@wootsup/yt-builder-mcp 1.1.6 → 1.2.0

package/dist/sites/cli/set-default.js

@@ -0,0 +1,69 @@
+/**
+ * W9 — `set-default` CLI subcommand.
+ *
+ * Flips the `is_default` flag on the target entry to `true`, clears
+ * it on every other entry, and updates `default_site_id` to the
+ * target. Fails with code `'UNKNOWN_SITE'` when the site_id is not
+ * present.
+ *
+ * Idempotent: setting the already-default site as default is a
+ * successful no-op (the file is still rewritten so any drift between
+ * `default_site_id` and the per-entry `is_default` flag is healed in
+ * the same pass).
+ *
+ * @license MIT
+ */
+import { loadSitesFile, saveSitesFile } from '../store.js';
+export class SetDefaultError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'SetDefaultError';
+    }
+}
+export async function setDefaultCommand(siteId, path, opts, deps) {
+    const file = await deps.load(path);
+    if (!file.sites.some((s) => s.site_id === siteId)) {
+        throw new SetDefaultError('UNKNOWN_SITE', `Site "${siteId}" not found in ${path}. ` +
+            (file.sites.length > 0
+                ? `Available: ${file.sites.map((s) => s.site_id).join(', ')}.`
+                : '(no sites configured)'));
+    }
+    const previousDefault = file.default_site_id;
+    // W12-R2A (A2-M1) — destructive-routing-op safeguard. Flipping the
+    // default redirects every subsequent tool call that omits `site_id`
+    // to a different connected site. That can silently land write-ops
+    // on the wrong CMS install. Fail-closed: if `--yes` is not set, a
+    // confirm hook is REQUIRED. Idempotent flip (already-default) is
+    // still gated — the file is rewritten even on no-op, and an
+    // operator confirming "yes" is the only reliable safe-belt.
+    if (opts.yes !== true) {
+        if (deps.confirm === undefined) {
+            throw new SetDefaultError('SET_DEFAULT_CONFIRM_REQUIRED', `Setting default to "${siteId}" requires --yes (no interactive `
+                + `confirm available in this context). Re-run with --yes to skip the prompt.`);
+        }
+        const priorLabel = previousDefault !== null ? `"${previousDefault}"` : '(none)';
+        const cont = await deps.confirm(`Switch default site from ${priorLabel} to "${siteId}" in ${path}? `
+            + `This changes which site every subsequent tool call routes to by default.`);
+        if (!cont) {
+            return { siteId, path, previousDefault, cancelled: true };
+        }
+    }
+    const nextSites = file.sites.map((s) => ({
+        ...s,
+        is_default: s.site_id === siteId,
+    }));
+    const nextFile = {
+        schema_version: 1,
+        default_site_id: siteId,
+        sites: nextSites,
+    };
+    await deps.save(path, nextFile);
+    return { siteId, path, previousDefault, cancelled: false };
+}
+export const DEFAULT_SET_DEFAULT_DEPS = {
+    load: loadSitesFile,
+    save: saveSitesFile,
+};
+//# sourceMappingURL=set-default.js.map

package/dist/sites/cli/set-default.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-default.js","sourceRoot":"","sources":["../../../src/sites/cli/set-default.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAiB3D,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACV;IAA5B,YAA4B,IAAY,EAAE,OAAe;QACrD,KAAK,CAAC,OAAO,CAAC,CAAC;QADS,SAAI,GAAJ,IAAI,CAAQ;QAEpC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAClC,CAAC;CACJ;AAeD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,MAAc,EACd,IAAY,EACZ,IAAuB,EACvB,IAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,eAAe,CACrB,cAAc,EACd,SAAS,MAAM,kBAAkB,IAAI,IAAI;YACrC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBAClB,CAAC,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC9D,CAAC,CAAC,uBAAuB,CAAC,CACrC,CAAC;IACN,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAE7C,mEAAmE;IACnE,oEAAoE;IACpE,kEAAkE;IAClE,kEAAkE;IAClE,iEAAiE;IACjE,4DAA4D;IAC5D,4DAA4D;IAC5D,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,eAAe,CACrB,8BAA8B,EAC9B,uBAAuB,MAAM,mCAAmC;kBAC1D,2EAA2E,CACpF,CAAC;QACN,CAAC;QACD,MAAM,UAAU,GAAG,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,eAAe,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;QAChF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC3B,4BAA4B,UAAU,QAAQ,MAAM,QAAQ,IAAI,IAAI;cAC9D,0EAA0E,CACnF,CAAC;QACF,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC9D,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAiB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC;QACJ,UAAU,EAAE,CAAC,CAAC,OAAO,KAAK,MAAM;KACnC,CAAC,CAAC,CAAC;IAEJ,MAAM,QAAQ,GAAe;QACzB,cAAc,EAAE,CAAC;QACjB,eAAe,EAAE,MAAM;QACvB,KAAK,EAAE,SAAS;KACnB,CAAC;IAEF,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAEhC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAmB;IACpD,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,aAAa;CACtB,CAAC"}

