@cyanheads/mcp-ts-core 0.6.7 → 0.6.9

package/dist/mcp-server/transports/http/landing-page/assets/styles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"styles.js","sourceRoot":"","sources":["../../../../../../src/mcp-server/transports/http/landing-page/assets/styles.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAiB,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAEtE,2EAA2E;AAC3E,MAAM,cAAc,GAAG,SAAS,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC;IACpE,MAAM,GAAG,GAAG;;;;;;;;;;;;;;;;;;;;cAoBA,UAAU;wCACgB,UAAU;uCACX,UAAU;uCACV,UAAU;yCACR,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAq2BlD,CAAC;IACA,OAAO,SAAS,CAAC,UAAU,GAAG,UAAU,CAAC,CAAC;AAC5C,CAAC"}

package/dist/mcp-server/transports/http/landing-page/handler.d.ts

@@ -0,0 +1,32 @@
+/**
+ * @fileoverview Hono handler factory for `GET /` — serves the HTML landing
+ * page. Cache and body shape depend on `manifest.landing.requireAuth` and
+ * whether the caller presents an Authorization header.
+ *
+ * @module src/mcp-server/transports/http/landing-page/handler
+ */
+import type { Context } from 'hono';
+import type { ServerManifest } from '../../../../core/serverManifest.js';
+/**
+ * Factory for the `GET /` route handler.
+ *
+ * Cache behavior and body shape depend on `manifest.landing.requireAuth`:
+ *
+ * | `requireAuth` | Authenticated | Unauthenticated |
+ * |:---|:---|:---|
+ * | `false` (default) | full page · `Cache-Control: public, max-age=60` | full page · same |
+ * | `true` | full page · `Cache-Control: private, max-age=60` · `Vary: Authorization` | reduced hero-only page · same cache headers |
+ *
+ * The check is header-presence based — we don't validate the bearer token
+ * here (that's the MCP endpoint's job). If a caller presents any Authorization
+ * header, the full inventory renders; if not, they see a stub and a pointer
+ * to the docs link when available.
+ *
+ * When `manifest.transport.publicUrl` is set, the base URL is deterministic,
+ * so both page variants (full and degraded) are rendered once at factory
+ * time and served from memory on each request — the render pipeline then
+ * only runs when the origin must be derived per-request from
+ * `new URL(c.req.url).origin`.
+ */
+export declare function createLandingPageHandler(manifest: ServerManifest): (c: Context) => Response;
+//# sourceMappingURL=handler.d.ts.map

package/dist/mcp-server/transports/http/landing-page/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../../src/mcp-server/transports/http/landing-page/handler.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAwB/D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,cAAc,IASvD,GAAG,OAAO,KAAG,QAAQ,CAqC9B"}

