mcp-use 2.0.0-beta.6 → 2.0.0-beta.7

package/dist/chunk-FCGJJVL2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/landing.ts"],"sourcesContent":["/**\n * Landing page generator for MCP server endpoints\n *\n * Generates SEO-friendly HTML with connection instructions for MCP servers\n * from Claude Code, Cursor, VS Code, ChatGPT, and Manufact Inspector (hosted).\n */\n\n/**\n * Escapes HTML special characters to prevent XSS in user-provided content.\n */\nfunction escapeHtml(text: string): string {\n  return text\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\");\n}\n\n/** Serialize data for an inline JSON script without creating an HTML end tag. */\nfunction serializeScriptJson(value: unknown): string {\n  return JSON.stringify(value)\n    .replace(/</g, \"\\\\u003c\")\n    .replace(/>/g, \"\\\\u003e\");\n}\n\n/**\n * Sanitizes a server name for use in filenames and URLs.\n * Replaces non-alphanumeric characters with underscores and converts to lowercase.\n */\nfunction sanitizeServerName(name: string): string {\n  return name.replace(/[^a-zA-Z0-9-_]/g, \"_\").toLowerCase();\n}\n\n/**\n * Generates a Cursor deep link for installing an MCP server.\n * The config is base64-encoded JSON containing the server URL.\n */\nfunction generateCursorDeepLink(url: string, name: string): string {\n  const config = { url };\n  const configJson = JSON.stringify(config);\n\n  // Use Buffer in Node.js or btoa in browser-like environments\n  const base64Config =\n    typeof Buffer !== \"undefined\"\n      ? Buffer.from(configJson).toString(\"base64\")\n      : btoa(configJson);\n\n  const sanitizedName = sanitizeServerName(name);\n  return `cursor://anysphere.cursor-deeplink/mcp/install?config=${encodeURIComponent(base64Config)}&name=${encodeURIComponent(sanitizedName)}`;\n}\n\n/**\n * Generates a VS Code deep link for installing an MCP server.\n * The config is URL-encoded JSON containing the server URL.\n */\nfunction generateVSCodeDeepLink(url: string, name: string): string {\n  const config = {\n    url,\n    name: sanitizeServerName(name),\n    type: \"http\",\n  };\n  const configJson = JSON.stringify(config);\n  const urlEncodedConfig = encodeURIComponent(configJson);\n  return `vscode:mcp/install?${urlEncodedConfig}`;\n}\n\n/**\n * Generates a VS Code Insiders deep link for installing an MCP server.\n * The config is URL-encoded JSON containing the server URL.\n */\nfunction generateVSCodeInsidersDeepLink(url: string, name: string): string {\n  const config = {\n    url,\n    name: sanitizeServerName(name),\n    type: \"http\",\n  };\n  const configJson = JSON.stringify(config);\n  const urlEncodedConfig = encodeURIComponent(configJson);\n  return `vscode-insiders:mcp/install?${urlEncodedConfig}`;\n}\n\n/**\n * Generates a Claude Code CLI command for adding an MCP server.\n */\nfunction generateClaudeCommand(url: string, name: string): string {\n  const sanitizedName = sanitizeServerName(name);\n  const quotedUrl = `'${url.replace(/'/g, \"'\\\\''\")}'`;\n  return `claude mcp add --transport http \"${sanitizedName}\" ${quotedUrl}`;\n}\n\n/** Hosted Manufact Inspector base (same as cloud deploy “Open in new tab”). */\nconst MANUFACT_INSPECTOR_ORIGIN = \"https://inspector.manufact.com\";\n\n/**\n * Deep link to hosted Manufact Inspector with this MCP server URL pre-filled\n * and the Chat tab selected (`tab=chat`).\n */\nfunction getManufactInspectorUrl(serverUrl: string): string {\n  const params = new URLSearchParams({\n    autoConnect: serverUrl,\n    tab: \"chat\",\n  });\n  return `${MANUFACT_INSPECTOR_ORIGIN}/inspector?${params.toString()}`;\n}\n\nconst LOGO_SVG_PATHS = {\n  path1:\n    \"M105.933 0C164.437 0.000115889 211.865 47.607 211.865 106.333C211.865 131.828 210.494 158.401 221.068 181.6L228.976 198.947C243.585 230.997 269.266 256.7 301.304 271.336L316.156 278.121C340.143 289.079 367.695 287.335 394.067 287.335C452.572 287.335 500 334.942 500 393.668C500 452.394 452.572 500.001 394.067 500.001C335.563 500.001 288.135 452.394 288.135 393.668C288.135 368.974 289.241 343.275 278.992 320.807L270.587 302.38C255.949 270.289 230.214 244.565 198.118 229.939L180.164 221.758C157.282 211.331 131.078 212.666 105.933 212.666C47.4278 212.666 4.92992e-05 165.059 0 106.333C0 47.607 47.4278 0 105.933 0Z\",\n  circle: { cx: 100.426, cy: 399.575, r: 100.426 },\n  path2:\n    \"M500 100.426C500 155.889 455.037 200.851 399.574 200.851C344.11 200.851 299.148 155.889 299.148 100.426C299.148 44.962 344.11 0 399.574 0C455.037 0 500 44.962 500 100.426Z\",\n};\n\nconst LINE_INTERSECTION_PATH =\n  \"M10.5 4C10.5 7.31371 7.81371 10 4.5 10H0.5V11H4.5C7.81371 11 10.5 13.6863 10.5 17V21H11.5V17C11.5 13.6863 14.1863 11 17.5 11H21.5V10H17.5C14.1863 10 11.5 7.31371 11.5 4V0H10.5V4Z\";\n\n/** Returns the inline WebGL mesh gradient script (no deps). */\nfunction getMeshGradientScript(): string {\n  const VERT = `#version 300 es\nin vec4 a_position;\nout vec2 v_objectUV;\nvoid main(){\n  gl_Position=a_position;\n  v_objectUV=a_position.xy*0.5+0.5;\n}`;\n\n  const FRAG = `#version 300 es\nprecision mediump float;\nuniform float u_time;\nuniform vec4 u_colors[4];\nuniform float u_colorsCount;\nuniform float u_distortion;\nuniform float u_swirl;\nuniform float u_grainMixer;\nuniform float u_grainOverlay;\nin vec2 v_objectUV;\nout vec4 fragColor;\n#define PI 3.14159265359\nvec2 rotate(vec2 uv,float th){return mat2(cos(th),sin(th),-sin(th),cos(th))*uv;}\nfloat hash21(vec2 p){\n  p=fract(p*vec2(0.3183099,0.3678794))+0.1;\n  p+=dot(p,p+19.19);\n  return fract(p.x*p.y);\n}\nfloat valueNoise(vec2 st){\n  vec2 i=floor(st);vec2 f=fract(st);\n  float a=hash21(i),b=hash21(i+vec2(1.,0.)),c=hash21(i+vec2(0.,1.)),d=hash21(i+vec2(1.,1.));\n  vec2 u=f*f*(3.-2.*f);\n  return mix(mix(a,b,u.x),mix(c,d,u.x),u.y);\n}\nvec2 getPosition(int i,float t){\n  float a=float(i)*.37,b=.6+fract(float(i)/3.)*.9,c=.8+fract(float(i+1)/4.);\n  float x=sin(t*b+a),y=cos(t*c+a*1.5);\n  return .5+.5*vec2(x,y);\n}\nvoid main(){\n  vec2 uv=v_objectUV;uv+=.5;\n  vec2 grainUV=uv*1000.;\n  float grain=valueNoise(grainUV);\n  float mixerGrain=.4*u_grainMixer*(grain-.5);\n  float t=.5*(u_time+41.5);\n  float radius=smoothstep(0.,1.,length(uv-.5));\n  float center=1.-radius;\n  for(float i=1.;i<=2.;i++){\n    uv.x+=u_distortion*center/i*sin(t+i*.4*smoothstep(0.,1.,uv.y))*cos(.2*t+i*2.4*smoothstep(0.,1.,uv.y));\n    uv.y+=u_distortion*center/i*cos(t+i*2.*smoothstep(0.,1.,uv.x));\n  }\n  vec2 uvR=uv-vec2(.5);\n  float angle=3.*u_swirl*radius;\n  uvR=rotate(uvR,-angle);uvR+=vec2(.5);\n  vec3 color=vec3(0.);float opacity=0.,totalWeight=0.;\n  for(int i=0;i<4;i++){\n    if(i>=int(u_colorsCount))break;\n    vec2 pos=getPosition(i,t)+mixerGrain;\n    vec3 cf=u_colors[i].rgb*u_colors[i].a;\n    float opacityF=u_colors[i].a;\n    float dist=length(uvR-pos);\n    dist=pow(dist,3.5);\n    float w=1./(dist+1e-3);\n    color+=cf*w;opacity+=opacityF*w;totalWeight+=w;\n  }\n  color/=max(1e-4,totalWeight);\n  opacity/=max(1e-4,totalWeight);\n  float grainO=valueNoise(rotate(grainUV,1.)+vec2(3.));\n  grainO=mix(grainO,valueNoise(rotate(grainUV,2.)+vec2(-1.)),.5);\n  grainO=pow(grainO,1.3);\n  float grainOV=grainO*2.-1.;\n  vec3 grainOC=vec3(step(0.,grainOV));\n  float grainOS=u_grainOverlay*abs(grainOV);\n  grainOS=pow(grainOS,.8);\n  color=mix(color,grainOC,.35*grainOS);\n  opacity+=.5*grainOS;\n  fragColor=vec4(color,clamp(opacity,0.,1.));\n}`;\n\n  return `(function(){\nvar c=document.getElementById('mesh-bg');\nif(!c)return;\nvar wrap=c.parentElement;\nif(!wrap)return;\nvar gl=c.getContext('webgl2');\nif(!gl)return;\nfunction compileShader(typ,src){\n  var s=gl.createShader(typ);\n  gl.shaderSource(s,src);\n  gl.compileShader(s);\n  if(!gl.getShaderParameter(s,gl.COMPILE_STATUS)){console.error(gl.getShaderInfoLog(s));return null;}\n  return s;\n}\nvar vs=compileShader(gl.VERTEX_SHADER,${JSON.stringify(VERT)});\nvar fs=compileShader(gl.FRAGMENT_SHADER,${JSON.stringify(FRAG)});\nif(!vs||!fs)return;\nvar prog=gl.createProgram();\ngl.attachShader(prog,vs);\ngl.attachShader(prog,fs);\ngl.linkProgram(prog);\nif(!gl.getProgramParameter(prog,gl.LINK_STATUS)){console.error(gl.getProgramInfoLog(prog));return;}\ngl.useProgram(prog);\nvar posLoc=gl.getAttribLocation(prog,'a_position');\nvar buf=gl.createBuffer();\ngl.bindBuffer(gl.ARRAY_BUFFER,buf);\ngl.bufferData(gl.ARRAY_BUFFER,new Float32Array([-1,-1,1,-1,-1,1,-1,1,1,-1,1,1]),gl.STATIC_DRAW);\ngl.enableVertexAttribArray(posLoc);\ngl.vertexAttribPointer(posLoc,2,gl.FLOAT,false,0,0);\nfunction hexToRgba(hex){\n  var r=(parseInt(hex.slice(1,3),16))/255;\n  var g=(parseInt(hex.slice(3,5),16))/255;\n  var b=(parseInt(hex.slice(5,7),16))/255;\n  return[r,g,b,1];\n}\nvar colors=[hexToRgba('#e0eaff'),hexToRgba('#f9ffbd'),hexToRgba('#dedede'),hexToRgba('#ffffff')];\nvar uTime=gl.getUniformLocation(prog,'u_time');\nvar uColors=[gl.getUniformLocation(prog,'u_colors[0]'),gl.getUniformLocation(prog,'u_colors[1]'),gl.getUniformLocation(prog,'u_colors[2]'),gl.getUniformLocation(prog,'u_colors[3]')];\nvar uColorsCount=gl.getUniformLocation(prog,'u_colorsCount');\nvar uDistortion=gl.getUniformLocation(prog,'u_distortion');\nvar uSwirl=gl.getUniformLocation(prog,'u_swirl');\nvar uGrainMixer=gl.getUniformLocation(prog,'u_grainMixer');\nvar uGrainOverlay=gl.getUniformLocation(prog,'u_grainOverlay');\nvar time=0,speed=1,raf;\nfunction resize(){\n  var dpr=Math.min(2,window.devicePixelRatio||1);\n  c.width=Math.floor(wrap.clientWidth*dpr);\n  c.height=Math.floor(wrap.clientHeight*dpr);\n  gl.viewport(0,0,c.width,c.height);\n}\nfunction draw(){\n  if(document.hidden){raf=requestAnimationFrame(draw);return;}\n  time+=0.016*speed;\n  gl.uniform1f(uTime,time);\n  for(var i=0;i<4;i++)gl.uniform4fv(uColors[i],colors[i]);\n  gl.uniform1f(uColorsCount,4);\n  gl.uniform1f(uDistortion,0.8);\n  gl.uniform1f(uSwirl,0.1);\n  gl.uniform1f(uGrainMixer,0);\n  gl.uniform1f(uGrainOverlay,0.3);\n  gl.drawArrays(gl.TRIANGLES,0,6);\n  raf=requestAnimationFrame(draw);\n}\nresize();\nnew ResizeObserver(resize).observe(wrap);\ndraw();\n})();`;\n}\n\n/** A tool shown in the landing page's primitives list. */\nexport interface LandingPageTool {\n  /** Protocol-facing tool name. */\n  name: string;\n\n  /** Optional human-readable tool title. */\n  title?: string;\n\n  /** Optional tool description. */\n  description?: string;\n}\n\n/** A prompt shown in the landing page's primitives list. */\nexport interface LandingPagePrompt {\n  /** Protocol-facing prompt name. */\n  name: string;\n\n  /** Optional human-readable prompt title. */\n  title?: string;\n\n  /** Optional prompt description. */\n  description?: string;\n}\n\n/** A static resource shown in the landing page's primitives list. */\nexport interface LandingPageResource {\n  /** Resource URI. */\n  uri: string;\n\n  /** Optional protocol-facing resource name. */\n  name?: string;\n\n  /** Optional human-readable resource title. */\n  title?: string;\n\n  /** Optional resource description. */\n  description?: string;\n}\n\n/** Inputs used to render the v1-compatible MCP server landing page. */\nexport interface LandingPageOptions {\n  /** Protocol-facing server name. */\n  name: string;\n\n  /** Optional human-readable server title used as the page heading. */\n  title?: string;\n\n  /** Server version shown beside the heading. */\n  version: string;\n\n  /** Absolute public URL of the MCP endpoint. */\n  url: string;\n\n  /** Optional server description. */\n  description?: string;\n\n  /** Optional tools shown in the primitives list. */\n  tools?: readonly LandingPageTool[];\n\n  /** Optional prompts shown in the primitives list. */\n  prompts?: readonly LandingPagePrompt[];\n\n  /** Optional static resources shown in the primitives list. */\n  resources?: readonly LandingPageResource[];\n\n  /** Optional absolute URL for the icon displayed above the server heading. */\n  iconUrl?: string;\n}\n\n/**\n * Generates an HTML landing page with connection instructions\n * for Claude Code, Cursor, VS Code, ChatGPT, and Manufact Inspector.\n *\n * @param options - Server identity, endpoint, icon, and primitive metadata.\n * @returns HTML landing page with connection instructions\n */\nexport function generateLandingPage(options: LandingPageOptions): string {\n  const {\n    name: protocolName,\n    title,\n    version,\n    url,\n    description,\n    tools,\n    prompts,\n    resources,\n    iconUrl,\n  } = options;\n  const name = title ?? protocolName;\n  const cursorDeepLink = generateCursorDeepLink(url, name);\n  const vscodeDeepLink = generateVSCodeDeepLink(url, name);\n  const vscodeInsidersDeepLink = generateVSCodeInsidersDeepLink(url, name);\n  const claudeCommand = generateClaudeCommand(url, name);\n  const manufactInspectorUrl = getManufactInspectorUrl(url);\n\n  const safeName = escapeHtml(name);\n  const safeDescription = description ? escapeHtml(description) : \"\";\n  const rawMetaDescription =\n    description ||\n    `${name} MCP Server — Connect with Claude Code, Cursor, and VS Code. Model Context Protocol server.`;\n  const metaDescription = escapeHtml(rawMetaDescription);\n  const pageTitle = `${safeName} MCP Server — Connect with Claude Code, Cursor & VS Code`;\n\n  const jsonLd = serializeScriptJson({\n    \"@context\": \"https://schema.org\",\n    \"@type\": \"SoftwareApplication\",\n    name: name,\n    softwareVersion: version,\n    description: rawMetaDescription,\n    applicationCategory: \"DeveloperApplication\",\n  });\n\n  const normalizedTools: LandingPageTool[] =\n    tools && tools.length > 0\n      ? tools.map((tool) => ({\n          name: tool.title ?? tool.name,\n          ...(tool.description !== undefined && {\n            description: tool.description,\n          }),\n        }))\n      : [];\n\n  const toolsListHtml =\n    normalizedTools.length > 0\n      ? normalizedTools\n          .map(\n            (t) =>\n              `<div class=\"spec-item\"><code class=\"spec-name\">${escapeHtml(t.name)}</code>${t.description ? `<p class=\"spec-desc\">${escapeHtml(t.description)}</p>` : \"\"}</div>`\n          )\n          .join(\"\\n\")\n      : \"\";\n\n  const promptsListHtml =\n    prompts && prompts.length > 0\n      ? prompts\n          .map(\n            (p) =>\n              `<div class=\"spec-item\"><code class=\"spec-name\">${escapeHtml(p.title ?? p.name)}</code>${p.description ? `<p class=\"spec-desc\">${escapeHtml(p.description)}</p>` : \"\"}</div>`\n          )\n          .join(\"\\n\")\n      : \"\";\n\n  const resourcesListHtml =\n    resources && resources.length > 0\n      ? resources\n          .map(\n            (r) =>\n              `<div class=\"spec-item\"><code class=\"spec-uri\">${escapeHtml(r.uri)}</code>${r.description ? `<p class=\"spec-desc\">${escapeHtml(r.description)}</p>` : \"\"}</div>`\n          )\n          .join(\"\\n\")\n      : \"\";\n\n  return `<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"UTF-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>${pageTitle}</title>\n<meta name=\"description\" content=\"${metaDescription}\">\n<meta property=\"og:title\" content=\"${pageTitle}\">\n<meta property=\"og:description\" content=\"${metaDescription}\">\n<meta property=\"og:type\" content=\"website\">\n<meta name=\"twitter:card\" content=\"summary\">\n<meta name=\"twitter:title\" content=\"${pageTitle}\">\n<meta name=\"twitter:description\" content=\"${metaDescription}\">\n<link rel=\"preconnect\" href=\"https://fonts.googleapis.com\">\n<link rel=\"preconnect\" href=\"https://fonts.gstatic.com\" crossorigin>\n<link href=\"https://fonts.googleapis.com/css2?family=Outfit:wght@400;500;600;700&display=swap\" rel=\"stylesheet\">\n<script type=\"application/ld+json\">${jsonLd}</script>\n<style>\n* { box-sizing: border-box; }\nbody {\n  margin: 0;\n  font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Helvetica, Arial, sans-serif;\n  font-size: 16px;\n  line-height: 1.6;\n  color: #1e293b;\n  background-color: #fdfcfc;\n  min-height: 100vh;\n}\n.layout {\n  max-width: 48rem;\n  margin: 0 auto;\n  padding: 2rem 1.5rem;\n  position: relative;\n}\n.rail-left, .rail-right {\n  position: absolute;\n  top: 0;\n  bottom: 0;\n  width: 1px;\n  background: rgba(0,0,0,0.08);\n}\n.rail-left { left: 1.5rem; }\n.rail-right { right: 1.5rem; }\n.rail-top, .rail-bottom {\n  height: 1px;\n  background: rgba(0,0,0,0.08);\n  position: absolute;\n  left: 1.5rem;\n  right: 1.5rem;\n}\n.rail-top { top: 0; }\n.rail-bottom { bottom: 0; }\n.corner {\n  position: absolute;\n  width: 22px;\n  height: 21px;\n  color: rgba(0,0,0,0.08);\n}\n.corner-tl { left: 1.5rem; top: 0; transform: translate(-50%, -50%); }\n.corner-tr { right: 1.5rem; top: 0; transform: translate(50%, -50%); left: auto; }\n.corner-bl { left: 1.5rem; bottom: 0; transform: translate(-50%, 50%); top: auto; }\n.corner-br { right: 1.5rem; bottom: 0; transform: translate(50%, 50%); left: auto; top: auto; }\n.card {\n  background: #fff;\n  border-top: 1px solid rgba(0,0,0,0.08);\n  border-bottom: 1px solid rgba(0,0,0,0.08);\n  margin-bottom: 1.5rem;\n  overflow: hidden;\n}\n.card-header {\n  padding: 1.5rem 1.5rem 0.5rem;\n}\n.card-content { padding: 0 1.5rem 1.5rem; }\n.hero-card .card-header {\n  text-align: center;\n  padding: 0 1.5rem 1.25rem;\n}\n.hero-card .card-header.has-icon {\n  padding-top: 1.5rem;\n}\n.hero-icon {\n  width: 64px;\n  height: 64px;\n  border-radius: 14px;\n  object-fit: contain;\n  margin-bottom: 0.75rem;\n}\n.hero-row {\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  gap: 0.75rem;\n  margin-bottom: 0.35rem;\n}\n.hero h1 {\n  font-size: 1.75rem;\n  font-weight: 700;\n  color: #172037;\n  margin: 0.75rem 0 0;\n}\n.hero-card .card-header.has-icon .hero h1 { margin-top: 0; }\n.hero .version { font-size: 0.95rem; color: #64748b; font-weight: 500; }\n.hero-description {\n  color: rgba(23,32,55,0.8);\n  font-size: 1rem;\n  margin: 0.35rem 0 0;\n  max-width: 36rem;\n  margin-left: auto;\n  margin-right: auto;\n}\n.logo-symbol {\n  display: inline-block;\n  cursor: default;\n  flex-shrink: 0;\n}\n.logo-symbol svg {\n  width: 32px;\n  height: 32px;\n  color: #172037;\n}\n.logo-fill { transition: opacity 0.2s ease; }\n.logo-stroke path,\n.logo-stroke circle {\n  fill: none;\n  stroke: currentColor;\n  stroke-width: 6;\n  stroke-linecap: round;\n  stroke-linejoin: round;\n  stroke-dasharray: 2000;\n  stroke-dashoffset: 2000;\n  opacity: 0;\n}\n.logo-symbol:hover .logo-fill {\n  animation: logo-fill-out 0.2s forwards, logo-fill-in 0.6s 0.9s forwards;\n}\n.logo-symbol:hover .logo-stroke path,\n.logo-symbol:hover .logo-stroke circle {\n  opacity: 1;\n  animation: logo-draw 0.7s 0.2s ease-in-out forwards;\n}\n@keyframes logo-fill-out { to { opacity: 0; } }\n@keyframes logo-fill-in { to { opacity: 1; } }\n@keyframes logo-draw { to { stroke-dashoffset: 0; } }\n.footer-content { text-align: center; padding: 2.5rem 1.5rem; border-top: 1px solid rgba(0,0,0,0.08); display: flex; justify-content: center; align-items: center; }\n.footer-brand-link { justify-content: center; }\n.footer-brand-link .logo-symbol svg { width: 22px; height: 22px; }\n.hero-powered { display: inline-flex; align-items: center; justify-content: center; gap: 0.35rem; margin-top: 0.75rem; font-family: \"Outfit\", -apple-system, BlinkMacSystemFont, sans-serif; font-size: 0.875rem; font-weight: 500; color: rgba(23,32,55,0.6); }\n.hero-powered a { color: #000; text-decoration: none; display: inline-flex; align-items: center; }\n.hero-powered a:hover { text-decoration: underline; }\n.footer-brand-link { display: inline-flex; align-items: center; gap: 0.5rem; font-family: \"Outfit\", -apple-system, BlinkMacSystemFont, sans-serif; font-size: 1.5rem; font-weight: 600; color: #172037; text-decoration: none; }\n.footer-brand-link:hover { color: #0f172a; }\n.hero-url-block { display: flex; justify-content: center; margin: 0.75rem 0; }\n.hero-cta-row {\n  display: flex;\n  justify-content: center;\n  margin: 0.35rem 0 0.5rem;\n}\n.hero-primary-btn {\n  display: inline-block;\n  padding: 0.625rem 1.25rem;\n  background: linear-gradient(180deg, #1e293b 0%, #0f172a 100%);\n  color: #fff;\n  border-radius: 9999px;\n  text-decoration: none;\n  font-weight: 600;\n  font-size: 0.9375rem;\n  box-shadow: 0 1px 2px rgba(0,0,0,0.12), 0 2px 8px rgba(15,23,42,0.15);\n  transition: background 0.15s;\n  border: 1px solid rgba(0,0,0,0.12);\n}\n.hero-primary-btn:hover {\n  background: linear-gradient(180deg, #334155 0%, #1e293b 100%);\n  text-decoration: none;\n  color: #fff;\n}\n.hero-url-block .url-block { max-width: 100%; }\n.hero-url-block .url-box {\n  font-size: 0.938rem;\n  background: #fff;\n  border: 1px solid rgba(0,0,0,0.12);\n  border-radius: 9999px;\n  padding: 0.75rem 3rem 0.75rem 1rem;\n  margin: 1rem 0;\n}\n.hero-powered .gh-icon { width: 18px; height: 18px; margin-right: 0.25rem; vertical-align: -0.2em; }\n.hero-powered .gh-shield { height: 18px; width: auto; margin-left: 0.4rem; vertical-align: -0.2em; }\n.card-title { font-size: 1.25rem; font-weight: 600; color: #172037; margin: 0 0 0.25rem; }\n.card-desc { font-size: 0.875rem; color: rgba(23,32,55,0.8); margin: 0 0 1rem; }\n.url-block {\n  position: relative;\n  margin: 1rem 0;\n}\n.url-block .url-box {\n  margin: 0;\n  padding-right: 2.75rem;\n}\n.url-block .copy-btn { top: 50%; right: 0.5rem; transform: translateY(-50%); }\n.url-box {\n  font-family: ui-monospace, monospace;\n  font-size: 0.813rem;\n  background: #f8fafc;\n  padding: 0.5rem 0.75rem;\n  border-radius: 6px;\n  color: #475569;\n  margin: 1rem 0;\n}\n.spec-section { margin-top: 1.5rem; }\n.spec-section h3 { font-size: 1rem; font-weight: 600; color: #172037; margin: 0 0 0.75rem; }\n.spec-item { margin-bottom: 1rem; padding-bottom: 1rem; border-bottom: 1px solid #f1f5f9; }\n.spec-item:last-child { margin-bottom: 0; padding-bottom: 0; border-bottom: none; }\n.spec-name, .spec-uri { font-family: ui-monospace, monospace; font-size: 0.813rem; background: #f1f5f9; padding: 0.2rem 0.4rem; border-radius: 4px; }\n.spec-uri { word-break: break-all; }\n.spec-desc { margin: 0.5rem 0 0; font-size: 0.875rem; color: #64748b; line-height: 1.5; }\n.tabs-row {\n  display: flex;\n  gap: 2px;\n  background: rgba(23,32,55,0.05);\n  padding: 3px;\n  border-radius: 8px;\n  margin-bottom: 1.5rem;\n  flex-wrap: wrap;\n}\n.tab {\n  flex: 1;\n  min-width: 80px;\n  padding: 0.5rem 0.75rem;\n  font-size: 0.813rem;\n  font-weight: 500;\n  border: none;\n  border-radius: 6px;\n  background: transparent;\n  color: #64748b;\n  cursor: pointer;\n  transition: background 0.15s, color 0.15s;\n}\n.tab:hover { color: #172037; background: rgba(255,255,255,0.6); }\n.tab.active { background: #fff; color: #172037; border: 1px solid rgba(0,0,0,0.1); box-shadow: 0 1px 2px rgba(0,0,0,0.04); }\n.tab-panel { display: none; }\n.tab-panel.active { display: block; }\n.tab-panel h3 { font-size: 1.125rem; font-weight: 600; color: #172037; margin: 0 0 1rem; }\n.install-btn {\n  display: inline-block;\n  padding: 0.375rem 0.875rem;\n  background: #0f172a;\n  color: #fff;\n  border-radius: 9999px;\n  text-decoration: none;\n  font-weight: 500;\n  font-size: 0.813rem;\n  margin-bottom: 1rem;\n  transition: background 0.15s;\n}\n.install-btn:hover { background: #1e293b; }\n.code-block {\n  position: relative;\n  margin: 1rem 0;\n}\n.code-block pre {\n  margin: 0;\n  padding: 0.5rem 0.75rem;\n  background: #f8fafc;\n  color: #475569;\n  border-radius: 8px;\n  font-family: ui-monospace, monospace;\n  font-size: 0.875rem;\n  overflow-x: auto;\n  border: 1px solid rgba(0,0,0,0.08);\n}\n.code-block .copy-btn { top: 50%; right: 0.375rem; transform: translateY(-50%); }\n.copy-btn {\n  position: absolute;\n  top: 0.5rem;\n  right: 0.5rem;\n  width: 2rem;\n  height: 2rem;\n  padding: 0;\n  border: none;\n  border-radius: 6px;\n  background: #fff;\n  color: #172037;\n  cursor: pointer;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  transition: background 0.15s;\n}\n.copy-btn:hover { background: #f1f5f9; }\n.copy-btn.copied { background: #fff; color: #172037; }\n.copy-btn svg { width: 14px; height: 14px; }\nol.steps { margin: 0; padding-left: 1.25rem; }\nol.steps li { margin: 0.5rem 0; color: #475569; }\na { color: #0522a5; text-decoration: none; }\na:hover { text-decoration: underline; }\n.hero-gradient-wrap {\n  position: relative;\n  padding: 1.5rem;\n  overflow: hidden;\n}\n.hero-gradient-wrap canvas {\n  position: absolute;\n  inset: 0;\n  width: 100%;\n  height: 100%;\n  display: block;\n}\n.hero-inner {\n  position: relative;\n  z-index: 1;\n  background: rgba(253,252,252,0.9);\n  -webkit-backdrop-filter: blur(12px);\n  backdrop-filter: blur(12px);\n  padding: 1.25rem 1.5rem;\n  border: 1px solid rgba(0,0,0,0.06);\n}\n.hero-inner .card-header { padding: 0; }\n.hero-inner .card-header.has-icon { padding-top: 0.5rem; }\n</style>\n</head>\n<body>\n<div class=\"layout\">\n  <div class=\"rail-left\"></div>\n  <div class=\"rail-right\"></div>\n  <div class=\"rail-top\"></div>\n  <div class=\"rail-bottom\"></div>\n  <svg class=\"corner corner-tl\" viewBox=\"0 0 22 21\" fill=\"none\"><path d=\"${LINE_INTERSECTION_PATH}\" fill=\"currentColor\"/></svg>\n  <svg class=\"corner corner-tr\" viewBox=\"0 0 22 21\" fill=\"none\"><path d=\"${LINE_INTERSECTION_PATH}\" fill=\"currentColor\"/></svg>\n  <svg class=\"corner corner-bl\" viewBox=\"0 0 22 21\" fill=\"none\"><path d=\"${LINE_INTERSECTION_PATH}\" fill=\"currentColor\"/></svg>\n  <svg class=\"corner corner-br\" viewBox=\"0 0 22 21\" fill=\"none\"><path d=\"${LINE_INTERSECTION_PATH}\" fill=\"currentColor\"/></svg>\n\n  <div class=\"card hero-card\">\n    <div class=\"hero-gradient-wrap\" id=\"hero-gradient-wrap\">\n      <canvas id=\"mesh-bg\" aria-hidden=\"true\"></canvas>\n      <div class=\"hero-inner\">\n        <div class=\"card-header ${iconUrl ? \"has-icon\" : \"\"}\">\n          ${iconUrl ? `<img src=\"${escapeHtml(iconUrl)}\" alt=\"\" class=\"hero-icon\" width=\"64\" height=\"64\" />` : \"\"}\n          <div class=\"hero-row\">\n            <h1>${safeName} <span class=\"version\">(v${escapeHtml(version)})</span></h1>\n          </div>\n          ${safeDescription ? `<p class=\"hero-description\">${safeDescription}</p>` : \"\"}\n          <div class=\"hero-url-block\">\n            <div class=\"url-block\">\n              <div class=\"url-box\" data-copy=\"${escapeHtml(url)}\">${escapeHtml(url)}</div>\n              <button type=\"button\" class=\"copy-btn\" data-copy=\"${escapeHtml(url)}\" aria-label=\"Copy URL\"><svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\"><rect width=\"14\" height=\"14\" x=\"8\" y=\"8\" rx=\"2\"/><path d=\"M4 16c-1.1 0-2-.9-2-2V4c0-1.1.9-2 2-2h10c1.1 0 2 .9 2 2\"/></svg></button>\n            </div>\n          </div>\n          <div class=\"hero-cta-row\">\n            <a href=\"${escapeHtml(manufactInspectorUrl)}\" class=\"hero-primary-btn\" target=\"_blank\" rel=\"noopener noreferrer\">Open in Inspector</a>\n          </div>\n          <div class=\"hero-powered\">\n            <span>Powered by</span>\n            <a href=\"https://github.com/mcp-use/mcp-use\" target=\"_blank\" rel=\"noopener noreferrer\">\n              <svg class=\"gh-icon\" viewBox=\"0 0 16 16\" fill=\"currentColor\" aria-hidden=\"true\"><path d=\"M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27.68 0 1.36.09 2 .27 1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.013 8.013 0 0016 8c0-4.42-3.58-8-8-8z\"/></svg>\n              github.com/mcp-use/mcp-use\n              <img src=\"https://img.shields.io/github/stars/mcp-use/mcp-use\" alt=\"GitHub stars\" class=\"gh-shield\" width=\"90\" height=\"18\" loading=\"lazy\" />\n            </a>\n          </div>\n        </div>\n      </div>\n    </div>\n  </div>\n\n  <div class=\"card\">\n    <div class=\"card-header\">\n      <h2 class=\"card-title\">Installation Guide</h2>\n      <p class=\"card-desc\">Choose your preferred MCP client</p>\n    </div>\n    <div class=\"card-content\">\n      <div class=\"tabs-row\" role=\"tablist\">\n        <button type=\"button\" class=\"tab active\" role=\"tab\" data-tab=\"claude-code\" aria-selected=\"true\">Claude Code</button>\n        <button type=\"button\" class=\"tab\" role=\"tab\" data-tab=\"cursor\" aria-selected=\"false\">Cursor</button>\n        <button type=\"button\" class=\"tab\" role=\"tab\" data-tab=\"vscode\" aria-selected=\"false\">VS Code</button>\n        <button type=\"button\" class=\"tab\" role=\"tab\" data-tab=\"vscode-insiders\" aria-selected=\"false\">VS Code Insiders</button>\n        <button type=\"button\" class=\"tab\" role=\"tab\" data-tab=\"chatgpt\" aria-selected=\"false\">ChatGPT</button>\n      </div>\n\n      <div id=\"panel-claude-code\" class=\"tab-panel active\">\n        <h3>Install in Claude Code</h3>\n        <p>Run this command in your terminal:</p>\n        <div class=\"code-block\">\n          <pre data-copy=\"${escapeHtml(claudeCommand)}\">${escapeHtml(claudeCommand)}</pre>\n          <button type=\"button\" class=\"copy-btn\" aria-label=\"Copy\"><svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\"><rect width=\"14\" height=\"14\" x=\"8\" y=\"8\" rx=\"2\"/><path d=\"M4 16c-1.1 0-2-.9-2-2V4c0-1.1.9-2 2-2h10c1.1 0 2 .9 2 2\"/></svg></button>\n        </div>\n      </div>\n\n      <div id=\"panel-cursor\" class=\"tab-panel\">\n        <h3>Install in Cursor</h3>\n        <p>Click the button below to add this MCP server to Cursor:</p>\n        <a href=\"${cursorDeepLink}\" class=\"install-btn\">Open in Cursor</a>\n        <p>Or add manually: Settings → MCP → Add server</p>\n      </div>\n\n      <div id=\"panel-vscode\" class=\"tab-panel\">\n        <h3>Install in VS Code</h3>\n        <p>Click the button below to add this MCP server to VS Code:</p>\n        <a href=\"${vscodeDeepLink}\" class=\"install-btn\">Open in VS Code</a>\n        <p>Or add manually: Settings → MCP → Add server</p>\n      </div>\n\n      <div id=\"panel-vscode-insiders\" class=\"tab-panel\">\n        <h3>Install in VS Code Insiders</h3>\n        <p>Click the button below to add this MCP server to VS Code Insiders:</p>\n        <a href=\"${vscodeInsidersDeepLink}\" class=\"install-btn\">Open in VS Code Insiders</a>\n        <p>Or add manually: Settings → MCP → Add server</p>\n      </div>\n\n      <div id=\"panel-chatgpt\" class=\"tab-panel\">\n        <h3>Connect with ChatGPT</h3>\n        <ol class=\"steps\">\n          <li><strong>Enable Developer Mode:</strong> Settings → Connectors → Advanced → Developer mode</li>\n          <li><strong>Import this MCP server:</strong> Go to Connectors tab and add: ${escapeHtml(url)}</li>\n          <li><strong>Use in conversations:</strong> Choose the MCP server from the Plus menu</li>\n        </ol>\n      </div>\n    </div>\n  </div>\n\n  ${\n    toolsListHtml || promptsListHtml || resourcesListHtml\n      ? `\n  <div class=\"card\">\n    <div class=\"card-header\">\n      <h2 class=\"card-title\">Primitives</h2>\n      ${toolsListHtml ? `<div class=\"spec-section\"><h3>Tools (${normalizedTools.length})</h3>${toolsListHtml}</div>` : \"\"}\n      ${promptsListHtml ? `<div class=\"spec-section\"><h3>Prompts (${prompts!.length})</h3>${promptsListHtml}</div>` : \"\"}\n      ${resourcesListHtml ? `<div class=\"spec-section\"><h3>Resources (${resources!.length})</h3>${resourcesListHtml}</div>` : \"\"}\n    </div>\n  </div>\n  `\n      : \"\"\n  }\n\n  <footer class=\"footer-content\">\n    <a href=\"https://manufact.com\" target=\"_blank\" rel=\"noopener noreferrer\" class=\"footer-brand-link\" aria-label=\"Manufact\">\n      <span class=\"logo-symbol\">\n        <svg viewBox=\"0 0 500 500\" xmlns=\"http://www.w3.org/2000/svg\">\n          <g class=\"logo-fill\" fill=\"currentColor\" fill-rule=\"nonzero\">\n            <path d=\"${LOGO_SVG_PATHS.path1}\"/>\n            <circle cx=\"${LOGO_SVG_PATHS.circle.cx}\" cy=\"${LOGO_SVG_PATHS.circle.cy}\" r=\"${LOGO_SVG_PATHS.circle.r}\"/>\n            <path d=\"${LOGO_SVG_PATHS.path2}\"/>\n          </g>\n          <g class=\"logo-stroke\">\n            <path d=\"${LOGO_SVG_PATHS.path1}\"/>\n            <circle cx=\"${LOGO_SVG_PATHS.circle.cx}\" cy=\"${LOGO_SVG_PATHS.circle.cy}\" r=\"${LOGO_SVG_PATHS.circle.r}\"/>\n            <path d=\"${LOGO_SVG_PATHS.path2}\"/>\n          </g>\n        </svg>\n      </span>\n      <span>Manufact</span>\n    </a>\n  </footer>\n</div>\n\n<script>${getMeshGradientScript()}</script>\n<script>\n(function(){\n  var tabs = document.querySelectorAll('.tab');\n  var panels = document.querySelectorAll('.tab-panel');\n  tabs.forEach(function(tab){\n    tab.addEventListener('click', function(){\n      var target = tab.getAttribute('data-tab');\n      tabs.forEach(function(t){ t.classList.remove('active'); t.setAttribute('aria-selected','false'); });\n      panels.forEach(function(p){\n        var match = p.id === 'panel-' + target;\n        p.classList.toggle('active', match);\n        p.hidden = !match;\n      });\n      tab.classList.add('active');\n      tab.setAttribute('aria-selected','true');\n    });\n  });\n  var copySvg = '<svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\"><rect width=\"14\" height=\"14\" x=\"8\" y=\"8\" rx=\"2\"/><path d=\"M4 16c-1.1 0-2-.9-2-2V4c0-1.1.9-2 2-2h10c1.1 0 2 .9 2 2\"/></svg>';\n  var checkSvg = '<svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M20 6L9 17l-5-5\"/></svg>';\n  document.querySelectorAll('.copy-btn').forEach(function(btn){\n    btn.addEventListener('click', function(){\n      var text = btn.getAttribute('data-copy');\n      if (!text) {\n        var pre = btn.parentElement.querySelector('pre');\n        text = pre ? (pre.getAttribute('data-copy') || pre.textContent) : '';\n      }\n      if (text) navigator.clipboard.writeText(text).then(function(){\n        btn.classList.add('copied');\n        btn.innerHTML = checkSvg;\n        setTimeout(function(){ btn.classList.remove('copied'); btn.innerHTML = copySvg; }, 2000);\n      });\n    });\n  });\n  panels.forEach(function(p){ if(!p.classList.contains('active')) p.hidden = true; });\n})();\n</script>\n</body>\n</html>`;\n}\n"],"mappings":";AAUA,SAAS,WAAW,MAAsB;AACxC,SAAO,KACJ,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,QAAQ,EACtB,QAAQ,MAAM,OAAO;AAC1B;AAGA,SAAS,oBAAoB,OAAwB;AACnD,SAAO,KAAK,UAAU,KAAK,EACxB,QAAQ,MAAM,SAAS,EACvB,QAAQ,MAAM,SAAS;AAC5B;AAMA,SAAS,mBAAmB,MAAsB;AAChD,SAAO,KAAK,QAAQ,mBAAmB,GAAG,EAAE,YAAY;AAC1D;AAMA,SAAS,uBAAuB,KAAa,MAAsB;AACjE,QAAM,SAAS,EAAE,IAAI;AACrB,QAAM,aAAa,KAAK,UAAU,MAAM;AAGxC,QAAM,eACJ,OAAO,WAAW,cACd,OAAO,KAAK,UAAU,EAAE,SAAS,QAAQ,IACzC,KAAK,UAAU;AAErB,QAAM,gBAAgB,mBAAmB,IAAI;AAC7C,SAAO,yDAAyD,mBAAmB,YAAY,CAAC,SAAS,mBAAmB,aAAa,CAAC;AAC5I;AAMA,SAAS,uBAAuB,KAAa,MAAsB;AACjE,QAAM,SAAS;AAAA,IACb;AAAA,IACA,MAAM,mBAAmB,IAAI;AAAA,IAC7B,MAAM;AAAA,EACR;AACA,QAAM,aAAa,KAAK,UAAU,MAAM;AACxC,QAAM,mBAAmB,mBAAmB,UAAU;AACtD,SAAO,sBAAsB,gBAAgB;AAC/C;AAMA,SAAS,+BAA+B,KAAa,MAAsB;AACzE,QAAM,SAAS;AAAA,IACb;AAAA,IACA,MAAM,mBAAmB,IAAI;AAAA,IAC7B,MAAM;AAAA,EACR;AACA,QAAM,aAAa,KAAK,UAAU,MAAM;AACxC,QAAM,mBAAmB,mBAAmB,UAAU;AACtD,SAAO,+BAA+B,gBAAgB;AACxD;AAKA,SAAS,sBAAsB,KAAa,MAAsB;AAChE,QAAM,gBAAgB,mBAAmB,IAAI;AAC7C,QAAM,YAAY,IAAI,IAAI,QAAQ,MAAM,OAAO,CAAC;AAChD,SAAO,oCAAoC,aAAa,KAAK,SAAS;AACxE;AAGA,IAAM,4BAA4B;AAMlC,SAAS,wBAAwB,WAA2B;AAC1D,QAAM,SAAS,IAAI,gBAAgB;AAAA,IACjC,aAAa;AAAA,IACb,KAAK;AAAA,EACP,CAAC;AACD,SAAO,GAAG,yBAAyB,cAAc,OAAO,SAAS,CAAC;AACpE;AAEA,IAAM,iBAAiB;AAAA,EACrB,OACE;AAAA,EACF,QAAQ,EAAE,IAAI,SAAS,IAAI,SAAS,GAAG,QAAQ;AAAA,EAC/C,OACE;AACJ;AAEA,IAAM,yBACJ;AAGF,SAAS,wBAAgC;AACvC,QAAM,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQb,QAAM,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAqEb,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wCAc+B,KAAK,UAAU,IAAI,CAAC;AAAA,0CAClB,KAAK,UAAU,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAoD9D;AA8EO,SAAS,oBAAoB,SAAqC;AACvE,QAAM;AAAA,IACJ,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,QAAM,OAAO,SAAS;AACtB,QAAM,iBAAiB,uBAAuB,KAAK,IAAI;AACvD,QAAM,iBAAiB,uBAAuB,KAAK,IAAI;AACvD,QAAM,yBAAyB,+BAA+B,KAAK,IAAI;AACvE,QAAM,gBAAgB,sBAAsB,KAAK,IAAI;AACrD,QAAM,uBAAuB,wBAAwB,GAAG;AAExD,QAAM,WAAW,WAAW,IAAI;AAChC,QAAM,kBAAkB,cAAc,WAAW,WAAW,IAAI;AAChE,QAAM,qBACJ,eACA,GAAG,IAAI;AACT,QAAM,kBAAkB,WAAW,kBAAkB;AACrD,QAAM,YAAY,GAAG,QAAQ;AAE7B,QAAM,SAAS,oBAAoB;AAAA,IACjC,YAAY;AAAA,IACZ,SAAS;AAAA,IACT;AAAA,IACA,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,qBAAqB;AAAA,EACvB,CAAC;AAED,QAAM,kBACJ,SAAS,MAAM,SAAS,IACpB,MAAM,IAAI,CAAC,UAAU;AAAA,IACnB,MAAM,KAAK,SAAS,KAAK;AAAA,IACzB,GAAI,KAAK,gBAAgB,UAAa;AAAA,MACpC,aAAa,KAAK;AAAA,IACpB;AAAA,EACF,EAAE,IACF,CAAC;AAEP,QAAM,gBACJ,gBAAgB,SAAS,IACrB,gBACG;AAAA,IACC,CAAC,MACC,kDAAkD,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,wBAAwB,WAAW,EAAE,WAAW,CAAC,SAAS,EAAE;AAAA,EAC9J,EACC,KAAK,IAAI,IACZ;AAEN,QAAM,kBACJ,WAAW,QAAQ,SAAS,IACxB,QACG;AAAA,IACC,CAAC,MACC,kDAAkD,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,wBAAwB,WAAW,EAAE,WAAW,CAAC,SAAS,EAAE;AAAA,EACzK,EACC,KAAK,IAAI,IACZ;AAEN,QAAM,oBACJ,aAAa,UAAU,SAAS,IAC5B,UACG;AAAA,IACC,CAAC,MACC,iDAAiD,WAAW,EAAE,GAAG,CAAC,UAAU,EAAE,cAAc,wBAAwB,WAAW,EAAE,WAAW,CAAC,SAAS,EAAE;AAAA,EAC5J,EACC,KAAK,IAAI,IACZ;AAEN,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA,SAKA,SAAS;AAAA,oCACkB,eAAe;AAAA,qCACd,SAAS;AAAA,2CACH,eAAe;AAAA;AAAA;AAAA,sCAGpB,SAAS;AAAA,4CACH,eAAe;AAAA;AAAA;AAAA;AAAA,qCAItB,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2EAoTgC,sBAAsB;AAAA,2EACtB,sBAAsB;AAAA,2EACtB,sBAAsB;AAAA,2EACtB,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kCAM/D,UAAU,aAAa,EAAE;AAAA,YAC/C,UAAU,aAAa,WAAW,OAAO,CAAC,yDAAyD,EAAE;AAAA;AAAA,kBAE/F,QAAQ,4BAA4B,WAAW,OAAO,CAAC;AAAA;AAAA,YAE7D,kBAAkB,+BAA+B,eAAe,SAAS,EAAE;AAAA;AAAA;AAAA,gDAGvC,WAAW,GAAG,CAAC,KAAK,WAAW,GAAG,CAAC;AAAA,kEACjB,WAAW,GAAG,CAAC;AAAA;AAAA;AAAA;AAAA,uBAI1D,WAAW,oBAAoB,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,4BAiC3B,WAAW,aAAa,CAAC,KAAK,WAAW,aAAa,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAQhE,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAOd,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAOd,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uFAQ8C,WAAW,GAAG,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQlG,iBAAiB,mBAAmB,oBAChC;AAAA;AAAA;AAAA;AAAA,QAIA,gBAAgB,wCAAwC,gBAAgB,MAAM,SAAS,aAAa,WAAW,EAAE;AAAA,QACjH,kBAAkB,0CAA0C,QAAS,MAAM,SAAS,eAAe,WAAW,EAAE;AAAA,QAChH,oBAAoB,4CAA4C,UAAW,MAAM,SAAS,iBAAiB,WAAW,EAAE;AAAA;AAAA;AAAA,MAIxH,EACN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAOqB,eAAe,KAAK;AAAA,0BACjB,eAAe,OAAO,EAAE,SAAS,eAAe,OAAO,EAAE,QAAQ,eAAe,OAAO,CAAC;AAAA,uBAC3F,eAAe,KAAK;AAAA;AAAA;AAAA,uBAGpB,eAAe,KAAK;AAAA,0BACjB,eAAe,OAAO,EAAE,SAAS,eAAe,OAAO,EAAE,QAAQ,eAAe,OAAO,CAAC;AAAA,uBAC3F,eAAe,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UASjC,sBAAsB,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAuCjC;","names":[]}

