mcp-use 2.0.0-beta.4 → 2.0.0-beta.41

package/dist/chunk-SFI2T6TE.js

@@ -1,171 +0,0 @@
-import {
-  getOAuthProviderOptions,
-  wrapOAuthTokenVerifier
-} from "./chunk-DPL7OEXC.js";
-
-// src/oauth/index.ts
-import {
-  OAuthError,
-  OAuthErrorCode,
-  bearerAuthChallengeResponse,
-  getOAuthProtectedResourceMetadataUrl as getOAuthProtectedResourceMetadataUrl2,
-  oauthMetadataResponse as oauthMetadataResponse2,
-  requireBearerAuth as requireBearerAuth2,
-  verifyBearerToken
-} from "@modelcontextprotocol/server";
-
-// src/oauth/adapters.ts
-import {
-  getOAuthProtectedResourceMetadataUrl,
-  oauthMetadataResponse,
-  requireBearerAuth
-} from "@modelcontextprotocol/server";
-
-// src/fetch-app.ts
-import {
-  hostHeaderValidationResponse,
-  originValidationResponse
-} from "@modelcontextprotocol/server";
-var requestBags = /* @__PURE__ */ new WeakMap();
-function getRequestBag(request) {
-  let bag = requestBags.get(request);
-  if (bag === void 0) {
-    bag = {};
-    requestBags.set(request, bag);
-  }
-  return bag;
-}
-function composeFetch(terminal, ...middlewares) {
-  return async (request) => {
-    let index = 0;
-    const dispatch = async () => {
-      if (index < middlewares.length) {
-        const middleware = middlewares[index];
-        index += 1;
-        return middleware(request, dispatch);
-      }
-      return terminal(request);
-    };
-    return dispatch();
-  };
-}
-function pathnameOf(request) {
-  return new URL(request.url).pathname;
-}
-function matchesPath(request, path) {
-  return pathnameOf(request) === path;
-}
-function matchesPathPrefix(request, prefix) {
-  const pathname = pathnameOf(request);
-  return pathname === prefix || pathname.startsWith(`${prefix}/`);
-}
-function routeFetch(routes, fallback = async () => new Response("Not Found", { status: 404 })) {
-  return async (request) => {
-    for (const route of routes) {
-      if (route.match(request)) {
-        return route.handler(request);
-      }
-    }
-    return fallback(request);
-  };
-}
-function jsonBodyMiddleware() {
-  return async (request, next) => {
-    const bag = getRequestBag(request);
-    if (bag.parsedBody !== void 0) {
-      return next();
-    }
-    if (!(request.headers.get("content-type") ?? "").includes("application/json")) {
-      return next();
-    }
-    try {
-      bag.parsedBody = await request.clone().json();
-    } catch {
-      return new Response("Invalid JSON", { status: 400 });
-    }
-    return next();
-  };
-}
-function hostValidationMiddleware(hosts) {
-  return async (request, next) => {
-    const rejected = hostHeaderValidationResponse(request, hosts);
-    return rejected ?? next();
-  };
-}
-function originValidationMiddleware(origins, skipSafeMethods = true) {
-  return async (request, next) => {
-    if (skipSafeMethods && (request.method === "GET" || request.method === "HEAD")) {
-      return next();
-    }
-    const rejected = originValidationResponse(request, origins);
-    return rejected ?? next();
-  };
-}
-
-// src/oauth/adapters.ts
-function bearerAuth(provider, resource) {
-  const options = getOAuthProviderOptions(provider);
-  const gate = requireBearerAuth({
-    verifier: wrapOAuthTokenVerifier(provider, resource),
-    resourceMetadataUrl: getOAuthProtectedResourceMetadataUrl(resource),
-    ...options.requiredScopes !== void 0 && {
-      requiredScopes: [...options.requiredScopes]
-    }
-  });
-  return async (request, next) => {
-    const result = await gate(request);
-    if (result instanceof Response) {
-      return result;
-    }
-    getRequestBag(request).authInfo = result;
-    return next();
-  };
-}
-function oauthMetadata(provider, resource) {
-  const options = getOAuthProviderOptions(provider);
-  return async (request, next) => {
-    const response = oauthMetadataResponse(request, {
-      oauthMetadata: options.oauthMetadata,
-      resourceServerUrl: resource,
-      ...options.scopesSupported !== void 0 && {
-        scopesSupported: [...options.scopesSupported]
-      },
-      ...options.resourceName !== void 0 && {
-        resourceName: options.resourceName
-      },
-      ...options.serviceDocumentationUrl !== void 0 && {
-        serviceDocumentationUrl: options.serviceDocumentationUrl
-      }
-    });
-    if (response !== void 0) {
-      return response;
-    }
-    return next();
-  };
-}
-function authInfoFromRequest(request) {
-  return getRequestBag(request).authInfo;
-}
-
-export {
-  getRequestBag,
-  composeFetch,
-  pathnameOf,
-  matchesPath,
-  matchesPathPrefix,
-  routeFetch,
-  jsonBodyMiddleware,
-  hostValidationMiddleware,
-  originValidationMiddleware,
-  bearerAuth,
-  oauthMetadata,
-  authInfoFromRequest,
-  OAuthError,
-  OAuthErrorCode,
-  bearerAuthChallengeResponse,
-  getOAuthProtectedResourceMetadataUrl2 as getOAuthProtectedResourceMetadataUrl,
-  oauthMetadataResponse2 as oauthMetadataResponse,
-  requireBearerAuth2 as requireBearerAuth,
-  verifyBearerToken
-};
-//# sourceMappingURL=chunk-SFI2T6TE.js.map

package/dist/chunk-SFI2T6TE.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/oauth/index.ts","../src/oauth/adapters.ts","../src/fetch-app.ts"],"sourcesContent":["/**\n * OAuth resource-server helpers and provider configuration for mcp-use.\n *\n * @packageDocumentation\n */\nexport {\n  OAuthError,\n  OAuthErrorCode,\n  bearerAuthChallengeResponse,\n  getOAuthProtectedResourceMetadataUrl,\n  oauthMetadataResponse,\n  requireBearerAuth,\n  verifyBearerToken,\n} from \"@modelcontextprotocol/server\";\nexport type {\n  AuthInfo as OAuthAuthInfo,\n  AuthMetadataOptions,\n  BearerAuthOptions,\n  OAuthMetadata,\n  OAuthProtectedResourceMetadata,\n  OAuthTokenVerifier,\n} from \"@modelcontextprotocol/server\";\n\nexport { bearerAuth, oauthMetadata } from \"./adapters.js\";\nexport {\n  oauthCustomProvider,\n  type CustomOAuthProviderOptions,\n  type OAuthExtra,\n  type OAuthProvider,\n  type OAuthResourceOptions,\n} from \"./provider.js\";\n","import {\n  getOAuthProtectedResourceMetadataUrl,\n  oauthMetadataResponse,\n  requireBearerAuth,\n  type AuthInfo,\n} from \"@modelcontextprotocol/server\";\n\nimport { getRequestBag, type FetchMiddleware } from \"../fetch-app.js\";\nimport { getOAuthProviderOptions, wrapOAuthTokenVerifier } from \"./internal.js\";\nimport type { OAuthProvider } from \"./provider.js\";\n\n/**\n * Fetch middleware that requires a bearer token for a canonical resource.