@wootsup/yt-builder-mcp 1.12.0 → 2.1.0

package/dist/net/site-basic-auth.d.ts

@@ -1,65 +1,7 @@
-/**
- * Parse `YTB_MCP_SITE_BASIC_AUTH` ('user:pass') into URL **userinfo** that is
- * injected into the upstream request URL (`https://user:pass@host/…`) on BOTH
- * transports (fat-mode {@link RestClient} base URL and proxy-mode endpoint URL).
- *
- * Why this exists (U3 — customer post-cert QA blocker): a site fronted by a pure
- * HTTP **Basic-Auth realm** (e.g. `qa.customer.de`) requires
- * `Authorization: Basic …`. But the plugin Bearer already owns the single
- * `Authorization` header on every outbound request, and `YTB_MCP_EXTRA_HEADERS`
- * HARD-FORBIDS an `Authorization` key (see {@link parseExtraHeaders}) — so Basic
- * and the Bearer collide on the one header and the site is unreachable.
- *
- * The fix routes the site-level Basic credentials on a **separate transport**:
- * URL userinfo. Userinfo and the `Authorization` header are independent — undici
- * / fetch turn `https://user:pass@host` into an `Authorization: Basic …` toward
- * the **gateway/realm**, while we keep emitting `Authorization: Bearer …` toward
- * the **plugin** behind it. The Bearer is never touched; the realm and the
- * plugin each get the credential they expect.
- *
- * ── Accepted format ─────────────────────────────────────────────────────────
- *   `user:pass` — split on the FIRST colon (passwords may contain colons).
- *     - The username MUST be non-empty.
- *     - The password MAY be empty (some realms use a user-only token).
- *   Both halves are percent-encoded for userinfo via the WHATWG URL encoder, so
- *   reserved chars (`@`, `/`, `:`, space, …) survive into a valid URL.
- *
- * ── Security invariants ─────────────────────────────────────────────────────
- *   - The credential value is **NEVER** echoed in a warning or logged. Malformed
- *     input yields a generic "missing colon / empty username" warning only.
- *   - This channel NEVER touches the `Authorization` header — it rides URL
- *     userinfo exclusively, so the Bearer always wins (orthogonal transports).
- *
- * Pure + deterministic. `warnings` collects non-fatal issues; the caller (the
- * server boot path) surfaces them once to stderr.
- *
- * @license MIT
- */
-/** Canonical env-var name for the site-level HTTP Basic-Auth feature. */
 export declare const ENV_SITE_BASIC_AUTH = "YTB_MCP_SITE_BASIC_AUTH";
 export interface ParsedSiteBasicAuth {
-    /**
-     * Percent-encoded `user:pass` userinfo ready to splice into a URL, or
-     * `null` when the env var is unset/blank/malformed. NEVER contains the raw
-     * (un-encoded) credential beyond what userinfo requires.
-     */
-    readonly userinfo: string | null;
-    /** Non-fatal issues (missing colon, empty username). Never echo the secret. */
+    readonly header: string | null;
     readonly warnings: readonly string[];
 }
-/**
- * Parse `YTB_MCP_SITE_BASIC_AUTH` from `env` (default `process.env`). Returns
- * `{ userinfo: null, warnings: [] }` when unset/blank, and a generic warning
- * (never containing the secret) when the value is malformed.
- */
 export declare function parseSiteBasicAuth(env?: NodeJS.ProcessEnv): ParsedSiteBasicAuth;
-/**
- * Splice `userinfo` (a percent-encoded `user:pass`) into `url`, returning the
- * resulting href. When `userinfo` is `null`, the URL is returned unchanged
- * (string form). Any pre-existing userinfo on the URL is overwritten.
- *
- * This is the ONLY mutation the site-Basic channel performs — it never adds or
- * alters a header, so the Bearer in `Authorization` is untouched.
- */
-export declare function applyUserinfoToUrl(url: string | URL, userinfo: string | null): string;
 //# sourceMappingURL=site-basic-auth.d.ts.map

