@wootsup/yt-builder-mcp 1.0.0 → 1.0.1

package/dist/install-skill.d.ts

@@ -1,35 +0,0 @@
-/**
- * `install-skill` subcommand for `@wootsup/yt-builder-mcp`.
- *
- * Copies the bundled `skills/yootheme-builder/` directory into the user's
- * agent-skill folder (typically `~/.claude/skills/`) and appends a marker
- * block to `~/AGENTS.md` so other AI clients pick it up automatically.
- *
- * Idempotent: re-running overwrites existing skill files and skips the
- * AGENTS.md append when the marker is already present.
- *
- * Mirrors the pattern from `@wootsup/mcp install-skill` so users on both
- * products get the same workflow.
- *
- * @license MIT
- */
-export declare const MARKER_LINE = "<!-- yt-builder-mcp:skill-installed -->";
-export interface InstallSkillOptions {
-    /**
-     * Package root that contains the bundled `skills/` dir. Defaults to
-     * walking up from this file (works in both source and `dist/` layouts).
-     */
-    readonly pkgRoot?: string;
-    /** Target dir where the `yootheme-builder/` skill folder will land. */
-    readonly targetSkillsDir?: string;
-    /** Target AGENTS.md file to append the marker to. */
-    readonly targetAgentsFile?: string;
-}
-export interface InstallSkillResult {
-    readonly copied: boolean;
-    readonly markerAlreadyPresent: boolean;
-    readonly skillTargetDir: string;
-    readonly agentsFile: string;
-}
-export declare function installSkill(options?: InstallSkillOptions): Promise<InstallSkillResult>;
-//# sourceMappingURL=install-skill.d.ts.map

package/dist/install-skill.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"install-skill.d.ts","sourceRoot":"","sources":["../src/install-skill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAgBH,eAAO,MAAM,WAAW,4CAA4C,CAAC;AAiBrE,MAAM,WAAW,mBAAmB;IAChC;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,uEAAuE;IACvE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,qDAAqD;IACrD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B;AAwCD,wBAAsB,YAAY,CAC9B,OAAO,GAAE,mBAAwB,GAClC,OAAO,CAAC,kBAAkB,CAAC,CAuC7B"}

