@wootsup/yt-builder-mcp 1.1.5 → 1.1.7

package/dist/sites/cli/add-site.d.ts

@@ -0,0 +1,106 @@
+/**
+ * W9 — `add-site` CLI subcommand.
+ *
+ * Adds (or, with `--yes`, overwrites) a single site entry in the
+ * on-disk `sites.json` registry. Pure file-IO surface: loads, mutates
+ * in memory, and atomic-saves through {@link saveSitesFile}. NEVER
+ * touches the network — the optional connectivity probe lives in
+ * `test-site` so callers can compose the two.
+ *
+ * Design choices (per plan §W9):
+ *  - **Mutual-exclusion `--token` vs `--token-ref`.** Exactly one
+ *    credential field must be set; reuses the W1 SiteEntry refine() as
+ *    the on-disk guard but also pre-checks here for an immediate CLI
+ *    error rather than a Zod surprise at save time.
+ *  - **Auto-default on first site.** If `sites.json` is empty (or did
+ *    not exist), the first added entry gets `is_default: true` AND
+ *    `default_site_id` is updated, regardless of whether `--default`
+ *    was passed. The plan calls this out explicitly so users don't
+ *    end up with a registry that has sites but no default.
+ *  - **Idempotent + safe overwrite.** Re-adding the same `site_id`
+ *    fails with exit code 2 unless `--yes` is passed; with `--yes` the
+ *    existing entry is replaced AND its `is_default` flag is preserved
+ *    so an overwrite of the default site stays the default.
+ *  - **Defence-in-depth platform default.** When `--platform` is
+ *    omitted the entry stores `'auto'`, which the W3 registry resolves
+ *    at first use via the runtime probe.
+ *
+ * @license MIT
+ */
+import { type SitesFileT } from '../schema.js';
+/**
+ * Parsed shape consumed by {@link addSiteCommand}. The dispatcher
+ * (`setup-cli.ts:runCli`) translates argv flags into this object and
+ * the public test surface drives it directly so flag parsing is
+ * exercised separately from the file-IO and registry-mutation logic.
+ */
+export interface AddSiteArgs {
+    readonly url: string;
+    /** Inline plain bearer; mutually exclusive with `tokenRef`. */
+    readonly token?: string;
+    /** 1Password Secret Reference; mutually exclusive with `token`. */
+    readonly tokenRef?: string;
+    /** Optional explicit platform hint; defaults to `'auto'`. */
+    readonly platform?: 'auto' | 'wordpress' | 'joomla';
+    /** Optional human-readable label (≤120 chars). */
+    readonly label?: string;
+    /** When true, mark the new site as the default. Ignored if it's
+     *  the first site (auto-default applies). */
+    readonly default?: boolean;
+    /** Override the site_id slug; defaults to `'default'`. */
+    readonly siteId?: string;
+    /** Skip "this site_id exists" guard and overwrite instead. */
+    readonly yes?: boolean;
+}
+/**
+ * Outcome of a successful add. The CLI dispatcher uses this to render
+ * the "Site '<id>' added (default)." line + the restart hint. Returned
+ * as a value (not stdout-side) so tests can assert without parsing
+ * captured stdout.
+ */
+export interface AddSiteResult {
+    /** site_id that was written. */
+    readonly siteId: string;
+    /** Path of the sites.json that was written. */
+    readonly path: string;
+    /** True when this site was first AND auto-promoted to default. */
+    readonly becameDefault: boolean;
+    /** True when an existing entry with the same site_id was replaced. */
+    readonly overwritten: boolean;
+    /** True when --default flag was honoured (and not just auto-default). */
+    readonly defaultRequested: boolean;
+}
+/**
+ * Domain-tagged CLI failure. The dispatcher maps these to exit codes
+ * (typically 2 for "input invalid" + a friendly stderr line). Carries
+ * a `code` so tests / callers can branch without substring matching.
+ */
+export declare class AddSiteError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/**
+ * Test/IO injection seam. Production callers use the default
+ * implementations imported above; tests inject in-memory store
+ * helpers and a frozen `now()`.
+ */
+export interface AddSiteDeps {
+    readonly load: (path: string) => Promise<SitesFileT>;
+    readonly save: (path: string, data: SitesFileT) => Promise<void>;
+    readonly now?: () => string;
+}
+/**
+ * Add (or overwrite-with-`--yes`) a single site entry. See file header
+ * for the auto-default / mutual-exclusion / idempotency contract.
+ *
+ * @throws {AddSiteError} on any input-validation failure or when the
+ *   site_id already exists and `--yes` was not passed.
+ */
+export declare function addSiteCommand(args: AddSiteArgs, path: string, deps: AddSiteDeps): Promise<AddSiteResult>;
+/**
+ * Default IO deps wired to the real store. Exported so the dispatcher
+ * + the W9 wizard-internal call-site can both share them without
+ * duplicating the import surface.
+ */
+export declare const DEFAULT_ADD_SITE_DEPS: AddSiteDeps;
+//# sourceMappingURL=add-site.d.ts.map