\n *\n * @typeParam TUser - Application user type carried by the provider.\n * @param provider - OAuth provider that verifies the bearer token.\n * @param resource - Canonical public MCP endpoint URL.\n */\nexport function bearerAuth<TUser>(\n  provider: OAuthProvider<TUser>,\n  resource: URL\n): FetchMiddleware {\n  const options = getOAuthProviderOptions(provider);\n  const gate = requireBearerAuth({\n    verifier: wrapOAuthTokenVerifier(provider, resource),\n    resourceMetadataUrl: getOAuthProtectedResourceMetadataUrl(resource),\n    ...(options.requiredScopes !== undefined && {\n      requiredScopes: [...options.requiredScopes],\n    }),\n  });\n\n  return async (request, next) => {\n    const result = await gate(request);\n    if (result instanceof Response) {\n      return result;\n    }\n    getRequestBag(request).authInfo = result;\n    return next();\n  };\n}\n\n/**\n * Fetch middleware that serves OAuth discovery metadata.\n *\n * @typeParam TUser - Application user type carried by the provider.\n * @param provider - OAuth provider that supplies authorization-server metadata.\n * @param resource - Canonical public MCP endpoint URL.\n */\nexport function oauthMetadata<TUser>(\n  provider: OAuthProvider<TUser>,\n  resource: URL\n): FetchMiddleware {\n  const options = getOAuthProviderOptions(provider);\n  return async (request, next) => {\n    const response = oauthMetadataResponse(request, {\n      oauthMetadata: options.oauthMetadata,\n      resourceServerUrl: resource,\n      ...(options.scopesSupported !== undefined && {\n        scopesSupported: [...options.scopesSupported],\n      }),\n      ...(options.resourceName !== undefined && {\n        resourceName: options.resourceName,\n      }),\n      ...(options.serviceDocumentationUrl !== undefined && {\n        serviceDocumentationUrl: options.serviceDocumentationUrl,\n      }),\n    });\n    if (response !== undefined) {\n      return response;\n    }\n    return next();\n  };\n}\n/**\n * Read verified {@link AuthInfo} from the request bag after {@link bearerAuth}.\n *\n * @param request - Request that passed through bearer auth middleware.\n */\nexport function authInfoFromRequest(request: Request): AuthInfo | undefined {\n  return getRequestBag(request).authInfo;\n}\n","import {\n  hostHeaderValidationResponse,\n  originValidationResponse,\n  type AuthInfo,\n} from \"@modelcontextprotocol/server\";\n\n/** Web-standard request handler. */\nexport type FetchHandler = (request: Request) => Promise<Response>;\n\n/** Onion middleware over a {@link FetchHandler} terminal. */\nexport type FetchMiddleware = (\n  request: Request,\n  next: () => Promise<Response>\n) => Promise<Response>;\n\n/** Per-request values stashed before the MCP handler runs. */\nexport interface RequestBag {\n  /** Parsed JSON body when the JSON middleware ran first. */\n  parsedBody?: unknown;\n  /** Verified OAuth identity forwarded to the SDK handler. */\n  authInfo?: AuthInfo;\n}\n\nconst requestBags = new WeakMap<Request, RequestBag>();\n\n/**\n * Mutable per-request bag; created on first access.\n *\n * @param request - Incoming request whose bag to read or create.\n */\nexport function getRequestBag(request: Request): RequestBag {\n  let bag = requestBags.get(request);\n  if (bag === undefined) {\n    bag = {};\n    requestBags.set(request, bag);\n  }\n  return bag;\n}\n\n/**\n * Compose middleware around a terminal handler (first listed runs outermost).\n *\n * @param terminal - Fallback handler when no middleware short-circuits.\n * @param middlewares - Middleware chain executed before `terminal`.\n */\nexport function composeFetch(\n  terminal: FetchHandler,\n  ...middlewares: FetchMiddleware[]\n): FetchHandler {\n  return async (request: Request): Promise<Response> => {\n    let index = 0;\n    const dispatch = async (): Promise<Response> => {\n      if (index < middlewares.length) {\n        const middleware = middlewares[index]!;\n        index += 1;\n        return middleware(request, dispatch);\n      }\n      return terminal(request);\n    };\n    return dispatch();\n  };\n}\n\n/**\n * Return the pathname of a request URL.\n *\n * @param request - Request whose pathname to read.\n */\nexport function pathnameOf(request: Request): string {\n  return new URL(request.url).pathname;\n}\n\n/**\n * Match a request pathname exactly.\n *\n * @param request - Request to test.\n * @param path - Exact pathname (for example `/mcp`).\n */\nexport function matchesPath(request: Request, path: string): boolean {\n  return pathnameOf(request) === path;\n}\n\n/**\n * Match a request pathname prefix (prefix or `prefix/...`).\n *\n * @param request - Request to test.\n * @param prefix - Path prefix without a trailing wildcard.\n */\nexport function matchesPathPrefix(request: Request, prefix: string): boolean {\n  const pathname = pathnameOf(request);\n  return pathname === prefix || pathname.startsWith(`${prefix}/`);\n}\n\n/**\n * Dispatch to the first matching route handler.\n *\n * @param routes - Ordered route table; first match wins.\n * @param fallback - Handler when nothing matches.\n */\nexport function routeFetch(\n  routes: Array<{\n    match: (request: Request) => boolean;\n    handler: FetchHandler;\n  }>,\n  fallback: FetchHandler = async () =>\n    new Response(\"Not Found\", { status: 404 })\n): FetchHandler {\n  return async (request: Request): Promise<Response> => {\n    for (const route of routes) {\n      if (route.match(request)) {\n        return route.handler(request);\n      }\n    }\n    return fallback(request);\n  };\n}\n\n/**\n * Parse JSON bodies once and stash them in the request bag.\n */\nexport function jsonBodyMiddleware(): FetchMiddleware {\n  return async (request, next) => {\n    const bag = getRequestBag(request);\n    if (bag.parsedBody !== undefined) {\n      return next();\n    }\n    if (\n      !