package/dist/install-skill.js

@@ -1,107 +0,0 @@
-/**
- * `install-skill` subcommand for `@wootsup/yt-builder-mcp`.
- *
- * Copies the bundled `skills/yootheme-builder/` directory into the user's
- * agent-skill folder (typically `~/.claude/skills/`) and appends a marker
- * block to `~/AGENTS.md` so other AI clients pick it up automatically.
- *
- * Idempotent: re-running overwrites existing skill files and skips the
- * AGENTS.md append when the marker is already present.
- *
- * Mirrors the pattern from `@wootsup/mcp install-skill` so users on both
- * products get the same workflow.
- *
- * @license MIT
- */
-import { appendFileSync, copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync, } from 'node:fs';
-import { homedir } from 'node:os';
-import { dirname, join, resolve } from 'node:path';
-import { fileURLToPath } from 'node:url';
-export const MARKER_LINE = '<!-- yt-builder-mcp:skill-installed -->';
-const MARKER_BLOCK = `
-
-## YT Builder MCP
-
-${MARKER_LINE}
-The YOOtheme Builder skill is installed at \`~/.claude/skills/yootheme-builder/\`
-— the universal-marker path recognised by Claude Desktop and other AI
-clients that follow the \`~/AGENTS.md\` discovery protocol.
-
-It documents the 24 MCP tools (23 domain + 1 gateway, 11 entries in
-\`tools/list\`), the 5 canonical workflows (build hero, bind dynamic
-source, clone section, diagnose 401, add custom element), and the
-gateway routing model. Source: https://github.com/wootsup/yt-builder-mcp.
-`;
-function defaultPkgRoot() {
-    // src/install-skill.ts → pkg root is one level up.
-    // When running from dist/install-skill.js the layout is identical
-    // (TypeScript emits `dist/install-skill.js` mirroring `src/`).
-    const here = dirname(fileURLToPath(import.meta.url));
-    return resolve(here, '..');
-}
-function copyDirRecursive(src, dst) {
-    if (!existsSync(dst))
-        mkdirSync(dst, { recursive: true });
-    for (const entry of readdirSync(src)) {
-        const sPath = join(src, entry);
-        const dPath = join(dst, entry);
-        const stat = statSync(sPath);
-        if (stat.isDirectory()) {
-            copyDirRecursive(sPath, dPath);
-        }
-        else {
-            copyFileSync(sPath, dPath);
-        }
-    }
-}
-/**
- * Locate the bundled `skills/yootheme-builder` directory.
- *
- * Production layout: the skill folder is bundled INSIDE the npm package
- * (`packages/mcp/skills/yootheme-builder/`), next to `dist/`. The same
- * layout exists in the source tree (per Design-Doc §13.1) so source-mode
- * smoke tests and the published tarball use the same single path.
- *
- * Earlier drafts walked `../..` up to a monorepo-root `skills/` dir;
- * that layout was eliminated in Round-1 audit fix C1 because it produced
- * a tarball without `skills/` (skill-not-found at first run).
- */
-function findSkillSource(pkgRoot) {
-    return join(pkgRoot, 'skills', 'yootheme-builder');
-}
-export async function installSkill(options = {}) {
-    const pkgRoot = options.pkgRoot ?? defaultPkgRoot();
-    const targetSkillsDir = options.targetSkillsDir ?? join(homedir(), '.claude', 'skills');
-    const targetAgentsFile = options.targetAgentsFile ?? join(homedir(), 'AGENTS.md');
-    const srcSkillDir = findSkillSource(pkgRoot);
-    if (!existsSync(srcSkillDir)) {
-        throw new Error(`Bundled skill not found at ${srcSkillDir}. ` +
-            `Is the package installed correctly? (pkgRoot=${pkgRoot})`);
-    }
-    if (!existsSync(targetSkillsDir)) {
-        mkdirSync(targetSkillsDir, { recursive: true });
-    }
-    const skillTargetDir = join(targetSkillsDir, 'yootheme-builder');
-    copyDirRecursive(srcSkillDir, skillTargetDir);
-    let markerAlreadyPresent = false;
-    if (existsSync(targetAgentsFile)) {
-        const existing = readFileSync(targetAgentsFile, 'utf-8');
-        if (existing.includes(MARKER_LINE)) {
-            markerAlreadyPresent = true;
-        }
-        else {
-            appendFileSync(targetAgentsFile, MARKER_BLOCK);
-        }
-    }
-    else {
-        // Create with a sensible top-line and the marker block (trimmed).
-        writeFileSync(targetAgentsFile, MARKER_BLOCK.trimStart(), 'utf-8');
-    }
-    return {
-        copied: true,
-        markerAlreadyPresent,
-        skillTargetDir,
-        agentsFile: targetAgentsFile,
-    };
-}
-//# sourceMappingURL=install-skill.js.map

package/dist/install-skill.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"install-skill.js","sourceRoot":"","sources":["../src/install-skill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACH,cAAc,EACd,YAAY,EACZ,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,aAAa,GAChB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,CAAC,MAAM,WAAW,GAAG,yCAAyC,CAAC;AAErE,MAAM,YAAY,GAAG;;;;EAInB,WAAW;;;;;;;;;CASZ,CAAC;AAqBF,SAAS,cAAc;IACnB,mDAAmD;IACnD,kEAAkE;IAClE,+DAA+D;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,GAAW;IAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACrB,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACJ,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACL,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,eAAe,CAAC,OAAe;IACpC,OAAO,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAC9B,UAA+B,EAAE;IAEjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IACpD,MAAM,eAAe,GACjB,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpE,MAAM,gBAAgB,GAClB,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IAE7D,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACX,8BAA8B,WAAW,IAAI;YACzC,gDAAgD,OAAO,GAAG,CACjE,CAAC;IACN,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/B,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;IACjE,gBAAgB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAE9C,IAAI,oBAAoB,GAAG,KAAK,CAAC;IACjC,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,oBAAoB,GAAG,IAAI,CAAC;QAChC,CAAC;aAAM,CAAC;YACJ,cAAc,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;QACnD,CAAC;IACL,CAAC;SAAM,CAAC;QACJ,kEAAkE;QAClE,aAAa,CAAC,gBAAgB,EAAE,YAAY,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,OAAO;QACH,MAAM,EAAE,IAAI;QACZ,oBAAoB;QACpB,cAAc;QACd,UAAU,EAAE,gBAAgB;KAC/B,CAAC;AACN,CAAC"}

