@wootsup/yt-builder-mcp 1.1.7 → 1.3.0

package/README.md

@@ -63,22 +63,25 @@ The wizard auto-detects and configures the following clients:
 
 ## Tool surface (gateway model)
 
-The server registers **26 domain tools + 1 gateway = 27 reachable** tools,
-of which **20 are advertised in `tools/list`** (well under Cursor's ~40-tool
+The server registers **31 domain tools + 1 gateway = 32 reachable** tools,
+of which **27 are advertised in `tools/list`** (well under Cursor's ~40-tool
 cap):
 
 - **2 direct top-level tools** (always in `tools/list`):
   `yootheme_builder_health`, `yootheme_builder_diagnose`. The
   "the gateway itself might be broken" escape hatch.
-- **17 essential forwarded tools** (always in `tools/list`): the most-used
-  reads and writes (`pages_list`, `get_etag`, `element_list`, `element_add`,
+- **24 essential forwarded tools** (always in `tools/list`): the most-used
+  reads and writes (`pages_list`, `pages_create`, `pages_delete`,
+  `page_dynamize`, `get_etag`, `element_list`, `element_add`,
   `element_update_settings`, `sources_list`, `element_types_list`,
-  `inspect_multi_items_binding`, and the multi-site `sites_list` / `sites_test`,
-  among others).
+  `inspect_multi_items_binding`, the multi-site `sites_list` / `sites_test` /
+  `use_site`, and the bind→save→publish chain `element_bind_source` /
+  `page_save` / `page_publish`, among others).
 - **1 gateway tool** (`yootheme_builder_advanced`): exposes the remaining
-  **7 advanced tools** behind a single entry. Call
-  `yootheme_builder_advanced({ tool: "<name>" })` for discovery (returns the
-  schema) or `({ tool, arguments })` to execute.
+  **5 advanced tools** behind a single entry (`page_get_schema`,
+  `element_get_binding`, `element_unbind_source`, `clean_implode_directives`,
+  `inspect_sublayout`). Call `yootheme_builder_advanced({ tool: "<name>" })`
+  for discovery (returns the schema) or `({ tool, arguments })` to execute.
 
 See `skills/yt-builder-mcp/SKILL.md` for the full catalog and canonical
 workflows, and `docs/TOOL-CATALOG.md` for an auto-generated reference.
@@ -93,6 +96,7 @@ workflows, and `docs/TOOL-CATALOG.md` for an auto-generated reference.
 | Elements    |     7 | `element_list`, `element_get`, `element_add`, `element_update_settings`, `element_move`, `element_clone`, `element_delete`                                          |
 | Sources     |     5 | `sources_list`, `element_get_binding`, `element_bind_source`, `element_unbind_source`, `inspect_multi_items_binding`                                                |
 | Inspection  |     3 | `element_types_list`, `element_type_get_schema`, `clean_implode_directives`                                                                                         |
+| Sublayout   |     1 | `inspect_sublayout` (F154 — fragment subtree + render-time inner-grid gate; advanced/gateway-routed)                                                                |
 | Gateway     |     1 | `advanced`                                                                                                                                                          |
 
 All tool names are prefixed with `yootheme_builder_` at the MCP server boundary.
@@ -120,7 +124,7 @@ client without per-client write logic.
 
 The skill ships with the 5 canonical workflows (build hero, bind
 source, clone section, diagnose 401, add custom element) plus a
-23-tool auto-generated catalog appendix.
+26-tool auto-generated catalog appendix.
 
 ## DXT bundle (Claude Desktop one-click install)
 

package/bin/yt-builder-mcp.js

@@ -2,43 +2,56 @@
 /**
  * Entry point for `npx -y @wootsup/yt-builder-mcp`.
  *
- * Dispatch tree:
- *   - `setup` / `install-skill` / `install` / `--version` / `-v` /
- *     `--help` / `-h` / `help` → forward to `runCli()` in
- *     `dist/setup-cli.js` (Wave G.7).
- *   - no subcommand + interactive TTY → print a discoverability hint
- *     (don't accidentally start MCP server).
- *   - no subcommand + piped stdin/stdout → start the MCP stdio server
- *     (this is what AI clients invoke).
+ * Dispatch tree (the verdict comes from the pure, typed + tested
+ * `decideInvocation()` in `dist/cli/invocation-decision.js`):
+ *   - 'cli'    → known subcommand (`setup` / `install-skill` / `install` /
+ *                `uninstall` / `remove` / `add-site` / `list-sites` /
+ *                `remove-site` / `set-default` / `test-site` / `help` /
+ *                `--help` / `-h` / `--version` / `-v`): forward argv to
+ *                `runCli()` in `dist/setup-cli.js` (Wave G.7).
+ *   - 'hint'   → no OR unknown subcommand AND stdin is an interactive TTY
+ *                (a human ran the bin directly): print a discoverability
+ *                hint to stderr and exit 0, instead of silently blocking
+ *                on the stdio read loop ("hang").
+ *   - 'server' → no OR unknown subcommand AND stdin is NOT a TTY (a real
+ *                AI client piping JSON-RPC over stdin): import
+ *                `dist/index.js`, which starts the MCP stdio server (or,
+ *                under YTB_MCP_TEST_MODE=1, prints the tool list to stderr
+ *                and exits 0 — the test-mode branch lives in index.ts).
  *
- * The `runCli` / MCP-server split keeps the interactive ergonomics nice
- * while letting AI clients launch the server with zero arguments.
+ * The guard is keyed on `process.stdin.isTTY`: it is `true` only for an
+ * interactive human terminal and `false`/`undefined` for the piped stdin
+ * every MCP client uses, so the client path stays byte-for-byte the same.
+ * YTB_MCP_TEST_MODE=1 forces the 'server' route so the smoke-test probe
+ * always reaches `dist/index.js` even when run from a TTY.
  *
  * @license MIT
  */
-import { argv, stdout, stderr, exit } from 'node:process';
+import { argv, stdin, stderr, exit } from 'node:process';
+
+import {
+    decideInvocation,
+    isKnownSubcommand,
+    BARE_INVOCATION_HINT,
+} from '../dist/cli/invocation-decision.js';
 
