@wootsup/yt-builder-mcp 1.1.6 → 1.1.7

package/dist/gateway/test-support.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Gateway test helpers — Wave G.1.
+ *
+ * After the gateway lands, tests that previously looked tools up from
+ * `McpServer._registeredTools` no longer find advanced tools (they're
+ * captured in the advanced registry, not on the real server). These
+ * helpers expose a unified view across all three lanes:
+ *
+ *   - L1 essentials   → real server's `_registeredTools`
+ *   - L2 advanced     → CapturingServer's `getAdvancedRegistry()`
+ *   - L3 + gateway    → real server's `_registeredTools`
+ *
+ * Test-only: never imported by any runtime path.
+ *
+ * @license MIT
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
+import type { CapturingServer } from './capturing-server.js';
+/** A tool entry as seen by tests: handler + the registered config. */
+export interface CollectedTool {
+    handler: (args: Record<string, unknown>, extra?: unknown) => CallToolResult | Promise<CallToolResult>;
+    title?: string;
+    description?: string;
+    inputSchema?: unknown;
+    annotations?: Record<string, unknown>;
+}
+/**
+ * Returns every tool — essentials + gateway on the real McpServer plus
+ * the advanced tools captured by the CapturingServer — keyed by tool
+ * name. The CapturingServer must have been used to register the L1/L2
+ * tools, and `registerAdvancedTool` must have run, before this is called.
+ *
+ * Production size = 22:
+ *   7 L1 essentials (real server) + 12 L2 advanced (registry)
+ *   + 2 L3 direct (real server) + 1 gateway (real server) = 22.
+ */
+export declare function collectAllRegisteredTools(server: McpServer, capturing: CapturingServer): Record<string, CollectedTool>;
+/** By-name lookup over a `collectAllRegisteredTools` map. */
+export declare function findTool(tools: Record<string, CollectedTool>, name: string): CollectedTool | undefined;
+//# sourceMappingURL=test-support.d.ts.map

package/dist/gateway/test-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-support.d.ts","sourceRoot":"","sources":["../../src/gateway/test-support.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC1B,OAAO,EAAE,CACL,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,KAAK,CAAC,EAAE,OAAO,KACd,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAkBD;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACrC,MAAM,EAAE,SAAS,EACjB,SAAS,EAAE,eAAe,GAC3B,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAuC/B;AAED,6DAA6D;AAC7D,wBAAgB,QAAQ,CACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,EACpC,IAAI,EAAE,MAAM,GACb,aAAa,GAAG,SAAS,CAE3B"}

package/dist/gateway/test-support.js

@@ -0,0 +1,60 @@
+/**
+ * Gateway test helpers — Wave G.1.
+ *
+ * After the gateway lands, tests that previously looked tools up from
+ * `McpServer._registeredTools` no longer find advanced tools (they're
+ * captured in the advanced registry, not on the real server). These
+ * helpers expose a unified view across all three lanes:
+ *
+ *   - L1 essentials   → real server's `_registeredTools`
+ *   - L2 advanced     → CapturingServer's `getAdvancedRegistry()`
+ *   - L3 + gateway    → real server's `_registeredTools`
+ *
+ * Test-only: never imported by any runtime path.
+ *
+ * @license MIT
+ */
+/**
+ * Returns every tool — essentials + gateway on the real McpServer plus
+ * the advanced tools captured by the CapturingServer — keyed by tool
+ * name. The CapturingServer must have been used to register the L1/L2
+ * tools, and `registerAdvancedTool` must have run, before this is called.
+ *
+ * Production size = 22:
+ *   7 L1 essentials (real server) + 12 L2 advanced (registry)
+ *   + 2 L3 direct (real server) + 1 gateway (real server) = 22.
+ */
+export function collectAllRegisteredTools(server, capturing) {
+    const result = {};
+    // The SDK changed the internal field name from `handler` to `callback`
+    // over its 1.x lifetime; accept either to keep the helper resilient.
+    const real = server;
+    for (const [name, tool] of Object.entries(real._registeredTools)) {
+        const callback = 'callback' in tool && typeof tool.callback === 'function'
+            ? tool.callback
+            : tool.handler;
+        result[name] = {
+            handler: callback,
+            title: tool.title,
+            description: tool.description,
+            inputSchema: tool.inputSchema,
+            annotations: tool.annotations,
+        };
+    }
+    for (const [name, entry] of capturing.getAdvancedRegistry()) {
+        const cfg = entry.config;
+        result[name] = {
+            handler: entry.handler,
+            title: cfg.title,
+            description: cfg.description,
+            inputSchema: cfg.inputSchema,
+            annotations: cfg.annotations,
+        };
+    }
+    return result;
+}
+/** By-name lookup over a `collectAllRegisteredTools` map. */
+export function findTool(tools, name) {
+    return tools[name];
+}
+//# sourceMappingURL=test-support.js.map