package/dist/sites/cli/add-site.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-site.d.ts","sourceRoot":"","sources":["../../../src/sites/cli/add-site.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAKH,KAAK,UAAU,EAClB,MAAM,cAAc,CAAC;AAEtB;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC;IACpD,kDAAkD;IAClD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;iDAC6C;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC1B,gCAAgC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,yEAAyE;IACzE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACtC;AAED;;;;GAIG;AACH,qBAAa,YAAa,SAAQ,KAAK;aACP,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAI5D;AA0GD;;;;GAIG;AACH,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAChC,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,WAAW,GAClB,OAAO,CAAC,aAAa,CAAC,CAoExB;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAAE,WAQnC,CAAC"}

package/dist/sites/cli/add-site.js

@@ -0,0 +1,185 @@
+/**
+ * W9 — `add-site` CLI subcommand.
+ *
+ * Adds (or, with `--yes`, overwrites) a single site entry in the
+ * on-disk `sites.json` registry. Pure file-IO surface: loads, mutates
+ * in memory, and atomic-saves through {@link saveSitesFile}. NEVER
+ * touches the network — the optional connectivity probe lives in
+ * `test-site` so callers can compose the two.
+ *
+ * Design choices (per plan §W9):
+ *  - **Mutual-exclusion `--token` vs `--token-ref`.** Exactly one
+ *    credential field must be set; reuses the W1 SiteEntry refine() as
+ *    the on-disk guard but also pre-checks here for an immediate CLI
+ *    error rather than a Zod surprise at save time.
+ *  - **Auto-default on first site.** If `sites.json` is empty (or did
+ *    not exist), the first added entry gets `is_default: true` AND
+ *    `default_site_id` is updated, regardless of whether `--default`
+ *    was passed. The plan calls this out explicitly so users don't
+ *    end up with a registry that has sites but no default.
+ *  - **Idempotent + safe overwrite.** Re-adding the same `site_id`
+ *    fails with exit code 2 unless `--yes` is passed; with `--yes` the
+ *    existing entry is replaced AND its `is_default` flag is preserved
+ *    so an overwrite of the default site stays the default.
+ *  - **Defence-in-depth platform default.** When `--platform` is
+ *    omitted the entry stores `'auto'`, which the W3 registry resolves
+ *    at first use via the runtime probe.
+ *
+ * @license MIT
+ */
+import { loadSitesFile, saveSitesFile } from '../store.js';
+import { BEARER_REGEX, OP_REF_REGEX, SITE_ID_REGEX, } from '../schema.js';
+/**
+ * Domain-tagged CLI failure. The dispatcher maps these to exit codes
+ * (typically 2 for "input invalid" + a friendly stderr line). Carries
+ * a `code` so tests / callers can branch without substring matching.
+ */
+export class AddSiteError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'AddSiteError';
+    }
+}
+/**
+ * Build a new {@link SiteEntryT} from validated CLI args. Pure +
+ * deterministic so tests can drive it directly. `added_at` uses the
+ * supplied `now` so snapshot tests don't drift on clock.
+ */
+function buildEntry(args, siteId, isDefault, now) {
+    const base = {
+        site_id: siteId,
+        url: args.url,
+        platform: args.platform ?? 'auto',
+        is_default: isDefault,
+        added_at: now(),
+        ...(args.label !== undefined && args.label.length > 0
+            ? { label: args.label }
+            : {}),
+    };
+    if (args.token !== undefined && args.token.length > 0) {
+        return { ...base, bearer: args.token };
+    }
+    // token-ref guaranteed by validateArgs.
+    return { ...base, bearer_ref: args.tokenRef };
+}
+/**
+ * Validate the CLI arg combination before any file IO. Throws
+ * {@link AddSiteError} with a stable `code` on the first violation.
+ */
+function validateArgs(args) {
+    if (args.url === undefined || args.url.length === 0) {
+        throw new AddSiteError('URL_REQUIRED', 'Flag --url is required.');
+    }
+    try {
+        void new URL(args.url);
+    }
+    catch {
+        throw new AddSiteError('URL_INVALID', `--url is not a valid web address: ${args.url}`);
+    }
+    const hasToken = args.token !== undefined && args.token.length > 0;
+    const hasRef = args.tokenRef !== undefined && args.tokenRef.length > 0;
+    if (!hasToken && !hasRef) {
+        throw new AddSiteError('BEARER_REQUIRED', 'Either --token <bearer> or --token-ref <op://...> is required.');
+    }
+    if (hasToken && hasRef) {
