@wootsup/yt-builder-mcp 1.1.5 → 1.1.7

package/dist/tools/tool-builder/results.js

@@ -0,0 +1,224 @@
+/**
+ * `tool-builder/results` — envelope builders (`jsonResult`,
+ * `errorResult`, `structuredResult`, `confirmGuard`) + the shared
+ * `sanitizeContentItem` helper. Every payload accepted here runs
+ * through the `sanitizeSecrets` / `sanitizeForLogs` boundary so an
+ * upstream regression can never land in the LLM context. The mask
+ * is concentrated here — `define.ts` and call-sites do not re-mask.
+ *
+ * Split from `tool-builder.ts` in Round-1.5.
+ *
+ * @license MIT
+ */
+import { NetworkError, RestError } from '../../errors.js';
+import { sanitizeForLogs } from '../../errors/mask.js';
+import { sanitizeSecrets } from '../../errors/sanitize.js';
+function stringify(value) {
+    try {
+        return JSON.stringify(value, null, 2);
+    }
+    catch {
+        return String(value);
+    }
+}
+/**
+ * Convert any JSON-serializable value into the MCP content envelope
+ * (2-space JSON). Wave G.6.4b: every payload is deep-walked through
+ * `sanitizeSecrets` before stringification so an upstream regression
+ * (REST handler surfacing `oauth_refresh_token`, `auth_data`, etc.)
+ * can never land in the LLM context.
+ */
+export function jsonResult(payload, options = {}) {
+    const safe = sanitizeSecrets(payload);
+    return {
+        content: [{ type: 'text', text: stringify(safe) }],
+        ...(options.isError === true ? { isError: true } : {}),
+    };
+}
+/** Extract `(message, status?, code?)` from any thrown value, honouring
+ * `RestError` / `NetworkError` shape distinctions. */
+function describeError(e) {
+    if (e instanceof RestError)
+        return { message: e.message, status: e.status, code: e.code };
+    if (e instanceof NetworkError)
+        return { message: e.message };
+    if (e instanceof Error)
+        return { message: e.message };
+    return { message: stringify(e) };
+}
+/**
+ * Render a structured error result with `context` (echoed input) and a
+ * recovery `hint`. Wave G.6.3 defense-in-depth: message is
+ * mask-and-truncate'd; context is deep-walked so an input param that
+ * accidentally echoed a secret-bearing value cannot leak.
+ */
+export function errorResult(opts) {
+    const { message, status, code } = describeError(opts.error);
+    return jsonResult({
+        error: sanitizeForLogs(message),
+        ...(status !== undefined ? { status } : {}),
+        ...(code !== undefined ? { code } : {}),
+        context: sanitizeSecrets(opts.context),
+        hint: opts.hint,
+    }, { isError: true });
+}
+/**
+ * Confirm-guard preview helper for destructive tools. Returns the
+ * preview `ToolResult` when `confirm` is false; callers `return` it
+ * before executing the destructive REST call.
+ */
+export function confirmGuard(opts) {
+    return jsonResult({
+        preview: true,
+        warning: 'DESTRUCTIVE — Confirmation required',
+        operation: opts.operation,
+        details: opts.details,
+        instruction: 'Ask the user to confirm, then call again with `confirm: true`.',
+    });
+}
+/**
+ * Sanitise a single content item from a toolkit builder. Text items
+ * frequently embed a JSON-stringified payload — if it parses, deep-walk
+ * and re-stringify; otherwise leave as-is (toolkit-rendered tables /
+ * details are already domain-mapped at the call site).
+ */
+function sanitizeContentItem(item) {
+    if (item.type !== 'text' || typeof item.text !== 'string')
+        return item;
+    const text = item.text;
+    try {
+        const parsed = JSON.parse(text);
+        const safe = sanitizeSecrets(parsed);
+        return { ...item, text: stringify(safe) };
+    }
+    catch {
+        // Not JSON — toolkit-rendered text. No structural redaction
+        // possible without false-positives; the caller has already
+        // mapped raw secrets out via field-projection helpers.
+        return item;
+    }
+}
+/**
+ * Merge a toolkit `StructuredCallToolResult` (carries `content[0].text`
+ * + `_meta.ui`) with a domain-typed `structuredContent` payload. The
+ * result satisfies both Rich-Card hosts (read `_meta.ui`) AND
+ * structured-output hosts (read `structuredContent`, may validate
+ * against `outputSchema`). Single envelope-merger from every migrated
+ * tool's handler — toolkit builders are wrapped, not modified.
+ */
+/**
+ * W6.2 — site-awareness envelope wrapper.
+ *
+ * Stamps a resolved-site descriptor onto a tool result so the human +
+ * agent both know which connected site the call ran against. Two
+ * channels:
+ *
+ *   1. **text-prefix PRIMARY surface** — `[<label or site_id> @
+ *      <hostname>] ` is injected at the start of `content[0].text`
+ *      when that block is a text item. Per the W6 web-research
+ *      addendum (HCFV §B, Claude-Desktop UI gap doc'd in plan