 const args = argv.slice(2);
 const subcommand = args[0];
 
-const CLI_SUBCOMMANDS = new Set([
-    'setup',
-    'install-skill',
-    'install',
-    // W9 multi-site CLI subcommands.
-    'add-site',
-    'list-sites',
-    'remove-site',
-    'set-default',
-    'test-site',
-    'help',
-    '--help',
-    '-h',
-    '--version',
-    '-v',
-]);
+// Decide the route. Known subcommands always go to the cli dispatcher.
+// For the bare/unknown path, the smoke-test probe (YTB_MCP_TEST_MODE=1)
+// must always reach dist/index.js — never the interactive hint — so it
+// forces the 'server' route. Otherwise honour the strict-isTTY decision.
+let action;
+if (isKnownSubcommand(subcommand)) {
+    action = 'cli';
+} else if (process.env.YTB_MCP_TEST_MODE === '1') {
+    action = 'server';
+} else {
+    action = decideInvocation(subcommand, stdin.isTTY);
+}
 
-if (subcommand !== undefined && CLI_SUBCOMMANDS.has(subcommand)) {
+if (action === 'cli') {
     try {
         const { runCli } = await import('../dist/setup-cli.js');
         const code = await runCli(args);
@@ -48,18 +61,20 @@ if (subcommand !== undefined && CLI_SUBCOMMANDS.has(subcommand)) {
         stderr.write(`yt-builder-mcp: fatal: ${msg}\n`);
         exit(99);
     }
-} else if (
-    subcommand === undefined &&
-    stdout.isTTY === true &&
-    process.env.YTB_MCP_TEST_MODE !== '1'
-) {
-    stdout.write(
-        'Run `npx -y @wootsup/yt-builder-mcp setup` to configure your AI client.\n',
-    );
-    stdout.write(
-        'Run `npx -y @wootsup/yt-builder-mcp help` for usage.\n',
-    );
+} else if (action === 'hint') {
+    stderr.write(`${BARE_INVOCATION_HINT}\n`);
+    exit(0);
 } else {
-    // Stdin/stdout piped (or YTB_MCP_TEST_MODE=1): MCP stdio mode.
+    // 'server' — stdin is NOT a TTY (an AI client piping JSON-RPC → real
+    // MCP stdio server) or YTB_MCP_TEST_MODE=1 forced this route.
+    // `dist/index.js` branches on the env var: test-mode prints the tool
+    // list to stderr and exits 0; otherwise it starts the stdio server.
+    // Importing here does NOT itself force stdio mode.
+    if (process.env.YTB_MCP_TEST_MODE === '1') {
+        // Deterministic, synchronous marker so the smoke test can confirm
+        // the server route was reached without racing index.js's async
+        // `main()` stdout/stderr flush. Test-mode only — never a real run.
+        stderr.write('[yt-builder-mcp] server-route reached\n');
+    }
     await import('../dist/index.js');
 }

package/dist/auth.d.ts

@@ -80,6 +80,24 @@ export declare const ENV_PLATFORM = "YTB_MCP_PLATFORM";
  * from the legacy single-site pair.
  */
 export declare const ENV_SITES_FILE = "YTB_MCP_SITES_FILE";
+/**
+ * Optional boot-time active-site selector. Names a registry `site_id`
+ * that becomes the active (default-target) site the moment the server
+ * boots — the YT Builder analogue of api-mapper's `APIMAPPER_PROFILE`.
+ *
+ * Resolution (see {@link bootstrapActiveSite} in `sites/bootstrap.ts`):
+ *   - unset / whitespace / `"default"` → no override; the registry's
+ *     own default site applies.
+ *   - `"<known site_id>"`              → that site becomes active.
+ *   - `"<unknown site_id>"`            → silently ignored (no phantom
+ *     switch on a fresh host that inherited the var from elsewhere).
+ *
+ * The runtime `yootheme_builder_use_site` tool switches it later within
+ * a session; this env var only seeds the INITIAL active site so a
+ * multi-client config (one MCP entry per client site, each with its own
+ * `YTB_MCP_PROFILE`) lands on the right site without a first tool call.
+ */
+export declare const ENV_PROFILE = "YTB_MCP_PROFILE";
 export declare function loadConfig(options?: LoadConfigOptions): ServerConfig;
 export declare function isTestMode(env?: NodeJS.ProcessEnv): boolean;
 /**

