mcp-use 2.0.0-beta.17 → 2.0.0-beta.2

package/dist/views/types.d.ts

@@ -51,16 +51,13 @@ export interface InlineViewManifestEntry {
 /**
  * Dev manifest entry: Vite client-environment module URLs loaded by the
  * synthesized document (HMR / Fast Refresh).
- *
- * Production builds emit the same shape with view-relative asset paths
- * (`assets/…`) served from `${basePath}/_mcp-use/views/<name>/`.
  */
 export interface ExternalViewManifestEntry {
     /** Discriminant for the dev external-module shape. */
     kind: "external";
     /**
-     * Module entry path. Dev: origin-absolute Vite URL (`/…`). Production:
-     * view-relative path under `.mcp-use/build/views/<name>/` (`assets/…`).
+     * Origin-absolute URL path starting with `/` — the Vite client-env module
+     * URL for the view's virtual entry.
      */
     entry: string;
     /**
@@ -79,8 +76,8 @@ export interface ExternalViewManifestEntry {
 /**
  * One entry in the primed views manifest.
  *
- * Production builds emit {@link ExternalViewManifestEntry} with view-relative
- * asset paths; `mcp-use dev` emits origin-absolute Vite URLs.
+ * Production builds emit {@link InlineViewManifestEntry}; `mcp-use dev` emits
+ * {@link ExternalViewManifestEntry}.
  */
 export type ViewManifestEntry = InlineViewManifestEntry | ExternalViewManifestEntry;
 /** Map of view name → manifest entry, primed via {@link registerViews}. */

package/dist/views/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/views/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,gCAAgC,CAAC;AAExC;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAErD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACvB,mEAAmE;IACnE,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,mEAAmE;IACnE,IAAI,EAAE,QAAQ,CAAC;IACf;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC,sDAAsD;IACtD,IAAI,EAAE,UAAU,CAAC;IACjB;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,GAAG,EAAE,MAAM,EAAE,CAAC;IACd;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GACzB,uBAAuB,GACvB,yBAAyB,CAAC;AAE9B,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CAAC;CACvC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/views/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,gCAAgC,CAAC;AAExC;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAErD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACvB,mEAAmE;IACnE,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,mEAAmE;IACnE,IAAI,EAAE,QAAQ,CAAC;IACf;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,sDAAsD;IACtD,IAAI,EAAE,UAAU,CAAC;IACjB;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,GAAG,EAAE,MAAM,EAAE,CAAC;IACd;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GACzB,uBAAuB,GACvB,yBAAyB,CAAC;AAE9B,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CAAC;CACvC"}

package/dist/views/wire.d.ts

@@ -1,4 +1,3 @@
-import type { MetaObject } from "@modelcontextprotocol/server";
 import type { ViewManifestEntry, ViewResourceFacts } from "./types.js";
 /**
  * Tool declaration `_meta` for `tools/list`.
@@ -6,20 +5,17 @@ import type { ViewManifestEntry, ViewResourceFacts } from "./types.js";
  * When `viewName` is set, emits `ui.resourceUri` plus the legacy flat
  * {@link UI_RESOURCE_URI_META_KEY} key. When `visibility` is set, emits
  * `ui.visibility: [visibility]`. Either may be set independently — a
- * view-less tool can still declare app-only visibility. Returns `undefined`
- * only when no view, visibility, or existing metadata is provided.
+ * view-less tool can still declare app-only visibility. Returns
+ * `undefined` when both are unset so the caller omits `_meta`.
  *
  * @param viewName - Bound view directory / manifest key, or `undefined` when
  * the tool has no view.
  * @param visibility - Optional model/app visibility narrowing from the tool
  * definition's top-level `visibility` field.
- * @param existingMetadata - Optional author-supplied definition metadata. Other
- * keys pass through, while framework-owned resource URI and visibility keys
- * are derived exclusively from `viewName` and `visibility`.
  * @returns Wire metadata for the tool listing, or `undefined` when there is
  * nothing to emit.
  */
-export declare function buildToolUiMeta(viewName: string | undefined, visibility: "model" | "app" | undefined, existingMetadata?: MetaObject): MetaObject | undefined;
+export declare function buildToolUiMeta(viewName: string | undefined, visibility: "model" | "app" | undefined): Record<string, unknown> | undefined;
 /**
  * Tool result `_meta` stamped on every non-error `CallToolResult` from a
  * view-bound tool.
@@ -40,29 +36,44 @@ export declare function buildToolResultUiMeta(viewName: string): Record<string,
  * @internal
  */
 export interface BuildResourceUiMetaOptions {
-    /** Request used to resolve server/assets origins when not passed explicitly. */
-    request?: Request;
-    /** Explicit server origin (overrides request resolution). */
-    serverOrigin?: string;
-    /** Explicit assets URL prefix (overrides request resolution). */
-    assetsBase?: string;
     /**
-     * When true, append the server origin's websocket variant to
-     * `csp.connectDomains` for Vite HMR under host-enforced CSP.
+     * When true, append the serving origin's websocket variant
+     * (`http:` → `ws:`, `https:` → `wss:`) to `csp.connectDomains` for Vite
+     * HMR under host-enforced CSP.
      */
     hmrWs?: boolean;
 }
 /**
  * Resource `_meta.ui` for a primed view.
  *
- * Emits `csp` by merging author `view.csp`, env (`CSP_URLS` / `CSP_*_DOMAINS`),
- * and MCP auto-append (`MCP_URL` → connect; assets origin → resource).
+ * Emits `csp` by spreading author-declared fields from the bound tool's
+ * `view:` config (including `frameDomains` and `baseUriDomains`) with
+ * `connectDomains` defaulting to `[]` and the request-derived serving origin
+ * appended to `resourceDomains` when non-empty. When `options.hmrWs` is
+ * true, the serving origin's websocket variant is appended to
+ * `connectDomains` (after author-declared entries, without duplication).
+ * `permissions`, `domain`, and `prefersBorder` are included only when the
+ * author set them.
+ *
+ * @param authorFacts - Resource facts from the bound tool's `view:` config, or
+ * `undefined` for unbound views (auto CSP only).
+ * @param servingOrigin - Request-resolved asset origin appended to
+ * `csp.resourceDomains` and, when `options.hmrWs`, used to derive the HMR
+ * websocket origin for `csp.connectDomains`.
+ * @param options - Optional emission flags (dev HMR websocket origin).
  */
-export declare function buildResourceUiMeta(authorFacts: ViewResourceFacts | undefined, options?: BuildResourceUiMetaOptions): Record<string, unknown>;
+export declare function buildResourceUiMeta(authorFacts: ViewResourceFacts | undefined, servingOrigin: string, options?: BuildResourceUiMetaOptions): Record<string, unknown>;
 /**
  * Listing metadata for a primed view resource.
+ *
+ * @param _viewName - View directory / manifest key (reserved for future use).
+ * @param _entry - Primed manifest entry (reserved for future use).
+ * @param authorFacts - Resource facts from the bound tool's `view:` config.
+ * @param servingOrigin - Request-resolved asset origin for CSP emission.
+ * @param options - Optional emission flags forwarded to
+ * {@link buildResourceUiMeta}.
  */
-export declare function viewResourceConfig(_viewName: string, _entry: ViewManifestEntry, authorFacts: ViewResourceFacts | undefined, options?: BuildResourceUiMetaOptions): {
+export declare function viewResourceConfig(_viewName: string, _entry: ViewManifestEntry, authorFacts: ViewResourceFacts | undefined, servingOrigin: string, options?: BuildResourceUiMetaOptions): {
     mimeType: string;
     description?: string;
     _meta: Record<string, unknown>;

package/dist/views/wire.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../src/views/wire.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAE/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAevE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,UAAU,EAAE,OAAO,GAAG,KAAK,GAAG,SAAS,EACvC,gBAAgB,CAAC,EAAE,UAAU,GAC5B,UAAU,GAAG,SAAS,CA4CxB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,gFAAgF;IAChF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAqBD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,iBAAiB,GAAG,SAAS,EAC1C,OAAO,CAAC,EAAE,0BAA0B,GACnC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBzB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,iBAAiB,EACzB,WAAW,EAAE,iBAAiB,GAAG,SAAS,EAC1C,OAAO,CAAC,EAAE,0BAA0B,GACnC;IACD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,CAQA"}
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../src/views/wire.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAQvE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,UAAU,EAAE,OAAO,GAAG,KAAK,GAAG,SAAS,GACtC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAkBrC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAkBD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,iBAAiB,GAAG,SAAS,EAC1C,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,0BAA0B,GACnC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmCzB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,iBAAiB,EACzB,WAAW,EAAE,iBAAiB,GAAG,SAAS,EAC1C,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,0BAA0B,GACnC;IACD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,CAQA"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "mcp-use",
   "type": "module",
-  "version": "2.0.0-beta.17",
+  "version": "2.0.0-beta.2",
   "description": "MCP framework and CLI built on the official v2 SDK",
   "author": "mcp-use, Inc.",
   "license": "MIT",
@@ -29,10 +29,6 @@
       "types": "./dist/react/index.d.ts",
       "import": "./dist/react/index.js"
     },
-    "./landing": {
-      "types": "./dist/landing.d.ts",
-      "import": "./dist/landing.js"
-    },
     "./oauth": {
       "types": "./dist/oauth/index.d.ts",
       "import": "./dist/oauth/index.js"
@@ -57,10 +53,6 @@
       "types": "./dist/oauth/keycloak.d.ts",
       "import": "./dist/oauth/keycloak.js"
     },
-    "./oauth/better-auth": {
-      "types": "./dist/oauth/better-auth.d.ts",
-      "import": "./dist/oauth/better-auth.js"
-    },
     "./node": {
       "types": "./dist/node-bridge.d.ts",
       "import": "./dist/node-bridge.js"
@@ -75,14 +67,9 @@
     "dist"
   ],
   "engines": {
-    "node": ">=22.22.2"
+    "node": ">=24.0.0"
   },
-  "bundledDependencies": [
-    "@modelcontextprotocol/client"
-  ],
   "dependencies": {
-    "@modelcontextprotocol/client": "https://pkg.pr.new/@modelcontextprotocol/client@f60b40179b0f090f6d64248be1312245a160b5ee",
-    "@modelcontextprotocol/core": "https://pkg.pr.new/@modelcontextprotocol/core@f60b40179b0f090f6d64248be1312245a160b5ee",
     "@modelcontextprotocol/ext-apps": "https://pkg.pr.new/@modelcontextprotocol/ext-apps@432d42bb02a569078ab31ab6458428df6027809d",
     "@modelcontextprotocol/server": "https://pkg.pr.new/@modelcontextprotocol/server@f60b40179b0f090f6d64248be1312245a160b5ee",
     "@tailwindcss/vite": "^4.2.0",
@@ -108,18 +95,20 @@
     }
   },
   "devDependencies": {
+    "@modelcontextprotocol/client": "https://pkg.pr.new/@modelcontextprotocol/client@f60b40179b0f090f6d64248be1312245a160b5ee",
+    "@modelcontextprotocol/core": "https://pkg.pr.new/@modelcontextprotocol/core@f60b40179b0f090f6d64248be1312245a160b5ee",
     "@testing-library/react": "^16.3.2",
-    "@types/node": "^22.20.0",
+    "@types/node": "^24.13.2",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
     "happy-dom": "^20.10.6",
-    "react": "^19.2.7",
-    "react-dom": "^19.2.7",
-    "typescript": "^7.0.2",
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4",
+    "typescript": "7.0.1-rc",
     "vitest": "^4.1.9",
     "zod": "^4.4.3",
-    "@mcp-use/client": "2.0.0-beta.4",
-    "mcp-use": "2.0.0-beta.17"
+    "@mcp-use/client": "2.0.0-beta.0",
+    "mcp-use": "2.0.0-beta.2"
   },
   "publishConfig": {
     "access": "public"

