@wootsup/yt-builder-mcp 1.11.0 → 2.0.0

package/dist/sites/op-inject.js

@@ -0,0 +1,131 @@
+import { execFile as nodeExecFile } from 'node:child_process';
+import { mapOpExecError, OP_TIMEOUT_MS, resolveOpBinary, SecretResolverError, } from './secret-resolver.js';
+import { OP_REF_REGEX } from './schema.js';
+const defaultExecFileWithStdin = (file, args, options, callback) => {
+    const child = nodeExecFile(file, args, { ...options, encoding: 'utf8' }, (err, stdout, stderr) => {
+        callback(err, stdout, stderr);
+    });
+    return { stdin: child.stdin };
+};
+export class ResolveManyResult extends Map {
+    errors = new Map();
+}
+export async function resolveMany(refs, exec = defaultExecFileWithStdin, opts = {}) {
+    const result = new ResolveManyResult();
+    const opBinary = opts.opBinary ?? resolveOpBinary();
+    const timeoutMs = opts.timeoutMs ?? OP_TIMEOUT_MS;
+    const seen = new Set();
+    const validRefs = [];
+    for (const ref of refs) {
+        if (seen.has(ref))
+            continue;
+        seen.add(ref);
+        if (!OP_REF_REGEX.test(ref)) {
+            result.errors.set(ref, new SecretResolverError('OP_REF_INVALID', `'${ref}' has an invalid shape — must match op://<vault>/<item>/<field>.`));
+            continue;
+        }
+        validRefs.push(ref);
+    }
+    if (validRefs.length === 0)
+        return result;
+    const bundled = await tryInject(validRefs, exec, opBinary, timeoutMs);
+    if (bundled.kind === 'ok') {
+        for (const [ref, value] of bundled.values)
+            result.set(ref, value);
+        return result;
+    }
+    if (bundled.kind === 'timeout') {
+        for (const ref of validRefs) {
+            result.errors.set(ref, new SecretResolverError('OP_TIMEOUT', `op inject exceeded ${timeoutMs}ms resolving ${validRefs.length} ref(s) — `
+                + 'is 1Password CLI hung on a biometric prompt?'));
+        }
+        return result;
+    }
+    for (const ref of validRefs) {
+        try {
+            const value = await opReadOne(ref, exec, opBinary, timeoutMs);
+            result.set(ref, value);
+        }
+        catch (err) {
+            result.errors.set(ref, err instanceof SecretResolverError
+                ? err
+                : new SecretResolverError('OP_EXEC_FAILED', String(err)));
+        }
+    }
+    return result;
+}
+function tryInject(refs, exec, opBinary, timeoutMs) {
+    return new Promise((resolveP) => {
+        let settled = false;
+        const timer = setTimeout(() => {
+            if (settled)
+                return;
+            settled = true;
+            resolveP({ kind: 'timeout' });
+        }, timeoutMs);
+        if (typeof timer.unref === 'function')
+            timer.unref();
+        const child = exec(opBinary, ['inject'], { timeout: timeoutMs, maxBuffer: 1024 * 256 }, (err, stdout) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            if (err) {
+                resolveP({ kind: 'failed' });
+                return;
+            }
+            const parsed = parseInjectOutput(stdout, refs);
+            resolveP(parsed === null ? { kind: 'failed' } : { kind: 'ok', values: parsed });
+        });
+        child.stdin?.write(buildTemplate(refs));
+        child.stdin?.end();
+    });
+}
+function buildTemplate(refs) {
+    return refs.map((ref, i) => `K${i}={{ ${ref} }}`).join('\n');
+}
+function parseInjectOutput(stdout, refs) {
+    const lines = stdout.split('\n').filter((l) => l.length > 0);
+    if (lines.length !== refs.length)
+        return null;
+    const out = new Map();
+    for (const [i, ref] of refs.entries()) {
+        const line = lines[i] ?? '';
+        const eq = line.indexOf('=');
+        const value = (eq === -1 ? line : line.slice(eq + 1)).trim();
+        if (value.length === 0)
+            return null;
+        out.set(ref, value);
+    }
+    return out;
+}
+function opReadOne(ref, exec, opBinary, timeoutMs) {
+    return new Promise((resolveP, rejectP) => {
+        let settled = false;
+        const timer = setTimeout(() => {
+            if (settled)
+                return;
+            settled = true;
+            rejectP(new SecretResolverError('OP_TIMEOUT', `op read '${ref}' exceeded ${timeoutMs}ms — is 1Password CLI hung on a biometric prompt?`));
+        }, timeoutMs);
+        if (typeof timer.unref === 'function')
+            timer.unref();
+        exec(opBinary, ['read', ref], { timeout: timeoutMs, maxBuffer: 1024 * 64 }, (err, stdout, stderr) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            if (err) {
+                rejectP(mapOpExecError(err, stderr, ref));
+                return;
+            }
+            const value = stdout.trim();
+            if (value.length === 0) {
+                rejectP(new SecretResolverError('OP_EMPTY_OUTPUT', `op returned empty output for '${ref}' — verify the field exists and is non-empty.`));
+                return;
+            }
+            resolveP(value);
+        });
+    });
+}
+//# sourceMappingURL=op-inject.js.map