package/dist/mcp-server/transports/http/landing-page/handler.js

@@ -0,0 +1,92 @@
+/**
+ * @fileoverview Hono handler factory for `GET /` — serves the HTML landing
+ * page. Cache and body shape depend on `manifest.landing.requireAuth` and
+ * whether the caller presents an Authorization header.
+ *
+ * @module src/mcp-server/transports/http/landing-page/handler
+ */
+import { logger } from '../../../../utils/internal/logger.js';
+import { requestContextService } from '../../../../utils/internal/requestContext.js';
+import { renderLandingPage } from './render.js';
+/**
+ * Content-Security-Policy for the landing page. The page is fully
+ * self-contained: a single inlined `<style>` block, a single inlined
+ * copy-to-clipboard `<script>`, and a JSON-LD structured data block. Logos
+ * are the only element with a variable source and are always either a
+ * data URI or an `https://` URL. Nothing else is fetched, framed, or
+ * submitted — the policy reflects that reality.
+ */
+const CONTENT_SECURITY_POLICY = [
+    "default-src 'none'",
+    "style-src 'unsafe-inline'",
+    "script-src 'unsafe-inline'",
+    "img-src 'self' data: https:",
+    "form-action 'none'",
+    "frame-ancestors 'none'",
+    "base-uri 'none'",
+].join('; ');
+/**
+ * Factory for the `GET /` route handler.
+ *
+ * Cache behavior and body shape depend on `manifest.landing.requireAuth`:
+ *
+ * | `requireAuth` | Authenticated | Unauthenticated |
+ * |:---|:---|:---|
+ * | `false` (default) | full page · `Cache-Control: public, max-age=60` | full page · same |
+ * | `true` | full page · `Cache-Control: private, max-age=60` · `Vary: Authorization` | reduced hero-only page · same cache headers |
+ *
+ * The check is header-presence based — we don't validate the bearer token
+ * here (that's the MCP endpoint's job). If a caller presents any Authorization
+ * header, the full inventory renders; if not, they see a stub and a pointer
+ * to the docs link when available.
+ *
+ * When `manifest.transport.publicUrl` is set, the base URL is deterministic,
+ * so both page variants (full and degraded) are rendered once at factory
+ * time and served from memory on each request — the render pipeline then
+ * only runs when the origin must be derived per-request from
+ * `new URL(c.req.url).origin`.
+ */
+export function createLandingPageHandler(manifest) {
+    const { publicUrl } = manifest.transport;
+    const precomputed = publicUrl
+        ? {
+            full: renderLandingPage(manifest, publicUrl, false),
+            degraded: renderLandingPage(manifest, publicUrl, true),
+        }
+        : null;
+    return (c) => {
+        const context = requestContextService.createRequestContext({
+            operation: 'landingPageHandler',
+        });
+        const baseUrl = publicUrl ?? new URL(c.req.url).origin;
+        const requireAuth = manifest.landing.requireAuth;
+        const authHeader = c.req.header('authorization');
+        const isAuthenticated = Boolean(authHeader && authHeader.trim().length > 0);
+        const degraded = requireAuth && !isAuthenticated;
+        const html = precomputed
+            ? degraded
+                ? precomputed.degraded
+                : precomputed.full
+            : renderLandingPage(manifest, baseUrl, degraded);
+        logger.debug('Serving landing page.', {
+            ...context,
+            accept: c.req.header('accept'),
+            bytes: html.length,
+            requireAuth,
+            degraded,
+            cached: precomputed !== null,
+        });
+        c.header('Content-Type', 'text/html; charset=utf-8');
+        c.header('X-Content-Type-Options', 'nosniff');
+        c.header('Content-Security-Policy', CONTENT_SECURITY_POLICY);
+        if (requireAuth) {
+            c.header('Cache-Control', 'private, max-age=60');
+            c.header('Vary', 'Authorization');
+        }
+        else {
+            c.header('Cache-Control', 'public, max-age=60');
+        }
+        return c.body(html);
+    };
+}
+//# sourceMappingURL=handler.js.map

package/dist/mcp-server/transports/http/landing-page/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../../../../src/mcp-server/transports/http/landing-page/handler.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD;;;;;;;GAOG;AACH,MAAM,uBAAuB,GAAG;IAC9B,oBAAoB;IACpB,2BAA2B;IAC3B,4BAA4B;IAC5B,6BAA6B;IAC7B,oBAAoB;IACpB,wBAAwB;IACxB,iBAAiB;CAClB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAwB;IAC/D,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC;IACzC,MAAM,WAAW,GAAG,SAAS;QAC3B,CAAC,CAAC;YACE,IAAI,EAAE,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;YACnD,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC;SACvD;QACH,CAAC,CAAC,IAAI,CAAC;IAET,OAAO,CAAC,CAAU,EAAY,EAAE;QAC9B,MAAM,OAAO,GAAG,qBAAqB,CAAC,oBAAoB,CAAC;YACzD,SAAS,EAAE,oBAAoB;SAChC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,SAAS,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QAEvD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC;QACjD,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,WAAW,IAAI,CAAC,eAAe,CAAC;QAEjD,MAAM,IAAI,GAAG,WAAW;YACtB,CAAC,CAAC,QAAQ;gBACR,CAAC,CAAC,WAAW,CAAC,QAAQ;gBACtB,CAAC,CAAC,WAAW,CAAC,IAAI;YACpB,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEnD,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;YACpC,GAAG,OAAO;YACV,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC9B,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,WAAW;YACX,QAAQ;YACR,MAAM,EAAE,WAAW,KAAK,IAAI;SAC7B,CAAC,CAAC;QAEH,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QACrD,CAAC,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QAC9C,CAAC,CAAC,MAAM,CAAC,yBAAyB,EAAE,uBAAuB,CAAC,CAAC;QAC7D,IAAI,WAAW,EAAE,CAAC;YAChB,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC;YACjD,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC"}