package/dist/gateway/test-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-support.js","sourceRoot":"","sources":["../../src/gateway/test-support.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAmCH;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CACrC,MAAiB,EACjB,SAA0B;IAE1B,MAAM,MAAM,GAAkC,EAAE,CAAC;IAEjD,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,IAAI,GAAG,MAEZ,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC/D,MAAM,QAAQ,GACV,UAAU,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,UAAU;YACrD,CAAC,CAAC,IAAI,CAAC,QAAQ;YACf,CAAC,CAAE,IAAiC,CAAC,OAAO,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,GAAG;YACX,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;SAChC,CAAC;IACN,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,SAAS,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,KAAK,CAAC,MAKjB,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,GAAG;YACX,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,WAAW,EAAE,GAAG,CAAC,WAAW;SAC/B,CAAC;IACN,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,QAAQ,CACpB,KAAoC,EACpC,IAAY;IAEZ,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,29 @@
+/**
+ * MCP server entrypoint (stdio transport).
+ *
+ * Reads config from environment variables (see `auth.ts`), spins up a
+ * `McpServer` with all tools registered, connects to stdio, and lets
+ * the host (Claude Desktop / Cursor / Zed / …) drive.
+ *
+ * `YTB_MCP_TEST_MODE=1` short-circuits: prints the tool registry and
+ * exits 0. Used by the smoke test and by `release.php` to validate
+ * that the bundled `dist/` is loadable on the target Node version.
+ *
+ * @license MIT
+ */
+export { createServer, SERVER_NAME, SERVER_VERSION } from './server.js';
+export { RestClient, REST_NAMESPACE_PATH, encodeElementPath } from './client.js';
+export { loadConfig, loadRegistry, isTestMode, ENV_SITE_URL, ENV_WP_URL, ENV_BEARER, ENV_SITES_FILE, ENV_TEST_MODE, } from './auth.js';
+export { ConfigError, RestError, NetworkError } from './errors.js';
+export { buildAllTools } from './tools/index.js';
+export { ClientPool, NoDefaultSiteError, UnknownSiteError } from './sites/client-pool.js';
+export { SiteRegistry } from './sites/registry.js';
+export { synthesiseFromEnv } from './sites/env-bridge.js';
+export { defaultSecretResolver, PlainSecretResolver } from './sites/secret-resolver.js';
+export { ESSENTIAL_TOOLS, DIRECT_TOP_LEVEL_TOOLS, isEssential, isDirectTopLevel, } from './gateway/essentials.js';
+export { CapturingServer, type AdvancedToolEntry, type CapturedToolHandler, type ToolRegistrar, } from './gateway/capturing-server.js';
+export { registerAdvancedTool } from './gateway/advanced-tool.js';
+export { collectAllRegisteredTools, findTool, type CollectedTool, } from './gateway/test-support.js';
+declare function main(): Promise<void>;
+export { main };
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAWH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EACH,UAAU,EACV,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,cAAc,EACd,aAAa,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGjD,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACxF,OAAO,EACH,eAAe,EACf,sBAAsB,EACtB,WAAW,EACX,gBAAgB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACH,eAAe,EACf,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,aAAa,GACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EACH,yBAAyB,EACzB,QAAQ,EACR,KAAK,aAAa,GACrB,MAAM,2BAA2B,CAAC;AAEnC,iBAAe,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAgEnC;AAkBD,OAAO,EAAE,IAAI,EAAE,CAAC"}