package/dist/{chunk-PMPGMSYA.js → chunk-QUUANIE4.js}

@@ -1,26 +1,3 @@
-import {
-  getOAuthProviderOptions,
-  wrapOAuthTokenVerifier
-} from "./chunk-DPL7OEXC.js";
-
-// src/oauth/index.ts
-import {
-  OAuthError,
-  OAuthErrorCode,
-  bearerAuthChallengeResponse,
-  getOAuthProtectedResourceMetadataUrl as getOAuthProtectedResourceMetadataUrl2,
-  oauthMetadataResponse as oauthMetadataResponse2,
-  requireBearerAuth as requireBearerAuth2,
-  verifyBearerToken
-} from "@modelcontextprotocol/server";
-
-// src/oauth/adapters.ts
-import {
-  getOAuthProtectedResourceMetadataUrl,
-  oauthMetadataResponse,
-  requireBearerAuth
-} from "@modelcontextprotocol/server";
-
 // src/fetch-app.ts
 import {
   hostHeaderValidationResponse,
@@ -65,6 +42,29 @@ function matchesPathPrefix(request, prefix) {
   const pathname = pathnameOf(request);
   return pathname === prefix || pathname.startsWith(`${prefix}/`);
 }
+function pathUnderBase(basePath, childPath) {
+  const child = childPath.replace(/^\/+/, "");
+  return basePath === "/" ? `/${child}` : `${basePath}/${child}`;
+}
+function isHtmlNavigationRequest(request) {
+  if (request.method !== "GET" && request.method !== "HEAD") {
+    return false;
+  }
+  const accept = request.headers.get("accept");
+  if (accept === null) {
+    return false;
+  }
+  return accept.split(",").some((range) => {
+    const [mediaType, ...parameters] = range.split(";");
+    if (mediaType?.trim().toLowerCase() !== "text/html") {
+      return false;
+    }
+    return !parameters.some((parameter) => {
+      const [name, value] = parameter.trim().toLowerCase().split("=");
+      return name === "q" && Number(value) === 0;
+    });
+  });
+}
 function routeFetch(routes, fallback = async () => new Response("Not Found", { status: 404 })) {
   return async (request) => {
     for (const route of routes) {
@@ -108,51 +108,6 @@ function originValidationMiddleware(origins, skipSafeMethods = true) {
   };
 }
 
-// src/oauth/adapters.ts
-function bearerAuth(provider, resource) {
-  const options = getOAuthProviderOptions(provider);
-  const gate = requireBearerAuth({
-    verifier: wrapOAuthTokenVerifier(provider, resource),
-    resourceMetadataUrl: getOAuthProtectedResourceMetadataUrl(resource),
-    ...options.requiredScopes !== void 0 && {
-      requiredScopes: [...options.requiredScopes]
-    }
-  });
-  return async (request, next) => {
-    const result = await gate(request);
-    if (result instanceof Response) {
-      return result;
-    }
-    getRequestBag(request).authInfo = result;
-    return next();
-  };
-}
-function oauthMetadata(provider, resource) {
-  const options = getOAuthProviderOptions(provider);
-  return async (request, next) => {
-    const response = oauthMetadataResponse(request, {
-      oauthMetadata: options.oauthMetadata,
-      resourceServerUrl: resource,
-      ...options.scopesSupported !== void 0 && {
-        scopesSupported: [...options.scopesSupported]
-      },
-      ...options.resourceName !== void 0 && {
-        resourceName: options.resourceName
-      },
-      ...options.serviceDocumentationUrl !== void 0 && {
-        serviceDocumentationUrl: options.serviceDocumentationUrl
-      }
-    });
-    if (response !== void 0) {
-      return response;
-    }
-    return next();
-  };
-}
-function authInfoFromRequest(request) {
-  return getRequestBag(request).authInfo;
-}
-
 export {
   toFrameworkHandler,
   getRequestBag,
@@ -160,19 +115,11 @@ export {
   pathnameOf,
   matchesPath,
   matchesPathPrefix,
+  pathUnderBase,
+  isHtmlNavigationRequest,
   routeFetch,
   jsonBodyMiddleware,
   hostValidationMiddleware,
-  originValidationMiddleware,
-  bearerAuth,
-  oauthMetadata,
-  authInfoFromRequest,
-  OAuthError,
-  OAuthErrorCode,
-  bearerAuthChallengeResponse,
-  getOAuthProtectedResourceMetadataUrl2 as getOAuthProtectedResourceMetadataUrl,
-  oauthMetadataResponse2 as oauthMetadataResponse,
-  requireBearerAuth2 as requireBearerAuth,
-  verifyBearerToken
+  originValidationMiddleware
 };
-//# sourceMappingURL=chunk-PMPGMSYA.js.map
+//# sourceMappingURL=chunk-QUUANIE4.js.map