package/dist/sites/op-inject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"op-inject.js","sourceRoot":"","sources":["../../src/sites/op-inject.ts"],"names":[],"mappings":"AAqDA,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EACH,cAAc,EACd,aAAa,EACb,eAAe,EACf,mBAAmB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA6B3C,MAAM,wBAAwB,GAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;IAClF,MAAM,KAAK,GAAG,YAAY,CACtB,IAAI,EACJ,IAAgB,EAChB,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAChC,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACpB,QAAQ,CACJ,GAAmE,EACnE,MAAM,EACN,MAAM,CACT,CAAC;IACN,CAAC,CACJ,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AAClC,CAAC,CAAC;AAsBF,MAAM,OAAO,iBAAkB,SAAQ,GAAmB;IAC7C,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;CAC5D;AAuBD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC7B,IAAuB,EACvB,OAA0B,wBAAwB,EAClD,OAAoE,EAAE;IAEtE,MAAM,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,EAAE,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC;IAIlD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,EACH,IAAI,mBAAmB,CACnB,gBAAgB,EAChB,IAAI,GAAG,kEAAkE,CAC5E,CACJ,CAAC;YACF,SAAS;QACb,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAG1C,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClE,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAU7B,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,EACH,IAAI,mBAAmB,CACnB,YAAY,EACZ,sBAAsB,SAAS,gBAAgB,SAAS,CAAC,MAAM,YAAY;kBACrE,8CAA8C,CACvD,CACJ,CAAC;QACN,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IASD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC9D,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,EACH,GAAG,YAAY,mBAAmB;gBAC9B,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAC/D,CAAC;QACN,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAeD,SAAS,SAAS,CACd,IAAuB,EACvB,IAAuB,EACvB,QAAgB,EAChB,SAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAClC,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAErD,MAAM,KAAK,GAAG,IAAI,CACd,QAAQ,EACR,CAAC,QAAQ,CAAC,EACV,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,GAAG,GAAG,EAAE,EAC7C,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YACZ,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,GAAG,EAAE,CAAC;gBACN,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC7B,OAAO;YACX,CAAC;YACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/C,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACpF,CAAC,CACJ,CAAC;QAKF,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC;AAQD,SAAS,aAAa,CAAC,IAAuB;IAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAYD,SAAS,iBAAiB,CACtB,MAAc,EACd,IAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAE9C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAQD,SAAS,SAAS,CACd,GAAW,EACX,IAAuB,EACvB,QAAgB,EAChB,SAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CACH,IAAI,mBAAmB,CACnB,YAAY,EACZ,YAAY,GAAG,cAAc,SAAS,mDAAmD,CAC5F,CACJ,CAAC;QACN,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAErD,IAAI,CACA,QAAQ,EACR,CAAC,MAAM,EAAE,GAAG,CAAC,EACb,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAC5C,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACpB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,IAAI,GAAG,EAAE,CAAC;gBACN,OAAO,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC1C,OAAO;YACX,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,OAAO,CACH,IAAI,mBAAmB,CACnB,iBAAiB,EACjB,iCAAiC,GAAG,+CAA+C,CACtF,CACJ,CAAC;gBACF,OAAO;YACX,CAAC;YACD,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC,CACJ,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/sites/paths.d.ts