(request.headers.get(\"content-type\") ?? \"\").includes(\"application/json\")\n    ) {\n      return next();\n    }\n    try {\n      bag.parsedBody = await request.clone().json();\n    } catch {\n      return new Response(\"Invalid JSON\", { status: 400 });\n    }\n    return next();\n  };\n}\n\n/**\n * Reject requests whose `Host` header is not on the allowlist.\n *\n * @param hosts - Allowed hostnames (port-agnostic).\n */\nexport function hostValidationMiddleware(hosts: string[]): FetchMiddleware {\n  return async (request, next) => {\n    const rejected = hostHeaderValidationResponse(request, hosts);\n    return rejected ?? next();\n  };\n}\n\n/**\n * Reject requests whose `Origin` header is not on the allowlist.\n *\n * @param origins - Allowed origin hostnames (port-agnostic).\n * @param skipSafeMethods - When true, skip GET/HEAD (view asset GETs).\n */\nexport function originValidationMiddleware(\n  origins: string[],\n  skipSafeMethods = true\n): FetchMiddleware {\n  return async (request, next) => {\n    if (\n      skipSafeMethods &&\n      (request.method === \"GET\" || request.method === \"HEAD\")\n    ) {\n      return next();\n    }\n    const rejected = originValidationResponse(request, origins);\n    return rejected ?? next();\n  };\n}\n"],"mappings":";;;;;;AAKA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA,wCAAAA;AAAA,EACA,yBAAAC;AAAA,EACA,qBAAAC;AAAA,EACA;AAAA,OACK;;;ACbP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;;;ACLP;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAmBP,IAAM,cAAc,oBAAI,QAA6B;AAO9C,SAAS,cAAc,SAA8B;AAC1D,MAAI,MAAM,YAAY,IAAI,OAAO;AACjC,MAAI,QAAQ,QAAW;AACrB,UAAM,CAAC;AACP,gBAAY,IAAI,SAAS,GAAG;AAAA,EAC9B;AACA,SAAO;AACT;AAQO,SAAS,aACd,aACG,aACW;AACd,SAAO,OAAO,YAAwC;AACpD,QAAI,QAAQ;AACZ,UAAM,WAAW,YAA+B;AAC9C,UAAI,QAAQ,YAAY,QAAQ;AAC9B,cAAM,aAAa,YAAY,KAAK;AACpC,iBAAS;AACT,eAAO,WAAW,SAAS,QAAQ;AAAA,MACrC;AACA,aAAO,SAAS,OAAO;AAAA,IACzB;AACA,WAAO,SAAS;AAAA,EAClB;AACF;AAOO,SAAS,WAAW,SAA0B;AACnD,SAAO,IAAI,IAAI,QAAQ,GAAG,EAAE;AAC9B;AAQO,SAAS,YAAY,SAAkB,MAAuB;AACnE,SAAO,WAAW,OAAO,MAAM;AACjC;AAQO,SAAS,kBAAkB,SAAkB,QAAyB;AAC3E,QAAM,WAAW,WAAW,OAAO;AACnC,SAAO,aAAa,UAAU,SAAS,WAAW,GAAG,MAAM,GAAG;AAChE;AAQO,SAAS,WACd,QAIA,WAAyB,YACvB,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC,GAC7B;AACd,SAAO,OAAO,YAAwC;AACpD,eAAW,SAAS,QAAQ;AAC1B,UAAI,MAAM,MAAM,OAAO,GAAG;AACxB,eAAO,MAAM,QAAQ,OAAO;AAAA,MAC9B;AAAA,IACF;AACA,WAAO,SAAS,OAAO;AAAA,EACzB;AACF;AAKO,SAAS,qBAAsC;AACpD,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,MAAM,cAAc,OAAO;AACjC,QAAI,IAAI,eAAe,QAAW;AAChC,aAAO,KAAK;AAAA,IACd;AACA,QACE,EAAE,QAAQ,QAAQ,IAAI,cAAc,KAAK,IAAI,SAAS,kBAAkB,GACxE;AACA,aAAO,KAAK;AAAA,IACd;AACA,QAAI;AACF,UAAI,aAAa,MAAM,QAAQ,MAAM,EAAE,KAAK;AAAA,IAC9C,QAAQ;AACN,aAAO,IAAI,SAAS,gBAAgB,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrD;AACA,WAAO,KAAK;AAAA,EACd;AACF;AAOO,SAAS,yBAAyB,OAAkC;AACzE,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,WAAW,6BAA6B,SAAS,KAAK;AAC5D,WAAO,YAAY,KAAK;AAAA,EAC1B;AACF;AAQO,SAAS,2BACd,SACA,kBAAkB,MACD;AACjB,SAAO,OAAO,SAAS,SAAS;AAC9B,QACE,oBACC,QAAQ,WAAW,SAAS,QAAQ,WAAW,SAChD;AACA,aAAO,KAAK;AAAA,IACd;AACA,UAAM,WAAW,yBAAyB,SAAS,OAAO;AAC1D,WAAO,YAAY,KAAK;AAAA,EAC1B;AACF;;;AD1JO,SAAS,WACd,UACA,UACiB;AACjB,QAAM,UAAU,wBAAwB,QAAQ;AAChD,QAAM,OAAO,kBAAkB;AAAA,IAC7B,UAAU,uBAAuB,UAAU,QAAQ;AAAA,IACnD,qBAAqB,qCAAqC,QAAQ;AAAA,IAClE,GAAI,QAAQ,mBAAmB,UAAa;AAAA,MAC1C,gBAAgB,CAAC,GAAG,QAAQ,cAAc;AAAA,IAC5C;AAAA,EACF,CAAC;AAED,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,SAAS,MAAM,KAAK,OAAO;AACjC,QAAI,kBAAkB,UAAU;AAC9B,aAAO;AAAA,IACT;AACA,kBAAc,OAAO,EAAE,WAAW;AAClC,WAAO,KAAK;AAAA,EACd;AACF;AASO,SAAS,cACd,UACA,UACiB;AACjB,QAAM,UAAU,wBAAwB,QAAQ;AAChD,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,WAAW,sBAAsB,SAAS;AAAA,MAC9C,eAAe,QAAQ;AAAA,MACvB,mBAAmB;AAAA,MACnB,GAAI,QAAQ,oBAAoB,UAAa;AAAA,QAC3C,iBAAiB,CAAC,GAAG,QAAQ,eAAe;AAAA,MAC9C;AAAA,MACA,GAAI,QAAQ,iBAAiB,UAAa;AAAA,QACxC,cAAc,QAAQ;AAAA,MACxB;AAAA,MACA,GAAI,QAAQ,4BAA4B,UAAa;AAAA,QACnD,yBAAyB,QAAQ;AAAA,MACnC;AAAA,IACF,CAAC;AACD,QAAI,aAAa,QAAW;AAC1B,aAAO;AAAA,IACT;AACA,WAAO,KAAK;AAAA,EACd;AACF;AAMO,SAAS,oBAAoB,SAAwC;AAC1E,SAAO,cAAc,OAAO,EAAE;AAChC;","names":["getOAuthProtectedResourceMetadataUrl","oauthMetadataResponse","requireBearerAuth"]}

package/dist/chunk-VV2P4ZFZ.js

@@ -1,187 +0,0 @@
-// src/views/document.ts
-function resolveAssetUrl(assetPath, origin) {
-  if (!assetPath.startsWith("/")) {
-    throw new Error(
-      `View manifest asset path must be origin-absolute (start with "/"); got ${JSON.stringify(assetPath)}`
-    );
-  }
-  return `${origin}${assetPath}`;
-}
-function viewAssetsBasePath(basePath, viewName) {
-  return `${basePath}/_mcp-use/views/${viewName}/`;
-}
-function resolveExternalAssetUrl(assetPath, assetsBase, basePath, viewName) {
-  if (assetPath.startsWith("http://") || assetPath.startsWith("https://") || assetPath.startsWith("data:")) {
-    return assetPath;
-  }
-  if (assetPath.startsWith("/")) {
-    return resolveAssetUrl(assetPath, assetsBase);
-  }
-  return `${assetsBase}${viewAssetsBasePath(basePath, viewName)}${assetPath.replace(/^\/+/, "")}`;
-}
-function resolvePublicBase(assetsBase, basePath) {
-  return `${assetsBase}${basePath}/_mcp-use/public/`;
-}
-function escapeInlineScript(code) {
-  return code.replaceAll(/<\/script/gi, "<\\/script").replaceAll("<!--", "\\x3C!--");
-}
-function escapeInlineStyle(css) {
-  return css.replaceAll(/<\/style/gi, "<\\/style");
-}
-function escapeHtml(value) {
-  return value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
-}
-function synthesizeViewDocument(entry, assetsBase, basePath, viewName) {
-  const viewConfig = {
-    publicBase: resolvePublicBase(assetsBase, basePath)
-  };
-  const configScript = `<script>globalThis.__mcpUseViewConfig=${JSON.stringify(viewConfig)};</script>`;
-  if (entry.kind === "inline") {
-    const styleTag = entry.css.length > 0 ? `<style>${escapeInlineStyle(entry.css)}</style>` : "";
-    const moduleScript = `<script type="module">${escapeInlineScript(entry.js)}</script>`;
-    return `<!doctype html>
-<html>
-<head>
-<meta charset="utf-8">
-${configScript}
-${styleTag}
-</head>
-<body>
-<div id="root"></div>
-${moduleScript}
-</body>
-</html>`;
-  }
-  if (viewName === void 0) {
-    throw new Error(
-      "viewName is required when synthesizing an external view document."