package/dist/mcp-server/transports/http/landing-page/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @fileoverview Public barrel for the HTML landing page served at `GET /`.
+ * Self-contained, zero-dependency renderer producing a branded,
+ * a11y-conscious, `prefers-color-scheme`-aware page from the shared
+ * `ServerManifest`.
+ *
+ * The page is the human-facing sibling of `/mcp` (bespoke JSON) and
+ * `/.well-known/mcp.json` (SEP-1649 Server Card). Framework owns the design
+ * system; servers supply content through `LandingConfig`.
+ *
+ * ## Surfaces
+ *
+ * - Hero — eyebrow, display-size server name, version + pre-release chips,
+ *   tagline, single-line status strip, terminal-chrome connection card,
+ *   framework attribution pill
+ * - Tools section — responsive 2-column card grid; prefix-grouped; per-card
+ *   annotation chips, invocation snippet, view-source link, schema preview
+ * - Resources section — URI template, mime type, description, view-source link
+ * - Prompts section — args list, view-source link
+ * - Extensions section — rendered when SEP-2133 extensions are present
+ * - Footer — single-row, dim, separator-dot delimited
+ *
+ * @module src/mcp-server/transports/http/landing-page/index
+ */
+export { createLandingPageHandler } from './handler.js';
+export { renderLandingPage } from './render.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/mcp-server/transports/http/landing-page/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/mcp-server/transports/http/landing-page/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/mcp-server/transports/http/landing-page/index.js

@@ -0,0 +1,27 @@
+/**
+ * @fileoverview Public barrel for the HTML landing page served at `GET /`.
+ * Self-contained, zero-dependency renderer producing a branded,
+ * a11y-conscious, `prefers-color-scheme`-aware page from the shared
+ * `ServerManifest`.
+ *
+ * The page is the human-facing sibling of `/mcp` (bespoke JSON) and
+ * `/.well-known/mcp.json` (SEP-1649 Server Card). Framework owns the design
+ * system; servers supply content through `LandingConfig`.
+ *
+ * ## Surfaces
+ *
+ * - Hero — eyebrow, display-size server name, version + pre-release chips,
+ *   tagline, single-line status strip, terminal-chrome connection card,
+ *   framework attribution pill
+ * - Tools section — responsive 2-column card grid; prefix-grouped; per-card
+ *   annotation chips, invocation snippet, view-source link, schema preview
+ * - Resources section — URI template, mime type, description, view-source link
+ * - Prompts section — args list, view-source link
+ * - Extensions section — rendered when SEP-2133 extensions are present
+ * - Footer — single-row, dim, separator-dot delimited
+ *
+ * @module src/mcp-server/transports/http/landing-page/index
+ */
+export { createLandingPageHandler } from './handler.js';
+export { renderLandingPage } from './render.js';
+//# sourceMappingURL=index.js.map

package/dist/mcp-server/transports/http/landing-page/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/mcp-server/transports/http/landing-page/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/mcp-server/transports/http/landing-page/primitives.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @fileoverview Reusable render primitives shared across landing page sections —
+ * annotation pills, section headings, copy-enabled code snippets, and the
+ * framework attribution badge.
+ *
+ * @module src/mcp-server/transports/http/landing-page/primitives
+ */
+import type { ServerManifest } from '../../../../core/serverManifest.js';
+import { type SafeHtml } from '../../../../utils/formatting/html.js';
+/**
+ * shields.io-style bi-part badge: "Built on" label + framework name. Links to
+ * the framework's npm page. Lives in the hero when `landing.attribution` is
+ * enabled.
+ */
+export declare function renderFrameworkBadge(framework: ServerManifest['framework']): SafeHtml;
+export declare function renderPill(text: string, variant: string): SafeHtml;
+export declare function renderSectionHeading(id: string, label: string, count: number): SafeHtml;
+export declare function renderSnippet(id: string, text: string): SafeHtml;
+//# sourceMappingURL=primitives.d.ts.map

package/dist/mcp-server/transports/http/landing-page/primitives.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitives.d.ts","sourceRoot":"","sources":["../../../../../src/mcp-server/transports/http/landing-page/primitives.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAQ,KAAK,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAEjE;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,cAAc,CAAC,WAAW,CAAC,GAAG,QAAQ,CAGrF;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,QAAQ,CAElE;AAED,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,CAOvF;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,CAQhE"}