package/dist/platform/index.d.ts

@@ -1,49 +0,0 @@
-/**
- * Platform abstraction — Wave G.0.
- *
- * A `Platform` is the seam between the MCP server and a host CMS. Today
- * the only concrete impl is `WordPressPlatform`; `joomla` is reserved
- * as a typed seam-marker so Wave G.4+ can land Joomla without rippling
- * through every call site.
- *
- * Why an interface instead of a tagged union?
- *   - Each platform owns its REST-namespace path verbatim (WP uses
- *     `/wp-json/<ns>`, Joomla will use `/index.php?option=com_ajax&…`).
- *   - Adding a platform = implement the interface + add a `PlatformKind`
- *     member. No switch statements to update.
- *
- * The `RestClient` accepts EITHER a `Platform` OR the legacy
- * `{baseUrl}` form (which internally builds a `WordPressPlatform`),
- * so existing callers keep working unchanged.
- *
- * @license MIT
- */
-/** Tagged union of supported host platforms. */
-export type PlatformKind = 'wordpress' | 'joomla';
-/**
- * A `Platform` describes WHERE and HOW the MCP server reaches the
- * REST surface of the host CMS.
- */
-export interface Platform {
-    /** Discriminator for runtime checks. */
-    readonly kind: PlatformKind;
-    /** Origin (scheme + host + optional port). No trailing-slash normalisation here. */
-    readonly baseUrl: string;
-    /** Path prefix appended to baseUrl to form the REST root (must start with `/`). */
-    readonly restNamespacePath: string;
-}
-/** Canonical WordPress REST-namespace path for this plugin. */
-export declare const WORDPRESS_REST_NAMESPACE_PATH = "/wp-json/yt-builder-mcp/v1";
-/**
- * WordPress platform implementation.
- *
- * `restNamespacePath` is fixed to the plugin's namespace; the caller
- * supplies only the site origin.
- */
-export declare class WordPressPlatform implements Platform {
-    readonly kind: "wordpress";
-    readonly baseUrl: string;
-    readonly restNamespacePath: string;
-    constructor(baseUrl: string);
-}
-//# sourceMappingURL=index.d.ts.map

package/dist/platform/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/platform/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,gDAAgD;AAChD,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC;AAElD;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACrB,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,oFAAoF;IACpF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACtC;AAED,+DAA+D;AAC/D,eAAO,MAAM,6BAA6B,+BAA+B,CAAC;AAE1E;;;;;GAKG;AACH,qBAAa,iBAAkB,YAAW,QAAQ;IAC9C,SAAgB,IAAI,EAAG,WAAW,CAAU;IAC5C,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,iBAAiB,EAAE,MAAM,CAAC;gBAE9B,OAAO,EAAE,MAAM;CAI9B"}

package/dist/platform/index.js

@@ -1,38 +0,0 @@
-/**
- * Platform abstraction — Wave G.0.
- *
- * A `Platform` is the seam between the MCP server and a host CMS. Today
- * the only concrete impl is `WordPressPlatform`; `joomla` is reserved
- * as a typed seam-marker so Wave G.4+ can land Joomla without rippling
- * through every call site.
- *
- * Why an interface instead of a tagged union?
- *   - Each platform owns its REST-namespace path verbatim (WP uses
- *     `/wp-json/<ns>`, Joomla will use `/index.php?option=com_ajax&…`).
- *   - Adding a platform = implement the interface + add a `PlatformKind`
- *     member. No switch statements to update.
- *
- * The `RestClient` accepts EITHER a `Platform` OR the legacy
- * `{baseUrl}` form (which internally builds a `WordPressPlatform`),
- * so existing callers keep working unchanged.
- *
- * @license MIT
- */
-/** Canonical WordPress REST-namespace path for this plugin. */
-export const WORDPRESS_REST_NAMESPACE_PATH = '/wp-json/yt-builder-mcp/v1';
-/**
- * WordPress platform implementation.
- *
- * `restNamespacePath` is fixed to the plugin's namespace; the caller
- * supplies only the site origin.
- */
-export class WordPressPlatform {
-    kind = 'wordpress';
-    baseUrl;
-    restNamespacePath;
-    constructor(baseUrl) {
-        this.baseUrl = baseUrl;
-        this.restNamespacePath = WORDPRESS_REST_NAMESPACE_PATH;
-    }
-}
-//# sourceMappingURL=index.js.map