package/dist/chunk-QUUANIE4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/fetch-app.ts"],"sourcesContent":["import {\n  hostHeaderValidationResponse,\n  originValidationResponse,\n  type AuthInfo,\n} from \"@modelcontextprotocol/server\";\n\n/** Web-standard request handler. */\nexport type FetchHandler = (request: Request) => Promise<Response>;\n\n/** Request shapes accepted by {@link toFrameworkHandler}. */\nexport type FrameworkRequestLike = Request | { req: { raw: Request } };\n\n/**\n * Universal web handler mountable in Vercel, Hono, TanStack, and other\n * fetch-native frameworks without `c.req.raw` boilerplate.\n */\nexport type FrameworkHandler = (\n  input: FrameworkRequestLike\n) => Promise<Response>;\n\n/**\n * Wrap a {@link FetchHandler} for framework duck-typing (Hono `Context`, etc.).\n *\n * @param fetch - Inner fetch handler produced by {@link MCPServer.getHandler}.\n */\nexport function toFrameworkHandler(fetch: FetchHandler): FrameworkHandler {\n  return (input) => {\n    const request = input instanceof Request ? input : input.req.raw;\n    return fetch(request);\n  };\n}\n\n/** Onion middleware over a {@link FetchHandler} terminal. */\nexport type FetchMiddleware = (\n  request: Request,\n  next: () => Promise<Response>\n) => Promise<Response>;\n\n/** Per-request values stashed before the MCP handler runs. */\nexport interface RequestBag {\n  /** Parsed JSON body when the JSON middleware ran first. */\n  parsedBody?: unknown;\n  /** Verified OAuth identity forwarded to the SDK handler. */\n  authInfo?: AuthInfo;\n}\n\nconst requestBags = new WeakMap<Request, RequestBag>();\n\n/**\n * Mutable per-request bag; created on first access.\n *\n * @param request - Incoming request whose bag to read or create.\n */\nexport function getRequestBag(request: Request): RequestBag {\n  let bag = requestBags.get(request);\n  if (bag === undefined) {\n    bag = {};\n    requestBags.set(request, bag);\n  }\n  return bag;\n}\n\n/**\n * Compose middleware around a terminal handler (first listed runs outermost).\n *\n * @param terminal - Fallback handler when no middleware short-circuits.\n * @param middlewares - Middleware chain executed before `terminal`.\n */\nexport function composeFetch(\n  terminal: FetchHandler,\n  ...middlewares: FetchMiddleware[]\n): FetchHandler {\n  return async (request: Request): Promise<Response> => {\n    let index = 0;\n    const dispatch = async (): Promise<Response> => {\n      if (index < middlewares.length) {\n        const middleware = middlewares[index]!;\n        index += 1;\n        return middleware(request, dispatch);\n      }\n      return terminal(request);\n    };\n    return dispatch();\n  };\n}\n\n/**\n * Return the pathname of a request URL.\n *\n * @param request - Request whose pathname to read.\n */\nexport function pathnameOf(request: Request): string {\n  return new URL(request.url).pathname;\n}\n\n/**\n * Match a request pathname exactly.\n *\n * @param request - Request to test.\n * @param path - Exact pathname (for example `/mcp`).\n */\nexport function matchesPath(request: Request, path: string): boolean {\n  return pathnameOf(request) === path;\n}\n\n/**\n * Match a request pathname prefix (prefix or `prefix/...`).\n *\n * @param request - Request to test.\n * @param prefix - Path prefix without a trailing wildcard.\n */\nexport function matchesPathPrefix(request: Request, prefix: string): boolean {\n  const pathname = pathnameOf(request);\n  return pathname === prefix || pathname.startsWith(`${prefix}/`);\n}\n\n/**\n * Append a framework-owned child path beneath an MCP base path.\n *\n * Unlike string interpolation, this keeps the root base path from producing\n * a double slash: `pathUnderBase(\"/\", \"inspector\")` is `\"/inspector\"`.\n *\n * @param basePath - Valid MCP base path, including the root path `/`.\n * @param childPath - Relative child path, with or without a leading slash.\n * @returns Absolute pathname beneath `basePath`.\n *\n * @internal\n */\nexport function pathUnderBase(basePath: string, childPath: string): string {\n  const child = childPath.replace(/^\\/+/, \"\");\n  return basePath === \"/\" ? `/${child}` : `${basePath}/${child}`;\n}\n\n/**\n * Classify a request as explicit browser HTML navigation.\n *\n * Only GET and HEAD requests whose Accept header names `text/html` with a\n * non-zero quality value qualify. Wildcard-only and missing Accept headers\n * remain available to protocol and health probes.\n *\n * @param request - Incoming request to classify.\n * @returns Whether the request explicitly accepts HTML.\n *\n * @internal\n */\nexport function isHtmlNavigationRequest(request: Request): boolean {\n  if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n    return false;\n  }\n  const accept = request.headers.get(\"accept\");\n  if (accept === null) {\n    return false;\n  }\n  return accept.split(\",\").some((range) => {\n    const [mediaType, ...parameters] = range.split(\";\");\n    if (mediaType?.trim().toLowerCase() !== \"text/html\") {\n      return false;\n    }\n    return !parameters.some((parameter) => {\n      const [name, value] = parameter.trim().toLowerCase().split(\"=\");\n      return name === \"q\" && Number(value) === 0;\n    });\n  });\n}\n\n/**\n * Dispatch to the first matching route handler.\n *\n * @param routes - Ordered route table; first match wins.\n * @param fallback - Handler when nothing matches.\n */\nexport function routeFetch(\n  routes: Array<{\n    match: (request: Request) => boolean;\n    handler: FetchHandler;\n  }>,\n  fallback: FetchHandler = async () =>\n    new Response(\"Not Found\", { status: 404 })\n): FetchHandler {\n  return async (request: Request): Promise<Response> => {\n    for (const route of routes) {\n      if (route.match(request)) {\n        return route.handler(request);\n      }\n    }\n    return fallback(request);\n  };\n}\n\n/**\n * Parse JSON bodies once and stash them in the request bag.\n */\nexport function jsonBodyMiddleware(): FetchMiddleware {\n  return async (request, next) => {\n    const bag = getRequestBag(request);\n    if (bag.parsedBody !== undefined) {\n      return next();\n    }\n    if (\n      !(request.headers.get(\"content-type\") ?? \"\").includes(\"application/json\")\n    ) {\n      return next();\n    }\n    try {\n      bag.parsedBody = await request.clone().json();\n    } catch {\n      return new Response(\"Invalid JSON\", { status: 400 });\n    }\n    return next();\n  };\n}\n\n/**\n * Reject requests whose `Host` header is not on the allowlist.\n *\n * @param hosts - Allowed hostnames (port-agnostic).\n */\nexport function hostValidationMiddleware(hosts: string[]): FetchMiddleware {\n  return async (request, next) => {\n    const rejected = hostHeaderValidationResponse(request, hosts);\n    return rejected ?? next();\n  };\n}\n\n/**\n * Reject requests whose `Origin` header is not on the allowlist.\n *\n * @param origins - Allowed origin hostnames (port-agnostic).\n * @param skipSafeMethods - When true, skip GET/HEAD (view asset GETs).\n */\nexport function originValidationMiddleware(\n  origins: string[],\n  skipSafeMethods = true\n): FetchMiddleware {\n  return async (request, next) => {\n    if (\n      skipSafeMethods &&\n      (request.method === \"GET\" || request.method === \"HEAD\")\n    ) {\n      return next();\n    }\n    const rejected = originValidationResponse(request, origins);\n    return rejected ?? next();\n  };\n}\n"],"mappings":";AAAA;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAqBA,SAAS,mBAAmB,OAAuC;AACxE,SAAO,CAAC,UAAU;AAChB,UAAM,UAAU,iBAAiB,UAAU,QAAQ,MAAM,IAAI;AAC7D,WAAO,MAAM,OAAO;AAAA,EACtB;AACF;AAgBA,IAAM,cAAc,oBAAI,QAA6B;AAO9C,SAAS,cAAc,SAA8B;AAC1D,MAAI,MAAM,YAAY,IAAI,OAAO;AACjC,MAAI,QAAQ,QAAW;AACrB,UAAM,CAAC;AACP,gBAAY,IAAI,SAAS,GAAG;AAAA,EAC9B;AACA,SAAO;AACT;AAQO,SAAS,aACd,aACG,aACW;AACd,SAAO,OAAO,YAAwC;AACpD,QAAI,QAAQ;AACZ,UAAM,WAAW,YAA+B;AAC9C,UAAI,QAAQ,YAAY,QAAQ;AAC9B,cAAM,aAAa,YAAY,KAAK;AACpC,iBAAS;AACT,eAAO,WAAW,SAAS,QAAQ;AAAA,MACrC;AACA,aAAO,SAAS,OAAO;AAAA,IACzB;AACA,WAAO,SAAS;AAAA,EAClB;AACF;AAOO,SAAS,WAAW,SAA0B;AACnD,SAAO,IAAI,IAAI,QAAQ,GAAG,EAAE;AAC9B;AAQO,SAAS,YAAY,SAAkB,MAAuB;AACnE,SAAO,WAAW,OAAO,MAAM;AACjC;AAQO,SAAS,kBAAkB,SAAkB,QAAyB;AAC3E,QAAM,WAAW,WAAW,OAAO;AACnC,SAAO,aAAa,UAAU,SAAS,WAAW,GAAG,MAAM,GAAG;AAChE;AAcO,SAAS,cAAc,UAAkB,WAA2B;AACzE,QAAM,QAAQ,UAAU,QAAQ,QAAQ,EAAE;AAC1C,SAAO,aAAa,MAAM,IAAI,KAAK,KAAK,GAAG,QAAQ,IAAI,KAAK;AAC9D;AAcO,SAAS,wBAAwB,SAA2B;AACjE,MAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,QAAQ;AACzD,WAAO;AAAA,EACT;AACA,QAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAC3C,MAAI,WAAW,MAAM;AACnB,WAAO;AAAA,EACT;AACA,SAAO,OAAO,MAAM,GAAG,EAAE,KAAK,CAAC,UAAU;AACvC,UAAM,CAAC,WAAW,GAAG,UAAU,IAAI,MAAM,MAAM,GAAG;AAClD,QAAI,WAAW,KAAK,EAAE,YAAY,MAAM,aAAa;AACnD,aAAO;AAAA,IACT;AACA,WAAO,CAAC,WAAW,KAAK,CAAC,cAAc;AACrC,YAAM,CAAC,MAAM,KAAK,IAAI,UAAU,KAAK,EAAE,YAAY,EAAE,MAAM,GAAG;AAC9D,aAAO,SAAS,OAAO,OAAO,KAAK,MAAM;AAAA,IAC3C,CAAC;AAAA,EACH,CAAC;AACH;AAQO,SAAS,WACd,QAIA,WAAyB,YACvB,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC,GAC7B;AACd,SAAO,OAAO,YAAwC;AACpD,eAAW,SAAS,QAAQ;AAC1B,UAAI,MAAM,MAAM,OAAO,GAAG;AACxB,eAAO,MAAM,QAAQ,OAAO;AAAA,MAC9B;AAAA,IACF;AACA,WAAO,SAAS,OAAO;AAAA,EACzB;AACF;AAKO,SAAS,qBAAsC;AACpD,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,MAAM,cAAc,OAAO;AACjC,QAAI,IAAI,eAAe,QAAW;AAChC,aAAO,KAAK;AAAA,IACd;AACA,QACE,EAAE,QAAQ,QAAQ,IAAI,cAAc,KAAK,IAAI,SAAS,kBAAkB,GACxE;AACA,aAAO,KAAK;AAAA,IACd;AACA,QAAI;AACF,UAAI,aAAa,MAAM,QAAQ,MAAM,EAAE,KAAK;AAAA,IAC9C,QAAQ;AACN,aAAO,IAAI,SAAS,gBAAgB,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrD;AACA,WAAO,KAAK;AAAA,EACd;AACF;AAOO,SAAS,yBAAyB,OAAkC;AACzE,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,WAAW,6BAA6B,SAAS,KAAK;AAC5D,WAAO,YAAY,KAAK;AAAA,EAC1B;AACF;AAQO,SAAS,2BACd,SACA,kBAAkB,MACD;AACjB,SAAO,OAAO,SAAS,SAAS;AAC9B,QACE,oBACC,QAAQ,WAAW,SAAS,QAAQ,WAAW,SAChD;AACA,aAAO,KAAK;AAAA,IACd;AACA,UAAM,WAAW,yBAAyB,SAAS,OAAO;AAC1D,WAAO,YAAY,KAAK;AAAA,EAC1B;AACF;","names":[]}

package/dist/chunk-STCR3P5O.js

@@ -0,0 +1,95 @@
+import {
+  pathUnderBase
+} from "./chunk-QUUANIE4.js";
+
+// src/views/document.ts
+function resolveAssetUrl(assetPath, origin) {
+  if (!assetPath.startsWith("/")) {
+    throw new Error(
+      `View manifest asset path must be origin-absolute (start with "/"); got ${JSON.stringify(assetPath)}`
+    );
+  }
+  return `${origin}${assetPath}`;
+}
+function viewAssetsBasePath(basePath, viewName) {
+  return `${pathUnderBase(basePath, `_mcp-use/views/${viewName}`)}/`;
+}
+function resolveExternalAssetUrl(assetPath, assetsBase, basePath, viewName) {
+  if (assetPath.startsWith("http://") || assetPath.startsWith("https://") || assetPath.startsWith("data:")) {
+    return assetPath;
+  }
+  if (assetPath.startsWith("/")) {
+    return resolveAssetUrl(assetPath, assetsBase);
+  }
+  return `${assetsBase}${viewAssetsBasePath(basePath, viewName)}${assetPath.replace(/^\/+/, "")}`;
+}
+function resolvePublicBase(assetsBase, basePath) {
+  return `${assetsBase}${pathUnderBase(basePath, "_mcp-use/public")}/`;
+}
+function escapeInlineScript(code) {
+  return code.replaceAll(/<\/script/gi, "<\\/script").replaceAll("<!--", "\\x3C!--");
+}
+function escapeInlineStyle(css) {
+  return css.replaceAll(/<\/style/gi, "<\\/style");
+}
+function escapeHtml(value) {
+  return value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
+}
+function synthesizeViewDocument(entry, assetsBase, basePath, viewName) {
+  const viewConfig = {
+    publicBase: resolvePublicBase(assetsBase, basePath)
+  };
+  const configScript = `<script>globalThis.__mcpUseViewConfig=${JSON.stringify(viewConfig)};</script>`;
+  if (entry.kind === "inline") {
+    const styleTag = entry.css.length > 0 ? `<style>${escapeInlineStyle(entry.css)}</style>` : "";
+    const moduleScript = `<script type="module">${escapeInlineScript(entry.js)}</script>`;
+    return `<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+${configScript}
+${styleTag}
+</head>
+<body>
+<div id="root"></div>
+${moduleScript}
+</body>
+</html>`;
+  }
+  if (viewName === void 0) {
+    throw new Error(
+      "viewName is required when synthesizing an external view document."
+    );
+  }
+  const cssLinks = entry.css.map(
+    (path) => `<link rel="stylesheet" href="${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}">`
+  ).join("\n");
+  const scriptTags = (entry.scripts ?? []).map(
+    (path) => `<script type="module" src="${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}"></script>`
+  ).join("\n");
+  const entryUrl = resolveExternalAssetUrl(
+    entry.entry,
+    assetsBase,
+    basePath,
+    viewName
+  );
+  return `<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+${configScript}
+${cssLinks}
+</head>
+<body>
+<div id="root"></div>
+${scriptTags}
+<script type="module" src="${escapeHtml(entryUrl)}"></script>
+</body>
+</html>`;
+}
+
+export {
+  viewAssetsBasePath,
+  synthesizeViewDocument
+};
+//# sourceMappingURL=chunk-STCR3P5O.js.map

package/dist/chunk-STCR3P5O.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/views/document.ts"],"sourcesContent":["import type { McpUseViewConfig } from \"../react/public-assets.js\";\nimport { pathUnderBase } from \"../fetch-app.js\";\nimport type { ViewManifestEntry } from \"./types.js\";\n\n/**\n * Resolve a manifest asset path to an absolute URL for embedding in the\n * synthesized view document.\n *\n * External manifest entries are origin-absolute `/`-prefixed paths by\n * contract ({@link ExternalViewManifestEntry}).\n *\n * @param assetPath - Origin-absolute path starting with `/`.\n * @param origin - Request-resolved public origin.\n * @returns Absolute URL `${origin}${assetPath}`.\n * @throws When `assetPath` does not start with `/`.\n */\nexport function resolveAssetUrl(assetPath: string, origin: string): string {\n  if (!assetPath.startsWith(\"/\")) {\n    throw new Error(\n      `View manifest asset path must be origin-absolute (start with \"/\"); got ${JSON.stringify(assetPath)}`\n    );\n  }\n  return `${origin}${assetPath}`;\n}\n\n/**\n * Build the HTTP path prefix for a view's built assets (no origin).\n *\n * @param basePath - MCP mount prefix (e.g. `/mcp`).\n * @param viewName - View directory / manifest key.\n */\nexport function viewAssetsBasePath(basePath: string, viewName: string): string {\n  return `${pathUnderBase(basePath, `_mcp-use/views/${viewName}`)}/`;\n}\n\n/**\n * Resolve a production or dev external asset path to an absolute URL.\n *\n * @param assetPath - Full CDN URL, origin-absolute dev path (`/…`), or\n *   view-relative production path (`assets/…`).\n * @param assetsBase - Assets URL prefix (origin + optional path).\n * @param basePath - MCP mount prefix.\n * @param viewName - View directory / manifest key (required for view-relative paths).\n */\nexport function resolveExternalAssetUrl(\n  assetPath: string,\n  assetsBase: string,\n  basePath: string,\n  viewName: string\n): string {\n  if (\n    assetPath.startsWith(\"http://\") ||\n    assetPath.startsWith(\"https://\") ||\n    assetPath.startsWith(\"data:\")\n  ) {\n    return assetPath;\n  }\n  if (assetPath.startsWith(\"/\")) {\n    return resolveAssetUrl(assetPath, assetsBase);\n  }\n  return `${assetsBase}${viewAssetsBasePath(basePath, viewName)}${assetPath.replace(/^\\/+/, \"\")}`;\n}\n\n/**\n * Resolve the absolute URL prefix for the project's `public/` directory.\n *\n * @param assetsBase - Assets URL prefix (origin + optional path).\n * @param basePath - MCP mount prefix (e.g. `/mcp`).\n * @returns Absolute prefix with trailing slash.\n */\nexport function resolvePublicBase(\n  assetsBase: string,\n  basePath: string\n): string {\n  return `${assetsBase}${pathUnderBase(basePath, \"_mcp-use/public\")}/`;\n}\n\n/**\n * Escape view JS so it can sit inside a HTML `<script>` element without\n * premature termination or comment-open sequences.\n *\n * @param code - Raw module source.\n */\nfunction escapeInlineScript(code: string): string {\n  return code\n    .replaceAll(/<\\/script/gi, \"<\\\\/script\")\n    .replaceAll(\"<!--\", \"\\\\x3C!--\");\n}\n\n/**\n * Escape CSS so it can sit inside a HTML `<style>` element without premature\n * termination.\n *\n * @param css - Raw stylesheet text.\n */\nfunction escapeInlineStyle(css: string): string {\n  return css.replaceAll(/<\\/style/gi, \"<\\\\/style\");\n}\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replaceAll(\"&\", \"&amp;\")\n    .replaceAll('\"', \"&quot;\")\n    .replaceAll(\"<\", \"&lt;\")\n    .replaceAll(\">\", \"&gt;\");\n}\n\n/**\n * Synthesize a complete HTML document for a view from manifest data.\n *\n * Production (`kind: \"external\"`) loads built assets over HTTP with absolute\n * URLs. Legacy `kind: \"inline\"` embeds JS/CSS directly. Dev uses Vite module\n * URLs (`kind: \"external\"` with origin-absolute paths).\n *\n * @param entry - Primed manifest entry for the view.\n * @param assetsBase - Request-resolved assets URL prefix for absolute asset URLs.\n * @param basePath - MCP mount prefix (e.g. `/mcp`).\n * @param viewName - View directory / manifest key (required for production external paths).\n */\nexport function synthesizeViewDocument(\n  entry: ViewManifestEntry,\n  assetsBase: string,\n  basePath: string,\n  viewName?: string\n): string {\n  const viewConfig: McpUseViewConfig = {\n    publicBase: resolvePublicBase(assetsBase, basePath),\n  };\n  const configScript = `<script>globalThis.__mcpUseViewConfig=${JSON.stringify(viewConfig)};</script>`;\n\n  if (entry.kind === \"inline\") {\n    const styleTag =\n      entry.css.length > 0\n        ? `<style>${escapeInlineStyle(entry.css)}</style>`\n        : \"\";\n    const moduleScript = `<script type=\"module\">${escapeInlineScript(entry.js)}</script>`;\n    return `<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n${configScript}\n${styleTag}\n</head>\n<body>\n<div id=\"root\"></div>\n${moduleScript}\n</body>\n</html>`;\n  }\n\n  if (viewName === undefined) {\n    throw new Error(\n      \"viewName is required when synthesizing an external view document.\"\n    );\n  }\n\n  const cssLinks = entry.css\n    .map(\n      (path) =>\n        `<link rel=\"stylesheet\" href=\"${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}\">`\n    )\n    .join(\"\\n\");\n\n  const scriptTags = (entry.scripts ?? [])\n    .map(\n      (path) =>\n        `<script type=\"module\" src=\"${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}\"></script>`\n    )\n    .join(\"\\n\");\n\n  const entryUrl = resolveExternalAssetUrl(\n    entry.entry,\n    assetsBase,\n    basePath,\n    viewName\n  );\n\n  return `<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n${configScript}\n${cssLinks}\n</head>\n<body>\n<div id=\"root\"></div>\n${scriptTags}\n<script type=\"module\" src=\"${escapeHtml(entryUrl)}\"></script>\n</body>\n</html>`;\n}\n"],"mappings":";;;;;AAgBO,SAAS,gBAAgB,WAAmB,QAAwB;AACzE,MAAI,CAAC,UAAU,WAAW,GAAG,GAAG;AAC9B,UAAM,IAAI;AAAA,MACR,0EAA0E,KAAK,UAAU,SAAS,CAAC;AAAA,IACrG;AAAA,EACF;AACA,SAAO,GAAG,MAAM,GAAG,SAAS;AAC9B;AAQO,SAAS,mBAAmB,UAAkB,UAA0B;AAC7E,SAAO,GAAG,cAAc,UAAU,kBAAkB,QAAQ,EAAE,CAAC;AACjE;AAWO,SAAS,wBACd,WACA,YACA,UACA,UACQ;AACR,MACE,UAAU,WAAW,SAAS,KAC9B,UAAU,WAAW,UAAU,KAC/B,UAAU,WAAW,OAAO,GAC5B;AACA,WAAO;AAAA,EACT;AACA,MAAI,UAAU,WAAW,GAAG,GAAG;AAC7B,WAAO,gBAAgB,WAAW,UAAU;AAAA,EAC9C;AACA,SAAO,GAAG,UAAU,GAAG,mBAAmB,UAAU,QAAQ,CAAC,GAAG,UAAU,QAAQ,QAAQ,EAAE,CAAC;AAC/F;AASO,SAAS,kBACd,YACA,UACQ;AACR,SAAO,GAAG,UAAU,GAAG,cAAc,UAAU,iBAAiB,CAAC;AACnE;AAQA,SAAS,mBAAmB,MAAsB;AAChD,SAAO,KACJ,WAAW,eAAe,YAAY,EACtC,WAAW,QAAQ,UAAU;AAClC;AAQA,SAAS,kBAAkB,KAAqB;AAC9C,SAAO,IAAI,WAAW,cAAc,WAAW;AACjD;AAEA,SAAS,WAAW,OAAuB;AACzC,SAAO,MACJ,WAAW,KAAK,OAAO,EACvB,WAAW,KAAK,QAAQ,EACxB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,MAAM;AAC3B;AAcO,SAAS,uBACd,OACA,YACA,UACA,UACQ;AACR,QAAM,aAA+B;AAAA,IACnC,YAAY,kBAAkB,YAAY,QAAQ;AAAA,EACpD;AACA,QAAM,eAAe,yCAAyC,KAAK,UAAU,UAAU,CAAC;AAExF,MAAI,MAAM,SAAS,UAAU;AAC3B,UAAM,WACJ,MAAM,IAAI,SAAS,IACf,UAAU,kBAAkB,MAAM,GAAG,CAAC,aACtC;AACN,UAAM,eAAe,yBAAyB,mBAAmB,MAAM,EAAE,CAAC;AAC1E,WAAO;AAAA;AAAA;AAAA;AAAA,EAIT,YAAY;AAAA,EACZ,QAAQ;AAAA;AAAA;AAAA;AAAA,EAIR,YAAY;AAAA;AAAA;AAAA,EAGZ;AAEA,MAAI,aAAa,QAAW;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,MAAM,IACpB;AAAA,IACC,CAAC,SACC,gCAAgC,WAAW,wBAAwB,MAAM,YAAY,UAAU,QAAQ,CAAC,CAAC;AAAA,EAC7G,EACC,KAAK,IAAI;AAEZ,QAAM,cAAc,MAAM,WAAW,CAAC,GACnC;AAAA,IACC,CAAC,SACC,8BAA8B,WAAW,wBAAwB,MAAM,YAAY,UAAU,QAAQ,CAAC,CAAC;AAAA,EAC3G,EACC,KAAK,IAAI;AAEZ,QAAM,WAAW;AAAA,IACf,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,SAAO;AAAA;AAAA;AAAA;AAAA,EAIP,YAAY;AAAA,EACZ,QAAQ;AAAA;AAAA;AAAA;AAAA,EAIR,UAAU;AAAA,6BACiB,WAAW,QAAQ,CAAC;AAAA;AAAA;AAGjD;","names":[]}

