mcp-use 2.0.0-beta.2 → 2.0.0-beta.21

package/dist/bin/args.d.ts

@@ -16,12 +16,22 @@ export interface ParsedArgs {
     port: number | undefined;
     /** Value of `--entry`, or `undefined` if the flag was not passed. */
     entry: string | undefined;
+    /** Project root selected by `--path`. */
+    path: string | undefined;
+    /** MCP source directory selected by `--mcp-dir`. */
+    mcpDir: string | undefined;
+    /** View source directory selected by `--views-dir`. */
+    viewsDir: string | undefined;
     /** Value of `--host`, or `undefined` if the flag was not passed. */
     host: string | undefined;
     /** Whether `--tunnel` was passed (dev only). */
     tunnel: boolean;
     /** `false` when `--no-open` was passed (dev only); `true` otherwise. */
     open: boolean;
+    /** Whether `--with-inspector` was passed (build only). */
+    withInspector: boolean;
+    /** Whether build output should include source maps (build only). */
+    sourceMaps: boolean;
     /** Whether `--help`/`-h` was passed. */
     help: boolean;
     /** Whether `--version`/`-v` was passed. */

package/dist/bin/args.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../src/bin/args.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,qFAAqF;IACrF,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,yEAAyE;IACzE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,qEAAqE;IACrE,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,oEAAoE;IACpE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,gDAAgD;IAChD,MAAM,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,IAAI,EAAE,OAAO,CAAC;IACd,wCAAwC;IACxC,IAAI,EAAE,OAAO,CAAC;IACd,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CA0E7D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,GAC9D,MAAM,CAQR"}
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../src/bin/args.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,qFAAqF;IACrF,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,yEAAyE;IACzE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,qEAAqE;IACrE,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,yCAAyC;IACzC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,oDAAoD;IACpD,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,uDAAuD;IACvD,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,oEAAoE;IACpE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,gDAAgD;IAChD,MAAM,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,IAAI,EAAE,OAAO,CAAC;IACd,0DAA0D;IAC1D,aAAa,EAAE,OAAO,CAAC;IACvB,oEAAoE;IACpE,UAAU,EAAE,OAAO,CAAC;IACpB,wCAAwC;IACxC,IAAI,EAAE,OAAO,CAAC;IACd,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CA8F7D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,GAC9D,MAAM,CAQR"}

package/dist/bin/main.d.ts

@@ -8,6 +8,10 @@ export interface CliCommandOptions {
     cwd: string;
     /** Server entry module override (`--entry`). */
     entry?: string;
+    /** MCP source directory (`--mcp-dir`), relative to the project root. */
+    mcpDir?: string;
+    /** View source directory (`--views-dir`), relative to the project root. */
+    viewsDir?: string;
     /** Port override (`--port`/`-p`). */
     port?: number;
     /** Host override (`--host`). */
@@ -16,6 +20,10 @@ export interface CliCommandOptions {
     tunnel?: boolean;
     /** Auto-open the inspector in a browser at dev startup (`--no-open` disables). */
     open?: boolean;
+    /** Record inspector availability in the build manifest (`--with-inspector`). */
+    withInspector?: boolean;
+    /** Emit source maps in production build output (`--source-maps`). */
+    sourceMaps?: boolean;
 }
 /**
  * Run the `mcp-use` CLI.

package/dist/bin/main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/bin/main.ts"],"names":[],"mappings":"AAWA;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,8DAA8D;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kFAAkF;IAClF,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AA8BD;;;;;;;;GAQG;AACH,wBAAsB,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA0EnE"}
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/bin/main.ts"],"names":[],"mappings":"AAYA;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,8DAA8D;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kFAAkF;IAClF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,gFAAgF;IAChF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,qEAAqE;IACrE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAmCD;;;;;;;;GAQG;AACH,wBAAsB,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA6EnE"}

package/dist/bin/start.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../src/bin/start.ts"],"names":[],"mappings":"AAgCA;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,GAAG,EAAE,MAAM,CAAC;IACZ,2EAA2E;IAC3E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAoE5E"}
+{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../src/bin/start.ts"],"names":[],"mappings":"AAiCA;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,GAAG,EAAE,MAAM,CAAC;IACZ,2EAA2E;IAC3E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAqE5E"}

package/dist/bin.js

@@ -1,10 +1,11 @@
 #!/usr/bin/env node
 import {
   parseArgs
-} from "./chunk-Q4PUTBMV.js";
+} from "./chunk-QBAJXPRQ.js";
 
 // src/bin/main.ts
 import { readFileSync } from "fs";
+import { resolve } from "path";
 var HELP = `mcp-use \u2014 run MCP servers built with mcp-use
 
 Usage: mcp-use <command> [options]
@@ -28,6 +29,11 @@ Options:
   -p, --port <n>     Port to serve on (default: $PORT or 3000)
   --host <host>      Host to bind (dev only)
   --entry <path>     Server entry module (dev/build only)
+  --path <directory> Project root (default: current directory)
+  --mcp-dir <dir>    Directory containing the MCP entry and views/
+  --views-dir <dir>  Views directory (default: views/ or <mcp-dir>/views/)
+  --with-inspector   Record inspector availability in the build manifest (build only)
+  --source-maps      Emit source maps in build output (build only)
   --tunnel           Expose the dev server through a public tunnel (dev only)
   --no-open          Do not auto-open the inspector in a browser (dev only)
   -h, --help         Show this help
@@ -38,8 +44,11 @@ async function main(argv) {
     return 0;
   }
   if (argv.some((token) => token === "--help" || token === "-h")) {
-    console.log(HELP);
-    return 0;
+    const command2 = argv[0];
+    if (command2 === void 0 || command2 === "--help" || command2 === "-h") {
+      console.log(HELP);
+      return 0;
+    }
   }
   const command = argv[0];
   if (command === "login" || command === "logout" || command === "whoami") {
@@ -109,7 +118,10 @@ async function startCommand(args) {
   let started;
   try {
     const { runStart } = await import("./commands/start.js");
-    started = await runStart({ cwd: process.cwd(), port: args.port });
+    started = await runStart({
+      cwd: resolve(process.cwd(), args.path ?? "."),
+      port: args.port
+    });
   } catch (error) {
     console.error(error instanceof Error ? error.message : String(error));
     return 1;
@@ -130,12 +142,16 @@ async function startCommand(args) {
 }
 async function cliCommand(command, args) {
   const options = {
-    cwd: process.cwd(),
+    cwd: resolve(process.cwd(), args.path ?? "."),
     ...args.entry !== void 0 && { entry: args.entry },
+    ...args.mcpDir !== void 0 && { mcpDir: args.mcpDir },
+    ...args.viewsDir !== void 0 && { viewsDir: args.viewsDir },
     ...args.port !== void 0 && { port: args.port },
     ...args.host !== void 0 && { host: args.host },
     ...args.tunnel && { tunnel: true },
-    ...!args.open && { open: false }
+    ...!args.open && { open: false },
+    ...args.withInspector && { withInspector: true },
+    ...args.sourceMaps && { sourceMaps: true }
   };
   try {
     if (command === "dev") {

