@wootsup/yt-builder-mcp 1.0.1 → 1.1.0

package/dist/setup-wizard-handshake.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Setup-wizard REST-probe + handshake helpers.
+ *
+ * Split out of `setup-wizard-defaults.ts` (Round-2 R2-A2-IMP1) to
+ * give the defaults file headroom under the §11 150-LoC cap.
+ *
+ * @license MIT
+ */
+import type { AuthProbeResult, HandshakeResult, HealthProbeResult, IdentityProbeResult } from './setup-wizard-types.js';
+export declare function defaultProbeHealth(wpUrl: string): Promise<HealthProbeResult>;
+/**
+ * Probe `/v1/identity` — public endpoint introduced in plugin Wave 6.5.
+ * Returns ok=true ONLY when the response shape matches our plugin
+ * (product field === 'yt-builder-mcp'); a 200 OK from a different
+ * plugin at the same URL is treated as not-installed.
+ *
+ * Soft-failure on 404 keeps back-compat with pre-6.5 plugins — the
+ * wizard falls through to the existing /health-only probe path.
+ */
+export declare function defaultProbeIdentity(wpUrl: string): Promise<IdentityProbeResult>;
+export declare function defaultProbeAuth(wpUrl: string, bearer: string): Promise<AuthProbeResult>;
+/** Extract `major.minor` from a semver-like string (`0.1.0-alpha.1` → `0.1`); `''` on malformed input. */
+export declare function majorMinor(version: string): string;
+export declare function defaultHandshake(wpUrl: string, bearer: string, packageVersion: string): Promise<HandshakeResult>;
+//# sourceMappingURL=setup-wizard-handshake.d.ts.map

package/dist/setup-wizard-handshake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard-handshake.d.ts","sourceRoot":"","sources":["../src/setup-wizard-handshake.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EACR,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACtB,MAAM,yBAAyB,CAAC;AAejC,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAQlF;AAED;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAuBtF;AAED,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAQ9F;AAED,0GAA0G;AAC1G,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGlD;AAED,wBAAsB,gBAAgB,CAClC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,GACvB,OAAO,CAAC,eAAe,CAAC,CAgB1B"}

package/dist/setup-wizard-handshake.js

@@ -0,0 +1,103 @@
+/**
+ * Setup-wizard REST-probe + handshake helpers.
+ *
+ * Split out of `setup-wizard-defaults.ts` (Round-2 R2-A2-IMP1) to
+ * give the defaults file headroom under the §11 150-LoC cap.
+ *
+ * @license MIT
+ */
+import { RestClient } from './client.js';
+// Placeholder Bearer used only for the unauthenticated /health probe;
+// constructed dynamically so the secret-grep-gate doesn't flag the
+// call-site as a hardcoded credential.
+const HEALTH_PROBE_PLACEHOLDER_TOKEN = ['health', 'probe', 'no-auth'].join('-');
+function extractPluginVersion(raw) {
+    if (raw === null || typeof raw !== 'object')
+        return undefined;
+    const obj = raw;
+    if (typeof obj.plugin_version === 'string')
+        return obj.plugin_version;
+    if (typeof obj.version === 'string')
+        return obj.version;
+    return undefined;
+}
+export async function defaultProbeHealth(wpUrl) {
+    try {
+        const client = new RestClient({ baseUrl: wpUrl, bearerToken: HEALTH_PROBE_PLACEHOLDER_TOKEN });
+        const pluginVersion = extractPluginVersion(await client.get('/health'));
+        return pluginVersion !== undefined ? { ok: true, pluginVersion } : { ok: true };
+    }
+    catch (e) {
+        return { ok: false, error: e instanceof Error ? e.message : String(e) };
+    }
+}
+/**
+ * Probe `/v1/identity` — public endpoint introduced in plugin Wave 6.5.
+ * Returns ok=true ONLY when the response shape matches our plugin
+ * (product field === 'yt-builder-mcp'); a 200 OK from a different
+ * plugin at the same URL is treated as not-installed.
+ *
+ * Soft-failure on 404 keeps back-compat with pre-6.5 plugins — the
+ * wizard falls through to the existing /health-only probe path.
+ */
+export async function defaultProbeIdentity(wpUrl) {
+    try {
+        const client = new RestClient({ baseUrl: wpUrl, bearerToken: HEALTH_PROBE_PLACEHOLDER_TOKEN });
+        const raw = await client.get('/identity');
+        if (raw === null || typeof raw !== 'object') {
+            return { ok: false, error: 'unexpected response shape (not an object)' };
+        }
+        const obj = raw;
+        const product = typeof obj.product === 'string' ? obj.product : undefined;
+        if (product !== 'yt-builder-mcp') {
+            return { ok: false, error: `URL responds but is not a yt-builder-mcp install (product=${product ?? 'missing'})` };
+        }
+        const result = {
+            ok: true,
+            product,
+            ...(typeof obj.siteurl === 'string' ? { siteurl: obj.siteurl.replace(/\/+$/, '') } : {}),
+            ...(obj.platform === 'wordpress' || obj.platform === 'joomla' ? { platform: obj.platform } : {}),
+            ...(typeof obj.plugin_version === 'string' ? { pluginVersion: obj.plugin_version } : {}),
+        };
+        return result;
+    }
+    catch (e) {
+        return { ok: false, error: e instanceof Error ? e.message : String(e) };
+    }
+}
+export async function defaultProbeAuth(wpUrl, bearer) {
+    try {
+        const client = new RestClient({ baseUrl: wpUrl, bearerToken: bearer });
+        await client.get('/etag');
+        return { ok: true };
+    }
+    catch (e) {
+        return { ok: false, error: e instanceof Error ? e.message : String(e) };
+    }
+}
+/** Extract `major.minor` from a semver-like string (`0.1.0-alpha.1` → `0.1`); `''` on malformed input. */
+export function majorMinor(version) {
+    const m = version.match(/^(\d+)\.(\d+)/);
+    return m ? `${m[1]}.${m[2]}` : '';
+}
+export async function defaultHandshake(wpUrl, bearer, packageVersion) {
+    const health = await defaultProbeHealth(wpUrl);
+    if (!health.ok)
+        return { ok: false, error: health.error ?? 'health probe failed' };
+    const auth = await defaultProbeAuth(wpUrl, bearer);
+    if (!auth.ok)
+        return { ok: false, error: auth.error ?? 'auth probe failed' };
+    if (health.pluginVersion === undefined)
+        return { ok: true };
+    const enriched = { ok: true, pluginVersion: health.pluginVersion };
+    const pkgMm = majorMinor(packageVersion);
+    const plgMm = majorMinor(health.pluginVersion);
+    if (pkgMm !== '' && plgMm !== '' && pkgMm !== plgMm) {
+        return {
+            ...enriched,
+            warning: `MCP package v${packageVersion} (${pkgMm}.x) ↔ plugin v${health.pluginVersion} (${plgMm}.x) — major/minor mismatch. Upgrade the plugin or pin the MCP package to match.`,
+        };
+    }
+    return enriched;
+}
+//# sourceMappingURL=setup-wizard-handshake.js.map