package/dist/index.js

@@ -0,0 +1,111 @@
+/**
+ * MCP server entrypoint (stdio transport).
+ *
+ * Reads config from environment variables (see `auth.ts`), spins up a
+ * `McpServer` with all tools registered, connects to stdio, and lets
+ * the host (Claude Desktop / Cursor / Zed / …) drive.
+ *
+ * `YTB_MCP_TEST_MODE=1` short-circuits: prints the tool registry and
+ * exits 0. Used by the smoke test and by `release.php` to validate
+ * that the bundled `dist/` is loadable on the target Node version.
+ *
+ * @license MIT
+ */
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { isTestMode, loadRegistry } from './auth.js';
+import { ConfigError } from './errors.js';
+import { ClientPool } from './sites/client-pool.js';
+import { SiteRegistry } from './sites/registry.js';
+import { defaultSecretResolver } from './sites/secret-resolver.js';
+import { createServer } from './server.js';
+export { createServer, SERVER_NAME, SERVER_VERSION } from './server.js';
+export { RestClient, REST_NAMESPACE_PATH, encodeElementPath } from './client.js';
+export { loadConfig, loadRegistry, isTestMode, ENV_SITE_URL, ENV_WP_URL, ENV_BEARER, ENV_SITES_FILE, ENV_TEST_MODE, } from './auth.js';
+export { ConfigError, RestError, NetworkError } from './errors.js';
+export { buildAllTools } from './tools/index.js';
+// W6 — multi-site primitives exported for dist consumers (scripts,
+// embedded uses). The `ClientPool` is the new wiring contract.
+export { ClientPool, NoDefaultSiteError, UnknownSiteError } from './sites/client-pool.js';
+export { SiteRegistry } from './sites/registry.js';
+export { synthesiseFromEnv } from './sites/env-bridge.js';
+export { defaultSecretResolver, PlainSecretResolver } from './sites/secret-resolver.js';
+export { ESSENTIAL_TOOLS, DIRECT_TOP_LEVEL_TOOLS, isEssential, isDirectTopLevel, } from './gateway/essentials.js';
+export { CapturingServer, } from './gateway/capturing-server.js';
+export { registerAdvancedTool } from './gateway/advanced-tool.js';
+export { collectAllRegisteredTools, findTool, } from './gateway/test-support.js';
+async function main() {
+    const testMode = isTestMode();
+    // W10 — multi-site bootstrap is now centralised in
+    // `auth.loadRegistry()`. The canonical resolution order is:
+    //   1. YTB_MCP_SITES_FILE → loadSitesFile + SiteRegistry
+    //   2. env-bridge (YTB_MCP_SITE_URL + YTB_MCP_BEARER_TOKEN)
+    //   3. ConfigError("No sites configured.")
+    //
+    // The single exception lives here: `--test-mode` smoke probes
+    // (release.php, CI tool-list dumps) must boot even when neither
+    // path is configured. We honor loadRegistry first, then trap the
+    // ConfigError in test-mode and synthesise an empty registry so the
+    // tool list still prints. Tools will refuse to run, which is
+    // expected — `--test-mode` never invokes them.
+    let registry;
+    try {
+        registry = await loadRegistry();
+    }
+    catch (e) {
+        // Never crash the transport over a config problem. A DXT host
+        // (Claude Desktop) auto-starts the server the moment the
+        // extension is installed — before any Site URL / Bearer /
+        // sites-file is entered — and also restarts it after every config
+        // edit. Exiting here surfaced a scary "Server disconnected" toast
+        // for two common cases: (1) no config at all (ConfigError), and
+        // (2) a half-finished or malformed sites.json (schema validation,
+        // e.g. a leftover PASTE_… placeholder bearer). Both now boot with
+        // an empty registry: the server connects, advertises its tools,
+        // `sites_list` shows "(no sites)", and any tool needing a site
+        // returns a friendly NoDefaultSiteError at call-time. The real
+        // reason is written to stderr (visible in the host's MCP logs).
+        // In `--test-mode` this also lets the print-tools probe boot with
+        // zero or broken config.
+        const msg = e instanceof Error ? e.message : String(e);
+        const kind = e instanceof ConfigError
+            ? 'starting unconfigured'
+            : 'config problem, starting with no sites';
+        process.stderr.write(`[yt-builder-mcp] ${kind} — ${msg}\n`);
+        registry = new SiteRegistry({
+            schema_version: 1,
+            default_site_id: null,
+            sites: [],
+        });
+    }
+    const secretResolver = defaultSecretResolver();
+    const pool = new ClientPool(registry, secretResolver);
+    const { mcp, tools } = createServer({ pool });
+    if (testMode) {
+        // Print a one-line per tool summary to stderr (stdout is reserved
+        // for the JSON-RPC frame in real runs) and exit cleanly.
+        process.stderr.write(`[yt-builder-mcp] test mode — ${String(tools.length)} tools registered:\n`);
+        for (const tool of tools) {
+            process.stderr.write(`  - ${tool.name}\n`);
+        }
+        process.exit(0);
+    }
+    const transport = new StdioServerTransport();
+    await mcp.connect(transport);
+}
+/**
+ * Auto-run unless explicitly disabled. Tests set `YTB_MCP_NO_AUTORUN=1`
+ * to import the module without firing up the stdio server.
+ *
+ * The bin dispatcher (`bin/yt-builder-mcp.js`) imports
+ * `dist/index.js` dynamically and expects `main()` to take over — so by
+ * default we run on import.
+ */
+if (process.env.YTB_MCP_NO_AUTORUN !== '1') {
+    main().catch((e) => {
+        const message = e instanceof Error ? e.message : String(e);
+        process.stderr.write(`[yt-builder-mcp] fatal: ${message}\n`);
+        process.exit(1);
+    });
+}
+export { main };
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EACH,UAAU,EACV,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,cAAc,EACd,aAAa,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,mEAAmE;AACnE,+DAA+D;AAC/D,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACxF,OAAO,EACH,eAAe,EACf,sBAAsB,EACtB,WAAW,EACX,gBAAgB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACH,eAAe,GAIlB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EACH,yBAAyB,EACzB,QAAQ,GAEX,MAAM,2BAA2B,CAAC;AAEnC,KAAK,UAAU,IAAI;IACf,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;IAE9B,mDAAmD;IACnD,4DAA4D;IAC5D,yDAAyD;IACzD,4DAA4D;IAC5D,2CAA2C;IAC3C,EAAE;IACF,8DAA8D;IAC9D,gEAAgE;IAChE,iEAAiE;IACjE,mEAAmE;IACnE,6DAA6D;IAC7D,+CAA+C;IAC/C,IAAI,QAAsB,CAAC;IAC3B,IAAI,CAAC;QACD,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,8DAA8D;QAC9D,yDAAyD;QACzD,0DAA0D;QAC1D,kEAAkE;QAClE,kEAAkE;QAClE,gEAAgE;QAChE,kEAAkE;QAClE,kEAAkE;QAClE,gEAAgE;QAChE,+DAA+D;QAC/D,+DAA+D;QAC/D,gEAAgE;QAChE,kEAAkE;QAClE,yBAAyB;QACzB,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,CAAC,YAAY,WAAW;YACjC,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,wCAAwC,CAAC;QAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,MAAM,GAAG,IAAI,CAAC,CAAC;QAC5D,QAAQ,GAAG,IAAI,YAAY,CAAC;YACxB,cAAc,EAAE,CAAC;YACjB,eAAe,EAAE,IAAI;YACrB,KAAK,EAAE,EAAE;SACZ,CAAC,CAAC;IACP,CAAC;IAED,MAAM,cAAc,GAAG,qBAAqB,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAEtD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,IAAI,QAAQ,EAAE,CAAC;QACX,kEAAkE;QAClE,yDAAyD;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,gCAAgC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAC7E,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;GAOG;AACH,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,GAAG,EAAE,CAAC;IACzC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;QACxB,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,OAAO,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;AACP,CAAC;AAED,OAAO,EAAE,IAAI,EAAE,CAAC"}

