@wootsup/yt-builder-mcp 1.12.0 → 2.0.0

package/dist/sites/client-pool.js

@@ -1,51 +1,8 @@
-/**
- * W4 — ClientPool: caches one {@link RestClient} per `site_id`.
- *
- * The pool sits between the W3 {@link SiteRegistry} (which maps a
- * `site_id` → entry + memoised {@link Platform}) and the W2
- * {@link SecretResolver} (which produces a bearer token at call time)
- * and emits {@link PoolResolution} bundles ready for tool handlers.
- *
- * Design choices (per plan §W4, Z.562-644):
- *
- *  - **One client per site_id.** The first `resolve(id)` runs bearer +
- *    platform resolve in parallel via `Promise.all` (saves one
- *    round-trip-time per cold site) and stores the constructed
- *    `RestClient`. All subsequent calls reuse the same instance —
- *    identity-equal across the process lifetime.
- *
- *  - **Cold parallel calls are racey-but-safe.** When N callers arrive
- *    for the same uncached site_id simultaneously, the plan §W4
- *    explicitly accepts N first-time `secretResolver.resolve()` calls
- *    (Z.630): `op read` is idempotent + latency dominates so a
- *    hard-once Promise-cache would not materially help. The W3
- *    registry's Promise-cache handles the platform side. The last
- *    setter wins the `cache.set(id, client)` race; subsequent
- *    `resolve()` calls see a stable single instance. Identity is
- *    eventual, not instantaneous — but stable from call N+1 onwards.
- *
- *  - **`invalidate(siteId)` for post-401 force-re-resolve.** When the
- *    auth layer detects a `401 invalid_kid`, it can drop the cached
- *    client so the next call re-fetches the bearer through `op` and
- *    constructs a fresh `RestClient`.
- *
- *  - **Structured errors.** `NoDefaultSiteError` and `UnknownSiteError`
- *    carry `code` + (for unknown) `siteId` + `available[]` so the
- *    auth/tool layer can branch on `error.code` instead of substring
- *    matching the message.
- *
- * @license MIT
- */
+import { resolveTimeoutMs } from '../auth.js';
 import { RestClient } from '../client.js';
 import { parseExtraHeaders } from '../net/extra-headers.js';
 import { parseSiteBasicAuth } from '../net/site-basic-auth.js';
-/**
- * Thrown when `resolve()` is called without a `siteId` AND the
- * registry has no default configured (neither `default_site_id` nor a
- * flagged `is_default:true` entry). The auth layer surfaces this as a
- * `no_default_site` MCP error with a hint to run
- * `npx -y @wootsup/yt-builder-mcp add-site --default`.
- */
+import { resolveMany } from './op-inject.js';
 export class NoDefaultSiteError extends Error {
     code = 'no_default_site';
     constructor(message = 'No site_id supplied and no default site is configured. '
@@ -55,12 +12,6 @@ export class NoDefaultSiteError extends Error {
         this.name = 'NoDefaultSiteError';
     }
 }
-/**
- * Thrown when `resolve('some-id')` cannot find `some-id` in the
- * registry. Carries the requested `siteId` and the (insertion-order)
- * list of configured ids so the caller can render a friendly
- * "did-you-mean" hint.
- */
 export class UnknownSiteError extends Error {
     siteId;
     available;
@@ -73,86 +24,32 @@ export class UnknownSiteError extends Error {
         this.name = 'UnknownSiteError';
     }
 }
-/**
- * Process-local cache of {@link RestClient} instances keyed by
- * `site_id`. Constructed once at server boot (W6) and shared across
- * all tool handlers.
- *
- * The pool is NOT thread-safe in the strict sense (Node is
- * single-threaded but `await` can interleave); the cold-parallel-call
- * behaviour is documented at the top of this file.
- */
 export class ClientPool {
     _registry;
     secretResolver;
     timeoutMs;
     cache = new Map();
-    /**
-     * U2 — per-site coarse token scope (`read` | `write`), learned
-     * opportunistically when a `health` / `diagnose` call observes the PHP
-     * payload's `token_scope`. The Node write-tool pre-flight reads it to fail
-     * a write FAST (no ETag fetch, no body build) when the configured key is
-     * known read-only. Absent (`undefined`) = not yet learned → the pre-flight
-     * stays silent and the REST chokepoint remains the authority.
-     */
+    inflightClients = new Map();
     tokenScopeCache = new Map();
-    /**
-     * Runtime active-site override (Phase 3 — `yootheme_builder_use_site`).
-     *
-     * The {@link SiteRegistry} is immutable: its `defaultSiteId()` is
-     * fixed for the process lifetime. api-mapper's parallel feature
-     * (`apimapper_use_profile`) moves a mutable active-pointer in its
-     * on-disk ProfileStore. YT Builder instead keeps the registry
-     * read-only and layers a process-local override HERE: when set,
-     * `resolve(undefined)` targets this id BEFORE consulting
-     * `registry.defaultSiteId()`. An explicit `site_id` argument to
-     * `resolve()` always wins over the override.
-     *