-    );
-  }
-  const cssLinks = entry.css.map(
-    (path) => `<link rel="stylesheet" href="${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}">`
-  ).join("\n");
-  const scriptTags = (entry.scripts ?? []).map(
-    (path) => `<script type="module" src="${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}"></script>`
-  ).join("\n");
-  const entryUrl = resolveExternalAssetUrl(
-    entry.entry,
-    assetsBase,
-    basePath,
-    viewName
-  );
-  return `<!doctype html>
-<html>
-<head>
-<meta charset="utf-8">
-${configScript}
-${cssLinks}
-</head>
-<body>
-<div id="root"></div>
-${scriptTags}
-<script type="module" src="${escapeHtml(entryUrl)}"></script>
-</body>
-</html>`;
-}
-
-// src/views/origin.ts
-function stripTrailingSlashes(value) {
-  return value.replace(/\/+$/, "");
-}
-function readEnv(name) {
-  if (typeof process === "undefined") {
-    return void 0;
-  }
-  const value = process.env[name];
-  return value !== void 0 && value !== "" ? value : void 0;
-}
-function parseForwardedHeader(header) {
-  for (const part of header.split(",")) {
-    const params = /* @__PURE__ */ new Map();
-    for (const token of part.split(";")) {
-      const [key, ...rest] = token.trim().split("=");
-      if (key === void 0 || rest.length === 0) {
-        continue;
-      }
-      params.set(key.toLowerCase(), rest.join("=").replace(/^"|"$/g, ""));
-    }
-    const proto = params.get("proto");
-    const host = params.get("host");
-    if (proto !== void 0 && host !== void 0) {
-      return `${proto}://${host}`;
-    }
-  }
-  return void 0;
-}
-function resolveRequestOriginFromHeaders(request) {
-  const forwarded = request.headers.get("forwarded");
-  if (forwarded !== null) {
-    const fromForwarded = parseForwardedHeader(forwarded);
-    if (fromForwarded !== void 0) {
-      return fromForwarded;
-    }
-  }
-  const proto = request.headers.get("x-forwarded-proto");
-  const host = request.headers.get("x-forwarded-host");
-  if (proto !== null && host !== null) {
-    const firstHost = host.split(",")[0]?.trim();
-    const firstProto = proto.split(",")[0]?.trim();
-    if (firstHost !== void 0 && firstProto !== void 0 && firstHost !== "") {
-      return `${firstProto}://${firstHost}`;
-    }
-  }
-  return new URL(request.url).origin;
-}
-function resolveServerOrigin(request) {
-  const mcpUrl = readEnv("MCP_URL");
-  if (mcpUrl !== void 0) {
-    try {
-      return new URL(mcpUrl).origin;
-    } catch {
-    }
-  }
-  return resolveRequestOriginFromHeaders(request);
-}
-function originFromAssetsBase(assetsBase) {
-  try {
-    return new URL(assetsBase).origin;
-  } catch {
-    return assetsBase;
-  }
-}
-function normalizeAssetsBaseUrl(value) {
-  return stripTrailingSlashes(value);
-}
-function resolveAssetsBase(request) {
-  const assetsUrl = readEnv("MCP_ASSETS_URL");
-  if (assetsUrl !== void 0) {
-    try {
-      return normalizeAssetsBaseUrl(new URL(assetsUrl).href.replace(/\/$/, ""));
-    } catch {
-    }
-  }
-  return resolveServerOrigin(request);
-}
-function hasExplicitAssetsBase() {
-  const assetsUrl = readEnv("MCP_ASSETS_URL");
-  if (assetsUrl === void 0) {
-    return false;
-  }
-  try {
-    new URL(assetsUrl);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-export {
-  viewAssetsBasePath,
-  synthesizeViewDocument,
-  resolveServerOrigin,
-  originFromAssetsBase,
-  normalizeAssetsBaseUrl,
-  resolveAssetsBase,
-  hasExplicitAssetsBase
-};
-//# sourceMappingURL=chunk-VV2P4ZFZ.js.map

package/dist/chunk-VV2P4ZFZ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/views/document.ts","../src/views/origin.ts"],"sourcesContent":["import type { McpUseViewConfig } from \"../react/public-assets.js\";\nimport type { ViewManifestEntry } from \"./types.js\";\n\n/**\n * Resolve a manifest asset path to an absolute URL for embedding in the\n * synthesized view document.\n *\n * External manifest entries are origin-absolute `/`-prefixed paths by\n * contract ({@link ExternalViewManifestEntry}).\n *\n * @param assetPath - Origin-absolute path starting with `/`.\n * @param origin - Request-resolved public origin.\n * @returns Absolute URL `${origin}${assetPath}`.\n * @throws When `assetPath` does not start with `/`.\n */\nexport function resolveAssetUrl(assetPath: string, origin: string): string {\n  if (!assetPath.startsWith(\"/\")) {\n    throw new Error(\n      `View manifest asset path must be origin-absolute (start with \"/\"); got ${JSON.stringify(assetPath)}`\n    );\n  }\n  return `${origin}${assetPath}`;\n}\n\n/**\n * Build the HTTP path prefix for a view's built assets (no origin).\n *\n * @param basePath - MCP mount prefix (e.g. `/mcp`).\n * @param viewName - View directory / manifest key.\n */\nexport function viewAssetsBasePath(basePath: string, viewName: string): string {\n  return `${basePath}/_mcp-use/views/${viewName}/`;\n}\n\n/**\n * Resolve a production or dev external asset path to an absolute URL.\n *\n * @param assetPath - Full CDN URL, origin-absolute dev path (`/…`), or\n *   view-relative production path (`assets/…`).\n * @param assetsBase - Assets URL prefix (origin + optional path).\n * @param basePath - MCP mount prefix.\n * @param viewName - View directory / manifest key (required for view-relative paths).\n */\nexport function resolveExternalAssetUrl(\n  assetPath: string,\n  assetsBase: string,\n  basePath: string,\n  viewName: string\n): string {\n  if (\n    assetPath.startsWith(\"http://\") ||\n    assetPath.startsWith(\"https://\") ||\n    assetPath.startsWith(\"data:\")\n  ) {\n    return assetPath;\n  }\n  if (assetPath.startsWith(\"/\")) {\n    return resolveAssetUrl(assetPath, assetsBase);\n  }\n  return `${assetsBase}${viewAssetsBasePath(basePath, viewName)}${assetPath.replace(/^\\/+/, \"\")}`;\n}\n\n/**\n * Resolve the absolute URL prefix for the project's `public/` directory.\n *\n * @param assetsBase - Assets URL prefix (origin + optional path).\n * @param basePath - MCP mount prefix (e.g. `/mcp`).\n * @returns Absolute prefix with trailing slash.