package/dist/bin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/bin/main.ts","../src/bin.ts"],"sourcesContent":["/**\n * Command dispatch for the `mcp-use` bin (specs/CLI_SPEC.md).\n *\n * Every substantial command is dispatched through its own dynamic import.\n * The library entry, bin, and production `start` path therefore never\n * evaluate Vite or an unrelated command implementation.\n */\nimport { readFileSync } from \"node:fs\";\n\nimport { parseArgs, type ParsedArgs } from \"./args.js\";\n\n/**\n * Options this bin passes to the cli's `runDev`/`runBuild`.\n *\n * @internal\n */\nexport interface CliCommandOptions {\n  /** Project root the command operates on (`process.cwd()`). */\n  cwd: string;\n  /** Server entry module override (`--entry`). */\n  entry?: string;\n  /** Port override (`--port`/`-p`). */\n  port?: number;\n  /** Host override (`--host`). */\n  host?: string;\n  /** Start a public tunnel at dev startup (`--tunnel`). */\n  tunnel?: boolean;\n  /** Auto-open the inspector in a browser at dev startup (`--no-open` disables). */\n  open?: boolean;\n}\n\nconst HELP = `mcp-use — run MCP servers built with mcp-use\n\nUsage: mcp-use <command> [options]\n\nCommands:\n  dev      Start the dev server\n  build    Build the server into .mcp-use/build\n  start    Serve the production build from .mcp-use/build\n  login    Authenticate the cloud CLI\n  logout   Delete local cloud credentials\n  whoami   Show the authenticated cloud identity\n  org      Manage the active organization\n  servers  Manage cloud servers and environment variables\n  deployments Manage cloud deployments and logs\n  deploy   Deploy the current GitHub project\n  client   Connect to and invoke MCP servers\n  skills   Install maintained coding-agent skills\n  screenshot Capture an MCP Apps view\n\nOptions:\n  -p, --port <n>     Port to serve on (default: $PORT or 3000)\n  --host <host>      Host to bind (dev only)\n  --entry <path>     Server entry module (dev/build only)\n  --tunnel           Expose the dev server through a public tunnel (dev only)\n  --no-open          Do not auto-open the inspector in a browser (dev only)\n  -h, --help         Show this help\n  -v, --version      Print the version`;\n\n/**\n * Run the `mcp-use` CLI.\n *\n * @param argv - Raw arguments, typically `process.argv.slice(2)`.\n * @returns The process exit code. A `0` from `start`/`dev` means the command\n * launched successfully and the process should stay alive serving.\n *\n * @internal\n */\nexport async function main(argv: readonly string[]): Promise<number> {\n  if (argv.length === 1 && [\"--version\", \"-v\"].includes(argv[0] ?? \"\")) {\n    console.log(readOwnVersion());\n    return 0;\n  }\n  if (argv.some((token) => token === \"--help\" || token === \"-h\")) {\n    console.log(HELP);\n    return 0;\n  }\n\n  const command = argv[0];\n  if (command === \"login\" || command === \"logout\" || command === \"whoami\") {\n    const { runIdentity } = await import(\"../commands/identity.js\");\n    return runIdentity(command, argv.slice(1));\n  }\n  if (command === \"org\") {\n    const { runOrganizations } = await import(\"../commands/organizations.js\");\n    return runOrganizations(argv.slice(1));\n  }\n  if (command === \"servers\") {\n    const { runServers } = await import(\"../commands/servers.js\");\n    return runServers(argv.slice(1));\n  }\n  if (command === \"deployments\") {\n    const { runDeployments } = await import(\"../commands/deployments.js\");\n    return runDeployments(argv.slice(1));\n  }\n  if (command === \"deploy\") {\n    const { runDeploy } = await import(\"../commands/deploy.js\");\n    return runDeploy(argv.slice(1));\n  }\n  if (command === \"client\") {\n    const { runClient } = await import(\"../commands/client.js\");\n    return runClient(argv.slice(1));\n  }\n  if (command === \"skills\") {\n    const { runSkills } = await import(\"../commands/skills.js\");\n    return runSkills(argv.slice(1));\n  }\n  if (command === \"screenshot\") {\n    const { runScreenshot } = await import(\"../commands/screenshot.js\");\n    return runScreenshot(argv.slice(1));\n  }\n\n  let args: ParsedArgs;\n  try {\n    args = parseArgs(argv);\n  } catch (error) {\n    console.error(error instanceof Error ? error.message : String(error));\n    return 2;\n  }\n\n  if (args.version) {\n    console.log(readOwnVersion());\n    return 0;\n  }\n  if (args.help) {\n    console.log(HELP);\n    return 0;\n  }\n\n  switch (args.command) {\n    case \"start\":\n      return startCommand(args);\n    case \"dev\":\n    case \"build\":\n      return cliCommand(args.command, args);\n    case undefined:\n      console.error(HELP);\n      return 2;\n    default:\n      console.error(`Unknown command: ${args.command}\\n\\n${HELP}`);\n      return 2;\n  }\n}\n\n/** `mcp-use start`: serve the production build, wire shutdown signals. */\nasync function startCommand(args: ParsedArgs): Promise<number> {\n  let started;\n  try {\n    const { runStart } = await import(\"../commands/start.js\");\n    started = await runStart({ cwd: process.cwd(), port: args.port });\n  } catch (error) {\n    console.error(error instanceof Error ? error.message : String(error));\n    return 1;\n  }\n\n  console.log(`mcp-use server running at ${started.url}`);\n\n  const shutdown = (): void => {\n    started.close().then(\n      () => process.exit(0),\n      (error: unknown) => {\n        console.error(error instanceof Error ? error.message : String(error));\n        process.exit(1);\n      }\n    );\n  };\n  process.once(\"SIGINT\", shutdown);\n  process.once(\"SIGTERM\", shutdown);\n  return 0;\n}\n\n/** `mcp-use dev` / `mcp-use build`: dispatch to dedicated command chunks. */\nasync function cliCommand(\n  command: \"dev\" | \"build\",\n  args: ParsedArgs\n): Promise<number> {\n  const options: CliCommandOptions = {\n    cwd: process.cwd(),\n    ...(args.entry !== undefined && { entry: args.entry }),\n    ...(args.port !== undefined && { port: args.port }),\n    ...(args.host !== undefined && { host: args.host }),\n    ...(args.tunnel && { tunnel: true }),\n    ...(!args.open && { open: false }),\n  };\n\n  try {\n    if (command === \"dev\") {\n      const { runDev } = await import(\"../commands/dev.js\");\n      await runDev(options);\n    } else {\n      const { runBuild } = await import(\"../commands/build.js\");\n      await runBuild(options);\n    }\n    return 0;\n  } catch (error) {\n    console.error(error instanceof Error ? error.message : String(error));\n    return 1;\n  }\n}\n\n/**\n * Read this package's own version for `--version`.\n *\n * Probes both layouts — `dist/bin.js` (bundled, package root is one level\n * up) and `src/bin/main.ts` (tests, package root is two levels up) — and\n * verifies the manifest's `name` so an unrelated package.json never wins.\n */\nfunction readOwnVersion(): string {\n  for (const relative of [\"../package.json\", \"../../package.json\"]) {\n    try {\n      const raw = readFileSync(new URL(relative, import.meta.url), \"utf8\");\n      const pkg = JSON.parse(raw) as { name?: unknown; version?: unknown };\n      if (\n        (pkg.name === \"mcp-use\" || pkg.name === \"mcp-use\") &&\n        typeof pkg.version === \"string\"\n      ) {\n        return pkg.version;\n      }\n    } catch {\n      // Not there or unreadable — try the next candidate.\n    }\n  }\n  return \"unknown\";\n}\n","#!/usr/bin/env node\n/*\n * `mcp-use` bin entry point (specs/CLI_SPEC.md).\n *\n * Kept to a single call so all logic lives in testable modules under\n * src/bin/. On success the process is NOT exited: `start` (and `dev`) keep\n * serving, and `--help`/`--version` let the event loop drain naturally.