package/dist/net/site-basic-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"site-basic-auth.d.ts","sourceRoot":"","sources":["../../src/net/site-basic-auth.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,yEAAyE;AACzE,eAAO,MAAM,mBAAmB,4BAA4B,CAAC;AAE7D,MAAM,WAAW,mBAAmB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAqBD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,mBAAmB,CA8B5F;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAgBrF"}
+{"version":3,"file":"site-basic-auth.d.ts","sourceRoot":"","sources":["../../src/net/site-basic-auth.ts"],"names":[],"mappings":"AA6BA,eAAO,MAAM,mBAAmB,4BAA4B,CAAC;AAE7D,MAAM,WAAW,mBAAmB;IAKhC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAE/B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAOD,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,mBAAmB,CA+B5F"}

package/dist/net/site-basic-auth.js

@@ -1,76 +1,13 @@
-// packages/mcp/src/net/site-basic-auth.ts
-/**
- * Parse `YTB_MCP_SITE_BASIC_AUTH` ('user:pass') into URL **userinfo** that is
- * injected into the upstream request URL (`https://user:pass@host/…`) on BOTH
- * transports (fat-mode {@link RestClient} base URL and proxy-mode endpoint URL).
- *
- * Why this exists (U3 — customer post-cert QA blocker): a site fronted by a pure
- * HTTP **Basic-Auth realm** (e.g. `qa.customer.de`) requires
- * `Authorization: Basic …`. But the plugin Bearer already owns the single
- * `Authorization` header on every outbound request, and `YTB_MCP_EXTRA_HEADERS`
- * HARD-FORBIDS an `Authorization` key (see {@link parseExtraHeaders}) — so Basic
- * and the Bearer collide on the one header and the site is unreachable.
- *
- * The fix routes the site-level Basic credentials on a **separate transport**:
- * URL userinfo. Userinfo and the `Authorization` header are independent — undici
- * / fetch turn `https://user:pass@host` into an `Authorization: Basic …` toward
- * the **gateway/realm**, while we keep emitting `Authorization: Bearer …` toward
- * the **plugin** behind it. The Bearer is never touched; the realm and the
- * plugin each get the credential they expect.
- *
- * ── Accepted format ─────────────────────────────────────────────────────────
- *   `user:pass` — split on the FIRST colon (passwords may contain colons).
- *     - The username MUST be non-empty.
- *     - The password MAY be empty (some realms use a user-only token).
- *   Both halves are percent-encoded for userinfo via the WHATWG URL encoder, so
- *   reserved chars (`@`, `/`, `:`, space, …) survive into a valid URL.
- *
- * ── Security invariants ─────────────────────────────────────────────────────
- *   - The credential value is **NEVER** echoed in a warning or logged. Malformed
- *     input yields a generic "missing colon / empty username" warning only.
- *   - This channel NEVER touches the `Authorization` header — it rides URL
- *     userinfo exclusively, so the Bearer always wins (orthogonal transports).
- *
- * Pure + deterministic. `warnings` collects non-fatal issues; the caller (the
- * server boot path) surfaces them once to stderr.
- *
- * @license MIT
- */
-/** Canonical env-var name for the site-level HTTP Basic-Auth feature. */
 export const ENV_SITE_BASIC_AUTH = 'YTB_MCP_SITE_BASIC_AUTH';
-/**
- * Encode a single userinfo component (username or password) exactly as the
- * WHATWG URL serializer would. Using the URL setter (rather than
- * `encodeURIComponent`) guarantees the result is byte-for-byte what lands on a
- * real request URL, and is idempotent if the value is already encoded.
- */
-function encodeUserinfoComponent(part, value) {
-    const u = new URL('https://x.invalid/');
-    if (part === 'username') {
-        u.username = value;
-        return u.username;
-    }
-    // A password-only set still needs a (placeholder) username for the URL to be
-    // valid; read back ONLY the password component.
-    u.username = 'x';
-    u.password = value;
-    return u.password;
-}
-/**
- * Parse `YTB_MCP_SITE_BASIC_AUTH` from `env` (default `process.env`). Returns
- * `{ userinfo: null, warnings: [] }` when unset/blank, and a generic warning
- * (never containing the secret) when the value is malformed.
- */
 export function parseSiteBasicAuth(env = process.env) {
     const raw = (env[ENV_SITE_BASIC_AUTH] ?? '').trim();
     if (raw === '') {
-        return { userinfo: null, warnings: [] };
+        return { header: null, warnings: [] };
     }
     const idx = raw.indexOf(':');
     if (idx < 0) {
-        // Deliberately do NOT echo `raw` — it IS the credential.
         return {
-            userinfo: null,
+            header: null,
             warnings: [
                 `${ENV_SITE_BASIC_AUTH}: ignored — expected "user:pass" (a ":" separating username from password). The credential value is not shown.`,
             ],
@@ -80,39 +17,13 @@ export function parseSiteBasicAuth(env = process.env) {
     const password = raw.slice(idx + 1);
     if (user === '') {
         return {
-            userinfo: null,
+            header: null,
             warnings: [
                 `${ENV_SITE_BASIC_AUTH}: ignored — the username (before ":") is empty. Expected "user:pass". The credential value is not shown.`,
             ],
         };
     }
-    const userinfo = `${encodeUserinfoComponent('username', user)}:${encodeUserinfoComponent('password', password)}`;
-    return { userinfo, warnings: [] };
-}
-/**
- * Splice `userinfo` (a percent-encoded `user:pass`) into `url`, returning the
- * resulting href. When `userinfo` is `null`, the URL is returned unchanged
- * (string form). Any pre-existing userinfo on the URL is overwritten.
- *
- * This is the ONLY mutation the site-Basic channel performs — it never adds or
- * alters a header, so the Bearer in `Authorization` is untouched.
- */
-export function applyUserinfoToUrl(url, userinfo) {
-    const parsed = url instanceof URL ? new URL(url.href) : new URL(url);
-    if (userinfo === null) {
-        return parsed.href;
-    }
-    const sep = userinfo.indexOf(':');
-    if (sep < 0) {
-        // Defensive — parseSiteBasicAuth always produces a colon; a caller that
-        // hand-builds a userinfo without one gets username-only behaviour.
-        parsed.username = userinfo;
-        parsed.password = '';
-    }
-    else {
-        parsed.username = userinfo.slice(0, sep);
-        parsed.password = userinfo.slice(sep + 1);
-    }
-    return parsed.href;
+    const header = `Basic ${Buffer.from(`${user}:${password}`, 'utf-8').toString('base64')}`;
+    return { header, warnings: [] };
 }
 //# sourceMappingURL=site-basic-auth.js.map