\n */\nexport function resolvePublicBase(\n  assetsBase: string,\n  basePath: string\n): string {\n  return `${assetsBase}${basePath}/_mcp-use/public/`;\n}\n\n/**\n * Escape view JS so it can sit inside a HTML `<script>` element without\n * premature termination or comment-open sequences.\n *\n * @param code - Raw module source.\n */\nfunction escapeInlineScript(code: string): string {\n  return code\n    .replaceAll(/<\\/script/gi, \"<\\\\/script\")\n    .replaceAll(\"<!--\", \"\\\\x3C!--\");\n}\n\n/**\n * Escape CSS so it can sit inside a HTML `<style>` element without premature\n * termination.\n *\n * @param css - Raw stylesheet text.\n */\nfunction escapeInlineStyle(css: string): string {\n  return css.replaceAll(/<\\/style/gi, \"<\\\\/style\");\n}\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replaceAll(\"&\", \"&amp;\")\n    .replaceAll('\"', \"&quot;\")\n    .replaceAll(\"<\", \"&lt;\")\n    .replaceAll(\">\", \"&gt;\");\n}\n\n/**\n * Synthesize a complete HTML document for a view from manifest data.\n *\n * Production (`kind: \"external\"`) loads built assets over HTTP with absolute\n * URLs. Legacy `kind: \"inline\"` embeds JS/CSS directly. Dev uses Vite module\n * URLs (`kind: \"external\"` with origin-absolute paths).\n *\n * @param entry - Primed manifest entry for the view.\n * @param assetsBase - Request-resolved assets URL prefix for absolute asset URLs.\n * @param basePath - MCP mount prefix (e.g. `/mcp`).\n * @param viewName - View directory / manifest key (required for production external paths).\n */\nexport function synthesizeViewDocument(\n  entry: ViewManifestEntry,\n  assetsBase: string,\n  basePath: string,\n  viewName?: string\n): string {\n  const viewConfig: McpUseViewConfig = {\n    publicBase: resolvePublicBase(assetsBase, basePath),\n  };\n  const configScript = `<script>globalThis.__mcpUseViewConfig=${JSON.stringify(viewConfig)};</script>`;\n\n  if (entry.kind === \"inline\") {\n    const styleTag =\n      entry.css.length > 0\n        ? `<style>${escapeInlineStyle(entry.css)}</style>`\n        : \"\";\n    const moduleScript = `<script type=\"module\">${escapeInlineScript(entry.js)}</script>`;\n    return `<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n${configScript}\n${styleTag}\n</head>\n<body>\n<div id=\"root\"></div>\n${moduleScript}\n</body>\n</html>`;\n  }\n\n  if (viewName === undefined) {\n    throw new Error(\n      \"viewName is required when synthesizing an external view document.\"\n    );\n  }\n\n  const cssLinks = entry.css\n    .map(\n      (path) =>\n        `<link rel=\"stylesheet\" href=\"${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}\">`\n    )\n    .join(\"\\n\");\n\n  const scriptTags = (entry.scripts ?? [])\n    .map(\n      (path) =>\n        `<script type=\"module\" src=\"${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}\"></script>`\n    )\n    .join(\"\\n\");\n\n  const entryUrl = resolveExternalAssetUrl(\n    entry.entry,\n    assetsBase,\n    basePath,\n    viewName\n  );\n\n  return `<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n${configScript}\n${cssLinks}\n</head>\n<body>\n<div id=\"root\"></div>\n${scriptTags}\n<script type=\"module\" src=\"${escapeHtml(entryUrl)}\"></script>\n</body>\n</html>`;\n}\n","/**\n * Resolve public origins and asset URL prefixes for view documents and CSP.\n *\n * **Server origin** (`resolveServerOrigin`): MCP endpoint / API base — OAuth\n * resource identity, `connectDomains`, dev HMR websocket host.\n *\n * **Assets base** (`resolveAssetsBase`): prefix for view JS/CSS and\n * `public/` URLs — may include a path (CDN bucket prefix).\n */\n\n/** Strip trailing slashes from a URL prefix. */\nexport function stripTrailingSlashes(value: string): string {\n  return value.replace(/\\/+$/, \"\");\n}\n\nfunction readEnv(name: string): string | undefined {\n  if (typeof process === \"undefined\") {\n    return undefined;\n  }\n  const value = process.env[name];\n  return value !== undefined && value !== \"\" ? value : undefined;\n}\n\nfunction parseForwardedHeader(header: string): string | undefined {\n  for (const part of header.split(\",\")) {\n    const params = new Map<string, string>();\n    for (const token of part.split(\";\")) {\n      const [key, ...rest] = token.trim().split(\"=\");\n      if (key === undefined || rest.length === 0) {\n        continue;\n      }\n      params.set(key.toLowerCase(), rest.join(\"=\").replace(/^\"|\"$/g, \"\"));\n    }\n    const proto = params.get(\"proto\");\n    const host = params.get(\"host\");\n    if (proto !== undefined && host !== undefined) {\n      return `${proto}://${host}`;\n    }\n  }\n  return undefined;\n}\n\n/**\n * Resolve origin from forwarded headers or the request URL (no env override).\n */\nexport function resolveRequestOriginFromHeaders(request: Request): string {\n  const forwarded = request.headers.get(\"forwarded\");\n  if (forwarded !== null) {\n    const fromForwarded = parseForwardedHeader(forwarded);\n    if (fromForwarded !== undefined) {\n      return fromForwarded;\n    }\n  }\n\n  const proto = request.headers.get(\"x-forwarded-proto\");\n  const host = request.headers.get(\"x-forwarded-host\");\n  if (proto !== null && host !== null) {\n    const firstHost = host.split(\",\")[0]?.trim();\n    const firstProto = proto.split(\",\")[0]?.trim();\n    if (\n      firstHost !== undefined &&\n      firstProto !== undefined &&\n      firstHost !== \"\"\n    ) {\n      return `${firstProto}://${firstHost}`;\n    }\n  }\n\n  return new URL(request.url).origin;\n}\n\n/**\n * Server public origin — `MCP_URL` when valid, else forwarded/request origin.\n *\n * Uses `.origin` only (path suffix on `MCP_URL` is ignored).\n */\nexport function resolveServerOrigin(request: Request): string {\n  const mcpUrl = readEnv(\"MCP_URL\");\n  if (mcpUrl !== undefined) {\n    try {\n      return new URL(mcpUrl).origin;\n    } catch {\n      // Fall through when MCP_URL is malformed.