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAInD,MAAM,WAAW,YAAY;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kBAAkB;IAClB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2CAA2C;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;CAClD;AAED,MAAM,WAAW,iBAAiB;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,oDAAoD;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACpC;AAED;;;GAGG;AACH,eAAO,MAAM,YAAY,qBAAqB,CAAC;AAC/C;;;;;GAKG;AACH,eAAO,MAAM,UAAU,mBAAmB,CAAC;AAC3C,eAAO,MAAM,UAAU,yBAAyB,CAAC;AACjD,eAAO,MAAM,WAAW,uBAAuB,CAAC;AAChD,eAAO,MAAM,aAAa,sBAAsB,CAAC;AACjD;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,qBAAqB,CAAC;AAC/C;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,uBAAuB,CAAC;AAkCnD,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAAsB,GAAG,YAAY,CA8ExE;AAED,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAExE;AAMD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC,oDAAoD;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,YAAY,CAC9B,IAAI,GAAE,mBAAwB,GAC/B,OAAO,CAAC,YAAY,CAAC,CA8CvB"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAInD,MAAM,WAAW,YAAY;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kBAAkB;IAClB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2CAA2C;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;CAClD;AAED,MAAM,WAAW,iBAAiB;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,oDAAoD;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACpC;AAED;;;GAGG;AACH,eAAO,MAAM,YAAY,qBAAqB,CAAC;AAC/C;;;;;GAKG;AACH,eAAO,MAAM,UAAU,mBAAmB,CAAC;AAC3C,eAAO,MAAM,UAAU,yBAAyB,CAAC;AACjD,eAAO,MAAM,WAAW,uBAAuB,CAAC;AAChD,eAAO,MAAM,aAAa,sBAAsB,CAAC;AACjD;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,qBAAqB,CAAC;AAC/C;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,uBAAuB,CAAC;AACnD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,WAAW,oBAAoB,CAAC;AAkC7C,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAAsB,GAAG,YAAY,CA8ExE;AAED,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAExE;AAMD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC,oDAAoD;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,YAAY,CAC9B,IAAI,GAAE,mBAAwB,GAC/B,OAAO,CAAC,YAAY,CAAC,CA8CvB"}

package/dist/auth.js

@@ -66,6 +66,24 @@ export const ENV_PLATFORM = 'YTB_MCP_PLATFORM';
  * from the legacy single-site pair.
  */
 export const ENV_SITES_FILE = 'YTB_MCP_SITES_FILE';
+/**
+ * Optional boot-time active-site selector. Names a registry `site_id`
+ * that becomes the active (default-target) site the moment the server
+ * boots — the YT Builder analogue of api-mapper's `APIMAPPER_PROFILE`.
+ *
+ * Resolution (see {@link bootstrapActiveSite} in `sites/bootstrap.ts`):
+ *   - unset / whitespace / `"default"` → no override; the registry's
+ *     own default site applies.
+ *   - `"<known site_id>"`              → that site becomes active.
+ *   - `"<unknown site_id>"`            → silently ignored (no phantom
+ *     switch on a fresh host that inherited the var from elsewhere).
+ *
+ * The runtime `yootheme_builder_use_site` tool switches it later within
+ * a session; this env var only seeds the INITIAL active site so a
+ * multi-client config (one MCP entry per client site, each with its own
+ * `YTB_MCP_PROFILE`) lands on the right site without a first tool call.
+ */
+export const ENV_PROFILE = 'YTB_MCP_PROFILE';
 const DEFAULT_TIMEOUT_MS = 15_000;
 /**
  * Maximum accepted length for a Bearer token (defense-in-depth bound;