+        throw new AddSiteError('BEARER_MUTUAL_EXCLUSION', '--token and --token-ref are mutually exclusive. Pick one.');
+    }
+    if (hasToken && !BEARER_REGEX.test(args.token)) {
+        throw new AddSiteError('BEARER_INVALID', '--token does not match the expected Bearer shape ' +
+            '(ytb_(live|test)_<payload>.<signature>).');
+    }
+    if (hasRef && !OP_REF_REGEX.test(args.tokenRef)) {
+        throw new AddSiteError('TOKEN_REF_INVALID', '--token-ref does not match the expected 1Password ref shape ' +
+            '(op://<vault>/<item>/<field>).');
+    }
+    const siteId = args.siteId ?? 'default';
+    if (!SITE_ID_REGEX.test(siteId)) {
+        throw new AddSiteError('SITE_ID_INVALID', `--site-id "${siteId}" must match letters / digits / dash / underscore only.`);
+    }
+    if (args.platform !== undefined
+        && args.platform !== 'auto'
+        && args.platform !== 'wordpress'
+        && args.platform !== 'joomla') {
+        throw new AddSiteError('PLATFORM_INVALID', `--platform must be one of: auto, wordpress, joomla (got "${String(args.platform)}").`);
+    }
+    if (args.label !== undefined && args.label.length > 120) {
+        throw new AddSiteError('LABEL_TOO_LONG', `--label exceeds 120 characters (got ${String(args.label.length)}).`);
+    }
+}
+/**
+ * Add (or overwrite-with-`--yes`) a single site entry. See file header
+ * for the auto-default / mutual-exclusion / idempotency contract.
+ *
+ * @throws {AddSiteError} on any input-validation failure or when the
+ *   site_id already exists and `--yes` was not passed.
+ */
+export async function addSiteCommand(args, path, deps) {
+    validateArgs(args);
+    const siteId = args.siteId ?? 'default';
+    const now = deps.now ?? (() => new Date().toISOString());
+    const file = await deps.load(path);
+    const existingIndex = file.sites.findIndex((s) => s.site_id === siteId);
+    const exists = existingIndex >= 0;
+    if (exists && args.yes !== true) {
+        throw new AddSiteError('SITE_ID_EXISTS', `Site "${siteId}" already exists in ${path}. ` +
+            `Pass --yes to overwrite or pick a different --site-id.`);
+    }
+    // Auto-default policy:
+    //  - first ever site → always default (regardless of --default).
+    //  - subsequent sites with --default → flip is_default + update
+    //    file.default_site_id.
+    //  - overwrite of an existing site → preserve its prior is_default
+    //    UNLESS --default was explicitly passed (then we promote it).
+    const isFirstEver = !exists && file.sites.length === 0;
+    const wantsDefault = args.default === true || isFirstEver;
+    let isDefault = wantsDefault;
+    if (exists && !wantsDefault) {
+        const prior = file.sites[existingIndex];
+        if (prior !== undefined)
+            isDefault = prior.is_default;
+    }
+    const entry = buildEntry(args, siteId, isDefault, now);
+    // Build the new sites array — replace in place on overwrite to
+    // preserve insertion order, append otherwise.
+    const nextSites = exists
+        ? file.sites.map((s, i) => (i === existingIndex ? entry : s))
+        : [...file.sites, entry];
+    // When this entry becomes the default, clear any other site's
+    // is_default flag so the W1 invariant (at most one default) holds.
+    const sitesWithDefaultFixed = isDefault
+        ? nextSites.map((s) => s.site_id === siteId ? s : { ...s, is_default: false })
+        : nextSites;
+    const defaultSiteId = isDefault
+        ? siteId
+        : file.default_site_id;
+    const nextFile = {
+        schema_version: 1,
+        default_site_id: defaultSiteId,
+        sites: sitesWithDefaultFixed,
+    };
+    await deps.save(path, nextFile);
+    return {
+        siteId,
+        path,
+        becameDefault: isFirstEver,
+        overwritten: exists,
+        defaultRequested: args.default === true,
+    };
+}
+/**
+ * Default IO deps wired to the real store. Exported so the dispatcher
+ * + the W9 wizard-internal call-site can both share them without
+ * duplicating the import surface.
+ */
+export const DEFAULT_ADD_SITE_DEPS = {
+    // W12-R1.3 (A1-N-01): saveSitesFile is already a static import
+    // above; switch load to the same static binding so the runtime
+    // dependency graph matches the import graph and bundlers/tree-
+    // shakers don't have to chase a dynamic import for a path that's
+    // always reached.
+    load: loadSitesFile,
+    save: saveSitesFile,
+};
+//# sourceMappingURL=add-site.js.map

