@wootsup/yt-builder-mcp 1.0.0 → 1.1.0

package/README.md

@@ -79,7 +79,7 @@ in `tools/list`** (well under Cursor's ~40-tool cap):
   clean_implode_directives, element_type_get_schema).
 
 Total: **23 domain tools + 1 gateway = 24**. Surface: **11 entries
-in tools/list**. See `skills/yootheme-builder/SKILL.md` for the
+in tools/list**. See `skills/yt-builder-mcp/SKILL.md` for the
 full catalog and the 5 canonical workflows.
 
 ## Tool catalogue — 23 domain tools
@@ -144,8 +144,10 @@ When launched by an AI client (or directly):
 
 | Variable | Required? | Purpose |
 |----------|-----------|---------|
-| `YTB_MCP_WP_URL` | Yes | WordPress base URL (e.g. `https://example.com`). Trailing slash is stripped. |
-| `YTB_MCP_BEARER_TOKEN` | Yes | Bearer key from wp-admin. Format-checked client-side: must match `ytb_(live\|test)_<payload>.<sig>`. Do **not** prepend `Bearer ` — the MCP server adds it. |
+| `YTB_MCP_SITE_URL` | Yes | Host CMS base URL (e.g. `https://example.com`). Works for BOTH WordPress and Joomla. Trailing slash is stripped. |
+| `YTB_MCP_WP_URL` | No (deprecated) | Legacy alias for `YTB_MCP_SITE_URL`; still honoured for pre-Wave-7 configurations. A non-fatal deprecation notice is written to stderr when this is used without `YTB_MCP_SITE_URL`. |
+| `YTB_MCP_BEARER_TOKEN` | Yes | Bearer key from wp-admin (WordPress: Tools → "YT Builder MCP") or Administrator → Components → "YT Builder MCP" (Joomla). Format-checked client-side: must match `ytb_(live\|test)_<payload>.<sig>`. Do **not** prepend `Bearer ` — the MCP server adds it. |
+| `YTB_MCP_PLATFORM` | No | Explicit platform hint: `wordpress` or `joomla`. Set to `joomla` when `YTB_MCP_SITE_URL` is an origin-only Joomla URL (no `/api/index.php/` in the path). Defaults to URL-shape auto-detection. |
 | `YTB_MCP_TIMEOUT_MS` | No | REST timeout (default 15000). |
 | `YTB_MCP_TEST_MODE` | No | `1` skips the stdio loop (smoke tests). |
 
@@ -157,11 +159,11 @@ client's MCP config file:
 ```json
 {
   "mcpServers": {
-    "yootheme-builder": {
+    "yt-builder-mcp": {
       "command": "npx",
       "args": ["-y", "@wootsup/yt-builder-mcp"],
       "env": {
-        "YTB_MCP_WP_URL": "https://example.com",
+        "YTB_MCP_SITE_URL": "https://example.com",
         "YTB_MCP_BEARER_TOKEN": "ytb_live_…"
       }
     }
@@ -169,6 +171,16 @@ client's MCP config file:
 }
 ```
 
+For a Joomla install at an origin-only URL, also set the platform hint:
+
+```json
+"env": {
+  "YTB_MCP_SITE_URL": "https://example.com/joomla",
+  "YTB_MCP_BEARER_TOKEN": "ytb_live_…",
+  "YTB_MCP_PLATFORM": "joomla"
+}
+```
+
 ## Non-interactive CI usage
 
 For scripted / CI installs, pass the answers as flags and add
@@ -213,7 +225,7 @@ The CLI returns POSIX-style exit codes for scripting / CI:
 
 ## Documentation
 
-- [SKILL.md (bundled agent skill)](./skills/yootheme-builder/SKILL.md) — 5 canonical workflows, gateway model, tool catalog
+- [SKILL.md (bundled agent skill)](./skills/yt-builder-mcp/SKILL.md) — 5 canonical workflows, gateway model, tool catalog
 - [REST API Reference](https://github.com/wootsup/yt-builder-mcp/blob/main/docs/rest-api-reference.md)
 - [MCP Tool Reference](https://github.com/wootsup/yt-builder-mcp/blob/main/docs/mcp-tool-reference.md)
 

package/bin/yt-builder-mcp.js

@@ -25,6 +25,12 @@ const CLI_SUBCOMMANDS = new Set([
     'setup',
     'install-skill',
     'install',
+    // W9 multi-site CLI subcommands.
+    'add-site',
+    'list-sites',
+    'remove-site',
+    'set-default',
+    'test-site',
     'help',
     '--help',
     '-h',