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAuBjD;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAC/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAC3C,MAAM,CAAC,MAAM,UAAU,GAAG,sBAAsB,CAAC;AACjD,MAAM,CAAC,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAChD,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AACjD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAC/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,oBAAoB,CAAC;AAEnD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;GAIG;AACH,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;;;;;;;;;;GAWG;AACH,MAAM,oBAAoB,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,GAAG,CACA,cAAc,EACd,wBAAwB,MAAM,CAAC,cAAc,CAAC,iMAAiM,CAClP;KACA,KAAK,CACF,kDAAkD,EAClD,mKAAmK,CACtK,CAAC;AAEN,MAAM,UAAU,UAAU,CAAC,UAA6B,EAAE;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,mEAAmE;IACnE,gEAAgE;IAChE,kEAAkE;IAClE,0CAA0C;IAC1C,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC;IAC7D,kEAAkE;IAClE,oEAAoE;IACpE,mEAAmE;IACnE,oDAAoD;IACpD,IACI,UAAU,KAAK,EAAE;WACd,YAAY,KAAK,EAAE;WACnB,OAAO,CAAC,GAAG,KAAK,SAAS;WACzB,CAAC,UAAU,CAAC,GAAG,CAAC,EACrB,CAAC;QACC,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,4BAA4B,UAAU,mBAAmB;YACrD,OAAO,YAAY,qDAAqD,CAC/E,CAAC;IACN,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEnD,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,WAAW,CACjB,WAAW,YAAY,gCAAgC;YACnD,oDAAoD;YACpD,0CAA0C,CACjD,CAAC;IACN,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,WAAW,CACjB,WAAW,UAAU,2DAA2D;YAC5E,4CAA4C,CACnD,CAAC;IACN,CAAC;IAED,+DAA+D;IAC/D,qDAAqD;IACrD,8DAA8D;IAC9D,6DAA6D;IAC7D,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC/B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;iBACzB,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,IAAI,WAAW,CACjB,WAAW,UAAU,KAAK,QAAQ,EAAE,CACvC,CAAC;QACN,CAAC;IACL,CAAC;IAED,IAAI,SAAS,GAAG,kBAAkB,CAAC;IACnC,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,SAAS,GAAG,MAAM,CAAC;QACvB,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnE,MAAM,YAAY,GACd,WAAW,KAAK,WAAW,IAAI,WAAW,KAAK,QAAQ;QACnD,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,SAAS,CAAC;IAEpB,OAAO;QACH,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC;QACnC,WAAW,EAAE,QAAQ;QACrB,SAAS;QACT,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACN,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC3D,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAC9B,OAA4B,EAAE;IAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAEpC,8BAA8B;IAC9B,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,aAAa,KAAK,EAAE,EAAE,CAAC;QACvB,8DAA8D;QAC9D,2DAA2D;QAC3D,0DAA0D;QAC1D,qDAAqD;QACrD,8DAA8D;QAC9D,iDAAiD;QACjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;IACL,CAAC;IAED,gEAAgE;IAChE,mEAAmE;IACnE,iEAAiE;IACjE,oEAAoE;IACpE,4DAA4D;IAC5D,iDAAiD;IACjD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,MAAM,IAAI,WAAW,CACjB,iDAAiD,MAAM,EAAE,CAC5D,CAAC;QACN,CAAC;QACD,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,iBAAiB;IACjB,MAAM,IAAI,WAAW,CACjB,+BAA+B;UAC7B,yDAAyD;UACzD,sDAAsD;UACtD,uBAAuB;UACvB,+DAA+D,CACpE,CAAC;AACN,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAuBjD;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAC/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAC3C,MAAM,CAAC,MAAM,UAAU,GAAG,sBAAsB,CAAC;AACjD,MAAM,CAAC,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAChD,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AACjD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAC/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,oBAAoB,CAAC;AACnD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAE7C,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;GAIG;AACH,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;;;;;;;;;;GAWG;AACH,MAAM,oBAAoB,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,GAAG,CACA,cAAc,EACd,wBAAwB,MAAM,CAAC,cAAc,CAAC,iMAAiM,CAClP;KACA,KAAK,CACF,kDAAkD,EAClD,mKAAmK,CACtK,CAAC;AAEN,MAAM,UAAU,UAAU,CAAC,UAA6B,EAAE;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,mEAAmE;IACnE,gEAAgE;IAChE,kEAAkE;IAClE,0CAA0C;IAC1C,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC;IAC7D,kEAAkE;IAClE,oEAAoE;IACpE,mEAAmE;IACnE,oDAAoD;IACpD,IACI,UAAU,KAAK,EAAE;WACd,YAAY,KAAK,EAAE;WACnB,OAAO,CAAC,GAAG,KAAK,SAAS;WACzB,CAAC,UAAU,CAAC,GAAG,CAAC,EACrB,CAAC;QACC,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,4BAA4B,UAAU,mBAAmB;YACrD,OAAO,YAAY,qDAAqD,CAC/E,CAAC;IACN,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEnD,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,WAAW,CACjB,WAAW,YAAY,gCAAgC;YACnD,oDAAoD;YACpD,0CAA0C,CACjD,CAAC;IACN,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,WAAW,CACjB,WAAW,UAAU,2DAA2D;YAC5E,4CAA4C,CACnD,CAAC;IACN,CAAC;IAED,+DAA+D;IAC/D,qDAAqD;IACrD,8DAA8D;IAC9D,6DAA6D;IAC7D,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC/B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;iBACzB,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,IAAI,WAAW,CACjB,WAAW,UAAU,KAAK,QAAQ,EAAE,CACvC,CAAC;QACN,CAAC;IACL,CAAC;IAED,IAAI,SAAS,GAAG,kBAAkB,CAAC;IACnC,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,SAAS,GAAG,MAAM,CAAC;QACvB,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnE,MAAM,YAAY,GACd,WAAW,KAAK,WAAW,IAAI,WAAW,KAAK,QAAQ;QACnD,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,SAAS,CAAC;IAEpB,OAAO;QACH,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC;QACnC,WAAW,EAAE,QAAQ;QACrB,SAAS;QACT,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACN,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC3D,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAC9B,OAA4B,EAAE;IAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAEpC,8BAA8B;IAC9B,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,aAAa,KAAK,EAAE,EAAE,CAAC;QACvB,8DAA8D;QAC9D,2DAA2D;QAC3D,0DAA0D;QAC1D,qDAAqD;QACrD,8DAA8D;QAC9D,iDAAiD;QACjD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;IACL,CAAC;IAED,gEAAgE;IAChE,mEAAmE;IACnE,iEAAiE;IACjE,oEAAoE;IACpE,4DAA4D;IAC5D,iDAAiD;IACjD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,MAAM,IAAI,WAAW,CACjB,iDAAiD,MAAM,EAAE,CAC5D,CAAC;QACN,CAAC;QACD,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,iBAAiB;IACjB,MAAM,IAAI,WAAW,CACjB,+BAA+B;UAC7B,yDAAyD;UACzD,sDAAsD;UACtD,uBAAuB;UACvB,+DAA+D,CACpE,CAAC;AACN,CAAC"}

