@wootsup/yt-builder-mcp 1.12.0 → 2.1.0

package/dist/setup-wizard-types.d.ts

@@ -1,157 +1,52 @@
-/**
- * Public types for the interactive setup wizard.
- *
- * Split out of `setup-wizard.ts` in the Round-1 audit I5 fix so the
- * type surface is consumable without dragging in @clack/prompts or the
- * RestClient. Tests and other modules import these types alone.
- *
- * @license MIT
- */
 import type { DetectedClient, McpServerConfig } from './clients/index.js';
 import type { Platform, PlatformKind } from './platform/index.js';
+import type { ClosingSummary } from './setup/closing.js';
+import type { ResumeProgress } from './setup/resume.js';
+import type { PreviousContent, WriteResult } from './setup-wizard-write-types.js';
+export type { PreviousContent, WriteResult };
 export interface WizardAnswers {
-    /** Trimmed, trailing-slash-stripped WordPress base URL. */
     readonly wpUrl: string;
-    /** Trimmed Bearer key. */
     readonly bearer: string;
-    /** IDs of clients the user wants wired up. */
     readonly selectedClients: readonly string[];
-    /**
-     * Explicit host-platform hint from the `--platform wordpress|joomla`
-     * flag (auto / unset omits this field). When set, it WINS over the
-     * runtime platform detection — the wizard never probes and never
-     * silently assumes WordPress for it. Threaded from
-     * {@link ../setup-cli.ParsedSetupArgs.platform}.
-     */
     readonly platform?: PlatformKind;
-    /**
-     * Site ID (multi-site registry key). Optional for back-compat with
-     * non-interactive flag paths that don't ask for it; the wizard
-     * defaults missing/empty values to `'default'`. Renamed from
-     * `profileName` in W9 to align with the multi-site registry's
-     * `site_id` field (see `src/sites/schema.ts`).
-     */
     readonly siteId?: string;
-    /**
-     * Path to a corporate/proxy root CA `.pem` (from `--ca <path>` or the
-     * wizard's CA prompt). When set, the generated server entry's env block
-     * gets `NODE_EXTRA_CA_CERTS=<path>` so the server trusts a TLS-inspection
-     * chain. Never disables verification. Mutually exclusive with
-     * {@link caMode}.
-     */
     readonly caCertPath?: string;
-    /**
-     * Corporate-CA trust strategy (from `--ca=system` / `--use-system-ca` or
-     * the wizard's CA prompt). `'system'` writes `NODE_OPTIONS=--use-system-ca`
-     * into the env block so Node reads the OS trust store (Windows CryptoAPI /
-     * macOS Keychain) — the zero-export path on Node ≥ 22.15. Mutually
-     * exclusive with {@link caCertPath}.
-     */
     readonly caMode?: 'system';
-    /**
-     * customer gap #15 — optional version pin (from `--pin <version>` or the
-     * `YTB_MCP_VERSION` env var). When set to an exact semver / dist-tag, the
-     * generated client config runs `npx -y @wootsup/yt-builder-mcp@<version>`
-     * (reproducible / air-gapped) instead of the default floating
-     * `@latest`. `'latest'` / empty = float (default, auto-updating). For a
-     * fully npx-free install, the `.mcpb` Desktop build is the alternative.
-     */
     readonly versionPin?: string;
+    readonly overwriteSite?: boolean;
 }
-/**
- * Decoded payload of a Bearer key. The plugin signs `kid`, `scope`, `iss`
- * (issuer = WordPress `site_url`), and optionally `exp` into the token's
- * base64url payload section. The wizard decodes this WITHOUT verifying the
- * signature (verification requires the plugin's secret) — `iss` is used
- * purely to pre-fill the URL prompt; the canonical auth check happens
- * later when the wizard hits `/v1/health` with the token.
- */
 export interface DecodedTokenPayload {
     readonly kid: string;
     readonly scope: readonly string[];
-    /** Issuer — canonical WordPress site URL the key was generated on. */
     readonly iss: string;
-    /** Unix expiry timestamp, if the operator opted-in to expiry. */
