@wootsup/yt-builder-mcp 1.1.6 → 1.2.0

package/dist/tools/pool-resolve-helper.js

@@ -0,0 +1,148 @@
+/**
+ * W6.3 — shared helper for the per-handler `pool.resolve(site_id)`
+ * pattern.
+ *
+ * Every tool handler does the same dance:
+ *   1. Extract `site_id` from args (optional, undefined → default site).
+ *   2. Call `pool.resolve(site_id)`.
+ *   3. Translate `NoDefaultSiteError` / `UnknownSiteError` into a
+ *      structured `errorResult` so the agent can self-recover.
+ *   4. Hand back `{client, site}` for downstream use.
+ *
+ * Centralising the dance keeps the 24 handler bodies short and ensures
+ * the error wording stays consistent across the tool surface.
+ *
+ * @license MIT
+ */
+import { RestError } from '../errors.js';
+import { NoDefaultSiteError, UnknownSiteError, } from '../sites/client-pool.js';
+import { jsonResult } from './tool-builder.js';
+/**
+ * Resolve a site_id through the pool, translating the W4 typed errors
+ * into structured `ToolResult` envelopes. Non-typed errors (genuine
+ * fetch failures during the platform probe, secret-resolver crashes,
+ * etc.) re-throw so the handler's outer try/catch can shape them with
+ * domain-specific hints.
+ */
+export async function resolveSiteOrError(pool, siteId) {
+    try {
+        const { client, site } = await pool.resolve(siteId);
+        return { ok: true, client, site };
+    }
+    catch (e) {
+        if (e instanceof NoDefaultSiteError) {
+            // Custom payload to surface `code: 'no_default_site'` —
+            // `errorResult` only forwards `code` for RestError, but
+            // agents branch on `error.code === 'no_default_site'` to
+            // route the user into the setup wizard.
+            return {
+                ok: false,
+                error: jsonResult({
+                    error: e.message,
+                    code: e.code,
+                    context: { site_id: siteId ?? null },
+                    hint: 'No site_id supplied and no default site is configured. '
+                        + 'Use yootheme_builder_sites_list to discover available IDs '
+                        + 'and pass one as site_id, or run `yt-builder-mcp setup '
+                        + 'add-site --default` to configure a default.',
+                }, { isError: true }),
+            };
+        }
+        if (e instanceof UnknownSiteError) {
+            return {
+                ok: false,
+                error: jsonResult({
+                    error: e.message,
+                    code: e.code,
+                    context: {
+                        site_id: siteId ?? null,
+                        available: [...e.available],
+                    },
+                    hint: 'The requested site_id is not in the registry. '
+                        + 'Use yootheme_builder_sites_list to list configured IDs '
+                        + 'and retry with one of them.',
+                }, { isError: true }),
+            };
+        }
+        // Unknown failure (probe crash, secret-resolver crash, etc.) —
+        // re-throw so the handler's domain-specific catch can shape it
+        // with the right hint (e.g. "verify YTB_MCP_SITE_URL …" for a
+        // health probe, "verify the template_id …" for a page op).
+        throw e;
+    }
+}
+/**
+ * W12-R2A (A4-F3 / A5-S2) — resolve a site + execute a handler-body with
+ * a 1-shot 401 retry.
+ *
+ * Bearer-rotation use case: a site's bearer is revoked / rotated /
+ * expired AFTER the pool cached a {@link RestClient} for it. The next
+ * call returns HTTP 401. Without retry the agent has to be told
+ * "restart your client". With retry we drop the cached client (so the
+ * next `pool.resolve` re-runs `secretResolver.resolve`), then call the
+ * handler-body again exactly once. If the second attempt also returns
+ * 401, we surface a structured `bearer_invalid` error with an
+ * actionable hint pointing at `sites_test` / sites.json.
+ *
+ * Scope: deliberately ONE retry. A second 401 means the bearer is
+ * genuinely revoked at the source — looping forever wastes tokens and
+ * masks the real problem.
+ *
+ * The wrapper handles {@link NoDefaultSiteError} / {@link
+ * UnknownSiteError} via the same `resolveSiteOrError` envelope so
+ * call-sites don't have to duplicate the structured-error wording.
+ * Non-401 thrown errors propagate to the handler's outer try/catch
+ * (or the SDK boundary) untouched — only HTTP 401 triggers the retry
+ * / structured-error path.
+ *
+ * Usage (post-migration):
+ *
+ *   handler: async ({ site_id, ...rest }) =>
+ *     withSiteRetry(pool, site_id, async (client, site) =>
+ *       withSiteMeta(await handleX(makeDeps(client), rest), site)),
+ */
+export async function withSiteRetry(pool, siteId, fn) {
+    const r1 = await resolveSiteOrError(pool, siteId);
+    if (!r1.ok)
+        return r1.error;
+    try {
+        return await fn(r1.client, r1.site);
+    }
+    catch (e) {
+        if (!(e instanceof RestError) || e.status !== 401) {
+            throw e;
+        }
+        // First attempt got 401 — invalidate the cached client so the
+        // pool re-runs `secretResolver.resolve` (this picks up a rotated
+        // Bearer from `op` / a freshly-edited sites.json) and try once
+        // more. Use the resolved id from r1.site so the invalidation
+        // works even when `siteId` was undefined (default-site case).
+        pool.invalidate(r1.site.id);
+        const r2 = await resolveSiteOrError(pool, siteId);
+        if (!r2.ok)
+            return r2.error;
+        try {
+            return await fn(r2.client, r2.site);
+        }
+        catch (e2) {
+            if (e2 instanceof RestError && e2.status === 401) {
+                // Second 401 — surface a structured error so the agent
+                // can route the user to verification + sites.json edit
+                // instead of silently failing.
+                return jsonResult({
+                    error: e2.message,
+                    status: 401,
+                    code: 'bearer_invalid',
+                    context: { site_id: r2.site.id },
+                    hint: 'Bearer rejected twice in a row (cached + freshly-resolved). '
+                        + 'The bearer is either rotated or revoked. Run '
+                        + '`npx -y @wootsup/yt-builder-mcp test-site '
+                        + `${r2.site.id}\` to verify, then update sites.json `
+                        + '(or the 1Password item if you used --token-ref).',
+                }, { isError: true });
+            }
+            throw e2;
+        }
+    }
+}
+//# sourceMappingURL=pool-resolve-helper.js.map