package/dist/setup-wizard-handshake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard-handshake.js","sourceRoot":"","sources":["../src/setup-wizard-handshake.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC,sEAAsE;AACtE,mEAAmE;AACnE,uCAAuC;AACvC,MAAM,8BAA8B,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEhF,SAAS,oBAAoB,CAAC,GAAY;IACtC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,cAAc,CAAC;IACtE,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IACxD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAa;IAClD,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC,CAAC;QAC/F,MAAM,aAAa,GAAG,oBAAoB,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QACxE,OAAO,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACpF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAa;IACpD,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC,CAAC;QAC/F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC1C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;QAC7E,CAAC;QACD,MAAM,GAAG,GAAG,GAA8B,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6DAA6D,OAAO,IAAI,SAAS,GAAG,EAAE,CAAC;QACtH,CAAC;QACD,MAAM,MAAM,GAAwB;YAChC,EAAE,EAAE,IAAI;YACR,OAAO;YACP,GAAG,CAAC,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChG,GAAG,CAAC,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3F,CAAC;QACF,OAAO,MAAM,CAAC;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,MAAc;IAChE,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,CAAC;AACL,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,UAAU,CAAC,OAAe;IACtC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,KAAa,EACb,MAAc,EACd,cAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,qBAAqB,EAAE,CAAC;IACnF,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,mBAAmB,EAAE,CAAC;IAC7E,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAoB,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;IACpF,MAAM,KAAK,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAClD,OAAO;YACH,GAAG,QAAQ;YACX,OAAO,EAAE,gBAAgB,cAAc,KAAK,KAAK,iBAAiB,MAAM,CAAC,aAAa,KAAK,KAAK,iFAAiF;SACpL,CAAC;IACN,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC"}