\n */\nimport { main } from \"./bin/main.js\";\n\nmain(process.argv.slice(2)).then(\n  (code) => {\n    process.exitCode = code;\n  },\n  (error: unknown) => {\n    console.error(error instanceof Error ? error.message : String(error));\n    process.exitCode = 1;\n  }\n);\n"],"mappings":";;;;;;AAOA,SAAS,oBAAoB;AAwB7B,IAAM,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAqCb,eAAsB,KAAK,MAA0C;AACnE,MAAI,KAAK,WAAW,KAAK,CAAC,aAAa,IAAI,EAAE,SAAS,KAAK,CAAC,KAAK,EAAE,GAAG;AACpE,YAAQ,IAAI,eAAe,CAAC;AAC5B,WAAO;AAAA,EACT;AACA,MAAI,KAAK,KAAK,CAAC,UAAU,UAAU,YAAY,UAAU,IAAI,GAAG;AAC9D,YAAQ,IAAI,IAAI;AAChB,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,KAAK,CAAC;AACtB,MAAI,YAAY,WAAW,YAAY,YAAY,YAAY,UAAU;AACvE,UAAM,EAAE,YAAY,IAAI,MAAM,OAAO,wBAAyB;AAC9D,WAAO,YAAY,SAAS,KAAK,MAAM,CAAC,CAAC;AAAA,EAC3C;AACA,MAAI,YAAY,OAAO;AACrB,UAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,6BAA8B;AACxE,WAAO,iBAAiB,KAAK,MAAM,CAAC,CAAC;AAAA,EACvC;AACA,MAAI,YAAY,WAAW;AACzB,UAAM,EAAE,WAAW,IAAI,MAAM,OAAO,uBAAwB;AAC5D,WAAO,WAAW,KAAK,MAAM,CAAC,CAAC;AAAA,EACjC;AACA,MAAI,YAAY,eAAe;AAC7B,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,2BAA4B;AACpE,WAAO,eAAe,KAAK,MAAM,CAAC,CAAC;AAAA,EACrC;AACA,MAAI,YAAY,UAAU;AACxB,UAAM,EAAE,UAAU,IAAI,MAAM,OAAO,sBAAuB;AAC1D,WAAO,UAAU,KAAK,MAAM,CAAC,CAAC;AAAA,EAChC;AACA,MAAI,YAAY,UAAU;AACxB,UAAM,EAAE,UAAU,IAAI,MAAM,OAAO,sBAAuB;AAC1D,WAAO,UAAU,KAAK,MAAM,CAAC,CAAC;AAAA,EAChC;AACA,MAAI,YAAY,UAAU;AACxB,UAAM,EAAE,UAAU,IAAI,MAAM,OAAO,sBAAuB;AAC1D,WAAO,UAAU,KAAK,MAAM,CAAC,CAAC;AAAA,EAChC;AACA,MAAI,YAAY,cAAc;AAC5B,UAAM,EAAE,cAAc,IAAI,MAAM,OAAO,0BAA2B;AAClE,WAAO,cAAc,KAAK,MAAM,CAAC,CAAC;AAAA,EACpC;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,UAAU,IAAI;AAAA,EACvB,SAAS,OAAO;AACd,YAAQ,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACpE,WAAO;AAAA,EACT;AAEA,MAAI,KAAK,SAAS;AAChB,YAAQ,IAAI,eAAe,CAAC;AAC5B,WAAO;AAAA,EACT;AACA,MAAI,KAAK,MAAM;AACb,YAAQ,IAAI,IAAI;AAChB,WAAO;AAAA,EACT;AAEA,UAAQ,KAAK,SAAS;AAAA,IACpB,KAAK;AACH,aAAO,aAAa,IAAI;AAAA,IAC1B,KAAK;AAAA,IACL,KAAK;AACH,aAAO,WAAW,KAAK,SAAS,IAAI;AAAA,IACtC,KAAK;AACH,cAAQ,MAAM,IAAI;AAClB,aAAO;AAAA,IACT;AACE,cAAQ,MAAM,oBAAoB,KAAK,OAAO;AAAA;AAAA,EAAO,IAAI,EAAE;AAC3D,aAAO;AAAA,EACX;AACF;AAGA,eAAe,aAAa,MAAmC;AAC7D,MAAI;AACJ,MAAI;AACF,UAAM,EAAE,SAAS,IAAI,MAAM,OAAO,qBAAsB;AACxD,cAAU,MAAM,SAAS,EAAE,KAAK,QAAQ,IAAI,GAAG,MAAM,KAAK,KAAK,CAAC;AAAA,EAClE,SAAS,OAAO;AACd,YAAQ,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACpE,WAAO;AAAA,EACT;AAEA,UAAQ,IAAI,6BAA6B,QAAQ,GAAG,EAAE;AAEtD,QAAM,WAAW,MAAY;AAC3B,YAAQ,MAAM,EAAE;AAAA,MACd,MAAM,QAAQ,KAAK,CAAC;AAAA,MACpB,CAAC,UAAmB;AAClB,gBAAQ,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACpE,gBAAQ,KAAK,CAAC;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACA,UAAQ,KAAK,UAAU,QAAQ;AAC/B,UAAQ,KAAK,WAAW,QAAQ;AAChC,SAAO;AACT;AAGA,eAAe,WACb,SACA,MACiB;AACjB,QAAM,UAA6B;AAAA,IACjC,KAAK,QAAQ,IAAI;AAAA,IACjB,GAAI,KAAK,UAAU,UAAa,EAAE,OAAO,KAAK,MAAM;AAAA,IACpD,GAAI,KAAK,SAAS,UAAa,EAAE,MAAM,KAAK,KAAK;AAAA,IACjD,GAAI,KAAK,SAAS,UAAa,EAAE,MAAM,KAAK,KAAK;AAAA,IACjD,GAAI,KAAK,UAAU,EAAE,QAAQ,KAAK;AAAA,IAClC,GAAI,CAAC,KAAK,QAAQ,EAAE,MAAM,MAAM;AAAA,EAClC;AAEA,MAAI;AACF,QAAI,YAAY,OAAO;AACrB,YAAM,EAAE,OAAO,IAAI,MAAM,OAAO,mBAAoB;AACpD,YAAM,OAAO,OAAO;AAAA,IACtB,OAAO;AACL,YAAM,EAAE,SAAS,IAAI,MAAM,OAAO,qBAAsB;AACxD,YAAM,SAAS,OAAO;AAAA,IACxB;AACA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACpE,WAAO;AAAA,EACT;AACF;AASA,SAAS,iBAAyB;AAChC,aAAW,YAAY,CAAC,mBAAmB,oBAAoB,GAAG;AAChE,QAAI;AACF,YAAM,MAAM,aAAa,IAAI,IAAI,UAAU,YAAY,GAAG,GAAG,MAAM;AACnE,YAAM,MAAM,KAAK,MAAM,GAAG;AAC1B,WACG,IAAI,SAAS,aAAa,IAAI,SAAS,cACxC,OAAO,IAAI,YAAY,UACvB;AACA,eAAO,IAAI;AAAA,MACb;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;;;ACrNA,KAAK,QAAQ,KAAK,MAAM,CAAC,CAAC,EAAE;AAAA,EAC1B,CAAC,SAAS;AACR,YAAQ,WAAW;AAAA,EACrB;AAAA,EACA,CAAC,UAAmB;AAClB,YAAQ,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACpE,YAAQ,WAAW;AAAA,EACrB;AACF;","names":[]}
+{"version":3,"sources":["../src/bin/main.ts","../src/bin.ts"],"sourcesContent":["/**\n * Command dispatch for the `mcp-use` bin (specs/CLI_SPEC.md).\n *\n * Every substantial command is dispatched through its own dynamic import.\n * The library entry, bin, and production `start` path therefore never\n * evaluate Vite or an unrelated command implementation.\n */\nimport { readFileSync } from \"node:fs\";\nimport { resolve } from \"node:path\";\n\nimport { parseArgs, type ParsedArgs } from \"./args.js\";\n\n/**\n * Options this bin passes to the cli's `runDev`/`runBuild`.\n *\n * @internal\n */\nexport interface CliCommandOptions {\n  /** Project root the command operates on (`process.cwd()`). */\n  cwd: string;\n  /** Server entry module override (`--entry`). */\n  entry?: string;\n  /** MCP source directory (`--mcp-dir`), relative to the project root. */\n  mcpDir?: string;\n  /** View source directory (`--views-dir`), relative to the project root. */\n  viewsDir?: string;\n  /** Port override (`--port`/`-p`). */\n  port?: number;\n  /** Host override (`--host`). */\n  host?: string;\n  /** Start a public tunnel at dev startup (`--tunnel`). */\n  tunnel?: boolean;\n  /** Auto-open the inspector in a browser at dev startup (`--no-open` disables). */\n  open?: boolean;\n  /** Record inspector availability in the build manifest (`--with-inspector`). */\n  withInspector?: boolean;\n  /** Emit source maps in production build output (`--source-maps`). */\n  sourceMaps?: boolean;\n}\n\nconst HELP = `mcp-use — run MCP servers built with mcp-use\n\nUsage: mcp-use <command> [options]\n\nCommands:\n  dev      Start the dev server\n  build    Build the server into .mcp-use/build\n  start    Serve the production build from .mcp-use/build\n  login    Authenticate the cloud CLI\n  logout   Delete local cloud credentials\n  whoami   Show the authenticated cloud identity\n  org      Manage the active organization\n  servers  Manage cloud servers and environment variables\n  deployments Manage cloud deployments and logs\n  deploy   Deploy the current GitHub project\n  client   Connect to and invoke MCP servers\n  skills   Install maintained coding-agent skills\n  screenshot Capture an MCP Apps view\n\nOptions:\n  -p, --port <n>     Port to serve on (default: $PORT or 3000)\n  --host <host>      Host to bind (dev only)\n  --entry <path>     Server entry module (dev/build only)\n  --path <directory> Project root (default: current directory)\n  --mcp-dir <dir>    Directory containing the MCP entry and views/\n  --views-dir <dir>  Views directory (default: views/ or <mcp-dir>/views/)\n  --with-inspector   Record inspector availability in the build manifest (build only)\n  --source-maps      Emit source maps in build output (build only)\n  --tunnel           Expose the dev server through a public tunnel (dev only)\n  --no-open          Do not auto-open the inspector in a browser (dev only)\n  -h, --help         Show this help\n  -v, --version      Print the version`;\n\n/**\n * Run the `mcp-use` CLI.\n *\n * @param argv - Raw arguments, typically `process.argv.slice(2)`.\n * @returns The process exit code. A `0` from `start`/`dev` means the command\n * launched successfully and the process should stay alive serving.\n *\n * @internal\n */\nexport async function main(argv: readonly string[]): Promise<number> {\n  if (argv.length === 1 && [\"--version\", \"-v\"].includes(argv[0] ?? \"\")) {\n    console.log(readOwnVersion());\n    return 0;\n  }\n  if (argv.some((token) => token === \"--help\" || token === \"-h\")) {\n    const command = argv[0];\n    if (command === undefined || command === \"--help\" || command === \"-h\") {\n      console.log(HELP);\n      return 0;\n    }\n  }\n\n  const command = argv[0];\n  if (command === \"login\" || command === \"logout\" || command === \"whoami\") {\n    const { runIdentity } = await import(\"../commands/identity.js\");\n    return runIdentity(command, argv.slice(1));\n  }\n  if (command === \"org\") {\n    const { runOrganizations } = await import(\"../commands/organizations.js\");\n    return runOrganizations(argv.slice(1));\n  }\n  if (command === \"servers\") {\n    const { runServers } = await import(\"../commands/servers.js\");\n    return runServers(argv.slice(1));\n  }\n  if (command === \"deployments\") {\n    const { runDeployments } = await import(\"../commands/deployments.js\");\n    return runDeployments(argv.slice(1));\n  }\n  if (command === \"deploy\") {\n    const { runDeploy } = await import(\"../commands/deploy.js\");\n    return runDeploy(argv.slice(1));\n  }\n  if (command === \"client\") {\n    const { runClient } = await import(\"../commands/client.js\");\n    return runClient(argv.slice(1));\n  }\n  if (command === \"skills\") {\n    const { runSkills } = await import(\"../commands/skills.js\");\n    return runSkills(argv.slice(1));\n  }\n  if (command === \"screenshot\") {\n    const { runScreenshot } = await import(\"../commands/screenshot.js\");\n    return runScreenshot(argv.slice(1));\n  }\n\n  let args: ParsedArgs;\n  try {\n    args = parseArgs(argv);\n  } catch (error) {\n    console.error(error instanceof Error ? error.message : String(error));\n    return 2;\n  }\n\n  if (args.version) {\n    console.log(readOwnVersion());\n    return 0;\n  }\n  if (args.help) {\n    console.log(HELP);\n    return 0;\n  }\n\n  switch (args.command) {\n    case \"start\":\n      return startCommand(args);\n    case \"dev\":\n    case \"build\":\n      return cliCommand(args.command, args);\n    case undefined:\n      console.error(HELP);\n      return 2;\n    default:\n      console.error(`Unknown command: ${args.command}\\n\\n${HELP}`);\n      return 2;\n  }\n}\n\n/** `mcp-use start`: serve the production build, wire shutdown signals. */\nasync function startCommand(args: ParsedArgs): Promise<number> {\n  let started;\n  try {\n    const { runStart } = await import(\"../commands/start.js\");\n    started = await runStart({\n      cwd: resolve(process.cwd(), args.path ?? \".