\n    }\n  }\n  return resolveRequestOriginFromHeaders(request);\n}\n\n/**\n * Extract the origin from an assets URL prefix (origin + optional path).\n */\nexport function originFromAssetsBase(assetsBase: string): string {\n  try {\n    return new URL(assetsBase).origin;\n  } catch {\n    return assetsBase;\n  }\n}\n\n/**\n * Normalize `MCP_ASSETS_URL` to a URL prefix without trailing slash.\n */\nexport function normalizeAssetsBaseUrl(value: string): string {\n  return stripTrailingSlashes(value);\n}\n\n/**\n * Assets URL prefix for view JS/CSS and `public/` — `MCP_ASSETS_URL` when set,\n * else server origin from {@link resolveServerOrigin}.\n */\nexport function resolveAssetsBase(request: Request): string {\n  const assetsUrl = readEnv(\"MCP_ASSETS_URL\");\n  if (assetsUrl !== undefined) {\n    try {\n      return normalizeAssetsBaseUrl(new URL(assetsUrl).href.replace(/\\/$/, \"\"));\n    } catch {\n      // Fall through when MCP_ASSETS_URL is malformed.\n    }\n  }\n  return resolveServerOrigin(request);\n}\n\n/**\n * @deprecated Alias for {@link resolveServerOrigin} — kept for OAuth callers.\n */\nexport function resolveRequestOrigin(request: Request): string {\n  return resolveServerOrigin(request);\n}\n\n/**\n * Whether `MCP_ASSETS_URL` is explicitly configured (distinct from server).\n */\nexport function hasExplicitAssetsBase(): boolean {\n  const assetsUrl = readEnv(\"MCP_ASSETS_URL\");\n  if (assetsUrl === undefined) {\n    return false;\n  }\n  try {\n    new URL(assetsUrl);\n    return true;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";AAeO,SAAS,gBAAgB,WAAmB,QAAwB;AACzE,MAAI,CAAC,UAAU,WAAW,GAAG,GAAG;AAC9B,UAAM,IAAI;AAAA,MACR,0EAA0E,KAAK,UAAU,SAAS,CAAC;AAAA,IACrG;AAAA,EACF;AACA,SAAO,GAAG,MAAM,GAAG,SAAS;AAC9B;AAQO,SAAS,mBAAmB,UAAkB,UAA0B;AAC7E,SAAO,GAAG,QAAQ,mBAAmB,QAAQ;AAC/C;AAWO,SAAS,wBACd,WACA,YACA,UACA,UACQ;AACR,MACE,UAAU,WAAW,SAAS,KAC9B,UAAU,WAAW,UAAU,KAC/B,UAAU,WAAW,OAAO,GAC5B;AACA,WAAO;AAAA,EACT;AACA,MAAI,UAAU,WAAW,GAAG,GAAG;AAC7B,WAAO,gBAAgB,WAAW,UAAU;AAAA,EAC9C;AACA,SAAO,GAAG,UAAU,GAAG,mBAAmB,UAAU,QAAQ,CAAC,GAAG,UAAU,QAAQ,QAAQ,EAAE,CAAC;AAC/F;AASO,SAAS,kBACd,YACA,UACQ;AACR,SAAO,GAAG,UAAU,GAAG,QAAQ;AACjC;AAQA,SAAS,mBAAmB,MAAsB;AAChD,SAAO,KACJ,WAAW,eAAe,YAAY,EACtC,WAAW,QAAQ,UAAU;AAClC;AAQA,SAAS,kBAAkB,KAAqB;AAC9C,SAAO,IAAI,WAAW,cAAc,WAAW;AACjD;AAEA,SAAS,WAAW,OAAuB;AACzC,SAAO,MACJ,WAAW,KAAK,OAAO,EACvB,WAAW,KAAK,QAAQ,EACxB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,MAAM;AAC3B;AAcO,SAAS,uBACd,OACA,YACA,UACA,UACQ;AACR,QAAM,aAA+B;AAAA,IACnC,YAAY,kBAAkB,YAAY,QAAQ;AAAA,EACpD;AACA,QAAM,eAAe,yCAAyC,KAAK,UAAU,UAAU,CAAC;AAExF,MAAI,MAAM,SAAS,UAAU;AAC3B,UAAM,WACJ,MAAM,IAAI,SAAS,IACf,UAAU,kBAAkB,MAAM,GAAG,CAAC,aACtC;AACN,UAAM,eAAe,yBAAyB,mBAAmB,MAAM,EAAE,CAAC;AAC1E,WAAO;AAAA;AAAA;AAAA;AAAA,EAIT,YAAY;AAAA,EACZ,QAAQ;AAAA;AAAA;AAAA;AAAA,EAIR,YAAY;AAAA;AAAA;AAAA,EAGZ;AAEA,MAAI,aAAa,QAAW;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,MAAM,IACpB;AAAA,IACC,CAAC,SACC,gCAAgC,WAAW,wBAAwB,MAAM,YAAY,UAAU,QAAQ,CAAC,CAAC;AAAA,EAC7G,EACC,KAAK,IAAI;AAEZ,QAAM,cAAc,MAAM,WAAW,CAAC,GACnC;AAAA,IACC,CAAC,SACC,8BAA8B,WAAW,wBAAwB,MAAM,YAAY,UAAU,QAAQ,CAAC,CAAC;AAAA,EAC3G,EACC,KAAK,IAAI;AAEZ,QAAM,WAAW;AAAA,IACf,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,SAAO;AAAA;AAAA;AAAA;AAAA,EAIP,YAAY;AAAA,EACZ,QAAQ;AAAA;AAAA;AAAA;AAAA,EAIR,UAAU;AAAA,6BACiB,WAAW,QAAQ,CAAC;AAAA;AAAA;AAGjD;;;AClLO,SAAS,qBAAqB,OAAuB;AAC1D,SAAO,MAAM,QAAQ,QAAQ,EAAE;AACjC;AAEA,SAAS,QAAQ,MAAkC;AACjD,MAAI,OAAO,YAAY,aAAa;AAClC,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,QAAQ,IAAI,IAAI;AAC9B,SAAO,UAAU,UAAa,UAAU,KAAK,QAAQ;AACvD;AAEA,SAAS,qBAAqB,QAAoC;AAChE,aAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AACpC,UAAM,SAAS,oBAAI,IAAoB;AACvC,eAAW,SAAS,KAAK,MAAM,GAAG,GAAG;AACnC,YAAM,CAAC,KAAK,GAAG,IAAI,IAAI,MAAM,KAAK,EAAE,MAAM,GAAG;AAC7C,UAAI,QAAQ,UAAa,KAAK,WAAW,GAAG;AAC1C;AAAA,MACF;AACA,aAAO,IAAI,IAAI,YAAY,GAAG,KAAK,KAAK,GAAG,EAAE,QAAQ,UAAU,EAAE,CAAC;AAAA,IACpE;AACA,UAAM,QAAQ,OAAO,IAAI,OAAO;AAChC,UAAM,OAAO,OAAO,IAAI,MAAM;AAC9B,QAAI,UAAU,UAAa,SAAS,QAAW;AAC7C,aAAO,GAAG,KAAK,MAAM,IAAI;AAAA,IAC3B;AAAA,EACF;AACA,SAAO;AACT;AAKO,SAAS,gCAAgC,SAA0B;AACxE,QAAM,YAAY,QAAQ,QAAQ,IAAI,WAAW;AACjD,MAAI,cAAc,MAAM;AACtB,UAAM,gBAAgB,qBAAqB,SAAS;AACpD,QAAI,kBAAkB,QAAW;AAC/B,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,QAAQ,QAAQ,QAAQ,IAAI,mBAAmB;AACrD,QAAM,OAAO,QAAQ,QAAQ,IAAI,kBAAkB;AACnD,MAAI,UAAU,QAAQ,SAAS,MAAM;AACnC,UAAM,YAAY,KAAK,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK;AAC3C,UAAM,aAAa,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK;AAC7C,QACE,cAAc,UACd,eAAe,UACf,cAAc,IACd;AACA,aAAO,GAAG,UAAU,MAAM,SAAS;AAAA,IACrC;AAAA,EACF;AAEA,SAAO,IAAI,IAAI,QAAQ,GAAG,EAAE;AAC9B;AAOO,SAAS,oBAAoB,SAA0B;AAC5D,QAAM,SAAS,QAAQ,SAAS;AAChC,MAAI,WAAW,QAAW;AACxB,QAAI;AACF,aAAO,IAAI,IAAI,MAAM,EAAE;AAAA,IACzB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO,gCAAgC,OAAO;AAChD;AAKO,SAAS,qBAAqB,YAA4B;AAC/D,MAAI;AACF,WAAO,IAAI,IAAI,UAAU,EAAE;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKO,SAAS,uBAAuB,OAAuB;AAC5D,SAAO,qBAAqB,KAAK;AACnC;AAMO,SAAS,kBAAkB,SAA0B;AAC1D,QAAM,YAAY,QAAQ,gBAAgB;AAC1C,MAAI,cAAc,QAAW;AAC3B,QAAI;AACF,aAAO,uBAAuB,IAAI,IAAI,SAAS,EAAE,KAAK,QAAQ,OAAO,EAAE,CAAC;AAAA,IAC1E,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO,oBAAoB,OAAO;AACpC;AAYO,SAAS,wBAAiC;AAC/C,QAAM,YAAY,QAAQ,gBAAgB;AAC1C,MAAI,cAAc,QAAW;AAC3B,WAAO;AAAA,EACT;AACA,MAAI;AACF,QAAI,IAAI,SAAS;AACjB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/chunk-XUD22N3Y.js

@@ -1,156 +0,0 @@
-// src/commands/shared.ts
-import { spawn } from "child_process";
-import { constants } from "fs";
-import {
-  access,
-  chmod,
-  mkdir,
-  readFile,
-  rename,
-  rm,
-  writeFile
-} from "fs/promises";
-import { homedir } from "os";
-import { dirname, join } from "path";
-import { createInterface } from "readline/promises";
-var UsageError = class extends Error {
-  /** Process exit code for malformed command lines. */
-  exitCode = 2;
-};
-var CommandError = class extends Error {
-  /** Stable machine-readable error code. */
-  code;
-  /** Optional structured diagnostic details. */
-  details;
-  /**
-   * Create an operational CLI failure.