package/dist/mcp-server/transports/http/landing-page/primitives.js

@@ -0,0 +1,38 @@
+/**
+ * @fileoverview Reusable render primitives shared across landing page sections —
+ * annotation pills, section headings, copy-enabled code snippets, and the
+ * framework attribution badge.
+ *
+ * @module src/mcp-server/transports/http/landing-page/primitives
+ */
+import { html } from '../../../../utils/formatting/html.js';
+/**
+ * shields.io-style bi-part badge: "Built on" label + framework name. Links to
+ * the framework's npm page. Lives in the hero when `landing.attribution` is
+ * enabled.
+ */
+export function renderFrameworkBadge(framework) {
+    const npmUrl = `https://www.npmjs.com/package/${encodeURIComponent(framework.name)}`;
+    return html `<a class="badge-shield" href="${npmUrl}" rel="noopener" aria-label="Built on ${framework.name} v${framework.version}"><span class="badge-shield-label">Built on</span><span class="badge-shield-value">${framework.name} v${framework.version}</span></a>`;
+}
+export function renderPill(text, variant) {
+    return html `<span class="pill pill-${variant}">${text}</span>`;
+}
+export function renderSectionHeading(id, label, count) {
+    return html `
+    <div class="section-heading">
+      <h2 id="${id}">${label}</h2>
+      <span class="section-count" aria-label="${String(count)} ${label}">${String(count)}</span>
+    </div>
+  `;
+}
+export function renderSnippet(id, text) {
+    const targetId = `snippet-${id}`;
+    return html `
+    <div class="snippet">
+      <pre id="${targetId}"><code>${text}</code></pre>
+      <button type="button" class="snippet-copy" data-copy data-copy-target="#${targetId}" aria-label="Copy">Copy</button>
+    </div>
+  `;
+}
+//# sourceMappingURL=primitives.js.map

package/dist/mcp-server/transports/http/landing-page/primitives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitives.js","sourceRoot":"","sources":["../../../../../src/mcp-server/transports/http/landing-page/primitives.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,IAAI,EAAiB,MAAM,4BAA4B,CAAC;AAEjE;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAsC;IACzE,MAAM,MAAM,GAAG,iCAAiC,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IACrF,OAAO,IAAI,CAAA,iCAAiC,MAAM,yCAAyC,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,sFAAsF,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,aAAa,CAAC;AACzQ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,OAAe;IACtD,OAAO,IAAI,CAAA,0BAA0B,OAAO,KAAK,IAAI,SAAS,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,EAAU,EAAE,KAAa,EAAE,KAAa;IAC3E,OAAO,IAAI,CAAA;;gBAEG,EAAE,KAAK,KAAK;gDACoB,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC;;GAErF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAU,EAAE,IAAY;IACpD,MAAM,QAAQ,GAAG,WAAW,EAAE,EAAE,CAAC;IACjC,OAAO,IAAI,CAAA;;iBAEI,QAAQ,WAAW,IAAI;gFACwC,QAAQ;;GAErF,CAAC;AACJ,CAAC"}

package/dist/mcp-server/transports/http/landing-page/render.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @fileoverview Top-level landing page composition. Stitches `<head>`,
+ * hero, capability sections, and footer into a single HTML document string.
+ * `degraded` collapses the body to the hero + an empty-state note when the
+ * caller is unauthenticated and `landing.requireAuth` is enabled.
+ *
+ * @module src/mcp-server/transports/http/landing-page/render
+ */
+import type { ServerManifest } from '../../../../core/serverManifest.js';
+/**
+ * Render the full landing page. `baseUrl` is the request origin
+ * (e.g. `https://pubmed.example.com`) — used in connect snippets and OG meta.
+ * `degraded` reduces the body when `requireAuth` gates unauth callers.
+ */
+export declare function renderLandingPage(manifest: ServerManifest, baseUrl: string, degraded?: boolean): string;
+//# sourceMappingURL=render.d.ts.map

package/dist/mcp-server/transports/http/landing-page/render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../../../../src/mcp-server/transports/http/landing-page/render.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAa/D;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,MAAM,EACf,QAAQ,UAAQ,GACf,MAAM,CAmCR"}