package/dist/platform/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/platform/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAkBH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,6BAA6B,GAAG,4BAA4B,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IACV,IAAI,GAAG,WAAoB,CAAC;IAC5B,OAAO,CAAS;IAChB,iBAAiB,CAAS;IAE1C,YAAY,OAAe;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,iBAAiB,GAAG,6BAA6B,CAAC;IAC3D,CAAC;CACJ"}

package/dist/server.d.ts

@@ -1,50 +0,0 @@
-/**
- * MCP server factory — Wave G.1 / Gateway-Hub edition.
- *
- * `createServer({client})` builds a configured `McpServer` with a 3-lane
- * tool registration:
- *
- *   L3 — direct top-level (yootheme_builder_health + yootheme_builder_diagnose)
- *        Registered FIRST, BEFORE the CapturingServer wraps the real server.
- *        These tools must reach the LLM even when the gateway itself
- *        misbehaves (chicken-and-egg: the LLM diagnoses gateway breakage
- *        via these two).
- *
- *   L1 — essential forwarded (7 tools)
- *        Routed through the CapturingServer to the real server. Appear in
- *        `tools/list` as first-class entries (Cursor-cap-safe).
- *
- *   L2 — advanced captured (12 tools)
- *        Routed through the CapturingServer into its in-process advanced
- *        registry; reachable via the single `yootheme_builder_advanced`
- *        gateway tool. Hidden from `tools/list`.
- *
- *   Gateway — `yootheme_builder_advanced`
- *        Registered LAST on the real server, after every L1/L2 tool is
- *        placed and the advanced registry is final.
- *
- * Result: `tools/list.length === 10` (7 L1 + 2 L3 + 1 gateway), and the
- * full tool surface is 22 (collectAllRegisteredTools).
- *
- * @license MIT
- */
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import type { RestClient } from './client.js';
-import { CapturingServer } from './gateway/capturing-server.js';
-import { type ToolDefinition } from './tools/index.js';
-export declare const SERVER_NAME = "@wootsup/yt-builder-mcp";
-export declare const SERVER_VERSION = "0.2.0-alpha.2";
-export interface CreateServerOptions {
-    readonly client: RestClient;
-    /** Override the tool set (defaults to `buildAllTools`). */
-    readonly tools?: readonly ToolDefinition[];
-}
-export interface CreatedServer {
-    readonly mcp: McpServer;
-    /** The full set of tool definitions registered across all 3 lanes + gateway. */
-    readonly tools: readonly ToolDefinition[];
-    /** The CapturingServer wrapping `mcp` — exposed for test helpers. */
-    readonly capturing: CapturingServer;
-}
-export declare function createServer(options: CreateServerOptions): CreatedServer;
-//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAsB,MAAM,+BAA+B,CAAC;AAUpF,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEtE,eAAO,MAAM,WAAW,4BAA4B,CAAC;AACrD,eAAO,MAAM,cAAc,kBAAkB,CAAC;AAE9C,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,aAAa;IAC1B,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,gFAAgF;IAChF,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,qEAAqE;IACrE,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACvC;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,aAAa,CA0FxE"}