package/dist/tools/pool-resolve-helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pool-resolve-helper.js","sourceRoot":"","sources":["../../src/tools/pool-resolve-helper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAEH,kBAAkB,EAElB,gBAAgB,GACnB,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EAAE,UAAU,EAAmB,MAAM,mBAAmB,CAAC;AAqBhE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,IAAgB,EAChB,MAA0B;IAE1B,IAAI,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,IAAI,CAAC,YAAY,kBAAkB,EAAE,CAAC;YAClC,wDAAwD;YACxD,wDAAwD;YACxD,yDAAyD;YACzD,wCAAwC;YACxC,OAAO;gBACH,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,UAAU,CACb;oBACI,KAAK,EAAE,CAAC,CAAC,OAAO;oBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI,EAAE;oBACpC,IAAI,EACA,yDAAyD;0BACvD,4DAA4D;0BAC5D,wDAAwD;0BACxD,6CAA6C;iBACtD,EACD,EAAE,OAAO,EAAE,IAAI,EAAE,CACpB;aACJ,CAAC;QACN,CAAC;QACD,IAAI,CAAC,YAAY,gBAAgB,EAAE,CAAC;YAChC,OAAO;gBACH,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,UAAU,CACb;oBACI,KAAK,EAAE,CAAC,CAAC,OAAO;oBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,OAAO,EAAE;wBACL,OAAO,EAAE,MAAM,IAAI,IAAI;wBACvB,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC;qBAC9B;oBACD,IAAI,EACA,gDAAgD;0BAC9C,yDAAyD;0BACzD,6BAA6B;iBACtC,EACD,EAAE,OAAO,EAAE,IAAI,EAAE,CACpB;aACJ,CAAC;QACN,CAAC;QACD,+DAA+D;QAC/D,+DAA+D;QAC/D,8DAA8D;QAC9D,2DAA2D;QAC3D,MAAM,CAAC,CAAC;IACZ,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAC/B,IAAgB,EAChB,MAA0B,EAC1B,EAAmE;IAEnE,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC;IAE5B,IAAI,CAAC;QACD,OAAO,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,IAAI,CAAC,CAAC,CAAC,YAAY,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAChD,MAAM,CAAC,CAAC;QACZ,CAAC;QACD,8DAA8D;QAC9D,iEAAiE;QACjE,+DAA+D;QAC/D,6DAA6D;QAC7D,8DAA8D;QAC9D,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE5B,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC,KAAK,CAAC;QAE5B,IAAI,CAAC;YACD,OAAO,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,EAAE,EAAE,CAAC;YACV,IAAI,EAAE,YAAY,SAAS,IAAI,EAAE,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC/C,uDAAuD;gBACvD,uDAAuD;gBACvD,+BAA+B;gBAC/B,OAAO,UAAU,CACb;oBACI,KAAK,EAAE,EAAE,CAAC,OAAO;oBACjB,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE;oBAChC,IAAI,EACA,8DAA8D;0BAC5D,+CAA+C;0BAC/C,4CAA4C;0BAC5C,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,uCAAuC;0BACpD,kDAAkD;iBAC3D,EACD,EAAE,OAAO,EAAE,IAAI,EAAE,CACpB,CAAC;YACN,CAAC;YACD,MAAM,EAAE,CAAC;QACb,CAAC;IACL,CAAC;AACL,CAAC"}