-     * `null` = no override (registry default in effect).
-     */
     activeOverride = null;
-    /**
-     * Corporate extra headers (customer gap #14) attached to EVERY client this
-     * pool constructs. Parsed once from `YTB_MCP_EXTRA_HEADERS` (default) or
-     * injected by a caller/test. Bearer always wins on collision (enforced in
-     * {@link RestClient}).
-     */
     extraHeaders;
-    /**
-     * U3 — percent-encoded `user:pass` userinfo for a site-level HTTP Basic-Auth
-     * realm, attached to EVERY client this pool constructs. Parsed once from
-     * `YTB_MCP_SITE_BASIC_AUTH` (default) or injected by a caller/test. `null`
-     * when unset/malformed → no userinfo is spliced and behaviour is unchanged.
-     * Orthogonal to the Bearer: it rides URL userinfo, never the Authorization
-     * header (enforced in {@link RestClient}).
-     */
-    siteBasicUserinfo;
-    constructor(_registry, secretResolver, timeoutMs = 15_000, extraHeaders = parseExtraHeaders().headers, siteBasicUserinfo = parseSiteBasicAuth().userinfo) {
+    siteBasicHeader;
+    resolveManyRefs;
+    bundlePromise = null;
+    constructor(_registry, secretResolver, timeoutMs = resolveTimeoutMs(), extraHeaders = parseExtraHeaders().headers, siteBasicHeader = parseSiteBasicAuth().header, resolveManyRefs = resolveMany) {
         this._registry = _registry;
         this.secretResolver = secretResolver;
         this.timeoutMs = timeoutMs;
         this.extraHeaders = extraHeaders;
-        this.siteBasicUserinfo = siteBasicUserinfo;
+        this.siteBasicHeader = siteBasicHeader;
+        this.resolveManyRefs = resolveManyRefs;
+    }
+    configuredTimeoutMs() {
+        return this.timeoutMs;
     }
-    /**
-     * The current runtime active-site override, or `null` when none is
-     * set (the registry default is in effect). Read-only peek — does not
-     * resolve a client or hit the network.
-     */
     activeSiteId() {
         return this.activeOverride;
     }
-    /**
-     * Set (or clear) the runtime active-site override.
-     *
-     * Passing a `site_id` makes every subsequent `resolve(undefined)`
-     * target that site. Passing `null` clears the override so the
-     * registry default applies again.
-     *
-     * @throws {UnknownSiteError} when `siteId` is not in the registry —
-     *   the pointer is left UNCHANGED on a bad switch so a typo never
-     *   silently strands the session on a non-existent site.
-     */
     setActiveSite(siteId) {
         if (siteId === null) {
             this.activeOverride = null;
@@ -163,44 +60,10 @@ export class ClientPool {
         }
         this.activeOverride = siteId;
     }
-    /**
-     * Read-only accessor for the underlying {@link SiteRegistry}. Used
-     * internally by the W7 `buildSitesTools(pool)` aggregator so the
-     * `sites_list` tool can render the configured-sites table without
-     * requiring callers to thread the registry separately. The registry
-     * itself is immutable from the outside (no mutator surface) so
-     * exposing it here is safe — `listForDisplay()` / `defaultSiteId()` /
-     * `listIds()` are all read-only operations.
-     *
-     * @internal Internal accessor for buildSitesTools; do not consume
-     * from tool handlers. Handlers should call `pool.resolve(siteId)`
-     * to get a `{client, site}` bundle instead.
-     */
     get registry() {
         return this._registry;
     }
-    /**
-     * Resolve a site_id to its cached {@link RestClient} + descriptor.
-     *
-     * @param siteId Explicit site_id from the tool param. When
-     *   `undefined`, the registry's `defaultSiteId()` is used.
-     * @throws {NoDefaultSiteError} when `siteId` is omitted and no
-     *   default is configured.
-     * @throws {UnknownSiteError} when the resolved id is not in the
-     *   registry (either the explicit id is wrong, or the registry's
-     *   `default_site_id` points at a stale entry).
-     */
     async resolve(siteId) {
-        // Resolution order (Phase 3):
-        //   1. explicit `siteId` arg (always wins)
-        //   2. runtime active-site override (`setActiveSite`)
-        //   3. registry default (`defaultSiteId()`)
-        //
-        // F178: record WHICH of the three branches won so the envelope
-        // wrapper can mark a call as isolated (`explicit`) vs inherited
-        // from the shared process-wide default (`active_override` /
-        // `registry_default`). `resolvedVia` is derived from the SAME
-        // precedence chain — a single source of truth.
         let resolvedVia;
         let id;
         if (siteId !== undefined) {
@@ -224,31 +87,18 @@ export class ClientPool {
         }
         let client = this.cache.get(id);
         if (client === undefined) {
-            // Plan §W4 Z.604-608: parallelise bearer + platform on a
-            // cold call. The W3 registry's Promise-cache de-dupes the