package/dist/sites/cli/test-site.d.ts

@@ -0,0 +1,77 @@
+/**
+ * W9 — `test-site` CLI subcommand.
+ *
+ * Live connectivity probe for ONE site_id. Mirrors the runtime
+ * behaviour of the `yootheme_builder_sites_test` MCP tool, but from
+ * the CLI so operators can pre-flight a site without launching the
+ * stdio server.
+ *
+ * Pipeline (per plan §W9):
+ *  1. Load `sites.json` via the W1 store.
+ *  2. Build a {@link SiteRegistry} + {@link ClientPool} from the
+ *     entries, wired to the supplied {@link SecretResolver}.
+ *  3. Call `pool.resolve(siteId)` → throws structured
+ *     {@link UnknownSiteError} / {@link NoDefaultSiteError} which we
+ *     map to a structured CLI result + a non-zero exit code.
+ *  4. Probe `/health` (no auth) + `/etag` (auth) in parallel via
+ *     `Promise.allSettled` so a failure on one path never hides the
+ *     other's outcome.
+ *  5. Print a green/red structured result and return it for the
+ *     dispatcher / tests.
+ *
+ * Returns a {@link TestSiteResult} (not exit codes directly) so tests
+ * can assert deterministic outputs without re-implementing the
+ * probe-routing logic.
+ *
+ * @license MIT
+ */
+import { type Platform, type PlatformKind } from '../../platform/index.js';
+import { ClientPool } from '../client-pool.js';
+import { SiteRegistry } from '../registry.js';
+import type { SitesFileT } from '../schema.js';
+import { type SecretResolver } from '../secret-resolver.js';
+export interface TestSiteResult {
+    readonly siteId: string;
+    readonly siteUrl: string;
+    readonly platform: PlatformKind | 'unknown';
+    readonly pluginReachable: boolean;
+    readonly bearerValid: boolean;
+    readonly etagReceived: boolean;
+    readonly summary: string;
+    readonly pluginError?: string;
+    readonly bearerError?: string;
+    /** True when site_id was not in the registry. */
+    readonly unknownSite: boolean;
+    /** Available ids when unknownSite is true. */
+    readonly available?: readonly string[];
+}
+export interface TestSiteDeps {
+    readonly load: (path: string) => Promise<SitesFileT>;
+    readonly secretResolver?: SecretResolver;
+    /** Inject the platform probe for tests (no network). */
+    readonly platformForUrlAsync?: (url: string, hint?: PlatformKind) => Promise<Platform>;
+    /**
+     * Inject the pool factory. Tests pass a pool that does NOT call
+     * the real RestClient (they pre-stub the response shape).
+     * Production wires the default ClientPool below.
+     */
+    readonly buildPool?: (registry: SiteRegistry, resolver: SecretResolver) => ClientPool;
+    readonly log?: (line: string) => void;
+}
+export declare class TestSiteError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/**
+ * Build the runtime result lines for stdout — keeps the live CLI path
+ * + tests in sync without forcing tests to parse text.
+ */
+export declare function renderTestSiteLines(result: TestSiteResult): readonly string[];
+/**
+ * Probe one site and return a structured outcome. Never throws on a
+ * probe failure (those are surfaced inside the result); throws ONLY
+ * on file-IO failures the operator cannot recover from.
+ */
+export declare function testSiteCommand(siteId: string, path: string, deps: TestSiteDeps): Promise<TestSiteResult>;
+export declare const DEFAULT_TEST_SITE_DEPS: TestSiteDeps;
+//# sourceMappingURL=test-site.d.ts.map