package/dist/tools/progress-phases.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Wave G.5 + Round-1.5 — shared progress labels for write handlers.
+ *
+ * Two contracts coexist:
+ *
+ * ─── 2-phase (element_* mutations) ───────────────────────────────────
+ *
+ *   0/2  PHASE_SEND     — before the REST call,
+ *   2/2  PHASE_CONFIRM  — after a 2xx response.
+ *
+ * Used by the five element_* write tools (add / update_settings / move /
+ * clone / delete). Each is a single shallow `wp_option('yootheme')` write
+ * — the request completes in tens of milliseconds and there is no
+ * client-observable window between dispatch and confirmation that would
+ * benefit from a synthetic intermediate event.
+ *
+ * ─── 3-phase (page_save / page_publish) ──────────────────────────────
+ *
+ *   0/3  PHASE_SEND     — before the REST call,
+ *   1/3  PHASE_SERVER   — synthetic intermediate, emitted AFTER dispatch
+ *                         starts but BEFORE the await resolves; lets the
+ *                         MCP-client UI render a mid-flight indicator
+ *                         matching the reference UX intent without
+ *                         requiring an SSE-streaming REST endpoint.
+ *   2/3  PHASE_CONFIRM  — after a 2xx response.
+ *
+ * Reserved for the two page-level mutations (`page_save` /
+ * `page_publish`). Both trigger a save-transform pass + a full layout
+ * re-serialisation on the PHP side; on large templates this can take
+ * 500-3000 ms — well over the perceptual threshold where a mid-flight
+ * progress signal materially improves the operator experience.
+ *
+ * Round-1.5 revert: an earlier Round-1 audit amendment collapsed the
+ * page_save / page_publish handlers down to 2-phase on the grounds that
+ * the synthetic intermediate was "theatre". Thomas-mandate 2026-05-22
+ * reinstates the 3-phase contract: the intermediate is honest if it
+ * marks an observable boundary (dispatch-start → await-resolved is one
+ * such boundary even without server-side streaming, because the
+ * dispatch itself is non-blocking from the host UI's perspective).
+ *
+ * @license MIT
+ */
+export declare const PHASE_SEND = "Sending write request";
+export declare const PHASE_CONFIRM = "Confirmed by server";
+export declare const PHASE_SERVER = "Server processing";
+//# sourceMappingURL=progress-phases.d.ts.map

package/dist/tools/progress-phases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"progress-phases.d.ts","sourceRoot":"","sources":["../../src/tools/progress-phases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,eAAO,MAAM,UAAU,0BAA0B,CAAC;AAClD,eAAO,MAAM,aAAa,wBAAwB,CAAC;AAGnD,eAAO,MAAM,YAAY,sBAAsB,CAAC"}

package/dist/tools/progress-phases.js

@@ -0,0 +1,48 @@
+/**
+ * Wave G.5 + Round-1.5 — shared progress labels for write handlers.
+ *
+ * Two contracts coexist:
+ *
+ * ─── 2-phase (element_* mutations) ───────────────────────────────────
+ *
+ *   0/2  PHASE_SEND     — before the REST call,
+ *   2/2  PHASE_CONFIRM  — after a 2xx response.
+ *
+ * Used by the five element_* write tools (add / update_settings / move /
+ * clone / delete). Each is a single shallow `wp_option('yootheme')` write
+ * — the request completes in tens of milliseconds and there is no
+ * client-observable window between dispatch and confirmation that would
+ * benefit from a synthetic intermediate event.
+ *
+ * ─── 3-phase (page_save / page_publish) ──────────────────────────────
+ *
+ *   0/3  PHASE_SEND     — before the REST call,
+ *   1/3  PHASE_SERVER   — synthetic intermediate, emitted AFTER dispatch
+ *                         starts but BEFORE the await resolves; lets the
+ *                         MCP-client UI render a mid-flight indicator
+ *                         matching the reference UX intent without
+ *                         requiring an SSE-streaming REST endpoint.
+ *   2/3  PHASE_CONFIRM  — after a 2xx response.
+ *
+ * Reserved for the two page-level mutations (`page_save` /
+ * `page_publish`). Both trigger a save-transform pass + a full layout
+ * re-serialisation on the PHP side; on large templates this can take
+ * 500-3000 ms — well over the perceptual threshold where a mid-flight
+ * progress signal materially improves the operator experience.
+ *
+ * Round-1.5 revert: an earlier Round-1 audit amendment collapsed the
+ * page_save / page_publish handlers down to 2-phase on the grounds that
+ * the synthetic intermediate was "theatre". Thomas-mandate 2026-05-22
+ * reinstates the 3-phase contract: the intermediate is honest if it
+ * marks an observable boundary (dispatch-start → await-resolved is one
+ * such boundary even without server-side streaming, because the
+ * dispatch itself is non-blocking from the host UI's perspective).
+ *
+ * @license MIT
+ */
+// ── 2-phase (element_*) ─────────────────────────────────────────────
+export const PHASE_SEND = 'Sending write request';
+export const PHASE_CONFIRM = 'Confirmed by server';
+// ── 3-phase intermediate (page_save / page_publish only) ────────────
+export const PHASE_SERVER = 'Server processing';
+//# sourceMappingURL=progress-phases.js.map