package/dist/branding.d.ts

@@ -1,82 +0,0 @@
-import type { Icon } from "@modelcontextprotocol/server";
-import type { FetchHandler } from "./fetch-app.js";
-/** Normalized server branding shared by browser and MCP identity surfaces. */
-export interface ServerBranding {
-    /**
-     * Source selected for `/favicon.ico`, after applying explicit-favicon and
-     * first-icon inference.
-     */
-    readonly favicon?: string;
-    /** MIME type of the selected favicon when known. */
-    readonly faviconMimeType?: string;
-    /** Icons reported in MCP implementation metadata, in author order. */
-    readonly icons?: readonly Icon[];
-    /** Server website reported in MCP implementation metadata. */
-    readonly websiteUrl?: string;
-}
-/**
- * Select the browser favicon from an ordered set of MCP icons.
- *
- * Uses the first icon in author order. Put the preferred browser favicon
- * first, or set {@link ServerConfig.favicon} explicitly.
- *
- * @param icons - Validated, non-empty icon list.
- * @returns The selected icon.
- *
- * @internal
- */
-export declare function selectFaviconFromIcons(icons: readonly Icon[]): Icon | undefined;
-/**
- * Validate and freeze the branding fields from server configuration.
- *
- * @param config - Untyped-compatible branding input.
- * @returns Immutable normalized branding and the selected favicon MIME type.
- *
- * @internal
- */
-export declare function normalizeServerBranding(config: {
-    favicon?: unknown;
-    icons?: unknown;
-    websiteUrl?: unknown;
-}): ServerBranding;
-/**
- * Resolve configured icons for MCP implementation metadata.
- *
- * Absolute HTTP(S) and data URLs pass through. Public-relative sources become
- * request-scoped absolute URLs under `${basePath}/_mcp-use/public/`.
- *
- * @param icons - Normalized configured icons.
- * @param request - HTTP request used to derive the public asset origin.
- * @param basePath - MCP endpoint base path.
- * @returns Icons suitable for the official SDK `Implementation` object.
- *
- * @internal
- */
-export declare function resolveImplementationIcons(icons: readonly Icon[] | undefined, request: Request | undefined, basePath: string): Icon[] | undefined;
-/**
- * Whether any configured branding source needs the local public route.
- *
- * @param branding - Normalized branding to inspect.
- * @returns `true` when the favicon or an MCP icon uses a `public/` path.
- *
- * @internal
- */
-export declare function hasLocalBrandingAsset(branding: ServerBranding): boolean;
-/**
- * Create the root-level `/favicon.ico` handler for normalized branding.
- *
- * Local public files and data URLs are streamed directly. Absolute HTTP(S)
- * sources receive a temporary redirect, avoiding server-side remote fetches.
- *
- * @param branding - Normalized server branding.
- * @param options - Public directory resolution mode.
- * @returns A GET/HEAD handler, or `undefined` when no favicon is configured.
- *
- * @internal
- */
-export declare function createFaviconHandler(branding: ServerBranding, options: {
-    dev: boolean;
-    projectRoot: string;
-    deferCors?: boolean;
-}): FetchHandler | undefined;
-//# sourceMappingURL=branding.d.ts.map

package/dist/branding.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"branding.d.ts","sourceRoot":"","sources":["../src/branding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AAEzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAUnD,8EAA8E;AAC9E,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,oDAAoD;IACpD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC;IACjC,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAmBD;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,SAAS,IAAI,EAAE,GACrB,IAAI,GAAG,SAAS,CAElB;AA4ED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,cAAc,CAoGjB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,SAAS,IAAI,EAAE,GAAG,SAAS,EAClC,OAAO,EAAE,OAAO,GAAG,SAAS,EAC5B,QAAQ,EAAE,MAAM,GACf,IAAI,EAAE,GAAG,SAAS,CAYpB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAKvE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAClE,YAAY,GAAG,SAAS,CAgE1B"}

package/dist/chunk-FC2Z2VFO.js

@@ -1,99 +0,0 @@
-// src/views/origin.ts
-function stripTrailingSlashes(value) {
-  return value.replace(/\/+$/, "");
-}
-function readEnv(name) {
-  if (typeof process === "undefined") {
-    return void 0;
-  }
-  const value = process.env[name];
-  return value !== void 0 && value !== "" ? value : void 0;
-}
-function parseForwardedHeader(header) {
-  for (const part of header.split(",")) {
-    const params = /* @__PURE__ */ new Map();
-    for (const token of part.split(";")) {
-      const [key, ...rest] = token.trim().split("=");
-      if (key === void 0 || rest.length === 0) {
-        continue;
-      }
-      params.set(key.toLowerCase(), rest.join("=").replace(/^"|"$/g, ""));
-    }
-    const proto = params.get("proto");
-    const host = params.get("host");
-    if (proto !== void 0 && host !== void 0) {
-      return `${proto}://${host}`;
-    }
-  }
-  return void 0;
-}
-function resolveRequestOriginFromHeaders(request) {
-  const forwarded = request.headers.get("forwarded");
-  if (forwarded !== null) {
-    const fromForwarded = parseForwardedHeader(forwarded);
-    if (fromForwarded !== void 0) {
-      return fromForwarded;
-    }
-  }
-  const proto = request.headers.get("x-forwarded-proto");
-  const host = request.headers.get("x-forwarded-host");
-  if (proto !== null && host !== null) {
-    const firstHost = host.split(",")[0]?.trim();
-    const firstProto = proto.split(",")[0]?.trim();
-    if (firstHost !== void 0 && firstProto !== void 0 && firstHost !== "") {
-      return `${firstProto}://${firstHost}`;
-    }
-  }
-  return new URL(request.url).origin;
-}
-function resolveServerOrigin(request) {
-  const mcpUrl = readEnv("MCP_URL");
-  if (mcpUrl !== void 0) {
-    try {
-      return new URL(mcpUrl).origin;
-    } catch {
-    }
-  }
-  return resolveRequestOriginFromHeaders(request);
-}
-function originFromAssetsBase(assetsBase) {
-  try {
-    return new URL(assetsBase).origin;
-  } catch {
-    return assetsBase;
-  }
-}
-function normalizeAssetsBaseUrl(value) {
-  return stripTrailingSlashes(value);
-}
-function resolveAssetsBase(request) {
-  const assetsUrl = readEnv("MCP_ASSETS_URL");
-  if (assetsUrl !== void 0) {
-    try {
-      return normalizeAssetsBaseUrl(new URL(assetsUrl).href.replace(/\/$/, ""));
-    } catch {
-    }
-  }
-  return resolveServerOrigin(request);
-}
-function hasExplicitAssetsBase() {
-  const assetsUrl = readEnv("MCP_ASSETS_URL");
-  if (assetsUrl === void 0) {
-    return false;
-  }
-  try {
-    new URL(assetsUrl);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-export {
-  resolveServerOrigin,
-  originFromAssetsBase,
-  normalizeAssetsBaseUrl,
-  resolveAssetsBase,
-  hasExplicitAssetsBase
-};
-//# sourceMappingURL=chunk-FC2Z2VFO.js.map