package/dist/sites/cli/test-site.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-site.d.ts","sourceRoot":"","sources":["../../../src/sites/cli/test-site.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAEH,KAAK,QAAQ,EACb,KAAK,YAAY,EACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAM/C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAEH,KAAK,cAAc,EACtB,MAAM,uBAAuB,CAAC;AAG/B,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,YAAY,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,iDAAiD;IACjD,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,wDAAwD;IACxD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAC3B,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,YAAY,KAClB,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CACjB,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,cAAc,KACvB,UAAU,CAAC;IAChB,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACzC;AAED,qBAAa,aAAc,SAAQ,KAAK;aACR,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAI5D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,MAAM,EAAE,CA0B7E;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACjC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,YAAY,GACnB,OAAO,CAAC,cAAc,CAAC,CAmEzB;AAED,eAAO,MAAM,sBAAsB,EAAE,YAEpC,CAAC"}

package/dist/sites/cli/test-site.js

@@ -0,0 +1,146 @@
+/**
+ * W9 — `test-site` CLI subcommand.
+ *
+ * Live connectivity probe for ONE site_id. Mirrors the runtime
+ * behaviour of the `yootheme_builder_sites_test` MCP tool, but from
+ * the CLI so operators can pre-flight a site without launching the
+ * stdio server.
+ *
+ * Pipeline (per plan §W9):
+ *  1. Load `sites.json` via the W1 store.
+ *  2. Build a {@link SiteRegistry} + {@link ClientPool} from the
+ *     entries, wired to the supplied {@link SecretResolver}.
+ *  3. Call `pool.resolve(siteId)` → throws structured
+ *     {@link UnknownSiteError} / {@link NoDefaultSiteError} which we
+ *     map to a structured CLI result + a non-zero exit code.
+ *  4. Probe `/health` (no auth) + `/etag` (auth) in parallel via
+ *     `Promise.allSettled` so a failure on one path never hides the
+ *     other's outcome.
+ *  5. Print a green/red structured result and return it for the
+ *     dispatcher / tests.
+ *
+ * Returns a {@link TestSiteResult} (not exit codes directly) so tests
+ * can assert deterministic outputs without re-implementing the
+ * probe-routing logic.
+ *
+ * @license MIT
+ */
+import { platformForUrlAsync, } from '../../platform/index.js';
+import { ClientPool } from '../client-pool.js';
+import { NoDefaultSiteError, UnknownSiteError, } from '../client-pool.js';
+import { probeSite } from '../probe.js';
+import { SiteRegistry } from '../registry.js';
+import { CompositeSecretResolver, } from '../secret-resolver.js';
+import { loadSitesFile } from '../store.js';
+export class TestSiteError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'TestSiteError';
+    }
+}
+/**
+ * Build the runtime result lines for stdout — keeps the live CLI path
+ * + tests in sync without forcing tests to parse text.
+ */
+export function renderTestSiteLines(result) {
+    if (result.unknownSite) {
+        const avail = result.available ?? [];
+        return [
+            `FAIL — Site "${result.siteId}" not found.`,
+            avail.length > 0
+                ? `Available: ${avail.join(', ')}`
+                : '(no sites configured)',
+        ];
+    }
+    const lines = [
+        `Site:           ${result.siteId}`,
+        `URL:            ${result.siteUrl}`,
+        `Platform:       ${result.platform}`,
+        `Plugin reachable: ${result.pluginReachable ? 'yes' : 'NO'}`,
+        `Bearer valid:     ${result.bearerValid ? 'yes' : 'NO'}`,
+        `ETag received:    ${result.etagReceived ? 'yes' : 'NO'}`,
+    ];
+    if (result.pluginError !== undefined) {
+        lines.push(`Plugin error:   ${result.pluginError}`);
+    }
+    if (result.bearerError !== undefined) {
+        lines.push(`Bearer error:   ${result.bearerError}`);
+    }
+    lines.push('', result.summary);
+    return lines;
+}
+/**
+ * Probe one site and return a structured outcome. Never throws on a
+ * probe failure (those are surfaced inside the result); throws ONLY
+ * on file-IO failures the operator cannot recover from.
+ */
+export async function testSiteCommand(siteId, path, deps) {
+    const file = await deps.load(path);
+    const registry = new SiteRegistry(file, {
+        ...(deps.platformForUrlAsync !== undefined
+            ? { platformForUrlAsync: deps.platformForUrlAsync }
+            : { platformForUrlAsync }),
+    });
+    const resolver = deps.secretResolver ?? new CompositeSecretResolver();
+    const pool = deps.buildPool !== undefined
+        ? deps.buildPool(registry, resolver)
+        : new ClientPool(registry, resolver);
+    let client;
+    let site;
+    try {
+        const resolution = await pool.resolve(siteId);
+        client = resolution.client;
+        site = resolution.site;
+    }
+    catch (e) {
+        if (e instanceof UnknownSiteError) {
+            const result = {
+                siteId,
+                siteUrl: '',
+                platform: 'unknown',
+                pluginReachable: false,
+                bearerValid: false,
+                etagReceived: false,
+                summary: `FAIL — Site "${siteId}" not found.`,
+                unknownSite: true,
+                available: e.available,
+            };
+            if (deps.log !== undefined) {
+                for (const line of renderTestSiteLines(result))
+                    deps.log(line);
+            }
+            return result;
+        }
+        if (e instanceof NoDefaultSiteError) {
+            throw new TestSiteError('NO_DEFAULT_SITE', e.message);
+        }
+        throw e;
+    }
+    // W12-R1.2: probe lives in sites/probe.ts — single source of truth
+    // shared with the MCP tool surface so the two output channels never
+    // drift on edge cases (401 with /health rejected, 500 on /etag etc.).
+    const probe = await probeSite(client);
+    const result = {
+        siteId: site.id,
+        siteUrl: site.url,
+        platform: site.platform.kind,
+        pluginReachable: probe.plugin_reachable,
+        bearerValid: probe.bearer_valid,
+        etagReceived: probe.etag_received,
+        summary: probe.summary,
+        ...(probe.plugin_error !== undefined ? { pluginError: probe.plugin_error } : {}),
+        ...(probe.bearer_error !== undefined ? { bearerError: probe.bearer_error } : {}),
+        unknownSite: false,
+    };
+    if (deps.log !== undefined) {
+        for (const line of renderTestSiteLines(result))
+            deps.log(line);
+    }
+    return result;
+}
+export const DEFAULT_TEST_SITE_DEPS = {
+    load: loadSitesFile,
+};
+//# sourceMappingURL=test-site.js.map

