mcp-use 2.0.0-beta.8 → 2.0.0

package/dist/bin.js

@@ -1,180 +1,2 @@
 #!/usr/bin/env node
-import {
-  parseArgs
-} from "./chunk-IG2BCCMU.js";
-
-// src/bin/main.ts
-import { readFileSync } from "fs";
-var HELP = `mcp-use \u2014 run MCP servers built with mcp-use
-
-Usage: mcp-use <command> [options]
-
-Commands:
-  dev      Start the dev server
-  build    Build the server into .mcp-use/build
-  start    Serve the production build from .mcp-use/build
-  login    Authenticate the cloud CLI
-  logout   Delete local cloud credentials
-  whoami   Show the authenticated cloud identity
-  org      Manage the active organization
-  servers  Manage cloud servers and environment variables
-  deployments Manage cloud deployments and logs
-  deploy   Deploy the current GitHub project
-  client   Connect to and invoke MCP servers
-  skills   Install maintained coding-agent skills
-  screenshot Capture an MCP Apps view
-
-Options:
-  -p, --port <n>     Port to serve on (default: $PORT or 3000)
-  --host <host>      Host to bind (dev only)
-  --entry <path>     Server entry module (dev/build only)
-  --with-inspector   Record inspector availability in the build manifest (build only)
-  --tunnel           Expose the dev server through a public tunnel (dev only)
-  --no-open          Do not auto-open the inspector in a browser (dev only)
-  -h, --help         Show this help
-  -v, --version      Print the version`;
-async function main(argv) {
-  if (argv.length === 1 && ["--version", "-v"].includes(argv[0] ?? "")) {
-    console.log(readOwnVersion());
-    return 0;
-  }
-  if (argv.some((token) => token === "--help" || token === "-h")) {
-    console.log(HELP);
-    return 0;
-  }
-  const command = argv[0];
-  if (command === "login" || command === "logout" || command === "whoami") {
-    const { runIdentity } = await import("./commands/identity.js");
-    return runIdentity(command, argv.slice(1));
-  }
-  if (command === "org") {
-    const { runOrganizations } = await import("./commands/organizations.js");
-    return runOrganizations(argv.slice(1));
-  }
-  if (command === "servers") {
-    const { runServers } = await import("./commands/servers.js");
-    return runServers(argv.slice(1));
-  }
-  if (command === "deployments") {
-    const { runDeployments } = await import("./commands/deployments.js");
-    return runDeployments(argv.slice(1));
-  }
-  if (command === "deploy") {
-    const { runDeploy } = await import("./commands/deploy.js");
-    return runDeploy(argv.slice(1));
-  }
-  if (command === "client") {
-    const { runClient } = await import("./commands/client.js");
-    return runClient(argv.slice(1));
-  }
-  if (command === "skills") {
-    const { runSkills } = await import("./commands/skills.js");
-    return runSkills(argv.slice(1));
-  }
-  if (command === "screenshot") {
-    const { runScreenshot } = await import("./commands/screenshot.js");
-    return runScreenshot(argv.slice(1));
-  }
-  let args;
-  try {
-    args = parseArgs(argv);
-  } catch (error) {
-    console.error(error instanceof Error ? error.message : String(error));
-    return 2;
-  }
-  if (args.version) {
-    console.log(readOwnVersion());
-    return 0;
-  }
-  if (args.help) {
-    console.log(HELP);
-    return 0;
-  }
-  switch (args.command) {
-    case "start":
-      return startCommand(args);
-    case "dev":
-    case "build":
-      return cliCommand(args.command, args);
-    case void 0:
-      console.error(HELP);
-      return 2;
-    default:
-      console.error(`Unknown command: ${args.command}
-
-${HELP}`);
-      return 2;
-  }
-}
-async function startCommand(args) {
-  let started;
-  try {
-    const { runStart } = await import("./commands/start.js");
-    started = await runStart({ cwd: process.cwd(), port: args.port });
-  } catch (error) {
-    console.error(error instanceof Error ? error.message : String(error));
-    return 1;
-  }
-  console.log(`mcp-use server running at ${started.url}`);
-  const shutdown = () => {
-    started.close().then(
-      () => process.exit(0),
-      (error) => {
-        console.error(error instanceof Error ? error.message : String(error));
-        process.exit(1);
-      }
-    );
-  };
-  process.once("SIGINT", shutdown);
-  process.once("SIGTERM", shutdown);
-  return 0;
-}
-async function cliCommand(command, args) {
-  const options = {
-    cwd: process.cwd(),
-    ...args.entry !== void 0 && { entry: args.entry },
-    ...args.port !== void 0 && { port: args.port },
-    ...args.host !== void 0 && { host: args.host },
-    ...args.tunnel && { tunnel: true },
-    ...!args.open && { open: false },
-    ...args.withInspector && { withInspector: true }
-  };
-  try {
-    if (command === "dev") {
-      const { runDev } = await import("./commands/dev.js");
-      await runDev(options);
-    } else {
-      const { runBuild } = await import("./commands/build.js");
-      await runBuild(options);
-    }
-    return 0;
-  } catch (error) {
-    console.error(error instanceof Error ? error.message : String(error));
-    return 1;
-  }
-}
-function readOwnVersion() {
-  for (const relative of ["../package.json", "../../package.json"]) {
-    try {
-      const raw = readFileSync(new URL(relative, import.meta.url), "utf8");
-      const pkg = JSON.parse(raw);
-      if ((pkg.name === "mcp-use" || pkg.name === "mcp-use") && typeof pkg.version === "string") {
-        return pkg.version;
-      }
-    } catch {
-    }
-  }
-  return "unknown";
-}
-
-// src/bin.ts
-main(process.argv.slice(2)).then(
-  (code) => {
-    process.exitCode = code;
-  },
-  (error) => {
-    console.error(error instanceof Error ? error.message : String(error));
-    process.exitCode = 1;
-  }
-);
-//# sourceMappingURL=bin.js.map
+var{main}=await import("@mcp-use/cli");main(process.argv.slice(2),{frameworkVersion:"2.0.0"}).then(code=>{process.exitCode=code},error=>{console.error(error instanceof Error?error.message:String(error)),process.exitCode=1});