package/dist/net/site-basic-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"site-basic-auth.js","sourceRoot":"","sources":["../../src/net/site-basic-auth.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;AAa7D;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,IAA6B,EAAE,KAAa;IACzE,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACtB,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC;QACnB,OAAO,CAAC,CAAC,QAAQ,CAAC;IACtB,CAAC;IACD,6EAA6E;IAC7E,gDAAgD;IAChD,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC;IACjB,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC;IACnB,OAAO,CAAC,CAAC,QAAQ,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACb,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACV,yDAAyD;QACzD,OAAO;YACH,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE;gBACN,GAAG,mBAAmB,gHAAgH;aACzI;SACJ,CAAC;IACN,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACd,OAAO;YACH,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE;gBACN,GAAG,mBAAmB,0GAA0G;aACnI;SACJ,CAAC;IACN,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,uBAAuB,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;IACjH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAiB,EAAE,QAAuB;IACzE,MAAM,MAAM,GAAG,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,IAAI,CAAC;IACvB,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACV,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC3B,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;IACzB,CAAC;SAAM,CAAC;QACJ,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACvB,CAAC"}
+{"version":3,"file":"site-basic-auth.js","sourceRoot":"","sources":["../../src/net/site-basic-auth.ts"],"names":[],"mappings":"AA6BA,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;AAiB7D,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAEV,OAAO;YACH,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE;gBACN,GAAG,mBAAmB,gHAAgH;aACzI;SACJ,CAAC;IACN,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACd,OAAO;YACH,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE;gBACN,GAAG,mBAAmB,0GAA0G;aACnI;SACJ,CAAC;IACN,CAAC;IAGD,MAAM,MAAM,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IACzF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACpC,CAAC"}