package/dist/setup-wizard-types.d.ts

@@ -0,0 +1,164 @@
+/**
+ * Public types for the interactive setup wizard.
+ *
+ * Split out of `setup-wizard.ts` in the Round-1 audit I5 fix so the
+ * type surface is consumable without dragging in @clack/prompts or the
+ * RestClient. Tests and other modules import these types alone.
+ *
+ * @license MIT
+ */
+import type { DetectedClient, McpServerConfig } from './clients/index.js';
+export interface WizardAnswers {
+    /** Trimmed, trailing-slash-stripped WordPress base URL. */
+    readonly wpUrl: string;
+    /** Trimmed Bearer key. */
+    readonly bearer: string;
+    /** IDs of clients the user wants wired up. */
+    readonly selectedClients: readonly string[];
+    /**
+     * Site ID (multi-site registry key). Optional for back-compat with
+     * non-interactive flag paths that don't ask for it; the wizard
+     * defaults missing/empty values to `'default'`. Renamed from
+     * `profileName` in W9 to align with the multi-site registry's
+     * `site_id` field (see `src/sites/schema.ts`).
+     */
+    readonly siteId?: string;
+}
+/**
+ * Decoded payload of a Bearer key. The plugin signs `kid`, `scope`, `iss`
+ * (issuer = WordPress `site_url`), and optionally `exp` into the token's
+ * base64url payload section. The wizard decodes this WITHOUT verifying the
+ * signature (verification requires the plugin's secret) — `iss` is used
+ * purely to pre-fill the URL prompt; the canonical auth check happens
+ * later when the wizard hits `/v1/health` with the token.
+ */
+export interface DecodedTokenPayload {
+    readonly kid: string;
+    readonly scope: readonly string[];
+    /** Issuer — canonical WordPress site URL the key was generated on. */
+    readonly iss: string;
+    /** Unix expiry timestamp, if the operator opted-in to expiry. */
+    readonly exp?: number;
+}
+/**
+ * Result of the public `/v1/identity` probe — the wizard uses this to
+ * (a) confirm the plugin is installed at the URL the user typed and
+ * (b) cross-check the URL against the token's `iss` claim before writing
+ * any AI-client config.
+ */
+export interface IdentityProbeResult {
+    readonly ok: boolean;
+    /** Canonical site URL reported by the plugin. */
+    readonly siteurl?: string;
+    /** Platform discriminator: 'wordpress' today, 'joomla' later. */
+    readonly platform?: 'wordpress' | 'joomla';
+    /** Product discriminator (defends against another MCP at the same URL). */
+    readonly product?: string;
+    /** Plugin version (for diagnostic display). */
+    readonly pluginVersion?: string;
+    /** Failure message when ok=false. */
+    readonly error?: string;
+}
+/**
+ * Result of a successful `/setup/pickup` POST — a one-shot, IP-bound,
+ * 5-minute-TTL retrieval of a freshly-minted Bearer token + the
+ * canonical site URL the plugin reports. The wizard treats this as
+ * "answers obtained" and skips the URL/token prompts.
+ *
+ * Failure modes (404 expired/consumed, 403 IP-mismatch, 429 rate-limit,
+ * 400 invalid) are signalled by `fetchPickup` rejecting with a thrown
+ * Error — there is no partial success shape.
+ */
+export interface PickupResult {
+    /** Bearer token in plugin format `ytb_(live|test)_<payload>.<sig>`. */
+    readonly token: string;
+    /** Canonical WordPress site URL reported by the plugin. */
+    readonly siteurl: string;
+    /** Plugin version string for diagnostic display. */
+    readonly pluginVersion: string;
+}
+export interface HealthProbeResult {
+    readonly ok: boolean;
+    /** Plugin version reported by the server (if any). */
+    readonly pluginVersion?: string;
+    /** Error message if `ok=false`. */
+    readonly error?: string;
+}
+export interface AuthProbeResult {
+    readonly ok: boolean;
+    readonly error?: string;
+}
+export interface HandshakeResult {
+    readonly ok: boolean;
+    readonly pluginVersion?: string;
+    /** Mismatch warning string when plugin version != NPM package version. */
+    readonly warning?: string;
+    readonly error?: string;
+}
+export interface WriteResult {
+    readonly id: string;
+    readonly label: string;
+    readonly ok: boolean;
+    readonly error?: string;
+    /** Path that was written. Empty string on failure. */
+    readonly path: string;
+    /** Snapshot of the file content BEFORE the write (for rollback). */
+    readonly previousContent: string | null;
+}
+export interface WizardDeps {
+    /** Collect answers from the user. Return `null` on cancel. */
+    prompt: (input: {
+        detected: readonly DetectedClient[];
+    }) => Promise<WizardAnswers | null>;
+    /** Detect installed AI clients. */
+    detectClients: () => readonly DetectedClient[];
+    /** Probe the plugin /health endpoint (no auth). */
+    probeHealth: (wpUrl: string) => Promise<HealthProbeResult>;
+    /**
+     * Probe the plugin /identity endpoint (no auth) — used to verify the
+     * URL belongs to a yt-builder-mcp install and cross-check it
+     * against the token's `iss` claim. Optional for back-compat: when the
+     * field is missing the wizard skips the identity check.
+     */
+    probeIdentity?: (wpUrl: string) => Promise<IdentityProbeResult>;
+    /** Probe the plugin /etag endpoint (Bearer auth). */
+    probeAuth: (wpUrl: string, bearer: string) => Promise<AuthProbeResult>;
+    /** Confirm whether to continue when a probe fails. */
+    confirmContinue: (message: string) => Promise<boolean>;
+    /** Write the MCP server config for a single client. */
+    writeClient: (id: string, serverName: string, config: McpServerConfig) => Promise<WriteResult>;
+    /** Re-run the auth probe AFTER the configs were written and parse
+     *  the plugin version. Used as the dist-tag handshake. */
+    handshake: (wpUrl: string, bearer: string, packageVersion: string) => Promise<HandshakeResult>;
+    /**
+     * POST `{ nonce }` to the pickup URL revealed by wp-admin and resolve
+     * to a `PickupResult` (token + canonical site URL + plugin version).
+     *
+     * Implementations MUST throw on any non-200 response (404 expired /
+     * consumed, 403 IP-mismatch, 429 rate-limited, 400 malformed) so the
+     * wizard's pickup branch can abort with a single error path. The
+     * thrown Error's `.message` is what gets shown to the user.
+     *
+     * Optional for back-compat with older WizardDeps bags constructed
+     * before Wave-C — when missing, callers that pass `--pickup` get a
+     * clear "pickup not supported by this WizardDeps" error.
+     */
+    fetchPickup?: (pickupUrl: string, nonce: string) => Promise<PickupResult>;
+    /** Optional sink for human-facing status lines. */
+    log?: (line: string) => void;
+    /**
+     * W9 — invoked after both the health + auth probes have produced a
+     * decision (continue / aborted) so the wizard can persist the
+     * answers to the multi-site sites.json registry. Implementations
+     * MUST be idempotent: the wizard calls this exactly once on a
+     * successful run, but the dispatcher's overall retry policy may
+     * re-run the wizard.
+     *
+     * On failure the implementation should throw — the wizard treats
+     * the failure as a write-failure equivalent (rollback + exit 4).
+     * Optional for back-compat: when missing the wizard skips the
+     * sites.json write entirely (pre-W9 single-site env-var flow).
+     */
+    persistSite?: (answers: WizardAnswers) => Promise<void>;
+}
+//# sourceMappingURL=setup-wizard-types.d.ts.map