     readonly exp?: number;
 }
-/**
- * Result of the public `/v1/identity` probe — the wizard uses this to
- * (a) confirm the plugin is installed at the URL the user typed and
- * (b) cross-check the URL against the token's `iss` claim before writing
- * any AI-client config.
- */
 export interface IdentityProbeResult {
     readonly ok: boolean;
-    /** Canonical site URL reported by the plugin. */
     readonly siteurl?: string;
-    /** Platform discriminator: 'wordpress' today, 'joomla' later. */
     readonly platform?: 'wordpress' | 'joomla';
-    /** Product discriminator (defends against another MCP at the same URL). */
     readonly product?: string;
-    /** Plugin version (for diagnostic display). */
     readonly pluginVersion?: string;
-    /** Failure message when ok=false. */
     readonly error?: string;
 }
-/**
- * Result of a successful `/setup/pickup` POST — a one-shot, IP-bound,
- * 5-minute-TTL retrieval of a freshly-minted Bearer token + the
- * canonical site URL the plugin reports. The wizard treats this as
- * "answers obtained" and skips the URL/token prompts.
- *
- * Failure modes (404 expired/consumed, 403 IP-mismatch, 429 rate-limit,
- * 400 invalid) are signalled by `fetchPickup` rejecting with a thrown
- * Error — there is no partial success shape.
- */
 export interface PickupResult {
-    /** Bearer token in plugin format `ytb_(live|test)_<payload>.<sig>`. */
     readonly token: string;
-    /** Canonical WordPress site URL reported by the plugin. */
     readonly siteurl: string;
-    /** Plugin version string for diagnostic display. */
     readonly pluginVersion: string;
 }
 export interface HealthProbeResult {
     readonly ok: boolean;
-    /** Plugin version reported by the server (if any). */
     readonly pluginVersion?: string;
-    /** Error message if `ok=false`. */
     readonly error?: string;
-    /**
-     * True when the failure was a TLS chain-of-trust error (the corporate
-     * TLS-inspection signature). The wizard uses this to offer the CA prompt
-     * instead of the generic "continue anyway?" path. Set by the probe via
-     * {@link isCaTrustError}; absent/false means "not a CA problem".
-     */
     readonly caTrust?: boolean;
-    /**
-     * True when the failure was a connection/handshake TIMEOUT (e.g.
-     * `UND_ERR_CONNECT_TIMEOUT` / `ETIMEDOUT`). A TLS-inspecting corporate
-     * proxy whose root CA can't be built often manifests as an opaque 30s
-     * timeout rather than a clean CA-trust code, so the wizard attempts the
-     * OS-trust-store (`--use-system-ca`) recovery on a timeout too (on Node ≥
-     * 22.15). Set by the probe via {@link isTimeoutError}; absent/false means
-     * "not a timeout". May coincide with — but is independent of —
-     * {@link caTrust}.
-     */
     readonly timeout?: boolean;
 }
 export interface AuthProbeResult {
     readonly ok: boolean;
     readonly error?: string;
-    /** See {@link HealthProbeResult.caTrust}. */
     readonly caTrust?: boolean;
-    /** See {@link HealthProbeResult.timeout}. */
     readonly timeout?: boolean;
 }
-/**
- * The user's answer to the wizard's corporate-CA prompt (G-D #6).
- *   - `system` → trust the OS store (`--use-system-ca`), offered only on a
- *     supporting Node.
- *   - `file`   → a `.pem` path the user provides.
- *   - `skip`   → proceed without configuring a CA (falls back to the generic
- *     "continue anyway?" decision).
- */
 export type CaPromptChoice = {
     readonly choice: 'system';
 } | {
@@ -163,144 +58,50 @@ export type CaPromptChoice = {
 export interface HandshakeResult {
     readonly ok: boolean;
     readonly pluginVersion?: string;
-    /** Mismatch warning string when plugin version != NPM package version. */
     readonly warning?: string;
     readonly error?: string;
 }
-export interface WriteResult {
-    readonly id: string;