package/dist/sites/cli/add-site.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-site.js","sourceRoot":"","sources":["../../../src/sites/cli/add-site.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EACH,YAAY,EACZ,YAAY,EACZ,aAAa,GAGhB,MAAM,cAAc,CAAC;AA8CtB;;;;GAIG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IACP;IAA5B,YAA4B,IAAY,EAAE,OAAe;QACrD,KAAK,CAAC,OAAO,CAAC,CAAC;QADS,SAAI,GAAJ,IAAI,CAAQ;QAEpC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC/B,CAAC;CACJ;AAED;;;;GAIG;AACH,SAAS,UAAU,CACf,IAAiB,EACjB,MAAc,EACd,SAAkB,EAClB,GAAiB;IAEjB,MAAM,IAAI,GAAG;QACT,OAAO,EAAE,MAAM;QACf,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM;QACjC,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,GAAG,EAAE;QACf,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YACjD,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YACvB,CAAC,CAAC,EAAE,CAAC;KACH,CAAC;IAEX,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAgB,CAAC;IACzD,CAAC;IACD,wCAAwC;IACxC,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,QAAS,EAAgB,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,IAAiB;IACnC,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,yBAAyB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC;QACD,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,YAAY,CAClB,aAAa,EACb,qCAAqC,IAAI,CAAC,GAAG,EAAE,CAClD,CAAC;IACN,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAEvE,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,YAAY,CAClB,iBAAiB,EACjB,gEAAgE,CACnE,CAAC;IACN,CAAC;IACD,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,YAAY,CAClB,yBAAyB,EACzB,2DAA2D,CAC9D,CAAC;IACN,CAAC;IACD,IAAI,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAM,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,YAAY,CAClB,gBAAgB,EAChB,mDAAmD;YAC/C,0CAA0C,CACjD,CAAC;IACN,CAAC;IACD,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAS,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,YAAY,CAClB,mBAAmB,EACnB,8DAA8D;YAC1D,gCAAgC,CACvC,CAAC;IACN,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;IACxC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,YAAY,CAClB,iBAAiB,EACjB,cAAc,MAAM,yDAAyD,CAChF,CAAC;IACN,CAAC;IAED,IACI,IAAI,CAAC,QAAQ,KAAK,SAAS;WACxB,IAAI,CAAC,QAAQ,KAAK,MAAM;WACxB,IAAI,CAAC,QAAQ,KAAK,WAAW;WAC7B,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAC/B,CAAC;QACC,MAAM,IAAI,YAAY,CAClB,kBAAkB,EAClB,4DAA4D,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CACzF,CAAC;IACN,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACtD,MAAM,IAAI,YAAY,CAClB,gBAAgB,EAChB,uCAAuC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CACvE,CAAC;IACN,CAAC;AACL,CAAC;AAaD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAChC,IAAiB,EACjB,IAAY,EACZ,IAAiB;IAEjB,YAAY,CAAC,IAAI,CAAC,CAAC;IAEnB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAW,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAEjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,aAAa,IAAI,CAAC,CAAC;IAElC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,YAAY,CAClB,gBAAgB,EAChB,SAAS,MAAM,uBAAuB,IAAI,IAAI;YAC1C,wDAAwD,CAC/D,CAAC;IACN,CAAC;IAED,uBAAuB;IACvB,iEAAiE;IACjE,gEAAgE;IAChE,2BAA2B;IAC3B,mEAAmE;IACnE,kEAAkE;IAClE,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,WAAW,CAAC;IAE1D,IAAI,SAAS,GAAG,YAAY,CAAC;IAC7B,IAAI,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;IAC1D,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAEvD,+DAA+D;IAC/D,8CAA8C;IAC9C,MAAM,SAAS,GAAiB,MAAM;QAClC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAE7B,8DAA8D;IAC9D,mEAAmE;IACnE,MAAM,qBAAqB,GAAiB,SAAS;QACjD,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChB,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CACzD;QACH,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,aAAa,GAAkB,SAAS;QAC1C,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;IAE3B,MAAM,QAAQ,GAAe;QACzB,cAAc,EAAE,CAAC;QACjB,eAAe,EAAE,aAAa;QAC9B,KAAK,EAAE,qBAAqB;KAC/B,CAAC;IAEF,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAEhC,OAAO;QACH,MAAM;QACN,IAAI;QACJ,aAAa,EAAE,WAAW;QAC1B,WAAW,EAAE,MAAM;QACnB,gBAAgB,EAAE,IAAI,CAAC,OAAO,KAAK,IAAI;KAC1C,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgB;IAC9C,+DAA+D;IAC/D,+DAA+D;IAC/D,+DAA+D;IAC/D,iEAAiE;IACjE,kBAAkB;IAClB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,aAAa;CACtB,CAAC"}