package/dist/branding.d.ts

@@ -0,0 +1,81 @@
+import type { Icon } from "@modelcontextprotocol/server";
+import type { FetchHandler } from "./fetch-app.js";
+/** Normalized server branding shared by browser and MCP identity surfaces. */
+export interface ServerBranding {
+    /**
+     * Source selected for `/favicon.ico`, after applying explicit-favicon and
+     * first-icon inference.
+     */
+    readonly favicon?: string;
+    /** MIME type of the selected favicon when known. */
+    readonly faviconMimeType?: string;
+    /** Icons reported in MCP implementation metadata, in author order. */
+    readonly icons?: readonly Icon[];
+    /** Server website reported in MCP implementation metadata. */
+    readonly websiteUrl?: string;
+}
+/**
+ * Select the browser favicon from an ordered set of MCP icons.
+ *
+ * Uses the first icon in author order. Put the preferred browser favicon
+ * first, or set {@link ServerConfig.favicon} explicitly.
+ *
+ * @param icons - Validated, non-empty icon list.
+ * @returns The selected icon.
+ *
+ * @internal
+ */
+export declare function selectFaviconFromIcons(icons: readonly Icon[]): Icon | undefined;
+/**
+ * Validate and freeze the branding fields from server configuration.
+ *
+ * @param config - Untyped-compatible branding input.
+ * @returns Immutable normalized branding and the selected favicon MIME type.
+ *
+ * @internal
+ */
+export declare function normalizeServerBranding(config: {
+    favicon?: unknown;
+    icons?: unknown;
+    websiteUrl?: unknown;
+}): ServerBranding;
+/**
+ * Resolve configured icons for MCP implementation metadata.
+ *
+ * Absolute HTTP(S) and data URLs pass through. Public-relative sources become
+ * request-scoped absolute URLs under `${basePath}/_mcp-use/public/`.
+ *
+ * @param icons - Normalized configured icons.
+ * @param request - HTTP request used to derive the public asset origin.
+ * @param basePath - MCP endpoint base path.
+ * @returns Icons suitable for the official SDK `Implementation` object.
+ *
+ * @internal
+ */
+export declare function resolveImplementationIcons(icons: readonly Icon[] | undefined, request: Request | undefined, basePath: string): Icon[] | undefined;
+/**
+ * Whether any configured branding source needs the local public route.
+ *
+ * @param branding - Normalized branding to inspect.
+ * @returns `true` when the favicon or an MCP icon uses a `public/` path.
+ *
+ * @internal
+ */
+export declare function hasLocalBrandingAsset(branding: ServerBranding): boolean;
+/**
+ * Create the root-level `/favicon.ico` handler for normalized branding.
+ *
+ * Local public files and data URLs are streamed directly. Absolute HTTP(S)
+ * sources receive a temporary redirect, avoiding server-side remote fetches.
+ *
+ * @param branding - Normalized server branding.
+ * @param options - Public directory resolution mode.
+ * @returns A GET/HEAD handler, or `undefined` when no favicon is configured.
+ *
+ * @internal
+ */
+export declare function createFaviconHandler(branding: ServerBranding, options: {
+    dev: boolean;
+    projectRoot: string;
+    deferCors?: boolean;
+}): FetchHandler | undefined;

package/dist/buffered-response.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Mark a framework-owned response whose body is already buffered in memory.
+ *
+ * @internal
+ */
+export declare function markBufferedResponse(response: Response): Response;
+/**
+ * Associate a known-buffered SDK response with the request that produced it.
+ *
+ * Keeping the source response lets the Node bridge recognize framework-owned
+ * header wrappers by body identity without trusting a content type. If any
+ * middleware clones or replaces the body, the identity check fails closed.
+ *
+ * @internal
+ */
+export declare function trackBufferedResponse(request: Request, response: Response): Response;
+/** Whether a response body is covered by the framework's buffered contract. */
+export declare function isBufferedResponse(response: Response, request?: Request): boolean;
+/**
+ * Preserve the marker across a framework-owned, header-only response wrapper.
+ *
+ * Body-transforming user middleware does not call this helper, so replacing a
+ * response still drops the buffered contract automatically.
+ *
+ * @internal
+ */
+export declare function inheritBufferedResponse(source: Response, target: Response): Response;

package/dist/chunk-273ZVKJJ.js

@@ -0,0 +1,2 @@
+var EVENT="mcp_use_sdk_event",ENDPOINT="https://eu.i.posthog.com/i/v0/e/",TOKEN="phc_lyTtbYwvkdSbrcMQNPiKiiRWrrM1seyKIMjycSvItEI",CONTENT=/(^|_)(arguments?|args|body|command|headers?|location|message|organization|path|query|response|secret|subject|token|uri|url|user_agent)(_|$)/i,RESERVED=new Set("feature action sdk_generation telemetry_schema_version sdk_package sdk_version server_id runtime_id identity_stability distinct_id validation_run_id is_validation".split(" ")),runtimeId;function getRuntimeId(){return runtimeId??=crypto.randomUUID(),runtimeId}var once=new Set,pending=new Set,identities=new Map;function hasControl(value){return[...value].some(character=>{let code=character.charCodeAt(0);return code<32||code===127})}function env(name){return typeof process>"u"?void 0:process.env?.[name]}function safeEnv(name){let value=env(name);return value!==void 0&&value.length>0&&value.length<=128&&!hasControl(value)?value:void 0}function canPersistTelemetryIdentity(){return typeof process>"u"||process.versions?.node===void 0?!1:!("Deno"in globalThis)}function disabled(){if(env("MCP_USE_ANONYMIZED_TELEMETRY")==="false")return!0;try{return globalThis.__MCP_USE_ANONYMIZED_TELEMETRY__===!1||typeof localStorage<"u"&&localStorage.getItem("MCP_USE_ANONYMIZED_TELEMETRY")==="false"}catch{return!1}}function isUsageDisabled(){return disabled()}function clean(properties){return Object.fromEntries(Object.entries(properties).filter(([key,value])=>key.length>128||hasControl(key)||key.startsWith("$")||RESERVED.has(key)||CONTENT.test(key)||value===void 0?!1:typeof value=="string"?value.length<=128&&!hasControl(value):typeof value=="boolean"||typeof value=="number"&&Number.isFinite(value)))}async function identity(serverRoot){let projectId=safeEnv("MCP_USE_TELEMETRY_PROJECT_ID");if(projectId!==void 0)return{id:projectId,stability:"project"};if(serverRoot===void 0||!canPersistTelemetryIdentity())return{id:getRuntimeId(),stability:"process"};let existing=identities.get(serverRoot);if(existing!==void 0)return existing;let resolving=(async()=>{try{let fs=await import("fs/promises"),directory=`${serverRoot}/.mcp-use`,file=`${directory}/usage.json`,read=async()=>{try{let value=JSON.parse(await fs.readFile(file,"utf8"));if(typeof value=="object"&&value!==null&&"schemaVersion"in value&&value.schemaVersion===1&&"serverId"in value&&typeof value.serverId=="string"&&/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value.serverId))return value.serverId}catch{}},stored=await read();if(stored!==void 0)return{id:stored,stability:"server"};await fs.mkdir(directory,{recursive:!0,mode:448});let created=crypto.randomUUID();try{return await fs.writeFile(file,`${JSON.stringify({schemaVersion:1,serverId:created})}
+`,{flag:"wx",mode:384}),{id:created,stability:"server"}}catch{let raced=await read();if(raced!==void 0)return{id:raced,stability:"server"}}}catch{}return{id:getRuntimeId(),stability:"process"}})();return identities.set(serverRoot,resolving),resolving}function capture(feature,action,properties,options,resolveIdentity){let validationId=safeEnv("MCP_USE_TELEMETRY_VALIDATION_ID");if(disabled()||env("NODE_ENV")==="test"&&validationId===void 0||pending.size>=16)return;if(options.onceKey!==void 0){if(once.has(options.onceKey))return;once.add(options.onceKey)}let rate=Math.max(0,Math.min(1,options.sampleRate??1));if(validationId===void 0&&Math.random()>=rate)return;let request=(async()=>{try{let resolvedIdentity=await resolveIdentity(),body=JSON.stringify({api_key:TOKEN,event:EVENT,properties:{...clean(properties),feature,action,sdk_generation:"v2",telemetry_schema_version:2,sdk_package:"mcp-use",sdk_version:"2.0.0",server_id:resolvedIdentity.id,runtime_id:getRuntimeId(),identity_stability:resolvedIdentity.stability,distinct_id:resolvedIdentity.id,sample_rate:validationId===void 0?rate:1,$process_person_profile:!1,$geoip_disable:!0,...validationId!==void 0&&{is_validation:!0,validation_run_id:validationId}}});await fetch(ENDPOINT,{method:"POST",headers:{"content-type":"application/json"},keepalive:!0,body})}catch{return}})();pending.add(request),request.then(()=>pending.delete(request))}function recordUsage(feature,action,properties={},options={}){capture(feature,action,properties,options,()=>identity(options.serverRoot))}async function flushUsage(){await Promise.all([...pending])}export{isUsageDisabled,recordUsage,flushUsage};