package/dist/package-version.d.ts

@@ -0,0 +1,2 @@
+export declare const PACKAGE_VERSION: string;
+//# sourceMappingURL=package-version.d.ts.map

package/dist/package-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-version.d.ts","sourceRoot":"","sources":["../src/package-version.ts"],"names":[],"mappings":"AAqCA,eAAO,MAAM,eAAe,QAAuB,CAAC"}

package/dist/package-version.js

@@ -0,0 +1,15 @@
+import { readFileSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+function readPackageVersion() {
+    const here = dirname(fileURLToPath(import.meta.url));
+    const pkgPath = resolve(here, '..', 'package.json');
+    const raw = readFileSync(pkgPath, 'utf-8');
+    const parsed = JSON.parse(raw);
+    if (typeof parsed.version !== 'string' || parsed.version.length === 0) {
+        throw new Error(`yt-builder-mcp: package.json at ${pkgPath} is missing a string "version" field`);
+    }
+    return parsed.version;
+}
+export const PACKAGE_VERSION = readPackageVersion();
+//# sourceMappingURL=package-version.js.map

package/dist/package-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-version.js","sourceRoot":"","sources":["../src/package-version.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,SAAS,kBAAkB;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;IACxD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CACX,mCAAmC,OAAO,sCAAsC,CACnF,CAAC;IACN,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC;AAC1B,CAAC;AAGD,MAAM,CAAC,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC"}

package/dist/platform/detect.d.ts

@@ -1,64 +1,10 @@
-/**
- * Runtime platform detection — F-Platform-Detect-Probe (P0 customer fix).
- *
- * The static URL-shape heuristic in `detectPlatformFromUrl()` only works
- * when the user-supplied base URL already carries `/wp-json/` or
- * `/api/index.php/` in its path. That is RARELY the case in practice —
- * the MCPB/manifest tells the user to enter the **site origin** (or a
- * subfolder install like `https://dev.example.com/joomla`), neither of
- * which contains those markers. The heuristic then silently falls back
- * to the WordPress default and the Joomla customer experiences a
- * 24/24 FAIL until they manually set `YTB_MCP_PLATFORM=joomla`.
- *
- * This module adds a *runtime probe*: lightweight unauthenticated GETs
- * against both platforms' `/health` endpoints. Whichever returns a
- * yt-builder-mcp-shaped response (a JSON body carrying `plugin_version`)
- * wins. Joomla is probed first because the negative case (probe fails)
- * is the long-tail and the positive case (probe succeeds) returns fast
- * — letting the more common WordPress install just fall through to the
- * second probe without paying for a wasted full timeout.
- *
- * The probe is fire-and-forget safe:
- *   - 3 s `AbortSignal.timeout` per request (so a totally broken host
- *     blocks ~6 s worst case, not the request's full 15 s default).
- *   - Non-200 responses are ignored (Joomla on a WP-only install
- *     answers 404; that's fine).
- *   - Non-JSON / wrong-shape 200 responses are ignored (a WP frontend
- *     without the plugin renders the homepage HTML, which `JSON.parse`
- *     refuses — handled).
- *   - Any thrown error (DNS, TLS, abort) is swallowed → try next.
- *
- * The function returns `null` when BOTH probes fail; the caller then
- * falls back to the URL-shape heuristic or the wordpress default. We do
- * NOT throw, because a missing-plugin or wrong-URL diagnosis belongs to
- * the first real authenticated request — not to silent boot-time probing.
- *
- * @license MIT
- */
 import { type PlatformKind } from './index.js';
-/**
- * Minimal fetch type so callers (and tests) can inject a stub without
- * pulling DOM types. Matches the global `fetch` contract we actually use.
- */
 export type ProbeFetch = (input: string, init?: {
     signal?: AbortSignal;
 }) => Promise<Response>;
 export interface DetectPlatformAtRuntimeOptions {
-    /** Override the per-probe timeout (ms). Default 3000. */
     readonly timeoutMs?: number;
-    /** Injectable fetch (tests). Defaults to the global `fetch`. */
     readonly fetchImpl?: ProbeFetch;
 }
-/**
- * Probe both platforms' health endpoints and return the first kind that
- * answers with a yt-builder-mcp-shaped JSON payload. Returns `null`
- * when neither responds usefully (so the caller can fall through to the
- * URL-shape heuristic / default).
- *
- * NB: `baseUrl` is taken verbatim except for trimming trailing slashes.
- * If `baseUrl` itself carries a path component (e.g. subfolder install
- * `https://dev.example.com/joomla`) we preserve it — that path is where
- * Joomla's `/api/index.php/...` is rooted.
- */
 export declare function detectPlatformAtRuntime(baseUrl: string, options?: DetectPlatformAtRuntimeOptions): Promise<PlatformKind | null>;
 //# sourceMappingURL=detect.d.ts.map