package/dist/server.js

@@ -1,153 +0,0 @@
-/**
- * MCP server factory — Wave G.1 / Gateway-Hub edition.
- *
- * `createServer({client})` builds a configured `McpServer` with a 3-lane
- * tool registration:
- *
- *   L3 — direct top-level (yootheme_builder_health + yootheme_builder_diagnose)
- *        Registered FIRST, BEFORE the CapturingServer wraps the real server.
- *        These tools must reach the LLM even when the gateway itself
- *        misbehaves (chicken-and-egg: the LLM diagnoses gateway breakage
- *        via these two).
- *
- *   L1 — essential forwarded (7 tools)
- *        Routed through the CapturingServer to the real server. Appear in
- *        `tools/list` as first-class entries (Cursor-cap-safe).
- *
- *   L2 — advanced captured (12 tools)
- *        Routed through the CapturingServer into its in-process advanced
- *        registry; reachable via the single `yootheme_builder_advanced`
- *        gateway tool. Hidden from `tools/list`.
- *
- *   Gateway — `yootheme_builder_advanced`
- *        Registered LAST on the real server, after every L1/L2 tool is
- *        placed and the advanced registry is final.
- *
- * Result: `tools/list.length === 10` (7 L1 + 2 L3 + 1 gateway), and the
- * full tool surface is 22 (collectAllRegisteredTools).
- *
- * @license MIT
- */
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { registerAdvancedTool } from './gateway/advanced-tool.js';
-import { CapturingServer } from './gateway/capturing-server.js';
-import { isDirectTopLevel } from './gateway/essentials.js';
-import { loadSkillContent, SKILL_RESOURCE_DESCRIPTION, SKILL_RESOURCE_MIME_TYPE, SKILL_RESOURCE_NAME, SKILL_RESOURCE_URI, } from './skill-loader.js';
-import { toElicitationCapability } from './tools/elicitation.js';
-import { buildAllTools } from './tools/index.js';
-export const SERVER_NAME = '@wootsup/yt-builder-mcp';
-export const SERVER_VERSION = '0.2.0-alpha.2';
-export function createServer(options) {
-    // Stream B1 — Skill-Distribution via MCP-Protocol.
-    //
-    // The bundled SKILL.md is published through two MCP-native channels:
-    //
-    //   (a) `instructions` field on the `initialize` response. MCP-spec
-    //       hosts (Claude Desktop, Cursor, …) surface this string as
-    //       auto-context so Maria-the-Claude-Desktop-user receives the
-    //       skill narrative without ever calling a tool.
-    //
-    //   (b) `skill://yt-builder-mcp` resource exposed via
-    //       `resources/list` + `resources/read`. Backup for hosts that
-    //       ignore `instructions` but honor the resources API.
-    //
-    // Reading SKILL.md is synchronous (small file, ~17 KB) and cached
-    // after first call by `loadSkillContent` — no async cost.
-    const instructions = loadSkillContent();
-    const mcp = new McpServer({
-        name: SERVER_NAME,
-        version: SERVER_VERSION,
-    }, {
-        instructions,
-    });
-    // Register the SKILL.md as a static MCP resource. The capability
-    // (`resources: { listChanged: true }` etc.) is auto-advertised by
-    // McpServer the moment the first resource is registered, so MCP
-    // hosts see `resources` in `initialize.capabilities`.
-    mcp.registerResource(SKILL_RESOURCE_NAME, SKILL_RESOURCE_URI, {
-        title: SKILL_RESOURCE_NAME,