package/dist/sites/cli/list-sites.d.ts

@@ -0,0 +1,40 @@
+/**
+ * W9 — `list-sites` CLI subcommand.
+ *
+ * Reads `sites.json`, prints a tabular view matching the structure of
+ * the `yootheme_builder_sites_list` MCP tool. NEVER reaches for the
+ * secret-resolver — the table only exposes `bearer_source: 'plain' |
+ * 'op'` so an in-progress 1Password unlock cannot wedge the CLI.
+ *
+ * Output contract (verbatim columns, in order):
+ *   SITE_ID  URL  PLATFORM  DEFAULT  LABEL  BEARER
+ *
+ * Empty registry prints "(no sites configured)" + a discovery hint
+ * pointing at `add-site`. The exit code is always 0 on a successful
+ * read — even an empty registry is a normal state, not an error.
+ *
+ * @license MIT
+ */
+import type { SitesFileT } from '../schema.js';
+/** Test-injection seam — production callers use the defaults below. */
+export interface ListSitesDeps {
+    readonly load: (path: string) => Promise<SitesFileT>;
+    readonly log?: (line: string) => void;
+}
+/**
+ * Render the sites registry to stdout. Returns the rendered lines so
+ * tests can assert without parsing captured stdout; the caller is
+ * still expected to print them via `deps.log` for the live CLI path.
+ */
+export declare function listSitesCommand(path: string, deps: ListSitesDeps): Promise<readonly string[]>;
+/**
+ * Pure renderer — exported for direct test coverage of the layout.
+ * Layout: fixed-width left-padded columns, header on row 0, divider on
+ * row 1, one row per site. Last line always carries the discovery hint
+ * (or empty-registry hint) so a Maria-class user always sees the next
+ * step.
+ */
+export declare function renderSitesTable(file: SitesFileT): readonly string[];
+/** Default deps wired to the real store. */
+export declare const DEFAULT_LIST_SITES_DEPS: ListSitesDeps;
+//# sourceMappingURL=list-sites.d.ts.map

package/dist/sites/cli/list-sites.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-sites.d.ts","sourceRoot":"","sources":["../../../src/sites/cli/list-sites.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,uEAAuE;AACvE,MAAM,WAAW,aAAa;IAC1B,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACzC;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAO5B;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,MAAM,EAAE,CA8EpE;AAED,4CAA4C;AAC5C,eAAO,MAAM,uBAAuB,EAAE,aAErC,CAAC"}