package/dist/auth.d.ts

@@ -3,12 +3,22 @@
  *
  * The MCP server reads two environment variables on startup:
  *
- *   YTB_MCP_WP_URL        — base URL of the WordPress install, e.g.
- *                           `https://example.com`. The REST namespace
- *                           `/wp-json/yt-builder-mcp/v1` is
- *                           appended internally.
+ *   YTB_MCP_SITE_URL      — base URL of the host CMS install (WordPress
+ *                           OR Joomla), e.g. `https://example.com`.
+ *                           The per-platform REST namespace
+ *                           (`/wp-json/yt-builder-mcp/v1` for WP,
+ *                           `/api/index.php/v1/yt-builder-mcp` for
+ *                           Joomla) is appended internally based on
+ *                           runtime platform detection.
+ *   YTB_MCP_WP_URL        — DEPRECATED alias for YTB_MCP_SITE_URL,
+ *                           kept for back-compat with pre-Wave 7
+ *                           configurations. A non-fatal deprecation
+ *                           notice is written to stderr when the
+ *                           legacy var is used in non-test mode.
  *   YTB_MCP_BEARER_TOKEN  — the Bearer key generated by the plugin
- *                           Settings page (`wp-admin → YT Builder MCP`).
+ *                           Settings page (`wp-admin → YT Builder MCP`
+ *                           on WordPress, `Components → YT Builder MCP`
+ *                           on Joomla).
  *
  * `loadConfig()` throws `ConfigError` if either is missing, so the
  * server fails fast with a useful message rather than emitting cryptic
@@ -16,13 +26,19 @@
  *
  * @license MIT
  */
+import { SiteRegistry } from './sites/registry.js';
 export interface ServerConfig {
-    /** Base URL of the WordPress install (no trailing slash). */
+    /** Base URL of the host-CMS install (no trailing slash). */
     readonly baseUrl: string;
     /** Bearer key. */
     readonly bearerToken: string;
     /** Network timeout (ms) for REST calls. */
     readonly timeoutMs: number;
+    /**
+     * Optional explicit platform hint from {@link ENV_PLATFORM}.
+     * `undefined` lets the consumer rely on URL-shape detection.
+     */
+    readonly platformHint?: 'wordpress' | 'joomla';
 }
 export interface LoadConfigOptions {
     /** Allow the bearer-token to be empty (for health-only smoke tests). */
@@ -30,10 +46,74 @@ export interface LoadConfigOptions {
     /** Source of env vars (defaults to process.env). */
     readonly env?: NodeJS.ProcessEnv;
 }
+/**
+ * Canonical env-var name for the host-CMS base URL (Wave 7+: covers
+ * both WordPress and Joomla). Prefer this for all new configurations.
+ */
+export declare const ENV_SITE_URL = "YTB_MCP_SITE_URL";
+/**
+ * Legacy env-var name kept for back-compat. Pre-Wave-7 configurations
+ * (every release through v1.0.x) used `YTB_MCP_WP_URL`. New code should
+ * use {@link ENV_SITE_URL}; this constant is retained so the wizard,
+ * tests, and error hints can still reference the legacy name.
+ */
 export declare const ENV_WP_URL = "YTB_MCP_WP_URL";
 export declare const ENV_BEARER = "YTB_MCP_BEARER_TOKEN";
 export declare const ENV_TIMEOUT = "YTB_MCP_TIMEOUT_MS";
 export declare const ENV_TEST_MODE = "YTB_MCP_TEST_MODE";
+/**
+ * Optional platform hint env var — `'wordpress'` or `'joomla'`. When
+ * unset, the server auto-detects from the URL shape (cookbook §3.7.1):
+ *   - URL contains `/wp-json/`        → wordpress
+ *   - URL contains `/api/index.php/`  → joomla
+ *   - origin-only URL                 → defaults to wordpress (back-compat)
+ *
+ * Set this to `'joomla'` when your YTB_MCP_SITE_URL is an origin-only
+ * Joomla URL like `https://example.com/joomla`.
+ */
+export declare const ENV_PLATFORM = "YTB_MCP_PLATFORM";
+/**
+ * W10 — canonical env-var name for the multi-site registry file. When
+ * set, {@link loadRegistry} loads + validates the JSON at this path and
+ * the legacy {@link ENV_SITE_URL} / {@link ENV_BEARER} pair is ignored.
+ * When unset, the env-bridge falls back to building a one-site registry
+ * from the legacy single-site pair.
+ */
+export declare const ENV_SITES_FILE = "YTB_MCP_SITES_FILE";
 export declare function loadConfig(options?: LoadConfigOptions): ServerConfig;
 export declare function isTestMode(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Options accepted by {@link loadRegistry}.
+ */
+export interface LoadRegistryOptions {
+    /** Source of env vars (defaults to process.env). */
+    readonly env?: NodeJS.ProcessEnv;
+}
+/**
+ * W10 — canonical boot-time registry loader.
+ *
+ * Resolution order:
+ *   1. **Sites file** — if {@link ENV_SITES_FILE} is set to a non-empty
+ *      string, parse + validate the JSON at that path and wrap it in a
+ *      {@link SiteRegistry}. Schema failures bubble up as
+ *      `SitesFileError` (the store does not swallow them); the caller
+ *      decides whether to fail-fast or fall back. Wave 10 chooses
+ *      fail-fast — explicit file = explicit intent.
+ *
+ *   2. **Legacy env-bridge** — synthesise a one-site registry from the
+ *      pre-W10 single-site env-vars ({@link ENV_SITE_URL} +
+ *      {@link ENV_BEARER}, with {@link ENV_PLATFORM} as optional hint).
+ *      Preserves the single-site UX for every customer who has not
+ *      migrated to a sites.json yet.
+ *
+ *   3. **Hard fail** — neither configured. Surface a {@link ConfigError}
+ *      with the three setup options so the operator knows exactly which
+ *      knob to turn.
+ *
+ * This function replaces {@link loadConfig} on the main boot path.
+ * `loadConfig` is intentionally retained for the test-mode fallback in
+ * `index.ts` (`--test-mode` smoke probes) and for any embedded consumer
+ * that still wants a flat `ServerConfig`.
+ */
+export declare function loadRegistry(opts?: LoadRegistryOptions): Promise<SiteRegistry>;
 //# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,MAAM,WAAW,YAAY;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kBAAkB;IAClB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2CAA2C;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,oDAAoD;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACpC;AAED,eAAO,MAAM,UAAU,mBAAmB,CAAC;AAC3C,eAAO,MAAM,UAAU,yBAAyB,CAAC;AACjD,eAAO,MAAM,WAAW,uBAAuB,CAAC;AAChD,eAAO,MAAM,aAAa,sBAAsB,CAAC;AAkCjD,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAAsB,GAAG,YAAY,CAiDxE;AAED,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAExE"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAInD,MAAM,WAAW,YAAY;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kBAAkB;IAClB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2CAA2C;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;CAClD;AAED,MAAM,WAAW,iBAAiB;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,oDAAoD;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACpC;AAED;;;GAGG;AACH,eAAO,MAAM,YAAY,qBAAqB,CAAC;AAC/C;;;;;GAKG;AACH,eAAO,MAAM,UAAU,mBAAmB,CAAC;AAC3C,eAAO,MAAM,UAAU,yBAAyB,CAAC;AACjD,eAAO,MAAM,WAAW,uBAAuB,CAAC;AAChD,eAAO,MAAM,aAAa,sBAAsB,CAAC;AACjD;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,qBAAqB,CAAC;AAC/C;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,uBAAuB,CAAC;AAkCnD,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAAsB,GAAG,YAAY,CA8ExE;AAED,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAExE;AAMD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC,oDAAoD;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,YAAY,CAC9B,IAAI,GAAE,mBAAwB,GAC/B,OAAO,CAAC,YAAY,CAAC,CA8CvB"}