\"),\n      port: args.port,\n    });\n  } catch (error) {\n    console.error(error instanceof Error ? error.message : String(error));\n    return 1;\n  }\n\n  console.log(`mcp-use server running at ${started.url}`);\n\n  const shutdown = (): void => {\n    started.close().then(\n      () => process.exit(0),\n      (error: unknown) => {\n        console.error(error instanceof Error ? error.message : String(error));\n        process.exit(1);\n      }\n    );\n  };\n  process.once(\"SIGINT\", shutdown);\n  process.once(\"SIGTERM\", shutdown);\n  return 0;\n}\n\n/** `mcp-use dev` / `mcp-use build`: dispatch to dedicated command chunks. */\nasync function cliCommand(\n  command: \"dev\" | \"build\",\n  args: ParsedArgs\n): Promise<number> {\n  const options: CliCommandOptions = {\n    cwd: resolve(process.cwd(), args.path ?? \".\"),\n    ...(args.entry !== undefined && { entry: args.entry }),\n    ...(args.mcpDir !== undefined && { mcpDir: args.mcpDir }),\n    ...(args.viewsDir !== undefined && { viewsDir: args.viewsDir }),\n    ...(args.port !== undefined && { port: args.port }),\n    ...(args.host !== undefined && { host: args.host }),\n    ...(args.tunnel && { tunnel: true }),\n    ...(!args.open && { open: false }),\n    ...(args.withInspector && { withInspector: true }),\n    ...(args.sourceMaps && { sourceMaps: true }),\n  };\n\n  try {\n    if (command === \"dev\") {\n      const { runDev } = await import(\"../commands/dev.js\");\n      await runDev(options);\n    } else {\n      const { runBuild } = await import(\"../commands/build.js\");\n      await runBuild(options);\n    }\n    return 0;\n  } catch (error) {\n    console.error(error instanceof Error ? error.message : String(error));\n    return 1;\n  }\n}\n\n/**\n * Read this package's own version for `--version`.\n *\n * Probes both layouts — `dist/bin.js` (bundled, package root is one level\n * up) and `src/bin/main.ts` (tests, package root is two levels up) — and\n * verifies the manifest's `name` so an unrelated package.json never wins.\n */\nfunction readOwnVersion(): string {\n  for (const relative of [\"../package.json\", \"../../package.json\"]) {\n    try {\n      const raw = readFileSync(new URL(relative, import.meta.url), \"utf8\");\n      const pkg = JSON.parse(raw) as { name?: unknown; version?: unknown };\n      if (\n        (pkg.name === \"mcp-use\" || pkg.name === \"mcp-use\") &&\n        typeof pkg.version === \"string\"\n      ) {\n        return pkg.version;\n      }\n    } catch {\n      // Not there or unreadable — try the next candidate.\n    }\n  }\n  return \"unknown\";\n}\n","#!/usr/bin/env node\n/*\n * `mcp-use` bin entry point (specs/CLI_SPEC.md).\n *\n * Kept to a single call so all logic lives in testable modules under\n * src/bin/. On success the process is NOT exited: `start` (and `dev`) keep\n * serving, and `--help`/`--version` let the event loop drain naturally.\n */\nimport { main } from \"./bin/main.js\";\n\nmain(process.argv.slice(2)).then(\n  (code) => {\n    process.exitCode = code;\n  },\n  (error: unknown) => {\n    console.error(error instanceof Error ? error.message : String(error));\n    process.exitCode = 1;\n  }\n);\n"],"mappings":";;;;;;AAOA,SAAS,oBAAoB;AAC7B,SAAS,eAAe;AAgCxB,IAAM,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA0Cb,eAAsB,KAAK,MAA0C;AACnE,MAAI,KAAK,WAAW,KAAK,CAAC,aAAa,IAAI,EAAE,SAAS,KAAK,CAAC,KAAK,EAAE,GAAG;AACpE,YAAQ,IAAI,eAAe,CAAC;AAC5B,WAAO;AAAA,EACT;AACA,MAAI,KAAK,KAAK,CAAC,UAAU,UAAU,YAAY,UAAU,IAAI,GAAG;AAC9D,UAAMA,WAAU,KAAK,CAAC;AACtB,QAAIA,aAAY,UAAaA,aAAY,YAAYA,aAAY,MAAM;AACrE,cAAQ,IAAI,IAAI;AAChB,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,UAAU,KAAK,CAAC;AACtB,MAAI,YAAY,WAAW,YAAY,YAAY,YAAY,UAAU;AACvE,UAAM,EAAE,YAAY,IAAI,MAAM,OAAO,wBAAyB;AAC9D,WAAO,YAAY,SAAS,KAAK,MAAM,CAAC,CAAC;AAAA,EAC3C;AACA,MAAI,YAAY,OAAO;AACrB,UAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,6BAA8B;AACxE,WAAO,iBAAiB,KAAK,MAAM,CAAC,CAAC;AAAA,EACvC;AACA,MAAI,YAAY,WAAW;AACzB,UAAM,EAAE,WAAW,IAAI,MAAM,OAAO,uBAAwB;AAC5D,WAAO,WAAW,KAAK,MAAM,CAAC,CAAC;AAAA,EACjC;AACA,MAAI,YAAY,eAAe;AAC7B,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,2BAA4B;AACpE,WAAO,eAAe,KAAK,MAAM,CAAC,CAAC;AAAA,EACrC;AACA,MAAI,YAAY,UAAU;AACxB,UAAM,EAAE,UAAU,IAAI,MAAM,OAAO,sBAAuB;AAC1D,WAAO,UAAU,KAAK,MAAM,CAAC,CAAC;AAAA,EAChC;AACA,MAAI,YAAY,UAAU;AACxB,UAAM,EAAE,UAAU,IAAI,MAAM,OAAO,sBAAuB;AAC1D,WAAO,UAAU,KAAK,MAAM,CAAC,CAAC;AAAA,EAChC;AACA,MAAI,YAAY,UAAU;AACxB,UAAM,EAAE,UAAU,IAAI,MAAM,OAAO,sBAAuB;AAC1D,WAAO,UAAU,KAAK,MAAM,CAAC,CAAC;AAAA,EAChC;AACA,MAAI,YAAY,cAAc;AAC5B,UAAM,EAAE,cAAc,IAAI,MAAM,OAAO,0BAA2B;AAClE,WAAO,cAAc,KAAK,MAAM,CAAC,CAAC;AAAA,EACpC;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,UAAU,IAAI;AAAA,EACvB,SAAS,OAAO;AACd,YAAQ,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACpE,WAAO;AAAA,EACT;AAEA,MAAI,KAAK,SAAS;AAChB,YAAQ,IAAI,eAAe,CAAC;AAC5B,WAAO;AAAA,EACT;AACA,MAAI,KAAK,MAAM;AACb,YAAQ,IAAI,IAAI;AAChB,WAAO;AAAA,EACT;AAEA,UAAQ,KAAK,SAAS;AAAA,IACpB,KAAK;AACH,aAAO,aAAa,IAAI;AAAA,IAC1B,KAAK;AAAA,IACL,KAAK;AACH,aAAO,WAAW,KAAK,SAAS,IAAI;AAAA,IACtC,KAAK;AACH,cAAQ,MAAM,IAAI;AAClB,aAAO;AAAA,IACT;AACE,cAAQ,MAAM,oBAAoB,KAAK,OAAO;AAAA;AAAA,EAAO,IAAI,EAAE;AAC3D,aAAO;AAAA,EACX;AACF;AAGA,eAAe,aAAa,MAAmC;AAC7D,MAAI;AACJ,MAAI;AACF,UAAM,EAAE,SAAS,IAAI,MAAM,OAAO,qBAAsB;AACxD,cAAU,MAAM,SAAS;AAAA,MACvB,KAAK,QAAQ,QAAQ,IAAI,GAAG,KAAK,QAAQ,GAAG;AAAA,MAC5C,MAAM,KAAK;AAAA,IACb,CAAC;AAAA,EACH,SAAS,OAAO;AACd,YAAQ,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACpE,WAAO;AAAA,EACT;AAEA,UAAQ,IAAI,6BAA6B,QAAQ,GAAG,EAAE;AAEtD,QAAM,WAAW,MAAY;AAC3B,YAAQ,MAAM,EAAE;AAAA,MACd,MAAM,QAAQ,KAAK,CAAC;AAAA,MACpB,CAAC,UAAmB;AAClB,gBAAQ,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACpE,gBAAQ,KAAK,CAAC;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACA,UAAQ,KAAK,UAAU,QAAQ;AAC/B,UAAQ,KAAK,WAAW,QAAQ;AAChC,SAAO;AACT;AAGA,eAAe,WACb,SACA,MACiB;AACjB,QAAM,UAA6B;AAAA,IACjC,KAAK,QAAQ,QAAQ,IAAI,GAAG,KAAK,QAAQ,GAAG;AAAA,IAC5C,GAAI,KAAK,UAAU,UAAa,EAAE,OAAO,KAAK,MAAM;AAAA,IACpD,GAAI,KAAK,WAAW,UAAa,EAAE,QAAQ,KAAK,OAAO;AAAA,IACvD,GAAI,KAAK,aAAa,UAAa,EAAE,UAAU,KAAK,SAAS;AAAA,IAC7D,GAAI,KAAK,SAAS,UAAa,EAAE,MAAM,KAAK,KAAK;AAAA,IACjD,GAAI,KAAK,SAAS,UAAa,EAAE,MAAM,KAAK,KAAK;AAAA,IACjD,GAAI,KAAK,UAAU,EAAE,QAAQ,KAAK;AAAA,IAClC,GAAI,CAAC,KAAK,QAAQ,EAAE,MAAM,MAAM;AAAA,IAChC,GAAI,KAAK,iBAAiB,EAAE,eAAe,KAAK;AAAA,IAChD,GAAI,KAAK,cAAc,EAAE,YAAY,KAAK;AAAA,EAC5C;AAEA,MAAI;AACF,QAAI,YAAY,OAAO;AACrB,YAAM,EAAE,OAAO,IAAI,MAAM,OAAO,mBAAoB;AACpD,YAAM,OAAO,OAAO;AAAA,IACtB,OAAO;AACL,YAAM,EAAE,SAAS,IAAI,MAAM,OAAO,qBAAsB;AACxD,YAAM,SAAS,OAAO;AAAA,IACxB;AACA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACpE,WAAO;AAAA,EACT;AACF;AASA,SAAS,iBAAyB;AAChC,aAAW,YAAY,CAAC,mBAAmB,oBAAoB,GAAG;AAChE,QAAI;AACF,YAAM,MAAM,aAAa,IAAI,IAAI,UAAU,YAAY,GAAG,GAAG,MAAM;AACnE,YAAM,MAAM,KAAK,MAAM,GAAG;AAC1B,WACG,IAAI,SAAS,aAAa,IAAI,SAAS,cACxC,OAAO,IAAI,YAAY,UACvB;AACA,eAAO,IAAI;AAAA,MACb;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;;;AC7OA,KAAK,QAAQ,KAAK,MAAM,CAAC,CAAC,EAAE;AAAA,EAC1B,CAAC,SAAS;AACR,YAAQ,WAAW;AAAA,EACrB;AAAA,EACA,CAAC,UAAmB;AAClB,YAAQ,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACpE,YAAQ,WAAW;AAAA,EACrB;AACF;","names":["command"]}