package/dist/install-skill.d.ts

@@ -0,0 +1,43 @@
+/**
+ * `install-skill` subcommand for `@wootsup/yt-builder-mcp`.
+ *
+ * Copies the bundled `skills/yt-builder-mcp/` directory into the user's
+ * agent-skill folder (typically `~/.claude/skills/`) and appends a marker
+ * block to `~/AGENTS.md` so other AI clients pick it up automatically.
+ *
+ * Idempotent: re-running overwrites existing skill files and skips the
+ * AGENTS.md append when the marker is already present.
+ *
+ * Mirrors the pattern from `@wootsup/mcp install-skill` so users on both
+ * products get the same workflow.
+ *
+ * @license MIT
+ */
+export declare const MARKER_LINE = "<!-- yt-builder-mcp:skill-installed -->";
+export interface InstallSkillOptions {
+    /**
+     * Package root that contains the bundled `skills/` dir. Defaults to
+     * walking up from this file (works in both source and `dist/` layouts).
+     */
+    readonly pkgRoot?: string;
+    /** Target dir where the `yt-builder-mcp/` skill folder will land. */
+    readonly targetSkillsDir?: string;
+    /**
+     * 1.0.1 Wave-R: when `true` (default), the installer removes any
+     * legacy `yootheme-builder/` directory left behind by pre-1.0.1
+     * installs so the user doesn't end up with two side-by-side skill
+     * copies under the same `~/.claude/skills/` root. Set to `false` to
+     * keep the legacy dir.
+     */
+    readonly removeLegacyDir?: boolean;
+    /** Target AGENTS.md file to append the marker to. */
+    readonly targetAgentsFile?: string;
+}
+export interface InstallSkillResult {
+    readonly copied: boolean;
+    readonly markerAlreadyPresent: boolean;
+    readonly skillTargetDir: string;
+    readonly agentsFile: string;
+}
+export declare function installSkill(options?: InstallSkillOptions): Promise<InstallSkillResult>;
+//# sourceMappingURL=install-skill.d.ts.map