-    readonly label: string;
-    readonly ok: boolean;
-    readonly error?: string;
-    /** Path that was written. Empty string on failure. */
-    readonly path: string;
-    /** Snapshot of the file content BEFORE the write (for rollback). */
-    readonly previousContent: string | null;
-}
 export interface WizardDeps {
-    /** Collect answers from the user. Return `null` on cancel. */
     prompt: (input: {
         detected: readonly DetectedClient[];
+        existingSiteIds?: readonly string[];
+        siteIdDefault?: string;
+        repeatPass?: boolean;
+        urlDefault?: string;
+        clientDefaults?: readonly string[];
     }) => Promise<WizardAnswers | null>;
-    /** Detect installed AI clients. */
     detectClients: () => readonly DetectedClient[];
-    /**
-     * Resolve the host platform for `wpUrl` EXACTLY ONCE, up-front. Returns
-     * the detected {@link PlatformKind}, or `null` when neither the URL shape
-     * nor the runtime probe can decide (an origin-only URL whose plugin is
-     * unreachable). The wizard maps a `null` to {@link promptPlatform} (or,
-     * non-interactively, a warned WordPress fallback) — it must NEVER silently
-     * assume WordPress on a Joomla origin, which is the class of bug this
-     * resolves. Optional for back-compat: when absent the wizard falls back to
-     * WordPress with a warning (pre-Wave-J single-platform behaviour).
-     */
     resolvePlatform?: (wpUrl: string) => Promise<PlatformKind | null>;
-    /**
-     * Prompt the operator to pick `wordpress` / `joomla` when auto-detection
-     * cannot decide AND no `--platform` flag was given (the safety net that
-     * replaces the silent-WordPress default). Returns `null` on cancel. Only
-     * wired on the interactive path — the non-interactive / pickup paths leave
-     * it undefined (no TTY) and fall back to a warned WordPress default.
-     */
     promptPlatform?: () => Promise<PlatformKind | null>;
-    /**
-     * Probe the plugin /health endpoint (no auth). The optional resolved
-     * {@link Platform} targets the correct REST namespace (WordPress `/wp-json`
-     * vs Joomla `/api/index.php`); when omitted the probe uses the legacy
-     * WordPress form for back-compat.
-     */
+    now?: () => number;
     probeHealth: (wpUrl: string, platform?: Platform) => Promise<HealthProbeResult>;
-    /**
-     * Probe the plugin /identity endpoint (no auth) — used to verify the
-     * URL belongs to a yt-builder-mcp install and cross-check it
-     * against the token's `iss` claim. Optional for back-compat: when the
-     * field is missing the wizard skips the identity check. The optional
-     * resolved {@link Platform} targets the correct REST namespace.
-     */
     probeIdentity?: (wpUrl: string, platform?: Platform) => Promise<IdentityProbeResult>;
-    /** Probe the plugin /etag endpoint (Bearer auth). The optional resolved
-     *  {@link Platform} targets the correct REST namespace. */
     probeAuth: (wpUrl: string, bearer: string, platform?: Platform) => Promise<AuthProbeResult>;
-    /** Confirm whether to continue when a probe fails. */
     confirmContinue: (message: string) => Promise<boolean>;
-    /** Write the MCP server config for a single client. */
     writeClient: (id: string, serverName: string, config: McpServerConfig) => Promise<WriteResult>;
-    /** Re-run the auth probe AFTER the configs were written and parse
-     *  the plugin version. Used as the dist-tag handshake. The optional
-     *  resolved {@link Platform} targets the correct REST namespace. */
     handshake: (wpUrl: string, bearer: string, packageVersion: string, platform?: Platform) => Promise<HandshakeResult>;
-    /**
-     * POST `{ nonce }` to the pickup URL revealed by wp-admin and resolve
-     * to a `PickupResult` (token + canonical site URL + plugin version).
-     *