package/dist/sites/cli/list-sites.js

@@ -0,0 +1,116 @@
+/**
+ * W9 — `list-sites` CLI subcommand.
+ *
+ * Reads `sites.json`, prints a tabular view matching the structure of
+ * the `yootheme_builder_sites_list` MCP tool. NEVER reaches for the
+ * secret-resolver — the table only exposes `bearer_source: 'plain' |
+ * 'op'` so an in-progress 1Password unlock cannot wedge the CLI.
+ *
+ * Output contract (verbatim columns, in order):
+ *   SITE_ID  URL  PLATFORM  DEFAULT  LABEL  BEARER
+ *
+ * Empty registry prints "(no sites configured)" + a discovery hint
+ * pointing at `add-site`. The exit code is always 0 on a successful
+ * read — even an empty registry is a normal state, not an error.
+ *
+ * @license MIT
+ */
+import { SiteRegistry } from '../registry.js';
+import { loadSitesFile } from '../store.js';
+/**
+ * Render the sites registry to stdout. Returns the rendered lines so
+ * tests can assert without parsing captured stdout; the caller is
+ * still expected to print them via `deps.log` for the live CLI path.
+ */
+export async function listSitesCommand(path, deps) {
+    const file = await deps.load(path);
+    const lines = renderSitesTable(file);
+    if (deps.log !== undefined) {
+        for (const line of lines)
+            deps.log(line);
+    }
+    return lines;
+}
+/**
+ * Pure renderer — exported for direct test coverage of the layout.
+ * Layout: fixed-width left-padded columns, header on row 0, divider on
+ * row 1, one row per site. Last line always carries the discovery hint
+ * (or empty-registry hint) so a Maria-class user always sees the next
+ * step.
+ */
+export function renderSitesTable(file) {
+    if (file.sites.length === 0) {
+        return [
+            '(no sites configured)',
+            '',
+            'Add one with: yt-builder-mcp add-site --url https://example.com --token <bearer>',
+        ];
+    }
+    // Build a registry purely so we can reuse listForDisplay's shape.
+    // The platform probe is never triggered because this CLI never
+    // calls platformFor().
+    const registry = new SiteRegistry(file);
+    const rows = registry.listForDisplay();
+    const defaultSiteId = registry.defaultSiteId();
+    // W12-R1.3 — bearer_source column dropped for consistency with the
+    // MCP `sites_list` tool + the `sites://current` resource. The CLI
+    // never needed it (the operator already knows which form they
+    // chose); keeping it here would be a divergence surface only.
+    const COLUMNS = [
+        { key: 'site_id', label: 'SITE_ID', width: 20 },
+        { key: 'url', label: 'URL', width: 36 },
+        { key: 'platform', label: 'PLATFORM', width: 11 },
+        { key: 'default', label: 'DEFAULT', width: 9 },
+        { key: 'label', label: 'LABEL', width: 24 },
+    ];
+    function pad(text, width) {
+        if (text.length >= width)
+            return text.slice(0, width);
+        return text + ' '.repeat(width - text.length);
+    }
+    /**
+     * W12-R1.3 (A2-L2): strip ANSI escape codes + control characters
+     * from operator-provided strings before printing. A malicious or
+     * accidentally-pasted label could otherwise repaint the terminal
+     * ("\x1b[2J\x1b[H", "\r" cursor reset, etc.) and hide other rows.
+     * Replaces all ESC + C0 control bytes with `?` so the cell stays
+     * fixed-width.
+     */
+    function sanitiseForTerminal(text) {
+        return text.replace(/[\x00-\x1f\x7f]/g, '?');
+    }
+    const header = COLUMNS.map((c) => pad(c.label, c.width)).join('  ');
+    const divider = COLUMNS.map((c) => '-'.repeat(c.width)).join('  ');
+    const dataLines = rows.map((row) => {
+        const platform = row.platform_resolved ?? row.platform_hint;
+        const def = row.is_default ? 'yes' : 'no';
+        const label = sanitiseForTerminal(row.label ?? '');
+        const cells = [
+            pad(row.site_id, COLUMNS[0].width),
+            pad(row.url, COLUMNS[1].width),
+            pad(platform, COLUMNS[2].width),
+            pad(def, COLUMNS[3].width),
+            pad(label, COLUMNS[4].width),
+        ];
+        return cells.join('  ');
+    });
+    const total = rows.length;
+    const summary = `${String(total)} configured site${total === 1 ? '' : 's'}` +
+        (defaultSiteId !== null
+            ? ` (default: ${defaultSiteId})`
+            : ' (no default configured)');
+    return [
+        summary,
+        '',
+        header,
+        divider,
+        ...dataLines,
+        '',
+        'Use `yt-builder-mcp test-site <site_id>` to verify connectivity.',
+    ];
+}
+/** Default deps wired to the real store. */
+export const DEFAULT_LIST_SITES_DEPS = {
+    load: loadSitesFile,
+};
+//# sourceMappingURL=list-sites.js.map