package/dist/branding.d.ts

@@ -0,0 +1,82 @@
+import type { Icon } from "@modelcontextprotocol/server";
+import type { FetchHandler } from "./fetch-app.js";
+/** Normalized server branding shared by browser and MCP identity surfaces. */
+export interface ServerBranding {
+    /**
+     * Source selected for `/favicon.ico`, after applying explicit-favicon and
+     * first-icon inference.
+     */
+    readonly favicon?: string;
+    /** MIME type of the selected favicon when known. */
+    readonly faviconMimeType?: string;
+    /** Icons reported in MCP implementation metadata, in author order. */
+    readonly icons?: readonly Icon[];
+    /** Server website reported in MCP implementation metadata. */
+    readonly websiteUrl?: string;
+}
+/**
+ * Select the browser favicon from an ordered set of MCP icons.
+ *
+ * Uses the first icon in author order. Put the preferred browser favicon
+ * first, or set {@link ServerConfig.favicon} explicitly.
+ *
+ * @param icons - Validated, non-empty icon list.
+ * @returns The selected icon.
+ *
+ * @internal
+ */
+export declare function selectFaviconFromIcons(icons: readonly Icon[]): Icon | undefined;
+/**
+ * Validate and freeze the branding fields from server configuration.
+ *
+ * @param config - Untyped-compatible branding input.
+ * @returns Immutable normalized branding and the selected favicon MIME type.
+ *
+ * @internal
+ */
+export declare function normalizeServerBranding(config: {
+    favicon?: unknown;
+    icons?: unknown;
+    websiteUrl?: unknown;
+}): ServerBranding;
+/**
+ * Resolve configured icons for MCP implementation metadata.
+ *
+ * Absolute HTTP(S) and data URLs pass through. Public-relative sources become
+ * request-scoped absolute URLs under `${basePath}/_mcp-use/public/`.
+ *
+ * @param icons - Normalized configured icons.
+ * @param request - HTTP request used to derive the public asset origin.
+ * @param basePath - MCP endpoint base path.
+ * @returns Icons suitable for the official SDK `Implementation` object.
+ *
+ * @internal
+ */
+export declare function resolveImplementationIcons(icons: readonly Icon[] | undefined, request: Request | undefined, basePath: string): Icon[] | undefined;
+/**
+ * Whether any configured branding source needs the local public route.
+ *
+ * @param branding - Normalized branding to inspect.
+ * @returns `true` when the favicon or an MCP icon uses a `public/` path.
+ *
+ * @internal
+ */
+export declare function hasLocalBrandingAsset(branding: ServerBranding): boolean;
+/**
+ * Create the root-level `/favicon.ico` handler for normalized branding.
+ *
+ * Local public files and data URLs are streamed directly. Absolute HTTP(S)
+ * sources receive a temporary redirect, avoiding server-side remote fetches.
+ *
+ * @param branding - Normalized server branding.
+ * @param options - Public directory resolution mode.
+ * @returns A GET/HEAD handler, or `undefined` when no favicon is configured.
+ *
+ * @internal
+ */
+export declare function createFaviconHandler(branding: ServerBranding, options: {
+    dev: boolean;
+    projectRoot: string;
+    deferCors?: boolean;
+}): FetchHandler | undefined;
+//# sourceMappingURL=branding.d.ts.map

package/dist/branding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branding.d.ts","sourceRoot":"","sources":["../src/branding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AAEzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAUnD,8EAA8E;AAC9E,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,oDAAoD;IACpD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC;IACjC,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAmBD;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,SAAS,IAAI,EAAE,GACrB,IAAI,GAAG,SAAS,CAElB;AA4ED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,cAAc,CAoGjB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,SAAS,IAAI,EAAE,GAAG,SAAS,EAClC,OAAO,EAAE,OAAO,GAAG,SAAS,EAC5B,QAAQ,EAAE,MAAM,GACf,IAAI,EAAE,GAAG,SAAS,CAYpB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAKvE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAClE,YAAY,GAAG,SAAS,CAgE1B"}

package/dist/chunk-22Y3WIJP.js

@@ -0,0 +1,62 @@
+// src/cli/next-compat.ts
+import { existsSync, readFileSync } from "fs";
+import { join } from "path";
+import { fileURLToPath } from "url";
+var NEXT_SERVER_MODULES = /* @__PURE__ */ new Set([
+  "server-only",
+  "client-only",
+  "next/cache",
+  "next/headers",
+  "next/navigation",
+  "next/server"
+]);
+function nextStandaloneAliases(projectRoot) {
+  const shim = fileURLToPath(
+    new URL("./next-server-shims.js", import.meta.url)
+  );
+  return isNextProject(projectRoot) ? [...NEXT_SERVER_MODULES].map((find) => ({
+    find,
+    replacement: shim
+  })) : [];
+}
+function nextStandaloneSsrOptions(projectRoot) {
+  return isNextProject(projectRoot) ? { noExternal: [...NEXT_SERVER_MODULES] } : { external: true };
+}
+function isNextProject(projectRoot) {
+  try {
+    const pkg = JSON.parse(
+      readFileSync(join(projectRoot, "package.json"), "utf8")
+    );
+    return pkg.dependencies?.["next"] !== void 0 || pkg.devDependencies?.["next"] !== void 0;
+  } catch {
+    return false;
+  }
+}
+function loadProjectEnv(projectRoot, mode) {
+  const files = isNextProject(projectRoot) ? [`.env.${mode}.local`, ".env.local", `.env.${mode}`, ".env"] : [".env"];
+  for (const filename of files) {
+    const path = join(projectRoot, filename);
+    if (existsSync(path)) process.loadEnvFile(path);
+  }
+}
+function nextStandaloneCompatPlugin(projectRoot) {
+  const enabled = isNextProject(projectRoot);
+  const shim = fileURLToPath(
+    new URL("./next-server-shims.js", import.meta.url)
+  );
+  return {
+    name: "mcp-use-next-standalone-compat",
+    enforce: "pre",
+    resolveId(source, _importer, options) {
+      return enabled && options.ssr && NEXT_SERVER_MODULES.has(source) ? { id: shim, external: false } : void 0;
+    }
+  };
+}
+
+export {
+  nextStandaloneAliases,
+  nextStandaloneSsrOptions,
+  loadProjectEnv,
+  nextStandaloneCompatPlugin
+};
+//# sourceMappingURL=chunk-22Y3WIJP.js.map