package/dist/chunk-FC2Z2VFO.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/views/origin.ts"],"sourcesContent":["/**\n * Resolve public origins and asset URL prefixes for view documents and CSP.\n *\n * **Server origin** (`resolveServerOrigin`): MCP endpoint / API base — OAuth\n * resource identity, `connectDomains`, dev HMR websocket host.\n *\n * **Assets base** (`resolveAssetsBase`): prefix for view JS/CSS and\n * `public/` URLs — may include a path (CDN bucket prefix).\n */\n\n/** Strip trailing slashes from a URL prefix. */\nexport function stripTrailingSlashes(value: string): string {\n  return value.replace(/\\/+$/, \"\");\n}\n\nfunction readEnv(name: string): string | undefined {\n  if (typeof process === \"undefined\") {\n    return undefined;\n  }\n  const value = process.env[name];\n  return value !== undefined && value !== \"\" ? value : undefined;\n}\n\nfunction parseForwardedHeader(header: string): string | undefined {\n  for (const part of header.split(\",\")) {\n    const params = new Map<string, string>();\n    for (const token of part.split(\";\")) {\n      const [key, ...rest] = token.trim().split(\"=\");\n      if (key === undefined || rest.length === 0) {\n        continue;\n      }\n      params.set(key.toLowerCase(), rest.join(\"=\").replace(/^\"|\"$/g, \"\"));\n    }\n    const proto = params.get(\"proto\");\n    const host = params.get(\"host\");\n    if (proto !== undefined && host !== undefined) {\n      return `${proto}://${host}`;\n    }\n  }\n  return undefined;\n}\n\n/**\n * Resolve origin from forwarded headers or the request URL (no env override).\n */\nexport function resolveRequestOriginFromHeaders(request: Request): string {\n  const forwarded = request.headers.get(\"forwarded\");\n  if (forwarded !== null) {\n    const fromForwarded = parseForwardedHeader(forwarded);\n    if (fromForwarded !== undefined) {\n      return fromForwarded;\n    }\n  }\n\n  const proto = request.headers.get(\"x-forwarded-proto\");\n  const host = request.headers.get(\"x-forwarded-host\");\n  if (proto !== null && host !== null) {\n    const firstHost = host.split(\",\")[0]?.trim();\n    const firstProto = proto.split(\",\")[0]?.trim();\n    if (\n      firstHost !== undefined &&\n      firstProto !== undefined &&\n      firstHost !== \"\"\n    ) {\n      return `${firstProto}://${firstHost}`;\n    }\n  }\n\n  return new URL(request.url).origin;\n}\n\n/**\n * Server public origin — `MCP_URL` when valid, else forwarded/request origin.\n *\n * Uses `.origin` only (path suffix on `MCP_URL` is ignored).\n */\nexport function resolveServerOrigin(request: Request): string {\n  const mcpUrl = readEnv(\"MCP_URL\");\n  if (mcpUrl !== undefined) {\n    try {\n      return new URL(mcpUrl).origin;\n    } catch {\n      // Fall through when MCP_URL is malformed.\n    }\n  }\n  return resolveRequestOriginFromHeaders(request);\n}\n\n/**\n * Extract the origin from an assets URL prefix (origin + optional path).\n */\nexport function originFromAssetsBase(assetsBase: string): string {\n  try {\n    return new URL(assetsBase).origin;\n  } catch {\n    return assetsBase;\n  }\n}\n\n/**\n * Normalize `MCP_ASSETS_URL` to a URL prefix without trailing slash.\n */\nexport function normalizeAssetsBaseUrl(value: string): string {\n  return stripTrailingSlashes(value);\n}\n\n/**\n * Assets URL prefix for view JS/CSS and `public/` — `MCP_ASSETS_URL` when set,\n * else server origin from {@link resolveServerOrigin}.\n */\nexport function resolveAssetsBase(request: Request): string {\n  const assetsUrl = readEnv(\"MCP_ASSETS_URL\");\n  if (assetsUrl !== undefined) {\n    try {\n      return normalizeAssetsBaseUrl(new URL(assetsUrl).href.replace(/\\/$/, \"\"));\n    } catch {\n      // Fall through when MCP_ASSETS_URL is malformed.\n    }\n  }\n  return resolveServerOrigin(request);\n}\n\n/**\n * @deprecated Alias for {@link resolveServerOrigin} — kept for OAuth callers.\n */\nexport function resolveRequestOrigin(request: Request): string {\n  return resolveServerOrigin(request);\n}\n\n/**\n * Whether `MCP_ASSETS_URL` is explicitly configured (distinct from server).\n */\nexport function hasExplicitAssetsBase(): boolean {\n  const assetsUrl = readEnv(\"MCP_ASSETS_URL\");\n  if (assetsUrl === undefined) {\n    return false;\n  }\n  try {\n    new URL(assetsUrl);\n    return true;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";AAWO,SAAS,qBAAqB,OAAuB;AAC1D,SAAO,MAAM,QAAQ,QAAQ,EAAE;AACjC;AAEA,SAAS,QAAQ,MAAkC;AACjD,MAAI,OAAO,YAAY,aAAa;AAClC,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,QAAQ,IAAI,IAAI;AAC9B,SAAO,UAAU,UAAa,UAAU,KAAK,QAAQ;AACvD;AAEA,SAAS,qBAAqB,QAAoC;AAChE,aAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AACpC,UAAM,SAAS,oBAAI,IAAoB;AACvC,eAAW,SAAS,KAAK,MAAM,GAAG,GAAG;AACnC,YAAM,CAAC,KAAK,GAAG,IAAI,IAAI,MAAM,KAAK,EAAE,MAAM,GAAG;AAC7C,UAAI,QAAQ,UAAa,KAAK,WAAW,GAAG;AAC1C;AAAA,MACF;AACA,aAAO,IAAI,IAAI,YAAY,GAAG,KAAK,KAAK,GAAG,EAAE,QAAQ,UAAU,EAAE,CAAC;AAAA,IACpE;AACA,UAAM,QAAQ,OAAO,IAAI,OAAO;AAChC,UAAM,OAAO,OAAO,IAAI,MAAM;AAC9B,QAAI,UAAU,UAAa,SAAS,QAAW;AAC7C,aAAO,GAAG,KAAK,MAAM,IAAI;AAAA,IAC3B;AAAA,EACF;AACA,SAAO;AACT;AAKO,SAAS,gCAAgC,SAA0B;AACxE,QAAM,YAAY,QAAQ,QAAQ,IAAI,WAAW;AACjD,MAAI,cAAc,MAAM;AACtB,UAAM,gBAAgB,qBAAqB,SAAS;AACpD,QAAI,kBAAkB,QAAW;AAC/B,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,QAAQ,QAAQ,QAAQ,IAAI,mBAAmB;AACrD,QAAM,OAAO,QAAQ,QAAQ,IAAI,kBAAkB;AACnD,MAAI,UAAU,QAAQ,SAAS,MAAM;AACnC,UAAM,YAAY,KAAK,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK;AAC3C,UAAM,aAAa,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK;AAC7C,QACE,cAAc,UACd,eAAe,UACf,cAAc,IACd;AACA,aAAO,GAAG,UAAU,MAAM,SAAS;AAAA,IACrC;AAAA,EACF;AAEA,SAAO,IAAI,IAAI,QAAQ,GAAG,EAAE;AAC9B;AAOO,SAAS,oBAAoB,SAA0B;AAC5D,QAAM,SAAS,QAAQ,SAAS;AAChC,MAAI,WAAW,QAAW;AACxB,QAAI;AACF,aAAO,IAAI,IAAI,MAAM,EAAE;AAAA,IACzB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO,gCAAgC,OAAO;AAChD;AAKO,SAAS,qBAAqB,YAA4B;AAC/D,MAAI;AACF,WAAO,IAAI,IAAI,UAAU,EAAE;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKO,SAAS,uBAAuB,OAAuB;AAC5D,SAAO,qBAAqB,KAAK;AACnC;AAMO,SAAS,kBAAkB,SAA0B;AAC1D,QAAM,YAAY,QAAQ,gBAAgB;AAC1C,MAAI,cAAc,QAAW;AAC3B,QAAI;AACF,aAAO,uBAAuB,IAAI,IAAI,SAAS,EAAE,KAAK,QAAQ,OAAO,EAAE,CAAC;AAAA,IAC1E,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO,oBAAoB,OAAO;AACpC;AAYO,SAAS,wBAAiC;AAC/C,QAAM,YAAY,QAAQ,gBAAgB;AAC1C,MAAI,cAAc,QAAW;AAC3B,WAAO;AAAA,EACT;AACA,MAAI;AACF,QAAI,IAAI,SAAS;AACjB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/chunk-IG2BCCMU.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/bin/args.ts"],"sourcesContent":["/**\n * Hand-rolled argv parsing for the `mcp-use` bin.\n *\n * Deliberately dependency-free (no commander): the bin must add zero runtime\n * dependencies to the package (see specs/CLI_SPEC.md, dependency rules).\n */\n\n/**\n * Result of parsing the `mcp-use` command line.\n *\n * @internal\n */\nexport interface ParsedArgs {\n  /** First positional argument — the subcommand — or `undefined` if none was given. */\n  command: string | undefined;\n  /** Value of `--port`/`-p`, or `undefined` if the flag was not passed. */\n  port: number | undefined;\n  /** Value of `--entry`, or `undefined` if the flag was not passed. */\n  entry: string | undefined;\n  /** Value of `--host`, or `undefined` if the flag was not passed. */\n  host: string | undefined;\n  /** Whether `--tunnel` was passed (dev only). */\n  tunnel: boolean;\n  /** `false` when `--no-open` was passed (dev only); `true` otherwise. */\n  open: boolean;\n  /** Whether `--with-inspector` was passed (build only). */\n  withInspector: boolean;\n  /** Whether `--help`/`-h` was passed. */\n  help: boolean;\n  /** Whether `--version`/`-v` was passed. */\n  version: boolean;\n}\n\n/**\n * Parse the `mcp-use` argv (everything after the node binary and script path).\n *\n * Supports `--flag value` and `--flag=value` forms. The first bare token is\n * taken as the subcommand.\n *\n * @param argv - Raw arguments, typically `process.argv.slice(2)`.\n * @throws Error on an unknown flag, a missing flag value, an out-of-range\n * port, or a second positional argument.\n *\n * @internal\n */\nexport function parseArgs(argv: readonly string[]): ParsedArgs {\n  const args: ParsedArgs = {\n    command: undefined,\n    port: undefined,\n    entry: undefined,\n    host: undefined,\n    tunnel: false,\n    open: true,\n    withInspector: false,\n    help: false,\n    version: false,\n  };\n\n  for (let i = 0; i < argv.length; i++) {\n    const token = argv[i];\n    if (token === undefined) continue;\n\n    // Split `--flag=value` into flag + inline value.\n    let flag = token;\n    let inline: string | undefined;\n    if (token.startsWith(\"--\")) {\n      const eq = token.indexOf(\"=\");\n      if (eq !== -1) {\n        flag = token.slice(0, eq);\n        inline = token.slice(eq + 1);\n      }\n    }\n\n    /** Consume the flag's value: inline (`=`) or the next argv token. */\n    const takeValue = (): string => {\n      if (inline !== undefined) return inline;\n      const next = argv[++i];\n      if (next === undefined || next.startsWith(\"-\")) {\n        throw new Error(`Missing value for ${flag}`);\n      }\n      return next;\n    };\n\n    switch (flag) {\n      case \"-h\":\n      case \"--help\":\n        args.help = true;\n        break;\n      case \"-v\":\n      case \"--version\":\n        args.version = true;\n        break;\n      case \"-p\":\n      case \"--port\":\n        args.port = parsePort(takeValue());\n        break;\n      case \"--entry\":\n        args.entry = takeValue();\n        break;\n      case \"--host\":\n        args.host = takeValue();\n        break;\n      case \"--tunnel\":\n        args.tunnel = true;\n        break;\n      case \"--no-open\":\n        args.open = false;\n        break;\n      case \"--with-inspector\":\n        args.withInspector = true;\n        break;\n      default:\n        if (flag.startsWith(\"-\")) {\n          throw new Error(`Unknown option: ${flag}`);\n        }\n        if (args.command !== undefined) {\n          throw new Error(`Unexpected argument: ${flag}`);\n        }\n        args.command = flag;\n    }\n  }\n\n  return args;\n}\n\n/**\n * Resolve the preferred port for `mcp-use start` and `mcp-use dev` (`dev`\n * additionally probes upward from this value when it is taken).\n *\n * Precedence: `--port` flag, then the `PORT` environment variable, then\n * `3000`. A `PORT` value that is not a valid port number is ignored (the\n * default applies); an invalid `--port` flag has already been rejected by\n * {@link parseArgs}.\n *\n * @param flagPort - Port from the `--port`/`-p` flag, if given.\n * @param env - Environment to read `PORT` from.\n * @defaultValue `env` defaults to `process.env`.\n *\n * @internal\n */\nexport function resolvePort(\n  flagPort: number | undefined,\n  env: Readonly<Record<string, string | undefined>> = process.env\n): number {\n  if (flagPort !== undefined) return flagPort;\n  const raw = env.PORT;\n  if (raw !== undefined && raw.trim() !== \"\") {\n    const port = Number(raw);\n    if (isValidPort(port)) return port;\n  }\n  return 3000;\n}\n\n/** Parse a `--port` value, rejecting anything that is not a valid port. */\nfunction parsePort(value: string): number {\n  const port = Number(value);\n  if (!isValidPort(port)) {\n    throw new Error(`Invalid port: ${value}`);\n  }\n  return port;\n}\n\n/** Whether a number is a bindable TCP port (0 = ephemeral). */\nfunction isValidPort(port: number): boolean {\n  return Number.isInteger(port) && port >= 0 && port <= 65535;\n}\n"],"mappings":";AA6CO,SAAS,UAAU,MAAqC;AAC7D,QAAM,OAAmB;AAAA,IACvB,SAAS;AAAA,IACT,MAAM;AAAA,IACN,OAAO;AAAA,IACP,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,eAAe;AAAA,IACf,MAAM;AAAA,IACN,SAAS;AAAA,EACX;AAEA,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,QAAQ,KAAK,CAAC;AACpB,QAAI,UAAU,OAAW;AAGzB,QAAI,OAAO;AACX,QAAI;AACJ,QAAI,MAAM,WAAW,IAAI,GAAG;AAC1B,YAAM,KAAK,MAAM,QAAQ,GAAG;AAC5B,UAAI,OAAO,IAAI;AACb,eAAO,MAAM,MAAM,GAAG,EAAE;AACxB,iBAAS,MAAM,MAAM,KAAK,CAAC;AAAA,MAC7B;AAAA,IACF;AAGA,UAAM,YAAY,MAAc;AAC9B,UAAI,WAAW,OAAW,QAAO;AACjC,YAAM,OAAO,KAAK,EAAE,CAAC;AACrB,UAAI,SAAS,UAAa,KAAK,WAAW,GAAG,GAAG;AAC9C,cAAM,IAAI,MAAM,qBAAqB,IAAI,EAAE;AAAA,MAC7C;AACA,aAAO;AAAA,IACT;AAEA,YAAQ,MAAM;AAAA,MACZ,KAAK;AAAA,MACL,KAAK;AACH,aAAK,OAAO;AACZ;AAAA,MACF,KAAK;AAAA,MACL,KAAK;AACH,aAAK,UAAU;AACf;AAAA,MACF,KAAK;AAAA,MACL,KAAK;AACH,aAAK,OAAO,UAAU,UAAU,CAAC;AACjC;AAAA,MACF,KAAK;AACH,aAAK,QAAQ,UAAU;AACvB;AAAA,MACF,KAAK;AACH,aAAK,OAAO,UAAU;AACtB;AAAA,MACF,KAAK;AACH,aAAK,SAAS;AACd;AAAA,MACF,KAAK;AACH,aAAK,OAAO;AACZ;AAAA,MACF,KAAK;AACH,aAAK,gBAAgB;AACrB;AAAA,MACF;AACE,YAAI,KAAK,WAAW,GAAG,GAAG;AACxB,gBAAM,IAAI,MAAM,mBAAmB,IAAI,EAAE;AAAA,QAC3C;AACA,YAAI,KAAK,YAAY,QAAW;AAC9B,gBAAM,IAAI,MAAM,wBAAwB,IAAI,EAAE;AAAA,QAChD;AACA,aAAK,UAAU;AAAA,IACnB;AAAA,EACF;AAEA,SAAO;AACT;AAiBO,SAAS,YACd,UACA,MAAoD,QAAQ,KACpD;AACR,MAAI,aAAa,OAAW,QAAO;AACnC,QAAM,MAAM,IAAI;AAChB,MAAI,QAAQ,UAAa,IAAI,KAAK,MAAM,IAAI;AAC1C,UAAM,OAAO,OAAO,GAAG;AACvB,QAAI,YAAY,IAAI,EAAG,QAAO;AAAA,EAChC;AACA,SAAO;AACT;AAGA,SAAS,UAAU,OAAuB;AACxC,QAAM,OAAO,OAAO,KAAK;AACzB,MAAI,CAAC,YAAY,IAAI,GAAG;AACtB,UAAM,IAAI,MAAM,iBAAiB,KAAK,EAAE;AAAA,EAC1C;AACA,SAAO;AACT;AAGA,SAAS,YAAY,MAAuB;AAC1C,SAAO,OAAO,UAAU,IAAI,KAAK,QAAQ,KAAK,QAAQ;AACxD;","names":[]}