package/dist/sites/cli/list-sites.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-sites.js","sourceRoot":"","sources":["../../../src/sites/cli/list-sites.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAS5C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,IAAY,EACZ,IAAmB;IAEnB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAgB;IAC7C,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACH,uBAAuB;YACvB,EAAE;YACF,kFAAkF;SACrF,CAAC;IACN,CAAC;IAED,kEAAkE;IAClE,+DAA+D;IAC/D,uBAAuB;IACvB,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;IACvC,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;IAE/C,mEAAmE;IACnE,kEAAkE;IAClE,8DAA8D;IAC9D,8DAA8D;IAC9D,MAAM,OAAO,GAAG;QACZ,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE;QAC/C,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;QACvC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE;QACjD,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE;QAC9C,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;KACrC,CAAC;IAEX,SAAS,GAAG,CAAC,IAAY,EAAE,KAAa;QACpC,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACtD,OAAO,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;;OAOG;IACH,SAAS,mBAAmB,CAAC,IAAY;QACrC,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEnE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,aAAa,CAAC;QAC5D,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1C,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG;YACV,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAClC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAC9B,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAC/B,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAC1B,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;SAC/B,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1B,MAAM,OAAO,GACT,GAAG,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;QAC3D,CAAC,aAAa,KAAK,IAAI;YACnB,CAAC,CAAC,cAAc,aAAa,GAAG;YAChC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IAEtC,OAAO;QACH,OAAO;QACP,EAAE;QACF,MAAM;QACN,OAAO;QACP,GAAG,SAAS;QACZ,EAAE;QACF,kEAAkE;KACrE,CAAC;AACN,CAAC;AAED,4CAA4C;AAC5C,MAAM,CAAC,MAAM,uBAAuB,GAAkB;IAClD,IAAI,EAAE,aAAa;CACtB,CAAC"}

package/dist/sites/cli/remove-site.d.ts

@@ -0,0 +1,60 @@
+/**
+ * W9 — `remove-site` CLI subcommand.
+ *
+ * Removes ONE site entry by `site_id`. Auto-promotion policy (per
+ * plan §C.3):
+ *  - Removing a non-default site → plain delete, default_site_id and
+ *    the other entries' is_default flags are untouched.
+ *  - Removing the default AND there is at least one other site →
+ *    promote the next-in-insertion-order site to default
+ *    (`is_default:true` + `default_site_id` update).
+ *  - Removing the only site → `default_site_id: null`, empty array.
+ *
+ * Returns a structured {@link RemoveSiteResult} so the dispatcher can
+ * render the "(default → promoted X)" hint and tests can assert
+ * promotion behaviour without parsing stdout.
+ *
+ * `--yes` skips the confirmation hook supplied by the dispatcher.
+ * Production callers always wire a confirm hook; tests pass yes=true
+ * to bypass it.
+ *
+ * @license MIT
+ */
+import type { SitesFileT } from '../schema.js';
+export interface RemoveSiteOptions {
+    /** Skip confirmation when true. CLI passes through from --yes. */
+    readonly yes?: boolean;
+}
+export interface RemoveSiteResult {
+    readonly siteId: string;
+    /** Path of the sites.json that was written. */
+    readonly path: string;
+    /** site_id that was promoted to default (only when removing default + ≥1 other). */
+    readonly promoted?: string;
+    /** True when the registry became empty after the remove. */
+    readonly nowEmpty: boolean;
+    /** True when no write happened because --yes was missing on confirm. */
+    readonly cancelled: boolean;
+}
+export declare class RemoveSiteError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/** Test/IO injection seam. */
+export interface RemoveSiteDeps {
+    readonly load: (path: string) => Promise<SitesFileT>;
+    readonly save: (path: string, data: SitesFileT) => Promise<void>;
+    /**
+     * Confirm hook. Production dispatcher wires this to a clack
+     * prompt; tests pass `--yes` so this is never invoked.
+     */
+    readonly confirm?: (message: string) => Promise<boolean>;
+}
+/**
+ * Remove a site by `site_id`. See file header for the auto-promotion
+ * policy. Throws {@link RemoveSiteError} with code `'UNKNOWN_SITE'`
+ * when `siteId` is not in the registry.
+ */
+export declare function removeSiteCommand(siteId: string, path: string, opts: RemoveSiteOptions, deps: RemoveSiteDeps): Promise<RemoveSiteResult>;
+export declare const DEFAULT_REMOVE_SITE_DEPS: RemoveSiteDeps;
+//# sourceMappingURL=remove-site.d.ts.map

package/dist/sites/cli/remove-site.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-site.d.ts","sourceRoot":"","sources":["../../../src/sites/cli/remove-site.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAAc,UAAU,EAAE,MAAM,cAAc,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oFAAoF;IACpF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC/B;AAED,qBAAa,eAAgB,SAAQ,KAAK;aACV,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAI5D;AAED,8BAA8B;AAC9B,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5D;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE,cAAc,GACrB,OAAO,CAAC,gBAAgB,CAAC,CA8F3B;AAED,eAAO,MAAM,wBAAwB,EAAE,cAGtC,CAAC"}