-   *
-   * @param code - Stable machine-readable code.
-   * @param message - Human-readable failure description.
-   * @param details - Optional structured diagnostics.
-   */
-  constructor(code, message, details) {
-    super(message);
-    this.code = code;
-    this.details = details;
-  }
-};
-function wantsJson(argv) {
-  return argv.includes("--json");
-}
-function printResult(value, json, human) {
-  if (json) {
-    process.stdout.write(`${JSON.stringify(value)}
-`);
-  } else if (human !== void 0) {
-    process.stdout.write(`${human}
-`);
-  } else if (typeof value === "string") {
-    process.stdout.write(`${value}
-`);
-  } else {
-    process.stdout.write(`${JSON.stringify(value, null, 2)}
-`);
-  }
-}
-function reportError(error, json) {
-  const usage = error instanceof UsageError;
-  const operational = error instanceof CommandError;
-  const code = operational ? error.code : usage ? "usage_error" : "command_failed";
-  const message = error instanceof Error ? error.message : String(error);
-  if (json) {
-    process.stderr.write(
-      `${JSON.stringify({
-        error: {
-          code,
-          message,
-          ...operational && error.details !== void 0 ? { details: error.details } : {}
-        }
-      })}
-`
-    );
-  } else {
-    process.stderr.write(`${message}
-`);
-  }
-  return usage ? 2 : 1;
-}
-async function confirm(message, options) {
-  if (options.yes) return true;
-  if (options.json || !process.stdin.isTTY) {
-    throw new UsageError(`${message} Pass --yes to confirm.`);
-  }
-  const prompt = createInterface({
-    input: process.stdin,
-    output: process.stdout
-  });
-  try {
-    const answer = await prompt.question(`${message} [y/N] `);
-    return answer.trim().toLowerCase() === "y";
-  } finally {
-    prompt.close();
-  }
-}
-function openBrowser(url) {
-  const [command, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
-  try {
-    const child = spawn(command, args, { detached: true, stdio: "ignore" });
-    child.on("error", () => {
-    });
-    child.unref();
-  } catch {
-  }
-}
-async function pathExists(path) {
-  try {
-    await access(path, constants.F_OK);
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function readJson(path, fallback) {
-  try {
-    return JSON.parse(await readFile(path, "utf8"));
-  } catch (error) {
-    if (error.code === "ENOENT") return fallback;
-    throw new CommandError("invalid_state", `Could not read ${path}.`, {
-      cause: error instanceof Error ? error.message : String(error)
-    });
-  }
-}
-async function writePrivateJson(path, value) {
-  const parent = dirname(path);
-  await mkdir(parent, { recursive: true, mode: 448 });
-  await chmod(parent, 448);
-  const temporary = join(
-    parent,
-    `.${path.slice(path.lastIndexOf("/") + 1)}.${process.pid}.${Date.now()}.tmp`
-  );
-  await writeFile(temporary, `${JSON.stringify(value, null, 2)}
-`, {
-    mode: 384
-  });
-  await rename(temporary, path);
-  await chmod(path, 384);
-}
-async function removeFile(path) {
-  await rm(path, { force: true });
-}
-var GLOBAL_STATE_DIR = join(homedir(), ".mcp-use");
-
-export {
-  UsageError,
-  CommandError,
-  wantsJson,
-  printResult,
-  reportError,
-  confirm,
-  openBrowser,
-  pathExists,
-  readJson,
-  writePrivateJson,
-  removeFile,
-  GLOBAL_STATE_DIR
-};
-//# sourceMappingURL=chunk-XUD22N3Y.js.map

package/dist/chunk-XUD22N3Y.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/commands/shared.ts"],"sourcesContent":["import { spawn } from \"node:child_process\";\nimport { constants } from \"node:fs\";\nimport {\n  access,\n  chmod,\n  mkdir,\n  readFile,\n  rename,\n  rm,\n  writeFile,\n} from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { createInterface } from \"node:readline/promises\";\n\n/** Usage error reported with exit code 2 by the CLI boundary. */\nexport class UsageError extends Error {\n  /** Process exit code for malformed command lines. */\n  readonly exitCode = 2;\n}\n\n/** Operational error reported with exit code 1 by the CLI boundary. */\nexport class CommandError extends Error {\n  /** Stable machine-readable error code. */\n  readonly code: string;\n  /** Optional structured diagnostic details. */\n  readonly details: unknown;\n\n  /**\n   * Create an operational CLI failure.\n   *\n   * @param code - Stable machine-readable code.\n   * @param message - Human-readable failure description.\n   * @param details - Optional structured diagnostics.\n   */\n  constructor(code: string, message: string, details?: unknown) {\n    super(message);\n    this.code = code;\n    this.details = details;\n  }\n}\n\n/** Whether a command should emit machine-readable output. */\nexport function wantsJson(argv: readonly string[]): boolean {\n  return argv.includes(\"--json\");\n}\n\n/** Emit one successful human or JSON result. */\nexport function printResult(\n  value: unknown,\n  json: boolean,\n  human?: string\n): void {\n  if (json) {\n    process.stdout.write(`${JSON.stringify(value)}\\n`);\n  } else if (human !== undefined) {\n    process.stdout.write(`${human}\\n`);\n  } else if (typeof value === \"string\") {\n    process.stdout.write(`${value}\\n`);\n  } else {\n    process.stdout.write(`${JSON.stringify(value, null, 2)}\\n`);\n  }\n}\n\n/** Report a command error using the CLI's text or JSON convention. */\nexport function reportError(error: unknown, json: boolean): number {\n  const usage = error instanceof UsageError;\n  const operational = error instanceof CommandError;\n  const code = operational\n    ? error.code\n    : usage\n      ? \"usage_error\"\n      : \"command_failed\";\n  const message = error instanceof Error ? error.message : String(error);\n  if (json) {\n    process.stderr.write(\n      `${JSON.stringify({\n        error: {\n          code,\n          message,\n          ...(operational && error.details !