-        description: SKILL_RESOURCE_DESCRIPTION,
-        mimeType: SKILL_RESOURCE_MIME_TYPE,
-    }, async (uri) => ({
-        contents: [
-            {
-                uri: uri.toString(),
-                mimeType: SKILL_RESOURCE_MIME_TYPE,
-                text: instructions,
-            },
-        ],
-    }));
-    // Wave G.4.5 — MCP elicitation capability wiring.
-    //
-    // `toElicitationCapability(mcp)` bridges the SDK's stricter
-    // discriminated `ElicitRequestFormParams` to the toolkit's looser
-    // `ElicitInputParams`. The 3 elicitation-aware tools
-    // (`element_delete`, `element_unbind_source`, `element_bind_source`)
-    // consume this capability through their `*HandlerDeps`; the other 19
-    // tools never see it. When the host the SDK connects to does not
-    // advertise the elicitation capability, the toolkit's `elicitChoice` /
-    // `elicitConfirmation` return `null` / `false` and the tool falls
-    // back to the structured-error / preview path (no hang, no guess).
-    const elicitation = toElicitationCapability(mcp);
-    const tools = options.tools ?? buildAllTools(options.client, { elicitation });
-    // L3 — direct top-level: registered FIRST on the real McpServer, before
-    // the CapturingServer wraps it. These names get a no-op route inside
-    // the CapturingServer (see capturing-server.ts), so the SDK never sees
-    // a duplicate registration when the builder list is later replayed.
-    for (const tool of tools) {
-        if (isDirectTopLevel(tool.name)) {
-            registerToolOn(mcp, tool);
-        }
-    }
-    // L1 / L2 — every other tool is routed through the CapturingServer,
-    // which forwards essentials to the real server and captures the rest
-    // into its advanced registry.
-    const capturing = new CapturingServer(mcp);
-    for (const tool of tools) {
-        if (isDirectTopLevel(tool.name))
-            continue;
-        registerToolOn(capturing, tool);
-    }
-    // Gateway — registered LAST so the advanced registry is final.
-    registerAdvancedTool(mcp, capturing.getAdvancedRegistry());
-    return { mcp, tools, capturing };
-}
-/**
- * Registers a `ToolDefinition` on a `ToolRegistrar`. A real `McpServer`
- * satisfies `ToolRegistrar` structurally (its `registerTool` returns
- * `RegisteredTool`, which is assignable to the `ToolRegistrar` declared
- * `void` return type), so call-sites pass either a real server (for L3
- * + the gateway, which need not be captured) or a `CapturingServer`
- * (for L1 + L2 routing).
- */
-function registerToolOn(registrar, tool) {
-    // The SDK's `registerTool` accepts a raw Zod shape as inputSchema. We
-    // cast through `ZodRawShapeCompat` to keep our `ToolDefinition` generic
-    // (any ZodRawShape) compatible with the SDK's v3/v4 dual-zod surface.
-    const inputSchema = tool.inputSchema;
-    // outputSchema is optional — tools migrated to structured-content (Wave
-    // G.2) declare a Zod schema describing the `structuredContent` payload.
-    // The SDK accepts a `ZodTypeAny` (v3/v4) via `AnySchema`; we forward our
-    // schema verbatim. Hosts that support MCP structured output validate
-    // responses against this schema.
-    const outputSchema = tool.outputSchema !== undefined
-        ? tool.outputSchema