package/dist/chunk-KIZ72TIK.js

@@ -1,38 +0,0 @@
-// src/completable.ts
-import {
-  completable as sdkCompletable
-} from "@modelcontextprotocol/server";
-function createPrefixCompletion(values) {
-  const strings = values.map(String);
-  return (value) => {
-    const prefix = String(value ?? "").toLowerCase();
-    return strings.filter(
-      (candidate) => candidate.toLowerCase().startsWith(prefix)
-    );
-  };
-}
-function completable(schema, complete) {
-  if (typeof complete === "function") {
-    return sdkCompletable(
-      schema,
-      (value, context) => complete(String(value ?? ""), context)
-    );
-  }
-  return sdkCompletable(schema, createPrefixCompletion(complete));
-}
-
-// src/resource-completion.ts
-function normalizeCompletions(completions) {
-  const normalized = /* @__PURE__ */ Object.create(null);
-  for (const [variable, completer] of Object.entries(completions)) {
-    if (completer === void 0) continue;
-    normalized[variable] = Array.isArray(completer) ? createPrefixCompletion(completer) : completer;
-  }
-  return normalized;
-}
-
-export {
-  completable,
-  normalizeCompletions
-};
-//# sourceMappingURL=chunk-KIZ72TIK.js.map

package/dist/chunk-KIZ72TIK.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/completable.ts","../src/resource-completion.ts"],"sourcesContent":["import {\n  completable as sdkCompletable,\n  type StandardSchemaV1,\n} from \"@modelcontextprotocol/server\";\n\n/** Context passed to completion callbacks. */\nexport interface CompletionContext {\n  /** Other argument values from the same prompt, for contextual suggestions. */\n  arguments?: Record<string, unknown>;\n}\n\n/** Callback form: return suggestions for the current (partial) value. */\nexport type CompletionCallback = (\n  value: string,\n  context?: CompletionContext\n) => string[] | Promise<string[]>;\n\n/**\n * Build the shared case-insensitive prefix completer used by static values.\n *\n * @param values - Values retained in declaration order and stringified once.\n * @returns A callback that filters the values against an untrimmed prefix.\n *\n * @internal\n */\nexport function createPrefixCompletion(\n  values: ReadonlyArray<string | number | boolean>\n): (value: unknown) => string[] {\n  const strings = values.map(String);\n  return (value) => {\n    const prefix = String(value ?? \"\").toLowerCase();\n    return strings.filter((candidate) =>\n      candidate.toLowerCase().startsWith(prefix)\n    );\n  };\n}\n\n/**\n * Make a schema field completable so clients can request autocomplete\n * suggestions via `completion/complete`.\n *\n * Pass an array of allowed values for case-insensitive prefix matching, or a\n * callback for dynamic/contextual suggestions.\n *\n * Accepts any Standard Schema field ({@link StandardSchemaV1}); zod shown in\n * the example. Apply refinements like `.describe()` to the schema *argument*,\n * not to the completable result: refinements that clone the schema (as zod's\n * do) silently drop the SDK's completion marker. `.optional()` is the one\n * exception — the SDK unwraps optionals when looking for completions.\n *\n * @example\n * ```ts\n * schema: z.object({\n *   language: completable(\n *     z.string().describe(\"The programming language\"),\n *     [\"python\", \"typescript\", \"go\"]\n *   ),\n * })\n * ```\n */\nexport function completable<T extends StandardSchemaV1>(\n  schema: T,\n  complete: ReadonlyArray<string | number | boolean> | CompletionCallback\n): ReturnType<typeof sdkCompletable<T>> {\n  if (typeof complete === \"function\") {\n    return sdkCompletable(schema, (value, context) =>\n      complete(String(value ?? \"\"), context)\n    );\n  }\n  return sdkCompletable(schema, createPrefixCompletion(complete));\n}\n","import type { CompleteResourceTemplateCallback } from \"@modelcontextprotocol/server\";\n\nimport { createPrefixCompletion } from \"./completable.js\";\nimport type { ResourceTemplateCompleter } from \"./resources.js\";\n\n/**\n * Convert public static and callback completions to the SDK callback map.\n *\n * @param completions - Public completion providers keyed by template variable.\n * @returns The callback-only map required by the official SDK.\n *\n * @internal\n */\nexport function normalizeCompletions(\n  completions: Readonly<Record<string, ResourceTemplateCompleter | undefined>>\n): Record<string, CompleteResourceTemplateCallback> {\n  const normalized = Object.create(null) as Record<\n    string,\n    CompleteResourceTemplateCallback\n  >;\n  for (const [variable, completer] of Object.entries(completions)) {\n    if (completer === undefined) continue;\n    normalized[variable] = Array.isArray(completer)\n      ? createPrefixCompletion(completer)\n      : (completer as CompleteResourceTemplateCallback);\n  }\n  return normalized;\n}\n"],"mappings":";AAAA;AAAA,EACE,eAAe;AAAA,OAEV;AAsBA,SAAS,uBACd,QAC8B;AAC9B,QAAM,UAAU,OAAO,IAAI,MAAM;AACjC,SAAO,CAAC,UAAU;AAChB,UAAM,SAAS,OAAO,SAAS,EAAE,EAAE,YAAY;AAC/C,WAAO,QAAQ;AAAA,MAAO,CAAC,cACrB,UAAU,YAAY,EAAE,WAAW,MAAM;AAAA,IAC3C;AAAA,EACF;AACF;AAyBO,SAAS,YACd,QACA,UACsC;AACtC,MAAI,OAAO,aAAa,YAAY;AAClC,WAAO;AAAA,MAAe;AAAA,MAAQ,CAAC,OAAO,YACpC,SAAS,OAAO,SAAS,EAAE,GAAG,OAAO;AAAA,IACvC;AAAA,EACF;AACA,SAAO,eAAe,QAAQ,uBAAuB,QAAQ,CAAC;AAChE;;;ACzDO,SAAS,qBACd,aACkD;AAClD,QAAM,aAAa,uBAAO,OAAO,IAAI;AAIrC,aAAW,CAAC,UAAU,SAAS,KAAK,OAAO,QAAQ,WAAW,GAAG;AAC/D,QAAI,cAAc,OAAW;AAC7B,eAAW,QAAQ,IAAI,MAAM,QAAQ,SAAS,IAC1C,uBAAuB,SAAS,IAC/B;AAAA,EACP;AACA,SAAO;AACT;","names":[]}