package/dist/install-skill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-skill.d.ts","sourceRoot":"","sources":["../src/install-skill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAiBH,eAAO,MAAM,WAAW,4CAA4C,CAAC;AAiBrE,MAAM,WAAW,mBAAmB;IAChC;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,qDAAqD;IACrD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B;AAwCD,wBAAsB,YAAY,CAC9B,OAAO,GAAE,mBAAwB,GAClC,OAAO,CAAC,kBAAkB,CAAC,CAmD7B"}

package/dist/install-skill.js

@@ -0,0 +1,118 @@
+/**
+ * `install-skill` subcommand for `@wootsup/yt-builder-mcp`.
+ *
+ * Copies the bundled `skills/yt-builder-mcp/` directory into the user's
+ * agent-skill folder (typically `~/.claude/skills/`) and appends a marker
+ * block to `~/AGENTS.md` so other AI clients pick it up automatically.
+ *
+ * Idempotent: re-running overwrites existing skill files and skips the
+ * AGENTS.md append when the marker is already present.
+ *
+ * Mirrors the pattern from `@wootsup/mcp install-skill` so users on both
+ * products get the same workflow.
+ *
+ * @license MIT
+ */
+import { appendFileSync, copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync, } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+export const MARKER_LINE = '<!-- yt-builder-mcp:skill-installed -->';
+const MARKER_BLOCK = `
+
+## YT Builder MCP
+
+${MARKER_LINE}
+The YT Builder MCP skill is installed at \`~/.claude/skills/yt-builder-mcp/\`
+— the universal-marker path recognised by Claude Desktop and other AI
+clients that follow the \`~/AGENTS.md\` discovery protocol.
+
+It documents the 24 MCP tools (23 domain + 1 gateway, 11 entries in
+\`tools/list\`), the 5 canonical workflows (build hero, bind dynamic
+source, clone section, diagnose 401, add custom element), and the
+gateway routing model. Source: https://github.com/wootsup/yt-builder-mcp.
+`;
+function defaultPkgRoot() {
+    // src/install-skill.ts → pkg root is one level up.
+    // When running from dist/install-skill.js the layout is identical
+    // (TypeScript emits `dist/install-skill.js` mirroring `src/`).
+    const here = dirname(fileURLToPath(import.meta.url));
+    return resolve(here, '..');
+}
+function copyDirRecursive(src, dst) {
+    if (!existsSync(dst))
+        mkdirSync(dst, { recursive: true });
+    for (const entry of readdirSync(src)) {
+        const sPath = join(src, entry);
+        const dPath = join(dst, entry);
+        const stat = statSync(sPath);
+        if (stat.isDirectory()) {
+            copyDirRecursive(sPath, dPath);
+        }
+        else {
+            copyFileSync(sPath, dPath);
+        }
+    }
+}
+/**
+ * Locate the bundled `skills/yt-builder-mcp` directory.
+ *
+ * Production layout: the skill folder is bundled INSIDE the npm package
+ * (`packages/mcp/skills/yt-builder-mcp/`), next to `dist/`. The same
+ * layout exists in the source tree (per Design-Doc §13.1) so source-mode
+ * smoke tests and the published tarball use the same single path.
+ *
+ * Earlier drafts walked `../..` up to a monorepo-root `skills/` dir;
+ * that layout was eliminated in Round-1 audit fix C1 because it produced
+ * a tarball without `skills/` (skill-not-found at first run).
+ */
+function findSkillSource(pkgRoot) {
+    return join(pkgRoot, 'skills', 'yt-builder-mcp');
+}
+export async function installSkill(options = {}) {
+    const pkgRoot = options.pkgRoot ?? defaultPkgRoot();
+    const targetSkillsDir = options.targetSkillsDir ?? join(homedir(), '.claude', 'skills');
+    const targetAgentsFile = options.targetAgentsFile ?? join(homedir(), 'AGENTS.md');
+    const srcSkillDir = findSkillSource(pkgRoot);
+    if (!existsSync(srcSkillDir)) {
+        throw new Error(`Bundled skill not found at ${srcSkillDir}. ` +
+            `Is the package installed correctly? (pkgRoot=${pkgRoot})`);
+    }
+    if (!existsSync(targetSkillsDir)) {
+        mkdirSync(targetSkillsDir, { recursive: true });
+    }
+    const skillTargetDir = join(targetSkillsDir, 'yt-builder-mcp');
+    copyDirRecursive(srcSkillDir, skillTargetDir);
+    // 1.0.1 Wave-R: clean up the legacy directory created by pre-1.0.1
+    // installs so the user doesn't end up with two side-by-side skill
+    // copies (`yootheme-builder/` AND `yt-builder-mcp/`) under the same
+    // `~/.claude/skills/` root.
+    const removeLegacy = options.removeLegacyDir ?? true;
+    if (removeLegacy) {
+        const legacyDir = join(targetSkillsDir, 'yootheme-builder');
+        if (existsSync(legacyDir) && legacyDir !== skillTargetDir) {
+            rmSync(legacyDir, { recursive: true, force: true });
+        }
+    }
+    let markerAlreadyPresent = false;
+    if (existsSync(targetAgentsFile)) {
+        const existing = readFileSync(targetAgentsFile, 'utf-8');
+        if (existing.includes(MARKER_LINE)) {
+            markerAlreadyPresent = true;
+        }
+        else {
+            appendFileSync(targetAgentsFile, MARKER_BLOCK);
+        }
+    }
+    else {
+        // Create with a sensible top-line and the marker block (trimmed).
+        writeFileSync(targetAgentsFile, MARKER_BLOCK.trimStart(), 'utf-8');
+    }
+    return {
+        copied: true,
+        markerAlreadyPresent,
+        skillTargetDir,
+        agentsFile: targetAgentsFile,
+    };
+}
+//# sourceMappingURL=install-skill.js.map