@@ -1,21 +1,2 @@
-/**
- * W1 — Sites-Storage Foundation: default on-disk path resolver.
- *
- * Resolution order:
- *  1. `$XDG_CONFIG_HOME/yt-builder-mcp/sites.json` (XDG Base-Dir spec)
- *  2. `$HOME/.config/yt-builder-mcp/sites.json` (XDG fallback)
- *  3. `os.tmpdir()/yt-builder-mcp/sites.json` + stderr warning (last
- *     resort — used in CI / containers where HOME may be unset).
- *
- * The W2/W3 layer never touches paths directly — callers ask this module
- * for the canonical location and pass the resolved string to the store.
- *
- * @license MIT
- */
-/**
- * Pure environment lookup so tests can inject a process-env-like object
- * without mutating `process.env`. Returns the path that the load/save
- * layer should target.
- */
 export declare function defaultSitesFilePath(env?: NodeJS.ProcessEnv, log?: (msg: string) => void): string;
 //# sourceMappingURL=paths.d.ts.map

package/dist/sites/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/sites/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH;;;;GAIG;AACH,wBAAgB,oBAAoB,CAChC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,GAAG,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAqD,GAC5E,MAAM,CAgBR"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/sites/paths.ts"],"names":[],"mappings":"AAuBA,wBAAgB,oBAAoB,CAChC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,GAAG,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAqD,GAC5E,MAAM,CAgBR"}

package/dist/sites/paths.js

@@ -1,24 +1,5 @@
-/**
- * W1 — Sites-Storage Foundation: default on-disk path resolver.
- *
- * Resolution order:
- *  1. `$XDG_CONFIG_HOME/yt-builder-mcp/sites.json` (XDG Base-Dir spec)
- *  2. `$HOME/.config/yt-builder-mcp/sites.json` (XDG fallback)
- *  3. `os.tmpdir()/yt-builder-mcp/sites.json` + stderr warning (last
- *     resort — used in CI / containers where HOME may be unset).
- *
- * The W2/W3 layer never touches paths directly — callers ask this module
- * for the canonical location and pass the resolved string to the store.
- *
- * @license MIT
- */
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
-/**
- * Pure environment lookup so tests can inject a process-env-like object
- * without mutating `process.env`. Returns the path that the load/save
- * layer should target.
- */
 export function defaultSitesFilePath(env = process.env, log = (msg) => { process.stderr.write(msg + '\n'); }) {
     const xdg = env.XDG_CONFIG_HOME;
     if (xdg !== undefined && xdg.length > 0) {

package/dist/sites/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/sites/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAChC,MAAyB,OAAO,CAAC,GAAG,EACpC,MAA6B,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAE3E,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC;IAChC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,GAAG,CACC,mEAAmE;QACnE,gCAAgC,GAAG,8BAA8B;QACjE,iEAAiE,CACpE,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;AACrD,CAAC"}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/sites/paths.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAOjC,MAAM,UAAU,oBAAoB,CAChC,MAAyB,OAAO,CAAC,GAAG,EACpC,MAA6B,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAE3E,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC;IAChC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,GAAG,CACC,mEAAmE;QACnE,gCAAgC,GAAG,8BAA8B;QACjE,iEAAiE,CACpE,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;AACrD,CAAC"}