package/dist/chunk-O3CUL5VH.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/cli/entry.ts","../src/cli/vite-config.ts","../src/cli/mcp-env-declaration.ts","../src/cli/workspace.ts","../src/cli/views.ts","../src/cli/views-plugin.ts"],"sourcesContent":["/**\n * Server-entry discovery for `mcp-use build` and `mcp-use dev`.\n *\n * The entry contract (CLI_SPEC.md): the user's entry module default-exports\n * the `MCPServer` instance and never calls `listen()` itself — the CLI owns\n * the socket.\n */\n\nimport { existsSync } from \"node:fs\";\nimport { isAbsolute, join, resolve } from \"node:path\";\n\n/**\n * Conventional entry locations, checked in order relative to the project\n * root; the first existing file wins.\n *\n * @internal\n */\nexport const ENTRY_CANDIDATES = [\n  \"src/index.ts\",\n  \"src/server.ts\",\n  \"index.ts\",\n  \"server.ts\",\n] as const;\n\n/**\n * Locate the server entry for a project.\n *\n * With `override` set (the `--entry` flag), the path is resolved against\n * `cwd` and must exist. Otherwise the {@link ENTRY_CANDIDATES} are probed in\n * order and the first hit wins.\n *\n * @param cwd - Absolute path to the project root.\n * @param override - Explicit entry path (`--entry`), absolute or relative to `cwd`.\n * @returns Absolute path to the entry file.\n * @throws If the override does not exist, or no conventional candidate is\n * found — the error lists every location that was checked.\n *\n * @internal\n */\nexport function discoverEntry(cwd: string, override?: string): string {\n  if (override !== undefined) {\n    const entry = isAbsolute(override) ? override : resolve(cwd, override);\n    if (!existsSync(entry)) {\n      throw new Error(`Entry not found: ${entry} (from --entry \"${override}\")`);\n    }\n    return entry;\n  }\n  for (const candidate of ENTRY_CANDIDATES) {\n    const entry = join(cwd, candidate);\n    if (existsSync(entry)) {\n      return entry;\n    }\n  }\n  throw new Error(\n    `No server entry found in ${cwd}. Looked for: ` +\n      `${ENTRY_CANDIDATES.join(\", \")}. ` +\n      `Create one of these (default-exporting your MCPServer instance) ` +\n      `or pass --entry <path>.`\n  );\n}\n","/**\n * Resolve the project-level Vite config used only by the views client build.\n */\n\nimport { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst VITE_CONFIG_CANDIDATES = [\n  \"vite.config.ts\",\n  \"vite.config.js\",\n  \"vite.config.mts\",\n  \"vite.config.cjs\",\n] as const;\n\n/**\n * Locate a project Vite config, or disable config loading when absent.\n *\n * @param cwd - Absolute project root.\n * @returns Absolute config path or `false`.\n *\n * @internal\n */\nexport function resolveUserViteConfig(cwd: string): string | false {\n  for (const name of VITE_CONFIG_CANDIDATES) {\n    const path = join(cwd, name);\n    if (existsSync(path)) return path;\n  }\n  return false;\n}\n\n/**\n * Resolve the framework-owned Tailwind stylesheet for project CSS imports.\n *\n * @returns Absolute path exported by the installed `tailwindcss` dependency.\n *\n * @internal\n */\nexport function resolveTailwindCss(): string {\n  return fileURLToPath(import.meta.resolve(\"tailwindcss/index.css\"));\n}\n","/**\n * Root-level MCP env declaration shared by `mcp-use dev` and `mcp-use build`.\n *\n * Combines CSS module typing and a live type-only edge to the server entry so\n * exported `ToolRef`s update in TypeScript without rerunning the CLI.\n */\n\nimport { writeFile } from \"node:fs/promises\";\nimport { extname, join, relative, sep } from \"node:path\";\n\n/** Filename of the project-owned MCP env declaration. */\nexport const MCP_ENV_DECLARATION_NAME = \"mcp-env.d.ts\";\n\nfunction declarationImportPath(cwd: string, entry: string): string {\n  let importPath = relative(cwd, entry).split(sep).join(\"/\");\n  const extension = extname(importPath);\n  const runtimeExtension =\n    extension === \".mts\"\n      ? \".mjs\"\n      : extension === \".cts\"\n        ? \".cjs\"\n        : extension === \".ts\" || extension === \".tsx\"\n          ? \".js\"\n          : extension;\n\n  if (extension !== runtimeExtension) {\n    importPath = `${importPath.slice(0, -extension.length)}${runtimeExtension}`;\n  }\n  return importPath.startsWith(\".\") ? importPath : `./${importPath}`;\n}\n\n/** Build the stable declaration contents for a discovered server entry. */\nexport function renderMcpEnvDeclaration(cwd: string, entry: string): string {\n  const importPath = declarationImportPath(cwd, entry);\n  return [\n    \"// mcp-use generated env declaration\",\n    'declare module \"*.css\";',\n    \"\",\n    'declare module \"mcp-use/react\" {',\n    \"  interface Register {\",\n    `    tools: typeof import(${JSON.stringify(importPath)});`,\n    \"  }\",\n    \"}\",\n    \"\",\n    \"export {};\",\n    \"\",\n  ].join(\"\\n\");\n}\n\n/**\n * Create the root `mcp-env.d.ts` if absent.\n *\n * Exclusive-create mode makes this safe when dev and build start together and\n * guarantees that a user-authored declaration is never truncated or replaced.\n *\n * @returns `true` when this invocation created the file.\n */\nexport async function ensureMcpEnvDeclaration(\n  cwd: string,\n  entry: string\n): Promise<boolean> {\n  const declarationPath = join(cwd, MCP_ENV_DECLARATION_NAME);\n  try {\n    await writeFile(declarationPath, renderMcpEnvDeclaration(cwd, entry), {\n      encoding: \"utf8\",\n      flag: \"wx\",\n    });\n    return true;\n  } catch (error) {\n    if (\n      error !== null &&\n      typeof error === \"object\" &&\n      \"code\" in error &&\n      error.code === \"EEXIST\"\n    ) {\n      return false;\n    }\n    throw error;\n  }\n}\n","/**\n * The per-project `.mcp-use/` workspace convention — the Next.js `.next`\n * analog. Everything tooling writes for a project lives under this single,\n * gitignored directory so a checkout stays clean and `rm -rf .mcp-use` is\n * always safe.\n *\n * The layout is a fixed convention, not configuration: there is deliberately\n * no config file and no `outDir` knob (runtime/project configuration lives on\n * the `MCPServer` constructor).\n *\n * This module is PURE: it only derives path strings (no filesystem access).\n *\n * Layout (relative to the project root):\n *\n * ```text\n * .mcp-use/\n * ├─ build/        ← compiled server + manifest.json (this package)\n * ├─ generated/    ← output of the typegen escape-hatch command — reserved (VIEWS_SPEC.md)\n * ├─ cache/        ← disposable dev/build scratch\n * ├─ state/        ← mutable runtime state (e.g. tunnel.json)\n * └─ cloud/        ← cloud linkage (link.json)\n * ```\n *\n * `build/` must contain NO mutable runtime state (that is `state/`'s job) so\n * build output stays reproducible and disposable. This is the per-project\n * workspace, distinct from the global `~/.mcp-use/` store (CLI auth,\n * credentials, per-user caches).\n */\n\nimport { join } from \"node:path\";\n\n/**\n * Fixed name of the per-project workspace directory.\n *\n * @internal\n */\nexport const WORKSPACE_DIR_NAME = \".mcp-use\";\n\n/**\n * Basename of the build manifest written inside the build output directory.\n *\n * @internal\n */\nexport const BUILD_MANIFEST_NAME = \"manifest.json\";\n\n/**\n * Manifest written to `.mcp-use/build/manifest.json` by {@link runBuild} and\n * read back by `mcp-use start`.