package/dist/catalog/build-catalog.d.ts

@@ -0,0 +1,63 @@
+/**
+ * packages/mcp/src/catalog/build-catalog.ts — net-new (Slice 0b Task 12).
+ *
+ * Builds the machine-readable tool catalogue (SSOT for the PHP-served MCP
+ * surface). Modelled on API Mapper's
+ * `packages/apimapper-mcp/src/catalog/build-catalog.ts`, adapted to yt-builder's
+ * `buildAllTools(pool)` entrypoint:
+ *
+ *  - yt-builder's tools carry `inputSchema` as a RAW Zod shape (ZodRawShape,
+ *    no `_zod` marker), so `toJsonSchema` always takes the raw-shape branch
+ *    (`z.object(inputSchema)`).
+ *  - `tier` is derived per-name from the gateway essentials lists
+ *    (`isEssential || isDirectTopLevel` ⇒ essential, else advanced). There is
+ *    NO separate advanced registry to query.
+ *  - The 32 catalogued tools are exactly what `buildAllTools` returns; the two
+ *    top-level gateways are registered at server level (server.ts), not here.
+ *
+ * @license MIT
+ */
+/**
+ * Convert a tool inputSchema to JSON Schema. yt-builder tools yield a RAW Zod
+ * shape (ZodRawShape) — the `_zod` guard keeps this a faithful port of the
+ * API Mapper utility, but for this server the raw-shape branch
+ * (`z.object(inputSchema)`) is the one that always fires. Native
+ * `z.toJSONSchema` (zod 4).
+ */
+export declare function toJsonSchema(inputSchema: unknown): object;
+/**
+ * Post-process a generated JSON Schema for MCP-client compatibility + semantic
+ * correctness, recursively at EVERY schema node. Two structural fixes:
+ *
+ *  A1 (#4): drop from a node's `required` array any property that carries a
+ *  `default`. Zod `.default()` lands the key in `required` (a zod4 toJSONSchema
+ *  quirk), but a field WITH a default is semantically OPTIONAL — advertising it
+ *  as required makes a strict client (and the PHP gateway validator) reject a
+ *  call that legitimately omits it.
+ *
+ *  A2 (#1): replace an EMPTY-object `additionalProperties: {}` (what
+ *  z.record(z.string(), z.unknown()) emits) with `true`. The Anthropic client
+ *  rejects an empty `{}` schema for additionalProperties; `true` is the
+ *  faithful "any value" equivalent. A boolean `false`
+ *  (z.object().strict()) is left untouched.
+ *
+ * Recurses through every schema-bearing position zod4 emits: `properties`
+ * values, `items` (object or tuple array), an object-valued
+ * `additionalProperties`, and the `oneOf`/`anyOf`/`allOf`/`prefixItems` branch
+ * arrays.
+ */
+export declare function normalizeJsonSchema(node: unknown): void;
+export interface CatalogTool {
+    name: string;
+    description: string;
+    jsonSchema: object;
+    annotations: Record<string, unknown>;
+    tier: 'essential' | 'advanced';
+}
+export interface Catalog {
+    version: string;
+    generatedFrom: 'zod';
+    tools: CatalogTool[];
+}
+export declare function buildCatalog(): Promise<Catalog>;
+//# sourceMappingURL=build-catalog.d.ts.map

package/dist/catalog/build-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-catalog.d.ts","sourceRoot":"","sources":["../../src/catalog/build-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AASH;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,OAAO,GAAG,MAAM,CAezD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CA+CvD;AAED,MAAM,WAAW,WAAW;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,EAAE,WAAW,GAAG,UAAU,CAAC;CAClC;AACD,MAAM,WAAW,OAAO;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,KAAK,CAAC;IACrB,KAAK,EAAE,WAAW,EAAE,CAAC;CACxB;AA6BD,wBAAsB,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,CAiBrD"}