package/dist/platform/detect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../../src/platform/detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAGH,KAAK,YAAY,EACpB,MAAM,YAAY,CAAC;AAKpB;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,CACrB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,KAC9B,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB,MAAM,WAAW,8BAA8B;IAC3C,yDAAyD;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;CACnC;AAaD;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CACzC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,8BAAmC,GAC7C,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAgB9B"}
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../../src/platform/detect.ts"],"names":[],"mappings":"AAsCA,OAAO,EAGH,KAAK,YAAY,EACpB,MAAM,YAAY,CAAC;AASpB,MAAM,MAAM,UAAU,GAAG,CACrB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,KAC9B,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB,MAAM,WAAW,8BAA8B;IAE3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;CACnC;AAwBD,wBAAsB,uBAAuB,CACzC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,8BAAmC,GAC7C,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAgB9B"}

package/dist/platform/detect.js

@@ -1,59 +1,9 @@
-/**
- * Runtime platform detection — F-Platform-Detect-Probe (P0 customer fix).
- *
- * The static URL-shape heuristic in `detectPlatformFromUrl()` only works
- * when the user-supplied base URL already carries `/wp-json/` or
- * `/api/index.php/` in its path. That is RARELY the case in practice —
- * the MCPB/manifest tells the user to enter the **site origin** (or a
- * subfolder install like `https://dev.example.com/joomla`), neither of
- * which contains those markers. The heuristic then silently falls back
- * to the WordPress default and the Joomla customer experiences a
- * 24/24 FAIL until they manually set `YTB_MCP_PLATFORM=joomla`.
- *
- * This module adds a *runtime probe*: lightweight unauthenticated GETs
- * against both platforms' `/health` endpoints. Whichever returns a
- * yt-builder-mcp-shaped response (a JSON body carrying `plugin_version`)
- * wins. Joomla is probed first because the negative case (probe fails)
- * is the long-tail and the positive case (probe succeeds) returns fast
- * — letting the more common WordPress install just fall through to the
- * second probe without paying for a wasted full timeout.
- *
- * The probe is fire-and-forget safe:
- *   - 3 s `AbortSignal.timeout` per request (so a totally broken host
- *     blocks ~6 s worst case, not the request's full 15 s default).
- *   - Non-200 responses are ignored (Joomla on a WP-only install
- *     answers 404; that's fine).
- *   - Non-JSON / wrong-shape 200 responses are ignored (a WP frontend
- *     without the plugin renders the homepage HTML, which `JSON.parse`
- *     refuses — handled).
- *   - Any thrown error (DNS, TLS, abort) is swallowed → try next.
- *
- * The function returns `null` when BOTH probes fail; the caller then
- * falls back to the URL-shape heuristic or the wordpress default. We do
- * NOT throw, because a missing-plugin or wrong-URL diagnosis belongs to
- * the first real authenticated request — not to silent boot-time probing.
- *
- * @license MIT
- */
 import { JOOMLA_REST_NAMESPACE_PATH, WORDPRESS_REST_NAMESPACE_PATH, } from './index.js';
-/** Per-probe HTTP timeout. Keep tight — boot-time UX is on the line. */
 const PROBE_TIMEOUT_MS = 3_000;
 const PROBE_CANDIDATES = [
-    // Joomla first — see module header rationale.
     { kind: 'joomla', path: `${JOOMLA_REST_NAMESPACE_PATH}/health` },
     { kind: 'wordpress', path: `${WORDPRESS_REST_NAMESPACE_PATH}/health` },
 ];
-/**
- * Probe both platforms' health endpoints and return the first kind that
- * answers with a yt-builder-mcp-shaped JSON payload. Returns `null`
- * when neither responds usefully (so the caller can fall through to the
- * URL-shape heuristic / default).
- *
- * NB: `baseUrl` is taken verbatim except for trimming trailing slashes.
- * If `baseUrl` itself carries a path component (e.g. subfolder install
- * `https://dev.example.com/joomla`) we preserve it — that path is where
- * Joomla's `/api/index.php/...` is rooted.
- */
 export async function detectPlatformAtRuntime(baseUrl, options = {}) {
     const timeoutMs = options.timeoutMs ?? PROBE_TIMEOUT_MS;
     const fetchImpl = options.fetchImpl ?? globalThis.fetch;
@@ -73,8 +23,6 @@ async function probeOne(url, timeoutMs, fetchImpl) {
         const r = await fetchImpl(url, { signal });
         if (!r.ok)
             return false;
-        // Some hosts answer JSON with `text/html` Content-Type; don't
-        // rely on the header. Parse defensively.
         const text = await r.text();
         let body;
         try {
@@ -89,7 +37,6 @@ async function probeOne(url, timeoutMs, fetchImpl) {
         return false;
     }
 }
-/** Recognises a yt-builder-mcp `/health` response. */
 function isYtbHealthShape(body) {
     return (typeof body === 'object'
         && body !== null