\n *\n * @internal\n */\nexport interface BuildManifest {\n  /** Unique identifier for this build (random hex, regenerated per build). */\n  buildId: string;\n  /**\n   * Filename of the emitted server entry, relative to the build directory\n   * (e.g. `\"index.js\"`). `mcp-use start` imports `<build>/<entryPoint>` and\n   * serves its default export.\n   */\n  entryPoint: string;\n  /** ISO-8601 timestamp of when the build finished. */\n  createdAt: string;\n  /**\n   * Whether the build was created with `mcp-use build --with-inspector`.\n   * Consumed by `mcp-use start` to decide whether to mount the inspector shell.\n   */\n  inspector: boolean;\n}\n\n/**\n * Every resolved path for a project's `.mcp-use/` workspace.\n *\n * @internal\n */\nexport interface WorkspacePaths {\n  /** The project root (the directory containing `.mcp-use/`). */\n  projectRoot: string;\n  /** The `.mcp-use/` workspace directory. */\n  workspace: string;\n  /** Build output directory: `.mcp-use/build`. */\n  build: string;\n  /**\n   * Generated `.d.ts` artifacts directory — reserved for the typegen\n   * escape-hatch command (VIEWS_SPEC.md § Typegen, demoted).\n   */\n  generated: string;\n  /** Disposable dev/build scratch directory. */\n  cache: string;\n  /** Mutable runtime state directory. */\n  state: string;\n  /** Cloud linkage directory — reserved. */\n  cloud: string;\n  /** Build manifest: `<build>/manifest.json`. */\n  buildManifest: string;\n  /** Tunnel subdomain persistence: `<state>/tunnel.json`. */\n  tunnel: string;\n}\n\n/**\n * Derive every workspace path for a project from its root. Pure — no\n * filesystem access.\n *\n * @param projectRoot - Absolute path to the project root.\n *\n * @example\n * ```ts\n * const paths = resolveWorkspacePaths(process.cwd());\n * console.log(paths.build); // <cwd>/.mcp-use/build\n * ```\n *\n * @internal\n */\nexport function resolveWorkspacePaths(projectRoot: string): WorkspacePaths {\n  const workspace = join(projectRoot, WORKSPACE_DIR_NAME);\n  const build = join(workspace, \"build\");\n  return {\n    projectRoot,\n    workspace,\n    build,\n    generated: join(workspace, \"generated\"),\n    cache: join(workspace, \"cache\"),\n    state: join(workspace, \"state\"),\n    cloud: join(workspace, \"cloud\"),\n    buildManifest: join(build, BUILD_MANIFEST_NAME),\n    tunnel: join(workspace, \"state\", \"tunnel.json\"),\n  };\n}\n","/**\n * View discovery for `mcp-use build` / `mcp-use dev`.\n *\n * Views live under `views/<name>/view.tsx` (VIEWS_SPEC.md § File-based views).\n */\n\nimport { existsSync, readdirSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport type { ViteDevServer } from \"vite\";\n\nimport type { ViewsManifest } from \"../views/types.js\";\n\n/** Author-facing view source directory at the project root. */\nexport const VIEWS_SOURCE_DIR = \"views\" as const;\n\n/** Prefix for per-view virtual entry modules (`virtual:mcp-use/views/<name>`). */\nexport const VIRTUAL_VIEW_PREFIX = \"virtual:mcp-use/views/\";\n\n/** Resolved virtual id prefix (Rollup null-prefixed module id). */\nexport const VIRTUAL_VIEW_RESOLVED_PREFIX = `\\0${VIRTUAL_VIEW_PREFIX}`;\n\n/**\n * One discovered view directory.\n *\n * @internal\n */\nexport interface DiscoveredView {\n  /** View directory name (the `views/<name>` segment). */\n  name: string;\n  /** Absolute path to `views/<name>/view.tsx`. */\n  entryPath: string;\n}\n\n/**\n * Scan `views/<name>/view.tsx` under the project root.\n *\n * A missing or empty `views/` directory yields an empty list — tool-only\n * projects keep byte-identical CLI behavior.\n *\n * @param cwd - Absolute project root.\n * @returns Discovered views sorted by name.\n *\n * @internal\n */\nexport function discoverViews(cwd: string): DiscoveredView[] {\n  const viewsDir = join(cwd, VIEWS_SOURCE_DIR);\n  if (!existsSync(viewsDir)) {\n    return [];\n  }\n\n  const views: DiscoveredView[] = [];\n  for (const entry of readdirSync(viewsDir, { withFileTypes: true })) {\n    if (!entry.isDirectory()) {\n      continue;\n    }\n    const entryPath = join(viewsDir, entry.name, \"view.tsx\");\n    if (existsSync(entryPath)) {\n      views.push({ name: entry.name, entryPath });\n    }\n  }\n  views.sort((a, b) => a.name.localeCompare(b.name));\n  return views;\n}\n\n/**\n * Virtual module id for a view entry (`virtual:mcp-use/views/<name>`).\n *\n * @param name - View directory name.\n *\n * @internal\n */\nexport function virtualViewId(name: string): string {\n  return `${VIRTUAL_VIEW_PREFIX}${name}`;\n}\n\n/**\n * Dev URL path Vite serves a resolved virtual module at (browser-loadable).\n *\n * @param name - View directory name.\n *\n * @internal\n */\nexport function devVirtualEntryPath(name: string): string {\n  return `/@id/__x00__${VIRTUAL_VIEW_PREFIX}${name}`;\n}\n\n/**\n * Whether a filesystem path is a view component file or lives under a view dir.\n *\n * @internal\n */\nexport function isViewPath(file: string, cwd: string): boolean {\n  const rel = file.startsWith(cwd) ? file.slice(cwd.length + 1) : file;\n  return /^views\\/[^/]+\\//.test(rel) || /^views\\/[^/]+\\/view\\.tsx$/.test(rel);\n}\n\n/**\n * Whether a path is a view's `view.tsx` entry.\n *\n * @internal\n */\nexport function isViewEntryPath(file: string, cwd: string): boolean {\n  const rel = file.startsWith(cwd) ? file.slice(cwd.length + 1) : file;\n  return /^views\\/[^/]+\\/view\\.tsx$/.test(rel);\n}\n\n/**\n * Build a dev-shaped views manifest (Vite URLs, `/@vite/client` script hook).\n *\n * @internal\n */\nexport function buildDevViewsManifest(views: DiscoveredView[]): ViewsManifest {\n  const manifest: ViewsManifest = {};\n  for (const view of views) {\n    manifest[view.name] = {\n      kind: \"external\",\n      entry: devVirtualEntryPath(view.name),\n      css: [],\n      scripts: [\"/@vite/client\"],\n    };\n  }\n  return manifest;\n}\n\n/**\n * Create a temporary Vite dev server for build-time binding validation.\n *\n * @internal\n */\nexport async function createBindingValidationServer(\n  cwd: string,\n  cacheDir: string,\n  configFile: string | false\n): Promise<ViteDevServer> {\n  const { createServer } = await import(\"vite\");\n  return createServer({\n    root: cwd,\n    configFile,\n    envDir: false,\n    logLevel: \"warn\",\n    cacheDir,\n    server: { middlewareMode: true, hmr: false },\n    ssr: { external: true },\n  });\n}\n","/**\n * Vite plugin: virtual view entry modules and optional SSR wrapper entry.\n */\n\nimport type { Plugin } from \"vite\";\n\nimport type { DiscoveredView } from \"./views.js\";\nimport {\n  VIRTUAL_VIEW_PREFIX,\n  VIRTUAL_VIEW_RESOLVED_PREFIX,\n  virtualViewId,\n} from \"./views.js\";\n\nconst VIRTUAL_TAILWIND_ID = \"virtual:mcp-use/tailwind.css\";\nconst VIRTUAL_TAILWIND_RESOLVED_ID = `\\0${VIRTUAL_TAILWIND_ID}`;\n\n/**\n * Options for {@link mcpUseViewsPlugin}.\n *\n * @internal\n */\nexport interface McpUseViewsPluginOptions {\n  /** Static list or live getter (dev rediscovery). */\n  getViews: () => DiscoveredView[];\n  /**\n   * Dev-mode entry shape. When present, every virtual entry self-accepts HMR\n   * updates (`import.meta.hot.accept()`) so an update that propagates past the\n   * view module re-runs the bootstrap instead of full-reloading the iframe\n   * document (which would wipe bridge state). Absent for builds — entries stay\n   * byte-identical to the production contract.\n   */\n  dev?: {\n    /**\n     * Whether React Fast Refresh is active (`@vitejs/plugin-react` resolved).