package/dist/catalog/build-catalog.js

@@ -0,0 +1,166 @@
+/**
+ * packages/mcp/src/catalog/build-catalog.ts — net-new (Slice 0b Task 12).
+ *
+ * Builds the machine-readable tool catalogue (SSOT for the PHP-served MCP
+ * surface). Modelled on API Mapper's
+ * `packages/apimapper-mcp/src/catalog/build-catalog.ts`, adapted to yt-builder's
+ * `buildAllTools(pool)` entrypoint:
+ *
+ *  - yt-builder's tools carry `inputSchema` as a RAW Zod shape (ZodRawShape,
+ *    no `_zod` marker), so `toJsonSchema` always takes the raw-shape branch
+ *    (`z.object(inputSchema)`).
+ *  - `tier` is derived per-name from the gateway essentials lists
+ *    (`isEssential || isDirectTopLevel` ⇒ essential, else advanced). There is
+ *    NO separate advanced registry to query.
+ *  - The 32 catalogued tools are exactly what `buildAllTools` returns; the two
+ *    top-level gateways are registered at server level (server.ts), not here.
+ *
+ * @license MIT
+ */
+import { z } from 'zod';
+import { buildAllTools } from '../tools/index.js';
+import { isEssential, isDirectTopLevel } from '../gateway/essentials.js';
+import { SiteRegistry } from '../sites/registry.js';
+import { ClientPool } from '../sites/client-pool.js';
+import { PlainSecretResolver } from '../sites/secret-resolver.js';
+/**
+ * Convert a tool inputSchema to JSON Schema. yt-builder tools yield a RAW Zod
+ * shape (ZodRawShape) — the `_zod` guard keeps this a faithful port of the
+ * API Mapper utility, but for this server the raw-shape branch
+ * (`z.object(inputSchema)`) is the one that always fires. Native
+ * `z.toJSONSchema` (zod 4).
+ */
+export function toJsonSchema(inputSchema) {
+    try {
+        if (inputSchema && typeof inputSchema === 'object') {
+            const isZodObject = '_zod' in inputSchema;
+            const schema = isZodObject
+                ? inputSchema
+                : z.object(inputSchema);
+            const json = z.toJSONSchema(schema);
+            normalizeJsonSchema(json);
+            return json;
+        }
+    }
+    catch {
+        /* malformed/unsupported shape → safe fallback */
+    }
+    return { type: 'object' };
+}
+/**
+ * Post-process a generated JSON Schema for MCP-client compatibility + semantic
+ * correctness, recursively at EVERY schema node. Two structural fixes:
+ *
+ *  A1 (#4): drop from a node's `required` array any property that carries a
+ *  `default`. Zod `.default()` lands the key in `required` (a zod4 toJSONSchema
+ *  quirk), but a field WITH a default is semantically OPTIONAL — advertising it
+ *  as required makes a strict client (and the PHP gateway validator) reject a
+ *  call that legitimately omits it.
+ *
+ *  A2 (#1): replace an EMPTY-object `additionalProperties: {}` (what
+ *  z.record(z.string(), z.unknown()) emits) with `true`. The Anthropic client
+ *  rejects an empty `{}` schema for additionalProperties; `true` is the
+ *  faithful "any value" equivalent. A boolean `false`
+ *  (z.object().strict()) is left untouched.
+ *
+ * Recurses through every schema-bearing position zod4 emits: `properties`
+ * values, `items` (object or tuple array), an object-valued
+ * `additionalProperties`, and the `oneOf`/`anyOf`/`allOf`/`prefixItems` branch
+ * arrays.
+ */
+export function normalizeJsonSchema(node) {
+    if (Array.isArray(node)) {
+        for (const child of node)
+            normalizeJsonSchema(child);
+        return;
+    }
+    if (!node || typeof node !== 'object')
+        return;
+    const obj = node;
+    // A2: empty-object additionalProperties → true (recurse into a non-empty one).
+    if ('additionalProperties' in obj) {
+        const ap = obj.additionalProperties;
+        if (ap &&
+            typeof ap === 'object' &&
+            !Array.isArray(ap) &&
+            Object.keys(ap).length === 0) {
+            obj.additionalProperties = true;
+        }
+        else {
+            normalizeJsonSchema(ap);
+        }
+    }
+    // A1: drop default-bearing keys from THIS node's `required`.
+    const props = obj.properties;
+    if (Array.isArray(obj.required) && props && typeof props === 'object') {
+        const propMap = props;
+        const kept = obj.required.filter((key) => {
+            if (typeof key !== 'string')
+                return true;
+            const p = propMap[key];
+            return !(p && typeof p === 'object' && 'default' in p);
+        });
+        // An emptied required array is dropped (zod itself omits an empty `required`).
+        if (kept.length === 0)
+            delete obj.required;
+        else
+            obj.required = kept;
+    }
+    // Recurse into the standard schema-bearing positions.
+    if (props && typeof props === 'object') {
+        for (const v of Object.values(props)) {
+            normalizeJsonSchema(v);
+        }
+    }
+    if ('items' in obj)
+        normalizeJsonSchema(obj.items);
+    for (const kw of ['oneOf', 'anyOf', 'allOf', 'prefixItems']) {
+        if (kw in obj)
+            normalizeJsonSchema(obj[kw]);
+    }
+}
+/**
+ * One-site, in-memory, zero-IO {@link ClientPool}. Mirrors the stub
+ * `scripts/extract-tools.mjs` wires (a single `wordpress` site with an inline
+ * stub bearer), but importing the classes from `src/sites/*` rather than the
+ * compiled `dist/index.js` barrel. `buildAllTools` only reads `pool.registry`
+ * for tool registration and never resolves a bearer or hits the network at
+ * catalogue-build time.
+ */
+function stubPool() {
+    const stubFile = {
+        schema_version: 1,
+        default_site_id: 'build-catalog-stub',
+        sites: [
+            {
+                site_id: 'build-catalog-stub',
+                url: 'https://example.com',
+                platform: 'wordpress',
+                bearer: 'build-catalog-stub',
+                is_default: true,
+            },
+        ],
+    };
+    const registry = new SiteRegistry(stubFile);
+    const resolver = new PlainSecretResolver();
+    return new ClientPool(registry, resolver);
+}
+export async function buildCatalog() {
+    const tools = buildAllTools(stubPool()); // flat AnyToolDefinition[] — 32 entries
+    const catalogTools = tools.map((t) => ({
+        name: t.name,
+        description: t.description ?? '',
+        jsonSchema: toJsonSchema(t.inputSchema),
+        annotations: t.annotations ?? {},
+        tier: isEssential(t.name) || isDirectTopLevel(t.name) ? 'essential' : 'advanced',
+    }));
+    if (catalogTools.length === 0) {
+        throw new Error('buildCatalog produced 0 tools — registration likely failed');
+    }
+    return {
+        version: process.env.npm_package_version ?? '0.0.0',
+        generatedFrom: 'zod',
+        tools: catalogTools,
+    };
+}
+//# sourceMappingURL=build-catalog.js.map