package/dist/platform/detect.js.map

@@ -1 +1 @@
-{"version":3,"file":"detect.js","sourceRoot":"","sources":["../../src/platform/detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EACH,0BAA0B,EAC1B,6BAA6B,GAEhC,MAAM,YAAY,CAAC;AAEpB,wEAAwE;AACxE,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAuB/B,MAAM,gBAAgB,GAA8B;IAChD,8CAA8C;IAC9C,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,0BAA0B,SAAS,EAAE;IAChE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,6BAA6B,SAAS,EAAE;CACzE,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,OAAe,EACf,UAA0C,EAAE;IAE5C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACxD,MAAM,SAAS,GACX,OAAO,CAAC,SAAS,IAAK,UAAU,CAAC,KAAoB,CAAC;IAC1D,IAAI,OAAO,SAAS,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAEjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,gBAAgB,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC1B,OAAO,GAAG,IAAI,EACd,SAAS,EACT,SAAS,CACZ,CAAC;QACF,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,QAAQ,CACnB,GAAW,EACX,SAAiB,EACjB,SAAqB;IAErB,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACxB,8DAA8D;QAC9D,yCAAyC;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,sDAAsD;AACtD,SAAS,gBAAgB,CAAC,IAAa;IACnC,OAAO,CACH,OAAO,IAAI,KAAK,QAAQ;WACrB,IAAI,KAAK,IAAI;WACb,gBAAgB,IAAI,IAAI,CAC9B,CAAC;AACN,CAAC"}
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../../src/platform/detect.ts"],"names":[],"mappings":"AAsCA,OAAO,EACH,0BAA0B,EAC1B,6BAA6B,GAEhC,MAAM,YAAY,CAAC;AAGpB,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAuB/B,MAAM,gBAAgB,GAA8B;IAEhD,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,0BAA0B,SAAS,EAAE;IAChE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,6BAA6B,SAAS,EAAE;CACzE,CAAC;AAaF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,OAAe,EACf,UAA0C,EAAE;IAE5C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACxD,MAAM,SAAS,GACX,OAAO,CAAC,SAAS,IAAK,UAAU,CAAC,KAAoB,CAAC;IAC1D,IAAI,OAAO,SAAS,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAEjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,gBAAgB,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC1B,OAAO,GAAG,IAAI,EACd,SAAS,EACT,SAAS,CACZ,CAAC;QACF,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,QAAQ,CACnB,GAAW,EACX,SAAiB,EACjB,SAAqB;IAErB,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAGxB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAGD,SAAS,gBAAgB,CAAC,IAAa;IACnC,OAAO,CACH,OAAO,IAAI,KAAK,QAAQ;WACrB,IAAI,KAAK,IAAI;WACb,gBAAgB,IAAI,IAAI,CAC9B,CAAC;AACN,CAAC"}