package/dist/{chunk-FCGJJVL2.js → chunk-GX6PGIEO.js}

@@ -1,68 +1,25 @@
-// src/landing.ts
-function escapeHtml(text) {
-  return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
-}
-function serializeScriptJson(value) {
-  return JSON.stringify(value).replace(/</g, "\\u003c").replace(/>/g, "\\u003e");
-}
-function sanitizeServerName(name) {
-  return name.replace(/[^a-zA-Z0-9-_]/g, "_").toLowerCase();
-}
-function generateCursorDeepLink(url, name) {
-  const config = { url };
-  const configJson = JSON.stringify(config);
-  const base64Config = typeof Buffer !== "undefined" ? Buffer.from(configJson).toString("base64") : btoa(configJson);
-  const sanitizedName = sanitizeServerName(name);
-  return `cursor://anysphere.cursor-deeplink/mcp/install?config=${encodeURIComponent(base64Config)}&name=${encodeURIComponent(sanitizedName)}`;
-}
-function generateVSCodeDeepLink(url, name) {
-  const config = {
-    url,
-    name: sanitizeServerName(name),
-    type: "http"
-  };
-  const configJson = JSON.stringify(config);
-  const urlEncodedConfig = encodeURIComponent(configJson);
-  return `vscode:mcp/install?${urlEncodedConfig}`;
-}
-function generateVSCodeInsidersDeepLink(url, name) {
-  const config = {
-    url,
-    name: sanitizeServerName(name),
-    type: "http"
-  };
-  const configJson = JSON.stringify(config);
-  const urlEncodedConfig = encodeURIComponent(configJson);
-  return `vscode-insiders:mcp/install?${urlEncodedConfig}`;
-}
-function generateClaudeCommand(url, name) {
-  const sanitizedName = sanitizeServerName(name);
-  const quotedUrl = `'${url.replace(/'/g, "'\\''")}'`;
-  return `claude mcp add --transport http "${sanitizedName}" ${quotedUrl}`;
-}
-var MANUFACT_INSPECTOR_ORIGIN = "https://inspector.manufact.com";
-function getManufactInspectorUrl(serverUrl) {
-  const params = new URLSearchParams({
-    autoConnect: serverUrl,
-    tab: "chat"
-  });
-  return `${MANUFACT_INSPECTOR_ORIGIN}/inspector?${params.toString()}`;
-}
-var LOGO_SVG_PATHS = {
-  path1: "M105.933 0C164.437 0.000115889 211.865 47.607 211.865 106.333C211.865 131.828 210.494 158.401 221.068 181.6L228.976 198.947C243.585 230.997 269.266 256.7 301.304 271.336L316.156 278.121C340.143 289.079 367.695 287.335 394.067 287.335C452.572 287.335 500 334.942 500 393.668C500 452.394 452.572 500.001 394.067 500.001C335.563 500.001 288.135 452.394 288.135 393.668C288.135 368.974 289.241 343.275 278.992 320.807L270.587 302.38C255.949 270.289 230.214 244.565 198.118 229.939L180.164 221.758C157.282 211.331 131.078 212.666 105.933 212.666C47.4278 212.666 4.92992e-05 165.059 0 106.333C0 47.607 47.4278 0 105.933 0Z",
-  circle: { cx: 100.426, cy: 399.575, r: 100.426 },
-  path2: "M500 100.426C500 155.889 455.037 200.851 399.574 200.851C344.11 200.851 299.148 155.889 299.148 100.426C299.148 44.962 344.11 0 399.574 0C455.037 0 500 44.962 500 100.426Z"
-};
-var LINE_INTERSECTION_PATH = "M10.5 4C10.5 7.31371 7.81371 10 4.5 10H0.5V11H4.5C7.81371 11 10.5 13.6863 10.5 17V21H11.5V17C11.5 13.6863 14.1863 11 17.5 11H21.5V10H17.5C14.1863 10 11.5 7.31371 11.5 4V0H10.5V4Z";
-function getMeshGradientScript() {
-  const VERT = `#version 300 es
+function escapeHtml(text){return text.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;")}function serializeScriptJson(value){return JSON.stringify(value).replace(/</g,"\\u003c").replace(/>/g,"\\u003e")}function sanitizeServerName(name){return name.replace(/[^a-zA-Z0-9-_]/g,"_").toLowerCase()}function generateCursorDeepLink(url,name){let configJson=JSON.stringify({url}),base64Config=typeof Buffer<"u"?Buffer.from(configJson).toString("base64"):btoa(configJson),sanitizedName=sanitizeServerName(name);return`cursor://anysphere.cursor-deeplink/mcp/install?config=${encodeURIComponent(base64Config)}&name=${encodeURIComponent(sanitizedName)}`}function generateVSCodeDeepLink(url,name){let config={url,name:sanitizeServerName(name),type:"http"},configJson=JSON.stringify(config);return`vscode:mcp/install?${encodeURIComponent(configJson)}`}function generateVSCodeInsidersDeepLink(url,name){let config={url,name:sanitizeServerName(name),type:"http"},configJson=JSON.stringify(config);return`vscode-insiders:mcp/install?${encodeURIComponent(configJson)}`}function generateClaudeCommand(url,name){let sanitizedName=sanitizeServerName(name),quotedUrl=`'${url.replace(/'/g,"'\\''")}'`;return`claude mcp add --transport http "${sanitizedName}" ${quotedUrl}`}var MANUFACT_INSPECTOR_ORIGIN="https://inspector.manufact.com";function getManufactInspectorUrl(serverUrl){let params=new URLSearchParams({autoConnect:serverUrl,tab:"chat"});return`${MANUFACT_INSPECTOR_ORIGIN}/inspector?${params.toString()}`}var LOGO_SVG_PATHS={path1:"M105.933 0C164.437 0.000115889 211.865 47.607 211.865 106.333C211.865 131.828 210.494 158.401 221.068 181.6L228.976 198.947C243.585 230.997 269.266 256.7 301.304 271.336L316.156 278.121C340.143 289.079 367.695 287.335 394.067 287.335C452.572 287.335 500 334.942 500 393.668C500 452.394 452.572 500.001 394.067 500.001C335.563 500.001 288.135 452.394 288.135 393.668C288.135 368.974 289.241 343.275 278.992 320.807L270.587 302.38C255.949 270.289 230.214 244.565 198.118 229.939L180.164 221.758C157.282 211.331 131.078 212.666 105.933 212.666C47.4278 212.666 4.92992e-05 165.059 0 106.333C0 47.607 47.4278 0 105.933 0Z",circle:{cx:100.426,cy:399.575,r:100.426},path2:"M500 100.426C500 155.889 455.037 200.851 399.574 200.851C344.11 200.851 299.148 155.889 299.148 100.426C299.148 44.962 344.11 0 399.574 0C455.037 0 500 44.962 500 100.426Z"},LINE_INTERSECTION_PATH="M10.5 4C10.5 7.31371 7.81371 10 4.5 10H0.5V11H4.5C7.81371 11 10.5 13.6863 10.5 17V21H11.5V17C11.5 13.6863 14.1863 11 17.5 11H21.5V10H17.5C14.1863 10 11.5 7.31371 11.5 4V0H10.5V4Z";function getMeshGradientScript(){return`(function(){
+var c=document.getElementById('mesh-bg');
+if(!c)return;
+var wrap=c.parentElement;
+if(!wrap)return;
+var gl=c.getContext('webgl2');
+if(!gl)return;
+function compileShader(typ,src){
+  var s=gl.createShader(typ);
+  gl.shaderSource(s,src);
+  gl.compileShader(s);
+  if(!gl.getShaderParameter(s,gl.COMPILE_STATUS)){console.error(gl.getShaderInfoLog(s));return null;}
+  return s;
+}
+var vs=compileShader(gl.VERTEX_SHADER,${JSON.stringify(`#version 300 es
 in vec4 a_position;
 out vec2 v_objectUV;
 void main(){
   gl_Position=a_position;
-  v_objectUV=a_position.xy*0.5+0.5;
-}`;
-  const FRAG = `#version 300 es
+  v_objectUV=a_position.xy*0.5;
+}`)});
+var fs=compileShader(gl.FRAGMENT_SHADER,${JSON.stringify(`#version 300 es
 precision mediump float;
 uniform float u_time;
 uniform vec4 u_colors[4];
@@ -129,23 +86,7 @@ void main(){
   color=mix(color,grainOC,.35*grainOS);