package/dist/setup-wizard-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard-types.d.ts","sourceRoot":"","sources":["../src/setup-wizard-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACR,cAAc,EACd,eAAe,EAClB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,aAAa;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,0BAA0B;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,iDAAiD;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC3C,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,+CAA+C;IAC/C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,qCAAqC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,YAAY;IACzB,uEAAuE;IACvE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,sDAAsD;IACtD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,mCAAmC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,UAAU;IACvB,8DAA8D;IAC9D,MAAM,EAAE,CAAC,KAAK,EAAE;QACZ,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;KACvC,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACpC,mCAAmC;IACnC,aAAa,EAAE,MAAM,SAAS,cAAc,EAAE,CAAC;IAC/C,mDAAmD;IACnD,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3D;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChE,qDAAqD;IACrD,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IACvE,sDAAsD;IACtD,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,uDAAuD;IACvD,WAAW,EAAE,CACT,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,eAAe,KACtB,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1B;8DAC0D;IAC1D,SAAS,EAAE,CACP,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,KACrB,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9B;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1E,mDAAmD;IACnD,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D"}

package/dist/setup-wizard-types.js

@@ -0,0 +1,11 @@
+/**
+ * Public types for the interactive setup wizard.
+ *
+ * Split out of `setup-wizard.ts` in the Round-1 audit I5 fix so the
+ * type surface is consumable without dragging in @clack/prompts or the
+ * RestClient. Tests and other modules import these types alone.
+ *
+ * @license MIT
+ */
+export {};
+//# sourceMappingURL=setup-wizard-types.js.map