+ *      Z.1329-1332), `_meta` is read by the agent but NOT rendered as
+ *      a UI widget today — so the prefix is the only thing Maria the
+ *      Claude-Desktop-user reliably SEES. LOAD-BEARING.
+ *
+ *   2. **result-level `_meta` SECONDARY surface** — `_meta:
+ *      {site_id, site_url, platform}` is merged into the RESULT-level
+ *      `_meta` (alongside the toolkit's `_meta.ui`). This is the
+ *      MCP-spec metadata channel: free-form and NOT validated against
+ *      the tool's `outputSchema`.
+ *
+ *      W12-R2 fix: site meta was previously merged into
+ *      `structuredContent._meta`. That broke real hosts. Every tool's
+ *      `outputSchema` is generated with `additionalProperties:false`,
+ *      so an undeclared `_meta` key inside `structuredContent` fails
+ *      client-side schema validation (`-32602`) and surfaces as a
+ *      "Failed to call tool" toast in Claude Desktop EVEN ON A
+ *      SUCCESSFUL CALL. `live-verify.mjs` never caught it because raw
+ *      JSON-RPC calls skip the host's structuredContent↔outputSchema
+ *      validation. `structuredContent` must stay schema-pure.
+ *
+ * Pure function: never mutates the input result. Non-text blocks
+ * (resource / image / etc.) pass through verbatim. `structuredContent`
+ * is passed through UNTOUCHED so it always validates against
+ * `outputSchema`. Empty `content[]` is tolerated and produces a
+ * prefix-free result (the meta still lands in result-level `_meta`).
+ *
+ * Label-fallback: `site.label` wins; falls back to `site.id`.
+ *
+ * Hostname extraction defaults to `new URL(site.url).host`. A
+ * malformed URL falls back to the raw site.url string so the prefix
+ * remains user-readable even when the registry was hand-edited.
+ */
+export function withSiteMeta(result, site) {
+    const displayLabel = site.label ?? site.id;
+    let host;
+    try {
+        host = new URL(site.url).host;
+    }
+    catch {
+        host = site.url;
+    }
+    const prefix = `[${displayLabel} @ ${host}] `;
+    const meta = {
+        site_id: site.id,
+        site_url: site.url,
+        platform: site.platform.kind,
+    };
+    // W12-R1.2 (A4-F2): site-awareness is the LOAD-BEARING surface for
+    // Claude-Desktop users. When the wrapped result has no text content
+    // (e.g. an image-only / resource-only / empty-list response), the
+    // prefix would otherwise be lost and the agent would have no visible
+    // signal of which site the call ran against. Prepend a synthetic
+    // text block so the prefix is ALWAYS the first visible glyph.
+    // Trim the trailing space — a standalone prefix block reads better
+    // without it.
+    const firstItem = result.content[0];
+    const needsSynthetic = result.content.length === 0
+        || firstItem === undefined
+        || firstItem.type !== 'text';
+    const newContent = needsSynthetic
+        ? [
+            { type: 'text', text: prefix.trimEnd() },
+            ...result.content,
+        ]
+        : result.content.map((item, idx) => {
+            if (idx !== 0)
+                return item;
+            if (item.type !== 'text')
+                return item;
+            const existingText = typeof item.text === 'string' ? item.text : '';
+            return { ...item, text: prefix + existingText };
+        });
+    // Site meta merges into the RESULT-level `_meta` (next to the
+    // toolkit's `_meta.ui`), NEVER into `structuredContent`. The latter
+    // is validated by the host against the tool's `outputSchema`
+    // (additionalProperties:false); an undeclared key there triggers a
+    // `-32602` "Failed to call tool" reject even on success. The result
+    // envelope `_meta` is the spec's free-form metadata channel.
+    const baseTopMeta = result._meta;
+    const mergedTopMeta = baseTopMeta !== undefined && baseTopMeta !== null && typeof baseTopMeta === 'object'
+        ? { ...baseTopMeta, ...meta }
+        : meta;
+    return {
+        ...result,
+        content: newContent,
+        _meta: mergedTopMeta,
+    };
+}
+export function structuredResult(toolkitResult, structuredContent) {
+    // Wave G.6.4b — deep-walk-sanitise all three legs (text content,
+    // _meta.ui, structuredContent) so regressing sources never bypass
+    // the LLM-boundary mask.
+    const safeContent = toolkitResult.content.map(sanitizeContentItem);
+    const safeStructured = sanitizeSecrets(structuredContent);
+    const safeMeta = toolkitResult._meta !== undefined
+        ? sanitizeSecrets(toolkitResult._meta)
+        : undefined;
+    return {
+        content: safeContent,
+        ...(safeMeta !== undefined ? { _meta: safeMeta } : {}),
+        ...(toolkitResult.isError === true ? { isError: true } : {}),
+        structuredContent: safeStructured,
+    };
+}
+//# sourceMappingURL=results.js.map