   opacity+=.5*grainOS;
   fragColor=vec4(color,clamp(opacity,0.,1.));
-}`;
-  return `(function(){
-var c=document.getElementById('mesh-bg');
-if(!c)return;
-var wrap=c.parentElement;
-if(!wrap)return;
-var gl=c.getContext('webgl2');
-if(!gl)return;
-function compileShader(typ,src){
-  var s=gl.createShader(typ);
-  gl.shaderSource(s,src);
-  gl.compileShader(s);
-  if(!gl.getShaderParameter(s,gl.COMPILE_STATUS)){console.error(gl.getShaderInfoLog(s));return null;}
-  return s;
-}
-var vs=compileShader(gl.VERTEX_SHADER,${JSON.stringify(VERT)});
-var fs=compileShader(gl.FRAGMENT_SHADER,${JSON.stringify(FRAG)});
+}`)});
 if(!vs||!fs)return;
 var prog=gl.createProgram();
 gl.attachShader(prog,vs);
@@ -196,55 +137,10 @@ function draw(){
 resize();
 new ResizeObserver(resize).observe(wrap);
 draw();
-})();`;
-}
-function generateLandingPage(options) {
-  const {
-    name: protocolName,
-    title,
-    version,
-    url,
-    description,
-    tools,
-    prompts,
-    resources,
-    iconUrl
-  } = options;
-  const name = title ?? protocolName;
-  const cursorDeepLink = generateCursorDeepLink(url, name);
-  const vscodeDeepLink = generateVSCodeDeepLink(url, name);
-  const vscodeInsidersDeepLink = generateVSCodeInsidersDeepLink(url, name);
-  const claudeCommand = generateClaudeCommand(url, name);
-  const manufactInspectorUrl = getManufactInspectorUrl(url);
-  const safeName = escapeHtml(name);
-  const safeDescription = description ? escapeHtml(description) : "";
-  const rawMetaDescription = description || `${name} MCP Server \u2014 Connect with Claude Code, Cursor, and VS Code. Model Context Protocol server.`;
-  const metaDescription = escapeHtml(rawMetaDescription);
-  const pageTitle = `${safeName} MCP Server \u2014 Connect with Claude Code, Cursor & VS Code`;
-  const jsonLd = serializeScriptJson({
-    "@context": "https://schema.org",
-    "@type": "SoftwareApplication",
-    name,
-    softwareVersion: version,
-    description: rawMetaDescription,
-    applicationCategory: "DeveloperApplication"
-  });
-  const normalizedTools = tools && tools.length > 0 ? tools.map((tool) => ({
-    name: tool.title ?? tool.name,
-    ...tool.description !== void 0 && {
-      description: tool.description
-    }
-  })) : [];
-  const toolsListHtml = normalizedTools.length > 0 ? normalizedTools.map(
-    (t) => `<div class="spec-item"><code class="spec-name">${escapeHtml(t.name)}</code>${t.description ? `<p class="spec-desc">${escapeHtml(t.description)}</p>` : ""}</div>`
-  ).join("\n") : "";
-  const promptsListHtml = prompts && prompts.length > 0 ? prompts.map(
-    (p) => `<div class="spec-item"><code class="spec-name">${escapeHtml(p.title ?? p.name)}</code>${p.description ? `<p class="spec-desc">${escapeHtml(p.description)}</p>` : ""}</div>`
-  ).join("\n") : "";
-  const resourcesListHtml = resources && resources.length > 0 ? resources.map(
-    (r) => `<div class="spec-item"><code class="spec-uri">${escapeHtml(r.uri)}</code>${r.description ? `<p class="spec-desc">${escapeHtml(r.description)}</p>` : ""}</div>`
-  ).join("\n") : "";
-  return `<!DOCTYPE html>
+})();`}function generateLandingPage(options){let{name:protocolName,title,version,url,description,tools,prompts,resources,iconUrl,iconType}=options,name=title??protocolName,cursorDeepLink=generateCursorDeepLink(url,name),vscodeDeepLink=generateVSCodeDeepLink(url,name),vscodeInsidersDeepLink=generateVSCodeInsidersDeepLink(url,name),claudeCommand=generateClaudeCommand(url,name),manufactInspectorUrl=getManufactInspectorUrl(url),safeName=escapeHtml(name),safeDescription=description?escapeHtml(description):"",rawMetaDescription=description||`${name} MCP Server \u2014 Connect with Claude Code, Cursor, and VS Code. Model Context Protocol server.`,metaDescription=escapeHtml(rawMetaDescription),pageTitle=`${safeName} MCP Server \u2014 Connect with Claude Code, Cursor & VS Code`,jsonLd=serializeScriptJson({"@context":"https://schema.org","@type":"SoftwareApplication",name,softwareVersion:version,description:rawMetaDescription,applicationCategory:"DeveloperApplication"}),normalizedTools=tools&&tools.length>0?tools.map(tool=>({name:tool.title??tool.name,...tool.description!==void 0&&{description:tool.description}})):[],toolsListHtml=normalizedTools.length>0?normalizedTools.map(t=>`<div class="spec-item"><code class="spec-name">${escapeHtml(t.name)}</code>${t.description?`<p class="spec-desc">${escapeHtml(t.description)}</p>`:""}</div>`).join(`
+`):"",promptsListHtml=prompts&&prompts.length>0?prompts.map(p=>`<div class="spec-item"><code class="spec-name">${escapeHtml(p.title??p.name)}</code>${p.description?`<p class="spec-desc">${escapeHtml(p.description)}</p>`:""}</div>`).join(`
+`):"",resourcesListHtml=resources&&resources.length>0?resources.map(r=>`<div class="spec-item"><code class="spec-uri">${escapeHtml(r.uri)}</code>${r.description?`<p class="spec-desc">${escapeHtml(r.description)}</p>`:""}</div>`).join(`
+`):"";return`<!DOCTYPE html>
 <html lang="en">
 <head>
 <meta charset="UTF-8">
@@ -257,6 +153,7 @@ function generateLandingPage(options) {
 <meta name="twitter:card" content="summary">
 <meta name="twitter:title" content="${pageTitle}">
 <meta name="twitter:description" content="${metaDescription}">
+${iconUrl?`<link rel="icon"${iconType?` type="${escapeHtml(iconType)}"`:""} href="${escapeHtml(iconUrl)}">`:""}
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <link href="https://fonts.googleapis.com/css2?family=Outfit:wght@400;500;600;700&display=swap" rel="stylesheet">
@@ -577,12 +474,12 @@ a:hover { text-decoration: underline; }
     <div class="hero-gradient-wrap" id="hero-gradient-wrap">
       <canvas id="mesh-bg" aria-hidden="true"></canvas>
       <div class="hero-inner">
-        <div class="card-header ${iconUrl ? "has-icon" : ""}">
-          ${iconUrl ? `<img src="${escapeHtml(iconUrl)}" alt="" class="hero-icon" width="64" height="64" />` : ""}
+        <div class="card-header ${iconUrl?"has-icon":""}">
+          ${iconUrl?`<img src="${escapeHtml(iconUrl)}" alt="" class="hero-icon" width="64" height="64" />`:""}
           <div class="hero-row">
             <h1>${safeName} <span class="version">(v${escapeHtml(version)})</span></h1>
           </div>
-          ${safeDescription ? `<p class="hero-description">${safeDescription}</p>` : ""}
+          ${safeDescription?`<p class="hero-description">${safeDescription}</p>`:""}
           <div class="hero-url-block">
             <div class="url-block">
               <div class="url-box" data-copy="${escapeHtml(url)}">${escapeHtml(url)}</div>
@@ -660,16 +557,16 @@ a:hover { text-decoration: underline; }
     </div>
   </div>
 