package/dist/setup-wizard-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard-types.js","sourceRoot":"","sources":["../src/setup-wizard-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/setup-wizard.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Interactive setup wizard for `@wootsup/yt-builder-mcp`.
+ *
+ * `runWizard()` accepts a {@link WizardDeps} bag so unit tests can drive
+ * a deterministic prompt → validate → probe → write → handshake sequence
+ * without touching real subprocesses or filesystems.
+ *
+ * After the Round-1 audit I5 fix, this file is the wizard ALGORITHM only:
+ *   - `WizardDeps` and its result types live in `setup-wizard-types.ts`.
+ *   - Default real-I/O implementations + `rollbackWrites` + `majorMinor`
+ *     live in `setup-wizard-defaults.ts`.
+ *   - The CLI dispatcher + main-guard live in `setup-cli.ts`.
+ *
+ * @license MIT
+ */
+import type { AuthProbeResult, HandshakeResult, HealthProbeResult, WizardAnswers, WizardDeps, WriteResult } from './setup-wizard-types.js';
+export { DEFAULT_WIZARD_DEPS, majorMinor } from './setup-wizard-defaults.js';
+export type { AuthProbeResult, HandshakeResult, HealthProbeResult, WizardAnswers, WizardDeps, WriteResult, };
+/**
+ * Run the interactive setup wizard. Returns a process exit-code so the
+ * outer dispatcher can `process.exit(rc)` cleanly.
+ *
+ * Exit codes:
+ *   0  — success (configs written, handshake OK)
+ *   1  — invalid input that prevents proceeding
+ *   2  — health probe failed and user declined to continue
+ *   3  — auth probe failed and user declined to continue
+ *   4  — write failed; configs rolled back
+ *   5  — handshake failed; configs rolled back
+ *   130 — user cancelled (matches the SIGINT convention)
+ */
+export declare function runWizard(deps?: WizardDeps): Promise<number>;
+//# sourceMappingURL=setup-wizard.d.ts.map

package/dist/setup-wizard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard.d.ts","sourceRoot":"","sources":["../src/setup-wizard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAUH,OAAO,KAAK,EACR,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,WAAW,EACd,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7E,YAAY,EACR,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,WAAW,GACd,CAAC;AAYF;;;;;;;;;;;;GAYG;AACH,wBAAsB,SAAS,CAC3B,IAAI,GAAE,UAAgC,GACvC,OAAO,CAAC,MAAM,CAAC,CAkLjB"}