package/dist/sites/cli/test-site.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-site.js","sourceRoot":"","sources":["../../../src/sites/cli/test-site.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EACH,mBAAmB,GAGtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACH,kBAAkB,EAClB,gBAAgB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EACH,uBAAuB,GAE1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAsC5C,MAAM,OAAO,aAAc,SAAQ,KAAK;IACR;IAA5B,YAA4B,IAAY,EAAE,OAAe;QACrD,KAAK,CAAC,OAAO,CAAC,CAAC;QADS,SAAI,GAAJ,IAAI,CAAQ;QAEpC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAChC,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAsB;IACtD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;QACrC,OAAO;YACH,gBAAgB,MAAM,CAAC,MAAM,cAAc;YAC3C,KAAK,CAAC,MAAM,GAAG,CAAC;gBACZ,CAAC,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAClC,CAAC,CAAC,uBAAuB;SAChC,CAAC;IACN,CAAC;IACD,MAAM,KAAK,GAAa;QACpB,mBAAmB,MAAM,CAAC,MAAM,EAAE;QAClC,mBAAmB,MAAM,CAAC,OAAO,EAAE;QACnC,mBAAmB,MAAM,CAAC,QAAQ,EAAE;QACpC,qBAAqB,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QAC5D,qBAAqB,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QACxD,qBAAqB,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;KAC5D,CAAC;IACF,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,MAAc,EACd,IAAY,EACZ,IAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE;QACpC,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS;YACtC,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE;YACnD,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC;KACjC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,uBAAuB,EAAE,CAAC;IACtE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS;QACrC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpC,CAAC,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEzC,IAAI,MAAM,CAAC;IACX,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAC3B,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC3B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,IAAI,CAAC,YAAY,gBAAgB,EAAE,CAAC;YAChC,MAAM,MAAM,GAAmB;gBAC3B,MAAM;gBACN,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,SAAS;gBACnB,eAAe,EAAE,KAAK;gBACtB,WAAW,EAAE,KAAK;gBAClB,YAAY,EAAE,KAAK;gBACnB,OAAO,EAAE,gBAAgB,MAAM,cAAc;gBAC7C,WAAW,EAAE,IAAI;gBACjB,SAAS,EAAE,CAAC,CAAC,SAAS;aACzB,CAAC;YACF,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACzB,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,MAAM,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,MAAM,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,YAAY,kBAAkB,EAAE,CAAC;YAClC,MAAM,IAAI,aAAa,CACnB,iBAAiB,EACjB,CAAC,CAAC,OAAO,CACZ,CAAC;QACN,CAAC;QACD,MAAM,CAAC,CAAC;IACZ,CAAC;IAED,mEAAmE;IACnE,oEAAoE;IACpE,sEAAsE;IACtE,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAmB;QAC3B,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,OAAO,EAAE,IAAI,CAAC,GAAG;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;QAC5B,eAAe,EAAE,KAAK,CAAC,gBAAgB;QACvC,WAAW,EAAE,KAAK,CAAC,YAAY;QAC/B,YAAY,EAAE,KAAK,CAAC,aAAa;QACjC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,WAAW,EAAE,KAAK;KACrB,CAAC;IAEF,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAiB;IAChD,IAAI,EAAE,aAAa;CACtB,CAAC"}