-            // platform probe across N parallel callers; the bearer
-            // side is allowed N first-time calls (op read idempotent).
-            const [bearer, platform] = await Promise.all([
-                this.secretResolver.resolve(entry),
-                this.registry.platformFor(id),
-            ]);
-            client = new RestClient({
-                platform,
-                bearerToken: bearer.token,
-                timeoutMs: this.timeoutMs,
-                ...(Object.keys(this.extraHeaders).length > 0
-                    ? { extraHeaders: this.extraHeaders }
-                    : {}),
-                ...(this.siteBasicUserinfo !== null
-                    ? { siteBasicUserinfo: this.siteBasicUserinfo }
-                    : {}),
-            });
-            this.cache.set(id, client);
+            let pending = this.inflightClients.get(id);
+            if (pending === undefined) {
+                pending = this.buildClient(id, entry);
+                this.inflightClients.set(id, pending);
+                pending.catch(() => { }).finally(() => {
+                    if (this.inflightClients.get(id) === pending) {
+                        this.inflightClients.delete(id);
+                    }
+                });
+            }
+            client = await pending;
         }
-        // `platformFor` is memoised in the registry; calling it a
-        // second time here is a O(1) Promise.resolve from the W3
-        // Promise-cache, NOT a fresh probe. Keeps the `ResolvedSite`
-        // synthesis self-contained even when the client was warm.
         const platform = await this.registry.platformFor(id);
         const resolved = {
             id,
@@ -261,36 +111,65 @@ export class ClientPool {
         };
         return { client, site: resolved };
     }
-    /**
-     * U2 — record the coarse token scope learned for a site from a
-     * health / diagnose probe of the PHP `token_scope` field. Idempotent;
-     * the latest observation wins (a key swap → re-mint can flip read↔write).
-     */
+    async buildClient(id, entry) {
+        const [bearer, platform] = await Promise.all([
+            this.resolveBearer(entry),
+            this.registry.platformFor(id),
+        ]);
+        const client = new RestClient({
+            platform,
+            bearerToken: bearer.token,
+            timeoutMs: this.timeoutMs,
+            ...(Object.keys(this.extraHeaders).length > 0
+                ? { extraHeaders: this.extraHeaders }
+                : {}),
+            ...(this.siteBasicHeader !== null
+                ? { siteBasicHeader: this.siteBasicHeader }
+                : {}),
+        });
+        this.cache.set(id, client);
+        return client;
+    }
+    async resolveBearer(entry) {
+        if (entry.bearer_ref === undefined) {
+            return this.secretResolver.resolve(entry);
+        }
+        const bundle = await this.ensureBundle();
+        const token = bundle.get(entry.bearer_ref);
+        if (token !== undefined) {
+            return { token, source: 'op' };
+        }
+        const err = bundle.errors.get(entry.bearer_ref);
+        if (err !== undefined)
+            throw err;
+        return this.secretResolver.resolve(entry);
+    }
+    ensureBundle() {
+        if (this.bundlePromise === null) {
+            this.bundlePromise = this.resolveManyRefs(this.collectAllOpRefs());
+        }
+        return this.bundlePromise;
+    }
+    collectAllOpRefs() {
+        const refs = [];
+        for (const siteId of this.registry.listIds()) {
+            const siteEntry = this.registry.get(siteId);
+            if (siteEntry !== null && siteEntry.bearer_ref !== undefined) {
+                refs.push(siteEntry.bearer_ref);
+            }
+        }
+        return refs;
+    }
     setTokenScope(siteId, scope) {
         this.tokenScopeCache.set(siteId, scope);
     }
-    /**
-     * U2 — the last-known coarse token scope for a site, or `undefined` when
-     * none has been observed yet. The write-tool pre-flight ONLY fails fast on
-     * a known `read`; an `undefined` scope means "not learned" and never blocks
-     * (the REST chokepoint stays the source of truth).
-     */
     tokenScope(siteId) {
         return this.tokenScopeCache.get(siteId);
     }
-    /**
-     * Drop the cached client for `siteId` — used by the auth layer
-     * after a `401 invalid_kid` so the next call re-runs the bearer
-     * resolve and builds a fresh {@link RestClient}.
-     *
-     * Also drops the learned token scope: a re-resolve may mint against a
-     * different key, so a stale read/write verdict must not survive.
-     *
-     * No-op when `siteId` is not in the cache.
-     */
     invalidate(siteId) {
         this.cache.delete(siteId);
         this.tokenScopeCache.delete(siteId);
+        this.bundlePromise = null;
     }
 }
 //# sourceMappingURL=client-pool.js.map