package/dist/setup-wizard.js

@@ -0,0 +1,199 @@
+/**
+ * Interactive setup wizard for `@wootsup/yt-builder-mcp`.
+ *
+ * `runWizard()` accepts a {@link WizardDeps} bag so unit tests can drive
+ * a deterministic prompt → validate → probe → write → handshake sequence
+ * without touching real subprocesses or filesystems.
+ *
+ * After the Round-1 audit I5 fix, this file is the wizard ALGORITHM only:
+ *   - `WizardDeps` and its result types live in `setup-wizard-types.ts`.
+ *   - Default real-I/O implementations + `rollbackWrites` + `majorMinor`
+ *     live in `setup-wizard-defaults.ts`.
+ *   - The CLI dispatcher + main-guard live in `setup-cli.ts`.
+ *
+ * @license MIT
+ */
+import { cancel, log, note, outro, spinner } from '@clack/prompts';
+import { SERVER_NAME, SERVER_VERSION } from './server.js';
+import { DEFAULT_WIZARD_DEPS, rollbackWrites, } from './setup-wizard-defaults.js';
+// Re-export the public surface so `import { runWizard, WizardDeps } from
+// './setup-wizard.js'` continues to work without touching the split files.
+export { DEFAULT_WIZARD_DEPS, majorMinor } from './setup-wizard-defaults.js';
+// 1.0.2 Wave-R Part 2: renamed `yootheme-builder` → `yt-builder-mcp`
+// to match the package slug + REST namespace + GitHub repo + skill
+// folder. Pre-1.0.1 installs (alpha-tester only, per Thomas 2026-05-23)
+// would land their server under the old key; no migration logic is
+// shipped because there were no production installs to migrate. If
+// someone re-runs setup they'll get a fresh `yt-builder-mcp` entry +
+// the legacy `yootheme-builder` entry stays dormant (harmless, points
+// at the same npm package).
+const SERVER_KEY = 'yt-builder-mcp';
+/**
+ * Run the interactive setup wizard. Returns a process exit-code so the
+ * outer dispatcher can `process.exit(rc)` cleanly.
+ *
+ * Exit codes:
+ *   0  — success (configs written, handshake OK)
+ *   1  — invalid input that prevents proceeding
+ *   2  — health probe failed and user declined to continue
+ *   3  — auth probe failed and user declined to continue
+ *   4  — write failed; configs rolled back
+ *   5  — handshake failed; configs rolled back
+ *   130 — user cancelled (matches the SIGINT convention)
+ */
+export async function runWizard(deps = DEFAULT_WIZARD_DEPS) {
+    const logFn = deps.log ?? ((line) => process.stderr.write(`${line}\n`));
+    // 1. Detect clients + collect answers.
+    const detected = deps.detectClients();
+    const answers = await deps.prompt({ detected });
+    if (answers === null)
+        return 130;
+    if (answers.wpUrl === '' || answers.bearer === '') {
+        logFn('Both the WordPress URL and the Bearer key are required.');
+        return 1;
+    }
+    // 2a. Identity probe (no auth) — confirms the URL hosts our plugin
+    //     and cross-checks against the URL the user entered. Optional
+    //     dep for back-compat: missing field = skip (older WizardDeps
+    //     bags + pre-6.5 plugins don't expose it).
+    if (deps.probeIdentity !== undefined) {
+        const idSpinner = spinner();
+        idSpinner.start('Verifying plugin identity…');
+        const identity = await deps.probeIdentity(answers.wpUrl);
+        if (identity.ok) {
+            const summary = identity.siteurl !== undefined
+                ? `Plugin identified at ${identity.siteurl}.`
+                : 'Plugin identified.';
+            idSpinner.stop(summary);
+            if (identity.siteurl !== undefined && identity.siteurl !== answers.wpUrl) {
+                log.warn(`URL mismatch: you entered ${answers.wpUrl} but the plugin reports its canonical URL as ${identity.siteurl}. ` +
+                    `Using the URL you entered — fix the mismatch if you get auth errors.`);
+            }
+        }
+        else {
+            idSpinner.stop('Identity probe failed.');
+            log.warn(`Identity probe: ${identity.error ?? 'unknown'} (continuing — older plugins lack this endpoint).`);
+        }
+    }
+    // 2b. Health probe (no auth).
+    const healthSpinner = spinner();
+    healthSpinner.start('Probing plugin health…');
+    const health = await deps.probeHealth(answers.wpUrl);
+    if (health.ok) {
+        healthSpinner.stop(health.pluginVersion !== undefined
+            ? `Plugin reachable (v${health.pluginVersion}).`
+            : 'Plugin reachable.');
+    }
+    else {
+        healthSpinner.stop('Plugin probe failed.');
+        log.error(`Could not reach the plugin: ${health.error ?? 'unknown'}`);
+        const cont = await deps.confirmContinue('Continue anyway and write the config? (You can fix this later.)');
+        if (!cont) {
+            cancel('Setup cancelled.');
+            return 2;
+        }
+    }
+    // 3. Auth probe (Bearer).
+    const authSpinner = spinner();
+    authSpinner.start('Verifying Bearer key…');
+    const auth = await deps.probeAuth(answers.wpUrl, answers.bearer);
+    const authOk = auth.ok;
+    if (authOk) {
+        authSpinner.stop('Bearer key accepted.');
+    }
+    else {
+        authSpinner.stop('Bearer probe failed.');
+        log.warn(`Auth probe failed: ${auth.error ?? 'unknown'}`);
+        const cont = await deps.confirmContinue('Continue anyway and write the config?');
+        if (!cont) {
+            cancel('Setup cancelled.');
+            return 3;
+        }
+    }
+    // 4. Write configs. Track previous content for rollback.
+    //
+    // Wave 7 (2026-05-24): write BOTH env-var names so the config works
+    // with every release line — pre-Wave-7 servers only know
+    // YTB_MCP_WP_URL; Wave-7+ servers prefer YTB_MCP_SITE_URL but still
+    // honour the legacy alias. The wizard intentionally writes both so a
+    // wizard-rendered config never needs editing after an npm upgrade.
+    const serverConfig = {
+        command: 'npx',
+        args: ['-y', SERVER_NAME],
+        env: {
+            YTB_MCP_SITE_URL: answers.wpUrl,
+            YTB_MCP_WP_URL: answers.wpUrl,
+            YTB_MCP_BEARER_TOKEN: answers.bearer,
+        },
+    };
+    const writes = [];
+    let writeFailed = false;
+    for (const id of answers.selectedClients) {
+        const result = await deps.writeClient(id, SERVER_KEY, serverConfig);
+        writes.push(result);
+        if (!result.ok) {
+            writeFailed = true;
+            break;
+        }
+    }
+    const summary = writes
+        .map((r) => r.ok
+        ? `  ✓ ${r.label}: configured`
+        : `  ✗ ${r.label}: FAILED (${r.error ?? 'unknown'})`)
+        .join('\n');
+    note(summary, 'Results');
+    if (writeFailed) {
+        log.error('Write failed — rolling back any partial writes.');
+        await rollbackWrites(writes, logFn);
+        return 4;
+    }
+    // 5. Dist-tag handshake (only when auth probe succeeded — there's
+    // no point handshaking with a known-bad token).
+    if (authOk) {
+        const hsSpinner = spinner();
+        hsSpinner.start('Verifying dist-tag handshake…');
+        const hs = await deps.handshake(answers.wpUrl, answers.bearer, SERVER_VERSION);
+        if (!hs.ok) {
+            hsSpinner.stop('Handshake failed.');
+            log.error(`Handshake failed after writing configs: ${hs.error ?? 'unknown'}. Rolling back.`);
+            await rollbackWrites(writes, logFn);
+            return 5;
+        }
+        if (hs.warning !== undefined) {
+            hsSpinner.stop('Handshake OK (with warning).');
+            log.warn(hs.warning);
+        }
+        else {
+            hsSpinner.stop('Handshake OK.');
+        }
+    }
+    else {
+        log.warn('Skipping handshake because the Bearer probe failed.');
+    }
+    // W9 — persist the answers to the multi-site sites.json registry
+    // when the dispatcher wired a `persistSite` callback. We do this
+    // AFTER the handshake passes so the sites.json never contains a
+    // site that failed the probe. Optional hook so pre-W9 callers
+    // (and tests that drive the wizard without sites.json) skip the
+    // write transparently.
+    if (deps.persistSite !== undefined && writes.every((r) => r.ok)) {
+        try {
+            await deps.persistSite(answers);
+        }
+        catch (e) {
+            const msg = e instanceof Error ? e.message : String(e);
+            log.error(`Failed to persist site to sites.json: ${msg}`);
+            // Don't rollback the client configs — the env-var path
+            // still works; the sites.json file is an additive surface.
+            // Operator just sees the warning + can retry with `add-site`.
+        }
+    }
+    if (writes.every((r) => r.ok) && authOk) {
+        outro('Done — restart your AI client to load the new MCP server.');
+    }
+    else {
+        outro('Setup finished with warnings. See the messages above.');
+    }
+    return 0;
+}
+//# sourceMappingURL=setup-wizard.js.map