package/dist/mcp-server/transports/http/landing-page/render.js

@@ -0,0 +1,57 @@
+/**
+ * @fileoverview Top-level landing page composition. Stitches `<head>`,
+ * hero, capability sections, and footer into a single HTML document string.
+ * `degraded` collapses the body to the hero + an empty-state note when the
+ * caller is unauthenticated and `landing.requireAuth` is enabled.
+ *
+ * @module src/mcp-server/transports/http/landing-page/render
+ */
+import { html } from '../../../../utils/formatting/html.js';
+import { renderCopyScript } from './assets/copy-script.js';
+import { renderTokens } from './assets/styles.js';
+import { renderExtensionsSection } from './sections/extensions.js';
+import { renderFooter } from './sections/footer.js';
+import { renderHead } from './sections/head.js';
+import { renderHero } from './sections/hero.js';
+import { renderPromptsSection } from './sections/prompts.js';
+import { renderResourcesSection } from './sections/resources.js';
+import { renderToolsSection } from './sections/tools.js';
+/**
+ * Render the full landing page. `baseUrl` is the request origin
+ * (e.g. `https://pubmed.example.com`) — used in connect snippets and OG meta.
+ * `degraded` reduces the body when `requireAuth` gates unauth callers.
+ */
+export function renderLandingPage(manifest, baseUrl, degraded = false) {
+    const pageUrl = `${baseUrl.replace(/\/$/, '')}/`;
+    const body = degraded
+        ? html `
+        ${renderHero(manifest, baseUrl, true)}
+        <section>
+          <p class="empty-state">
+            Full server inventory is available to authenticated callers.
+          </p>
+        </section>
+        ${renderFooter(manifest)}
+      `
+        : html `
+        ${renderHero(manifest, baseUrl, false)}
+        ${renderToolsSection(manifest.definitions.tools)}
+        ${renderResourcesSection(manifest.definitions.resources)}
+        ${renderPromptsSection(manifest.definitions.prompts)}
+        ${renderExtensionsSection(manifest.extensions)}
+        ${renderFooter(manifest)}
+      `;
+    const doc = html `<!DOCTYPE html>
+<html lang="en">
+  <head>
+    ${renderHead(manifest, pageUrl)}
+    ${renderTokens(manifest.landing.theme.accent)}
+  </head>
+  <body>
+    <main>${body}</main>
+    ${renderCopyScript()}
+  </body>
+</html>`;
+    return doc.toString();
+}
+//# sourceMappingURL=render.js.map

package/dist/mcp-server/transports/http/landing-page/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../../../../../src/mcp-server/transports/http/landing-page/render.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAElD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAwB,EACxB,OAAe,EACf,QAAQ,GAAG,KAAK;IAEhB,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC;IAEjD,MAAM,IAAI,GAAG,QAAQ;QACnB,CAAC,CAAC,IAAI,CAAA;UACA,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;;;;;;UAMnC,YAAY,CAAC,QAAQ,CAAC;OACzB;QACH,CAAC,CAAC,IAAI,CAAA;UACA,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC;UACpC,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC;UAC9C,sBAAsB,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC;UACtD,oBAAoB,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC;UAClD,uBAAuB,CAAC,QAAQ,CAAC,UAAU,CAAC;UAC5C,YAAY,CAAC,QAAQ,CAAC;OACzB,CAAC;IAEN,MAAM,GAAG,GAAG,IAAI,CAAA;;;MAGZ,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC;MAC7B,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;;;YAGrC,IAAI;MACV,gBAAgB,EAAE;;QAEhB,CAAC;IAEP,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC"}

package/dist/mcp-server/transports/http/landing-page/sections/connect.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @fileoverview Terminal-chrome connect card with STDIO / HTTP / Claude / curl
+ * tabs. Generates copy-paste-ready client configs and commands from the
+ * server manifest. Radio-input + `:has()` CSS hack drives tab switching with
+ * no JS.
+ *
+ * Accessibility: the ARIA tab pattern (`role="tablist"`/`"tab"`/`"tabpanel"`
+ * + `aria-selected`/`aria-controls`) is a poor fit for a radio-input-driven
+ * widget — the radios already communicate a mutually-exclusive selection to
+ * assistive tech. We don't add ARIA tab roles because they'd be incomplete
+ * (no `aria-selected` state, no `aria-controls` wiring) and a partial ARIA
+ * pattern is worse than none.
+ *
+ * @module src/mcp-server/transports/http/landing-page/sections/connect
+ */
+import type { ServerManifest } from '../../../../../core/serverManifest.js';
+import { type SafeHtml } from '../../../../../utils/formatting/html.js';
+export declare function renderConnectSnippets(manifest: ServerManifest, baseUrl: string): SafeHtml;
+//# sourceMappingURL=connect.d.ts.map

package/dist/mcp-server/transports/http/landing-page/sections/connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../../../../../src/mcp-server/transports/http/landing-page/sections/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAQ,KAAK,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAEjE,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,QAAQ,CA0GzF"}