package/dist/auth.js

@@ -3,12 +3,22 @@
  *
  * The MCP server reads two environment variables on startup:
  *
- *   YTB_MCP_WP_URL        — base URL of the WordPress install, e.g.
- *                           `https://example.com`. The REST namespace
- *                           `/wp-json/yt-builder-mcp/v1` is
- *                           appended internally.
+ *   YTB_MCP_SITE_URL      — base URL of the host CMS install (WordPress
+ *                           OR Joomla), e.g. `https://example.com`.
+ *                           The per-platform REST namespace
+ *                           (`/wp-json/yt-builder-mcp/v1` for WP,
+ *                           `/api/index.php/v1/yt-builder-mcp` for
+ *                           Joomla) is appended internally based on
+ *                           runtime platform detection.
+ *   YTB_MCP_WP_URL        — DEPRECATED alias for YTB_MCP_SITE_URL,
+ *                           kept for back-compat with pre-Wave 7
+ *                           configurations. A non-fatal deprecation
+ *                           notice is written to stderr when the
+ *                           legacy var is used in non-test mode.
  *   YTB_MCP_BEARER_TOKEN  — the Bearer key generated by the plugin
- *                           Settings page (`wp-admin → YT Builder MCP`).
+ *                           Settings page (`wp-admin → YT Builder MCP`
+ *                           on WordPress, `Components → YT Builder MCP`
+ *                           on Joomla).
  *
  * `loadConfig()` throws `ConfigError` if either is missing, so the
  * server fails fast with a useful message rather than emitting cryptic
@@ -18,10 +28,44 @@
  */
 import { z } from 'zod';
 import { ConfigError } from './errors.js';
+import { synthesiseFromEnv } from './sites/env-bridge.js';
+import { SiteRegistry } from './sites/registry.js';
+import { SitesFile } from './sites/schema.js';
+import { loadSitesFile } from './sites/store.js';
+/**
+ * Canonical env-var name for the host-CMS base URL (Wave 7+: covers
+ * both WordPress and Joomla). Prefer this for all new configurations.
+ */
+export const ENV_SITE_URL = 'YTB_MCP_SITE_URL';
+/**
+ * Legacy env-var name kept for back-compat. Pre-Wave-7 configurations
+ * (every release through v1.0.x) used `YTB_MCP_WP_URL`. New code should
+ * use {@link ENV_SITE_URL}; this constant is retained so the wizard,
+ * tests, and error hints can still reference the legacy name.
+ */
 export const ENV_WP_URL = 'YTB_MCP_WP_URL';
 export const ENV_BEARER = 'YTB_MCP_BEARER_TOKEN';
 export const ENV_TIMEOUT = 'YTB_MCP_TIMEOUT_MS';
 export const ENV_TEST_MODE = 'YTB_MCP_TEST_MODE';
+/**
+ * Optional platform hint env var — `'wordpress'` or `'joomla'`. When
+ * unset, the server auto-detects from the URL shape (cookbook §3.7.1):
+ *   - URL contains `/wp-json/`        → wordpress
+ *   - URL contains `/api/index.php/`  → joomla
+ *   - origin-only URL                 → defaults to wordpress (back-compat)
+ *
+ * Set this to `'joomla'` when your YTB_MCP_SITE_URL is an origin-only
+ * Joomla URL like `https://example.com/joomla`.
+ */
+export const ENV_PLATFORM = 'YTB_MCP_PLATFORM';
+/**
+ * W10 — canonical env-var name for the multi-site registry file. When
+ * set, {@link loadRegistry} loads + validates the JSON at this path and
+ * the legacy {@link ENV_SITE_URL} / {@link ENV_BEARER} pair is ignored.
+ * When unset, the env-bridge falls back to building a one-site registry
+ * from the legacy single-site pair.
+ */
+export const ENV_SITES_FILE = 'YTB_MCP_SITES_FILE';
 const DEFAULT_TIMEOUT_MS = 15_000;
 /**
  * Maximum accepted length for a Bearer token (defense-in-depth bound;
@@ -47,12 +91,30 @@ const BEARER_FORMAT_SCHEMA = z
     .regex(/^ytb_(live|test)_[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/, 'Bearer must match ytb_(live|test)_<payloadB64Url>.<sigB64Url> format (copy the key as shown in wp-admin → "YT Builder MCP" → Settings; do NOT prepend "Bearer ").');
 export function loadConfig(options = {}) {
     const env = options.env ?? process.env;
-    const rawUrl = (env[ENV_WP_URL] ?? '').trim();
+    // Wave 7: YTB_MCP_SITE_URL is canonical (covers both WP + Joomla);
+    // YTB_MCP_WP_URL is retained as a deprecated back-compat alias.
+    // Resolution order: SITE_URL wins; legacy WP_URL fallback emits a
+    // soft deprecation note in non-test mode.
+    const rawSiteUrl = (env[ENV_SITE_URL] ?? '').trim();
+    const rawLegacyUrl = (env[ENV_WP_URL] ?? '').trim();
+    const rawUrl = rawSiteUrl !== '' ? rawSiteUrl : rawLegacyUrl;
+    // Soft deprecation notice — only when the loader is being used in
+    // its real-server role (env defaulted to process.env). Programmatic
+    // callers (tests, embedded uses) pass `options.env` explicitly and
+    // are silently treated as opt-in to the legacy var.
