqE;AACrE,iEAAiE;AACjE,EAAE;AACF,uEAAuE;AACvE,oEAAoE;AACpE,4CAA4C;AAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AAE/F,IAAI,UAAU,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;IAClD,KAAK,CAAC,KAAK,IAAmB,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;KAAM,CAAC;IACN,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACrB,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,MAAM,EAAE,CAAC"}

package/dist/install-skill.d.ts

@@ -0,0 +1,23 @@
+export declare const MARKER_LINE = "<!-- apimapper-mcp:skill-installed -->";
+export interface InstallSkillOptions {
+    /**
+     * Package root that contains the bundled `skills/` dir. Defaults to the
+     * directory two levels up from this module (i.e. the package root in
+     * both dev and dist layouts).
+     */
+    pkgRoot?: string;
+    /**
+     * Target dir where the `apimapper/` skill folder will land.
+     * Default: ~/.claude/skills/
+     */
+    targetSkillsDir?: string;
+    /**
+     * Target AGENTS.md file to append the marker to. Default: ~/AGENTS.md.
+     */
+    targetAgentsFile?: string;
+}
+export interface InstallSkillResult {
+    copied: boolean;
+    markerAlreadyPresent: boolean;
+}
+export declare function installSkill(options?: InstallSkillOptions): Promise<InstallSkillResult>;

package/dist/install-skill.js

@@ -0,0 +1,73 @@
+// src/install-skill.ts — Phase 7.5.
+//
+// installSkill() copies the bundled skills/apimapper/ directory into the
+// caller's skills directory (typically ~/.claude/skills/) and appends a
+// marker line to an AGENTS.md file (typically ~/AGENTS.md). Idempotent.
+//
+// Called from the CLI by `apimapper-mcp install-skill`. Phase 6's @clack
+// wizard will wrap this for first-run setup; in the meantime, the
+// subcommand alone is enough for users to point their AI client at the
+// bundled skill content.
+import { existsSync, mkdirSync, readFileSync, readdirSync, copyFileSync, statSync, writeFileSync, appendFileSync, } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { dirname, join, resolve } from "node:path";
+import { homedir } from "node:os";
+export const MARKER_LINE = "<!-- apimapper-mcp:skill-installed -->";
+const MARKER_BLOCK = `
+
+## API Mapper MCP
+
+${MARKER_LINE}
+The API Mapper skill is installed at \`~/.claude/skills/apimapper/\`. Refer to it for flow, connection, OAuth, YOOtheme, and Joomla guidance. Source: https://github.com/wootsup/api-mapper.
+`;
+function defaultPkgRoot() {
+    // <pkg-root>/src/install-skill.ts → up one.
+    const here = dirname(fileURLToPath(import.meta.url));
+    return resolve(here, "..");
+}
+function copyDirRecursive(src, dst) {
+    if (!existsSync(dst))
+        mkdirSync(dst, { recursive: true });
+    for (const entry of readdirSync(src)) {
+        const sPath = join(src, entry);
+        const dPath = join(dst, entry);
+        const stat = statSync(sPath);
+        if (stat.isDirectory()) {
+            copyDirRecursive(sPath, dPath);
+        }
+        else {
+            copyFileSync(sPath, dPath);
+        }
+    }
+}
+export async function installSkill(options = {}) {
+    const pkgRoot = options.pkgRoot ?? defaultPkgRoot();
+    const targetSkillsDir = options.targetSkillsDir ?? join(homedir(), ".claude", "skills");
+    const targetAgentsFile = options.targetAgentsFile ?? join(homedir(), "AGENTS.md");
+    // 1. Copy skills/apimapper → targetSkillsDir/apimapper.
+    const srcSkillDir = join(pkgRoot, "skills", "apimapper");
+    if (!existsSync(srcSkillDir)) {
+        throw new Error(`Bundled skill not found at ${srcSkillDir}. ` +
+            `Is the package installed correctly? (Expected pkgRoot=${pkgRoot})`);
+    }
+    if (!existsSync(targetSkillsDir)) {
+        mkdirSync(targetSkillsDir, { recursive: true });
+    }
+    copyDirRecursive(srcSkillDir, join(targetSkillsDir, "apimapper"));
+    // 2. Append marker to AGENTS.md (idempotent).
+    let markerAlreadyPresent = false;
+    if (existsSync(targetAgentsFile)) {
+        const existing = readFileSync(targetAgentsFile, "utf8");
+        if (existing.includes(MARKER_LINE)) {
+            markerAlreadyPresent = true;
+        }
+        else {
+            appendFileSync(targetAgentsFile, MARKER_BLOCK);
+        }
+    }
+    else {
+        writeFileSync(targetAgentsFile, MARKER_BLOCK.trimStart(), "utf8");
+    }
+    return { copied: true, markerAlreadyPresent };
+}
+//# sourceMappingURL=install-skill.js.map

package/dist/install-skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-skill.js","sourceRoot":"","sources":["../src/install-skill.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,wEAAwE;AACxE,EAAE;AACF,yEAAyE;AACzE,kEAAkE;AAClE,uEAAuE;AACvE,yBAAyB;AAEzB,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,cAAc,GACf,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,CAAC,MAAM,WAAW,GACtB,wCAAwC,CAAC;AAE3C,MAAM,YAAY,GAAG;;;;EAInB,WAAW;;CAEZ,CAAC;AA2BF,SAAS,cAAc;IACrB,4CAA4C;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,GAAW;IAChD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAA+B,EAAE;IAEjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IACpD,MAAM,eAAe,GACnB,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClE,MAAM,gBAAgB,GACpB,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IAE3D,wDAAwD;IACxD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,8BAA8B,WAAW,IAAI;YAC3C,yDAAyD,OAAO,GAAG,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACjC,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;IAElE,8CAA8C;IAC9C,IAAI,oBAAoB,GAAG,KAAK,CAAC;IACjC,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACxD,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,oBAAoB,GAAG,IAAI,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,gBAAgB,EAAE,YAAY,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;AAChD,CAAC"}

package/dist/modules/apimapper/cache.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerCacheTools(server: McpServer): void;