package/dist/sites/client-pool.d.ts

@@ -0,0 +1,157 @@
+/**
+ * W4 — ClientPool: caches one {@link RestClient} per `site_id`.
+ *
+ * The pool sits between the W3 {@link SiteRegistry} (which maps a
+ * `site_id` → entry + memoised {@link Platform}) and the W2
+ * {@link SecretResolver} (which produces a bearer token at call time)
+ * and emits {@link PoolResolution} bundles ready for tool handlers.
+ *
+ * Design choices (per plan §W4, Z.562-644):
+ *
+ *  - **One client per site_id.** The first `resolve(id)` runs bearer +
+ *    platform resolve in parallel via `Promise.all` (saves one
+ *    round-trip-time per cold site) and stores the constructed
+ *    `RestClient`. All subsequent calls reuse the same instance —
+ *    identity-equal across the process lifetime.
+ *
+ *  - **Cold parallel calls are racey-but-safe.** When N callers arrive
+ *    for the same uncached site_id simultaneously, the plan §W4
+ *    explicitly accepts N first-time `secretResolver.resolve()` calls
+ *    (Z.630): `op read` is idempotent + latency dominates so a
+ *    hard-once Promise-cache would not materially help. The W3
+ *    registry's Promise-cache handles the platform side. The last
+ *    setter wins the `cache.set(id, client)` race; subsequent
+ *    `resolve()` calls see a stable single instance. Identity is
+ *    eventual, not instantaneous — but stable from call N+1 onwards.
+ *
+ *  - **`invalidate(siteId)` for post-401 force-re-resolve.** When the
+ *    auth layer detects a `401 invalid_kid`, it can drop the cached
+ *    client so the next call re-fetches the bearer through `op` and
+ *    constructs a fresh `RestClient`.
+ *
+ *  - **Structured errors.** `NoDefaultSiteError` and `UnknownSiteError`
+ *    carry `code` + (for unknown) `siteId` + `available[]` so the
+ *    auth/tool layer can branch on `error.code` instead of substring
+ *    matching the message.
+ *
+ * @license MIT
+ */
+import { RestClient } from '../client.js';
+import type { SiteRegistry, ResolvedSite } from './registry.js';
+import type { SecretResolver } from './secret-resolver.js';
+/**
+ * Thrown when `resolve()` is called without a `siteId` AND the
+ * registry has no default configured (neither `default_site_id` nor a
+ * flagged `is_default:true` entry). The auth layer surfaces this as a
+ * `no_default_site` MCP error with a hint to run
+ * `npx -y @wootsup/yt-builder-mcp add-site --default`.
+ */
+export declare class NoDefaultSiteError extends Error {
+    readonly code: "no_default_site";
+    constructor(message?: string);
+}
+/**
+ * Thrown when `resolve('some-id')` cannot find `some-id` in the
+ * registry. Carries the requested `siteId` and the (insertion-order)
+ * list of configured ids so the caller can render a friendly
+ * "did-you-mean" hint.
+ */
+export declare class UnknownSiteError extends Error {
+    readonly siteId: string;
+    readonly available: readonly string[];
+    readonly code: "unknown_site";
+    constructor(siteId: string, available: readonly string[]);
+}
+/**
+ * Bundle returned by {@link ClientPool.resolve}. Carries the cached
+ * REST client together with the fully-resolved site descriptor for
+ * downstream logging / display.
+ */
+export interface PoolResolution {
+    readonly client: RestClient;
+    readonly site: ResolvedSite;
+}
+/**
+ * Process-local cache of {@link RestClient} instances keyed by
+ * `site_id`. Constructed once at server boot (W6) and shared across
+ * all tool handlers.
+ *
+ * The pool is NOT thread-safe in the strict sense (Node is
+ * single-threaded but `await` can interleave); the cold-parallel-call
+ * behaviour is documented at the top of this file.
+ */
+export declare class ClientPool {
+    private readonly _registry;
+    private readonly secretResolver;
+    private readonly timeoutMs;
+    private readonly cache;
+    /**
+     * Runtime active-site override (Phase 3 — `yootheme_builder_use_site`).
+     *
+     * The {@link SiteRegistry} is immutable: its `defaultSiteId()` is
+     * fixed for the process lifetime. api-mapper's parallel feature
+     * (`apimapper_use_profile`) moves a mutable active-pointer in its