package/dist/tools/progress-phases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"progress-phases.js","sourceRoot":"","sources":["../../src/tools/progress-phases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,uEAAuE;AACvE,MAAM,CAAC,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAClD,MAAM,CAAC,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAEnD,uEAAuE;AACvE,MAAM,CAAC,MAAM,YAAY,GAAG,mBAAmB,CAAC"}

package/dist/tools/shared-schemas.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Shared Zod schemas — Wave-6 Fix 20.
+ *
+ * Centralises the schema definitions reused across pages, elements and
+ * sources tool builders, so a description tweak lands in one place
+ * instead of three.
+ *
+ * @license MIT
+ */
+import { z } from 'zod';
+export declare const TEMPLATE_ID: z.ZodString;
+export declare const ELEMENT_PATH: z.ZodString;
+export declare const ETAG: z.ZodString;
+export declare const PROPS: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+/**
+ * W5 — Multi-Site selector. Every tool exposes this field as an OPTIONAL
+ * first-position input so an agent can target a specific site while
+ * defaulting to the primary site when omitted. The handler bodies do not
+ * yet read this field — W6 wires `pool.resolve(site_id)` into each
+ * handler. Keep this addition non-breaking: the regex is permissive enough
+ * to allow customer ids like `wp-acme` or `joomla_beta`, and the field is
+ * optional so existing clients continue to work without modification.
+ */
+export declare const SITE_ID_SCHEMA: z.ZodOptional<z.ZodString>;
+//# sourceMappingURL=shared-schemas.d.ts.map

package/dist/tools/shared-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-schemas.d.ts","sourceRoot":"","sources":["../../src/tools/shared-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,WAAW,aAKnB,CAAC;AASN,eAAO,MAAM,YAAY,aAoBpB,CAAC;AAEN,eAAO,MAAM,IAAI,aAYZ,CAAC;AAEN,eAAO,MAAM,KAAK,wCAKb,CAAC;AAEN;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,4BAOtB,CAAC"}