package/dist/mcp-server/transports/http/landing-page/sections/connect.js

@@ -0,0 +1,130 @@
+/**
+ * @fileoverview Terminal-chrome connect card with STDIO / HTTP / Claude / curl
+ * tabs. Generates copy-paste-ready client configs and commands from the
+ * server manifest. Radio-input + `:has()` CSS hack drives tab switching with
+ * no JS.
+ *
+ * Accessibility: the ARIA tab pattern (`role="tablist"`/`"tab"`/`"tabpanel"`
+ * + `aria-selected`/`aria-controls`) is a poor fit for a radio-input-driven
+ * widget — the radios already communicate a mutually-exclusive selection to
+ * assistive tech. We don't add ARIA tab roles because they'd be incomplete
+ * (no `aria-selected` state, no `aria-controls` wiring) and a partial ARIA
+ * pattern is worse than none.
+ *
+ * @module src/mcp-server/transports/http/landing-page/sections/connect
+ */
+import { html } from '../../../../../utils/formatting/html.js';
+export function renderConnectSnippets(manifest, baseUrl) {
+    const endpoint = `${baseUrl.replace(/\/$/, '')}${manifest.transport.endpointPath}`;
+    const npmPackage = manifest.landing.npmPackage?.name;
+    // `@cyanheads/mcp-ts-core` → `mcp-ts-core`. Short aliases match the convention
+    // used in real Claude Desktop / Cursor configs and make the `claude mcp add`
+    // command more ergonomic.
+    const shortName = deriveShortName(manifest.server.name);
+    const envExample = manifest.landing.envExample;
+    const stdioEnv = envExample.length > 0 ? envFromEntries(envExample) : undefined;
+    // STDIO: prefer native `bunx <pkg>@latest` when the server is published;
+    // fall back to `mcp-remote` as a stdio → HTTP bridge so the tab is always
+    // useful even for unpublished servers. Env vars belong here — this is the
+    // only transport where the client spawns the server process and can pass
+    // them through.
+    const stdioConfig = JSON.stringify({
+        mcpServers: {
+            [shortName]: {
+                command: 'bunx',
+                args: npmPackage ? [`${npmPackage}@latest`] : ['mcp-remote', endpoint],
+                ...(stdioEnv && { env: stdioEnv }),
+            },
+        },
+    }, null, 2);
+    // HTTP: no `env` block. MCP clients only forward env vars to spawned stdio
+    // child processes; for `type: 'http'` there's no process, so including env
+    // is a silent no-op that misleads visitors of a hosted instance into
+    // thinking they need to supply credentials the server already owns.
+    const httpConfig = JSON.stringify({
+        mcpServers: {
+            [shortName]: {
+                type: 'http',
+                url: endpoint,
+            },
+        },
+    }, null, 2);
+    // `claude mcp add` — always target the HTTP endpoint. The landing page is
+    // served over HTTP, so a visitor is already interacting with this
+    // instance; a stdio/bunx command here would install a different (local)
+    // copy and carry env placeholders that HTTP wouldn't forward anyway. The
+    // STDIO tab still carries the JSON for anyone who wants to run locally.
+    const claudeCmd = buildClaudeHttpCmd(shortName, endpoint);
+    const curl = [
+        `curl -X POST ${endpoint} \\`,
+        `  -H "Content-Type: application/json" \\`,
+        `  -H "MCP-Protocol-Version: ${manifest.protocol.latestVersion}" \\`,
+        `  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"${manifest.protocol.latestVersion}","capabilities":{},"clientInfo":{"name":"curl","version":"1.0.0"}}}'`,
+    ].join('\n');
+    // Chrome label — npm package when published, else the HTTP endpoint (trimmed).
+    const chromeLabel = npmPackage ?? endpoint.replace(/^https?:\/\//, '');
+    const panels = [
+        { id: 'stdio', label: 'STDIO', content: stdioConfig, copyAriaLabel: 'Copy stdio config' },
+        {
+            id: 'http',
+            label: 'Streamable HTTP',
+            content: httpConfig,
+            copyAriaLabel: 'Copy HTTP config',
+        },
+        {
+            id: 'claude',
+            label: 'Claude',
+            content: claudeCmd,
+            copyAriaLabel: 'Copy claude mcp add command',
+        },
+        { id: 'curl', label: 'curl', content: curl, copyAriaLabel: 'Copy curl command' },
+    ];
+    return html `
+    <div class="connect" aria-label="Connection snippets">
+      <div class="connect-chrome">
+        <span class="connect-chrome-dots" aria-hidden="true">
+          <span class="connect-chrome-dot"></span>
+          <span class="connect-chrome-dot"></span>
+          <span class="connect-chrome-dot"></span>
+        </span>
+        <span class="connect-chrome-endpoint" title="${endpoint}">${chromeLabel}</span>
+      </div>
+      ${panels.map((p, i) => i === 0
+        ? html `<input type="radio" class="connect-tab-input" name="connect" id="connect-tab-${p.id}" checked />`
+        : html `<input type="radio" class="connect-tab-input" name="connect" id="connect-tab-${p.id}" />`)}
+      <div class="connect-tabs">
+        ${panels.map((p) => html `<label for="connect-tab-${p.id}" class="connect-tab-label">${p.label}</label>`)}
+      </div>
+      <div class="connect-panels">
+        ${panels.map((p) => renderConnectPanel(p.id, p.content, p.copyAriaLabel))}
+      </div>
+    </div>
+  `;
+}
+/** Single panel inside the connect card — pre/code + copy button. */
+function renderConnectPanel(id, content, copyAriaLabel) {
+    const snippetId = `connect-snippet-${id}`;
+    return html `
+    <div class="connect-panel panel-${id}">
+      <pre id="${snippetId}"><code>${content}</code></pre>
+      <button type="button" class="connect-copy" data-copy data-copy-target="#${snippetId}" aria-label="${copyAriaLabel}">Copy</button>
+    </div>
+  `;
+}
+/**
+ * `@scope/pkg-name` → `pkg-name`. Fall through for bare names.
+ * Used as the `mcpServers` key and the Claude CLI server alias.
+ */
+function deriveShortName(serverName) {
+    const slash = serverName.lastIndexOf('/');
+    return slash >= 0 ? serverName.slice(slash + 1) : serverName;
+}
+/** Convert ordered env entries to the `{ KEY: value }` shape MCP clients expect. */
+function envFromEntries(entries) {
+    return Object.fromEntries(entries.map(({ key, value }) => [key, value]));
+}
+/** `claude mcp add --transport http <name> <url>` */
+function buildClaudeHttpCmd(shortName, endpoint) {
+    return `claude mcp add --transport http ${shortName} ${endpoint}`;
+}
+//# sourceMappingURL=connect.js.map