== undefined\n            ? { details: error.details }\n            : {}),\n        },\n      })}\\n`\n    );\n  } else {\n    process.stderr.write(`${message}\\n`);\n  }\n  return usage ? 2 : 1;\n}\n\n/** Require confirmation for destructive operations. */\nexport async function confirm(\n  message: string,\n  options: { yes: boolean; json: boolean }\n): Promise<boolean> {\n  if (options.yes) return true;\n  if (options.json || !process.stdin.isTTY) {\n    throw new UsageError(`${message} Pass --yes to confirm.`);\n  }\n  const prompt = createInterface({\n    input: process.stdin,\n    output: process.stdout,\n  });\n  try {\n    const answer = await prompt.question(`${message} [y/N] `);\n    return answer.trim().toLowerCase() === \"y\";\n  } finally {\n    prompt.close();\n  }\n}\n\n/** Best-effort dependency-free browser opener. */\nexport function openBrowser(url: string): void {\n  const [command, args]: [string, string[]] =\n    process.platform === \"darwin\"\n      ? [\"open\", [url]]\n      : process.platform === \"win32\"\n        ? [\"cmd\", [\"/c\", \"start\", \"\", url]]\n        : [\"xdg-open\", [url]];\n  try {\n    const child = spawn(command, args, { detached: true, stdio: \"ignore\" });\n    child.on(\"error\", () => {});\n    child.unref();\n  } catch {\n    // Opening a browser is always best-effort.\n  }\n}\n\n/** Check whether a filesystem path exists. */\nexport async function pathExists(path: string): Promise<boolean> {\n  try {\n    await access(path, constants.F_OK);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** Read JSON, returning `fallback` when the file does not exist. */\nexport async function readJson<T>(path: string, fallback: T): Promise<T> {\n  try {\n    return JSON.parse(await readFile(path, \"utf8\")) as T;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return fallback;\n    throw new CommandError(\"invalid_state\", `Could not read ${path}.`, {\n      cause: error instanceof Error ? error.message : String(error),\n    });\n  }\n}\n\n/** Atomically write JSON with private directory/file permissions. */\nexport async function writePrivateJson(\n  path: string,\n  value: unknown\n): Promise<void> {\n  const parent = dirname(path);\n  await mkdir(parent, { recursive: true, mode: 0o700 });\n  await chmod(parent, 0o700);\n  const temporary = join(\n    parent,\n    `.${path.slice(path.lastIndexOf(\"/\") + 1)}.${process.pid}.${Date.now()}.tmp`\n  );\n  await writeFile(temporary, `${JSON.stringify(value, null, 2)}\\n`, {\n    mode: 0o600,\n  });\n  await rename(temporary, path);\n  await chmod(path, 0o600);\n}\n\n/** Remove a private state file idempotently. */\nexport async function removeFile(path: string): Promise<void> {\n  await rm(path, { force: true });\n}\n\n/** Global mcp-use state directory. */\nexport const GLOBAL_STATE_DIR = join(homedir(), \".mcp-use\");\n"],"mappings":";AAAA,SAAS,aAAa;AACtB,SAAS,iBAAiB;AAC1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,eAAe;AACxB,SAAS,SAAS,YAAY;AAC9B,SAAS,uBAAuB;AAGzB,IAAM,aAAN,cAAyB,MAAM;AAAA;AAAA,EAE3B,WAAW;AACtB;AAGO,IAAM,eAAN,cAA2B,MAAM;AAAA;AAAA,EAE7B;AAAA;AAAA,EAEA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAST,YAAY,MAAc,SAAiB,SAAmB;AAC5D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,UAAU;AAAA,EACjB;AACF;AAGO,SAAS,UAAU,MAAkC;AAC1D,SAAO,KAAK,SAAS,QAAQ;AAC/B;AAGO,SAAS,YACd,OACA,MACA,OACM;AACN,MAAI,MAAM;AACR,YAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,KAAK,CAAC;AAAA,CAAI;AAAA,EACnD,WAAW,UAAU,QAAW;AAC9B,YAAQ,OAAO,MAAM,GAAG,KAAK;AAAA,CAAI;AAAA,EACnC,WAAW,OAAO,UAAU,UAAU;AACpC,YAAQ,OAAO,MAAM,GAAG,KAAK;AAAA,CAAI;AAAA,EACnC,OAAO;AACL,YAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,CAAI;AAAA,EAC5D;AACF;AAGO,SAAS,YAAY,OAAgB,MAAuB;AACjE,QAAM,QAAQ,iBAAiB;AAC/B,QAAM,cAAc,iBAAiB;AACrC,QAAM,OAAO,cACT,MAAM,OACN,QACE,gBACA;AACN,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,MAAI,MAAM;AACR,YAAQ,OAAO;AAAA,MACb,GAAG,KAAK,UAAU;AAAA,QAChB,OAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA,GAAI,eAAe,MAAM,YAAY,SACjC,EAAE,SAAS,MAAM,QAAQ,IACzB,CAAC;AAAA,QACP;AAAA,MACF,CAAC,CAAC;AAAA;AAAA,IACJ;AAAA,EACF,OAAO;AACL,YAAQ,OAAO,MAAM,GAAG,OAAO;AAAA,CAAI;AAAA,EACrC;AACA,SAAO,QAAQ,IAAI;AACrB;AAGA,eAAsB,QACpB,SACA,SACkB;AAClB,MAAI,QAAQ,IAAK,QAAO;AACxB,MAAI,QAAQ,QAAQ,CAAC,QAAQ,MAAM,OAAO;AACxC,UAAM,IAAI,WAAW,GAAG,OAAO,yBAAyB;AAAA,EAC1D;AACA,QAAM,SAAS,gBAAgB;AAAA,IAC7B,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ;AAAA,EAClB,CAAC;AACD,MAAI;AACF,UAAM,SAAS,MAAM,OAAO,SAAS,GAAG,OAAO,SAAS;AACxD,WAAO,OAAO,KAAK,EAAE,YAAY,MAAM;AAAA,EACzC,UAAE;AACA,WAAO,MAAM;AAAA,EACf;AACF;AAGO,SAAS,YAAY,KAAmB;AAC7C,QAAM,CAAC,SAAS,IAAI,IAClB,QAAQ,aAAa,WACjB,CAAC,QAAQ,CAAC,GAAG,CAAC,IACd,QAAQ,aAAa,UACnB,CAAC,OAAO,CAAC,MAAM,SAAS,IAAI,GAAG,CAAC,IAChC,CAAC,YAAY,CAAC,GAAG,CAAC;AAC1B,MAAI;AACF,UAAM,QAAQ,MAAM,SAAS,MAAM,EAAE,UAAU,MAAM,OAAO,SAAS,CAAC;AACtE,UAAM,GAAG,SAAS,MAAM;AAAA,IAAC,CAAC;AAC1B,UAAM,MAAM;AAAA,EACd,QAAQ;AAAA,EAER;AACF;AAGA,eAAsB,WAAW,MAAgC;AAC/D,MAAI;AACF,UAAM,OAAO,MAAM,UAAU,IAAI;AACjC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,eAAsB,SAAY,MAAc,UAAyB;AACvE,MAAI;AACF,WAAO,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;AAAA,EAChD,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO;AAC/D,UAAM,IAAI,aAAa,iBAAiB,kBAAkB,IAAI,KAAK;AAAA,MACjE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC9D,CAAC;AAAA,EACH;AACF;AAGA,eAAsB,iBACpB,MACA,OACe;AACf,QAAM,SAAS,QAAQ,IAAI;AAC3B,QAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACpD,QAAM,MAAM,QAAQ,GAAK;AACzB,QAAM,YAAY;AAAA,IAChB;AAAA,IACA,IAAI,KAAK,MAAM,KAAK,YAAY,GAAG,IAAI,CAAC,CAAC,IAAI,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC;AAAA,EACxE;AACA,QAAM,UAAU,WAAW,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,GAAM;AAAA,IAChE,MAAM;AAAA,EACR,CAAC;AACD,QAAM,OAAO,WAAW,IAAI;AAC5B,QAAM,MAAM,MAAM,GAAK;AACzB;AAGA,eAAsB,WAAW,MAA6B;AAC5D,QAAM,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC;AAChC;AAGO,IAAM,mBAAmB,KAAK,QAAQ,GAAG,UAAU;","names":[]}