package/dist/install-skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-skill.js","sourceRoot":"","sources":["../src/install-skill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACH,cAAc,EACd,YAAY,EACZ,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,MAAM,EACN,QAAQ,EACR,aAAa,GAChB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,CAAC,MAAM,WAAW,GAAG,yCAAyC,CAAC;AAErE,MAAM,YAAY,GAAG;;;;EAInB,WAAW;;;;;;;;;CASZ,CAAC;AA6BF,SAAS,cAAc;IACnB,mDAAmD;IACnD,kEAAkE;IAClE,+DAA+D;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,GAAW;IAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACrB,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACJ,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACL,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,eAAe,CAAC,OAAe;IACpC,OAAO,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAC9B,UAA+B,EAAE;IAEjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IACpD,MAAM,eAAe,GACjB,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpE,MAAM,gBAAgB,GAClB,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IAE7D,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACX,8BAA8B,WAAW,IAAI;YACzC,gDAAgD,OAAO,GAAG,CACjE,CAAC;IACN,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/B,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;IAC/D,gBAAgB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAE9C,mEAAmE;IACnE,kEAAkE;IAClE,oEAAoE;IACpE,4BAA4B;IAC5B,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;IACrD,IAAI,YAAY,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;QAC5D,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;YACxD,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACL,CAAC;IAED,IAAI,oBAAoB,GAAG,KAAK,CAAC;IACjC,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,oBAAoB,GAAG,IAAI,CAAC;QAChC,CAAC;aAAM,CAAC;YACJ,cAAc,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;QACnD,CAAC;IACL,CAAC;SAAM,CAAC;QACJ,kEAAkE;QAClE,aAAa,CAAC,gBAAgB,EAAE,YAAY,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,OAAO;QACH,MAAM,EAAE,IAAI;QACZ,oBAAoB;QACpB,cAAc;QACd,UAAU,EAAE,gBAAgB;KAC/B,CAAC;AACN,CAAC"}