package/dist/chunk-Z326HADF.js

@@ -0,0 +1,82 @@
+import {
+  getRequestBag
+} from "./chunk-QUUANIE4.js";
+import {
+  getOAuthProviderOptions,
+  wrapOAuthTokenVerifier
+} from "./chunk-DPL7OEXC.js";
+
+// src/oauth/index.ts
+import {
+  OAuthError,
+  OAuthErrorCode,
+  bearerAuthChallengeResponse,
+  getOAuthProtectedResourceMetadataUrl as getOAuthProtectedResourceMetadataUrl2,
+  oauthMetadataResponse as oauthMetadataResponse2,
+  requireBearerAuth as requireBearerAuth2,
+  verifyBearerToken
+} from "@modelcontextprotocol/server";
+
+// src/oauth/adapters.ts
+import {
+  getOAuthProtectedResourceMetadataUrl,
+  oauthMetadataResponse,
+  requireBearerAuth
+} from "@modelcontextprotocol/server";
+function bearerAuth(provider, resource) {
+  const options = getOAuthProviderOptions(provider);
+  const gate = requireBearerAuth({
+    verifier: wrapOAuthTokenVerifier(provider, resource),
+    resourceMetadataUrl: getOAuthProtectedResourceMetadataUrl(resource),
+    ...options.requiredScopes !== void 0 && {
+      requiredScopes: [...options.requiredScopes]
+    }
+  });
+  return async (request, next) => {
+    const result = await gate(request);
+    if (result instanceof Response) {
+      return result;
+    }
+    getRequestBag(request).authInfo = result;
+    return next();
+  };
+}
+function oauthMetadata(provider, resource) {
+  const options = getOAuthProviderOptions(provider);
+  return async (request, next) => {
+    const response = oauthMetadataResponse(request, {
+      oauthMetadata: options.oauthMetadata,
+      resourceServerUrl: resource,
+      ...options.scopesSupported !== void 0 && {
+        scopesSupported: [...options.scopesSupported]
+      },
+      ...options.resourceName !== void 0 && {
+        resourceName: options.resourceName
+      },
+      ...options.serviceDocumentationUrl !== void 0 && {
+        serviceDocumentationUrl: options.serviceDocumentationUrl
+      }
+    });
+    if (response !== void 0) {
+      return response;
+    }
+    return next();
+  };
+}
+function authInfoFromRequest(request) {
+  return getRequestBag(request).authInfo;
+}
+
+export {
+  bearerAuth,
+  oauthMetadata,
+  authInfoFromRequest,
+  OAuthError,
+  OAuthErrorCode,
+  bearerAuthChallengeResponse,
+  getOAuthProtectedResourceMetadataUrl2 as getOAuthProtectedResourceMetadataUrl,
+  oauthMetadataResponse2 as oauthMetadataResponse,
+  requireBearerAuth2 as requireBearerAuth,
+  verifyBearerToken
+};
+//# sourceMappingURL=chunk-Z326HADF.js.map

package/dist/chunk-Z326HADF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/oauth/index.ts","../src/oauth/adapters.ts"],"sourcesContent":["/**\n * OAuth resource-server helpers and provider configuration for mcp-use.\n *\n * @packageDocumentation\n */\nexport {\n  OAuthError,\n  OAuthErrorCode,\n  bearerAuthChallengeResponse,\n  getOAuthProtectedResourceMetadataUrl,\n  oauthMetadataResponse,\n  requireBearerAuth,\n  verifyBearerToken,\n} from \"@modelcontextprotocol/server\";\nexport type {\n  AuthInfo as OAuthAuthInfo,\n  AuthMetadataOptions,\n  BearerAuthOptions,\n  OAuthMetadata,\n  OAuthProtectedResourceMetadata,\n  OAuthTokenVerifier,\n} from \"@modelcontextprotocol/server\";\n\nexport { bearerAuth, oauthMetadata } from \"./adapters.js\";\nexport {\n  oauthCustomProvider,\n  type CustomOAuthProviderOptions,\n  type OAuthExtra,\n  type OAuthProvider,\n  type OAuthResourceOptions,\n} from \"./provider.js\";\n","import {\n  getOAuthProtectedResourceMetadataUrl,\n  oauthMetadataResponse,\n  requireBearerAuth,\n  type AuthInfo,\n} from \"@modelcontextprotocol/server\";\n\nimport { getRequestBag, type FetchMiddleware } from \"../fetch-app.js\";\nimport { getOAuthProviderOptions, wrapOAuthTokenVerifier } from \"./internal.js\";\nimport type { OAuthProvider } from \"./provider.js\";\n\n/**\n * Fetch middleware that requires a bearer token for a canonical resource.\n *\n * @typeParam TUser - Application user type carried by the provider.\n * @param provider - OAuth provider that verifies the bearer token.\n * @param resource - Canonical public MCP endpoint URL.\n */\nexport function bearerAuth<TUser>(\n  provider: OAuthProvider<TUser>,\n  resource: URL\n): FetchMiddleware {\n  const options = getOAuthProviderOptions(provider);\n  const gate = requireBearerAuth({\n    verifier: wrapOAuthTokenVerifier(provider, resource),\n    resourceMetadataUrl: getOAuthProtectedResourceMetadataUrl(resource),\n    ...(options.requiredScopes !== undefined && {\n      requiredScopes: [...options.requiredScopes],\n    }),\n  });\n\n  return async (request, next) => {\n    const result = await gate(request);\n    if (result instanceof Response) {\n      return result;\n    }\n    getRequestBag(request).authInfo = result;\n    return next();\n  };\n}\n\n/**\n * Fetch middleware that serves OAuth discovery metadata.\n *\n * @typeParam TUser - Application user type carried by the provider.\n * @param provider - OAuth provider that supplies authorization-server metadata.\n * @param resource - Canonical public MCP endpoint URL.\n */\nexport function oauthMetadata<TUser>(\n  provider: OAuthProvider<TUser>,\n  resource: URL\n): FetchMiddleware {\n  const options = getOAuthProviderOptions(provider);\n  return async (request, next) => {\n    const response = oauthMetadataResponse(request, {\n      oauthMetadata: options.oauthMetadata,\n      resourceServerUrl: resource,\n      ...(options.scopesSupported !== undefined && {\n        scopesSupported: [...options.scopesSupported],\n      }),\n      ...(options.resourceName !== undefined && {\n        resourceName: options.resourceName,\n      }),\n      ...(options.serviceDocumentationUrl !== undefined && {\n        serviceDocumentationUrl: options.serviceDocumentationUrl,\n      }),\n    });\n    if (response !== undefined) {\n      return response;\n    }\n    return next();\n  };\n}\n/**\n * Read verified {@link AuthInfo} from the request bag after {@link bearerAuth}.\n *\n * @param request - Request that passed through bearer auth middleware.\n */\nexport function authInfoFromRequest(request: Request): AuthInfo | undefined {\n  return getRequestBag(request).authInfo;\n}\n"],"mappings":";;;;;;;;;AAKA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA,wCAAAA;AAAA,EACA,yBAAAC;AAAA,EACA,qBAAAC;AAAA,EACA;AAAA,OACK;;;ACbP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAaA,SAAS,WACd,UACA,UACiB;AACjB,QAAM,UAAU,wBAAwB,QAAQ;AAChD,QAAM,OAAO,kBAAkB;AAAA,IAC7B,UAAU,uBAAuB,UAAU,QAAQ;AAAA,IACnD,qBAAqB,qCAAqC,QAAQ;AAAA,IAClE,GAAI,QAAQ,mBAAmB,UAAa;AAAA,MAC1C,gBAAgB,CAAC,GAAG,QAAQ,cAAc;AAAA,IAC5C;AAAA,EACF,CAAC;AAED,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,SAAS,MAAM,KAAK,OAAO;AACjC,QAAI,kBAAkB,UAAU;AAC9B,aAAO;AAAA,IACT;AACA,kBAAc,OAAO,EAAE,WAAW;AAClC,WAAO,KAAK;AAAA,EACd;AACF;AASO,SAAS,cACd,UACA,UACiB;AACjB,QAAM,UAAU,wBAAwB,QAAQ;AAChD,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,WAAW,sBAAsB,SAAS;AAAA,MAC9C,eAAe,QAAQ;AAAA,MACvB,mBAAmB;AAAA,MACnB,GAAI,QAAQ,oBAAoB,UAAa;AAAA,QAC3C,iBAAiB,CAAC,GAAG,QAAQ,eAAe;AAAA,MAC9C;AAAA,MACA,GAAI,QAAQ,iBAAiB,UAAa;AAAA,QACxC,cAAc,QAAQ;AAAA,MACxB;AAAA,MACA,GAAI,QAAQ,4BAA4B,UAAa;AAAA,QACnD,yBAAyB,QAAQ;AAAA,MACnC;AAAA,IACF,CAAC;AACD,QAAI,aAAa,QAAW;AAC1B,aAAO;AAAA,IACT;AACA,WAAO,KAAK;AAAA,EACd;AACF;AAMO,SAAS,oBAAoB,SAAwC;AAC1E,SAAO,cAAc,OAAO,EAAE;AAChC;","names":["getOAuthProtectedResourceMetadataUrl","oauthMetadataResponse","requireBearerAuth"]}

package/dist/commands/build.js

@@ -10,9 +10,12 @@ import {
   virtualViewId
 } from "../chunk-DQ7LE4ZA.js";
 import {
-  normalizeAssetsBaseUrl,
   viewAssetsBasePath
-} from "../chunk-VV2P4ZFZ.js";
+} from "../chunk-STCR3P5O.js";
+import {
+  normalizeAssetsBaseUrl
+} from "../chunk-FC2Z2VFO.js";
+import "../chunk-QUUANIE4.js";
 
 // src/cli/build.ts
 import { randomBytes } from "crypto";