-  ${toolsListHtml || promptsListHtml || resourcesListHtml ? `
+  ${toolsListHtml||promptsListHtml||resourcesListHtml?`
   <div class="card">
     <div class="card-header">
       <h2 class="card-title">Primitives</h2>
-      ${toolsListHtml ? `<div class="spec-section"><h3>Tools (${normalizedTools.length})</h3>${toolsListHtml}</div>` : ""}
-      ${promptsListHtml ? `<div class="spec-section"><h3>Prompts (${prompts.length})</h3>${promptsListHtml}</div>` : ""}
-      ${resourcesListHtml ? `<div class="spec-section"><h3>Resources (${resources.length})</h3>${resourcesListHtml}</div>` : ""}
+      ${toolsListHtml?`<div class="spec-section"><h3>Tools (${normalizedTools.length})</h3>${toolsListHtml}</div>`:""}
+      ${promptsListHtml?`<div class="spec-section"><h3>Prompts (${prompts.length})</h3>${promptsListHtml}</div>`:""}
+      ${resourcesListHtml?`<div class="spec-section"><h3>Resources (${resources.length})</h3>${resourcesListHtml}</div>`:""}
     </div>
   </div>
-  ` : ""}
+  `:""}
 
   <footer class="footer-content">
     <a href="https://manufact.com" target="_blank" rel="noopener noreferrer" class="footer-brand-link" aria-label="Manufact">
@@ -730,10 +627,4 @@ a:hover { text-decoration: underline; }
 })();
 </script>
 </body>
-</html>`;
-}
-
-export {
-  generateLandingPage
-};
-//# sourceMappingURL=chunk-FCGJJVL2.js.map
+</html>`}export{generateLandingPage};