package/dist/catalog/build-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-catalog.js","sourceRoot":"","sources":["../../src/catalog/build-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,WAAoB;IAC7C,IAAI,CAAC;QACD,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,MAAM,IAAK,WAAuC,CAAC;YACvE,MAAM,MAAM,GAAG,WAAW;gBACtB,CAAC,CAAE,WAA4B;gBAC/B,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAA4B,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,CAAW,CAAC;YAC9C,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,iDAAiD;IACrD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAa;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,KAAK,MAAM,KAAK,IAAI,IAAI;YAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO;IACX,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO;IAC9C,MAAM,GAAG,GAAG,IAA+B,CAAC;IAE5C,+EAA+E;IAC/E,IAAI,sBAAsB,IAAI,GAAG,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,GAAG,CAAC,oBAAoB,CAAC;QACpC,IACI,EAAE;YACF,OAAO,EAAE,KAAK,QAAQ;YACtB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,EAAY,CAAC,CAAC,MAAM,KAAK,CAAC,EACxC,CAAC;YACC,GAAG,CAAC,oBAAoB,GAAG,IAAI,CAAC;QACpC,CAAC;aAAM,CAAC;YACJ,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IAED,6DAA6D;IAC7D,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpE,MAAM,OAAO,GAAG,KAAgC,CAAC;QACjD,MAAM,IAAI,GAAI,GAAG,CAAC,QAAsB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YACpD,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACzC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,IAAK,CAAY,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;QACH,+EAA+E;QAC/E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC,QAAQ,CAAC;;YACtC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,sDAAsD;IACtD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC9D,mBAAmB,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;IACD,IAAI,OAAO,IAAI,GAAG;QAAE,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnD,KAAK,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,CAAU,EAAE,CAAC;QACnE,IAAI,EAAE,IAAI,GAAG;YAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC;AACL,CAAC;AAeD;;;;;;;GAOG;AACH,SAAS,QAAQ;IACb,MAAM,QAAQ,GAAG;QACb,cAAc,EAAE,CAAU;QAC1B,eAAe,EAAE,oBAAoB;QACrC,KAAK,EAAE;YACH;gBACI,OAAO,EAAE,oBAAoB;gBAC7B,GAAG,EAAE,qBAAqB;gBAC1B,QAAQ,EAAE,WAAoB;gBAC9B,MAAM,EAAE,oBAAoB;gBAC5B,UAAU,EAAE,IAAI;aACnB;SACJ;KACJ,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAC3C,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAC9B,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,wCAAwC;IACjF,MAAM,YAAY,GAAkB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;QAChC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;QACvC,WAAW,EAAG,CAAC,CAAC,WAAuC,IAAI,EAAE;QAC7D,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;KACnF,CAAC,CAAC,CAAC;IACJ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO;QACH,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO;QACnD,aAAa,EAAE,KAAK;QACpB,KAAK,EAAE,YAAY;KACtB,CAAC;AACN,CAAC"}

package/dist/cli/invocation-decision.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Pure decision core for the `bin/yt-builder-mcp.js` dispatcher.
+ *
+ * The bin is a thin JS shim (not type-checked, not linted) so the
+ * branching logic that decides what a given invocation should DO lives
+ * here, in a typed + tested + covered module. The shim imports the
+ * compiled `dist/cli/invocation-decision.js` and acts on the verdict.
+ *
+ * Three outcomes:
+ *   - 'cli'    → a known subcommand (setup / uninstall / add-site / …):
+ *                forward argv to the setup-cli dispatcher.
+ *   - 'hint'   → no or unknown subcommand AND stdin is an interactive
+ *                TTY (a human ran the bin directly): print the
+ *                discoverability hint to stderr and exit 0, rather than
+ *                silently blocking on the stdio read loop ("hang").
+ *   - 'server' → no or unknown subcommand AND stdin is NOT a TTY (a real
+ *                MCP client piping JSON-RPC over stdin): boot the stdio
+ *                server. This path MUST stay byte-for-byte equivalent to
+ *                the pre-hint behaviour — the guard is strict on isTTY so
+ *                the client path is never diverted.
+ *
+ * @license MIT
+ */
+/**
+ * Canonical set of subcommands handled by the setup-cli dispatcher.
+ *
+ * Mirrors `CLI_SUBCOMMANDS` in `bin/yt-builder-mcp.js`. Kept frozen so a
+ * consumer cannot mutate the shared decision surface at runtime.
+ */
+export declare const KNOWN_SUBCOMMANDS: ReadonlySet<string>;
+/**
+ * Discoverability hint printed to stderr when a human runs the bin
+ * directly (no/unknown subcommand at an interactive TTY). stderr, not
+ * stdout, so it never contaminates a JSON-RPC frame if redirected.
+ */
+export declare const BARE_INVOCATION_HINT: string;
+/** What the bin should do for a given invocation. */
+export type InvocationAction = 'cli' | 'hint' | 'server';
+/**
+ * True when `sub` is a subcommand the setup-cli dispatcher handles.
+ * `undefined` (no argument) is never a known subcommand.
+ */
+export declare function isKnownSubcommand(sub: string | undefined): boolean;
+/**
+ * Decide the bin action from the first CLI argument and whether stdin is
+ * an interactive TTY.
+ *
+ * @param subcommand  argv[2], or undefined when no argument was passed.
+ * @param stdinIsTTY  `process.stdin.isTTY` — `true` only for an
+ *                    interactive human terminal; `false`/`undefined` for
+ *                    a piped stream (which is how every MCP client runs
+ *                    the server). The guard is STRICT: only `=== true`
+ *                    yields the hint, so the MCP-client path is never
+ *                    diverted.
+ */
+export declare function decideInvocation(subcommand: string | undefined, stdinIsTTY: boolean | undefined): InvocationAction;
+//# sourceMappingURL=invocation-decision.d.ts.map