+    if (rawSiteUrl === ''
+        && rawLegacyUrl !== ''
+        && options.env === undefined
+        && !isTestMode(env)) {
+        process.stderr.write(`[yt-builder-mcp] notice: ${ENV_WP_URL} is deprecated — ` +
+            `set ${ENV_SITE_URL} instead (same value; covers WordPress + Joomla).\n`);
+    }
     const rawToken = (env[ENV_BEARER] ?? '').trim();
     const rawTimeout = (env[ENV_TIMEOUT] ?? '').trim();
     if (rawUrl === '') {
-        throw new ConfigError(`Missing ${ENV_WP_URL}. Set it to your WordPress base URL ` +
-            '(e.g. https://example.com). Run `yt-builder-mcp setup` to configure.');
+        throw new ConfigError(`Missing ${ENV_SITE_URL}. Set it to your CMS base URL ` +
+            '(e.g. https://example.com — WordPress or Joomla). ' +
+            'Run `yt-builder-mcp setup` to configure.');
     }
     if (!options.allowMissingToken && rawToken === '') {
         throw new ConfigError(`Missing ${ENV_BEARER}. Generate a Bearer key in wp-admin → "YT Builder MCP" → ` +
@@ -78,10 +140,15 @@ export function loadConfig(options = {}) {
             timeoutMs = parsed;
         }
     }
+    const rawPlatform = (env[ENV_PLATFORM] ?? '').trim().toLowerCase();
+    const platformHint = rawPlatform === 'wordpress' || rawPlatform === 'joomla'
+        ? rawPlatform
+        : undefined;
     return {
         baseUrl: stripTrailingSlash(rawUrl),
         bearerToken: rawToken,
         timeoutMs,
+        ...(platformHint !== undefined ? { platformHint } : {}),
     };
 }
 export function isTestMode(env = process.env) {
@@ -90,4 +157,70 @@ export function isTestMode(env = process.env) {
 function stripTrailingSlash(url) {
     return url.replace(/\/+$/, '');
 }
+/**
+ * W10 — canonical boot-time registry loader.
+ *
+ * Resolution order:
+ *   1. **Sites file** — if {@link ENV_SITES_FILE} is set to a non-empty
+ *      string, parse + validate the JSON at that path and wrap it in a
+ *      {@link SiteRegistry}. Schema failures bubble up as
+ *      `SitesFileError` (the store does not swallow them); the caller
+ *      decides whether to fail-fast or fall back. Wave 10 chooses
+ *      fail-fast — explicit file = explicit intent.
+ *
+ *   2. **Legacy env-bridge** — synthesise a one-site registry from the
+ *      pre-W10 single-site env-vars ({@link ENV_SITE_URL} +
+ *      {@link ENV_BEARER}, with {@link ENV_PLATFORM} as optional hint).
+ *      Preserves the single-site UX for every customer who has not
+ *      migrated to a sites.json yet.
+ *
+ *   3. **Hard fail** — neither configured. Surface a {@link ConfigError}
+ *      with the three setup options so the operator knows exactly which
+ *      knob to turn.
+ *
+ * This function replaces {@link loadConfig} on the main boot path.
+ * `loadConfig` is intentionally retained for the test-mode fallback in
+ * `index.ts` (`--test-mode` smoke probes) and for any embedded consumer
+ * that still wants a flat `ServerConfig`.
+ */
+export async function loadRegistry(opts = {}) {
+    const env = opts.env ?? process.env;
+    // (1) sites file (preferred).
+    const sitesFilePath = (env[ENV_SITES_FILE] ?? '').trim();
+    if (sitesFilePath !== '') {
+        // loadSitesFile handles both "file present" and "file absent"
+        // (the latter returns an emptySitesFile). When the file is
+        // empty (no sites), fall through to env-bridge instead of
+        // booting with an empty registry — operators who set
+        // SITES_FILE to a not-yet-populated path should still get the
+        // legacy env-var ramp until they run `add-site`.
+        const file = await loadSitesFile(sitesFilePath);
+        if (file.sites.length > 0) {
+            return new SiteRegistry(file);
+        }
+    }
+    // (2) legacy env-bridge. The bridge already enforces URL/bearer
+    // non-emptiness and platform-hint validity, but we re-validate the
+    // full file shape through the W1 Zod schema before handing it to
+    // the registry. Defense-in-depth: a future env-bridge change cannot
+    // introduce a SitesFileT-shape regression that lands on the
+    // registry path without first failing this gate.
+    const synth = synthesiseFromEnv(env);
+    if (synth !== null) {
+        const parsed = SitesFile.safeParse(synth);
+        if (!parsed.success) {
+            const issues = parsed.error.issues
+                .map((i) => `${i.path.join('.')}: ${i.message}`)
+                .join('; ');
+            throw new ConfigError(`Env-bridge synthesised an invalid sites file: ${issues}`);
+        }
+        return new SiteRegistry(parsed.data);
+    }
+    // (3) fail-fast.
+    throw new ConfigError('No sites configured. Either: '
+        + '(a) set YTB_MCP_SITES_FILE to your sites.json path, or '