package/dist/setup-wizard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard.js","sourceRoot":"","sources":["../src/setup-wizard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAGnE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EACH,mBAAmB,EACnB,cAAc,GACjB,MAAM,4BAA4B,CAAC;AAUpC,yEAAyE;AACzE,2EAA2E;AAC3E,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAU7E,qEAAqE;AACrE,mEAAmE;AACnE,wEAAwE;AACxE,mEAAmE;AACnE,mEAAmE;AACnE,qEAAqE;AACrE,sEAAsE;AACtE,4BAA4B;AAC5B,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAEpC;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC3B,OAAmB,mBAAmB;IAEtC,MAAM,KAAK,GACP,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;IAEtE,uCAAuC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAEjC,IAAI,OAAO,CAAC,KAAK,KAAK,EAAE,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAChD,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACjE,OAAO,CAAC,CAAC;IACb,CAAC;IAED,mEAAmE;IACnE,kEAAkE;IAClE,kEAAkE;IAClE,+CAA+C;IAC/C,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,OAAO,EAAE,CAAC;QAC5B,SAAS,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,KAAK,SAAS;gBAC1C,CAAC,CAAC,wBAAwB,QAAQ,CAAC,OAAO,GAAG;gBAC7C,CAAC,CAAC,oBAAoB,CAAC;YAC3B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;gBACvE,GAAG,CAAC,IAAI,CACJ,6BAA6B,OAAO,CAAC,KAAK,gDAAgD,QAAQ,CAAC,OAAO,IAAI;oBAC1G,sEAAsE,CAC7E,CAAC;YACN,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,KAAK,IAAI,SAAS,mDAAmD,CAAC,CAAC;QAChH,CAAC;IACL,CAAC;IAED,8BAA8B;IAC9B,MAAM,aAAa,GAAG,OAAO,EAAE,CAAC;IAChC,aAAa,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAsB,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACZ,aAAa,CAAC,IAAI,CACd,MAAM,CAAC,aAAa,KAAK,SAAS;YAC9B,CAAC,CAAC,sBAAsB,MAAM,CAAC,aAAa,IAAI;YAChD,CAAC,CAAC,mBAAmB,CAC5B,CAAC;IACN,CAAC;SAAM,CAAC;QACJ,aAAa,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC3C,GAAG,CAAC,KAAK,CAAC,+BAA+B,MAAM,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CACnC,iEAAiE,CACpE,CAAC;QACF,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC3B,OAAO,CAAC,CAAC;QACb,CAAC;IACL,CAAC;IAED,0BAA0B;IAC1B,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC;IAC9B,WAAW,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAoB,MAAM,IAAI,CAAC,SAAS,CAC9C,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,MAAM,CACjB,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IACvB,IAAI,MAAM,EAAE,CAAC;QACT,WAAW,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACJ,WAAW,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CACnC,uCAAuC,CAC1C,CAAC;QACF,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC3B,OAAO,CAAC,CAAC;QACb,CAAC;IACL,CAAC;IAED,yDAAyD;IACzD,EAAE;IACF,oEAAoE;IACpE,yDAAyD;IACzD,oEAAoE;IACpE,qEAAqE;IACrE,mEAAmE;IACnE,MAAM,YAAY,GAAoB;QAClC,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;QACzB,GAAG,EAAE;YACD,gBAAgB,EAAE,OAAO,CAAC,KAAK;YAC/B,cAAc,EAAE,OAAO,CAAC,KAAK;YAC7B,oBAAoB,EAAE,OAAO,CAAC,MAAM;SACvC;KACJ,CAAC;IAEF,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACb,WAAW,GAAG,IAAI,CAAC;YACnB,MAAM;QACV,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,MAAM;SACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,EAAE;QACA,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,cAAc;QAC9B,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,KAAK,IAAI,SAAS,GAAG,CAC3D;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAEzB,IAAI,WAAW,EAAE,CAAC;QACd,GAAG,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC7D,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC;IACb,CAAC;IAED,kEAAkE;IAClE,gDAAgD;IAChD,IAAI,MAAM,EAAE,CAAC;QACT,MAAM,SAAS,GAAG,OAAO,EAAE,CAAC;QAC5B,SAAS,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACjD,MAAM,EAAE,GAAoB,MAAM,IAAI,CAAC,SAAS,CAC5C,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,MAAM,EACd,cAAc,CACjB,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACpC,GAAG,CAAC,KAAK,CACL,2CAA2C,EAAE,CAAC,KAAK,IAAI,SAAS,iBAAiB,CACpF,CAAC;YACF,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACpC,OAAO,CAAC,CAAC;QACb,CAAC;QACD,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC3B,SAAS,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;aAAM,CAAC;YACJ,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;SAAM,CAAC;QACJ,GAAG,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACpE,CAAC;IAED,iEAAiE;IACjE,iEAAiE;IACjE,gEAAgE;IAChE,8DAA8D;IAC9D,gEAAgE;IAChE,uBAAuB;IACvB,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,GAAG,CAAC,KAAK,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;YAC1D,uDAAuD;YACvD,2DAA2D;YAC3D,8DAA8D;QAClE,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;QACtC,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,CAAC,CAAC;AACb,CAAC"}