package/dist/tools/tool-builder/results.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"results.js","sourceRoot":"","sources":["../../../src/tools/tool-builder/results.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAI3D,SAAS,SAAS,CAAC,KAAc;IAC7B,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,OAAgB,EAAE,UAAiC,EAAE;IAC5E,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO;QACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC;AACN,CAAC;AAED;sDACsD;AACtD,SAAS,aAAa,CAClB,CAAU;IAEV,IAAI,CAAC,YAAY,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1F,IAAI,CAAC,YAAY,YAAY;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7D,IAAI,CAAC,YAAY,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACtD,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,IAI3B;IACG,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,UAAU,CACb;QACI,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC;QAC/B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,EAAE,IAAI,CAAC,IAAI;KAClB,EACD,EAAE,OAAO,EAAE,IAAI,EAAE,CACpB,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAG5B;IACG,OAAO,UAAU,CAAC;QACd,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,qCAAqC;QAC9C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,gEAAgE;KAChF,CAAC,CAAC;AACP,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,IAAiB;IAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,CAAC;QACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACL,4DAA4D;QAC5D,2DAA2D;QAC3D,uDAAuD;QACvD,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAM,UAAU,YAAY,CACxB,MAAS,EACT,IAAkB;IAElB,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC;IAC3C,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACD,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACL,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;IACpB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,YAAY,MAAM,IAAI,IAAI,CAAC;IAE9C,MAAM,IAAI,GAAG;QACT,OAAO,EAAE,IAAI,CAAC,EAAE;QAChB,QAAQ,EAAE,IAAI,CAAC,GAAG;QAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;KAC/B,CAAC;IAEF,mEAAmE;IACnE,oEAAoE;IACpE,kEAAkE;IAClE,qEAAqE;IACrE,iEAAiE;IACjE,8DAA8D;IAC9D,mEAAmE;IACnE,cAAc;IACd,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,cAAc,GAChB,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;WACxB,SAAS,KAAK,SAAS;WACvB,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC;IAEjC,MAAM,UAAU,GAAkB,cAAc;QAC5C,CAAC,CAAC;YACI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE;YACxC,GAAG,MAAM,CAAC,OAAO;SACpB;QACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAe,EAAE;YAC1C,IAAI,GAAG,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;YACtC,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,YAAY,EAAE,CAAC;QACpD,CAAC,CAAC,CAAC;IAET,8DAA8D;IAC9D,oEAAoE;IACpE,6DAA6D;IAC7D,mEAAmE;IACnE,oEAAoE;IACpE,6DAA6D;IAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;IACjC,MAAM,aAAa,GACf,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ;QAChF,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,EAAE;QAC7B,CAAC,CAAC,IAAI,CAAC;IAEf,OAAO;QACH,GAAG,MAAM;QACT,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,aAAa;KACvB,CAAC;AACN,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC5B,aAIC,EACD,iBAA0C;IAE1C,iEAAiE;IACjE,kEAAkE;IAClE,yBAAyB;IACzB,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,eAAe,CAAC,iBAAiB,CAA4B,CAAC;IACrF,MAAM,QAAQ,GACV,aAAa,CAAC,KAAK,KAAK,SAAS;QAC7B,CAAC,CAAE,eAAe,CAAC,aAAa,CAAC,KAAK,CAAgD;QACtF,CAAC,CAAC,SAAS,CAAC;IACpB,OAAO;QACH,OAAO,EAAE,WAAW;QACpB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,aAAa,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,iBAAiB,EAAE,cAAc;KACpC,CAAC;AACN,CAAC"}