package/dist/sites/cli/remove-site.js

@@ -0,0 +1,120 @@
+/**
+ * W9 — `remove-site` CLI subcommand.
+ *
+ * Removes ONE site entry by `site_id`. Auto-promotion policy (per
+ * plan §C.3):
+ *  - Removing a non-default site → plain delete, default_site_id and
+ *    the other entries' is_default flags are untouched.
+ *  - Removing the default AND there is at least one other site →
+ *    promote the next-in-insertion-order site to default
+ *    (`is_default:true` + `default_site_id` update).
+ *  - Removing the only site → `default_site_id: null`, empty array.
+ *
+ * Returns a structured {@link RemoveSiteResult} so the dispatcher can
+ * render the "(default → promoted X)" hint and tests can assert
+ * promotion behaviour without parsing stdout.
+ *
+ * `--yes` skips the confirmation hook supplied by the dispatcher.
+ * Production callers always wire a confirm hook; tests pass yes=true
+ * to bypass it.
+ *
+ * @license MIT
+ */
+import { saveSitesFile, loadSitesFile } from '../store.js';
+export class RemoveSiteError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'RemoveSiteError';
+    }
+}
+/**
+ * Remove a site by `site_id`. See file header for the auto-promotion
+ * policy. Throws {@link RemoveSiteError} with code `'UNKNOWN_SITE'`
+ * when `siteId` is not in the registry.
+ */
+export async function removeSiteCommand(siteId, path, opts, deps) {
+    const file = await deps.load(path);
+    const index = file.sites.findIndex((s) => s.site_id === siteId);
+    if (index < 0) {
+        throw new RemoveSiteError('UNKNOWN_SITE', `Site "${siteId}" not found in ${path}. ` +
+            (file.sites.length > 0
+                ? `Available: ${file.sites.map((s) => s.site_id).join(', ')}.`
+                : '(no sites configured)'));
+    }
+    // W12-R2A (A2-H1) — fail-closed guard. Round 1's check silently
+    // proceeded when neither `--yes` NOR a confirm hook was supplied
+    // (deps.confirm === undefined). That made the destructive op a
+    // no-prompt delete in any non-TTY context (CI, piped stdin, MCP
+    // server stdio). Tighten to: if `--yes` is not set, a confirm hook
+    // is REQUIRED — otherwise throw a typed error so the dispatcher
+    // can surface "pass --yes" with a non-zero exit code.
+    if (opts.yes !== true) {
+        if (deps.confirm === undefined) {
+            throw new RemoveSiteError('CONFIRM_REQUIRED', `Remove of site "${siteId}" requires --yes (no interactive `
+                + `confirm available in this context). Re-run with --yes to skip the prompt.`);
+        }
+        const cont = await deps.confirm(`Remove site "${siteId}" from ${path}?`);
+        if (!cont) {
+            return {
+                siteId,
+                path,
+                nowEmpty: false,
+                cancelled: true,
+            };
+        }
+    }
+    const wasDefault = file.sites[index]?.is_default === true
+        || file.default_site_id === siteId;
+    // Drop the target entry, preserving insertion order.
+    const remaining = file.sites.filter((_, i) => i !== index);
+    let promoted;
+    let nextSites = remaining;
+    let nextDefaultId = file.default_site_id;
+    if (wasDefault) {
+        if (remaining.length === 0) {
+            nextDefaultId = null;
+        }
+        else {
+            const promote = remaining[0];
+            if (promote === undefined) {
+                // unreachable due to length check, but keeps TS strict.
+                nextDefaultId = null;
+            }
+            else {
+                promoted = promote.site_id;
+                nextDefaultId = promote.site_id;
+                nextSites = remaining.map((s, i) => ({
+                    ...s,
+                    is_default: i === 0,
+                }));
+            }
+        }
+    }
+    else {
+        // Make sure default_site_id still points at a present entry.
+        if (nextDefaultId !== null
+            && !remaining.some((s) => s.site_id === nextDefaultId)) {
+            nextDefaultId = null;
+        }
+    }
+    const nextFile = {
+        schema_version: 1,
+        default_site_id: nextDefaultId,
+        sites: nextSites,
+    };
+    await deps.save(path, nextFile);
+    return {
+        siteId,
+        path,
+        ...(promoted !== undefined ? { promoted } : {}),
+        nowEmpty: nextSites.length === 0,
+        cancelled: false,
+    };
+}
+export const DEFAULT_REMOVE_SITE_DEPS = {
+    load: loadSitesFile,
+    save: saveSitesFile,
+};
+//# sourceMappingURL=remove-site.js.map