+        + '(b) set YTB_MCP_SITE_URL + YTB_MCP_BEARER_TOKEN for '
+        + 'single-site mode, or '
+        + '(c) run `npx -y @wootsup/yt-builder-mcp setup` interactively.');
+}
 //# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAkB1C,MAAM,CAAC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAC3C,MAAM,CAAC,MAAM,UAAU,GAAG,sBAAsB,CAAC;AACjD,MAAM,CAAC,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAChD,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAEjD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;GAIG;AACH,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;;;;;;;;;;GAWG;AACH,MAAM,oBAAoB,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,GAAG,CACA,cAAc,EACd,wBAAwB,MAAM,CAAC,cAAc,CAAC,iMAAiM,CAClP;KACA,KAAK,CACF,kDAAkD,EAClD,mKAAmK,CACtK,CAAC;AAEN,MAAM,UAAU,UAAU,CAAC,UAA6B,EAAE;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEnD,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,WAAW,CACjB,WAAW,UAAU,sCAAsC;YACvD,sEAAsE,CAC7E,CAAC;IACN,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,WAAW,CACjB,WAAW,UAAU,2DAA2D;YAC5E,4CAA4C,CACnD,CAAC;IACN,CAAC;IAED,+DAA+D;IAC/D,qDAAqD;IACrD,8DAA8D;IAC9D,6DAA6D;IAC7D,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC/B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;iBACzB,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,IAAI,WAAW,CACjB,WAAW,UAAU,KAAK,QAAQ,EAAE,CACvC,CAAC;QACN,CAAC;IACL,CAAC;IAED,IAAI,SAAS,GAAG,kBAAkB,CAAC;IACnC,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,SAAS,GAAG,MAAM,CAAC;QACvB,CAAC;IACL,CAAC;IAED,OAAO;QACH,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC;QACnC,WAAW,EAAE,QAAQ;QACrB,SAAS;KACZ,CAAC;AACN,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC3D,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAuBjD;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAC/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAC3C,MAAM,CAAC,MAAM,UAAU,GAAG,sBAAsB,CAAC;AACjD,MAAM,CAAC,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAChD,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AACjD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAC/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,oBAAoB,CAAC;AAEnD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;GAIG;AACH,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;;;;;;;;;;GAWG;AACH,MAAM,oBAAoB,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,GAAG,CACA,cAAc,EACd,wBAAwB,MAAM,CAAC,cAAc,CAAC,iMAAiM,CAClP;KACA,KAAK,CACF,kDAAkD,EAClD,mKAAmK,CACtK,CAAC;AAEN,MAAM,UAAU,UAAU,CAAC,UAA6B,EAAE;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,mEAAmE;IACnE,gEAAgE;IAChE,kEAAkE;IAClE,0CAA0C;IAC1C,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC;IAC7D,kEAAkE;IAClE,oEAAoE;IACpE,mEAAmE;IACnE,oDAAoD;IACpD,IACI,UAAU,KAAK,EAAE;WACd,YAAY,KAAK,EAAE;WACnB,OAAO,CAAC,GAAG,KAAK,SAAS;WACzB,CAAC,UAAU,CAAC,GAAG,CAAC,EACrB,CAAC;QACC,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,4BAA4B,UAAU,mBAAmB;YACrD,OAAO,YAAY,qDAAqD,CAC/E,CAAC;IACN,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEnD,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,WAAW,CACjB,WAAW,YAAY,gCAAgC;YACnD,oDAAoD;YACpD,0CAA0C,CACjD,CAAC;IACN,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,WAAW,CACjB,WAAW,UAAU,2DAA2D;YAC5E,4CAA4C,CACnD,CAAC;IACN,CAAC;IAED,+DAA+D;IAC/D,qDAAqD;IACrD,8DAA8D;IAC9D,6DAA6D;IAC7D,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC/B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;iBACzB,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,IAAI,WAAW,CACjB,WAAW,UAAU,KAAK,QAAQ,EAAE,CACvC,CAAC;QACN,CAAC;IACL,CAAC;IAED,IAAI,SAAS,GAAG,kBAAkB,CAAC;IACnC,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,SAAS,GAAG,MAAM,CAAC;QACvB,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnE,MAAM,YAAY,GACd,WAAW,KAAK,WAAW,IAAI,WAAW,KAAK,QAAQ;QACnD,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,SAAS,CAAC;IAEpB,OAAO;QACH,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC;QACnC,WAAW,EAAE,QAAQ;QACrB,SAAS;QACT,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACN,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC3D,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAC9B,OAA4B,EAAE;IAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAEpC,8BAA8B;IAC9B,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,aAAa,KAAK,EAAE,EAAE,CAAC;QACvB,8DAA8D;QAC9D,2DAA2D;QAC3D,0DAA0D;QAC1D,qDAAqD;QACrD,8DAA8D;QAC9D,iDAAiD;QACjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;IACL,CAAC;IAED,gEAAgE;IAChE,mEAAmE;IACnE,iEAAiE;IACjE,oEAAoE;IACpE,4DAA4D;IAC5D,iDAAiD;IACjD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,MAAM,IAAI,WAAW,CACjB,iDAAiD,MAAM,EAAE,CAC5D,CAAC;QACN,CAAC;QACD,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,iBAAiB;IACjB,MAAM,IAAI,WAAW,CACjB,+BAA+B;UAC7B,yDAAyD;UACzD,sDAAsD;UACtD,uBAAuB;UACvB,+DAA+D,CACpE,CAAC;AACN,CAAC"}