package/dist/setup.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Backwards-compat entry point for `npx -y @wootsup/yt-builder-mcp setup`.
+ *
+ * The Wave G.7 refactor moved the wizard implementation into
+ * {@link runWizard} (with dependency injection so it's unit-testable)
+ * and the subcommand dispatcher into {@link runCli}, both in
+ * `./setup-cli.ts`. This file remains so the published `bin/`
+ * shim that does `import('../dist/setup.js')` still works after a
+ * partial deploy where only the published tarball is updated; it
+ * simply forwards to `runWizard()`.
+ *
+ * `YTB_MCP_TEST_MODE=1` short-circuits the wizard for smoke tests.
+ *
+ * @license MIT
+ */
+export {};
+//# sourceMappingURL=setup.d.ts.map

package/dist/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/setup.js

@@ -0,0 +1,33 @@
+/**
+ * Backwards-compat entry point for `npx -y @wootsup/yt-builder-mcp setup`.
+ *
+ * The Wave G.7 refactor moved the wizard implementation into
+ * {@link runWizard} (with dependency injection so it's unit-testable)
+ * and the subcommand dispatcher into {@link runCli}, both in
+ * `./setup-cli.ts`. This file remains so the published `bin/`
+ * shim that does `import('../dist/setup.js')` still works after a
+ * partial deploy where only the published tarball is updated; it
+ * simply forwards to `runWizard()`.
+ *
+ * `YTB_MCP_TEST_MODE=1` short-circuits the wizard for smoke tests.
+ *
+ * @license MIT
+ */
+import { runWizard } from './setup-cli.js';
+const TEST_MODE = process.env.YTB_MCP_TEST_MODE === '1';
+async function run() {
+    if (TEST_MODE) {
+        process.stderr.write('[yt-builder-mcp setup] Test mode — exiting after banner.\n');
+        return;
+    }
+    const code = await runWizard();
+    if (code !== 0) {
+        process.exit(code);
+    }
+}
+run().catch((e) => {
+    const message = e instanceof Error ? e.message : String(e);
+    process.stderr.write(`[yt-builder-mcp setup] fatal: ${message}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=setup.js.map

package/dist/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,GAAG,CAAC;AAExD,KAAK,UAAU,GAAG;IACd,IAAI,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACnF,OAAO;IACX,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,SAAS,EAAE,CAAC;IAC/B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;AACL,CAAC;AAED,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;IACvB,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,OAAO,IAAI,CAAC,CAAC;IACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC,CAAC,CAAC"}