package/dist/tools/shared-schemas.js

@@ -0,0 +1,72 @@
+/**
+ * Shared Zod schemas — Wave-6 Fix 20.
+ *
+ * Centralises the schema definitions reused across pages, elements and
+ * sources tool builders, so a description tweak lands in one place
+ * instead of three.
+ *
+ * @license MIT
+ */
+import { z } from 'zod';
+export const TEMPLATE_ID = z
+    .string()
+    .min(1)
+    .describe('Template ID (e.g. "default"). Use yootheme_builder_pages_list to discover.');
+// F-102 (2026-05-26): the input-arg name is **`element_path`** (NOT
+// `element_rel_path`). `rel_path` is a PROJECTION COLUMN name on the
+// output of `element_list` / `page_get_schema` — copy its VALUE back
+// here as `element_path`. The disambiguation is baked into the
+// `.describe()` string so the LLM sees it at every call site that
+// reuses this shared schema. There is no `element_rel_path` server
+// argument anywhere.
+export const ELEMENT_PATH = z
+    .string()
+    .min(1)
+    .describe(
+// Wave-16 #34 (6.3): lead with the standard JSON-Pointer (RFC-6901)
+// docstring so every element_path param across all tools opens with
+// the canonical form + the enumerate-paths pointer. The F-102
+// disambiguation (element_path vs the element_rel_path projection
+// column) follows and stays load-bearing.
+'JSON-Pointer (RFC-6901) style: /0/children/1. ' +
+    'Use yootheme_builder_element_list to enumerate valid paths. ' +
+    'Field name is `element_path` (NOT ' +
+    '`element_rel_path` — that is the projection column name on ' +
+    '`element_list` / `page_get_schema` output, not an input arg). ' +
+    '**`rel_path` VALUE from `element_list` is the preferred form** ' +
+    '— copy it straight back here as `element_path` (e.g. `/children/0` ' +
+    'or `/children/0/children/1`); the server resolves it within this ' +
+    'template. Fully-qualified pointers (`/templates/<id>/layout/' +
+    'children/0/...`) are also accepted. Both forms work everywhere ' +
+    '`element_path` appears.');
+export const ETAG = z
+    .string()
+    .min(1)
+    .describe('Optimistic-lock ETag from yootheme_builder_get_etag. Required to ' +
+    'detect concurrent edits — call get_etag first, pass the value here. ' +
+    'On 412 Precondition Failed, re-fetch the ETag and retry. ' +
+    'Note (Wave-8 C2 2026-05-29): every successful write returns a NEW ' +
+    'ETag in the response body — use that next-ETag for the following ' +
+    'call, do NOT reuse the same value across multiple writes (the server ' +
+    'bumps a monotonic revision per persist, so byte-identical state ' +
+    'still surfaces as a distinct ETag).');
+export const PROPS = z
+    .record(z.string(), z.unknown())
+    .describe('Element props object (e.g. `{title: "Hello", margin: "default"}`). ' +
+    'Use yootheme_builder_element_type_get_schema to discover available keys.');
+/**
+ * W5 — Multi-Site selector. Every tool exposes this field as an OPTIONAL
+ * first-position input so an agent can target a specific site while
+ * defaulting to the primary site when omitted. The handler bodies do not
+ * yet read this field — W6 wires `pool.resolve(site_id)` into each
+ * handler. Keep this addition non-breaking: the regex is permissive enough
+ * to allow customer ids like `wp-acme` or `joomla_beta`, and the field is
+ * optional so existing clients continue to work without modification.
+ */
+export const SITE_ID_SCHEMA = z.string()
+    .min(1).max(64)
+    .regex(/^[a-zA-Z0-9_-]+$/, 'site_id uses letters/digits/dash/underscore only')
+    .optional()
+    .describe('Target site (e.g., "wp-acme"). Omit to use the default site. ' +
+    'Use yootheme_builder_sites_list to discover available IDs.');
+//# sourceMappingURL=shared-schemas.js.map

package/dist/tools/shared-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-schemas.js","sourceRoot":"","sources":["../../src/tools/shared-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACvB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,QAAQ,CACL,4EAA4E,CAC/E,CAAC;AAEN,oEAAoE;AACpE,qEAAqE;AACrE,qEAAqE;AACrE,+DAA+D;AAC/D,kEAAkE;AAClE,mEAAmE;AACnE,qBAAqB;AACrB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KACxB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,QAAQ;AACL,oEAAoE;AACpE,oEAAoE;AACpE,8DAA8D;AAC9D,kEAAkE;AAClE,0CAA0C;AAC1C,gDAAgD;IAC5C,8DAA8D;IAC9D,oCAAoC;IACpC,6DAA6D;IAC7D,gEAAgE;IAChE,iEAAiE;IACjE,qEAAqE;IACrE,mEAAmE;IACnE,8DAA8D;IAC9D,iEAAiE;IACjE,yBAAyB,CAChC,CAAC;AAEN,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC;KAChB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,QAAQ,CACL,mEAAmE;IAC/D,sEAAsE;IACtE,2DAA2D;IAC3D,oEAAoE;IACpE,mEAAmE;IACnE,uEAAuE;IACvE,kEAAkE;IAClE,qCAAqC,CAC5C,CAAC;AAEN,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC;KACjB,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;KAC/B,QAAQ,CACL,qEAAqE;IACjE,0EAA0E,CACjF,CAAC;AAEN;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE;KACnC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;KACd,KAAK,CAAC,kBAAkB,EAAE,kDAAkD,CAAC;KAC7E,QAAQ,EAAE;KACV,QAAQ,CACL,+DAA+D;IAC/D,4DAA4D,CAC/D,CAAC"}

package/dist/tools/sources/builders.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Source-tool builders — pure `defineTool` factory list.
+ *
+ * Split out of `src/tools/sources.ts` (Wave G.4.0b). See `./handlers.ts`
+ * for the handler bodies.
+ *
+ * @license MIT
+ */
+import type { ClientPool } from '../../sites/client-pool.js';
+import { type AnyToolDefinition } from '../tool-builder.js';
+import { type SourcesHandlerDeps } from './handlers.js';
+export declare function buildSourcesTools(pool: ClientPool, deps?: Partial<SourcesHandlerDeps>): readonly AnyToolDefinition[];
+//# sourceMappingURL=builders.d.ts.map