-     * Implementations MUST throw on any non-200 response (404 expired /
-     * consumed, 403 IP-mismatch, 429 rate-limited, 400 malformed) so the
-     * wizard's pickup branch can abort with a single error path. The
-     * thrown Error's `.message` is what gets shown to the user.
-     *
-     * Optional for back-compat with older WizardDeps bags constructed
-     * before Wave-C — when missing, callers that pass `--pickup` get a
-     * clear "pickup not supported by this WizardDeps" error.
-     */
     fetchPickup?: (pickupUrl: string, nonce: string) => Promise<PickupResult>;
-    /**
-     * G-D #6/#7 — Node version string (default `process.version`) used to gate
-     * the OS-trust-store (`--use-system-ca`) CA option: the wizard only offers
-     * it on Node ≥ 22.15. Injectable so tests pin a version deterministically.
-     */
     nodeVersion?: string;
-    /**
-     * P0.1 — process environment (default `process.env`) read ONLY to detect a
-     * corporate forward-proxy (`HTTP(S)_PROXY`) for the default-on CA bake: when
-     * no explicit `--ca` was given and a proxy is configured (or the health
-     * probe reported a TLS-trust failure), the wizard auto-bakes
-     * `NODE_OPTIONS=--use-system-ca` (Node ≥ 22.15) unattended. Injectable so
-     * tests drive the proxy-present branch deterministically.
-     */
     processEnv?: NodeJS.ProcessEnv;
-    /**
-     * G-D #6 — prompt the user for a corporate-CA trust strategy when a probe
-     * fails with a TLS-inspection error. `systemCaSupported` tells the prompt
-     * whether to offer the OS-trust-store option. Optional for back-compat:
-     * when absent the wizard falls through to the generic "continue anyway?"
-     * path (pre-G-D behaviour).
-     */
     promptCa?: (input: {
         readonly systemCaSupported: boolean;
     }) => Promise<CaPromptChoice | null>;
-    /**
-     * G-D #6/#8 — apply the chosen CA at runtime and RE-PROBE health + auth so
-     * the wizard can confirm the fix worked before finalising (a real live
-     * validation, not a silent first-tool-call timeout). Optional: when absent
-     * the wizard re-runs the ordinary `probeHealth`/`probeAuth` deps after
-     * recording the choice.
-     */
     applyAndReProbe?: (input: {
         readonly wpUrl: string;
         readonly bearer: string;
         readonly choice: CaPromptChoice;
-        /** Resolved host platform so the CA re-probe targets the correct
-         *  REST namespace (WordPress vs Joomla). Optional for back-compat. */
         readonly platform?: Platform;
     }) => Promise<{
         readonly health: HealthProbeResult;
         readonly auth: AuthProbeResult;
     }>;
-    /** Optional sink for human-facing status lines. */
     log?: (line: string) => void;
-    /**
-     * W9 — invoked after both the health + auth probes have produced a
-     * decision (continue / aborted) so the wizard can persist the
-     * answers to the multi-site sites.json registry. Implementations
-     * MUST be idempotent: the wizard calls this exactly once on a
-     * successful run, but the dispatcher's overall retry policy may
-     * re-run the wizard.
-     *
-     * On failure the implementation should throw — the wizard treats
-     * the failure as a write-failure equivalent (rollback + exit 4).
-     * Optional for back-compat: when missing the wizard skips the
-     * sites.json write entirely (pre-W9 single-site env-var flow).
-     */
-    persistSite?: (answers: WizardAnswers) => Promise<void>;
+    persistSite?: (answers: WizardAnswers) => Promise<string | void>;
+    sitesFilePath?: string;
+    installSkill?: () => Promise<string>;
+    confirmAnotherSite?: () => Promise<boolean>;
+    saveResume?: (progress: ResumeProgress) => Promise<void>;
+    clearResume?: () => void;
+    printClosing?: (summary: ClosingSummary) => void | Promise<void>;
 }
 //# sourceMappingURL=setup-wizard-types.d.ts.map