package/dist/errors/sanitize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/errors/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA6CH;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAgB9C"}
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/errors/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAuDH;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAgB9C"}

package/dist/errors/sanitize.js

@@ -59,6 +59,16 @@ const SECRET_KEYS = new Set([
     'sessionToken',
     'id_token',
     'idToken',
+    // W12-R1.3 (A2-M2) — 1Password Secret References are not secrets
+    // per se (the ref string itself is safe to log), BUT they identify
+    // the vault path + item + field of a real bearer. Surfacing them
+    // verbatim in an error payload that ends up in a Discord paste, a
+    // GitHub issue, or an LLM-shared transcript leaks the production
+    // 1Password layout to anyone reading. Treat as secret to be safe.
+    'bearer_ref',
+    'bearerRef',
+    'token_ref',
+    'tokenRef',
 ]);
 /**
  * Recursively walk any JSON-serialisable value and redact any nested

package/dist/errors/sanitize.js.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/errors/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS;IAChC,sBAAsB;IACtB,OAAO;IACP,QAAQ;IACR,cAAc;IACd,aAAa;IACb,4BAA4B;IAC5B,WAAW;IACX,UAAU;IACV,cAAc;IACd,qBAAqB;IACrB,mBAAmB;IACnB,eAAe;IACf,cAAc;IACd,cAAc;IACd,aAAa;IACb,mBAAmB;IACnB,eAAe;IACf,cAAc;IACd,SAAS;IACT,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,WAAW;IACX,8DAA8D;IAC9D,aAAa;IACb,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,gBAAgB;IAChB,eAAe;IACf,iBAAiB;IACjB,gBAAgB;IAChB,cAAc;IACd,aAAa;IACb,eAAe;IACf,cAAc;IACd,UAAU;IACV,SAAS;CACZ,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAI,KAAQ;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAiB,CAAC;IACtE,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACpE,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACJ,GAAG,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;YAChC,CAAC;QACL,CAAC;QACD,OAAO,GAAmB,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC"}
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/errors/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS;IAChC,sBAAsB;IACtB,OAAO;IACP,QAAQ;IACR,cAAc;IACd,aAAa;IACb,4BAA4B;IAC5B,WAAW;IACX,UAAU;IACV,cAAc;IACd,qBAAqB;IACrB,mBAAmB;IACnB,eAAe;IACf,cAAc;IACd,cAAc;IACd,aAAa;IACb,mBAAmB;IACnB,eAAe;IACf,cAAc;IACd,SAAS;IACT,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,WAAW;IACX,8DAA8D;IAC9D,aAAa;IACb,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,gBAAgB;IAChB,eAAe;IACf,iBAAiB;IACjB,gBAAgB;IAChB,cAAc;IACd,aAAa;IACb,eAAe;IACf,cAAc;IACd,UAAU;IACV,SAAS;IACT,iEAAiE;IACjE,mEAAmE;IACnE,iEAAiE;IACjE,kEAAkE;IAClE,iEAAiE;IACjE,kEAAkE;IAClE,YAAY;IACZ,WAAW;IACX,WAAW;IACX,UAAU;CACb,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAI,KAAQ;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAiB,CAAC;IACtE,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACpE,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACJ,GAAG,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;YAChC,CAAC;QACL,CAAC;QACD,OAAO,GAAmB,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC"}

package/dist/gateway/essentials.d.ts

@@ -31,7 +31,7 @@
  * L1 — Tools kept as first-class entries in `tools/list`.
  * Forwarded by the CapturingServer to the real McpServer.
  */
-export declare const ESSENTIAL_TOOLS: readonly ["yootheme_builder_pages_list", "yootheme_builder_get_etag", "yootheme_builder_element_list", "yootheme_builder_element_add", "yootheme_builder_element_update_settings", "yootheme_builder_sources_list", "yootheme_builder_element_types_list", "yootheme_builder_inspect_multi_items_binding", "yootheme_builder_element_get", "yootheme_builder_element_delete", "yootheme_builder_element_clone", "yootheme_builder_element_move", "yootheme_builder_page_get_layout", "yootheme_builder_template_summary"];
+export declare const ESSENTIAL_TOOLS: readonly ["yootheme_builder_pages_list", "yootheme_builder_get_etag", "yootheme_builder_element_list", "yootheme_builder_element_add", "yootheme_builder_element_update_settings", "yootheme_builder_sources_list", "yootheme_builder_element_types_list", "yootheme_builder_inspect_multi_items_binding", "yootheme_builder_element_get", "yootheme_builder_element_delete", "yootheme_builder_element_clone", "yootheme_builder_element_move", "yootheme_builder_page_get_layout", "yootheme_builder_template_summary", "yootheme_builder_element_type_get_schema", "yootheme_builder_sites_list", "yootheme_builder_sites_test"];
 /**
  * L3 — Tools registered DIRECTLY on the real McpServer, BEFORE the
  * CapturingServer wraps it. The CapturingServer treats these names as a

package/dist/gateway/essentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"essentials.d.ts","sourceRoot":"","sources":["../../src/gateway/essentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH;;;GAGG;AACH,eAAO,MAAM,eAAe,2fAyBlB,CAAC;AAEX;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,mEAGzB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7D,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzE,gEAAgE;AAChE,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,4DAA4D;AAC5D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD"}
+{"version":3,"file":"essentials.d.ts","sourceRoot":"","sources":["../../src/gateway/essentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH;;;GAGG;AACH,eAAO,MAAM,eAAe,qmBAsClB,CAAC;AAEX;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,mEAGzB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7D,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzE,gEAAgE;AAChE,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,4DAA4D;AAC5D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD"}