package/dist/chunk-22Y3WIJP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/next-compat.ts"],"sourcesContent":["/** Standalone compatibility for MCP source hosted by a Next.js project. */\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport type { Plugin } from \"vite\";\n\nconst NEXT_SERVER_MODULES = new Set([\n  \"server-only\",\n  \"client-only\",\n  \"next/cache\",\n  \"next/headers\",\n  \"next/navigation\",\n  \"next/server\",\n]);\n\n/** Exact aliases for Vite configurations that are known to be SSR-only. */\nexport function nextStandaloneAliases(projectRoot: string) {\n  const shim = fileURLToPath(\n    new URL(\"./next-server-shims.js\", import.meta.url)\n  );\n  return isNextProject(projectRoot)\n    ? [...NEXT_SERVER_MODULES].map((find) => ({\n        find,\n        replacement: shim,\n      }))\n    : [];\n}\n\n/** Bare modules that must reach the SSR shim instead of Node externalization. */\nexport function nextStandaloneSsrOptions(projectRoot: string) {\n  return isNextProject(projectRoot)\n    ? { noExternal: [...NEXT_SERVER_MODULES] }\n    : { external: true as const };\n}\n\n/** Whether `projectRoot` declares `next` in package dependencies. */\nexport function isNextProject(projectRoot: string): boolean {\n  try {\n    const pkg = JSON.parse(\n      readFileSync(join(projectRoot, \"package.json\"), \"utf8\")\n    ) as {\n      dependencies?: Record<string, unknown>;\n      devDependencies?: Record<string, unknown>;\n    };\n    return (\n      pkg.dependencies?.[\"next\"] !== undefined ||\n      pkg.devDependencies?.[\"next\"] !== undefined\n    );\n  } catch {\n    return false;\n  }\n}\n\n/** Load the same environment-file priority used by a Next host project. */\nexport function loadProjectEnv(\n  projectRoot: string,\n  mode: \"development\" | \"production\"\n): void {\n  const files = isNextProject(projectRoot)\n    ? [`.env.${mode}.local`, \".env.local\", `.env.${mode}`, \".env\"]\n    : [\".env\"];\n  for (const filename of files) {\n    const path = join(projectRoot, filename);\n    if (existsSync(path)) process.loadEnvFile(path);\n  }\n}\n\n/** Shim request-bound Next modules only in Vite's standalone SSR runtime. */\nexport function nextStandaloneCompatPlugin(projectRoot: string): Plugin {\n  const enabled = isNextProject(projectRoot);\n  const shim = fileURLToPath(\n    new URL(\"./next-server-shims.js\", import.meta.url)\n  );\n  return {\n    name: \"mcp-use-next-standalone-compat\",\n    enforce: \"pre\",\n    resolveId(source, _importer, options) {\n      // `options.ssr` remains authoritative across Vite's build and module\n      // runner environments; view/client resolution must stay strict.\n      return enabled && options.ssr && NEXT_SERVER_MODULES.has(source)\n        ? { id: shim, external: false }\n        : undefined;\n    },\n  };\n}\n"],"mappings":";AACA,SAAS,YAAY,oBAAoB;AACzC,SAAS,YAAY;AACrB,SAAS,qBAAqB;AAG9B,IAAM,sBAAsB,oBAAI,IAAI;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,SAAS,sBAAsB,aAAqB;AACzD,QAAM,OAAO;AAAA,IACX,IAAI,IAAI,0BAA0B,YAAY,GAAG;AAAA,EACnD;AACA,SAAO,cAAc,WAAW,IAC5B,CAAC,GAAG,mBAAmB,EAAE,IAAI,CAAC,UAAU;AAAA,IACtC;AAAA,IACA,aAAa;AAAA,EACf,EAAE,IACF,CAAC;AACP;AAGO,SAAS,yBAAyB,aAAqB;AAC5D,SAAO,cAAc,WAAW,IAC5B,EAAE,YAAY,CAAC,GAAG,mBAAmB,EAAE,IACvC,EAAE,UAAU,KAAc;AAChC;AAGO,SAAS,cAAc,aAA8B;AAC1D,MAAI;AACF,UAAM,MAAM,KAAK;AAAA,MACf,aAAa,KAAK,aAAa,cAAc,GAAG,MAAM;AAAA,IACxD;AAIA,WACE,IAAI,eAAe,MAAM,MAAM,UAC/B,IAAI,kBAAkB,MAAM,MAAM;AAAA,EAEtC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,eACd,aACA,MACM;AACN,QAAM,QAAQ,cAAc,WAAW,IACnC,CAAC,QAAQ,IAAI,UAAU,cAAc,QAAQ,IAAI,IAAI,MAAM,IAC3D,CAAC,MAAM;AACX,aAAW,YAAY,OAAO;AAC5B,UAAM,OAAO,KAAK,aAAa,QAAQ;AACvC,QAAI,WAAW,IAAI,EAAG,SAAQ,YAAY,IAAI;AAAA,EAChD;AACF;AAGO,SAAS,2BAA2B,aAA6B;AACtE,QAAM,UAAU,cAAc,WAAW;AACzC,QAAM,OAAO;AAAA,IACX,IAAI,IAAI,0BAA0B,YAAY,GAAG;AAAA,EACnD;AACA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU,QAAQ,WAAW,SAAS;AAGpC,aAAO,WAAW,QAAQ,OAAO,oBAAoB,IAAI,MAAM,IAC3D,EAAE,IAAI,MAAM,UAAU,MAAM,IAC5B;AAAA,IACN;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-EAPJUSK7.js

@@ -0,0 +1,98 @@
+import {
+  pathUnderBase
+} from "./chunk-QUUANIE4.js";
+
+// src/views/document.ts
+function resolveAssetUrl(assetPath, origin) {
+  if (!assetPath.startsWith("/")) {
+    throw new Error(
+      `View manifest asset path must be origin-absolute (start with "/"); got ${JSON.stringify(assetPath)}`
+    );
+  }
+  return `${origin}${assetPath}`;
+}
+function viewAssetsBasePath(basePath, viewName) {
+  return `${pathUnderBase(basePath, `_mcp-use/views/${viewName}`)}/`;
+}
+function resolveExternalAssetUrl(assetPath, assetsBase, basePath, viewName) {
+  if (assetPath.startsWith("http://") || assetPath.startsWith("https://") || assetPath.startsWith("data:")) {
+    return assetPath;
+  }
+  if (assetPath.startsWith("/")) {
+    return resolveAssetUrl(assetPath, assetsBase);
+  }
+  return `${assetsBase}${viewAssetsBasePath(basePath, viewName)}${assetPath.replace(/^\/+/, "")}`;
+}
+function resolvePublicBase(assetsBase, basePath) {
+  return `${assetsBase}${pathUnderBase(basePath, "_mcp-use/public")}/`;
+}
+function escapeInlineScript(code) {
+  return code.replaceAll(/<\/script/gi, "<\\/script").replaceAll("<!--", "\\x3C!--");
+}
+function escapeInlineStyle(css) {
+  return css.replaceAll(/<\/style/gi, "<\\/style");
+}
+function escapeHtml(value) {
+  return value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
+}
+var TRANSPARENT_IFRAME_STYLE = "<style>html,body,#root{background:transparent}</style>";
+function synthesizeViewDocument(entry, assetsBase, basePath, viewName) {
+  const viewConfig = {
+    publicBase: resolvePublicBase(assetsBase, basePath)
+  };
+  const configScript = `<script>globalThis.__mcpUseViewConfig=${JSON.stringify(viewConfig)};</script>`;
+  if (entry.kind === "inline") {
+    const styleTag = entry.css.length > 0 ? `<style>${escapeInlineStyle(entry.css)}</style>` : "";
+    const moduleScript = `<script type="module">${escapeInlineScript(entry.js)}</script>`;
+    return `<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+${configScript}
+${TRANSPARENT_IFRAME_STYLE}
+${styleTag}
+</head>
+<body>
+<div id="root"></div>
+${moduleScript}
+</body>
+</html>`;
+  }
+  if (viewName === void 0) {
+    throw new Error(
+      "viewName is required when synthesizing an external view document."
+    );
+  }
+  const cssLinks = entry.css.map(
+    (path) => `<link rel="stylesheet" href="${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}">`
+  ).join("\n");
+  const scriptTags = (entry.scripts ?? []).map(
+    (path) => `<script type="module" src="${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}"></script>`
+  ).join("\n");
+  const entryUrl = resolveExternalAssetUrl(
+    entry.entry,
+    assetsBase,
+    basePath,
+    viewName
+  );
+  return `<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+${configScript}
+${TRANSPARENT_IFRAME_STYLE}
+${cssLinks}
+</head>
+<body>
+<div id="root"></div>
+${scriptTags}
+<script type="module" src="${escapeHtml(entryUrl)}"></script>
+</body>
+</html>`;
+}
+
+export {
+  viewAssetsBasePath,
+  synthesizeViewDocument
+};
+//# sourceMappingURL=chunk-EAPJUSK7.js.map