package/dist/mcp-server/transports/http/landing-page/sections/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../../../../../src/mcp-server/transports/http/landing-page/sections/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,IAAI,EAAiB,MAAM,4BAA4B,CAAC;AAEjE,MAAM,UAAU,qBAAqB,CAAC,QAAwB,EAAE,OAAe;IAC7E,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;IACnF,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC;IACrD,+EAA+E;IAC/E,6EAA6E;IAC7E,0BAA0B;IAC1B,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;IAC/C,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEhF,yEAAyE;IACzE,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,gBAAgB;IAChB,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAChC;QACE,UAAU,EAAE;YACV,CAAC,SAAS,CAAC,EAAE;gBACX,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,QAAQ,CAAC;gBACtE,GAAG,CAAC,QAAQ,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;aACnC;SACF;KACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;IAEF,2EAA2E;IAC3E,2EAA2E;IAC3E,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAC/B;QACE,UAAU,EAAE;YACV,CAAC,SAAS,CAAC,EAAE;gBACX,IAAI,EAAE,MAAM;gBACZ,GAAG,EAAE,QAAQ;aACd;SACF;KACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;IAEF,0EAA0E;IAC1E,kEAAkE;IAClE,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAE1D,MAAM,IAAI,GAAG;QACX,gBAAgB,QAAQ,KAAK;QAC7B,0CAA0C;QAC1C,+BAA+B,QAAQ,CAAC,QAAQ,CAAC,aAAa,MAAM;QACpE,oFAAoF,QAAQ,CAAC,QAAQ,CAAC,aAAa,uEAAuE;KAC3L,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,+EAA+E;IAC/E,MAAM,WAAW,GAAG,UAAU,IAAI,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAiF;QAC3F,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE;QACzF;YACE,EAAE,EAAE,MAAM;YACV,KAAK,EAAE,iBAAiB;YACxB,OAAO,EAAE,UAAU;YACnB,aAAa,EAAE,kBAAkB;SAClC;QACD;YACE,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,SAAS;YAClB,aAAa,EAAE,6BAA6B;SAC7C;QACD,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,mBAAmB,EAAE;KACjF,CAAC;IAEF,OAAO,IAAI,CAAA;;;;;;;;uDAQ0C,QAAQ,KAAK,WAAW;;QAEvE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACpB,CAAC,KAAK,CAAC;QACL,CAAC,CAAC,IAAI,CAAA,gFAAgF,CAAC,CAAC,EAAE,cAAc;QACxG,CAAC,CAAC,IAAI,CAAA,gFAAgF,CAAC,CAAC,EAAE,MAAM,CACnG;;UAEG,MAAM,CAAC,GAAG,CACV,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,CAAA,2BAA2B,CAAC,CAAC,EAAE,+BAA+B,CAAC,CAAC,KAAK,UAAU,CACtF;;;UAGC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;;;GAG9E,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,SAAS,kBAAkB,CAAC,EAAU,EAAE,OAAe,EAAE,aAAqB;IAC5E,MAAM,SAAS,GAAG,mBAAmB,EAAE,EAAE,CAAC;IAC1C,OAAO,IAAI,CAAA;sCACyB,EAAE;iBACvB,SAAS,WAAW,OAAO;gFACoC,SAAS,iBAAiB,aAAa;;GAEpH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,UAAkB;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;AAC/D,CAAC;AAED,oFAAoF;AACpF,SAAS,cAAc,CACrB,OAAsD;IAEtD,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,qDAAqD;AACrD,SAAS,kBAAkB,CAAC,SAAiB,EAAE,QAAgB;IAC7D,OAAO,mCAAmC,SAAS,IAAI,QAAQ,EAAE,CAAC;AACpE,CAAC"}