package/dist/setup-wizard-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-wizard-types.d.ts","sourceRoot":"","sources":["../src/setup-wizard-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACR,cAAc,EACd,eAAe,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAElE,MAAM,WAAW,aAAa;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,0BAA0B;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAC3B;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,iDAAiD;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC3C,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,+CAA+C;IAC/C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,qCAAqC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,YAAY;IACzB,uEAAuE;IACvE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,sDAAsD;IACtD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,mCAAmC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;OASG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GACpB;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,MAAM,WAAW,eAAe;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,UAAU;IACvB,8DAA8D;IAC9D,MAAM,EAAE,CAAC,KAAK,EAAE;QACZ,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;KACvC,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACpC,mCAAmC;IACnC,aAAa,EAAE,MAAM,SAAS,cAAc,EAAE,CAAC;IAC/C;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAClE;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IACpD;;;;;OAKG;IACH,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChF;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACrF;+DAC2D;IAC3D,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5F,sDAAsD;IACtD,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,uDAAuD;IACvD,WAAW,EAAE,CACT,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,eAAe,KACtB,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1B;;wEAEoE;IACpE,SAAS,EAAE,CACP,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EACtB,QAAQ,CAAC,EAAE,QAAQ,KAClB,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9B;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1E;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC9F;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE;QACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;QAChC;8EACsE;QACtE,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;KAChC,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IACtF,mDAAmD;IACnD,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D"}
+{"version":3,"file":"setup-wizard-types.d.ts","sourceRoot":"","sources":["../src/setup-wizard-types.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACR,cAAc,EACd,eAAe,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAIlF,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC;AAE7C,MAAM,WAAW,aAAa;IAE1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAQ5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IAQjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAQzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAQ7B,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAS3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAS7B,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CACpC;AAUD,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAElC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACzB;AAQD,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IAErB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;IAE3C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAC3B;AAYD,MAAM,WAAW,YAAY;IAEzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IAErB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAOxB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAW3B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAE3B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC9B;AAUD,MAAM,MAAM,cAAc,GACpB;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,MAAM,WAAW,eAAe;IAC5B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IAEvB,MAAM,EAAE,CAAC,KAAK,EAAE;QACZ,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;QAYpC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAMpC,aAAa,CAAC,EAAE,MAAM,CAAC;QAcvB,UAAU,CAAC,EAAE,OAAO,CAAC;QAMrB,UAAU,CAAC,EAAE,MAAM,CAAC;QAKpB,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KACtC,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAEpC,aAAa,EAAE,MAAM,SAAS,cAAc,EAAE,CAAC;IAW/C,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAQlE,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAUpD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAOnB,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAQhF,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAGrF,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IAQ5F,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAEvD,WAAW,EAAE,CACT,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,eAAe,KACtB,OAAO,CAAC,WAAW,CAAC,CAAC;IAI1B,SAAS,EAAE,CACP,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EACtB,QAAQ,CAAC,EAAE,QAAQ,KAClB,OAAO,CAAC,eAAe,CAAC,CAAC;IAc9B,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAM1E,WAAW,CAAC,EAAE,MAAM,CAAC;IASrB,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAQ/B,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAQ9F,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE;QACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;QAGhC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;KAChC,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAEtF,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAoB7B,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAoBjE,aAAa,CAAC,EAAE,MAAM,CAAC;IAWvB,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAkBrC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAc5C,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAYzD,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IAoBzB,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpE"}