package/dist/commands/build.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/cli/build.ts","../../src/cli/views-bindings.ts"],"sourcesContent":["/**\n * `mcp-use build` — Vite SSR/node build of the user's server entry into the\n * `.mcp-use/build/` workspace directory (CLI_SPEC.md § Commands → build).\n *\n * When views exist (under `resources/<name>/view.tsx`), also runs a client-environment\n * build per view (hashed assets on disk), validates bindings, and emits a\n * wrapper entry that primes views before re-exporting the server (VIEWS_SPEC.md §\n * Build system).\n *\n * `vite` is an optional peer dependency of `mcp-use` (never a regular\n * dependency): this module is only ever reached through the bin's dynamic\n * `import(\"./cli/index.js\")`, so a missing install surfaces as a rejected\n * promise there (classified by `bin/main.ts`'s `isViteMissing`), not at\n * package load time.\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { existsSync } from \"node:fs\";\nimport { cp, mkdir, rm, writeFile } from \"node:fs/promises\";\nimport { join, relative } from \"node:path\";\nimport tailwindcss from \"@tailwindcss/vite\";\nimport react from \"@vitejs/plugin-react\";\nimport { build } from \"vite\";\n\nimport { discoverEntry } from \"./entry.js\";\nimport { mcpUseViewsPlugin } from \"./views-plugin.js\";\nimport { ensureToolsDeclaration } from \"./tools-declaration.js\";\nimport {\n  resolveBuildBasePath,\n  validateViewBindingsAtBuild,\n} from \"./views-bindings.js\";\nimport {\n  createBindingValidationServer,\n  discoverViews,\n  virtualViewId,\n  type DiscoveredView,\n} from \"./views.js\";\nimport { resolveTailwindCss, resolveUserViteConfig } from \"./vite-config.js\";\nimport { resolveWorkspacePaths, type BuildManifest } from \"./workspace.js\";\nimport { normalizeAssetsBaseUrl } from \"../views/origin.js\";\nimport { viewAssetsBasePath } from \"../views/document.js\";\nimport type { ViewsManifest } from \"../views/types.js\";\n\n/** Fixed filename of the emitted server entry inside `.mcp-use/build/`. */\nconst BUILD_ENTRY_NAME = \"index.js\";\n\nconst WRAPPER_BASENAME = \"entry-wrapper.ts\";\n\n/** Inline imported assets as data URLs up to this byte size (effectively all). */\nconst ASSETS_INLINE_LIMIT = 100 * 1024 * 1024;\n\n/**\n * Options for {@link runBuild}.\n *\n * @internal\n */\nexport interface BuildOptions {\n  /** Absolute path to the project root (the directory containing the entry). */\n  cwd: string;\n  /**\n   * Explicit entry path (the `--entry` flag), absolute or relative to `cwd`.\n   *\n   * @defaultValue Conventional discovery: `src/index.ts`, `src/server.ts`,\n   * `index.ts`, `server.ts` — first hit wins.\n   */\n  entry?: string;\n  /**\n   * When true (`mcp-use build --with-inspector`), record `inspector: true`\n   * in the build manifest.\n   */\n  withInspector?: boolean;\n}\n\n/**\n * Emit a short-lived wrapper module under `.mcp-use/cache/` that primes views\n * before re-exporting the user's entry (VIEWS_SPEC.md § Registration mechanism).\n */\nasync function writeWrapperEntry(\n  cacheDir: string,\n  userEntry: string,\n  viewsManifest: ViewsManifest\n): Promise<string> {\n  const wrapperPath = join(cacheDir, WRAPPER_BASENAME);\n  await mkdir(cacheDir, { recursive: true });\n  const manifestJson = JSON.stringify(viewsManifest);\n  await writeFile(\n    wrapperPath,\n    [\n      `import server from ${JSON.stringify(userEntry)};`,\n      `import { registerViews } from \"mcp-use\";`,\n      `server[registerViews](${manifestJson});`,\n      `export default server;`,\n      \"\",\n    ].join(\"\\n\")\n  );\n  return wrapperPath;\n}\n\nfunction readBuildAssetsBase(): string | undefined {\n  const raw = process.env[\"MCP_ASSETS_URL\"];\n  if (raw === undefined || raw.trim() === \"\") {\n    return undefined;\n  }\n  try {\n    return normalizeAssetsBaseUrl(new URL(raw).href.replace(/\\/$/, \"\"));\n  } catch {\n    return undefined;\n  }\n}\n\n/** Rewrite a view-relative manifest path to a full CDN URL at build time. */\nfunction toCdnAssetUrl(\n  relativePath: string,\n  viewName: string,\n  assetsBase: string,\n  basePath: string\n): string {\n  const clean = relativePath.replace(/^\\/+/, \"\");\n  return `${assetsBase}${viewAssetsBasePath(basePath, viewName)}${clean}`;\n}\n\nfunction applyBuildAssetsPrefix(\n  entry: ViewsManifest[string],\n  viewName: string,\n  assetsBase: string,\n  basePath: string\n): ViewsManifest[string] {\n  if (entry.kind !== \"external\") {\n    return entry;\n  }\n  return {\n    ...entry,\n    entry: toCdnAssetUrl(entry.entry, viewName, assetsBase, basePath),\n    css: entry.css.map((path) =>\n      toCdnAssetUrl(path, viewName, assetsBase, basePath)\n    ),\n    ...(entry.scripts !== undefined && {\n      scripts: entry.scripts.map((path) =>\n        toCdnAssetUrl(path, viewName, assetsBase, basePath)\n      ),\n    }),\n  };\n}\n\n/**\n * Build one view into hashed assets on disk, then record view-relative paths\n * in the manifest (served over HTTP at runtime).\n */\nasync function buildExternalView(\n  view: DiscoveredView,\n  options: {\n    cwd: string;\n    cacheDir: string;\n    viewsOutDir: string;\n    userViteConfig: string | false;\n  }\n): Promise<ViewsManifest[string]> {\n  const viewOutDir = join(options.viewsOutDir, view.name);\n  const clientResult = await build({\n    root: options.cwd,\n    configFile: options.userViteConfig,\n    envFile: false,\n    logLevel: \"warn\",\n    cacheDir: options.cacheDir,\n    resolve: { alias: { tailwindcss: resolveTailwindCss() } },\n    plugins: [\n      tailwindcss(),\n      react(),\n      mcpUseViewsPlugin({ getViews: () => [view] }),\n    ],\n    build: {\n      outDir: viewOutDir,\n      emptyOutDir: true,\n      target: \"es2022\",\n      sourcemap: false,\n      minify: true,\n      cssCodeSplit: false,\n      assetsInlineLimit: ASSETS_INLINE_LIMIT,\n      rollupOptions: {\n        input: { [view.name]: virtualViewId(view.name) },\n        output: {\n          format: \"es\",\n          codeSplitting: false,\n          entryFileNames: \"assets/[name]-[hash].js\",\n          assetFileNames: \"assets/[name]-[hash][extname]\",\n        },\n      },\n    },\n    base: \"./\",\n  });\n\n  const clientOutput = Array.isArray(clientResult)\n    ? clientResult[0]\n    : clientResult;\n  if (clientOutput === undefined || !(\"output\" in clientOutput)) {\n    throw new Error(`Client build for view \"${view.name}\" produced no output.`);\n  }\n\n  const rawOutput = clientOutput.output;\n  const items = Array.isArray(rawOutput) ? rawOutput : Object.values(rawOutput);\n\n  let jsFileName: string | undefined;\n  let cssFileName: string | undefined;\n\n  for (const item of items) {\n    if (typeof item !== \"object\" || item === null || !(\"fileName\" in item)) {\n      continue;\n    }\n    const fileName = (item as { fileName: unknown }).fileName;\n    if (typeof fileName !== \"string\") {\n      continue;\n    }\n    const typed = item as {\n      type?: string;\n      isEntry?: boolean;\n      fileName: string;\n    };\n    if (typed.type === \"chunk\" && typed.isEntry === true) {\n      jsFileName = typed.fileName;\n    } else if (typed.type === \"asset\" && typed.fileName.endsWith(\".css\")) {\n      cssFileName = typed.fileName;\n    }\n  }\n\n  if (jsFileName === undefined) {\n    throw new Error(\n      `Client build produced no entry chunk for view \"${view.name}\".`\n    );\n  }\n\n  return {\n    kind: \"external\",\n    entry: jsFileName.replace(/^\\/+/, \"\"),\n    css: cssFileName !== undefined ? [cssFileName.replace(/^\\/+/, \"\")] : [],\n  };\n}\n\n/**\n * Build the project's server for production: a Vite build of the SSR/node\n * environment only (the client environment for views arrives with\n * VIEWS_SPEC.md), emitted as ESM to `.mcp-use/build/` with a `manifest.json`\n * alongside it.\n *\n * Dependencies stay external (`ssr: { external: true }`): only the\n * user's own source is bundled; every bare import resolves from\n * `node_modules` at runtime. The built entry preserves the default export\n * (the `MCPServer` instance) so `mcp-use start` can import and serve it.\n *\n * There is deliberately no typecheck step — the build is transpile-only;\n * users run `tsc --noEmit` via their own script.\n *\n * @param options - Project root and optional entry override.\n * @throws If no entry is found (see {@link discoverEntry}), or if `vite` is\n * not installed (`mcp-use build` requires it as a devDependency) — the\n * `import(\"vite\")` rejection propagates to the bin's dispatch boundary,\n * which classifies it and prints the install hint.\n *\n * @internal Reached only via the bin's `import(\"./cli/index.js\")`\n * dispatch (`bin/main.ts`) — not re-exported from the package's \".\" entry.\n */\nexport async function runBuild(options: BuildOptions): Promise<void> {\n  const startedAt = performance.now();\n  const entry = discoverEntry(options.cwd, options.entry);\n  if (await ensureToolsDeclaration(options.cwd, entry)) {\n    console.log(\"[mcp-use] created tools.d.ts\");\n  }\n  const paths = resolveWorkspacePaths(options.cwd);\n  const views = discoverViews(options.cwd);\n  const userViteConfig = resolveUserViteConfig(options.cwd);\n  const inspector = options.withInspector === true;\n\n  if (views.length === 0) {\n    await build({\n      root: options.cwd,\n      configFile: false,\n      envFile: false,\n      logLevel: \"warn\",\n      cacheDir: paths.cache,\n      build: {\n        ssr: entry,\n        outDir: paths.build,\n        emptyOutDir: true,\n        target: \"node24\",\n        sourcemap: true,\n        minify: false,\n        rollupOptions: {\n          output: {\n            format: \"es\",\n            entryFileNames: BUILD_ENTRY_NAME,\n          },\n        },\n      },\n      ssr: {\n        external: true,\n        target: \"node\",\n      },\n    });\n\n    const manifest: BuildManifest = {\n      buildId: randomBytes(8).toString(\"hex\"),\n      entryPoint: BUILD_ENTRY_NAME,\n      createdAt: new Date().toISOString(),\n      inspector,\n    };\n    await mkdir(paths.build, { recursive: true });\n    await writeFile(\n      paths.buildManifest,\n      `${JSON.stringify(manifest, null, 2)}\\n`\n    );\n\n    const duration = Math.round(performance.now() - startedAt);\n    console.log(\n      `[mcp-use] built ${relative(options.cwd, entry)} → ` +\n        `${relative(options.cwd, paths.build)}/${BUILD_ENTRY_NAME} (${duration}ms)`\n    );\n    return;\n  }\n\n  await rm(paths.build, { recursive: true, force: true });\n\n  const viewsOutDir = join(paths.build, \"views\");\n  await mkdir(viewsOutDir, { recursive: true });\n\n  const bindingServer = await createBindingValidationServer(\n    options.cwd,\n    paths.cache,\n    false\n  );\n  let buildBasePath: string;\n  try {\n    buildBasePath = await resolveBuildBasePath(\n      bindingServer.environments.ssr,\n      entry\n    );\n  } catch (error) {\n    await bindingServer.close();\n    throw error;\n  }\n\n  const viewsManifest: ViewsManifest = {};\n  const buildAssetsBase = readBuildAssetsBase();\n  for (const view of views) {\n    let manifestEntry = await buildExternalView(view, {\n      cwd: options.cwd,\n      cacheDir: paths.cache,\n      viewsOutDir,\n      userViteConfig,\n    });\n    if (buildAssetsBase !== undefined) {\n      manifestEntry = applyBuildAssetsPrefix(\n        manifestEntry,\n        view.name,\n        buildAssetsBase,\n        buildBasePath\n      );\n    }\n    viewsManifest[view.name] = manifestEntry;\n  }\n\n  if (buildAssetsBase !== undefined) {\n    console.log(\n      `[mcp-use] MCP_ASSETS_URL set — manifest uses CDN URLs; upload ` +\n        `${relative(options.cwd, viewsOutDir)}/ to your asset host.`\n    );\n    if (buildBasePath !== \"/mcp\") {\n      console.log(\n        `[mcp-use] CDN manifest uses basePath ${buildBasePath} from server entry`\n      );\n    }\n  }\n\n  const publicSrc = join(options.cwd, \"public\");\n  if (existsSync(publicSrc)) {\n    await cp(publicSrc, join(viewsOutDir, \"public\"), { recursive: true });\n  }\n\n  try {\n    await validateViewBindingsAtBuild(\n      bindingServer.environments.ssr,\n      entry,\n      viewsManifest\n    );\n  } finally {\n    await bindingServer.close();\n  }\n\n  const wrapperEntry = await writeWrapperEntry(\n    paths.cache,\n    entry,\n    viewsManifest\n  );\n\n  await build({\n    root: options.cwd,\n    configFile: false,\n    envFile: false,\n    logLevel: \"warn\",\n    cacheDir: paths.cache,\n    build: {\n      ssr: wrapperEntry,\n      outDir: paths.build,\n      emptyOutDir: false,\n      target: \"node24\",\n      sourcemap: true,\n      minify: false,\n      rollupOptions: {\n        output: {\n          format: \"es\",\n          entryFileNames: BUILD_ENTRY_NAME,\n        },\n      },\n    },\n    ssr: {\n      external: true,\n      target: \"node\",\n    },\n  });\n\n  const manifest: BuildManifest = {\n    buildId: randomBytes(8).toString(\"hex\"),\n    entryPoint: BUILD_ENTRY_NAME,\n    createdAt: new Date().toISOString(),\n    inspector,\n  };\n  await mkdir(paths.build, { recursive: true });\n  await writeFile(\n    paths.buildManifest,\n    `${JSON.stringify(manifest, null, 2)}\\n`\n  );\n\n  const duration = Math.round(performance.now() - startedAt);\n  const viewNames = views.map((v) => v.name).join(\", \");\n  console.log(\n    `[mcp-use] built ${relative(options.cwd, entry)} + views (${viewNames}) → ` +\n      `${relative(options.cwd, paths.build)}/${BUILD_ENTRY_NAME} (${duration}ms)`\n  );\n}\n","/**\n * Build-time view binding validation via mount-time checks.\n */\n\nimport { createServerModuleRunner, type DevEnvironment } from \"vite\";\n\nimport type { ViewsManifest } from \"../views/types.js\";\n\nconst DEFAULT_BASE_PATH = \"/mcp\";\n\n/** Synthetic origin for entry evaluation when OAuth needs MCP_URL at import. */\nconst BUILD_ENTRY_MCP_URL = \"http://localhost:3000\";\n\n/**\n * Duck-typed server shape needed for binding validation.\n *\n * @internal\n */\ninterface ServerLike {\n  getHandler(): unknown;\n  __primeViews(views: ViewsManifest, options?: { dev?: boolean }): void;\n  basePath?: string;\n}\n\n/**\n * Import the server entry and read `basePath` from the default export.\n *\n * Does not prime views or call `getHandler()`. Sets a synthetic `MCP_URL` only\n * when unset so OAuth entries can construct during build introspection.\n *\n * @internal\n */\nexport async function resolveBuildBasePath(\n  environment: DevEnvironment,\n  entry: string\n): Promise<string> {\n  const runner = createServerModuleRunner(environment, {\n    hmr: false,\n    sourcemapInterceptor: \"node\",\n  });\n\n  const previousMcpUrl = process.env[\"MCP_URL\"];\n  try {\n    if (previousMcpUrl === undefined) {\n      process.env[\"MCP_URL\"] = BUILD_ENTRY_MCP_URL;\n    }\n\n    const serverModule = (await runner.import(entry)) as {\n      default?: ServerLike;\n    };\n    const server = serverModule.default;\n    if (server === null || typeof server !== \"object\") {\n      throw new Error(\n        \"The server entry must default-export the MCPServer instance.\"\n      );\n    }\n\n    return server.basePath ?? DEFAULT_BASE_PATH;\n  } finally {\n    if (previousMcpUrl === undefined) {\n      delete process.env[\"MCP_URL\"];\n    } else {\n      process.env[\"MCP_URL\"] = previousMcpUrl;\n    }\n    await runner.close();\n  }\n}\n\n/**\n * Prime the server with the manifest and run mount-time binding validation\n * by calling `getHandler()`.\n *\n * Surfaces the same errors as runtime mount: missing primed view, missing\n * `outputSchema`, double binding. Unbound views emit a warning to stderr.\n *\n * @param environment - Vite SSR environment for module evaluation.\n * @param entry - Absolute path to the user's server entry.\n * @param viewsManifest - Built or dev-shaped manifest to prime.\n * @throws On binding hard errors (naming the view/tool).\n *\n * @internal\n */\nexport async function validateViewBindingsAtBuild(\n  environment: DevEnvironment,\n  entry: string,\n  viewsManifest: ViewsManifest\n): Promise<void> {\n  const runner = createServerModuleRunner(environment, {\n    hmr: false,\n    sourcemapInterceptor: \"node\",\n  });\n\n  try {\n    const serverModule = (await runner.import(entry)) as {\n      default?: ServerLike;\n    };\n    const server = serverModule.default;\n    if (server === null || typeof server !== \"object\") {\n      throw new Error(\n        \"The server entry must default-export the MCPServer instance.