package/dist/tools/tool-builder/types.d.ts

@@ -0,0 +1,97 @@
+/**
+ * `tool-builder/types` — pure type declarations for the tool-definition
+ * system. Split from `tool-builder.ts` in Round-1.5 (replaces the
+ * Round-1 LoC-exception spec-amendment with a structural code-fix).
+ *
+ * @license MIT
+ */
+import type { ServerNotification } from '@modelcontextprotocol/sdk/types.js';
+import type { ZodRawShape, z } from 'zod';
+/**
+ * A content item the SDK accepts. Mirrors the SDK
+ * `CallToolResult.content[number]` union (text/image/resource). Tools
+ * in this server only emit text, but the toolkit's structured builders
+ * return the wider union, so the envelope-merger must accept it.
+ */
+export type ToolContent = {
+    type: string;
+    [key: string]: unknown;
+};
+/**
+ * MCP-compatible content envelope. Fields:
+ *  - `content`            — text blocks shown to the LLM.
+ *  - `isError`            — flag honoured by the SDK for error results.
+ *  - `_meta.ui`           — Rich-Card hints (toolkit structured-display
+ *                            protocol: data-table, detail, stats, error).
+ *  - `structuredContent`  — domain-typed payload validated against the
+ *                            tool's optional `outputSchema`.
+ */
+export interface ToolResult {
+    content: ToolContent[];
+    isError?: boolean;
+    _meta?: {
+        ui?: unknown;
+    } & Record<string, unknown>;
+    structuredContent?: Record<string, unknown>;
+}
+export interface ToolAnnotations {
+    readonly title?: string;
+    /** Tool does not mutate state. */
+    readonly readOnlyHint?: boolean;
+    /** Tool may delete or otherwise destroy state. */
+    readonly destructiveHint?: boolean;
+    /** Tool talks to a system outside the host process. */
+    readonly openWorldHint?: boolean;
+    /** Identical invocations have identical effects (PUT-style). */
+    readonly idempotentHint?: boolean;
+}
+/**
+ * Minimal MCP-handler `extra` surface used by Wave G.5 progress reports.
+ * Only `_meta.progressToken` and `sendNotification` are consumed; the
+ * toolkit's `createProgressReporter` is defined against this same
+ * minimal shape so we forward verbatim with no cast at the call site.
+ */
+export interface HandlerExtra {
+    readonly _meta?: {
+        progressToken?: string | number;
+    };
+    readonly sendNotification: (notification: ServerNotification) => Promise<void>;
+}
+export type ToolHandler<TSchema extends ZodRawShape> = (args: z.infer<z.ZodObject<TSchema>>, extra?: HandlerExtra) => Promise<ToolResult>;
+export interface ToolDefinition<TSchema extends ZodRawShape = ZodRawShape> {
+    readonly name: string;
+    readonly description: string;
+    readonly inputSchema: TSchema;
+    /**
+     * Optional Zod schema describing the `structuredContent` payload.
+     * Hosts that support MCP structured output validate responses
+     * against this schema. Set on migrated tools using
+     * `structuredResult` / `tableResult` / `detailResult` /
+     * `statsResult`; tools on `jsonResult` may omit it.
+     */
+    readonly outputSchema?: z.ZodTypeAny;
+    readonly annotations: ToolAnnotations;
+    readonly handler: ToolHandler<TSchema>;
+    /**
+     * F-203 follow-up (Audit 2026-05-26 reviewer Gap 2): optional refined
+     * `ZodObject` representation of the input shape. When present,
+     * `registerToolOn` forwards THIS to the SDK in place of the raw
+     * `inputSchema` shape — so a top-level `.refine()` / `.superRefine()`
+     * is honoured by the SDK's pre-handler validation and a violation
+     * surfaces as a JSON-RPC `-32602 InvalidParams` envelope BEFORE the
+     * handler runs.
+     *
+     * The handler signature is still derived from `inputSchema: TSchema`
+     * (the raw shape) so the per-handler arg type stays inferred and
+     * stable. The refined object MUST be built from the SAME shape — any
+     * drift will compile-fail on the handler's argument typing.
+     */
+    readonly inputObjectSchema?: z.ZodTypeAny;
+}
+/**
+ * Type-erased tool definition used by the aggregator and server. Tools
+ * carry their own runtime-typed handler internally — at the registry
+ * boundary we only need the metadata + an opaque handler.
+ */
+export type AnyToolDefinition = ToolDefinition<any>;
+//# sourceMappingURL=types.d.ts.map

package/dist/tools/tool-builder/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/tools/tool-builder/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACvB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,eAAe;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,kCAAkC;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,kDAAkD;IAClD,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,uDAAuD;IACvD,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,gEAAgE;IAChE,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACrC;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IACrD,QAAQ,CAAC,gBAAgB,EAAE,CAAC,YAAY,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAClF;AAED,MAAM,MAAM,WAAW,CAAC,OAAO,SAAS,WAAW,IAAI,CACnD,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EACnC,KAAK,CAAC,EAAE,YAAY,KACnB,OAAO,CAAC,UAAU,CAAC,CAAC;AAEzB,MAAM,WAAW,cAAc,CAAC,OAAO,SAAS,WAAW,GAAG,WAAW;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IACvC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC;CAC7C;AAED;;;;GAIG;AAEH,MAAM,MAAM,iBAAiB,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC"}