package/dist/platform/detect.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Runtime platform detection — F-Platform-Detect-Probe (P0 customer fix).
+ *
+ * The static URL-shape heuristic in `detectPlatformFromUrl()` only works
+ * when the user-supplied base URL already carries `/wp-json/` or
+ * `/api/index.php/` in its path. That is RARELY the case in practice —
+ * the DXT/manifest tells the user to enter the **site origin** (or a
+ * subfolder install like `https://dev.example.com/joomla`), neither of
+ * which contains those markers. The heuristic then silently falls back
+ * to the WordPress default and the Joomla customer experiences a
+ * 24/24 FAIL until they manually set `YTB_MCP_PLATFORM=joomla`.
+ *
+ * This module adds a *runtime probe*: lightweight unauthenticated GETs
+ * against both platforms' `/health` endpoints. Whichever returns a
+ * yt-builder-mcp-shaped response (a JSON body carrying `plugin_version`)
+ * wins. Joomla is probed first because the negative case (probe fails)
+ * is the long-tail and the positive case (probe succeeds) returns fast
+ * — letting the more common WordPress install just fall through to the
+ * second probe without paying for a wasted full timeout.
+ *
+ * The probe is fire-and-forget safe:
+ *   - 3 s `AbortSignal.timeout` per request (so a totally broken host
+ *     blocks ~6 s worst case, not the request's full 15 s default).
+ *   - Non-200 responses are ignored (Joomla on a WP-only install
+ *     answers 404; that's fine).
+ *   - Non-JSON / wrong-shape 200 responses are ignored (a WP frontend
+ *     without the plugin renders the homepage HTML, which `JSON.parse`
+ *     refuses — handled).
+ *   - Any thrown error (DNS, TLS, abort) is swallowed → try next.
+ *
+ * The function returns `null` when BOTH probes fail; the caller then
+ * falls back to the URL-shape heuristic or the wordpress default. We do
+ * NOT throw, because a missing-plugin or wrong-URL diagnosis belongs to
+ * the first real authenticated request — not to silent boot-time probing.
+ *
+ * @license MIT
+ */
+import { type PlatformKind } from './index.js';
+/**
+ * Minimal fetch type so callers (and tests) can inject a stub without
+ * pulling DOM types. Matches the global `fetch` contract we actually use.
+ */
+export type ProbeFetch = (input: string, init?: {
+    signal?: AbortSignal;
+}) => Promise<Response>;
+export interface DetectPlatformAtRuntimeOptions {
+    /** Override the per-probe timeout (ms). Default 3000. */
+    readonly timeoutMs?: number;
+    /** Injectable fetch (tests). Defaults to the global `fetch`. */
+    readonly fetchImpl?: ProbeFetch;
+}
+/**
+ * Probe both platforms' health endpoints and return the first kind that
+ * answers with a yt-builder-mcp-shaped JSON payload. Returns `null`
+ * when neither responds usefully (so the caller can fall through to the
+ * URL-shape heuristic / default).
+ *
+ * NB: `baseUrl` is taken verbatim except for trimming trailing slashes.
+ * If `baseUrl` itself carries a path component (e.g. subfolder install
+ * `https://dev.example.com/joomla`) we preserve it — that path is where
+ * Joomla's `/api/index.php/...` is rooted.
+ */
+export declare function detectPlatformAtRuntime(baseUrl: string, options?: DetectPlatformAtRuntimeOptions): Promise<PlatformKind | null>;
+//# sourceMappingURL=detect.d.ts.map

package/dist/platform/detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../../src/platform/detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAGH,KAAK,YAAY,EACpB,MAAM,YAAY,CAAC;AAKpB;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,CACrB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,KAC9B,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB,MAAM,WAAW,8BAA8B;IAC3C,yDAAyD;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;CACnC;AAaD;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CACzC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,8BAAmC,GAC7C,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAgB9B"}