package/dist/gateway/essentials.js

@@ -46,8 +46,8 @@ export const ESSENTIAL_TOOLS = [
     'yootheme_builder_inspect_multi_items_binding',
     // F-16 hot-path promotions (Maria-Audit v2 re-confirmed) — the 5
     // most-used read/mutate operations skip the advanced-router
-    // discovery roundtrip. Cursor cap is ~40; we sit at 13 L1 + 2 L3 +
-    // 1 gateway = 16, comfortable below the limit.
+    // discovery roundtrip. Cursor cap is ~40; we sit at 15 L1 + 2 L3 +
+    // 1 gateway = 18, comfortable below the limit.
     'yootheme_builder_element_get',
     'yootheme_builder_element_delete',
     'yootheme_builder_element_clone',
@@ -56,6 +56,19 @@ export const ESSENTIAL_TOOLS = [
     // T9 (Audit-v3 B.5) — token-efficient template overview. L1 because
     // it's the recommended first call when orienting in a large template.
     'yootheme_builder_template_summary',
+    // 1.0.1 — element_type_get_schema promoted L2 → L1. Live-testing
+    // 1.0.0 in Claude Desktop showed tool_search couldn't surface it
+    // through the advanced gateway, yet it is the canonical prop-key
+    // discovery tool an agent needs BEFORE every element_add or
+    // element_update_settings. Hot-path for any write workflow.
+    'yootheme_builder_element_type_get_schema',
+    // W7 (Multi-Site) — sites_list + sites_test must be L1 so an agent
+    // that just connected to a fresh MCP server can answer "which sites
+    // am I configured against?" without first discovering the gateway.
+    // Both are platform-agnostic (sites_list reads the registry only,
+    // sites_test probes /health + /etag for ONE site). L1 surface 15 → 17.
+    'yootheme_builder_sites_list',
+    'yootheme_builder_sites_test',
 ];
 /**
  * L3 — Tools registered DIRECTLY on the real McpServer, BEFORE the

package/dist/gateway/essentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"essentials.js","sourceRoot":"","sources":["../../src/gateway/essentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC3B,6BAA6B;IAC7B,2BAA2B;IAC3B,+BAA+B;IAC/B,8BAA8B;IAC9B,0CAA0C;IAC1C,+BAA+B;IAC/B,qCAAqC;IACrC,6DAA6D;IAC7D,kEAAkE;IAClE,6DAA6D;IAC7D,yCAAyC;IACzC,8CAA8C;IAC9C,iEAAiE;IACjE,4DAA4D;IAC5D,mEAAmE;IACnE,+CAA+C;IAC/C,8BAA8B;IAC9B,iCAAiC;IACjC,gCAAgC;IAChC,+BAA+B;IAC/B,kCAAkC;IAClC,oEAAoE;IACpE,sEAAsE;IACtE,mCAAmC;CAC7B,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IAClC,yBAAyB;IACzB,2BAA2B;CACrB,CAAC;AAKX,gEAAgE;AAChE,MAAM,UAAU,WAAW,CAAC,IAAY;IACpC,OAAQ,eAAqC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,gBAAgB,CAAC,IAAY;IACzC,OAAQ,sBAA4C,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC"}
+{"version":3,"file":"essentials.js","sourceRoot":"","sources":["../../src/gateway/essentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC3B,6BAA6B;IAC7B,2BAA2B;IAC3B,+BAA+B;IAC/B,8BAA8B;IAC9B,0CAA0C;IAC1C,+BAA+B;IAC/B,qCAAqC;IACrC,6DAA6D;IAC7D,kEAAkE;IAClE,6DAA6D;IAC7D,yCAAyC;IACzC,8CAA8C;IAC9C,iEAAiE;IACjE,4DAA4D;IAC5D,mEAAmE;IACnE,+CAA+C;IAC/C,8BAA8B;IAC9B,iCAAiC;IACjC,gCAAgC;IAChC,+BAA+B;IAC/B,kCAAkC;IAClC,oEAAoE;IACpE,sEAAsE;IACtE,mCAAmC;IACnC,iEAAiE;IACjE,iEAAiE;IACjE,iEAAiE;IACjE,4DAA4D;IAC5D,4DAA4D;IAC5D,0CAA0C;IAC1C,mEAAmE;IACnE,oEAAoE;IACpE,mEAAmE;IACnE,kEAAkE;IAClE,uEAAuE;IACvE,6BAA6B;IAC7B,6BAA6B;CACvB,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IAClC,yBAAyB;IACzB,2BAA2B;CACrB,CAAC;AAKX,gEAAgE;AAChE,MAAM,UAAU,WAAW,CAAC,IAAY;IACpC,OAAQ,eAAqC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,gBAAgB,CAAC,IAAY;IACzC,OAAQ,sBAA4C,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC"}

package/dist/index.d.ts

@@ -13,9 +13,13 @@
  */
 export { createServer, SERVER_NAME, SERVER_VERSION } from './server.js';
 export { RestClient, REST_NAMESPACE_PATH, encodeElementPath } from './client.js';
-export { loadConfig, isTestMode, ENV_WP_URL, ENV_BEARER, ENV_TEST_MODE } from './auth.js';
+export { loadConfig, loadRegistry, isTestMode, ENV_SITE_URL, ENV_WP_URL, ENV_BEARER, ENV_SITES_FILE, ENV_TEST_MODE, } from './auth.js';
 export { ConfigError, RestError, NetworkError } from './errors.js';
 export { buildAllTools } from './tools/index.js';
+export { ClientPool, NoDefaultSiteError, UnknownSiteError } from './sites/client-pool.js';
+export { SiteRegistry } from './sites/registry.js';
+export { synthesiseFromEnv } from './sites/env-bridge.js';
+export { defaultSecretResolver, PlainSecretResolver } from './sites/secret-resolver.js';
 export { ESSENTIAL_TOOLS, DIRECT_TOP_LEVEL_TOOLS, isEssential, isDirectTopLevel, } from './gateway/essentials.js';
 export { CapturingServer, type AdvancedToolEntry, type CapturedToolHandler, type ToolRegistrar, } from './gateway/capturing-server.js';
 export { registerAdvancedTool } from './gateway/advanced-tool.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AASH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACH,eAAe,EACf,sBAAsB,EACtB,WAAW,EACX,gBAAgB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACH,eAAe,EACf,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,aAAa,GACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EACH,yBAAyB,EACzB,QAAQ,EACR,KAAK,aAAa,GACrB,MAAM,2BAA2B,CAAC;AAEnC,iBAAe,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAsCnC;AAkBD,OAAO,EAAE,IAAI,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAWH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EACH,UAAU,EACV,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,cAAc,EACd,aAAa,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGjD,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACxF,OAAO,EACH,eAAe,EACf,sBAAsB,EACtB,WAAW,EACX,gBAAgB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACH,eAAe,EACf,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,aAAa,GACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EACH,yBAAyB,EACzB,QAAQ,EACR,KAAK,aAAa,GACrB,MAAM,2BAA2B,CAAC;AAEnC,iBAAe,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAkEnC;AAkBD,OAAO,EAAE,IAAI,EAAE,CAAC"}