package/dist/sites/client-pool.js.map

@@ -1 +1 @@
-{"version":3,"file":"client-pool.js","sourceRoot":"","sources":["../../src/sites/client-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAK/D;;;;;;GAMG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACzB,IAAI,GAAG,iBAA0B,CAAC;IAElD,YACI,OAAO,GACH,yDAAyD;UACvD,2FAA2F;UAC3F,8EAA8E;QAEpF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACrC,CAAC;CACJ;AAED;;;;;GAKG;AACH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAInB;IACA;IAJJ,IAAI,GAAG,cAAuB,CAAC;IAE/C,YACoB,MAAc,EACd,SAA4B;QAE5C,KAAK,CACD,SAAS,MAAM,0BAA0B;cACvC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CACxE,CAAC;QANc,WAAM,GAAN,MAAM,CAAQ;QACd,cAAS,GAAT,SAAS,CAAmB;QAM5C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACnC,CAAC;CACJ;AAYD;;;;;;;;GAQG;AACH,MAAM,OAAO,UAAU;IAgDE;IACA;IACA;IAjDJ,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEvD;;;;;;;OAOG;IACc,eAAe,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEvE;;;;;;;;;;;;;OAaG;IACK,cAAc,GAAkB,IAAI,CAAC;IAE7C;;;;;OAKG;IACc,YAAY,CAAyB;IAEtD;;;;;;;OAOG;IACc,iBAAiB,CAAgB;IAElD,YACqB,SAAuB,EACvB,cAA8B,EAC9B,YAAoB,MAAM,EAC3C,eAAuC,iBAAiB,EAAE,CAAC,OAAO,EAClE,oBAAmC,kBAAkB,EAAE,CAAC,QAAQ;QAJ/C,cAAS,GAAT,SAAS,CAAc;QACvB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,cAAS,GAAT,SAAS,CAAiB;QAI3C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IAC/C,CAAC;IAED;;;;OAIG;IACH,YAAY;QACR,OAAO,IAAI,CAAC,cAAc,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;OAUG;IACH,aAAa,CAAC,MAAqB;QAC/B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC3B,OAAO;QACX,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;IACjC,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,IAAI,QAAQ;QACR,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,OAAO,CAAC,MAAe;QACzB,8BAA8B;QAC9B,2CAA2C;QAC3C,sDAAsD;QACtD,4CAA4C;QAC5C,EAAE;QACF,+DAA+D;QAC/D,gEAAgE;QAChE,4DAA4D;QAC5D,8DAA8D;QAC9D,+CAA+C;QAC/C,IAAI,WAAwC,CAAC;QAC7C,IAAI,EAAiB,CAAC;QACtB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,EAAE,GAAG,MAAM,CAAC;YACZ,WAAW,GAAG,UAAU,CAAC;QAC7B,CAAC;aAAM,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACtC,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC;YACzB,WAAW,GAAG,iBAAiB,CAAC;QACpC,CAAC;aAAM,CAAC;YACJ,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YACnC,WAAW,GAAG,kBAAkB,CAAC;QACrC,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACnC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,yDAAyD;YACzD,0DAA0D;YAC1D,uDAAuD;YACvD,2DAA2D;YAC3D,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACzC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;gBAClC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;aAChC,CAAC,CAAC;YACH,MAAM,GAAG,IAAI,UAAU,CAAC;gBACpB,QAAQ;gBACR,WAAW,EAAE,MAAM,CAAC,KAAK;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC;oBACzC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE;oBACrC,CAAC,CAAC,EAAE,CAAC;gBACT,GAAG,CAAC,IAAI,CAAC,iBAAiB,KAAK,IAAI;oBAC/B,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE;oBAC/C,CAAC,CAAC,EAAE,CAAC;aACZ,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/B,CAAC;QAED,0DAA0D;QAC1D,yDAAyD;QACzD,6DAA6D;QAC7D,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAiB;YAC3B,EAAE;YACF,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,QAAQ;YACR,SAAS,EAAE,KAAK,CAAC,UAAU;YAC3B,YAAY,EAAE,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;YAC7D,WAAW;YACX,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,MAAc,EAAE,KAAuB;QACjD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,MAAc;QACrB,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;;OASG;IACH,UAAU,CAAC,MAAc;QACrB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;CACJ"}