package/dist/sites/probe.d.ts

@@ -1,40 +1,4 @@
-/**
- * W12-R1.2 — shared site-probe helper.
- *
- * Both `sites/tools/sites-test.ts` (MCP tool surface) AND
- * `sites/cli/test-site.ts` (CLI surface) need to run the same
- * `/health` (no auth) + `/etag` (auth) parallel probe and classify
- * the outcome into a `{plugin_reachable, bearer_valid, etag_received,
- * summary}` shape. Pre-W12 the two call sites duplicated the
- * Promise.allSettled + RestError branching twice (~40 LoC drift
- * surface).
- *
- * This module is the single source of truth for that probe. The two
- * call sites map the result into their respective output envelopes
- * (toolkit detail-result for MCP, plain text lines for CLI) but never
- * re-implement the probe-routing logic.
- *
- * Failure-mode mapping (audit-aligned):
- *   - /health rejects, /etag rejects   → plugin unreachable
- *   - /health rejects, /etag 401/403   → plugin reachable (etag replied),
- *                                        bearer rejected
- *   - /health rejects, /etag other     → plugin unreachable
- *                                        (bearer_error still surfaced)
- *   - /health ok,      /etag rejects   → plugin reachable, bearer rejected
- *   - /health ok,      /etag ok        → green
- *
- * Never throws on probe failure — those land in the result fields.
- * Throws only on truly unexpected programmer errors (e.g. the client
- * arg is not a RestClient).
- *
- * @license MIT
- */
 import type { RestClient } from '../client.js';
-/**
- * Probe outcome shape consumed by both the MCP tool and the CLI. Optional
- * HTTP status codes are surfaced when the probe yielded a `RestError`
- * (helpful for operators triaging 401 vs 404 vs 500).
- */
 export interface ProbeResult {
     readonly plugin_reachable: boolean;
     readonly bearer_valid: boolean;
@@ -44,17 +8,7 @@ export interface ProbeResult {
     readonly bearer_error?: string;
     readonly http_status_health?: number;
     readonly http_status_etag?: number;
+    readonly plugin_version?: string;
 }
-/**
- * Run the canonical `/health` + `/etag` parallel probe against a
- * site-bound {@link RestClient}.
- *
- * `Promise.allSettled` so a thrown probe never short-circuits the
- * other — both legs always contribute to the final classification.
- *
- * The summary string is deterministic per `{plugin_reachable, bearer_valid}`
- * combination so customer-facing UX (CLI table, MCP detail-card) is
- * identical across the two surfaces.
- */
 export declare function probeSite(client: RestClient): Promise<ProbeResult>;
 //# sourceMappingURL=probe.d.ts.map

package/dist/sites/probe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../src/sites/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG/C;;;;GAIG;AACH,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAkExE"}
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../src/sites/probe.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAS/C,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IASnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CACpC;AAaD,wBAAsB,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAqExE"}