\"\n      );\n    }\n\n    if (typeof server.__primeViews !== \"function\") {\n      throw new Error(\n        \"The entry's default export does not support __primeViews.\"\n      );\n    }\n    server.__primeViews(viewsManifest);\n    server.getHandler();\n  } finally {\n    await runner.close();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAgBA,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAC3B,SAAS,IAAI,OAAO,IAAI,iBAAiB;AACzC,SAAS,MAAM,gBAAgB;AAC/B,OAAO,iBAAiB;AACxB,OAAO,WAAW;AAClB,SAAS,aAAa;;;AClBtB,SAAS,gCAAqD;AAI9D,IAAM,oBAAoB;AAG1B,IAAM,sBAAsB;AAqB5B,eAAsB,qBACpB,aACA,OACiB;AACjB,QAAM,SAAS,yBAAyB,aAAa;AAAA,IACnD,KAAK;AAAA,IACL,sBAAsB;AAAA,EACxB,CAAC;AAED,QAAM,iBAAiB,QAAQ,IAAI,SAAS;AAC5C,MAAI;AACF,QAAI,mBAAmB,QAAW;AAChC,cAAQ,IAAI,SAAS,IAAI;AAAA,IAC3B;AAEA,UAAM,eAAgB,MAAM,OAAO,OAAO,KAAK;AAG/C,UAAM,SAAS,aAAa;AAC5B,QAAI,WAAW,QAAQ,OAAO,WAAW,UAAU;AACjD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,WAAO,OAAO,YAAY;AAAA,EAC5B,UAAE;AACA,QAAI,mBAAmB,QAAW;AAChC,aAAO,QAAQ,IAAI,SAAS;AAAA,IAC9B,OAAO;AACL,cAAQ,IAAI,SAAS,IAAI;AAAA,IAC3B;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;AAgBA,eAAsB,4BACpB,aACA,OACA,eACe;AACf,QAAM,SAAS,yBAAyB,aAAa;AAAA,IACnD,KAAK;AAAA,IACL,sBAAsB;AAAA,EACxB,CAAC;AAED,MAAI;AACF,UAAM,eAAgB,MAAM,OAAO,OAAO,KAAK;AAG/C,UAAM,SAAS,aAAa;AAC5B,QAAI,WAAW,QAAQ,OAAO,WAAW,UAAU;AACjD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI,OAAO,OAAO,iBAAiB,YAAY;AAC7C,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,WAAO,aAAa,aAAa;AACjC,WAAO,WAAW;AAAA,EACpB,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;;;ADrEA,IAAM,mBAAmB;AAEzB,IAAM,mBAAmB;AAGzB,IAAM,sBAAsB,MAAM,OAAO;AA4BzC,eAAe,kBACb,UACA,WACA,eACiB;AACjB,QAAM,cAAc,KAAK,UAAU,gBAAgB;AACnD,QAAM,MAAM,UAAU,EAAE,WAAW,KAAK,CAAC;AACzC,QAAM,eAAe,KAAK,UAAU,aAAa;AACjD,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE,sBAAsB,KAAK,UAAU,SAAS,CAAC;AAAA,MAC/C;AAAA,MACA,yBAAyB,YAAY;AAAA,MACrC;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AACA,SAAO;AACT;AAEA,SAAS,sBAA0C;AACjD,QAAM,MAAM,QAAQ,IAAI,gBAAgB;AACxC,MAAI,QAAQ,UAAa,IAAI,KAAK,MAAM,IAAI;AAC1C,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,uBAAuB,IAAI,IAAI,GAAG,EAAE,KAAK,QAAQ,OAAO,EAAE,CAAC;AAAA,EACpE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,SAAS,cACP,cACA,UACA,YACA,UACQ;AACR,QAAM,QAAQ,aAAa,QAAQ,QAAQ,EAAE;AAC7C,SAAO,GAAG,UAAU,GAAG,mBAAmB,UAAU,QAAQ,CAAC,GAAG,KAAK;AACvE;AAEA,SAAS,uBACP,OACA,UACA,YACA,UACuB;AACvB,MAAI,MAAM,SAAS,YAAY;AAC7B,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,OAAO,cAAc,MAAM,OAAO,UAAU,YAAY,QAAQ;AAAA,IAChE,KAAK,MAAM,IAAI;AAAA,MAAI,CAAC,SAClB,cAAc,MAAM,UAAU,YAAY,QAAQ;AAAA,IACpD;AAAA,IACA,GAAI,MAAM,YAAY,UAAa;AAAA,MACjC,SAAS,MAAM,QAAQ;AAAA,QAAI,CAAC,SAC1B,cAAc,MAAM,UAAU,YAAY,QAAQ;AAAA,MACpD;AAAA,IACF;AAAA,EACF;AACF;AAMA,eAAe,kBACb,MACA,SAMgC;AAChC,QAAM,aAAa,KAAK,QAAQ,aAAa,KAAK,IAAI;AACtD,QAAM,eAAe,MAAM,MAAM;AAAA,IAC/B,MAAM,QAAQ;AAAA,IACd,YAAY,QAAQ;AAAA,IACpB,SAAS;AAAA,IACT,UAAU;AAAA,IACV,UAAU,QAAQ;AAAA,IAClB,SAAS,EAAE,OAAO,EAAE,aAAa,mBAAmB,EAAE,EAAE;AAAA,IACxD,SAAS;AAAA,MACP,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,kBAAkB,EAAE,UAAU,MAAM,CAAC,IAAI,EAAE,CAAC;AAAA,IAC9C;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,mBAAmB;AAAA,MACnB,eAAe;AAAA,QACb,OAAO,EAAE,CAAC,KAAK,IAAI,GAAG,cAAc,KAAK,IAAI,EAAE;AAAA,QAC/C,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,eAAe;AAAA,UACf,gBAAgB;AAAA,UAChB,gBAAgB;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,EACR,CAAC;AAED,QAAM,eAAe,MAAM,QAAQ,YAAY,IAC3C,aAAa,CAAC,IACd;AACJ,MAAI,iBAAiB,UAAa,EAAE,YAAY,eAAe;AAC7D,UAAM,IAAI,MAAM,0BAA0B,KAAK,IAAI,uBAAuB;AAAA,EAC5E;AAEA,QAAM,YAAY,aAAa;AAC/B,QAAM,QAAQ,MAAM,QAAQ,SAAS,IAAI,YAAY,OAAO,OAAO,SAAS;AAE5E,MAAI;AACJ,MAAI;AAEJ,aAAW,QAAQ,OAAO;AACxB,QAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,EAAE,cAAc,OAAO;AACtE;AAAA,IACF;AACA,UAAM,WAAY,KAA+B;AACjD,QAAI,OAAO,aAAa,UAAU;AAChC;AAAA,IACF;AACA,UAAM,QAAQ;AAKd,QAAI,MAAM,SAAS,WAAW,MAAM,YAAY,MAAM;AACpD,mBAAa,MAAM;AAAA,IACrB,WAAW,MAAM,SAAS,WAAW,MAAM,SAAS,SAAS,MAAM,GAAG;AACpE,oBAAc,MAAM;AAAA,IACtB;AAAA,EACF;AAEA,MAAI,eAAe,QAAW;AAC5B,UAAM,IAAI;AAAA,MACR,kDAAkD,KAAK,IAAI;AAAA,IAC7D;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,WAAW,QAAQ,QAAQ,EAAE;AAAA,IACpC,KAAK,gBAAgB,SAAY,CAAC,YAAY,QAAQ,QAAQ,EAAE,CAAC,IAAI,CAAC;AAAA,EACxE;AACF;AAyBA,eAAsB,SAAS,SAAsC;AACnE,QAAM,YAAY,YAAY,IAAI;AAClC,QAAM,QAAQ,cAAc,QAAQ,KAAK,QAAQ,KAAK;AACtD,MAAI,MAAM,uBAAuB,QAAQ,KAAK,KAAK,GAAG;AACpD,YAAQ,IAAI,8BAA8B;AAAA,EAC5C;AACA,QAAM,QAAQ,sBAAsB,QAAQ,GAAG;AAC/C,QAAM,QAAQ,cAAc,QAAQ,GAAG;AACvC,QAAM,iBAAiB,sBAAsB,QAAQ,GAAG;AACxD,QAAM,YAAY,QAAQ,kBAAkB;AAE5C,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,MAAM;AAAA,MACV,MAAM,QAAQ;AAAA,MACd,YAAY;AAAA,MACZ,SAAS;AAAA,MACT,UAAU;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,OAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ,MAAM;AAAA,QACd,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,eAAe;AAAA,UACb,QAAQ;AAAA,YACN,QAAQ;AAAA,YACR,gBAAgB;AAAA,UAClB;AAAA,QACF;AAAA,MACF;AAAA,MACA,KAAK;AAAA,QACH,UAAU;AAAA,QACV,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAED,UAAMA,YAA0B;AAAA,MAC9B,SAAS,YAAY,CAAC,EAAE,SAAS,KAAK;AAAA,MACtC,YAAY;AAAA,MACZ,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF;AACA,UAAM,MAAM,MAAM,OAAO,EAAE,WAAW,KAAK,CAAC;AAC5C,UAAM;AAAA,MACJ,MAAM;AAAA,MACN,GAAG,KAAK,UAAUA,WAAU,MAAM,CAAC,CAAC;AAAA;AAAA,IACtC;AAEA,UAAMC,YAAW,KAAK,MAAM,YAAY,IAAI,IAAI,SAAS;AACzD,YAAQ;AAAA,MACN,mBAAmB,SAAS,QAAQ,KAAK,KAAK,CAAC,WAC1C,SAAS,QAAQ,KAAK,MAAM,KAAK,CAAC,IAAI,gBAAgB,KAAKA,SAAQ;AAAA,IAC1E;AACA;AAAA,EACF;AAEA,QAAM,GAAG,MAAM,OAAO,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAEtD,QAAM,cAAc,KAAK,MAAM,OAAO,OAAO;AAC7C,QAAM,MAAM,aAAa,EAAE,WAAW,KAAK,CAAC;AAE5C,QAAM,gBAAgB,MAAM;AAAA,IAC1B,QAAQ;AAAA,IACR,MAAM;AAAA,IACN;AAAA,EACF;AACA,MAAI;AACJ,MAAI;AACF,oBAAgB,MAAM;AAAA,MACpB,cAAc,aAAa;AAAA,MAC3B;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,cAAc,MAAM;AAC1B,UAAM;AAAA,EACR;AAEA,QAAM,gBAA+B,CAAC;AACtC,QAAM,kBAAkB,oBAAoB;AAC5C,aAAW,QAAQ,OAAO;AACxB,QAAI,gBAAgB,MAAM,kBAAkB,MAAM;AAAA,MAChD,KAAK,QAAQ;AAAA,MACb,UAAU,MAAM;AAAA,MAChB;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,oBAAoB,QAAW;AACjC,sBAAgB;AAAA,QACd;AAAA,QACA,KAAK;AAAA,QACL;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,kBAAc,KAAK,IAAI,IAAI;AAAA,EAC7B;AAEA,MAAI,oBAAoB,QAAW;AACjC,YAAQ;AAAA,MACN,sEACK,SAAS,QAAQ,KAAK,WAAW,CAAC;AAAA,IACzC;AACA,QAAI,kBAAkB,QAAQ;AAC5B,cAAQ;AAAA,QACN,wCAAwC,aAAa;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,KAAK,QAAQ,KAAK,QAAQ;AAC5C,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,GAAG,WAAW,KAAK,aAAa,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EACtE;AAEA,MAAI;AACF,UAAM;AAAA,MACJ,cAAc,aAAa;AAAA,MAC3B;AAAA,MACA;AAAA,IACF;AAAA,EACF,UAAE;AACA,UAAM,cAAc,MAAM;AAAA,EAC5B;AAEA,QAAM,eAAe,MAAM;AAAA,IACzB,MAAM;AAAA,IACN;AAAA,IACA;AAAA,EACF;AAEA,QAAM,MAAM;AAAA,IACV,MAAM,QAAQ;AAAA,IACd,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,UAAU;AAAA,IACV,UAAU,MAAM;AAAA,IAChB,OAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ,MAAM;AAAA,MACd,aAAa;AAAA,MACb,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,eAAe;AAAA,QACb,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,gBAAgB;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,UAAU;AAAA,MACV,QAAQ;AAAA,IACV;AAAA,EACF,CAAC;AAED,QAAM,WAA0B;AAAA,IAC9B,SAAS,YAAY,CAAC,EAAE,SAAS,KAAK;AAAA,IACtC,YAAY;AAAA,IACZ,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC;AAAA,EACF;AACA,QAAM,MAAM,MAAM,OAAO,EAAE,WAAW,KAAK,CAAC;AAC5C,QAAM;AAAA,IACJ,MAAM;AAAA,IACN,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAAA;AAAA,EACtC;AAEA,QAAM,WAAW,KAAK,MAAM,YAAY,IAAI,IAAI,SAAS;AACzD,QAAM,YAAY,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI;AACpD,UAAQ;AAAA,IACN,mBAAmB,SAAS,QAAQ,KAAK,KAAK,CAAC,aAAa,SAAS,YAChE,SAAS,QAAQ,KAAK,MAAM,KAAK,CAAC,IAAI,gBAAgB,KAAK,QAAQ;AAAA,EAC1E;AACF;","names":["manifest","duration"]}
+{"version":3,"sources":["../../src/cli/build.ts","../../src/cli/views-bindings.ts"],"sourcesContent":["/**\n * `mcp-use build` — Vite SSR/node build of the user's server entry into the\n * `.mcp-use/build/` workspace directory (CLI_SPEC.md § Commands → build).\n *\n * When views exist (under `resources/<name>/view.tsx`), also runs a client-environment\n * build per view (hashed assets on disk), validates bindings, and emits a\n * wrapper entry that primes views before re-exporting the server (VIEWS_SPEC.md §\n * Build system).\n *\n * `vite` is an optional peer dependency of `mcp-use` (never a regular\n * dependency): this module is only ever reached through the bin's dynamic\n * `import(\"./cli/index.js\")`, so a missing install surfaces as a rejected\n * promise there (classified by `bin/main.ts`'s `isViteMissing`), not at\n * package load time.\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { existsSync } from \"node:fs\";\nimport { cp, mkdir, rm, writeFile } from \"node:fs/promises\";\nimport { join, relative } from \"node:path\";\nimport tailwindcss from \"@tailwindcss/vite\";\nimport react from \"@vitejs/plugin-react\";\nimport { build } from \"vite\";\n\nimport { discoverEntry } from \"./entry.js\";\nimport { mcpUseViewsPlugin } from \"./views-plugin.js\";\nimport { ensureToolsDeclaration } from \"./tools-declaration.js\";\nimport {\n  resolveBuildBasePath,\n  validateViewBindingsAtBuild,\n} from \"./views-bindings.js\";\nimport {\n  createBindingValidationServer,\n  discoverViews,\n  virtualViewId,\n  type DiscoveredView,\n} from \"./views.js\";\nimport { resolveTailwindCss, resolveUserViteConfig } from \"./vite-config.js\";\nimport { resolveWorkspacePaths, type BuildManifest } from \"./workspace.js\";\nimport { normalizeAssetsBaseUrl } from \"../views/origin.js\";\nimport { viewAssetsBasePath } from \"../views/document.js\";\nimport type { ViewsManifest } from \"../views/types.js\";\n\n/** Fixed filename of the emitted server entry inside `.mcp-use/build/`. */\nconst BUILD_ENTRY_NAME = \"index.js\";\n\nconst WRAPPER_BASENAME = \"entry-wrapper.ts\";\n\n/** Inline imported assets as data URLs up to this byte size (effectively all). */\nconst ASSETS_INLINE_LIMIT = 100 * 1024 * 1024;\n\n/**\n * Options for {@link runBuild}.\n *\n * @internal\n */\nexport interface BuildOptions {\n  /** Absolute path to the project root (the directory containing the entry). */\n  cwd: string;\n  /**\n   * Explicit entry path (the `--entry` flag), absolute or relative to `cwd`.\n   *\n   * @defaultValue Conventional discovery: `src/index.ts`, `src/server.ts`,\n   * `index.ts`, `server.ts` — first hit wins.\n   */\n  entry?: string;\n  /**\n   * When true (`mcp-use build --with-inspector`), record `inspector: true`\n   * in the build manifest.\n   */\n  withInspector?: boolean;\n}\n\n/**\n * Emit a short-lived wrapper module under `.mcp-use/cache/` that primes views\n * before re-exporting the user's entry (VIEWS_SPEC.md § Registration mechanism).\n */\nasync function writeWrapperEntry(\n  cacheDir: string,\n  userEntry: string,\n  viewsManifest: ViewsManifest\n): Promise<string> {\n  const wrapperPath = join(cacheDir, WRAPPER_BASENAME);\n  await mkdir(cacheDir, { recursive: true });\n  const manifestJson = JSON.stringify(viewsManifest);\n  await writeFile(\n    wrapperPath,\n    [\n      `import server from ${JSON.stringify(userEntry)};`,\n      `import { registerViews } from \"mcp-use\";`,\n      `server[registerViews](${manifestJson});`,\n      `export default server;`,\n      \"\",\n    ].join(\"\\n\")\n  );\n  return wrapperPath;\n}\n\nfunction readBuildAssetsBase(): string | undefined {\n  const raw = process.env[\"MCP_ASSETS_URL\"];\n  if (raw === undefined || raw.trim() === \"\") {\n    return undefined;\n  }\n  try {\n    return normalizeAssetsBaseUrl(new URL(raw).href.replace(/\\/$/, \"\"));\n  } catch {\n    return undefined;\n  }\n}\n\n/** Rewrite a view-relative manifest path to a full CDN URL at build time. */\nfunction toCdnAssetUrl(\n  relativePath: string,\n  viewName: string,\n  assetsBase: string,\n  basePath: string\n): string {\n  const clean = relativePath.replace(/^\\/+/, \"\");\n  return `${assetsBase}${viewAssetsBasePath(basePath, viewName)}${clean}`;\n}\n\nfunction applyBuildAssetsPrefix(\n  entry: ViewsManifest[string],\n  viewName: string,\n  assetsBase: string,\n  basePath: string\n): ViewsManifest[string] {\n  if (entry.kind !== \"external\") {\n    return entry;\n  }\n  return {\n    ...entry,\n    entry: toCdnAssetUrl(entry.entry, viewName, assetsBase, basePath),\n    css: entry.css.map((path) =>\n      toCdnAssetUrl(path, viewName, assetsBase, basePath)\n    ),\n    ...(entry.scripts !== undefined && {\n      scripts: entry.scripts.map((path) =>\n        toCdnAssetUrl(path, viewName, assetsBase, basePath)\n      ),\n    }),\n  };\n}\n\n/**\n * Build one view into hashed assets on disk, then record view-relative paths\n * in the manifest (served over HTTP at runtime).\n */\nasync function buildExternalView(\n  view: DiscoveredView,\n  options: {\n    cwd: string;\n    cacheDir: string;\n    viewsOutDir: string;\n    userViteConfig: string | false;\n  }\n): Promise<ViewsManifest[string]> {\n  const viewOutDir = join(options.viewsOutDir, view.name);\n  const clientResult = await build({\n    root: options.cwd,\n    configFile: options.userViteConfig,\n    envFile: false,\n    logLevel: \"warn\",\n    cacheDir: options.cacheDir,\n    resolve: { alias: { tailwindcss: resolveTailwindCss() } },\n    plugins: [\n      tailwindcss(),\n      react(),\n      mcpUseViewsPlugin({ getViews: () => [view] }),\n    ],\n    build: {\n      outDir: viewOutDir,\n      emptyOutDir: true,\n      target: \"es2022\",\n      sourcemap: false,\n      minify: true,\n      cssCodeSplit: false,\n      assetsInlineLimit: ASSETS_INLINE_LIMIT,\n      rollupOptions: {\n        input: { [view.name]: virtualViewId(view.name) },\n        output: {\n          format: \"es\",\n          codeSplitting: false,\n          entryFileNames: \"assets/[name]-[hash].js\",\n          assetFileNames: \"assets/[name]-[hash][extname]\",\n        },\n      },\n    },\n    base: \"./\",\n  });\n\n  const clientOutput = Array.isArray(clientResult)\n    ? clientResult[0]\n    : clientResult;\n  if (clientOutput === undefined || !(\"output\" in clientOutput)) {\n    throw new Error(`Client build for view \"${view.name}\" produced no output.`);\n  }\n\n  const rawOutput = clientOutput.output;\n  const items = Array.isArray(rawOutput) ? rawOutput : Object.values(rawOutput);\n\n  let jsFileName: string | undefined;\n  let cssFileName: string | undefined;\n\n  for (const item of items) {\n    if (typeof item !== \"object\" || item === null || !(\"fileName\" in item)) {\n      continue;\n    }\n    const fileName = (item as { fileName: unknown }).fileName;\n    if (typeof fileName !== \"string\") {\n      continue;\n    }\n    const typed = item as {\n      type?: string;\n      isEntry?: boolean;\n      fileName: string;\n    };\n    if (typed.type === \"chunk\" && typed.isEntry === true) {\n      jsFileName = typed.fileName;\n    } else if (typed.type === \"asset\" && typed.fileName.endsWith(\".css\")) {\n      cssFileName = typed.fileName;\n    }\n  }\n\n  if (jsFileName === undefined) {\n    throw new Error(\n      `Client build produced no entry chunk for view \"${view.name}\".`\n    );\n  }\n\n  return {\n    kind: \"external\",\n    entry: jsFileName.replace(/^\\/+/, \"\"),\n    css: cssFileName !== undefined ? [cssFileName.replace(/^\\/+/, \"\")] : [],\n  };\n}\n\n/**\n * Build the project's server for production: a Vite build of the SSR/node\n * environment only (the client environment for views arrives with\n * VIEWS_SPEC.md), emitted as ESM to `.mcp-use/build/` with a `manifest.json`\n * alongside it.\n *\n * Dependencies stay external (`ssr: { external: true }`): only the\n * user's own source is bundled; every bare import resolves from\n * `node_modules` at runtime. The built entry preserves the default export\n * (the `MCPServer` instance) so `mcp-use start` can import and serve it.\n *\n * There is deliberately no typecheck step — the build is transpile-only;\n * users run `tsc --noEmit` via their own script.\n *\n * @param options - Project root and optional entry override.\n * @throws If no entry is found (see {@link discoverEntry}), or if `vite` is\n * not installed (`mcp-use build` requires it as a devDependency) — the\n * `import(\"vite\")` rejection propagates to the bin's dispatch boundary,\n * which classifies it and prints the install hint.\n *\n * @internal Reached only via the bin's `import(\"./cli/index.js\")`\n * dispatch (`bin/main.ts`) — not re-exported from the package's \".