+{"version":3,"file":"client-pool.js","sourceRoot":"","sources":["../../src/sites/client-pool.ts"],"names":[],"mappings":"AA+DA,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAkD,MAAM,gBAAgB,CAAC;AAY7F,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACzB,IAAI,GAAG,iBAA0B,CAAC;IAElD,YACI,OAAO,GACH,yDAAyD;UACvD,2FAA2F;UAC3F,8EAA8E;QAEpF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACrC,CAAC;CACJ;AAQD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAInB;IACA;IAJJ,IAAI,GAAG,cAAuB,CAAC;IAE/C,YACoB,MAAc,EACd,SAA4B;QAE5C,KAAK,CACD,SAAS,MAAM,0BAA0B;cACvC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CACxE,CAAC;QANc,WAAM,GAAN,MAAM,CAAQ;QACd,cAAS,GAAT,SAAS,CAAmB;QAM5C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACnC,CAAC;CACJ;AAqBD,MAAM,OAAO,UAAU;IAmFE;IACA;IAmBA;IAtGJ,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IActC,eAAe,GAAG,IAAI,GAAG,EAA+B,CAAC;IAUzD,eAAe,GAAG,IAAI,GAAG,EAA4B,CAAC;IAgB/D,cAAc,GAAkB,IAAI,CAAC;IAQ5B,YAAY,CAAyB;IAUrC,eAAe,CAAgB;IAY/B,eAAe,CAAoB;IAS5C,aAAa,GAAsC,IAAI,CAAC;IAEhE,YACqB,SAAuB,EACvB,cAA8B,EAmB9B,YAAoB,gBAAgB,EAAE,EACvD,eAAuC,iBAAiB,EAAE,CAAC,OAAO,EAClE,kBAAiC,kBAAkB,EAAE,CAAC,MAAM,EAW5D,kBAAqC,WAAW;QAjC/B,cAAS,GAAT,SAAS,CAAc;QACvB,mBAAc,GAAd,cAAc,CAAgB;QAmB9B,cAAS,GAAT,SAAS,CAA6B;QAevD,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IAC3C,CAAC;IASD,mBAAmB;QACf,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;IAOD,YAAY;QACR,OAAO,IAAI,CAAC,cAAc,CAAC;IAC/B,CAAC;IAaD,aAAa,CAAC,MAAqB;QAC/B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC3B,OAAO;QACX,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;IACjC,CAAC;IAeD,IAAI,QAAQ;QACR,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;IAaD,KAAK,CAAC,OAAO,CAAC,MAAe;QAWzB,IAAI,WAAwC,CAAC;QAC7C,IAAI,EAAiB,CAAC;QACtB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,EAAE,GAAG,MAAM,CAAC;YACZ,WAAW,GAAG,UAAU,CAAC;QAC7B,CAAC;aAAM,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACtC,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC;YACzB,WAAW,GAAG,iBAAiB,CAAC;QACpC,CAAC;aAAM,CAAC;YACJ,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YACnC,WAAW,GAAG,kBAAkB,CAAC;QACrC,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACnC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAKvB,IAAI,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBACtC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBAOtC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;oBACjC,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC;wBAC3C,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACpC,CAAC;gBACL,CAAC,CAAC,CAAC;YACP,CAAC;YACD,MAAM,GAAG,MAAM,OAAO,CAAC;QAC3B,CAAC;QAMD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAiB;YAC3B,EAAE;YACF,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,QAAQ;YACR,SAAS,EAAE,KAAK,CAAC,UAAU;YAC3B,YAAY,EAAE,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;YAC7D,WAAW;YACX,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACtC,CAAC;IASO,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,KAAiB;QAMnD,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;SAChC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC;YAC1B,QAAQ;YACR,WAAW,EAAE,MAAM,CAAC,KAAK;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC;gBACzC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE;gBACrC,CAAC,CAAC,EAAE,CAAC;YACT,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,IAAI;gBAC7B,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE;gBAC3C,CAAC,CAAC,EAAE,CAAC;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC;IAClB,CAAC;IAYO,KAAK,CAAC,aAAa,CAAC,KAAiB;QACzC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACnC,CAAC;QAOD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,GAAG,CAAC;QACjC,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IASO,YAAY;QAChB,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC;IAC9B,CAAC;IAGO,gBAAgB;QACpB,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC3D,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACpC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAOD,aAAa,CAAC,MAAc,EAAE,KAAuB;QACjD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAQD,UAAU,CAAC,MAAc;QACrB,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAyCD,UAAU,CAAC,MAAc;QACrB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC9B,CAAC;CACJ"}