package/dist/tools/sources/builders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builders.d.ts","sourceRoot":"","sources":["../../../src/tools/sources/builders.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAI7D,OAAO,EAMH,KAAK,iBAAiB,EACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAGH,KAAK,kBAAkB,EAK1B,MAAM,eAAe,CAAC;AAEvB,wBAAgB,iBAAiB,CAC7B,IAAI,EAAE,UAAU,EAChB,IAAI,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACnC,SAAS,iBAAiB,EAAE,CAiI9B"}

package/dist/tools/sources/builders.js

@@ -0,0 +1,118 @@
+/**
+ * Source-tool builders — pure `defineTool` factory list.
+ *
+ * Split out of `src/tools/sources.ts` (Wave G.4.0b). See `./handlers.ts`
+ * for the handler bodies.
+ *
+ * @license MIT
+ */
+import { z } from 'zod';
+import { withSiteRetry } from '../pool-resolve-helper.js';
+import { ELEMENT_PATH, ETAG, SITE_ID_SCHEMA, TEMPLATE_ID } from '../shared-schemas.js';
+import { FIELDS } from '../sparse-fields.js';
+import { defineTool, destructive, mutating, readOnly, withSiteMeta, } from '../tool-builder.js';
+import { BINDING_OUTPUT_SCHEMA, SOURCES_LIST_OUTPUT_SCHEMA, handleElementBindSource, handleElementGetBinding, handleElementUnbindSource, handleSourcesList, } from './handlers.js';
+export function buildSourcesTools(pool, deps) {
+    // W6.3 — handlers receive a per-call `siteClient` via the
+    // resolveSiteOrError helper; the elicitation capability is the
+    // only stable dep we propagate.
+    const elicitation = deps?.elicitation;
+    const makeDeps = (siteClient) => (elicitation !== undefined
+        ? { client: siteClient, elicitation }
+        : { client: siteClient });
+    return [
+        defineTool({
+            name: 'yootheme_builder_sources_list',
+            description: 'List all data sources, feeds, and dynamic content sources available in the ' +
+                'YOOtheme Pro builder. Returns name + label + origin (apimapper / wordpress / ' +
+                'joomla / essentials) per source. CALL THIS BEFORE binding any element to a data source. ' +
+                'Pick a source name from the list and pass it to `element_bind_source`. ' +
+                'Keywords: list sources, list data sources, list feeds, list bindings, ' +
+                'dynamic content, available data, what sources exist. ' +
+                'Pass `fields[]` to narrow each row. Operates on the default site unless site_id is provided.',
+            inputSchema: {
+                site_id: SITE_ID_SCHEMA,
+                fields: FIELDS,
+            },
+            outputSchema: SOURCES_LIST_OUTPUT_SCHEMA,
+            annotations: readOnly('List Sources'),
+            handler: async ({ site_id, ...rest }) => withSiteRetry(pool, site_id, async (client, site) => withSiteMeta(await handleSourcesList(makeDeps(client), rest), site)),
+        }),
+        defineTool({
+            name: 'yootheme_builder_element_get_binding',
+            description: 'Read the source binding attached to an element — the bound source name, ' +
+                'the field-mappings (which source field feeds which element prop) and the ' +
+                'query arguments/directives. Returns the empty object if the element is not bound. ' +
+                'Operates on the default site unless site_id is provided.',
+            inputSchema: {
+                site_id: SITE_ID_SCHEMA,
+                template_id: TEMPLATE_ID,
+                element_path: ELEMENT_PATH,
+            },
+            outputSchema: BINDING_OUTPUT_SCHEMA,
+            annotations: readOnly('Get Source Binding'),
+            handler: async ({ site_id, ...rest }) => withSiteRetry(pool, site_id, async (client, site) => withSiteMeta(await handleElementGetBinding(makeDeps(client), rest), site)),
+        }),
+        defineTool({
+            name: 'yootheme_builder_element_bind_source',
+            description: 'Binds a Builder source to an element (sets `props.source`). Use bindingLevel ' +
+                '"item" on Multi-Items containers (grid/slideshow/switcher/…) to bind on the ' +
+                'first *_item child instead of the container itself. Requires ETag. ' +
+                'Operates on the default site unless site_id is provided.',
+            inputSchema: {
+                site_id: SITE_ID_SCHEMA,
+                template_id: TEMPLATE_ID,
+                element_path: ELEMENT_PATH,
+                source_name: z
+                    .string()
+                    .min(1)
+                    .describe('Source name as listed by yootheme_builder_sources_list ' +
+                    '(e.g. "wp_posts", "apimapper_my-flow").'),
+                source_id: z
+                    .string()
+                    .optional()
+                    .describe('Optional explicit "<origin>:<name>" id; skips ambiguity ' +
+                    'resolution when ≥2 sources share `source_name`.'),
+                field_mappings: z
+                    .record(z.string(), z.string())
+                    .optional()
+                    .describe('Optional {prop_name: source_field_name} map written to `source.props`. ' +
+                    'Pass "__node_item__" (or "__node_item__:<field>") as the value to ' +
+                    'emit YT-Pro INHERIT bindings ("Node - Item (Source/Items)" picker ' +
+                    'entry) on child *_item elements.'),
+                bindingLevel: z
+                    .enum(['auto', 'container', 'item'])
+                    .optional()
+                    .describe('Multi-Items binding level. "auto" (default): item if target is a *_item, ' +
+                    'container otherwise. "item": container targets resolve to their first ' +
+                    '*_item child. "container": binds on the container, response carries a ' +
+                    'warning because YT-Pro will clone the container N times.'),
+                etag: ETAG,
+            },
+            annotations: mutating('Bind Source'),
+            handler: async ({ site_id, ...rest }) => withSiteRetry(pool, site_id, async (client, site) => withSiteMeta(await handleElementBindSource(makeDeps(client), rest), site)),
+        }),
+        defineTool({
+            name: 'yootheme_builder_element_unbind_source',
+            description: 'Remove the source binding from an element. Clears `props.source`. Destructive ' +
+                'in the sense that it may break dynamic-content rendering — always ask the ' +
+                'user to confirm. Requires ETag. ' +
+                'Operates on the default site unless site_id is provided.',
+            inputSchema: {
+                site_id: SITE_ID_SCHEMA,
+                template_id: TEMPLATE_ID,
+                element_path: ELEMENT_PATH,
+                etag: ETAG,
+                confirm: z
+                    .boolean()
+                    .optional()
+                    .describe('Must be true to execute. On supporting hosts the agent is prompted ' +
+                    'via MCP elicitation when omitted; otherwise the call returns a ' +
+                    'preview and the agent must retry with `confirm: true`.'),
+            },
+            annotations: destructive('Unbind Source'),
+            handler: async ({ site_id, ...rest }) => withSiteRetry(pool, site_id, async (client, site) => withSiteMeta(await handleElementUnbindSource(makeDeps(client), rest), site)),
+        }),
+    ];
+}
+//# sourceMappingURL=builders.js.map