package/dist/chunk-IS7FKXFR.js

@@ -0,0 +1 @@
+function isRecord(value){return value!==null&&typeof value=="object"&&!Array.isArray(value)}function isLocalhost(url){let hostname=url.hostname.toLowerCase();return hostname==="localhost"||hostname.endsWith(".localhost")||hostname==="[::1]"||/^127(?:\.\d{1,3}){3}$/.test(hostname)}function parseAbsoluteUrl(value,name){let url;try{url=new URL(value)}catch{throw new Error(`${name} must be an absolute URL`)}if(url.origin==="null"||url.username!==""||url.password!=="")throw new Error(`${name} must be an absolute URL without credentials`);return url}function assertSecureHttpUrl(url,name){if(url.protocol!=="https:"&&!(url.protocol==="http:"&&isLocalhost(url)))throw new Error(`${name} must use HTTPS, or HTTP for localhost`)}import{OAuthError,OAuthErrorCode}from"@modelcontextprotocol/server";function invalidToken(message,cause){let error=new OAuthError(OAuthErrorCode.InvalidToken,message);return cause!==void 0&&(error.cause=cause),error}function resolveConfiguredOAuthResource(options){let provider=options.provider,basePath=normalizeBasePath(options.basePath);if(provider.resource!==void 0)return validateOAuthResource(provider.resource,basePath);if(options.mcpUrl!==void 0)return validateOAuthResource(appendBasePath(requireAbsoluteOrigin(options.mcpUrl,"MCP_URL"),basePath),basePath)}function resolveLocalOAuthResource(listenOrigin,basePath){let listenOriginUrl=requireAbsoluteOrigin(listenOrigin,"listen origin");if(!isLocalhost(listenOriginUrl))throw new Error("OAuth listen origin must be localhost or a loopback address");return validateOAuthResource(appendBasePath(listenOriginUrl,normalizeBasePath(basePath)),basePath)}function validateOAuthResource(resource,basePath){let normalizedBasePath=normalizeBasePath(basePath),url=parseAbsoluteUrl(resource,"OAuth resource");if(url.search!==""||url.hash!=="")throw new Error("OAuth resource must not include a query string or fragment");if(assertSecureHttpUrl(url,"OAuth resource"),normalizePathname(url.pathname)!==normalizedBasePath)throw new Error(`OAuth resource path must exactly match basePath (${normalizedBasePath})`);return url.pathname=normalizedBasePath,url}function wrapOAuthTokenVerifier(provider,expectedResource){let canonicalResource=normalizeResourceUrl(expectedResource),tokenVerifier=provider.createTokenVerifier(new URL(canonicalResource.href));if(tokenVerifier===null||typeof tokenVerifier!="object"||typeof tokenVerifier.verifyAccessToken!="function")throw new TypeError("OAuth provider createTokenVerifier must return an OAuthTokenVerifier");return{async verifyAccessToken(token){let authInfo=await tokenVerifier.verifyAccessToken(token);assertVerifiedAuthInfo(authInfo),assertResourceBinding(authInfo,canonicalResource);let mapped;try{mapped=provider.mapAuthInfo(authInfo)}catch(error){throw invalidToken("Token identity mapping failed",error)}return assertMappedExtra(mapped),{...authInfo,scopes:[...authInfo.scopes],extra:{...authInfo.extra,...mapped}}}}}function assertResourceBinding(authInfo,expectedResource){if(authInfo.resource===void 0)throw invalidToken("Token verifier did not return a validated protected resource");if(parseTokenResource(authInfo.resource).href!==normalizeResourceUrl(expectedResource).href)throw invalidToken("Token resource does not match the protected resource")}function parseTokenResource(value){if(!(value instanceof URL))throw invalidToken("Token resource must be an absolute HTTPS URL, or HTTP URL for localhost");let resource=value;if(!/^https?:$/.test(resource.protocol)||resource.username!==""||resource.password!==""||resource.search!==""||resource.hash!==""||resource.protocol==="http:"&&!isLocalhost(resource))throw invalidToken("Token resource must be an absolute HTTPS URL, or HTTP URL for localhost");return normalizeResourceUrl(resource)}function normalizeResourceUrl(resource){let normalized=new URL(resource);return normalized.pathname=normalized.pathname==="/"?"/":normalized.pathname.replace(/\/+$/,""),normalized}function getOAuthProviderOptions(provider){return{oauthMetadata:provider.oauthMetadata,...provider.requiredScopes!==void 0&&{requiredScopes:[...provider.requiredScopes]},...provider.scopesSupported!==void 0&&{scopesSupported:[...provider.scopesSupported]},...provider.resourceName!==void 0&&{resourceName:provider.resourceName},...provider.serviceDocumentationUrl!==void 0&&{serviceDocumentationUrl:provider.serviceDocumentationUrl}}}function assertVerifiedAuthInfo(authInfo){if(authInfo===null||typeof authInfo!="object"||typeof authInfo.token!="string"||authInfo.token.length===0||typeof authInfo.clientId!="string"||!Array.isArray(authInfo.scopes)||!authInfo.scopes.every(scope=>typeof scope=="string")||typeof authInfo.expiresAt!="number"||!Number.isFinite(authInfo.expiresAt)||authInfo.expiresAt<=Date.now()/1e3)throw invalidToken("Token verifier returned invalid authentication information")}function assertMappedExtra(mapped){if(mapped===null||typeof mapped!="object"||!("user"in mapped)||mapped.user===void 0||!isRecord(mapped.payload)||!Array.isArray(mapped.permissions)||!mapped.permissions.every(permission=>typeof permission=="string"))throw invalidToken("Token identity mapping must return user, payload, and string permissions")}function requireAbsoluteOrigin(value,name){let url=parseAbsoluteUrl(value,name);if(url.pathname!=="/"||url.search!==""||url.hash!==""||url.username!==""||url.password!=="")throw new Error(`${name} must be an absolute origin without a path`);return url}function appendBasePath(origin,basePath){let resource=new URL(origin.origin);return resource.pathname=basePath,resource}function normalizeBasePath(basePath){if(!basePath.startsWith("/")||basePath.includes("?")||basePath.includes("#"))throw new Error("basePath must be an absolute URL pathname");return normalizePathname(basePath)}function normalizePathname(pathname){if(pathname==="/")return"/";let end=pathname.length;for(;end>0&&pathname.charCodeAt(end-1)===47;)end--;return pathname.slice(0,end)}function oauthCustomProvider(options){if(options===null||typeof options!="object"||typeof options.createTokenVerifier!="function"||typeof options.mapAuthInfo!="function")throw new TypeError("oauthCustomProvider requires createTokenVerifier, oauthMetadata, and mapAuthInfo");if(assertOAuthMetadata(options.oauthMetadata),options.resource!==void 0&&assertResourceUrl(options.resource),assertStringArray(options.requiredScopes,"requiredScopes"),assertStringArray(options.scopesSupported,"scopesSupported"),options.resourceName!==void 0&&(typeof options.resourceName!="string"||options.resourceName.trim().length===0))throw new TypeError("resourceName must be a non-empty string");if(options.serviceDocumentationUrl!==void 0){if(!(options.serviceDocumentationUrl instanceof URL))throw new TypeError("serviceDocumentationUrl must be a URL");assertSecureHttpUrl(options.serviceDocumentationUrl,"serviceDocumentationUrl")}return{createTokenVerifier:options.createTokenVerifier,oauthMetadata:options.oauthMetadata,mapAuthInfo:options.mapAuthInfo,...options.resource!==void 0&&{resource:options.resource},...options.requiredScopes!==void 0&&{requiredScopes:[...options.requiredScopes]},...options.scopesSupported!==void 0&&{scopesSupported:[...options.scopesSupported]},...options.resourceName!==void 0&&{resourceName:options.resourceName},...options.serviceDocumentationUrl!==void 0&&{serviceDocumentationUrl:options.serviceDocumentationUrl}}}function assertOAuthMetadata(metadata){if(metadata===null||typeof metadata!="object"||!("issuer"in metadata)||typeof metadata.issuer!="string")throw new TypeError("oauthMetadata must include a string issuer");assertSecureHttpUrl(parseAbsoluteUrl(metadata.issuer,"oauthMetadata.issuer"),"oauthMetadata.issuer")}function assertResourceUrl(resource){assertSecureHttpUrl(parseAbsoluteUrl(resource,"resource"),"resource")}function assertStringArray(value,name){if(value!==void 0&&(!Array.isArray(value)||!value.every(item=>typeof item=="string")))throw new TypeError(`${name} must be an array of strings`)}export{isRecord,isLocalhost,invalidToken,resolveConfiguredOAuthResource,resolveLocalOAuthResource,wrapOAuthTokenVerifier,getOAuthProviderOptions,oauthCustomProvider};