package/dist/index.js

@@ -12,40 +12,76 @@
  * @license MIT
  */
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { isTestMode, loadConfig } from './auth.js';
-import { RestClient } from './client.js';
+import { isTestMode, loadConfig, loadRegistry } from './auth.js';
 import { ConfigError } from './errors.js';
+import { ClientPool } from './sites/client-pool.js';
+import { SiteRegistry } from './sites/registry.js';
+import { defaultSecretResolver } from './sites/secret-resolver.js';
 import { createServer } from './server.js';
 export { createServer, SERVER_NAME, SERVER_VERSION } from './server.js';
 export { RestClient, REST_NAMESPACE_PATH, encodeElementPath } from './client.js';
-export { loadConfig, isTestMode, ENV_WP_URL, ENV_BEARER, ENV_TEST_MODE } from './auth.js';
+export { loadConfig, loadRegistry, isTestMode, ENV_SITE_URL, ENV_WP_URL, ENV_BEARER, ENV_SITES_FILE, ENV_TEST_MODE, } from './auth.js';
 export { ConfigError, RestError, NetworkError } from './errors.js';
 export { buildAllTools } from './tools/index.js';
+// W6 — multi-site primitives exported for dist consumers (scripts,
+// embedded uses). The `ClientPool` is the new wiring contract.
+export { ClientPool, NoDefaultSiteError, UnknownSiteError } from './sites/client-pool.js';
+export { SiteRegistry } from './sites/registry.js';
+export { synthesiseFromEnv } from './sites/env-bridge.js';
+export { defaultSecretResolver, PlainSecretResolver } from './sites/secret-resolver.js';
 export { ESSENTIAL_TOOLS, DIRECT_TOP_LEVEL_TOOLS, isEssential, isDirectTopLevel, } from './gateway/essentials.js';
 export { CapturingServer, } from './gateway/capturing-server.js';
 export { registerAdvancedTool } from './gateway/advanced-tool.js';
 export { collectAllRegisteredTools, findTool, } from './gateway/test-support.js';
 async function main() {
     const testMode = isTestMode();
-    let config;
+    // W10 — multi-site bootstrap is now centralised in
+    // `auth.loadRegistry()`. The canonical resolution order is:
+    //   1. YTB_MCP_SITES_FILE → loadSitesFile + SiteRegistry
+    //   2. env-bridge (YTB_MCP_SITE_URL + YTB_MCP_BEARER_TOKEN)
+    //   3. ConfigError("No sites configured.")
+    //
+    // The single exception lives here: `--test-mode` smoke probes
+    // (release.php, CI tool-list dumps) must boot even when neither
+    // path is configured. We honor loadRegistry first, then trap the
+    // ConfigError in test-mode and synthesise an empty registry so the
+    // tool list still prints. Tools will refuse to run, which is
+    // expected — `--test-mode` never invokes them.
+    let registry;
     try {
-        // In test mode, allow the bearer token to be missing — we exit before
-        // anyone calls a tool.
-        config = loadConfig({ allowMissingToken: testMode });
+        registry = await loadRegistry();
     }
     catch (e) {
-        if (e instanceof ConfigError) {
-            process.stderr.write(`[yt-builder-mcp] ${e.message}\n`);
+        if (testMode && e instanceof ConfigError) {
+            // Mirror legacy test-mode behaviour: try loadConfig with
+            // the back-compat permissive flag so the print-tools probe
+            // still boots even with no sites at all. If loadConfig
+            // *also* throws, surface the more specific message.
+            try {
+                loadConfig({ allowMissingToken: true });
+            }
+            catch (cfgErr) {
+                if (cfgErr instanceof ConfigError) {
+                    process.stderr.write(`[yt-builder-mcp] ${cfgErr.message}\n`);
+                    process.exit(1);
+                }
+                throw cfgErr;
+            }
+            registry = new SiteRegistry({
+                schema_version: 1,
+                default_site_id: null,
+                sites: [],
+            });
+        }
+        else {
+            const msg = e instanceof Error ? e.message : String(e);
+            process.stderr.write(`[yt-builder-mcp] ${msg}\n`);
             process.exit(1);
         }
-        throw e;
     }
-    const client = new RestClient({
-        baseUrl: config.baseUrl,
-        bearerToken: config.bearerToken,
-        timeoutMs: config.timeoutMs,
-    });
-    const { mcp, tools } = createServer({ client });
+    const secretResolver = defaultSecretResolver();
+    const pool = new ClientPool(registry, secretResolver);
+    const { mcp, tools } = createServer({ pool });
     if (testMode) {
         // Print a one-line per tool summary to stderr (stdout is reserved
         // for the JSON-RPC frame in real runs) and exit cleanly.