package/dist/setup-wizard-types.js

@@ -1,11 +1,2 @@
-/**
- * Public types for the interactive setup wizard.
- *
- * Split out of `setup-wizard.ts` in the Round-1 audit I5 fix so the
- * type surface is consumable without dragging in @clack/prompts or the
- * RestClient. Tests and other modules import these types alone.
- *
- * @license MIT
- */
 export {};
 //# sourceMappingURL=setup-wizard-types.js.map

package/dist/setup-wizard-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-wizard-types.js","sourceRoot":"","sources":["../src/setup-wizard-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}
+{"version":3,"file":"setup-wizard-types.js","sourceRoot":"","sources":["../src/setup-wizard-types.ts"],"names":[],"mappings":""}

package/dist/setup-wizard-write-types.d.ts

@@ -0,0 +1,19 @@
+export type PreviousContent = {
+    readonly kind: 'absent';
+} | {
+    readonly kind: 'content';
+    readonly text: string;
+} | {
+    readonly kind: 'unreadable';
+    readonly cause: unknown;
+};
+export interface WriteResult {
+    readonly id: string;
+    readonly label: string;
+    readonly ok: boolean;
+    readonly error?: string;
+    readonly path: string;
+    readonly previous: PreviousContent;
+    readonly backupPath?: string;
+}
+//# sourceMappingURL=setup-wizard-write-types.d.ts.map

package/dist/setup-wizard-write-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard-write-types.d.ts","sourceRoot":"","sources":["../src/setup-wizard-write-types.ts"],"names":[],"mappings":"AAuBA,MAAM,MAAM,eAAe,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/D,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IAMnC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAChC"}

package/dist/setup-wizard-write-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=setup-wizard-write-types.js.map

package/dist/setup-wizard-write-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard-write-types.js","sourceRoot":"","sources":["../src/setup-wizard-write-types.ts"],"names":[],"mappings":""}

package/dist/setup-wizard.d.ts

@@ -1,33 +1,5 @@
-/**
- * Interactive setup wizard for `@wootsup/yt-builder-mcp`.
- *
- * `runWizard()` accepts a {@link WizardDeps} bag so unit tests can drive
- * a deterministic prompt → validate → probe → write → handshake sequence
- * without touching real subprocesses or filesystems.
- *
- * After the Round-1 audit I5 fix, this file is the wizard ALGORITHM only:
- *   - `WizardDeps` and its result types live in `setup-wizard-types.ts`.
- *   - Default real-I/O implementations + `rollbackWrites` + `majorMinor`
- *     live in `setup-wizard-defaults.ts`.
- *   - The CLI dispatcher + main-guard live in `setup-cli.ts`.
- *
- * @license MIT
- */
 import type { AuthProbeResult, CaPromptChoice, HandshakeResult, HealthProbeResult, WizardAnswers, WizardDeps, WriteResult } from './setup-wizard-types.js';
 export { DEFAULT_WIZARD_DEPS, majorMinor } from './setup-wizard-defaults.js';
 export type { AuthProbeResult, CaPromptChoice, HandshakeResult, HealthProbeResult, WizardAnswers, WizardDeps, WriteResult, };
-/**
- * Run the interactive setup wizard. Returns a process exit-code so the
- * outer dispatcher can `process.exit(rc)` cleanly.
- *
- * Exit codes:
- *   0  — success (configs written, handshake OK)
- *   1  — invalid input that prevents proceeding
- *   2  — health probe failed and user declined to continue
- *   3  — auth probe failed and user declined to continue
- *   4  — write failed; configs rolled back
- *   5  — handshake failed; configs rolled back
- *   130 — user cancelled (matches the SIGINT convention)
- */
 export declare function runWizard(deps?: WizardDeps): Promise<number>;
 //# sourceMappingURL=setup-wizard.d.ts.map

package/dist/setup-wizard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-wizard.d.ts","sourceRoot":"","sources":["../src/setup-wizard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAoBH,OAAO,KAAK,EACR,eAAe,EACf,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,WAAW,EACd,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7E,YAAY,EACR,eAAe,EACf,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,WAAW,GACd,CAAC;AAqCF;;;;;;;;;;;;GAYG;AACH,wBAAsB,SAAS,CAC3B,IAAI,GAAE,UAAgC,GACvC,OAAO,CAAC,MAAM,CAAC,CA4bjB"}
+{"version":3,"file":"setup-wizard.d.ts","sourceRoot":"","sources":["../src/setup-wizard.ts"],"names":[],"mappings":"AA8CA,OAAO,KAAK,EACR,eAAe,EACf,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,WAAW,EACd,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7E,YAAY,EACR,eAAe,EACf,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,WAAW,GACd,CAAC;AAiBF,wBAAsB,SAAS,CAC3B,IAAI,GAAE,UAAgC,GACvC,OAAO,CAAC,MAAM,CAAC,CA6YjB"}