package/dist/chunk-KGTOBJW2.js

@@ -0,0 +1 @@
+import{invalidToken,isLocalhost,isRecord}from"./chunk-IS7FKXFR.js";import{OAuthError}from"@modelcontextprotocol/server";import{createRemoteJWKSet,jwtVerify,errors}from"jose";function createJwtVerifier(options){let key=options.key??createRemoteJWKSet(options.jwksUrl),configuredResource=canonicalUrl(options.resource),configuredAudience=verifierAudience(options.audience);if(configuredAudience!==void 0&&options.issuerBoundAccessTokens===!0)throw new TypeError("JWT verifier cannot combine audience and issuer-bound access tokens");return{async verifyAccessToken(token){try{let{payload}=await jwtVerify(token,key,{issuer:options.issuer,...configuredAudience!==void 0&&{audience:configuredAudience},...options.algorithms!==void 0&&{algorithms:[...options.algorithms]},requiredClaims:["exp","sub"]}),claims={...payload},clientId=requiredString(claims,"client_id")??requiredString(claims,"azp"),expiresAt=requiredFutureNumber(claims,"exp"),resource=verifiedResource(claims,configuredResource,configuredAudience!==void 0||options.issuerBoundAccessTokens===!0);return{token,clientId:clientId??"",scopes:normalizedStrings(claims.scope),expiresAt,extra:{payload:claims},resource}}catch(error){throw error instanceof OAuthError?error:isCredentialFailure(error)?(process.env.MCP_USE_OAUTH_DEBUG&&logJwtFailure(token,error),invalidToken("JWT verification failed",error)):error}}}}function normalizedProviderUrl(value,name){let raw=typeof value=="string"&&!value.includes("://")?`https://${value}`:value,url;try{url=new URL(raw)}catch{throw new TypeError(`${name} must be an absolute HTTP(S) URL`)}if(!isAllowedHttpUrl(url))throw new TypeError(`${name} must use HTTPS, or HTTP for localhost, without credentials, query, or fragment`);return url.pathname=url.pathname.replace(/\/+$/,"")||"/",url}function providerEndpoint(issuer,path){let base=new URL(issuer);return base.pathname=`${base.pathname.replace(/\/+$/,"")}/`,new URL(path.replace(/^\/+/,""),base).href}function payloadFromAuthInfo(authInfo){let payload=authInfo.extra?.payload;if(!isRecord(payload))throw invalidToken("Verified token payload is missing");return payload}function requiredString(claims,name){let value=claims[name];return typeof value=="string"&&value.trim().length>0?value:void 0}function stringValue(claims,name){let value=claims[name];return typeof value=="string"?value:void 0}function booleanValue(claims,name){let value=claims[name];return typeof value=="boolean"?value:void 0}function numberValue(claims,name){let value=claims[name];return typeof value=="number"&&Number.isFinite(value)?value:void 0}function recordValue(claims,name){let value=claims[name];return isRecord(value)?value:void 0}function normalizedStrings(value){return typeof value=="string"?value.split(/\s+/).filter(Boolean):Array.isArray(value)?value.filter(item=>typeof item=="string"&&item.length>0):[]}function requiredFutureNumber(claims,name){let value=numberValue(claims,name);if(value===void 0||value<=Date.now()/1e3)throw invalidToken(`Missing or expired ${name} claim`);return value}function verifiedResource(claims,configuredResource,providerBindingWasValidated){let value=claims.resource;if(value!==void 0){if(typeof value!="string")throw invalidToken("Token resource claim must be an absolute URL");if(canonicalUrl(value).href!==configuredResource.href)throw invalidToken("Token resource claim does not match protected resource");return configuredResource}if(providerBindingWasValidated)return configuredResource;let audience=claims.aud;if(!validAudience(audience))throw invalidToken("Token audience claim must be a string or string array");if(!(typeof audience=="string"?[audience]:audience).includes(configuredResource.href))throw invalidToken("Token audience does not include the protected resource");return configuredResource}function verifierAudience(value){if(value!==void 0){if(typeof value=="string"&&value.trim().length>0)return value;if(Array.isArray(value)&&value.length>0&&value.every(audience=>typeof audience=="string"&&audience.trim().length>0))return[...value];throw new TypeError("JWT verifier audience must be a non-empty string or string array")}}function validAudience(value){return typeof value=="string"||Array.isArray(value)&&value.length>0&&value.every(item=>typeof item=="string")}function canonicalUrl(value){try{let url=new URL(value);if(!isAllowedHttpUrl(url))throw new TypeError;return url.pathname=url.pathname==="/"?"/":url.pathname.replace(/\/+$/,""),url}catch{throw invalidToken("Token resource claim must be an absolute HTTPS URL, or HTTP URL for localhost")}}function isAllowedHttpUrl(url){return/^https?:$/.test(url.protocol)&&!url.username&&!url.password&&!url.search&&!url.hash&&(url.protocol!=="http:"||isLocalhost(url))}function isCredentialFailure(error){return error instanceof errors.JWTClaimValidationFailed||error instanceof errors.JWTExpired||error instanceof errors.JOSEAlgNotAllowed||error instanceof errors.JOSENotSupported||error instanceof errors.JWSInvalid||error instanceof errors.JWTInvalid||error instanceof errors.JWSSignatureVerificationFailed||error instanceof errors.JWKSNoMatchingKey}var JWT_DEBUG_CLAIMS=["iss","aud","azp","sub","exp","iat","nbf","client_id","scope","typ","jti"];function debugErrorText(error){return error instanceof Error?error.message:String(error)}function logJwtFailure(token,error){try{let decodeSegment2=function(segment,label){try{return Buffer.from(segment,"base64url").toString("utf8")}catch(decodeError){console.error(`[oauth-debug] ${label} decode failed: ${debugErrorText(decodeError)}`);return}};var decodeSegment=decodeSegment2;let name=error instanceof Error?error.constructor.name:typeof error;console.error(`[oauth-debug] JWT verify failed: ${name}: ${debugErrorText(error)}`),error instanceof errors.JWTClaimValidationFailed&&console.error(`[oauth-debug] claim=${error.claim} reason=${error.reason}`);let segments=token.split(".");if(console.error(`[oauth-debug] token segments: ${segments.length}`),segments.length!==3){let preview=token.length>12?`${token.slice(0,12)}\u2026`:token;console.error(`[oauth-debug] non-JWT token preview=${preview} length=${token.length}`);return}let headerJson=decodeSegment2(segments[0],"header");headerJson!==void 0&&console.error(`[oauth-debug] header=${headerJson}`);let payloadJson=decodeSegment2(segments[1],"payload");if(payloadJson===void 0)return;try{let payload=JSON.parse(payloadJson),selected={};for(let claim of JWT_DEBUG_CLAIMS)claim in payload&&(selected[claim]=payload[claim]);selected.now=Math.floor(Date.now()/1e3),console.error(`[oauth-debug] payload=${JSON.stringify(selected)}`)}catch(decodeError){console.error(`[oauth-debug] payload decode failed: ${debugErrorText(decodeError)}`)}}catch{}}export{createJwtVerifier,normalizedProviderUrl,providerEndpoint,payloadFromAuthInfo,requiredString,stringValue,booleanValue,recordValue,normalizedStrings};

package/dist/chunk-MIZQEWZS.js

@@ -0,0 +1 @@
+import{getOAuthProviderOptions,wrapOAuthTokenVerifier}from"./chunk-IS7FKXFR.js";import{OAuthError,OAuthErrorCode,bearerAuthChallengeResponse,getOAuthProtectedResourceMetadataUrl as getOAuthProtectedResourceMetadataUrl2,oauthMetadataResponse as oauthMetadataResponse2,requireBearerAuth as requireBearerAuth2,verifyBearerToken}from"@modelcontextprotocol/server";import{getOAuthProtectedResourceMetadataUrl,oauthMetadataResponse,requireBearerAuth}from"@modelcontextprotocol/server";import{hostHeaderValidationResponse,originValidationResponse}from"@modelcontextprotocol/server";var requestBags=new WeakMap;function getRequestBag(request){let bag=requestBags.get(request);return bag===void 0&&(bag={},requestBags.set(request,bag)),bag}function composeFetch(terminal,...middlewares){return async request=>{let index=0,dispatch=async()=>{if(index<middlewares.length){let middleware=middlewares[index];return index+=1,middleware(request,dispatch)}return terminal(request)};return dispatch()}}function pathnameOf(request){return new URL(request.url).pathname}function matchesPath(request,path){return pathnameOf(request)===path}function matchesPathPrefix(request,prefix){let pathname=pathnameOf(request);return pathname===prefix||pathname.startsWith(`${prefix}/`)}function pathUnderBase(basePath,childPath){let child=childPath.replace(/^\/+/,"");return basePath==="/"?`/${child}`:`${basePath}/${child}`}function isHtmlNavigationRequest(request){if(request.method!=="GET"&&request.method!=="HEAD")return!1;let accept=request.headers.get("accept");return accept===null?!1:accept.split(",").some(range=>{let[mediaType,...parameters]=range.split(";");return mediaType?.trim().toLowerCase()!=="text/html"?!1:!parameters.some(parameter=>{let[name,value]=parameter.trim().toLowerCase().split("=");return name==="q"&&Number(value)===0})})}function jsonBodyMiddleware(){return async(request,next)=>{let bag=getRequestBag(request);if(bag.parsedBody!==void 0||!(request.headers.get("content-type")??"").includes("application/json"))return next();try{bag.parsedBody=await request.clone().json()}catch{return new Response("Invalid JSON",{status:400})}return next()}}function hostValidationMiddleware(hosts){return async(request,next)=>hostHeaderValidationResponse(request,hosts)??next()}function originValidationMiddleware(origins,skipSafeMethods=!0){return async(request,next)=>skipSafeMethods&&(request.method==="GET"||request.method==="HEAD")?next():originValidationResponse(request,origins)??next()}function bearerAuth(provider,resource){let options=getOAuthProviderOptions(provider),gate=requireBearerAuth({verifier:wrapOAuthTokenVerifier(provider,resource),resourceMetadataUrl:getOAuthProtectedResourceMetadataUrl(resource),...options.requiredScopes!==void 0&&{requiredScopes:[...options.requiredScopes]}});return async(request,next)=>{let result=await gate(request);return result instanceof Response?result:(getRequestBag(request).authInfo=result,next())}}function oauthMetadata(provider,resource){let options=getOAuthProviderOptions(provider);return async(request,next)=>{let response=oauthMetadataResponse(request,{oauthMetadata:options.oauthMetadata,resourceServerUrl:resource,...options.scopesSupported!==void 0&&{scopesSupported:[...options.scopesSupported]},...options.resourceName!==void 0&&{resourceName:options.resourceName},...options.serviceDocumentationUrl!==void 0&&{serviceDocumentationUrl:options.serviceDocumentationUrl}});return response!==void 0?response:next()}}function authInfoFromRequest(request){return getRequestBag(request).authInfo}export{getRequestBag,composeFetch,pathnameOf,matchesPath,matchesPathPrefix,pathUnderBase,isHtmlNavigationRequest,jsonBodyMiddleware,hostValidationMiddleware,originValidationMiddleware,bearerAuth,oauthMetadata,authInfoFromRequest,OAuthError,OAuthErrorCode,bearerAuthChallengeResponse,getOAuthProtectedResourceMetadataUrl2 as getOAuthProtectedResourceMetadataUrl,oauthMetadataResponse2 as oauthMetadataResponse,requireBearerAuth2 as requireBearerAuth,verifyBearerToken};