package/dist/sites/probe.js

@@ -1,46 +1,5 @@
-/**
- * W12-R1.2 — shared site-probe helper.
- *
- * Both `sites/tools/sites-test.ts` (MCP tool surface) AND
- * `sites/cli/test-site.ts` (CLI surface) need to run the same
- * `/health` (no auth) + `/etag` (auth) parallel probe and classify
- * the outcome into a `{plugin_reachable, bearer_valid, etag_received,
- * summary}` shape. Pre-W12 the two call sites duplicated the
- * Promise.allSettled + RestError branching twice (~40 LoC drift
- * surface).
- *
- * This module is the single source of truth for that probe. The two
- * call sites map the result into their respective output envelopes
- * (toolkit detail-result for MCP, plain text lines for CLI) but never
- * re-implement the probe-routing logic.
- *
- * Failure-mode mapping (audit-aligned):
- *   - /health rejects, /etag rejects   → plugin unreachable
- *   - /health rejects, /etag 401/403   → plugin reachable (etag replied),
- *                                        bearer rejected
- *   - /health rejects, /etag other     → plugin unreachable
- *                                        (bearer_error still surfaced)
- *   - /health ok,      /etag rejects   → plugin reachable, bearer rejected
- *   - /health ok,      /etag ok        → green
- *
- * Never throws on probe failure — those land in the result fields.
- * Throws only on truly unexpected programmer errors (e.g. the client
- * arg is not a RestClient).
- *
- * @license MIT
- */
 import { RestError } from '../errors.js';
-/**
- * Run the canonical `/health` + `/etag` parallel probe against a
- * site-bound {@link RestClient}.
- *
- * `Promise.allSettled` so a thrown probe never short-circuits the
- * other — both legs always contribute to the final classification.
- *
- * The summary string is deterministic per `{plugin_reachable, bearer_valid}`
- * combination so customer-facing UX (CLI table, MCP detail-card) is
- * identical across the two surfaces.
- */
+import { extractHealthPluginVersion } from '../health-response.js';
 export async function probeSite(client) {
     const [healthSettled, etagSettled] = await Promise.allSettled([
         client.get('/health'),
@@ -53,9 +12,10 @@ export async function probeSite(client) {
     let bearerError;
     let httpStatusHealth;
     let httpStatusEtag;
-    // /health leg — plain liveness probe (no auth required).
+    let pluginVersion;
     if (healthSettled.status === 'fulfilled') {
         pluginReachable = true;
+        pluginVersion = extractHealthPluginVersion(healthSettled.value);
     }
     else {
         const e = healthSettled.reason;
@@ -70,9 +30,6 @@ export async function probeSite(client) {
             pluginError = String(e);
         }
     }
-    // /etag leg — bearer-gated. 401/403 means the plugin DID respond
-    // and the auth check fired — so we can confidently flip
-    // plugin_reachable even if /health hasn't already.
     if (etagSettled.status === 'fulfilled') {
         bearerValid = true;
         etagReceived = true;
@@ -107,6 +64,7 @@ export async function probeSite(client) {
         ...(bearerError !== undefined ? { bearer_error: bearerError } : {}),
         ...(httpStatusHealth !== undefined ? { http_status_health: httpStatusHealth } : {}),
         ...(httpStatusEtag !== undefined ? { http_status_etag: httpStatusEtag } : {}),
+        ...(pluginVersion !== undefined ? { plugin_version: pluginVersion } : {}),
     };
 }
 //# sourceMappingURL=probe.js.map

package/dist/sites/probe.js.map

@@ -1 +1 @@
-{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../src/sites/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAkBzC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAkB;IAC9C,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;KACtB,CAAC,CAAC;IAEH,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,WAA+B,CAAC;IACpC,IAAI,WAA+B,CAAC;IACpC,IAAI,gBAAoC,CAAC;IACzC,IAAI,cAAkC,CAAC;IAEvC,yDAAyD;IACzD,IAAI,aAAa,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACvC,eAAe,GAAG,IAAI,CAAC;IAC3B,CAAC;SAAM,CAAC;QACJ,MAAM,CAAC,GAAY,aAAa,CAAC,MAAM,CAAC;QACxC,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC;YACzB,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;YAC5B,WAAW,GAAG,QAAQ,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3D,CAAC;aAAM,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;YAC5B,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC;QAC5B,CAAC;aAAM,CAAC;YACJ,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IAED,iEAAiE;IACjE,wDAAwD;IACxD,mDAAmD;IACnD,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACrC,WAAW,GAAG,IAAI,CAAC;QACnB,YAAY,GAAG,IAAI,CAAC;IACxB,CAAC;SAAM,CAAC;QACJ,MAAM,CAAC,GAAY,WAAW,CAAC,MAAM,CAAC;QACtC,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC;YACzB,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;YAC1B,WAAW,GAAG,QAAQ,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;YACvD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvC,eAAe,GAAG,IAAI,CAAC;YAC3B,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;YAC5B,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC;QAC5B,CAAC;aAAM,CAAC;YACJ,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,IAAI,WAAW;QAC1C,CAAC,CAAC,gDAAgD;QAClD,CAAC,CAAC,CAAC,eAAe;YACd,CAAC,CAAC,gGAAgG;YAClG,CAAC,CAAC,qGAAqG,CAAC;IAEhH,OAAO;QACH,gBAAgB,EAAE,eAAe;QACjC,YAAY,EAAE,WAAW;QACzB,aAAa,EAAE,YAAY;QAC3B,OAAO;QACP,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC;AACN,CAAC"}
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../src/sites/probe.ts"],"names":[],"mappings":"AAiCA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAsCnE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAkB;IAC9C,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;KACtB,CAAC,CAAC;IAEH,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,WAA+B,CAAC;IACpC,IAAI,WAA+B,CAAC;IACpC,IAAI,gBAAoC,CAAC;IACzC,IAAI,cAAkC,CAAC;IACvC,IAAI,aAAiC,CAAC;IAGtC,IAAI,aAAa,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACvC,eAAe,GAAG,IAAI,CAAC;QACvB,aAAa,GAAG,0BAA0B,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACJ,MAAM,CAAC,GAAY,aAAa,CAAC,MAAM,CAAC;QACxC,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC;YACzB,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;YAC5B,WAAW,GAAG,QAAQ,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3D,CAAC;aAAM,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;YAC5B,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC;QAC5B,CAAC;aAAM,CAAC;YACJ,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IAKD,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACrC,WAAW,GAAG,IAAI,CAAC;QACnB,YAAY,GAAG,IAAI,CAAC;IACxB,CAAC;SAAM,CAAC;QACJ,MAAM,CAAC,GAAY,WAAW,CAAC,MAAM,CAAC;QACtC,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC;YACzB,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;YAC1B,WAAW,GAAG,QAAQ,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;YACvD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvC,eAAe,GAAG,IAAI,CAAC;YAC3B,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;YAC5B,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC;QAC5B,CAAC;aAAM,CAAC;YACJ,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,IAAI,WAAW;QAC1C,CAAC,CAAC,gDAAgD;QAClD,CAAC,CAAC,CAAC,eAAe;YACd,CAAC,CAAC,gGAAgG;YAClG,CAAC,CAAC,qGAAqG,CAAC;IAEhH,OAAO;QACH,gBAAgB,EAAE,eAAe;QACjC,YAAY,EAAE,WAAW;QACzB,aAAa,EAAE,YAAY;QAC3B,OAAO;QACP,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC;AACN,CAAC"}