package/dist/mcp-server/transports/http/landing-page/sections/extensions.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @fileoverview Extensions section — rendered when SEP-2133 extensions are
+ * advertised in `serverInfo.capabilities`. Each extension key gets a card
+ * with a JSON preview of its config.
+ *
+ * @module src/mcp-server/transports/http/landing-page/sections/extensions
+ */
+import { type SafeHtml } from '../../../../../utils/formatting/html.js';
+export declare function renderExtensionsSection(extensions: Record<string, object> | undefined): SafeHtml;
+//# sourceMappingURL=extensions.d.ts.map

package/dist/mcp-server/transports/http/landing-page/sections/extensions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.d.ts","sourceRoot":"","sources":["../../../../../../src/mcp-server/transports/http/landing-page/sections/extensions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAQ,KAAK,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAIjE,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAAG,QAAQ,CAoBhG"}

package/dist/mcp-server/transports/http/landing-page/sections/extensions.js

@@ -0,0 +1,30 @@
+/**
+ * @fileoverview Extensions section — rendered when SEP-2133 extensions are
+ * advertised in `serverInfo.capabilities`. Each extension key gets a card
+ * with a JSON preview of its config.
+ *
+ * @module src/mcp-server/transports/http/landing-page/sections/extensions
+ */
+import { html } from '../../../../../utils/formatting/html.js';
+import { renderSectionHeading } from '../primitives.js';
+export function renderExtensionsSection(extensions) {
+    if (!extensions || Object.keys(extensions).length === 0)
+        return html ``;
+    const entries = Object.entries(extensions);
+    return html `
+    <section aria-labelledby="section-extensions">
+      ${renderSectionHeading('section-extensions', 'Extensions', entries.length)}
+      <div class="card-grid">
+        ${entries.map(([key, value]) => html `
+            <article class="card ext-card">
+              <div class="card-head">
+                <h3 class="card-title ext-key">${key}</h3>
+              </div>
+              <pre class="ext-preview"><code>${JSON.stringify(value, null, 2)}</code></pre>
+            </article>
+          `)}
+      </div>
+    </section>
+  `;
+}
+//# sourceMappingURL=extensions.js.map

package/dist/mcp-server/transports/http/landing-page/sections/extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.js","sourceRoot":"","sources":["../../../../../../src/mcp-server/transports/http/landing-page/sections/extensions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAiB,MAAM,4BAA4B,CAAC;AAEjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,MAAM,UAAU,uBAAuB,CAAC,UAA8C;IACpF,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA,EAAE,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAA;;QAEL,oBAAoB,CAAC,oBAAoB,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC;;UAEtE,OAAO,CAAC,GAAG,CACX,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAA;;;iDAGiB,GAAG;;+CAEL,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;;WAElE,CACF;;;GAGN,CAAC;AACJ,CAAC"}

package/dist/mcp-server/transports/http/landing-page/sections/footer.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @fileoverview Single-row dim footer with separator-dot-delimited links.
+ * Merges user-supplied `landing.links` with an auto-derived GitHub cluster
+ * (changelog, release tag, issues, source), an npm link when published, and
+ * the framework attribution when `landing.attribution` is enabled.
+ *
+ * @module src/mcp-server/transports/http/landing-page/sections/footer
+ */
+import type { ServerManifest } from '../../../../../core/serverManifest.js';
+import { type SafeHtml } from '../../../../../utils/formatting/html.js';
+export declare function renderFooter(manifest: ServerManifest): SafeHtml;
+//# sourceMappingURL=footer.d.ts.map

package/dist/mcp-server/transports/http/landing-page/sections/footer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"footer.d.ts","sourceRoot":"","sources":["../../../../../../src/mcp-server/transports/http/landing-page/sections/footer.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAQ,KAAK,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAEjE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,cAAc,GAAG,QAAQ,CAgD/D"}