package/dist/tools/tool-builder/types.js

@@ -0,0 +1,9 @@
+/**
+ * `tool-builder/types` — pure type declarations for the tool-definition
+ * system. Split from `tool-builder.ts` in Round-1.5 (replaces the
+ * Round-1 LoC-exception spec-amendment with a structural code-fix).
+ *
+ * @license MIT
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/tools/tool-builder/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/tools/tool-builder/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/tools/tool-builder.d.ts

@@ -0,0 +1,16 @@
+/**
+ * `tool-builder.ts` — backward-compat re-export barrel.
+ *
+ * The implementation was split into `tool-builder/{types,annotations,
+ * results,define}.ts` in Round-1.5 (replaces the Round-1 LoC-exception
+ * spec-amendment with a structural code-fix). All existing
+ * `./tool-builder.js` imports continue to work via this re-export.
+ *
+ * For new code, prefer importing from `./tool-builder/index.js` (or
+ * the specific submodule) — but the barrel here is the stable
+ * public-import path for the package's internal modules.
+ *
+ * @license MIT
+ */
+export * from './tool-builder/index.js';
+//# sourceMappingURL=tool-builder.d.ts.map

package/dist/tools/tool-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-builder.d.ts","sourceRoot":"","sources":["../../src/tools/tool-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,cAAc,yBAAyB,CAAC"}

package/dist/tools/tool-builder.js

@@ -0,0 +1,16 @@
+/**
+ * `tool-builder.ts` — backward-compat re-export barrel.
+ *
+ * The implementation was split into `tool-builder/{types,annotations,
+ * results,define}.ts` in Round-1.5 (replaces the Round-1 LoC-exception
+ * spec-amendment with a structural code-fix). All existing
+ * `./tool-builder.js` imports continue to work via this re-export.
+ *
+ * For new code, prefer importing from `./tool-builder/index.js` (or
+ * the specific submodule) — but the barrel here is the stable
+ * public-import path for the package's internal modules.
+ *
+ * @license MIT
+ */
+export * from './tool-builder/index.js';
+//# sourceMappingURL=tool-builder.js.map

package/dist/tools/tool-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-builder.js","sourceRoot":"","sources":["../../src/tools/tool-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,cAAc,yBAAyB,CAAC"}

package/manifest.json

@@ -2,7 +2,7 @@
     "dxt_version": "0.1",
     "name": "@wootsup/yt-builder-mcp",
     "display_name": "YT Builder MCP for YOOtheme Pro (unofficial)",
-    "version": "1.1.5",
+    "version": "1.1.6",
     "description": "Drive your YOOtheme Pro Page Builder programmatically from Claude, Cursor, Codex, Gemini and 5 other MCP-capable AI assistants — read layouts, edit settings, add elements, bind dynamic sources. Works on WordPress and Joomla 5/6. Built for YOOtheme Pro 4.0+. Independent third-party project, not affiliated with YOOtheme GmbH.",
     "long_description": "YT Builder MCP gives AI assistants a typed, scoped, and idempotent surface for your YOOtheme Pro Page Builder, on either WordPress or Joomla 5/6. Tools cover page discovery, layout inspection, element CRUD, source binding, and diagnostics. Bearer auth, optimistic locking via ETag, scope hierarchy (read < write < admin), and structured-error responses keep the agent safe and the workflow correct on first try. Independent third-party project — YOOtheme® is a registered trademark of YOOtheme GmbH (yootheme.com); YT Builder MCP is built by WootsUp (getimo productions) and is not affiliated with, endorsed by, or sponsored by YOOtheme.",
     "icon": "icon.png",

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@wootsup/yt-builder-mcp",
-    "version": "1.1.5",
+    "version": "1.1.7",
     "type": "module",
     "description": "YT Builder MCP — drive your page builder from Claude, Cursor, Codex, Gemini and 5 other MCP-capable AI assistants. Built for YOOtheme Pro 4.0+. Independent third-party project, not affiliated with YOOtheme GmbH.",
     "license": "MIT",
@@ -49,6 +49,7 @@
     },
     "scripts": {
         "build": "tsc",
+        "prepublishOnly": "npm run build",
         "dev": "tsc --watch",
         "test": "vitest run",
         "test:watch": "vitest",