package/dist/sites/registry.d.ts

@@ -1,45 +1,5 @@
-/**
- * W3 — Site Registry + Platform-Cache.
- *
- * Wraps a parsed {@link SitesFileT} and provides:
- *  - O(1) {@link SiteRegistry.get|get(site_id)} lookup.
- *  - Insertion-order {@link SiteRegistry.listIds|listIds()} for stable
- *    UX in the W7 `sites_list` tool.
- *  - {@link SiteRegistry.defaultSiteId|defaultSiteId()} that respects
- *    the explicit `default_site_id` first, then falls back to the
- *    flagged `is_default:true` entry, then `null`. Auto-promotion of a
- *    lone site to default is intentionally NOT done here — that policy
- *    belongs to the W4 caller layer.
- *  - {@link SiteRegistry.platformFor|platformFor(site_id)} that
- *    memoises the resolved {@link Platform} via a
- *    `Map<string, Promise<Platform>>`. Storing the **Promise** (not the
- *    resolved value) is load-bearing: N parallel first-time callers
- *    share the SAME probe (`platformForUrlAsync`) instead of racing N
- *    probes against the same site origin. The plan §W3 calls this out
- *    explicitly ("Promise-cache, not just result-cache").
- *  - {@link SiteRegistry.listForDisplay|listForDisplay()} that surfaces
- *    a tabular view for the upcoming W7 sites_list tool. The
- *    `platform_resolved` field is intentionally only populated AFTER
- *    {@link SiteRegistry.platformFor|platformFor()} has been called for
- *    that site_id — listForDisplay() must NEVER trigger a probe on its
- *    own (that would defeat the "no surprise network calls in
- *    list-tools" contract).
- *
- * @license MIT
- */
 import { type Platform, type PlatformKind } from '../platform/index.js';
 import type { SiteEntryT, SitesFileT } from './schema.js';
-/**
- * Display-side row used by the W7 `sites_list` tool. `bearer_source` is
- * derived from whether the underlying {@link SiteEntryT} has `bearer`
- * (plain) or `bearer_ref` (1Password); the resolver itself is not
- * needed to compute this hint, so we can render the list without ever
- * invoking the 1Password CLI.
- *
- * `platform_resolved` is only set once {@link SiteRegistry.platformFor}
- * has run for that site_id at least once — it is a "peek" into the
- * memo cache, never a trigger for a new probe.
- */
 export interface SiteRowT {
     site_id: string;
     url: string;
@@ -49,34 +9,7 @@ export interface SiteRowT {
     label?: string;
     bearer_source: 'plain' | 'op';
 }
-/**
- * How a {@link ResolvedSite} was selected by {@link ClientPool.resolve}.
- *
- * F178 (2026-06-12): a stdio MCP server's active-site default is
- * PROCESS-WIDE — two concurrent clients of the SAME server share it, so
- * one client's `yootheme_builder_use_site` switch silently changes which
- * site the OTHER client targets when it omits `site_id`. Recording the
- * resolution source per-call lets the response envelope mark a call as
- * either ISOLATED (`explicit` — the caller passed `site_id`) or
- * INHERITED (`active_override` / `registry_default` — the caller relied
- * on the shared default). The envelope wrapper turns this into a visible
- * `· default` marker + `_meta.resolved_via` so the hazard is surfaced
- * rather than hidden.
- *
- *  - `explicit`         — an explicit `site_id` argument was supplied.
- *                         The call is isolated from concurrent switches.
- *  - `active_override`  — `site_id` was omitted and a runtime
- *                         `use_site` override was in effect.
- *  - `registry_default` — `site_id` was omitted and the registry's
- *                         configured default was used.
- */
 export type SiteResolutionSource = 'explicit' | 'active_override' | 'registry_default';
-/**
- * Caller-side projection of a registry entry, with the `Platform`
- * already resolved and the bearer-source flagged for downstream logs.
- * Reserved for future call-sites that want the fully-resolved bundle
- * in a single object — the tool builder layer will populate this.
- */
 export interface ResolvedSite {
     readonly id: string;