package/dist/sites/config-problem.d.ts

@@ -0,0 +1,2 @@
+export declare function configProblemFor(e: unknown): string | null;
+//# sourceMappingURL=config-problem.d.ts.map

package/dist/sites/config-problem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-problem.d.ts","sourceRoot":"","sources":["../../src/sites/config-problem.ts"],"names":[],"mappings":"AAiCA,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAM1D"}

package/dist/sites/config-problem.js

@@ -0,0 +1,13 @@
+import { ConfigError, NoDefaultSiteConfigError, RejectedConfigError } from '../errors.js';
+import { SitesFileError } from './store.js';
+export function configProblemFor(e) {
+    if (e instanceof NoDefaultSiteConfigError)
+        return e.message;
+    const isTrulyUnconfigured = e instanceof ConfigError && !(e instanceof RejectedConfigError);
+    if (isTrulyUnconfigured)
+        return null;
+    if (!(e instanceof ConfigError) && !(e instanceof SitesFileError))
+        return null;
+    return e.message;
+}
+//# sourceMappingURL=config-problem.js.map

package/dist/sites/config-problem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-problem.js","sourceRoot":"","sources":["../../src/sites/config-problem.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACvC,IAAI,CAAC,YAAY,wBAAwB;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IAC5D,MAAM,mBAAmB,GAAG,CAAC,YAAY,WAAW,IAAI,CAAC,CAAC,CAAC,YAAY,mBAAmB,CAAC,CAAC;IAC5F,IAAI,mBAAmB;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,CAAC,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,OAAO,CAAC,CAAC,OAAO,CAAC;AACrB,CAAC"}

package/dist/sites/env-bridge.d.ts

@@ -1,74 +1,5 @@
-/**
- * W3 — Env-Bridge: synthesise a one-site {@link SitesFileT} from the
- * legacy single-site env-vars when no `sites.json` exists on disk.
- *
- * Why: pre-multi-site customers configured the MCP server via
- * `YTB_MCP_SITE_URL` (or the older `YTB_MCP_WP_URL`) + `YTB_MCP_BEARER_TOKEN`.
- * Multi-site infra must NEVER break that experience. When no
- * `sites.json` is found, the boot path consults this bridge; if both
- * required env-vars are present we materialise an in-memory one-site
- * file with `site_id: 'default'` and `is_default: true`. The rest of
- * the system (registry, resolver, tool builder) then operates on
- * `SitesFileT` uniformly — there is no second code path for the
- * legacy single-site case.
- *
- * Returns `null` when either required env-var is missing or empty so
- * the caller can fall through to "no sites configured" UX.
- *
- * W12-R1.1 consolidation:
- *   - Env-var names are imported from `../auth.js` (single source of
- *     truth) instead of duplicated as string-literals.
- *   - Raw URL + bearer are `.trim()`ed; whitespace-only values are
- *     treated as missing (return null), matching `loadConfig` behaviour.
- *   - Unknown `YTB_MCP_PLATFORM` values throw `ConfigError` so a typo
- *     (`woodpress`, `joomlaa`) surfaces immediately instead of silently
- *     downgrading to `'auto'` and confusing the runtime probe.
- *
- * @license MIT
- */
 import type { SitesFileT } from './schema.js';
-/**
- * Trim exactly one trailing `/` from a string. `""` stays `""`. A
- * string with two trailing slashes keeps the inner one (`"a//"` →
- * `"a/"`), preserving the operator's apparent intent — single-slash
- * normalisation is a paste-error fix, not an aggressive cleanup.
- */
 export declare function stripTrailingSlash(s: string): string;
-/**
- * Single source of truth for the {@link ENV_PLATFORM} (`YTB_MCP_PLATFORM`)
- * → platform-kind contract, shared by the multi-site env-bridge
- * ({@link synthesiseFromEnv}) and the runtime proxy (`proxy/mode.ts`'s
- * `resolveMode`). Both must agree on how the same env var is read, so the
- * parse lives in exactly one place.
- *
- * An empty / unset value returns `'auto'` so the caller's own detection
- * decides — the URL-shape + runtime probe on the multi-site path
- * (`platformForUrlAsync`), or the WordPress back-compat fallback on the
- * synchronous proxy path (which has no probe available). Any OTHER
- * non-empty value throws {@link ConfigError} so a typo (`woodpress`,
- * `joomlaa`) is loud-failed immediately instead of silently degrading to
- * `'auto'` and confusing the runtime.
- *
- * Case-sensitive by design — the MCPB / wizard-written value is always the
- * canonical lowercase kind.
- */
 export declare function parsePlatformEnv(raw: string | undefined): 'wordpress' | 'joomla' | 'auto';
-/**
- * Build a one-site {@link SitesFileT} from `env`, or return `null` if
- * neither URL nor bearer is configured. Order of URL precedence:
- *   1. {@link ENV_SITE_URL} (new, multi-site-aware name)
- *   2. {@link ENV_WP_URL}   (legacy single-site name, still honoured)
- *
- * The platform hint comes from {@link ENV_PLATFORM} when set to
- * `wordpress` / `joomla` / `auto`. An empty / unset value falls back to
- * `'auto'` so the runtime probe (see `platformForUrlAsync`) decides.
- * Any OTHER non-empty value throws `ConfigError` — a typo like
- * `woodpress` is loud-failed at boot rather than silently degraded.
- *
- * Note: this function does NOT validate the URL or bearer-token shape
- * beyond non-empty trimming — the W1 {@link SitesFile} schema does that
- * the moment the caller hands the synthesised file to a registry
- * constructor.
- */
 export declare function synthesiseFromEnv(env: NodeJS.ProcessEnv): SitesFileT | null;
 //# sourceMappingURL=env-bridge.d.ts.map