package/dist/platform/index.d.ts

@@ -1,45 +1,10 @@
-/**
- * Platform abstraction — Wave G.0.
- *
- * A `Platform` is the seam between the MCP server and a host CMS. Today
- * the only concrete impl is `WordPressPlatform`; `joomla` is reserved
- * as a typed seam-marker so Wave G.4+ can land Joomla without rippling
- * through every call site.
- *
- * Why an interface instead of a tagged union?
- *   - Each platform owns its REST-namespace path verbatim (WP uses
- *     `/wp-json/<ns>`, Joomla will use `/index.php?option=com_ajax&…`).
- *   - Adding a platform = implement the interface + add a `PlatformKind`
- *     member. No switch statements to update.
- *
- * The `RestClient` accepts EITHER a `Platform` OR the legacy
- * `{baseUrl}` form (which internally builds a `WordPressPlatform`),
- * so existing callers keep working unchanged.
- *
- * @license MIT
- */
-/** Tagged union of supported host platforms. */
 export type PlatformKind = 'wordpress' | 'joomla';
-/**
- * A `Platform` describes WHERE and HOW the MCP server reaches the
- * REST surface of the host CMS.
- */
 export interface Platform {
-    /** Discriminator for runtime checks. */
     readonly kind: PlatformKind;
-    /** Origin (scheme + host + optional port). No trailing-slash normalisation here. */
     readonly baseUrl: string;
-    /** Path prefix appended to baseUrl to form the REST root (must start with `/`). */
     readonly restNamespacePath: string;
 }
-/** Canonical WordPress REST-namespace path for this plugin. */
 export declare const WORDPRESS_REST_NAMESPACE_PATH = "/wp-json/yt-builder-mcp/v1";
-/**
- * WordPress platform implementation.
- *
- * `restNamespacePath` is fixed to the plugin's namespace; the caller
- * supplies only the site origin.
- */
 export declare class WordPressPlatform implements Platform {
     readonly kind: "wordpress";
     readonly baseUrl: string;
@@ -47,73 +12,8 @@ export declare class WordPressPlatform implements Platform {
     constructor(baseUrl: string);
 }
 export { JoomlaPlatform, JOOMLA_REST_NAMESPACE_PATH } from './joomla.js';
-/**
- * Detect which {@link Platform} a base URL targets based on the URL
- * shape alone (no network call).
- *
- *   - pathname starts with `/wp-json/` → `'wordpress'`
- *   - pathname starts with `/api/index.php/` → `'joomla'`
- *   - otherwise → `null` (ambiguous — caller may probe `/identity`)
- *
- * Round-6 A1 polish: detection switched from `String.includes` to a
- * proper `URL`-parse + `pathname.startsWith` so query-string payloads
- * cannot cause mis-detection (e.g. a Joomla site URL like
- * `https://example.com/?redirect=/wp-json/foo` no longer pretends to
- * be WordPress). Malformed URLs that the `URL` constructor rejects
- * gracefully fall back to the legacy substring scan so callers that
- * accidentally pass a host-only string (e.g. `example.com`) keep
- * working — they would have already failed the actual network call
- * with a clearer error before this function was reached in practice.
- *
- * Cookbook §3.7.1 — the runtime tie-breaker (when this returns `null`)
- * is the `/identity` endpoint, which returns
- * `{ product: 'yt-builder-mcp', platform: 'wordpress'|'joomla', ... }`
- * on both platforms.
- */
 export declare function detectPlatformFromUrl(url: string): PlatformKind | null;
-/**
- * Construct the right {@link Platform} for a base URL.
- *
- * When the URL shape gives an unambiguous hint via
- * {@link detectPlatformFromUrl}, that wins. Otherwise the caller can
- * pass an explicit `hint` (e.g. from a config flag) or fall back to
- * the default (`'wordpress'` for back-compat — Joomla support landed
- * in Wave 7, so existing WordPress installs never need to flag).
- *
- * Synchronous variant — kept for back-compat with callers that cannot
- * (or do not need to) probe over the network. Prefer
- * {@link platformForUrlAsync} when running in the server boot path:
- * it adds a runtime probe that disambiguates origin-only / subfolder
- * URLs (e.g. `https://example.com/joomla`) where the URL shape alone
- * is silent.
- */
 export declare function platformForUrl(baseUrl: string, hint?: PlatformKind): Platform;
-/**
- * Async variant of {@link platformForUrl} that adds a runtime probe
- * step for URLs the URL-shape heuristic cannot disambiguate.
- *
- * Resolution order (first match wins):
- *   1. Explicit `hint` from `YTB_MCP_PLATFORM` env var → no probe.
- *   2. URL-shape via {@link detectPlatformFromUrl} (clear `/wp-json/`
- *      or `/api/index.php/` marker) → no probe.
- *   3. Runtime probe via `detectPlatformAtRuntime` (the F-Platform-
- *      Detect-Probe fix — handles subfolder installs like
- *      `https://dev.example.com/joomla` where steps 1+2 return null).
- *   4. Final fallback: `'wordpress'` (back-compat).
- *
- * The probe step is what unblocks origin-only Joomla customers without
- * forcing them to manually set `YTB_MCP_PLATFORM=joomla` — the MCPB
- * default of `auto` finally lives up to its name.
- *
- * If both probes fail (server unreachable, plugin not installed, etc.)
- * we fall back to the wordpress default and emit a single stderr note
- * so the customer at least sees *why* the next authenticated call may
- * 404; the real diagnosis still belongs to the first authenticated
- * tool invocation.
- *
- * @param opts.probe Optional probe override (tests / DI).
- * @param opts.logger Optional stderr writer (defaults to `process.stderr.write`).
- */
 export declare function platformForUrlAsync(baseUrl: string, hint?: PlatformKind, opts?: {
     readonly probe?: (url: string) => Promise<PlatformKind | null>;
     readonly logger?: (msg: string) => void;