     readonly url: string;
@@ -84,89 +17,25 @@ export interface ResolvedSite {
     readonly isDefault: boolean;
     readonly label?: string;
     readonly bearerSource: 'plain' | 'op';
-    /**
-     * F178 — how this site was selected (explicit `site_id` vs the
-     * shared process-wide default/override). Optional so legacy test
-     * fixtures that synthesise a `ResolvedSite` literal stay valid; when
-     * absent the envelope wrapper treats the call as isolated (no
-     * default marker, no `resolved_via` noise).
-     */
     readonly resolvedVia?: SiteResolutionSource;
 }
-/**
- * Optional injection point for tests. Production callers should never
- * pass this — they get the default `platformForUrlAsync` from the
- * platform barrel, which itself does the runtime probe.
- */
 export interface SiteRegistryOptions {
     readonly platformForUrlAsync?: (url: string, hint?: PlatformKind) => Promise<Platform>;
+    readonly configProblem?: string | null;
+    readonly sitesAreSubstituted?: boolean;
 }
-/**
- * In-memory registry around a parsed sites file. NEVER mutates the
- * input `file`; all "writes" go through {@link saveSitesFile} on the
- * store side, which produces a fresh `SitesFileT` to wrap in a new
- * registry instance.
- */
 export declare class SiteRegistry {
     private readonly file;
-    /**
-     * Promise-memo for platform resolution. The KEY is the site_id;
-     * the VALUE is the in-flight or already-resolved Promise. Parallel
-     * callers for the same site_id all receive the same promise and
-     * therefore share the one probe.
-     */
     private readonly platformCache;
-    /**
-     * Sync-side mirror of `platformCache` that records the resolved
-     * `PlatformKind` once the probe completes. Powers
-     * {@link listForDisplay} without forcing it to await or to trigger
-     * a probe. Entries land here only AFTER the probe resolves
-     * successfully; rejected probes leave the entry absent.
-     */
     private readonly resolvedKinds;
     private readonly probe;
+    readonly configProblem: string | null;
+    readonly sitesAreSubstituted: boolean;
     constructor(file: SitesFileT, opts?: SiteRegistryOptions);
-    /**
-     * Returns the configured default site_id. Resolution order:
-     *   1. `file.default_site_id` if set AND points at an entry that
-     *      actually exists in `file.sites`.
-     *   2. The first `is_default:true` entry (W1 schema guarantees at
-     *      most one).
-     *   3. `null` — no default; the W4 caller layer decides whether
-     *      to auto-promote a lone site.
-     */
     defaultSiteId(): string | null;
-    /**
-     * site_id list in insertion order (the order they appear in
-     * `file.sites`). Stable across registry rebuilds because the
-     * store preserves array order on save.
-     */
     listIds(): readonly string[];
-    /**
-     * Returns the raw entry for a site_id, or `null` when unknown.
-     * O(n) on the entry count — fine for the realistic upper bound
-     * (~100 sites per customer).
-     */
     get(siteId: string): SiteEntryT | null;
-    /**
-     * Resolves the {@link Platform} for `siteId` and memoises the
-     * Promise. Subsequent calls (including ones still in-flight)
-     * return the same Promise — exactly one probe per site_id, even
-     * across N parallel callers.
-     *
-     * @throws Error when the site_id is unknown. Callers should
-     *   pre-check with {@link get}.
-     */
     platformFor(siteId: string): Promise<Platform>;
-    /**
-     * Map view of the registry for the W7 `sites_list` tool. NEVER
-     * triggers a probe: `platform_resolved` is undefined for any site
-     * whose `platformFor()` has not yet been called.
-     *
-     * `bearer_source` is derived from the W1 schema invariant
-     * (exactly one of `bearer`/`bearer_ref` is set) so listing never
-     * needs to consult the W2 secret-resolver.
-     */
     listForDisplay(): readonly SiteRowT[];
 }
 //# sourceMappingURL=registry.d.ts.map