\" entry.\n */\nexport async function runBuild(options: BuildOptions): Promise<void> {\n  const startedAt = performance.now();\n  const entry = discoverEntry(options.cwd, options.entry);\n  if (await ensureToolsDeclaration(options.cwd, entry)) {\n    console.log(\"[mcp-use] created tools.d.ts\");\n  }\n  const paths = resolveWorkspacePaths(options.cwd);\n  const views = discoverViews(options.cwd);\n  const userViteConfig = resolveUserViteConfig(options.cwd);\n  const inspector = options.withInspector === true;\n\n  if (views.length === 0) {\n    await build({\n      root: options.cwd,\n      configFile: false,\n      envFile: false,\n      logLevel: \"warn\",\n      cacheDir: paths.cache,\n      build: {\n        ssr: entry,\n        outDir: paths.build,\n        emptyOutDir: true,\n        target: \"node24\",\n        sourcemap: true,\n        minify: false,\n        rollupOptions: {\n          output: {\n            format: \"es\",\n            entryFileNames: BUILD_ENTRY_NAME,\n          },\n        },\n      },\n      ssr: {\n        external: true,\n        target: \"node\",\n      },\n    });\n\n    const manifest: BuildManifest = {\n      buildId: randomBytes(8).toString(\"hex\"),\n      entryPoint: BUILD_ENTRY_NAME,\n      createdAt: new Date().toISOString(),\n      inspector,\n    };\n    await mkdir(paths.build, { recursive: true });\n    await writeFile(\n      paths.buildManifest,\n      `${JSON.stringify(manifest, null, 2)}\\n`\n    );\n\n    const duration = Math.round(performance.now() - startedAt);\n    console.log(\n      `[mcp-use] built ${relative(options.cwd, entry)} → ` +\n        `${relative(options.cwd, paths.build)}/${BUILD_ENTRY_NAME} (${duration}ms)`\n    );\n    return;\n  }\n\n  await rm(paths.build, { recursive: true, force: true });\n\n  const viewsOutDir = join(paths.build, \"views\");\n  await mkdir(viewsOutDir, { recursive: true });\n\n  const bindingServer = await createBindingValidationServer(\n    options.cwd,\n    paths.cache,\n    false\n  );\n  let buildBasePath: string;\n  try {\n    buildBasePath = await resolveBuildBasePath(\n      bindingServer.environments.ssr,\n      entry\n    );\n  } catch (error) {\n    await bindingServer.close();\n    throw error;\n  }\n\n  const viewsManifest: ViewsManifest = {};\n  const buildAssetsBase = readBuildAssetsBase();\n  for (const view of views) {\n    let manifestEntry = await buildExternalView(view, {\n      cwd: options.cwd,\n      cacheDir: paths.cache,\n      viewsOutDir,\n      userViteConfig,\n    });\n    if (buildAssetsBase !== undefined) {\n      manifestEntry = applyBuildAssetsPrefix(\n        manifestEntry,\n        view.name,\n        buildAssetsBase,\n        buildBasePath\n      );\n    }\n    viewsManifest[view.name] = manifestEntry;\n  }\n\n  if (buildAssetsBase !== undefined) {\n    console.log(\n      `[mcp-use] MCP_ASSETS_URL set — manifest uses CDN URLs; upload ` +\n        `${relative(options.cwd, viewsOutDir)}/ to your asset host.`\n    );\n    if (buildBasePath !== \"/mcp\") {\n      console.log(\n        `[mcp-use] CDN manifest uses basePath ${buildBasePath} from server entry`\n      );\n    }\n  }\n\n  const publicSrc = join(options.cwd, \"public\");\n  if (existsSync(publicSrc)) {\n    await cp(publicSrc, join(viewsOutDir, \"public\"), { recursive: true });\n  }\n\n  try {\n    await validateViewBindingsAtBuild(\n      bindingServer.environments.ssr,\n      entry,\n      viewsManifest\n    );\n  } finally {\n    await bindingServer.close();\n  }\n\n  const wrapperEntry = await writeWrapperEntry(\n    paths.cache,\n    entry,\n    viewsManifest\n  );\n\n  await build({\n    root: options.cwd,\n    configFile: false,\n    envFile: false,\n    logLevel: \"warn\",\n    cacheDir: paths.cache,\n    build: {\n      ssr: wrapperEntry,\n      outDir: paths.build,\n      emptyOutDir: false,\n      target: \"node24\",\n      sourcemap: true,\n      minify: false,\n      rollupOptions: {\n        output: {\n          format: \"es\",\n          entryFileNames: BUILD_ENTRY_NAME,\n        },\n      },\n    },\n    ssr: {\n      external: true,\n      target: \"node\",\n    },\n  });\n\n  const manifest: BuildManifest = {\n    buildId: randomBytes(8).toString(\"hex\"),\n    entryPoint: BUILD_ENTRY_NAME,\n    createdAt: new Date().toISOString(),\n    inspector,\n  };\n  await mkdir(paths.build, { recursive: true });\n  await writeFile(\n    paths.buildManifest,\n    `${JSON.stringify(manifest, null, 2)}\\n`\n  );\n\n  const duration = Math.round(performance.now() - startedAt);\n  const viewNames = views.map((v) => v.name).join(\", \");\n  console.log(\n    `[mcp-use] built ${relative(options.cwd, entry)} + views (${viewNames}) → ` +\n      `${relative(options.cwd, paths.build)}/${BUILD_ENTRY_NAME} (${duration}ms)`\n  );\n}\n","/**\n * Build-time view binding validation via mount-time checks.\n */\n\nimport { createServerModuleRunner, type DevEnvironment } from \"vite\";\n\nimport type { ViewsManifest } from \"../views/types.js\";\n\nconst DEFAULT_BASE_PATH = \"/mcp\";\n\n/** Synthetic origin for entry evaluation when OAuth needs MCP_URL at import. */\nconst BUILD_ENTRY_MCP_URL = \"http://localhost:3000\";\n\n/**\n * Duck-typed server shape needed for binding validation.\n *\n * @internal\n */\ninterface ServerLike {\n  getHandler(): unknown;\n  __primeViews(views: ViewsManifest, options?: { dev?: boolean }): void;\n  basePath?: string;\n}\n\n/**\n * Import the server entry and read `basePath` from the default export.\n *\n * Does not prime views or call `getHandler()`. Sets a synthetic `MCP_URL` only\n * when unset so OAuth entries can construct during build introspection.\n *\n * @internal\n */\nexport async function resolveBuildBasePath(\n  environment: DevEnvironment,\n  entry: string\n): Promise<string> {\n  const runner = createServerModuleRunner(environment, {\n    hmr: false,\n    sourcemapInterceptor: \"node\",\n  });\n\n  const previousMcpUrl = process.env[\"MCP_URL\"];\n  try {\n    if (previousMcpUrl === undefined) {\n      process.env[\"MCP_URL\"] = BUILD_ENTRY_MCP_URL;\n    }\n\n    const serverModule = (await runner.import(entry)) as {\n      default?: ServerLike;\n    };\n    const server = serverModule.default;\n    if (server === null || typeof server !== \"object\") {\n      throw new Error(\n        \"The server entry must default-export the MCPServer instance.\"\n      );\n    }\n\n    return server.basePath ?? DEFAULT_BASE_PATH;\n  } finally {\n    if (previousMcpUrl === undefined) {\n      delete process.env[\"MCP_URL\"];\n    } else {\n      process.env[\"MCP_URL\"] = previousMcpUrl;\n    }\n    await runner.close();\n  }\n}\n\n/**\n * Prime the server with the manifest and run mount-time binding validation\n * by calling `getHandler()`.\n *\n * Surfaces the same errors as runtime mount: missing primed view, missing\n * `outputSchema`, double binding. Unbound views emit a warning to stderr.\n *\n * @param environment - Vite SSR environment for module evaluation.\n * @param entry - Absolute path to the user's server entry.\n * @param viewsManifest - Built or dev-shaped manifest to prime.\n * @throws On binding hard errors (naming the view/tool).\n *\n * @internal\n */\nexport async function validateViewBindingsAtBuild(\n  environment: DevEnvironment,\n  entry: string,\n  viewsManifest: ViewsManifest\n): Promise<void> {\n  const runner = createServerModuleRunner(environment, {\n    hmr: false,\n    sourcemapInterceptor: \"node\",\n  });\n\n  try {\n    const serverModule = (await runner.import(entry)) as {\n      default?: ServerLike;\n    };\n    const server = serverModule.default;\n    if (server === null || typeof server !== \"object\") {\n      throw new Error(\n        \"The server entry must default-export the MCPServer instance.\"\n      );\n    }\n\n    if (typeof server.__primeViews !== \"function\") {\n      throw new Error(\n        \"The entry's default export does not support __primeViews.\"\n      );\n    }\n    server.__primeViews(viewsManifest);\n    server.getHandler();\n  } finally {\n    await runner.close();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAgBA,SAAS,mBAAmB;AAC5B,SAAS,kBAAkB;AAC3B,SAAS,IAAI,OAAO,IAAI,iBAAiB;AACzC,SAAS,MAAM,gBAAgB;AAC/B,OAAO,iBAAiB;AACxB,OAAO,WAAW;AAClB,SAAS,aAAa;;;AClBtB,SAAS,gCAAqD;AAI9D,IAAM,oBAAoB;AAG1B,IAAM,sBAAsB;AAqB5B,eAAsB,qBACpB,aACA,OACiB;AACjB,QAAM,SAAS,yBAAyB,aAAa;AAAA,IACnD,KAAK;AAAA,IACL,sBAAsB;AAAA,EACxB,CAAC;AAED,QAAM,iBAAiB,QAAQ,IAAI,SAAS;AAC5C,MAAI;AACF,QAAI,mBAAmB,QAAW;AAChC,cAAQ,IAAI,SAAS,IAAI;AAAA,IAC3B;AAEA,UAAM,eAAgB,MAAM,OAAO,OAAO,KAAK;AAG/C,UAAM,SAAS,aAAa;AAC5B,QAAI,WAAW,QAAQ,OAAO,WAAW,UAAU;AACjD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,WAAO,OAAO,YAAY;AAAA,EAC5B,UAAE;AACA,QAAI,mBAAmB,QAAW;AAChC,aAAO,QAAQ,IAAI,SAAS;AAAA,IAC9B,OAAO;AACL,cAAQ,IAAI,SAAS,IAAI;AAAA,IAC3B;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;AAgBA,eAAsB,4BACpB,aACA,OACA,eACe;AACf,QAAM,SAAS,yBAAyB,aAAa;AAAA,IACnD,KAAK;AAAA,IACL,sBAAsB;AAAA,EACxB,CAAC;AAED,MAAI;AACF,UAAM,eAAgB,MAAM,OAAO,OAAO,KAAK;AAG/C,UAAM,SAAS,aAAa;AAC5B,QAAI,WAAW,QAAQ,OAAO,WAAW,UAAU;AACjD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI,OAAO,OAAO,iBAAiB,YAAY;AAC7C,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,WAAO,aAAa,aAAa;AACjC,WAAO,WAAW;AAAA,EACpB,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;;;ADrEA,IAAM,mBAAmB;AAEzB,IAAM,mBAAmB;AAGzB,IAAM,sBAAsB,MAAM,OAAO;AA4BzC,eAAe,kBACb,UACA,WACA,eACiB;AACjB,QAAM,cAAc,KAAK,UAAU,gBAAgB;AACnD,QAAM,MAAM,UAAU,EAAE,WAAW,KAAK,CAAC;AACzC,QAAM,eAAe,KAAK,UAAU,aAAa;AACjD,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE,sBAAsB,KAAK,UAAU,SAAS,CAAC;AAAA,MAC/C;AAAA,MACA,yBAAyB,YAAY;AAAA,MACrC;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AACA,SAAO;AACT;AAEA,SAAS,sBAA0C;AACjD,QAAM,MAAM,QAAQ,IAAI,gBAAgB;AACxC,MAAI,QAAQ,UAAa,IAAI,KAAK,MAAM,IAAI;AAC1C,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,uBAAuB,IAAI,IAAI,GAAG,EAAE,KAAK,QAAQ,OAAO,EAAE,CAAC;AAAA,EACpE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,SAAS,cACP,cACA,UACA,YACA,UACQ;AACR,QAAM,QAAQ,aAAa,QAAQ,QAAQ,EAAE;AAC7C,SAAO,GAAG,UAAU,GAAG,mBAAmB,UAAU,QAAQ,CAAC,GAAG,KAAK;AACvE;AAEA,SAAS,uBACP,OACA,UACA,YACA,UACuB;AACvB,MAAI,MAAM,SAAS,YAAY;AAC7B,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,OAAO,cAAc,MAAM,OAAO,UAAU,YAAY,QAAQ;AAAA,IAChE,KAAK,MAAM,IAAI;AAAA,MAAI,CAAC,SAClB,cAAc,MAAM,UAAU,YAAY,QAAQ;AAAA,IACpD;AAAA,IACA,GAAI,MAAM,YAAY,UAAa;AAAA,MACjC,SAAS,MAAM,QAAQ;AAAA,QAAI,CAAC,SAC1B,cAAc,MAAM,UAAU,YAAY,QAAQ;AAAA,MACpD;AAAA,IACF;AAAA,EACF;AACF;AAMA,eAAe,kBACb,MACA,SAMgC;AAChC,QAAM,aAAa,KAAK,QAAQ,aAAa,KAAK,IAAI;AACtD,QAAM,eAAe,MAAM,MAAM;AAAA,IAC/B,MAAM,QAAQ;AAAA,IACd,YAAY,QAAQ;AAAA,IACpB,SAAS;AAAA,IACT,UAAU;AAAA,IACV,UAAU,QAAQ;AAAA,IAClB,SAAS,EAAE,OAAO,EAAE,aAAa,mBAAmB,EAAE,EAAE;AAAA,IACxD,SAAS;AAAA,MACP,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,kBAAkB,EAAE,UAAU,MAAM,CAAC,IAAI,EAAE,CAAC;AAAA,IAC9C;AAAA,IACA,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,aAAa;AAAA,MACb,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,mBAAmB;AAAA,MACnB,eAAe;AAAA,QACb,OAAO,EAAE,CAAC,KAAK,IAAI,GAAG,cAAc,KAAK,IAAI,EAAE;AAAA,QAC/C,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,eAAe;AAAA,UACf,gBAAgB;AAAA,UAChB,gBAAgB;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM;AAAA,EACR,CAAC;AAED,QAAM,eAAe,MAAM,QAAQ,YAAY,IAC3C,aAAa,CAAC,IACd;AACJ,MAAI,iBAAiB,UAAa,EAAE,YAAY,eAAe;AAC7D,UAAM,IAAI,MAAM,0BAA0B,KAAK,IAAI,uBAAuB;AAAA,EAC5E;AAEA,QAAM,YAAY,aAAa;AAC/B,QAAM,QAAQ,MAAM,QAAQ,SAAS,IAAI,YAAY,OAAO,OAAO,SAAS;AAE5E,MAAI;AACJ,MAAI;AAEJ,aAAW,QAAQ,OAAO;AACxB,QAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,EAAE,cAAc,OAAO;AACtE;AAAA,IACF;AACA,UAAM,WAAY,KAA+B;AACjD,QAAI,OAAO,aAAa,UAAU;AAChC;AAAA,IACF;AACA,UAAM,QAAQ;AAKd,QAAI,MAAM,SAAS,WAAW,MAAM,YAAY,MAAM;AACpD,mBAAa,MAAM;AAAA,IACrB,WAAW,MAAM,SAAS,WAAW,MAAM,SAAS,SAAS,MAAM,GAAG;AACpE,oBAAc,MAAM;AAAA,IACtB;AAAA,EACF;AAEA,MAAI,eAAe,QAAW;AAC5B,UAAM,IAAI;AAAA,MACR,kDAAkD,KAAK,IAAI;AAAA,IAC7D;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,WAAW,QAAQ,QAAQ,EAAE;AAAA,IACpC,KAAK,gBAAgB,SAAY,CAAC,YAAY,QAAQ,QAAQ,EAAE,CAAC,IAAI,CAAC;AAAA,EACxE;AACF;AAyBA,eAAsB,SAAS,SAAsC;AACnE,QAAM,YAAY,YAAY,IAAI;AAClC,QAAM,QAAQ,cAAc,QAAQ,KAAK,QAAQ,KAAK;AACtD,MAAI,MAAM,uBAAuB,QAAQ,KAAK,KAAK,GAAG;AACpD,YAAQ,IAAI,8BAA8B;AAAA,EAC5C;AACA,QAAM,QAAQ,sBAAsB,QAAQ,GAAG;AAC/C,QAAM,QAAQ,cAAc,QAAQ,GAAG;AACvC,QAAM,iBAAiB,sBAAsB,QAAQ,GAAG;AACxD,QAAM,YAAY,QAAQ,kBAAkB;AAE5C,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,MAAM;AAAA,MACV,MAAM,QAAQ;AAAA,MACd,YAAY;AAAA,MACZ,SAAS;AAAA,MACT,UAAU;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,OAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ,MAAM;AAAA,QACd,aAAa;AAAA,QACb,QAAQ;AAAA,QACR,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,eAAe;AAAA,UACb,QAAQ;AAAA,YACN,QAAQ;AAAA,YACR,gBAAgB;AAAA,UAClB;AAAA,QACF;AAAA,MACF;AAAA,MACA,KAAK;AAAA,QACH,UAAU;AAAA,QACV,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAED,UAAMA,YAA0B;AAAA,MAC9B,SAAS,YAAY,CAAC,EAAE,SAAS,KAAK;AAAA,MACtC,YAAY;AAAA,MACZ,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC;AAAA,IACF;AACA,UAAM,MAAM,MAAM,OAAO,EAAE,WAAW,KAAK,CAAC;AAC5C,UAAM;AAAA,MACJ,MAAM;AAAA,MACN,GAAG,KAAK,UAAUA,WAAU,MAAM,CAAC,CAAC;AAAA;AAAA,IACtC;AAEA,UAAMC,YAAW,KAAK,MAAM,YAAY,IAAI,IAAI,SAAS;AACzD,YAAQ;AAAA,MACN,mBAAmB,SAAS,QAAQ,KAAK,KAAK,CAAC,WAC1C,SAAS,QAAQ,KAAK,MAAM,KAAK,CAAC,IAAI,gBAAgB,KAAKA,SAAQ;AAAA,IAC1E;AACA;AAAA,EACF;AAEA,QAAM,GAAG,MAAM,OAAO,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAEtD,QAAM,cAAc,KAAK,MAAM,OAAO,OAAO;AAC7C,QAAM,MAAM,aAAa,EAAE,WAAW,KAAK,CAAC;AAE5C,QAAM,gBAAgB,MAAM;AAAA,IAC1B,QAAQ;AAAA,IACR,MAAM;AAAA,IACN;AAAA,EACF;AACA,MAAI;AACJ,MAAI;AACF,oBAAgB,MAAM;AAAA,MACpB,cAAc,aAAa;AAAA,MAC3B;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,cAAc,MAAM;AAC1B,UAAM;AAAA,EACR;AAEA,QAAM,gBAA+B,CAAC;AACtC,QAAM,kBAAkB,oBAAoB;AAC5C,aAAW,QAAQ,OAAO;AACxB,QAAI,gBAAgB,MAAM,kBAAkB,MAAM;AAAA,MAChD,KAAK,QAAQ;AAAA,MACb,UAAU,MAAM;AAAA,MAChB;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,oBAAoB,QAAW;AACjC,sBAAgB;AAAA,QACd;AAAA,QACA,KAAK;AAAA,QACL;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,kBAAc,KAAK,IAAI,IAAI;AAAA,EAC7B;AAEA,MAAI,oBAAoB,QAAW;AACjC,YAAQ;AAAA,MACN,sEACK,SAAS,QAAQ,KAAK,WAAW,CAAC;AAAA,IACzC;AACA,QAAI,kBAAkB,QAAQ;AAC5B,cAAQ;AAAA,QACN,wCAAwC,aAAa;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,KAAK,QAAQ,KAAK,QAAQ;AAC5C,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,GAAG,WAAW,KAAK,aAAa,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EACtE;AAEA,MAAI;AACF,UAAM;AAAA,MACJ,cAAc,aAAa;AAAA,MAC3B;AAAA,MACA;AAAA,IACF;AAAA,EACF,UAAE;AACA,UAAM,cAAc,MAAM;AAAA,EAC5B;AAEA,QAAM,eAAe,MAAM;AAAA,IACzB,MAAM;AAAA,IACN;AAAA,IACA;AAAA,EACF;AAEA,QAAM,MAAM;AAAA,IACV,MAAM,QAAQ;AAAA,IACd,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,UAAU;AAAA,IACV,UAAU,MAAM;AAAA,IAChB,OAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ,MAAM;AAAA,MACd,aAAa;AAAA,MACb,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,eAAe;AAAA,QACb,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,gBAAgB;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,UAAU;AAAA,MACV,QAAQ;AAAA,IACV;AAAA,EACF,CAAC;AAED,QAAM,WAA0B;AAAA,IAC9B,SAAS,YAAY,CAAC,EAAE,SAAS,KAAK;AAAA,IACtC,YAAY;AAAA,IACZ,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC;AAAA,EACF;AACA,QAAM,MAAM,MAAM,OAAO,EAAE,WAAW,KAAK,CAAC;AAC5C,QAAM;AAAA,IACJ,MAAM;AAAA,IACN,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAAA;AAAA,EACtC;AAEA,QAAM,WAAW,KAAK,MAAM,YAAY,IAAI,IAAI,SAAS;AACzD,QAAM,YAAY,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI;AACpD,UAAQ;AAAA,IACN,mBAAmB,SAAS,QAAQ,KAAK,KAAK,CAAC,aAAa,SAAS,YAChE,SAAS,QAAQ,KAAK,MAAM,KAAK,CAAC,IAAI,gBAAgB,KAAK,QAAQ;AAAA,EAC1E;AACF;","names":["manifest","duration"]}

package/dist/config.d.ts

@@ -99,6 +99,18 @@ interface BaseServerConfig {
      * @defaultValue `"stateless"`
      */
     legacy?: "stateless" | "reject";
+    /**
+     * Expose the HTML landing page without bearer authentication when OAuth is
+     * configured.
+     *
+     * The landing page itself is always mounted at `basePath` for browser GET
+     * and HEAD requests that explicitly accept `text/html`. Without OAuth it is
+     * public. With OAuth, it requires a valid bearer token unless this option is
+     * `true`. MCP protocol requests remain protected in either case.
+     *
+     * @defaultValue `false`
+     */
+    publicLandingPage?: boolean;
     /**
      * Inspector shell route at `${basePath}/inspector` — a browser UI for
      * exploring and calling the server's tools, resources, and prompts.