-        : undefined;
-    registrar.registerTool(tool.name, {
-        description: tool.description,
-        inputSchema,
-        ...(outputSchema !== undefined ? { outputSchema } : {}),
-        annotations: tool.annotations,
-    }, 
-    // Wave G.5 — forward the SDK-supplied `extra` (RequestHandlerExtra)
-    // as the 2nd argument to every handler. Write-handlers consume
-    // `extra._meta.progressToken` + `extra.sendNotification` via the
-    // local `createProgressReporter` helper; read-handlers ignore it
-    // (their handler signature still binds `extra` to `HandlerExtra |
-    // undefined`, so no runtime coupling for non-progress tools).
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any -- SDK generic narrows to inferred shape; safe because zod validates upstream
-    (async (args, extra) => {
-        return tool.handler(args, extra);
-    }));
-}
-//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAsB,MAAM,+BAA+B,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAuB,MAAM,kBAAkB,CAAC;AAEtE,MAAM,CAAC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AACrD,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC;AAgB9C,MAAM,UAAU,YAAY,CAAC,OAA4B;IACrD,mDAAmD;IACnD,EAAE;IACF,qEAAqE;IACrE,EAAE;IACF,oEAAoE;IACpE,iEAAiE;IACjE,mEAAmE;IACnE,qDAAqD;IACrD,EAAE;IACF,sDAAsD;IACtD,mEAAmE;IACnE,2DAA2D;IAC3D,EAAE;IACF,kEAAkE;IAClE,0DAA0D;IAC1D,MAAM,YAAY,GAAG,gBAAgB,EAAE,CAAC;IAExC,MAAM,GAAG,GAAG,IAAI,SAAS,CACrB;QACI,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,cAAc;KAC1B,EACD;QACI,YAAY;KACf,CACJ,CAAC;IAEF,iEAAiE;IACjE,kEAAkE;IAClE,gEAAgE;IAChE,sDAAsD;IACtD,GAAG,CAAC,gBAAgB,CAChB,mBAAmB,EACnB,kBAAkB,EAClB;QACI,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE,wBAAwB;KACrC,EACD,KAAK,EAAE,GAAQ,EAAE,EAAE,CAAC,CAAC;QACjB,QAAQ,EAAE;YACN;gBACI,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;gBACnB,QAAQ,EAAE,wBAAwB;gBAClC,IAAI,EAAE,YAAY;aACrB;SACJ;KACJ,CAAC,CACL,CAAC;IAEF,kDAAkD;IAClD,EAAE;IACF,4DAA4D;IAC5D,kEAAkE;IAClE,qDAAqD;IACrD,qEAAqE;IACrE,qEAAqE;IACrE,iEAAiE;IACjE,uEAAuE;IACvE,kEAAkE;IAClE,mEAAmE;IACnE,MAAM,WAAW,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAEjD,MAAM,KAAK,GACP,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAEpE,wEAAwE;IACxE,qEAAqE;IACrE,uEAAuE;IACvE,oEAAoE;IACpE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;IACL,CAAC;IAED,oEAAoE;IACpE,qEAAqE;IACrE,8BAA8B;IAC9B,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC1C,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,+DAA+D;IAC/D,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAE3D,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CAAC,SAAwB,EAAE,IAAoB;IAClE,sEAAsE;IACtE,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAgC,CAAC;IAE1D,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,qEAAqE;IACrE,iCAAiC;IACjC,MAAM,YAAY,GACd,IAAI,CAAC,YAAY,KAAK,SAAS;QAC3B,CAAC,CAAE,IAAI,CAAC,YAA6C;QACrD,CAAC,CAAC,SAAS,CAAC;IAEpB,SAAS,CAAC,YAAY,CAClB,IAAI,CAAC,IAAI,EACT;QACI,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW;QACX,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,WAAW,EAAE,IAAI,CAAC,WAAW;KAChC;IACD,oEAAoE;IACpE,+DAA+D;IAC/D,iEAAiE;IACjE,iEAAiE;IACjE,kEAAkE;IAClE,8DAA8D;IAC9D,4IAA4I;IAC5I,CAAC,KAAK,EAAE,IAAS,EAAE,KAAU,EAAE,EAAE;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC,CAAU,CACd,CAAC;AACN,CAAC"}