package/dist/platform/detect.js

@@ -0,0 +1,98 @@
+/**
+ * Runtime platform detection — F-Platform-Detect-Probe (P0 customer fix).
+ *
+ * The static URL-shape heuristic in `detectPlatformFromUrl()` only works
+ * when the user-supplied base URL already carries `/wp-json/` or
+ * `/api/index.php/` in its path. That is RARELY the case in practice —
+ * the DXT/manifest tells the user to enter the **site origin** (or a
+ * subfolder install like `https://dev.example.com/joomla`), neither of
+ * which contains those markers. The heuristic then silently falls back
+ * to the WordPress default and the Joomla customer experiences a
+ * 24/24 FAIL until they manually set `YTB_MCP_PLATFORM=joomla`.
+ *
+ * This module adds a *runtime probe*: lightweight unauthenticated GETs
+ * against both platforms' `/health` endpoints. Whichever returns a
+ * yt-builder-mcp-shaped response (a JSON body carrying `plugin_version`)
+ * wins. Joomla is probed first because the negative case (probe fails)
+ * is the long-tail and the positive case (probe succeeds) returns fast
+ * — letting the more common WordPress install just fall through to the
+ * second probe without paying for a wasted full timeout.
+ *
+ * The probe is fire-and-forget safe:
+ *   - 3 s `AbortSignal.timeout` per request (so a totally broken host
+ *     blocks ~6 s worst case, not the request's full 15 s default).
+ *   - Non-200 responses are ignored (Joomla on a WP-only install
+ *     answers 404; that's fine).
+ *   - Non-JSON / wrong-shape 200 responses are ignored (a WP frontend
+ *     without the plugin renders the homepage HTML, which `JSON.parse`
+ *     refuses — handled).
+ *   - Any thrown error (DNS, TLS, abort) is swallowed → try next.
+ *
+ * The function returns `null` when BOTH probes fail; the caller then
+ * falls back to the URL-shape heuristic or the wordpress default. We do
+ * NOT throw, because a missing-plugin or wrong-URL diagnosis belongs to
+ * the first real authenticated request — not to silent boot-time probing.
+ *
+ * @license MIT
+ */
+import { JOOMLA_REST_NAMESPACE_PATH, WORDPRESS_REST_NAMESPACE_PATH, } from './index.js';
+/** Per-probe HTTP timeout. Keep tight — boot-time UX is on the line. */
+const PROBE_TIMEOUT_MS = 3_000;
+const PROBE_CANDIDATES = [
+    // Joomla first — see module header rationale.
+    { kind: 'joomla', path: `${JOOMLA_REST_NAMESPACE_PATH}/health` },
+    { kind: 'wordpress', path: `${WORDPRESS_REST_NAMESPACE_PATH}/health` },
+];
+/**
+ * Probe both platforms' health endpoints and return the first kind that
+ * answers with a yt-builder-mcp-shaped JSON payload. Returns `null`
+ * when neither responds usefully (so the caller can fall through to the
+ * URL-shape heuristic / default).
+ *
+ * NB: `baseUrl` is taken verbatim except for trimming trailing slashes.
+ * If `baseUrl` itself carries a path component (e.g. subfolder install
+ * `https://dev.example.com/joomla`) we preserve it — that path is where
+ * Joomla's `/api/index.php/...` is rooted.
+ */
+export async function detectPlatformAtRuntime(baseUrl, options = {}) {
+    const timeoutMs = options.timeoutMs ?? PROBE_TIMEOUT_MS;
+    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+    if (typeof fetchImpl !== 'function')
+        return null;
+    const trimmed = baseUrl.replace(/\/+$/, '');
+    for (const { kind, path } of PROBE_CANDIDATES) {
+        const matched = await probeOne(trimmed + path, timeoutMs, fetchImpl);
+        if (matched)
+            return kind;
+    }
+    return null;
+}
+async function probeOne(url, timeoutMs, fetchImpl) {
+    try {
+        const signal = AbortSignal.timeout(timeoutMs);
+        const r = await fetchImpl(url, { signal });
+        if (!r.ok)
+            return false;
+        // Some hosts answer JSON with `text/html` Content-Type; don't
+        // rely on the header. Parse defensively.
+        const text = await r.text();
+        let body;
+        try {
+            body = JSON.parse(text);
+        }
+        catch {
+            return false;
+        }
+        return isYtbHealthShape(body);
+    }
+    catch {
+        return false;
+    }
+}
+/** Recognises a yt-builder-mcp `/health` response. */
+function isYtbHealthShape(body) {
+    return (typeof body === 'object'
+        && body !== null
+        && 'plugin_version' in body);
+}
+//# sourceMappingURL=detect.js.map

package/dist/platform/detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../../src/platform/detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EACH,0BAA0B,EAC1B,6BAA6B,GAEhC,MAAM,YAAY,CAAC;AAEpB,wEAAwE;AACxE,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAuB/B,MAAM,gBAAgB,GAA8B;IAChD,8CAA8C;IAC9C,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,0BAA0B,SAAS,EAAE;IAChE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,6BAA6B,SAAS,EAAE;CACzE,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,OAAe,EACf,UAA0C,EAAE;IAE5C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACxD,MAAM,SAAS,GACX,OAAO,CAAC,SAAS,IAAK,UAAU,CAAC,KAAoB,CAAC;IAC1D,IAAI,OAAO,SAAS,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAEjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,gBAAgB,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC1B,OAAO,GAAG,IAAI,EACd,SAAS,EACT,SAAS,CACZ,CAAC;QACF,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,QAAQ,CACnB,GAAW,EACX,SAAiB,EACjB,SAAqB;IAErB,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACxB,8DAA8D;QAC9D,yCAAyC;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,sDAAsD;AACtD,SAAS,gBAAgB,CAAC,IAAa;IACnC,OAAO,CACH,OAAO,IAAI,KAAK,QAAQ;WACrB,IAAI,KAAK,IAAI;WACb,gBAAgB,IAAI,IAAI,CAC9B,CAAC;AACN,CAAC"}