\n     * When `true`, entries import the plugin's virtual refresh preamble\n     * (`@vitejs/plugin-react/preamble`) before any component module so the\n     * refresh runtime hooks the document — the role `transformIndexHtml`\n     * plays for Vite-served HTML, which synthesized srcdoc documents never\n     * pass through.\n     */\n    reactRefresh: boolean;\n  };\n}\n\n/**\n * Vite plugin that resolves `virtual:mcp-use/views/<name>` to bootstrap code.\n *\n * Applies only to the **client** environment.\n *\n * @internal\n */\nexport function mcpUseViewsPlugin(options: McpUseViewsPluginOptions): Plugin {\n  return {\n    name: \"mcp-use-views\",\n    applyToEnvironment(environment) {\n      return environment.name === \"client\";\n    },\n    resolveId(id) {\n      if (id === VIRTUAL_TAILWIND_ID) {\n        return VIRTUAL_TAILWIND_RESOLVED_ID;\n      }\n      if (!id.startsWith(VIRTUAL_VIEW_PREFIX)) {\n        return undefined;\n      }\n      return `\\0${id}`;\n    },\n    load(id) {\n      if (id === VIRTUAL_TAILWIND_RESOLVED_ID) {\n        // Host theme is applied via ext-apps applyDocumentTheme (data-theme on\n        // html) and optional .dark wrappers — not OS prefers-color-scheme.\n        return [\n          '@import \"tailwindcss\";',\n          \"@custom-variant dark (&:where(.dark, .dark *, [data-theme=dark], [data-theme=dark] *));\",\n        ].join(\"\\n\");\n      }\n      if (!id.startsWith(VIRTUAL_VIEW_RESOLVED_PREFIX)) {\n        return undefined;\n      }\n      const name = id.slice(VIRTUAL_VIEW_RESOLVED_PREFIX.length);\n      const view = options.getViews().find((v) => v.name === name);\n      if (view === undefined) {\n        return undefined;\n      }\n      const lines: string[] = [];\n      if (options.dev?.reactRefresh === true) {\n        // Must be the first import: the preamble hooks the refresh runtime\n        // into the window before react-dom (via the bootstrap import below)\n        // or any refresh-wrapped view module evaluates.\n        lines.push(`import \"@vitejs/plugin-react/preamble\";`);\n      }\n      lines.push(`import ${JSON.stringify(VIRTUAL_TAILWIND_ID)};`);\n      lines.push(\n        `import { bootstrapView } from \"mcp-use/react\";`,\n        `import * as viewModule from ${JSON.stringify(view.entryPath)};`,\n        `bootstrapView(viewModule);`\n      );\n      if (options.dev !== undefined) {\n        lines.push(\n          `if (import.meta.hot) {`,\n          `  import.meta.hot.accept();`,\n          `}`\n        );\n      }\n      lines.push(\"\");\n      return lines.join(\"\\n\");\n    },\n  };\n}\n\n/**\n * Rollup input map for a client views build (one entry per view).\n *\n * @internal\n */\nexport function clientBuildInputs(\n  views: DiscoveredView[]\n): Record<string, string> {\n  const input: Record<string, string> = {};\n  for (const view of views) {\n    input[view.name] = virtualViewId(view.name);\n  }\n  return input;\n}\n"],"mappings":";AAQA,SAAS,kBAAkB;AAC3B,SAAS,YAAY,MAAM,eAAe;AAQnC,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAiBO,SAAS,cAAc,KAAa,UAA2B;AACpE,MAAI,aAAa,QAAW;AAC1B,UAAM,QAAQ,WAAW,QAAQ,IAAI,WAAW,QAAQ,KAAK,QAAQ;AACrE,QAAI,CAAC,WAAW,KAAK,GAAG;AACtB,YAAM,IAAI,MAAM,oBAAoB,KAAK,mBAAmB,QAAQ,IAAI;AAAA,IAC1E;AACA,WAAO;AAAA,EACT;AACA,aAAW,aAAa,kBAAkB;AACxC,UAAM,QAAQ,KAAK,KAAK,SAAS;AACjC,QAAI,WAAW,KAAK,GAAG;AACrB,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,IAAI;AAAA,IACR,4BAA4B,GAAG,iBAC1B,iBAAiB,KAAK,IAAI,CAAC;AAAA,EAGlC;AACF;;;ACvDA,SAAS,cAAAA,mBAAkB;AAC3B,SAAS,QAAAC,aAAY;AACrB,SAAS,qBAAqB;AAE9B,IAAM,yBAAyB;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAUO,SAAS,sBAAsB,KAA6B;AACjE,aAAW,QAAQ,wBAAwB;AACzC,UAAM,OAAOA,MAAK,KAAK,IAAI;AAC3B,QAAID,YAAW,IAAI,EAAG,QAAO;AAAA,EAC/B;AACA,SAAO;AACT;AASO,SAAS,qBAA6B;AAC3C,SAAO,cAAc,YAAY,QAAQ,uBAAuB,CAAC;AACnE;;;ACjCA,SAAS,iBAAiB;AAC1B,SAAS,SAAS,QAAAE,OAAM,UAAU,WAAW;AAGtC,IAAM,2BAA2B;AAExC,SAAS,sBAAsB,KAAa,OAAuB;AACjE,MAAI,aAAa,SAAS,KAAK,KAAK,EAAE,MAAM,GAAG,EAAE,KAAK,GAAG;AACzD,QAAM,YAAY,QAAQ,UAAU;AACpC,QAAM,mBACJ,cAAc,SACV,SACA,cAAc,SACZ,SACA,cAAc,SAAS,cAAc,SACnC,QACA;AAEV,MAAI,cAAc,kBAAkB;AAClC,iBAAa,GAAG,WAAW,MAAM,GAAG,CAAC,UAAU,MAAM,CAAC,GAAG,gBAAgB;AAAA,EAC3E;AACA,SAAO,WAAW,WAAW,GAAG,IAAI,aAAa,KAAK,UAAU;AAClE;AAGO,SAAS,wBAAwB,KAAa,OAAuB;AAC1E,QAAM,aAAa,sBAAsB,KAAK,KAAK;AACnD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,4BAA4B,KAAK,UAAU,UAAU,CAAC;AAAA,IACtD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAUA,eAAsB,wBACpB,KACA,OACkB;AAClB,QAAM,kBAAkBA,MAAK,KAAK,wBAAwB;AAC1D,MAAI;AACF,UAAM,UAAU,iBAAiB,wBAAwB,KAAK,KAAK,GAAG;AAAA,MACpE,UAAU;AAAA,MACV,MAAM;AAAA,IACR,CAAC;AACD,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QACE,UAAU,QACV,OAAO,UAAU,YACjB,UAAU,SACV,MAAM,SAAS,UACf;AACA,aAAO;AAAA,IACT;AACA,UAAM;AAAA,EACR;AACF;;;AClDA,SAAS,QAAAC,aAAY;AAOd,IAAM,qBAAqB;AAO3B,IAAM,sBAAsB;AAqE5B,SAAS,sBAAsB,aAAqC;AACzE,QAAM,YAAYA,MAAK,aAAa,kBAAkB;AACtD,QAAM,QAAQA,MAAK,WAAW,OAAO;AACrC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAWA,MAAK,WAAW,WAAW;AAAA,IACtC,OAAOA,MAAK,WAAW,OAAO;AAAA,IAC9B,OAAOA,MAAK,WAAW,OAAO;AAAA,IAC9B,OAAOA,MAAK,WAAW,OAAO;AAAA,IAC9B,eAAeA,MAAK,OAAO,mBAAmB;AAAA,IAC9C,QAAQA,MAAK,WAAW,SAAS,aAAa;AAAA,EAChD;AACF;;;ACxHA,SAAS,cAAAC,aAAY,mBAAmB;AACxC,SAAS,QAAAC,aAAY;AAMd,IAAM,mBAAmB;AAGzB,IAAM,sBAAsB;AAG5B,IAAM,+BAA+B,KAAK,mBAAmB;AAyB7D,SAAS,cAAc,KAA+B;AAC3D,QAAM,WAAWA,MAAK,KAAK,gBAAgB;AAC3C,MAAI,CAACD,YAAW,QAAQ,GAAG;AACzB,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,QAA0B,CAAC;AACjC,aAAW,SAAS,YAAY,UAAU,EAAE,eAAe,KAAK,CAAC,GAAG;AAClE,QAAI,CAAC,MAAM,YAAY,GAAG;AACxB;AAAA,IACF;AACA,UAAM,YAAYC,MAAK,UAAU,MAAM,MAAM,UAAU;AACvD,QAAID,YAAW,SAAS,GAAG;AACzB,YAAM,KAAK,EAAE,MAAM,MAAM,MAAM,UAAU,CAAC;AAAA,IAC5C;AAAA,EACF;AACA,QAAM,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AACjD,SAAO;AACT;AASO,SAAS,cAAc,MAAsB;AAClD,SAAO,GAAG,mBAAmB,GAAG,IAAI;AACtC;AASO,SAAS,oBAAoB,MAAsB;AACxD,SAAO,eAAe,mBAAmB,GAAG,IAAI;AAClD;AAOO,SAAS,WAAW,MAAc,KAAsB;AAC7D,QAAM,MAAM,KAAK,WAAW,GAAG,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,IAAI;AAChE,SAAO,kBAAkB,KAAK,GAAG,KAAK,4BAA4B,KAAK,GAAG;AAC5E;AAiBO,SAAS,sBAAsB,OAAwC;AAC5E,QAAM,WAA0B,CAAC;AACjC,aAAW,QAAQ,OAAO;AACxB,aAAS,KAAK,IAAI,IAAI;AAAA,MACpB,MAAM;AAAA,MACN,OAAO,oBAAoB,KAAK,IAAI;AAAA,MACpC,KAAK,CAAC;AAAA,MACN,SAAS,CAAC,eAAe;AAAA,IAC3B;AAAA,EACF;AACA,SAAO;AACT;AAOA,eAAsB,8BACpB,KACA,UACA,YACwB;AACxB,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,MAAM;AAC5C,SAAO,aAAa;AAAA,IAClB,MAAM;AAAA,IACN;AAAA,IACA,QAAQ;AAAA,IACR,UAAU;AAAA,IACV;AAAA,IACA,QAAQ,EAAE,gBAAgB,MAAM,KAAK,MAAM;AAAA,IAC3C,KAAK,EAAE,UAAU,KAAK;AAAA,EACxB,CAAC;AACH;;;ACnIA,IAAM,sBAAsB;AAC5B,IAAM,+BAA+B,KAAK,mBAAmB;AAqCtD,SAAS,kBAAkB,SAA2C;AAC3E,SAAO;AAAA,IACL,MAAM;AAAA,IACN,mBAAmB,aAAa;AAC9B,aAAO,YAAY,SAAS;AAAA,IAC9B;AAAA,IACA,UAAU,IAAI;AACZ,UAAI,OAAO,qBAAqB;AAC9B,eAAO;AAAA,MACT;AACA,UAAI,CAAC,GAAG,WAAW,mBAAmB,GAAG;AACvC,eAAO;AAAA,MACT;AACA,aAAO,KAAK,EAAE;AAAA,IAChB;AAAA,IACA,KAAK,IAAI;AACP,UAAI,OAAO,8BAA8B;AAGvC,eAAO;AAAA,UACL;AAAA,UACA;AAAA,QACF,EAAE,KAAK,IAAI;AAAA,MACb;AACA,UAAI,CAAC,GAAG,WAAW,4BAA4B,GAAG;AAChD,eAAO;AAAA,MACT;AACA,YAAM,OAAO,GAAG,MAAM,6BAA6B,MAAM;AACzD,YAAM,OAAO,QAAQ,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI;AAC3D,UAAI,SAAS,QAAW;AACtB,eAAO;AAAA,MACT;AACA,YAAM,QAAkB,CAAC;AACzB,UAAI,QAAQ,KAAK,iBAAiB,MAAM;AAItC,cAAM,KAAK,yCAAyC;AAAA,MACtD;AACA,YAAM,KAAK,UAAU,KAAK,UAAU,mBAAmB,CAAC,GAAG;AAC3D,YAAM;AAAA,QACJ;AAAA,QACA,+BAA+B,KAAK,UAAU,KAAK,SAAS,CAAC;AAAA,QAC7D;AAAA,MACF;AACA,UAAI,QAAQ,QAAQ,QAAW;AAC7B,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,YAAM,KAAK,EAAE;AACb,aAAO,MAAM,KAAK,IAAI;AAAA,IACxB;AAAA,EACF;AACF;","names":["existsSync","join","join","join","existsSync","join"]}