package/dist/setup-cli.d.ts

@@ -1,100 +0,0 @@
-#!/usr/bin/env node
-/**
- * Top-level CLI dispatcher for `@wootsup/yt-builder-mcp`.
- *
- * Round-1 audit I5 fix (2026-05-22): the wizard implementation lives in
- * `setup-wizard.ts`; this file is the thin dispatcher (`runCli`) plus
- * the ESM main-guard. Both have their own deps-bag (`WizardDeps` /
- * `RunCliDeps`) so unit tests can drive them independently.
- *
- * Subcommands:
- *
- *   setup (default)   — runWizard (see `setup-wizard.ts`)
- *   install-skill     — copy the bundled skill into ~/.claude/skills/
- *                       and append a marker block to ~/AGENTS.md.
- *   --help / help     — print usage.
- *   --version / -v    — print the package version.
- *
- * Re-exports `runWizard`, `majorMinor` and the wizard public types so
- * existing callers (and tests that already import from `./setup-cli`)
- * keep working with a one-line import.
- *
- * @license MIT
- */
-import { installSkill as defaultInstallSkill } from './install-skill.js';
-import type { WizardDeps } from './setup-wizard-types.js';
-export { DEFAULT_WIZARD_DEPS, majorMinor, runWizard, type AuthProbeResult, type HandshakeResult, type HealthProbeResult, type WizardAnswers, type WizardDeps, type WriteResult, } from './setup-wizard.js';
-export interface ParsedSetupArgs {
-    /** True when `--non-interactive` was passed. Always boolean. */
-    readonly nonInteractive: boolean;
-    /** WordPress base URL from `--url`, trailing slash stripped, trimmed. */
-    readonly url: string;
-    /** Bearer token from `--token`, trimmed. */
-    readonly token: string;
-    /** Client ids from repeated `--client`. */
-    readonly clients: readonly string[];
-    /**
-     * Pickup URL from `--pickup`, trimmed. When set together with
-     * `nonce`, the wizard fetches the Bearer + canonical URL from the
-     * plugin in a single POST instead of prompting.
-     */
-    readonly pickup?: string;
-    /** One-shot nonce from `--nonce`, trimmed. Pairs 1:1 with `pickup`. */
-    readonly nonce?: string;
-    /**
-     * Human-readable validation errors. Empty array means the parsed
-     * args are usable. The dispatcher prints these to stderr and exits
-     * non-zero when non-empty AND `--non-interactive` was requested.
-     */
-    readonly errors: readonly string[];
-    /**
-     * Non-fatal warnings to surface on stderr (e.g. "--url ignored in
-     * pickup mode"). These do NOT block the wizard from running.
-     */
-    readonly warnings: readonly string[];
-}
-/**
- * Parse the `setup` subcommand argv tail. Pure function; does no I/O.
- *
- * Accepts both `--key value` and `--key=value` styles. Unknown flags
- * are reported as errors so typos don't silently disable validation.
- */
-export declare function parseSetupArgs(argv: readonly string[]): ParsedSetupArgs;
-/**
- * Build a `WizardDeps` bag that answers prompts from CLI flags instead
- * of asking a human. Reuses every other dependency (probes, writes,
- * handshake) from `DEFAULT_WIZARD_DEPS` so the wizard's exit-code
- * contract (0/2/3/4/5) stays identical.
- *
- * `confirmContinue` always returns `false` — there is no human to ask,
- * so a probe failure cleanly aborts with the documented exit code.
- */
-export declare function buildNonInteractiveDeps(parsed: ParsedSetupArgs, base?: WizardDeps): WizardDeps;
-/**
- * Build a `WizardDeps` bag for the Wave-C pickup flow. The wizard's
- * `prompt` step calls `base.fetchPickup(url, nonce)` once, then
- * synthesises the `WizardAnswers` from the response — the actual answers
- * (token + canonical WordPress URL) come straight from the plugin via
- * a 256-bit one-shot nonce, never through chat history / provider logs.
- *
- * On `fetchPickup` failure the prompt resolves to `null` so the wizard
- * exits cleanly with code 130 (user-cancel equivalent — we treat
- * an unrecoverable pickup as "the conversation ends here"). The
- * thrown error is logged via the `log` dep so the operator sees why.
- *
- * `confirmContinue` returns `false` (same rationale as non-interactive).
- */
-export declare function buildPickupDeps(parsed: ParsedSetupArgs, base?: WizardDeps): WizardDeps;
-export interface RunCliDeps {
-    /**
-     * Wizard runner. The optional deps bag lets the non-interactive
-     * dispatcher inject prebuilt answers; interactive callers pass
-     * nothing and the wizard uses `DEFAULT_WIZARD_DEPS`.
-     */
-    runWizard: (deps?: WizardDeps) => Promise<number>;
-    installSkill: typeof defaultInstallSkill;
-    log?: (line: string) => void;
-    error?: (line: string) => void;
-}
-export declare function runCli(argv: readonly string[], deps?: Partial<RunCliDeps>): Promise<number>;
-//# sourceMappingURL=setup-cli.d.ts.map

package/dist/setup-cli.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"setup-cli.d.ts","sourceRoot":"","sources":["../src/setup-cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,YAAY,IAAI,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGzE,OAAO,KAAK,EAAiB,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAIzE,OAAO,EACH,mBAAmB,EACnB,UAAU,EACV,SAAS,EACT,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,WAAW,GACnB,MAAM,mBAAmB,CAAC;AAyD3B,MAAM,WAAW,eAAe;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,yEAAyE;IACzE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,2CAA2C;IAC3C,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,eAAe,CAyGvE;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACnC,MAAM,EAAE,eAAe,EACvB,IAAI,GAAE,UAAgC,GACvC,UAAU,CAWZ;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAC3B,MAAM,EAAE,eAAe,EACvB,IAAI,GAAE,UAAgC,GACvC,UAAU,CA+BZ;AAID,MAAM,WAAW,UAAU;IACvB;;;;OAIG;IACH,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,YAAY,EAAE,OAAO,mBAAmB,CAAC;IACzC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC;AAED,wBAAsB,MAAM,CACxB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,IAAI,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,CAgFjB"}