package/dist/sites/env-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-bridge.d.ts","sourceRoot":"","sources":["../../src/sites/env-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAUH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gBAAgB,CAC5B,GAAG,EAAE,MAAM,GAAG,SAAS,GACxB,WAAW,GAAG,QAAQ,GAAG,MAAM,CAUjC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAC7B,GAAG,EAAE,MAAM,CAAC,UAAU,GACvB,UAAU,GAAG,IAAI,CAqBnB"}
+{"version":3,"file":"env-bridge.d.ts","sourceRoot":"","sources":["../../src/sites/env-bridge.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQ9C,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAGpD;AAoBD,wBAAgB,gBAAgB,CAC5B,GAAG,EAAE,MAAM,GAAG,SAAS,GACxB,WAAW,GAAG,QAAQ,GAAG,MAAM,CAUjC;AAmBD,wBAAgB,iBAAiB,CAC7B,GAAG,EAAE,MAAM,CAAC,UAAU,GACvB,UAAU,GAAG,IAAI,CAqBnB"}

package/dist/sites/env-bridge.js

@@ -1,62 +1,10 @@
-/**
- * W3 — Env-Bridge: synthesise a one-site {@link SitesFileT} from the
- * legacy single-site env-vars when no `sites.json` exists on disk.
- *
- * Why: pre-multi-site customers configured the MCP server via
- * `YTB_MCP_SITE_URL` (or the older `YTB_MCP_WP_URL`) + `YTB_MCP_BEARER_TOKEN`.
- * Multi-site infra must NEVER break that experience. When no
- * `sites.json` is found, the boot path consults this bridge; if both
- * required env-vars are present we materialise an in-memory one-site
- * file with `site_id: 'default'` and `is_default: true`. The rest of
- * the system (registry, resolver, tool builder) then operates on
- * `SitesFileT` uniformly — there is no second code path for the
- * legacy single-site case.
- *
- * Returns `null` when either required env-var is missing or empty so
- * the caller can fall through to "no sites configured" UX.
- *
- * W12-R1.1 consolidation:
- *   - Env-var names are imported from `../auth.js` (single source of
- *     truth) instead of duplicated as string-literals.
- *   - Raw URL + bearer are `.trim()`ed; whitespace-only values are
- *     treated as missing (return null), matching `loadConfig` behaviour.
- *   - Unknown `YTB_MCP_PLATFORM` values throw `ConfigError` so a typo
- *     (`woodpress`, `joomlaa`) surfaces immediately instead of silently
- *     downgrading to `'auto'` and confusing the runtime probe.
- *
- * @license MIT
- */
 import { ENV_BEARER, ENV_PLATFORM, ENV_SITE_URL, ENV_WP_URL, } from '../auth.js';
-import { ConfigError } from '../errors.js';
-/**
- * Trim exactly one trailing `/` from a string. `""` stays `""`. A
- * string with two trailing slashes keeps the inner one (`"a//"` →
- * `"a/"`), preserving the operator's apparent intent — single-slash
- * normalisation is a paste-error fix, not an aggressive cleanup.
- */
+import { RejectedConfigError } from '../errors.js';
 export function stripTrailingSlash(s) {
     if (s.length === 0)
         return s;
     return s.endsWith('/') ? s.slice(0, -1) : s;
 }
-/**
- * Single source of truth for the {@link ENV_PLATFORM} (`YTB_MCP_PLATFORM`)
- * → platform-kind contract, shared by the multi-site env-bridge
- * ({@link synthesiseFromEnv}) and the runtime proxy (`proxy/mode.ts`'s
- * `resolveMode`). Both must agree on how the same env var is read, so the
- * parse lives in exactly one place.
- *
- * An empty / unset value returns `'auto'` so the caller's own detection
- * decides — the URL-shape + runtime probe on the multi-site path
- * (`platformForUrlAsync`), or the WordPress back-compat fallback on the
- * synchronous proxy path (which has no probe available). Any OTHER
- * non-empty value throws {@link ConfigError} so a typo (`woodpress`,
- * `joomlaa`) is loud-failed immediately instead of silently degrading to
- * `'auto'` and confusing the runtime.
- *
- * Case-sensitive by design — the MCPB / wizard-written value is always the
- * canonical lowercase kind.
- */
 export function parsePlatformEnv(raw) {
     const hint = raw === undefined ? '' : raw.trim();
     if (hint === '')
@@ -64,26 +12,9 @@ export function parsePlatformEnv(raw) {
     if (hint === 'wordpress' || hint === 'joomla' || hint === 'auto') {
         return hint;
     }
-    throw new ConfigError(`Invalid ${ENV_PLATFORM}: "${hint}". `
+    throw new RejectedConfigError(`Invalid ${ENV_PLATFORM}: "${hint}". `
         + 'Must be one of: wordpress, joomla, auto (or unset for auto-detect).');
 }
-/**
- * Build a one-site {@link SitesFileT} from `env`, or return `null` if
- * neither URL nor bearer is configured. Order of URL precedence:
- *   1. {@link ENV_SITE_URL} (new, multi-site-aware name)
- *   2. {@link ENV_WP_URL}   (legacy single-site name, still honoured)
- *
- * The platform hint comes from {@link ENV_PLATFORM} when set to
- * `wordpress` / `joomla` / `auto`. An empty / unset value falls back to
- * `'auto'` so the runtime probe (see `platformForUrlAsync`) decides.
- * Any OTHER non-empty value throws `ConfigError` — a typo like
- * `woodpress` is loud-failed at boot rather than silently degraded.
- *
- * Note: this function does NOT validate the URL or bearer-token shape
- * beyond non-empty trimming — the W1 {@link SitesFile} schema does that
- * the moment the caller hands the synthesised file to a registry
- * constructor.
- */
 export function synthesiseFromEnv(env) {
     const rawUrl = (env[ENV_SITE_URL] ?? env[ENV_WP_URL] ?? '').trim();
     const bearer = (env[ENV_BEARER] ?? '').trim();