package/dist/tools/sources/builders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builders.js","sourceRoot":"","sources":["../../../src/tools/sources/builders.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EACH,UAAU,EACV,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,YAAY,GAEf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACH,qBAAqB,EACrB,0BAA0B,EAE1B,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,iBAAiB,GACpB,MAAM,eAAe,CAAC;AAEvB,MAAM,UAAU,iBAAiB,CAC7B,IAAgB,EAChB,IAAkC;IAElC,0DAA0D;IAC1D,+DAA+D;IAC/D,gCAAgC;IAChC,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;IACtC,MAAM,QAAQ,GAAG,CAAC,UAAwC,EAAsB,EAAE,CAC9E,CAAC,WAAW,KAAK,SAAS;QACtB,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE;QACrC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAElC,OAAO;QACH,UAAU,CAAC;YACP,IAAI,EAAE,+BAA+B;YACrC,WAAW,EACP,6EAA6E;gBAC7E,+EAA+E;gBAC/E,0FAA0F;gBAC1F,yEAAyE;gBACzE,wEAAwE;gBACxE,uDAAuD;gBACvD,8FAA8F;YAClG,WAAW,EAAE;gBACT,OAAO,EAAE,cAAc;gBACvB,MAAM,EAAE,MAAM;aACjB;YACD,YAAY,EAAE,0BAA0B;YACxC,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC;YACrC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CACpC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAChD,YAAY,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;SAC/E,CAAC;QAEF,UAAU,CAAC;YACP,IAAI,EAAE,sCAAsC;YAC5C,WAAW,EACP,0EAA0E;gBAC1E,2EAA2E;gBAC3E,oFAAoF;gBACpF,0DAA0D;YAC9D,WAAW,EAAE;gBACT,OAAO,EAAE,cAAc;gBACvB,WAAW,EAAE,WAAW;gBACxB,YAAY,EAAE,YAAY;aAC7B;YACD,YAAY,EAAE,qBAAqB;YACnC,WAAW,EAAE,QAAQ,CAAC,oBAAoB,CAAC;YAC3C,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CACpC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAChD,YAAY,CAAC,MAAM,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;SACrF,CAAC;QAEF,UAAU,CAAC;YACP,IAAI,EAAE,sCAAsC;YAC5C,WAAW,EACP,+EAA+E;gBAC/E,8EAA8E;gBAC9E,qEAAqE;gBACrE,0DAA0D;YAC9D,WAAW,EAAE;gBACT,OAAO,EAAE,cAAc;gBACvB,WAAW,EAAE,WAAW;gBACxB,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,CAAC;qBACT,MAAM,EAAE;qBACR,GAAG,CAAC,CAAC,CAAC;qBACN,QAAQ,CACL,yDAAyD;oBACrD,yCAAyC,CAChD;gBACL,SAAS,EAAE,CAAC;qBACP,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CACL,0DAA0D;oBACtD,iDAAiD,CACxD;gBACL,cAAc,EAAE,CAAC;qBACZ,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;qBAC9B,QAAQ,EAAE;qBACV,QAAQ,CACL,yEAAyE;oBACrE,oEAAoE;oBACpE,oEAAoE;oBACpE,kCAAkC,CACzC;gBACL,YAAY,EAAE,CAAC;qBACV,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;qBACnC,QAAQ,EAAE;qBACV,QAAQ,CACL,2EAA2E;oBACvE,wEAAwE;oBACxE,wEAAwE;oBACxE,0DAA0D,CACjE;gBACL,IAAI,EAAE,IAAI;aACb;YACD,WAAW,EAAE,QAAQ,CAAC,aAAa,CAAC;YACpC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CACpC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAChD,YAAY,CAAC,MAAM,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;SACrF,CAAC;QAEF,UAAU,CAAC;YACP,IAAI,EAAE,wCAAwC;YAC9C,WAAW,EACP,gFAAgF;gBAChF,4EAA4E;gBAC5E,kCAAkC;gBAClC,0DAA0D;YAC9D,WAAW,EAAE;gBACT,OAAO,EAAE,cAAc;gBACvB,WAAW,EAAE,WAAW;gBACxB,YAAY,EAAE,YAAY;gBAC1B,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,CAAC;qBACL,OAAO,EAAE;qBACT,QAAQ,EAAE;qBACV,QAAQ,CACL,qEAAqE;oBACjE,iEAAiE;oBACjE,wDAAwD,CAC/D;aACR;YACD,WAAW,EAAE,WAAW,CAAC,eAAe,CAAC;YACzC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CACpC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAChD,YAAY,CAAC,MAAM,yBAAyB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;SACvF,CAAC;KACL,CAAC;AACN,CAAC"}