package/dist/chunk-QUUANIE4.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/fetch-app.ts"],"sourcesContent":["import {\n  hostHeaderValidationResponse,\n  originValidationResponse,\n  type AuthInfo,\n} from \"@modelcontextprotocol/server\";\n\n/** Web-standard request handler. */\nexport type FetchHandler = (request: Request) => Promise<Response>;\n\n/** Request shapes accepted by {@link toFrameworkHandler}. */\nexport type FrameworkRequestLike = Request | { req: { raw: Request } };\n\n/**\n * Universal web handler mountable in Vercel, Hono, TanStack, and other\n * fetch-native frameworks without `c.req.raw` boilerplate.\n */\nexport type FrameworkHandler = (\n  input: FrameworkRequestLike\n) => Promise<Response>;\n\n/**\n * Wrap a {@link FetchHandler} for framework duck-typing (Hono `Context`, etc.).\n *\n * @param fetch - Inner fetch handler produced by {@link MCPServer.getHandler}.\n */\nexport function toFrameworkHandler(fetch: FetchHandler): FrameworkHandler {\n  return (input) => {\n    const request = input instanceof Request ? input : input.req.raw;\n    return fetch(request);\n  };\n}\n\n/** Onion middleware over a {@link FetchHandler} terminal. */\nexport type FetchMiddleware = (\n  request: Request,\n  next: () => Promise<Response>\n) => Promise<Response>;\n\n/** Per-request values stashed before the MCP handler runs. */\nexport interface RequestBag {\n  /** Parsed JSON body when the JSON middleware ran first. */\n  parsedBody?: unknown;\n  /** Verified OAuth identity forwarded to the SDK handler. */\n  authInfo?: AuthInfo;\n}\n\nconst requestBags = new WeakMap<Request, RequestBag>();\n\n/**\n * Mutable per-request bag; created on first access.\n *\n * @param request - Incoming request whose bag to read or create.\n */\nexport function getRequestBag(request: Request): RequestBag {\n  let bag = requestBags.get(request);\n  if (bag === undefined) {\n    bag = {};\n    requestBags.set(request, bag);\n  }\n  return bag;\n}\n\n/**\n * Compose middleware around a terminal handler (first listed runs outermost).\n *\n * @param terminal - Fallback handler when no middleware short-circuits.\n * @param middlewares - Middleware chain executed before `terminal`.\n */\nexport function composeFetch(\n  terminal: FetchHandler,\n  ...middlewares: FetchMiddleware[]\n): FetchHandler {\n  return async (request: Request): Promise<Response> => {\n    let index = 0;\n    const dispatch = async (): Promise<Response> => {\n      if (index < middlewares.length) {\n        const middleware = middlewares[index]!;\n        index += 1;\n        return middleware(request, dispatch);\n      }\n      return terminal(request);\n    };\n    return dispatch();\n  };\n}\n\n/**\n * Return the pathname of a request URL.\n *\n * @param request - Request whose pathname to read.\n */\nexport function pathnameOf(request: Request): string {\n  return new URL(request.url).pathname;\n}\n\n/**\n * Match a request pathname exactly.\n *\n * @param request - Request to test.\n * @param path - Exact pathname (for example `/mcp`).\n */\nexport function matchesPath(request: Request, path: string): boolean {\n  return pathnameOf(request) === path;\n}\n\n/**\n * Match a request pathname prefix (prefix or `prefix/...`).\n *\n * @param request - Request to test.\n * @param prefix - Path prefix without a trailing wildcard.\n */\nexport function matchesPathPrefix(request: Request, prefix: string): boolean {\n  const pathname = pathnameOf(request);\n  return pathname === prefix || pathname.startsWith(`${prefix}/`);\n}\n\n/**\n * Append a framework-owned child path beneath an MCP base path.\n *\n * Unlike string interpolation, this keeps the root base path from producing\n * a double slash: `pathUnderBase(\"/\", \"inspector\")` is `\"/inspector\"`.\n *\n * @param basePath - Valid MCP base path, including the root path `/`.\n * @param childPath - Relative child path, with or without a leading slash.\n * @returns Absolute pathname beneath `basePath`.\n *\n * @internal\n */\nexport function pathUnderBase(basePath: string, childPath: string): string {\n  const child = childPath.replace(/^\\/+/, \"\");\n  return basePath === \"/\" ? `/${child}` : `${basePath}/${child}`;\n}\n\n/**\n * Classify a request as explicit browser HTML navigation.\n *\n * Only GET and HEAD requests whose Accept header names `text/html` with a\n * non-zero quality value qualify. Wildcard-only and missing Accept headers\n * remain available to protocol and health probes.\n *\n * @param request - Incoming request to classify.\n * @returns Whether the request explicitly accepts HTML.\n *\n * @internal\n */\nexport function isHtmlNavigationRequest(request: Request): boolean {\n  if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n    return false;\n  }\n  const accept = request.headers.get(\"accept\");\n  if (accept === null) {\n    return false;\n  }\n  return accept.split(\",\").some((range) => {\n    const [mediaType, ...parameters] = range.split(\";\");\n    if (mediaType?.trim().toLowerCase() !== \"text/html\") {\n      return false;\n    }\n    return !parameters.some((parameter) => {\n      const [name, value] = parameter.trim().toLowerCase().split(\"=\");\n      return name === \"q\" && Number(value) === 0;\n    });\n  });\n}\n\n/**\n * Dispatch to the first matching route handler.\n *\n * @param routes - Ordered route table; first match wins.\n * @param fallback - Handler when nothing matches.\n */\nexport function routeFetch(\n  routes: Array<{\n    match: (request: Request) => boolean;\n    handler: FetchHandler;\n  }>,\n  fallback: FetchHandler = async () =>\n    new Response(\"Not Found\", { status: 404 })\n): FetchHandler {\n  return async (request: Request): Promise<Response> => {\n    for (const route of routes) {\n      if (route.match(request)) {\n        return route.handler(request);\n      }\n    }\n    return fallback(request);\n  };\n}\n\n/**\n * Parse JSON bodies once and stash them in the request bag.\n */\nexport function jsonBodyMiddleware(): FetchMiddleware {\n  return async (request, next) => {\n    const bag = getRequestBag(request);\n    if (bag.parsedBody !== undefined) {\n      return next();\n    }\n    if (\n      !(request.headers.get(\"content-type\") ?? \"\").includes(\"application/json\")\n    ) {\n      return next();\n    }\n    try {\n      bag.parsedBody = await request.clone().json();\n    } catch {\n      return new Response(\"Invalid JSON\", { status: 400 });\n    }\n    return next();\n  };\n}\n\n/**\n * Reject requests whose `Host` header is not on the allowlist.\n *\n * @param hosts - Allowed hostnames (port-agnostic).\n */\nexport function hostValidationMiddleware(hosts: string[]): FetchMiddleware {\n  return async (request, next) => {\n    const rejected = hostHeaderValidationResponse(request, hosts);\n    return rejected ?? next();\n  };\n}\n\n/**\n * Reject requests whose `Origin` header is not on the allowlist.\n *\n * @param origins - Allowed origin hostnames (port-agnostic).\n * @param skipSafeMethods - When true, skip GET/HEAD (view asset GETs).\n */\nexport function originValidationMiddleware(\n  origins: string[],\n  skipSafeMethods = true\n): FetchMiddleware {\n  return async (request, next) => {\n    if (\n      skipSafeMethods &&\n      (request.method === \"GET\" || request.method === \"HEAD\")\n    ) {\n      return next();\n    }\n    const rejected = originValidationResponse(request, origins);\n    return rejected ?? next();\n  };\n}\n"],"mappings":";AAAA;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAqBA,SAAS,mBAAmB,OAAuC;AACxE,SAAO,CAAC,UAAU;AAChB,UAAM,UAAU,iBAAiB,UAAU,QAAQ,MAAM,IAAI;AAC7D,WAAO,MAAM,OAAO;AAAA,EACtB;AACF;AAgBA,IAAM,cAAc,oBAAI,QAA6B;AAO9C,SAAS,cAAc,SAA8B;AAC1D,MAAI,MAAM,YAAY,IAAI,OAAO;AACjC,MAAI,QAAQ,QAAW;AACrB,UAAM,CAAC;AACP,gBAAY,IAAI,SAAS,GAAG;AAAA,EAC9B;AACA,SAAO;AACT;AAQO,SAAS,aACd,aACG,aACW;AACd,SAAO,OAAO,YAAwC;AACpD,QAAI,QAAQ;AACZ,UAAM,WAAW,YAA+B;AAC9C,UAAI,QAAQ,YAAY,QAAQ;AAC9B,cAAM,aAAa,YAAY,KAAK;AACpC,iBAAS;AACT,eAAO,WAAW,SAAS,QAAQ;AAAA,MACrC;AACA,aAAO,SAAS,OAAO;AAAA,IACzB;AACA,WAAO,SAAS;AAAA,EAClB;AACF;AAOO,SAAS,WAAW,SAA0B;AACnD,SAAO,IAAI,IAAI,QAAQ,GAAG,EAAE;AAC9B;AAQO,SAAS,YAAY,SAAkB,MAAuB;AACnE,SAAO,WAAW,OAAO,MAAM;AACjC;AAQO,SAAS,kBAAkB,SAAkB,QAAyB;AAC3E,QAAM,WAAW,WAAW,OAAO;AACnC,SAAO,aAAa,UAAU,SAAS,WAAW,GAAG,MAAM,GAAG;AAChE;AAcO,SAAS,cAAc,UAAkB,WAA2B;AACzE,QAAM,QAAQ,UAAU,QAAQ,QAAQ,EAAE;AAC1C,SAAO,aAAa,MAAM,IAAI,KAAK,KAAK,GAAG,QAAQ,IAAI,KAAK;AAC9D;AAcO,SAAS,wBAAwB,SAA2B;AACjE,MAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,QAAQ;AACzD,WAAO;AAAA,EACT;AACA,QAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAC3C,MAAI,WAAW,MAAM;AACnB,WAAO;AAAA,EACT;AACA,SAAO,OAAO,MAAM,GAAG,EAAE,KAAK,CAAC,UAAU;AACvC,UAAM,CAAC,WAAW,GAAG,UAAU,IAAI,MAAM,MAAM,GAAG;AAClD,QAAI,WAAW,KAAK,EAAE,YAAY,MAAM,aAAa;AACnD,aAAO;AAAA,IACT;AACA,WAAO,CAAC,WAAW,KAAK,CAAC,cAAc;AACrC,YAAM,CAAC,MAAM,KAAK,IAAI,UAAU,KAAK,EAAE,YAAY,EAAE,MAAM,GAAG;AAC9D,aAAO,SAAS,OAAO,OAAO,KAAK,MAAM;AAAA,IAC3C,CAAC;AAAA,EACH,CAAC;AACH;AAQO,SAAS,WACd,QAIA,WAAyB,YACvB,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC,GAC7B;AACd,SAAO,OAAO,YAAwC;AACpD,eAAW,SAAS,QAAQ;AAC1B,UAAI,MAAM,MAAM,OAAO,GAAG;AACxB,eAAO,MAAM,QAAQ,OAAO;AAAA,MAC9B;AAAA,IACF;AACA,WAAO,SAAS,OAAO;AAAA,EACzB;AACF;AAKO,SAAS,qBAAsC;AACpD,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,MAAM,cAAc,OAAO;AACjC,QAAI,IAAI,eAAe,QAAW;AAChC,aAAO,KAAK;AAAA,IACd;AACA,QACE,EAAE,QAAQ,QAAQ,IAAI,cAAc,KAAK,IAAI,SAAS,kBAAkB,GACxE;AACA,aAAO,KAAK;AAAA,IACd;AACA,QAAI;AACF,UAAI,aAAa,MAAM,QAAQ,MAAM,EAAE,KAAK;AAAA,IAC9C,QAAQ;AACN,aAAO,IAAI,SAAS,gBAAgB,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrD;AACA,WAAO,KAAK;AAAA,EACd;AACF;AAOO,SAAS,yBAAyB,OAAkC;AACzE,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,WAAW,6BAA6B,SAAS,KAAK;AAC5D,WAAO,YAAY,KAAK;AAAA,EAC1B;AACF;AAQO,SAAS,2BACd,SACA,kBAAkB,MACD;AACjB,SAAO,OAAO,SAAS,SAAS;AAC9B,QACE,oBACC,QAAQ,WAAW,SAAS,QAAQ,WAAW,SAChD;AACA,aAAO,KAAK;AAAA,IACd;AACA,UAAM,WAAW,yBAAyB,SAAS,OAAO;AAC1D,WAAO,YAAY,KAAK;AAAA,EAC1B;AACF;","names":[]}