package/dist/sites/env-bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-bridge.js","sourceRoot":"","sources":["../../src/sites/env-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EACH,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,UAAU,GACb,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAI3C;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAAS;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gBAAgB,CAC5B,GAAuB;IAEvB,MAAM,IAAI,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/B,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,WAAW,CACjB,WAAW,YAAY,MAAM,IAAI,KAAK;UACpC,qEAAqE,CAC1E,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAC7B,GAAsB;IAEtB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAEhD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IAErD,OAAO;QACH,cAAc,EAAE,CAAC;QACjB,eAAe,EAAE,SAAS;QAC1B,KAAK,EAAE;YACH;gBACI,OAAO,EAAE,SAAS;gBAClB,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC;gBAC/B,QAAQ;gBACR,MAAM;gBACN,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,oBAAoB;aAC9B;SACJ;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"env-bridge.js","sourceRoot":"","sources":["../../src/sites/env-bridge.ts"],"names":[],"mappings":"AA+BA,OAAO,EACH,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,UAAU,GACb,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAUnD,MAAM,UAAU,kBAAkB,CAAC,CAAS;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAoBD,MAAM,UAAU,gBAAgB,CAC5B,GAAuB;IAEvB,MAAM,IAAI,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/B,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,mBAAmB,CACzB,WAAW,YAAY,MAAM,IAAI,KAAK;UACpC,qEAAqE,CAC1E,CAAC;AACN,CAAC;AAmBD,MAAM,UAAU,iBAAiB,CAC7B,GAAsB;IAEtB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAEhD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IAErD,OAAO;QACH,cAAc,EAAE,CAAC;QACjB,eAAe,EAAE,SAAS;QAC1B,KAAK,EAAE;YACH;gBACI,OAAO,EAAE,SAAS;gBAClB,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC;gBAC/B,QAAQ;gBACR,MAAM;gBACN,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,oBAAoB;aAC9B;SACJ;KACJ,CAAC;AACN,CAAC"}

package/dist/sites/op-inject.d.ts

@@ -0,0 +1,23 @@
+import { SecretResolverError } from './secret-resolver.js';
+export interface ChildStdinLike {
+    write(chunk: string): boolean;
+    end(): void;
+}
+export type ExecFileWithStdin = (file: string, args: readonly string[], options: {
+    timeout?: number;
+    maxBuffer?: number;
+}, callback: (error: (Error & {
+    code?: string | number;
+    signal?: string;
+}) | null, stdout: string, stderr: string) => void) => {
+    stdin: ChildStdinLike | null;
+};
+export declare class ResolveManyResult extends Map<string, string> {
+    readonly errors: Map<string, SecretResolverError>;
+}
+export type ResolveManyRefsFn = (refs: readonly string[]) => Promise<ResolveManyResult>;
+export declare function resolveMany(refs: readonly string[], exec?: ExecFileWithStdin, opts?: {
+    readonly opBinary?: string;
+    readonly timeoutMs?: number;
+}): Promise<ResolveManyResult>;
+//# sourceMappingURL=op-inject.d.ts.map

package/dist/sites/op-inject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"op-inject.d.ts","sourceRoot":"","sources":["../../src/sites/op-inject.ts"],"names":[],"mappings":"AAuDA,OAAO,EAIH,mBAAmB,EACtB,MAAM,sBAAsB,CAAC;AAQ9B,MAAM,WAAW,cAAc;IAC3B,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,GAAG,IAAI,IAAI,CAAC;CACf;AAOD,MAAM,MAAM,iBAAiB,GAAG,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EACjD,QAAQ,EAAE,CACN,KAAK,EAAE,CAAC,KAAK,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,EACnE,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,KACb,IAAI,KACR;IAAE,KAAK,EAAE,cAAc,GAAG,IAAI,CAAA;CAAE,CAAC;AAuCtC,qBAAa,iBAAkB,SAAQ,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IACtD,QAAQ,CAAC,MAAM,mCAA0C;CAC5D;AAID,MAAM,MAAM,iBAAiB,GAAG,CAC5B,IAAI,EAAE,SAAS,MAAM,EAAE,KACtB,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAiBhC,wBAAsB,WAAW,CAC7B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,IAAI,GAAE,iBAA4C,EAClD,IAAI,GAAE;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACvE,OAAO,CAAC,iBAAiB,CAAC,CA6E5B"}