package/dist/platform/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/platform/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,gDAAgD;AAChD,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC;AAElD;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACrB,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,oFAAoF;IACpF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACtC;AAED,+DAA+D;AAC/D,eAAO,MAAM,6BAA6B,+BAA+B,CAAC;AAE1E;;;;;GAKG;AACH,qBAAa,iBAAkB,YAAW,QAAQ;IAC9C,SAAgB,IAAI,EAAG,WAAW,CAAU;IAC5C,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,iBAAiB,EAAE,MAAM,CAAC;gBAE9B,OAAO,EAAE,MAAM;CAI9B;AAOD,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAEzE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAetE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAC1B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,YAAY,GACpB,QAAQ,CAMV;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,mBAAmB,CACrC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,YAAY,EACnB,IAAI,GAAE;IACF,QAAQ,CAAC,KAAK,CAAC,EAAE,CACb,GAAG,EAAE,MAAM,KACV,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC,GACP,OAAO,CAAC,QAAQ,CAAC,CA0CnB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/platform/index.ts"],"names":[],"mappings":"AAsBA,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC;AAMlD,MAAM,WAAW,QAAQ;IAErB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAE5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACtC;AAGD,eAAO,MAAM,6BAA6B,+BAA+B,CAAC;AAQ1E,qBAAa,iBAAkB,YAAW,QAAQ;IAC9C,SAAgB,IAAI,EAAG,WAAW,CAAU;IAC5C,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,iBAAiB,EAAE,MAAM,CAAC;gBAE9B,OAAO,EAAE,MAAM;CAI9B;AAOD,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAyBzE,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAetE;AAkBD,wBAAgB,cAAc,CAC1B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,YAAY,GACpB,QAAQ,CAMV;AA4BD,wBAAsB,mBAAmB,CACrC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,YAAY,EACnB,IAAI,GAAE;IACF,QAAQ,CAAC,KAAK,CAAC,EAAE,CACb,GAAG,EAAE,MAAM,KACV,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC,GACP,OAAO,CAAC,QAAQ,CAAC,CA0CnB"}