package/dist/chunk-EAPJUSK7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/views/document.ts"],"sourcesContent":["import type { McpUseViewConfig } from \"../react/public-assets.js\";\nimport { pathUnderBase } from \"../fetch-app.js\";\nimport type { ViewManifestEntry } from \"./types.js\";\n\n/**\n * Resolve a registry asset path to an absolute URL for embedding in the\n * synthesized view document.\n *\n * Dev external registry paths are origin-absolute and `/`-prefixed.\n *\n * @param assetPath - Origin-absolute dev path starting with `/`.\n * @param origin - Request-resolved public origin.\n * @returns Absolute URL `${origin}${assetPath}`.\n * @throws When `assetPath` does not start with `/`.\n */\nexport function resolveAssetUrl(assetPath: string, origin: string): string {\n  if (!assetPath.startsWith(\"/\")) {\n    throw new Error(\n      `View manifest asset path must be origin-absolute (start with \"/\"); got ${JSON.stringify(assetPath)}`\n    );\n  }\n  return `${origin}${assetPath}`;\n}\n\n/**\n * Build the HTTP path prefix for a view's built assets (no origin).\n *\n * @param basePath - MCP mount prefix (e.g. `/mcp`).\n * @param viewName - View directory / registry key.\n */\nexport function viewAssetsBasePath(basePath: string, viewName: string): string {\n  return `${pathUnderBase(basePath, `_mcp-use/views/${viewName}`)}/`;\n}\n\n/**\n * Resolve a production or dev external asset path to an absolute URL.\n *\n * @param assetPath - Full CDN URL, origin-absolute dev path (`/…`), or\n *   view-relative production path (`assets/…`).\n * @param assetsBase - Assets URL prefix (origin + optional path).\n * @param basePath - MCP mount prefix.\n * @param viewName - View directory / registry key (required for view-relative paths).\n */\nexport function resolveExternalAssetUrl(\n  assetPath: string,\n  assetsBase: string,\n  basePath: string,\n  viewName: string\n): string {\n  if (\n    assetPath.startsWith(\"http://\") ||\n    assetPath.startsWith(\"https://\") ||\n    assetPath.startsWith(\"data:\")\n  ) {\n    return assetPath;\n  }\n  if (assetPath.startsWith(\"/\")) {\n    return resolveAssetUrl(assetPath, assetsBase);\n  }\n  return `${assetsBase}${viewAssetsBasePath(basePath, viewName)}${assetPath.replace(/^\\/+/, \"\")}`;\n}\n\n/**\n * Resolve the absolute URL prefix for the project's `public/` directory.\n *\n * @param assetsBase - Assets URL prefix (origin + optional path).\n * @param basePath - MCP mount prefix (e.g. `/mcp`).\n * @returns Absolute prefix with trailing slash.\n */\nexport function resolvePublicBase(\n  assetsBase: string,\n  basePath: string\n): string {\n  return `${assetsBase}${pathUnderBase(basePath, \"_mcp-use/public\")}/`;\n}\n\n/**\n * Escape view JS so it can sit inside a HTML `<script>` element without\n * premature termination or comment-open sequences.\n *\n * @param code - Raw module source.\n */\nfunction escapeInlineScript(code: string): string {\n  return code\n    .replaceAll(/<\\/script/gi, \"<\\\\/script\")\n    .replaceAll(\"<!--\", \"\\\\x3C!--\");\n}\n\n/**\n * Escape CSS so it can sit inside a HTML `<style>` element without premature\n * termination.\n *\n * @param css - Raw stylesheet text.\n */\nfunction escapeInlineStyle(css: string): string {\n  return css.replaceAll(/<\\/style/gi, \"<\\\\/style\");\n}\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replaceAll(\"&\", \"&amp;\")\n    .replaceAll('\"', \"&quot;\")\n    .replaceAll(\"<\", \"&lt;\")\n    .replaceAll(\">\", \"&gt;\");\n}\n\n/** Transparent iframe canvas before React mounts (rounded views show host bg). */\nconst TRANSPARENT_IFRAME_STYLE =\n  \"<style>html,body,#root{background:transparent}</style>\";\n\n/**\n * Synthesize a complete HTML document for a view from registry data.\n *\n * Production (`kind: \"external\"`) loads built assets over HTTP with absolute\n * URLs. Legacy `kind: \"inline\"` embeds JS/CSS directly. Dev uses Vite module\n * URLs (`kind: \"external\"` with origin-absolute paths).\n *\n * @param entry - Primed registry entry for the view.\n * @param assetsBase - Request-resolved assets URL prefix for absolute asset URLs.\n * @param basePath - MCP mount prefix (e.g. `/mcp`).\n * @param viewName - View directory / registry key (required for production external paths).\n */\nexport function synthesizeViewDocument(\n  entry: ViewManifestEntry,\n  assetsBase: string,\n  basePath: string,\n  viewName?: string\n): string {\n  const viewConfig: McpUseViewConfig = {\n    publicBase: resolvePublicBase(assetsBase, basePath),\n  };\n  const configScript = `<script>globalThis.__mcpUseViewConfig=${JSON.stringify(viewConfig)};</script>`;\n\n  if (entry.kind === \"inline\") {\n    const styleTag =\n      entry.css.length > 0\n        ? `<style>${escapeInlineStyle(entry.css)}</style>`\n        : \"\";\n    const moduleScript = `<script type=\"module\">${escapeInlineScript(entry.js)}</script>`;\n    return `<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n${configScript}\n${TRANSPARENT_IFRAME_STYLE}\n${styleTag}\n</head>\n<body>\n<div id=\"root\"></div>\n${moduleScript}\n</body>\n</html>`;\n  }\n\n  if (viewName === undefined) {\n    throw new Error(\n      \"viewName is required when synthesizing an external view document.\"\n    );\n  }\n\n  const cssLinks = entry.css\n    .map(\n      (path) =>\n        `<link rel=\"stylesheet\" href=\"${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}\">`\n    )\n    .join(\"\\n\");\n\n  const scriptTags = (entry.scripts ?? [])\n    .map(\n      (path) =>\n        `<script type=\"module\" src=\"${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}\"></script>`\n    )\n    .join(\"\\n\");\n\n  const entryUrl = resolveExternalAssetUrl(\n    entry.entry,\n    assetsBase,\n    basePath,\n    viewName\n  );\n\n  return `<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n${configScript}\n${TRANSPARENT_IFRAME_STYLE}\n${cssLinks}\n</head>\n<body>\n<div id=\"root\"></div>\n${scriptTags}\n<script type=\"module\" src=\"${escapeHtml(entryUrl)}\"></script>\n</body>\n</html>`;\n}\n"],"mappings":";;;;;AAeO,SAAS,gBAAgB,WAAmB,QAAwB;AACzE,MAAI,CAAC,UAAU,WAAW,GAAG,GAAG;AAC9B,UAAM,IAAI;AAAA,MACR,0EAA0E,KAAK,UAAU,SAAS,CAAC;AAAA,IACrG;AAAA,EACF;AACA,SAAO,GAAG,MAAM,GAAG,SAAS;AAC9B;AAQO,SAAS,mBAAmB,UAAkB,UAA0B;AAC7E,SAAO,GAAG,cAAc,UAAU,kBAAkB,QAAQ,EAAE,CAAC;AACjE;AAWO,SAAS,wBACd,WACA,YACA,UACA,UACQ;AACR,MACE,UAAU,WAAW,SAAS,KAC9B,UAAU,WAAW,UAAU,KAC/B,UAAU,WAAW,OAAO,GAC5B;AACA,WAAO;AAAA,EACT;AACA,MAAI,UAAU,WAAW,GAAG,GAAG;AAC7B,WAAO,gBAAgB,WAAW,UAAU;AAAA,EAC9C;AACA,SAAO,GAAG,UAAU,GAAG,mBAAmB,UAAU,QAAQ,CAAC,GAAG,UAAU,QAAQ,QAAQ,EAAE,CAAC;AAC/F;AASO,SAAS,kBACd,YACA,UACQ;AACR,SAAO,GAAG,UAAU,GAAG,cAAc,UAAU,iBAAiB,CAAC;AACnE;AAQA,SAAS,mBAAmB,MAAsB;AAChD,SAAO,KACJ,WAAW,eAAe,YAAY,EACtC,WAAW,QAAQ,UAAU;AAClC;AAQA,SAAS,kBAAkB,KAAqB;AAC9C,SAAO,IAAI,WAAW,cAAc,WAAW;AACjD;AAEA,SAAS,WAAW,OAAuB;AACzC,SAAO,MACJ,WAAW,KAAK,OAAO,EACvB,WAAW,KAAK,QAAQ,EACxB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,MAAM;AAC3B;AAGA,IAAM,2BACJ;AAcK,SAAS,uBACd,OACA,YACA,UACA,UACQ;AACR,QAAM,aAA+B;AAAA,IACnC,YAAY,kBAAkB,YAAY,QAAQ;AAAA,EACpD;AACA,QAAM,eAAe,yCAAyC,KAAK,UAAU,UAAU,CAAC;AAExF,MAAI,MAAM,SAAS,UAAU;AAC3B,UAAM,WACJ,MAAM,IAAI,SAAS,IACf,UAAU,kBAAkB,MAAM,GAAG,CAAC,aACtC;AACN,UAAM,eAAe,yBAAyB,mBAAmB,MAAM,EAAE,CAAC;AAC1E,WAAO;AAAA;AAAA;AAAA;AAAA,EAIT,YAAY;AAAA,EACZ,wBAAwB;AAAA,EACxB,QAAQ;AAAA;AAAA;AAAA;AAAA,EAIR,YAAY;AAAA;AAAA;AAAA,EAGZ;AAEA,MAAI,aAAa,QAAW;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,MAAM,IACpB;AAAA,IACC,CAAC,SACC,gCAAgC,WAAW,wBAAwB,MAAM,YAAY,UAAU,QAAQ,CAAC,CAAC;AAAA,EAC7G,EACC,KAAK,IAAI;AAEZ,QAAM,cAAc,MAAM,WAAW,CAAC,GACnC;AAAA,IACC,CAAC,SACC,8BAA8B,WAAW,wBAAwB,MAAM,YAAY,UAAU,QAAQ,CAAC,CAAC;AAAA,EAC3G,EACC,KAAK,IAAI;AAEZ,QAAM,WAAW;AAAA,IACf,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,SAAO;AAAA;AAAA;AAAA;AAAA,EAIP,YAAY;AAAA,EACZ,wBAAwB;AAAA,EACxB,QAAQ;AAAA;AAAA;AAAA;AAAA,EAIR,UAAU;AAAA,6BACiB,WAAW,QAAQ,CAAC;AAAA;AAAA;AAGjD;","names":[]}

package/dist/chunk-FC2Z2VFO.js

@@ -0,0 +1,99 @@
+// src/views/origin.ts
+function stripTrailingSlashes(value) {
+  return value.replace(/\/+$/, "");
+}
+function readEnv(name) {
+  if (typeof process === "undefined") {
+    return void 0;
+  }
+  const value = process.env[name];
+  return value !== void 0 && value !== "" ? value : void 0;
+}
+function parseForwardedHeader(header) {
+  for (const part of header.split(",")) {
+    const params = /* @__PURE__ */ new Map();
+    for (const token of part.split(";")) {
+      const [key, ...rest] = token.trim().split("=");
+      if (key === void 0 || rest.length === 0) {
+        continue;
+      }
+      params.set(key.toLowerCase(), rest.join("=").replace(/^"|"$/g, ""));
+    }
+    const proto = params.get("proto");
+    const host = params.get("host");
+    if (proto !== void 0 && host !== void 0) {
+      return `${proto}://${host}`;
+    }
+  }
+  return void 0;
+}
+function resolveRequestOriginFromHeaders(request) {
+  const forwarded = request.headers.get("forwarded");
+  if (forwarded !== null) {
+    const fromForwarded = parseForwardedHeader(forwarded);
+    if (fromForwarded !== void 0) {
+      return fromForwarded;
+    }
+  }
+  const proto = request.headers.get("x-forwarded-proto");
+  const host = request.headers.get("x-forwarded-host");
+  if (proto !== null && host !== null) {
+    const firstHost = host.split(",")[0]?.trim();
+    const firstProto = proto.split(",")[0]?.trim();
+    if (firstHost !== void 0 && firstProto !== void 0 && firstHost !== "") {
+      return `${firstProto}://${firstHost}`;
+    }
+  }
+  return new URL(request.url).origin;
+}
+function resolveServerOrigin(request) {
+  const mcpUrl = readEnv("MCP_URL");
+  if (mcpUrl !== void 0) {
+    try {
+      return new URL(mcpUrl).origin;
+    } catch {
+    }
+  }
+  return resolveRequestOriginFromHeaders(request);
+}
+function originFromAssetsBase(assetsBase) {
+  try {
+    return new URL(assetsBase).origin;
+  } catch {
+    return assetsBase;
+  }
+}
+function normalizeAssetsBaseUrl(value) {
+  return stripTrailingSlashes(value);
+}
+function resolveAssetsBase(request) {
+  const assetsUrl = readEnv("MCP_ASSETS_URL");
+  if (assetsUrl !== void 0) {
+    try {
+      return normalizeAssetsBaseUrl(new URL(assetsUrl).href.replace(/\/$/, ""));
+    } catch {
+    }
+  }
+  return resolveServerOrigin(request);
+}
+function hasExplicitAssetsBase() {
+  const assetsUrl = readEnv("MCP_ASSETS_URL");
+  if (assetsUrl === void 0) {
+    return false;
+  }
+  try {
+    new URL(assetsUrl);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+export {
+  resolveServerOrigin,
+  originFromAssetsBase,
+  normalizeAssetsBaseUrl,
+  resolveAssetsBase,
+  hasExplicitAssetsBase
+};
+//# sourceMappingURL=chunk-FC2Z2VFO.js.map