package/dist/cli/invocation-decision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation-decision.d.ts","sourceRoot":"","sources":["../../src/cli/invocation-decision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAoBjD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAKxB,CAAC;AAEZ,qDAAqD;AACrD,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEzD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAElE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC5B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,UAAU,EAAE,OAAO,GAAG,SAAS,GAChC,gBAAgB,CAMlB"}

package/dist/cli/invocation-decision.js

@@ -0,0 +1,86 @@
+/**
+ * Pure decision core for the `bin/yt-builder-mcp.js` dispatcher.
+ *
+ * The bin is a thin JS shim (not type-checked, not linted) so the
+ * branching logic that decides what a given invocation should DO lives
+ * here, in a typed + tested + covered module. The shim imports the
+ * compiled `dist/cli/invocation-decision.js` and acts on the verdict.
+ *
+ * Three outcomes:
+ *   - 'cli'    → a known subcommand (setup / uninstall / add-site / …):
+ *                forward argv to the setup-cli dispatcher.
+ *   - 'hint'   → no or unknown subcommand AND stdin is an interactive
+ *                TTY (a human ran the bin directly): print the
+ *                discoverability hint to stderr and exit 0, rather than
+ *                silently blocking on the stdio read loop ("hang").
+ *   - 'server' → no or unknown subcommand AND stdin is NOT a TTY (a real
+ *                MCP client piping JSON-RPC over stdin): boot the stdio
+ *                server. This path MUST stay byte-for-byte equivalent to
+ *                the pre-hint behaviour — the guard is strict on isTTY so
+ *                the client path is never diverted.
+ *
+ * @license MIT
+ */
+/**
+ * Canonical set of subcommands handled by the setup-cli dispatcher.
+ *
+ * Mirrors `CLI_SUBCOMMANDS` in `bin/yt-builder-mcp.js`. Kept frozen so a
+ * consumer cannot mutate the shared decision surface at runtime.
+ */
+export const KNOWN_SUBCOMMANDS = Object.freeze(new Set([
+    'setup',
+    'install-skill',
+    'install',
+    // Reverse-of-setup: remove our server entry + optional skill.
+    'uninstall',
+    'remove',
+    // W9 multi-site CLI subcommands.
+    'add-site',
+    'list-sites',
+    'remove-site',
+    'set-default',
+    'test-site',
+    'help',
+    '--help',
+    '-h',
+    '--version',
+    '-v',
+]));
+/**
+ * Discoverability hint printed to stderr when a human runs the bin
+ * directly (no/unknown subcommand at an interactive TTY). stderr, not
+ * stdout, so it never contaminates a JSON-RPC frame if redirected.
+ */
+export const BARE_INVOCATION_HINT = [
+    'This is the YT Builder MCP server (stdio), normally launched by your',
+    "AI client, not run directly — that's why it waits.",
+    'Did you mean `npx -y @wootsup/yt-builder-mcp setup`?',
+    'See also: uninstall, help.',
+].join(' ');
+/**
+ * True when `sub` is a subcommand the setup-cli dispatcher handles.
+ * `undefined` (no argument) is never a known subcommand.
+ */
+export function isKnownSubcommand(sub) {
+    return sub !== undefined && KNOWN_SUBCOMMANDS.has(sub);
+}
+/**
+ * Decide the bin action from the first CLI argument and whether stdin is
+ * an interactive TTY.
+ *
+ * @param subcommand  argv[2], or undefined when no argument was passed.
+ * @param stdinIsTTY  `process.stdin.isTTY` — `true` only for an
+ *                    interactive human terminal; `false`/`undefined` for
+ *                    a piped stream (which is how every MCP client runs
+ *                    the server). The guard is STRICT: only `=== true`
+ *                    yields the hint, so the MCP-client path is never
+ *                    diverted.
+ */
+export function decideInvocation(subcommand, stdinIsTTY) {
+    if (isKnownSubcommand(subcommand)) {
+        return 'cli';
+    }
+    // No / unknown subcommand. Only an interactive human gets the hint.
+    return stdinIsTTY === true ? 'hint' : 'server';
+}
+//# sourceMappingURL=invocation-decision.js.map