package/dist/tools/sources/handlers-bind.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Source-binding write handlers (`element_bind_source`,
+ * `element_unbind_source`).
+ *
+ * Split out of `./handlers.ts` to keep each file under the 200-LoC
+ * budget. Wave G.4.2 adds destructive-confirm elicitation;
+ * Wave G.4.3 adds ambiguity-resolution elicitation.
+ *
+ * @license MIT
+ */
+import { type ToolResult } from '../tool-builder.js';
+import type { SourcesHandlerDeps } from './handlers.js';
+export declare function handleElementBindSource({ client, elicitation }: SourcesHandlerDeps, input: {
+    template_id: string;
+    element_path: string;
+    source_name: string;
+    source_id?: string;
+    etag: string;
+    bindingLevel?: 'auto' | 'container' | 'item';
+    field_mappings?: Record<string, string>;
+}): Promise<ToolResult>;
+export declare function handleElementUnbindSource({ client, elicitation }: SourcesHandlerDeps, input: {
+    template_id: string;
+    element_path: string;
+    etag: string;
+    confirm?: boolean;
+}): Promise<ToolResult>;
+//# sourceMappingURL=handlers-bind.d.ts.map

package/dist/tools/sources/handlers-bind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers-bind.d.ts","sourceRoot":"","sources":["../../../src/tools/sources/handlers-bind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAeH,OAAO,EAIH,KAAK,UAAU,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAgDxD,wBAAsB,uBAAuB,CACzC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,kBAAkB,EAC3C,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC7C,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C,GACF,OAAO,CAAC,UAAU,CAAC,CAyGrB;AAID,wBAAsB,yBAAyB,CAC3C,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,kBAAkB,EAC3C,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GACtF,OAAO,CAAC,UAAU,CAAC,CAoCrB"}