package/dist/chunk-FC2Z2VFO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/views/origin.ts"],"sourcesContent":["/**\n * Resolve public origins and asset URL prefixes for view documents and CSP.\n *\n * **Server origin** (`resolveServerOrigin`): MCP endpoint / API base — OAuth\n * resource identity, `connectDomains`, dev HMR websocket host.\n *\n * **Assets base** (`resolveAssetsBase`): prefix for view JS/CSS and\n * `public/` URLs — may include a path (CDN bucket prefix).\n */\n\n/** Strip trailing slashes from a URL prefix. */\nexport function stripTrailingSlashes(value: string): string {\n  return value.replace(/\\/+$/, \"\");\n}\n\nfunction readEnv(name: string): string | undefined {\n  if (typeof process === \"undefined\") {\n    return undefined;\n  }\n  const value = process.env[name];\n  return value !== undefined && value !== \"\" ? value : undefined;\n}\n\nfunction parseForwardedHeader(header: string): string | undefined {\n  for (const part of header.split(\",\")) {\n    const params = new Map<string, string>();\n    for (const token of part.split(\";\")) {\n      const [key, ...rest] = token.trim().split(\"=\");\n      if (key === undefined || rest.length === 0) {\n        continue;\n      }\n      params.set(key.toLowerCase(), rest.join(\"=\").replace(/^\"|\"$/g, \"\"));\n    }\n    const proto = params.get(\"proto\");\n    const host = params.get(\"host\");\n    if (proto !== undefined && host !== undefined) {\n      return `${proto}://${host}`;\n    }\n  }\n  return undefined;\n}\n\n/**\n * Resolve origin from forwarded headers or the request URL (no env override).\n */\nexport function resolveRequestOriginFromHeaders(request: Request): string {\n  const forwarded = request.headers.get(\"forwarded\");\n  if (forwarded !== null) {\n    const fromForwarded = parseForwardedHeader(forwarded);\n    if (fromForwarded !== undefined) {\n      return fromForwarded;\n    }\n  }\n\n  const proto = request.headers.get(\"x-forwarded-proto\");\n  const host = request.headers.get(\"x-forwarded-host\");\n  if (proto !== null && host !== null) {\n    const firstHost = host.split(\",\")[0]?.trim();\n    const firstProto = proto.split(\",\")[0]?.trim();\n    if (\n      firstHost !== undefined &&\n      firstProto !== undefined &&\n      firstHost !== \"\"\n    ) {\n      return `${firstProto}://${firstHost}`;\n    }\n  }\n\n  return new URL(request.url).origin;\n}\n\n/**\n * Server public origin — `MCP_URL` when valid, else forwarded/request origin.\n *\n * Uses `.origin` only (path suffix on `MCP_URL` is ignored).\n */\nexport function resolveServerOrigin(request: Request): string {\n  const mcpUrl = readEnv(\"MCP_URL\");\n  if (mcpUrl !== undefined) {\n    try {\n      return new URL(mcpUrl).origin;\n    } catch {\n      // Fall through when MCP_URL is malformed.\n    }\n  }\n  return resolveRequestOriginFromHeaders(request);\n}\n\n/**\n * Extract the origin from an assets URL prefix (origin + optional path).\n */\nexport function originFromAssetsBase(assetsBase: string): string {\n  try {\n    return new URL(assetsBase).origin;\n  } catch {\n    return assetsBase;\n  }\n}\n\n/**\n * Normalize `MCP_ASSETS_URL` to a URL prefix without trailing slash.\n */\nexport function normalizeAssetsBaseUrl(value: string): string {\n  return stripTrailingSlashes(value);\n}\n\n/**\n * Assets URL prefix for view JS/CSS and `public/` — `MCP_ASSETS_URL` when set,\n * else server origin from {@link resolveServerOrigin}.\n */\nexport function resolveAssetsBase(request: Request): string {\n  const assetsUrl = readEnv(\"MCP_ASSETS_URL\");\n  if (assetsUrl !== undefined) {\n    try {\n      return normalizeAssetsBaseUrl(new URL(assetsUrl).href.replace(/\\/$/, \"\"));\n    } catch {\n      // Fall through when MCP_ASSETS_URL is malformed.\n    }\n  }\n  return resolveServerOrigin(request);\n}\n\n/**\n * @deprecated Alias for {@link resolveServerOrigin} — kept for OAuth callers.\n */\nexport function resolveRequestOrigin(request: Request): string {\n  return resolveServerOrigin(request);\n}\n\n/**\n * Whether `MCP_ASSETS_URL` is explicitly configured (distinct from server).\n */\nexport function hasExplicitAssetsBase(): boolean {\n  const assetsUrl = readEnv(\"MCP_ASSETS_URL\");\n  if (assetsUrl === undefined) {\n    return false;\n  }\n  try {\n    new URL(assetsUrl);\n    return true;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";AAWO,SAAS,qBAAqB,OAAuB;AAC1D,SAAO,MAAM,QAAQ,QAAQ,EAAE;AACjC;AAEA,SAAS,QAAQ,MAAkC;AACjD,MAAI,OAAO,YAAY,aAAa;AAClC,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,QAAQ,IAAI,IAAI;AAC9B,SAAO,UAAU,UAAa,UAAU,KAAK,QAAQ;AACvD;AAEA,SAAS,qBAAqB,QAAoC;AAChE,aAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AACpC,UAAM,SAAS,oBAAI,IAAoB;AACvC,eAAW,SAAS,KAAK,MAAM,GAAG,GAAG;AACnC,YAAM,CAAC,KAAK,GAAG,IAAI,IAAI,MAAM,KAAK,EAAE,MAAM,GAAG;AAC7C,UAAI,QAAQ,UAAa,KAAK,WAAW,GAAG;AAC1C;AAAA,MACF;AACA,aAAO,IAAI,IAAI,YAAY,GAAG,KAAK,KAAK,GAAG,EAAE,QAAQ,UAAU,EAAE,CAAC;AAAA,IACpE;AACA,UAAM,QAAQ,OAAO,IAAI,OAAO;AAChC,UAAM,OAAO,OAAO,IAAI,MAAM;AAC9B,QAAI,UAAU,UAAa,SAAS,QAAW;AAC7C,aAAO,GAAG,KAAK,MAAM,IAAI;AAAA,IAC3B;AAAA,EACF;AACA,SAAO;AACT;AAKO,SAAS,gCAAgC,SAA0B;AACxE,QAAM,YAAY,QAAQ,QAAQ,IAAI,WAAW;AACjD,MAAI,cAAc,MAAM;AACtB,UAAM,gBAAgB,qBAAqB,SAAS;AACpD,QAAI,kBAAkB,QAAW;AAC/B,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,QAAQ,QAAQ,QAAQ,IAAI,mBAAmB;AACrD,QAAM,OAAO,QAAQ,QAAQ,IAAI,kBAAkB;AACnD,MAAI,UAAU,QAAQ,SAAS,MAAM;AACnC,UAAM,YAAY,KAAK,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK;AAC3C,UAAM,aAAa,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK;AAC7C,QACE,cAAc,UACd,eAAe,UACf,cAAc,IACd;AACA,aAAO,GAAG,UAAU,MAAM,SAAS;AAAA,IACrC;AAAA,EACF;AAEA,SAAO,IAAI,IAAI,QAAQ,GAAG,EAAE;AAC9B;AAOO,SAAS,oBAAoB,SAA0B;AAC5D,QAAM,SAAS,QAAQ,SAAS;AAChC,MAAI,WAAW,QAAW;AACxB,QAAI;AACF,aAAO,IAAI,IAAI,MAAM,EAAE;AAAA,IACzB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO,gCAAgC,OAAO;AAChD;AAKO,SAAS,qBAAqB,YAA4B;AAC/D,MAAI;AACF,WAAO,IAAI,IAAI,UAAU,EAAE;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKO,SAAS,uBAAuB,OAAuB;AAC5D,SAAO,qBAAqB,KAAK;AACnC;AAMO,SAAS,kBAAkB,SAA0B;AAC1D,QAAM,YAAY,QAAQ,gBAAgB;AAC1C,MAAI,cAAc,QAAW;AAC3B,QAAI;AACF,aAAO,uBAAuB,IAAI,IAAI,SAAS,EAAE,KAAK,QAAQ,OAAO,EAAE,CAAC;AAAA,IAC1E,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO,oBAAoB,OAAO;AACpC;AAYO,SAAS,wBAAiC;AAC/C,QAAM,YAAY,QAAQ,gBAAgB;AAC1C,MAAI,cAAc,QAAW;AAC3B,WAAO;AAAA,EACT;AACA,MAAI;AACF,QAAI,IAAI,SAAS;AACjB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}