package/dist/sites/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/sites/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EACH,KAAK,QAAQ,EAEb,KAAK,YAAY,EACpB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,MAAM,WAAW,QAAQ;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC3C,aAAa,EAAE,WAAW,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC/C,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,OAAO,GAAG,IAAI,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,oBAAoB,GAC1B,UAAU,GACV,iBAAiB,GACjB,kBAAkB,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,IAAI,CAAC;IACtC;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;CAC/C;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAC3B,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,YAAY,KAClB,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC1B;AAED;;;;;GAKG;AACH,qBAAa,YAAY;IAwBjB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAvBzB;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAwC;IAEtE;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IAEjE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAGC;gBAGF,IAAI,EAAE,UAAU,EACjC,IAAI,GAAE,mBAAwB;IAKlC;;;;;;;;OAQG;IACH,aAAa,IAAI,MAAM,GAAG,IAAI;IAY9B;;;;OAIG;IACH,OAAO,IAAI,SAAS,MAAM,EAAE;IAI5B;;;;OAIG;IACH,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAItC;;;;;;;;OAQG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAyCpD;;;;;;;;OAQG;IACH,cAAc,IAAI,SAAS,QAAQ,EAAE;CAkBxC"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/sites/registry.ts"],"names":[],"mappings":"AA8BA,OAAO,EACH,KAAK,QAAQ,EAEb,KAAK,YAAY,EACpB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAa1D,MAAM,WAAW,QAAQ;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC3C,aAAa,EAAE,WAAW,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC/C,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,OAAO,GAAG,IAAI,CAAC;CACjC;AAuBD,MAAM,MAAM,oBAAoB,GAC1B,UAAU,GACV,iBAAiB,GACjB,kBAAkB,CAAC;AAQzB,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,IAAI,CAAC;IAQtC,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;CAC/C;AAOD,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAC3B,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,YAAY,KAClB,OAAO,CAAC,QAAQ,CAAC,CAAC;IAoBvB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAcvC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAQD,qBAAa,YAAY;IAyCjB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAlCzB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAwC;IAStE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IAEjE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAGC;IAcvB,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;gBAGjB,IAAI,EAAE,UAAU,EACjC,IAAI,GAAE,mBAAwB;IAgBlC,aAAa,IAAI,MAAM,GAAG,IAAI;IAiB9B,OAAO,IAAI,SAAS,MAAM,EAAE;IAS5B,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAahC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAkDpD,cAAc,IAAI,SAAS,QAAQ,EAAE;CAkBxC"}