+     * on-disk ProfileStore. YT Builder instead keeps the registry
+     * read-only and layers a process-local override HERE: when set,
+     * `resolve(undefined)` targets this id BEFORE consulting
+     * `registry.defaultSiteId()`. An explicit `site_id` argument to
+     * `resolve()` always wins over the override.
+     *
+     * `null` = no override (registry default in effect).
+     */
+    private activeOverride;
+    constructor(_registry: SiteRegistry, secretResolver: SecretResolver, timeoutMs?: number);
+    /**
+     * The current runtime active-site override, or `null` when none is
+     * set (the registry default is in effect). Read-only peek — does not
+     * resolve a client or hit the network.
+     */
+    activeSiteId(): string | null;
+    /**
+     * Set (or clear) the runtime active-site override.
+     *
+     * Passing a `site_id` makes every subsequent `resolve(undefined)`
+     * target that site. Passing `null` clears the override so the
+     * registry default applies again.
+     *
+     * @throws {UnknownSiteError} when `siteId` is not in the registry —
+     *   the pointer is left UNCHANGED on a bad switch so a typo never
+     *   silently strands the session on a non-existent site.
+     */
+    setActiveSite(siteId: string | null): void;
+    /**
+     * Read-only accessor for the underlying {@link SiteRegistry}. Used
+     * internally by the W7 `buildSitesTools(pool)` aggregator so the
+     * `sites_list` tool can render the configured-sites table without
+     * requiring callers to thread the registry separately. The registry
+     * itself is immutable from the outside (no mutator surface) so
+     * exposing it here is safe — `listForDisplay()` / `defaultSiteId()` /
+     * `listIds()` are all read-only operations.
+     *
+     * @internal Internal accessor for buildSitesTools; do not consume
+     * from tool handlers. Handlers should call `pool.resolve(siteId)`
+     * to get a `{client, site}` bundle instead.
+     */
+    get registry(): SiteRegistry;
+    /**
+     * Resolve a site_id to its cached {@link RestClient} + descriptor.
+     *
+     * @param siteId Explicit site_id from the tool param. When
+     *   `undefined`, the registry's `defaultSiteId()` is used.
+     * @throws {NoDefaultSiteError} when `siteId` is omitted and no
+     *   default is configured.
+     * @throws {UnknownSiteError} when the resolved id is not in the
+     *   registry (either the explicit id is wrong, or the registry's
+     *   `default_site_id` points at a stale entry).
+     */
+    resolve(siteId?: string): Promise<PoolResolution>;
+    /**
+     * Drop the cached client for `siteId` — used by the auth layer
+     * after a `401 invalid_kid` so the next call re-runs the bearer
+     * resolve and builds a fresh {@link RestClient}.
+     *
+     * No-op when `siteId` is not in the cache.
+     */
+    invalidate(siteId: string): void;
+}
+//# sourceMappingURL=client-pool.d.ts.map

package/dist/sites/client-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-pool.d.ts","sourceRoot":"","sources":["../../src/sites/client-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;;;;;GAMG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IACzC,SAAgB,IAAI,EAAG,iBAAiB,CAAU;gBAG9C,OAAO,SAG6E;CAK3F;AAED;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;aAInB,MAAM,EAAE,MAAM;aACd,SAAS,EAAE,SAAS,MAAM,EAAE;IAJhD,SAAgB,IAAI,EAAG,cAAc,CAAU;gBAG3B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,SAAS,MAAM,EAAE;CAQnD;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,qBAAa,UAAU;IAoBf,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS;IArB9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IAEvD;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,cAAc,CAAuB;gBAGxB,SAAS,EAAE,YAAY,EACvB,cAAc,EAAE,cAAc,EAC9B,SAAS,GAAE,MAAe;IAG/C;;;;OAIG;IACH,YAAY,IAAI,MAAM,GAAG,IAAI;IAI7B;;;;;;;;;;OAUG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAW1C;;;;;;;;;;;;OAYG;IACH,IAAI,QAAQ,IAAI,YAAY,CAE3B;IAED;;;;;;;;;;OAUG;IACG,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAqDvD;;;;;;OAMG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;CAGnC"}