package/dist/chunk-OJF6B5EU.js

@@ -0,0 +1 @@
+import{completable as sdkCompletable}from"@modelcontextprotocol/server";function createPrefixCompletion(values){let strings=values.map(String);return value=>{let prefix=String(value??"").toLowerCase();return strings.filter(candidate=>candidate.toLowerCase().startsWith(prefix))}}function completable(schema,complete){return typeof complete=="function"?sdkCompletable(schema,(value,context)=>complete(String(value??""),context)):sdkCompletable(schema,createPrefixCompletion(complete))}function normalizeCompletions(completions){let normalized=Object.create(null);for(let[variable,completer]of Object.entries(completions))completer!==void 0&&(normalized[variable]=Array.isArray(completer)?createPrefixCompletion(completer):completer);return normalized}export{completable,normalizeCompletions};

package/dist/chunk-PSKSL567.js

@@ -0,0 +1 @@
+function stripTrailingSlashes(value){return value.replace(/\/+$/,"")}function readEnv(name){if(typeof process>"u")return;let value=process.env[name];return value!==void 0&&value!==""?value:void 0}function parseForwardedHeader(header){for(let part of header.split(",")){let params=new Map;for(let token of part.split(";")){let[key,...rest]=token.trim().split("=");key===void 0||rest.length===0||params.set(key.toLowerCase(),rest.join("=").replace(/^"|"$/g,""))}let proto=params.get("proto"),host=params.get("host");if(proto!==void 0&&host!==void 0)return`${proto}://${host}`}}function resolveRequestOriginFromHeaders(request){let forwarded=request.headers.get("forwarded");if(forwarded!==null){let fromForwarded=parseForwardedHeader(forwarded);if(fromForwarded!==void 0)return fromForwarded}let proto=request.headers.get("x-forwarded-proto"),host=request.headers.get("x-forwarded-host");if(proto!==null&&host!==null){let firstHost=host.split(",")[0]?.trim(),firstProto=proto.split(",")[0]?.trim();if(firstHost!==void 0&&firstProto!==void 0&&firstHost!=="")return`${firstProto}://${firstHost}`}return new URL(request.url).origin}function resolveServerOrigin(request){let mcpUrl=readEnv("MCP_URL");if(mcpUrl!==void 0)try{return new URL(mcpUrl).origin}catch{}return resolveRequestOriginFromHeaders(request)}function originFromAssetsBase(assetsBase){try{return new URL(assetsBase).origin}catch{return assetsBase}}function normalizeAssetsBaseUrl(value){return stripTrailingSlashes(value)}function resolveAssetsBase(request){let assetsUrl=readEnv("MCP_ASSETS_URL");if(assetsUrl!==void 0)try{return normalizeAssetsBaseUrl(new URL(assetsUrl).href.replace(/\/$/,""))}catch{}return resolveServerOrigin(request)}function hasExplicitAssetsBase(){let assetsUrl=readEnv("MCP_ASSETS_URL");if(assetsUrl===void 0)return!1;try{return new URL(assetsUrl),!0}catch{return!1}}export{resolveServerOrigin,originFromAssetsBase,resolveAssetsBase,hasExplicitAssetsBase};

package/dist/chunk-XYHHP43G.js

@@ -0,0 +1 @@
+var bufferedResponses=new WeakSet,bufferedSources=new WeakMap;function markBufferedResponse(response){return response.body!==null&&bufferedResponses.add(response),response}function trackBufferedResponse(request,response){return markBufferedResponse(response),bufferedSources.set(request,response),response}function isBufferedResponse(response,request){if(response.body===null)return!1;if(bufferedResponses.has(response))return!0;let source=request===void 0?void 0:bufferedSources.get(request);return source!==void 0&&source.body!==null&&source.body===response.body}function inheritBufferedResponse(source,target){return isBufferedResponse(source)?markBufferedResponse(target):target}function toNodeHandler(handler,opts){return async(req,res,parsedBody)=>{typeof parsedBody=="function"&&(parsedBody=void 0);let finished=!1,abort=new AbortController;res.on("close",()=>{finished||abort.abort()}),res.destroyed===!0&&abort.abort();let request,response;try{request=await toWebRequest(req,parsedBody,{signal:abort.signal}),response=await handler.fetch(request,{...req.auth!==void 0&&{authInfo:req.auth},...parsedBody!==void 0&&{parsedBody}})}catch(error){try{opts?.onerror?.(error instanceof Error?error:new Error(String(error)))}catch{}response=internalServerErrorResponse(echoableRequestId(parsedBody))}let headers={};for(let[name,value]of response.headers)headers[name]=value;if(res.writeHead(response.status,headers),response.body===null){finished=!0,res.end();return}if(isBufferedResponse(response,request)){try{let bytes=new Uint8Array(await response.arrayBuffer());finished=!0,res.end(bytes)}catch{finished=!0,res.end()}return}let drainResolve,releaseDrainWait=()=>{drainResolve?.(),drainResolve=void 0},waitForDrain=()=>new Promise(resolve=>{drainResolve=resolve});res.on("drain",releaseDrainWait);let closed=new Promise(resolve=>{abort.signal.addEventListener("abort",()=>resolve(),{once:!0})});try{for await(let chunk of response.body){if(abort.signal.aborted)break;let bytes=chunk instanceof Uint8Array?chunk:new Uint8Array(chunk);res.write(bytes)===!1&&await Promise.race([waitForDrain(),closed])}}catch{}finished=!0,res.end()}}async function toWebRequest(req,parsedBody,options){let method=(req.method??"GET").toUpperCase(),url=`http://${singleHeaderValue(req.headers.host)??singleHeaderValue(req.headers[":authority"])??"localhost"}${req.url??"/"}`,headers=new Headers;for(let[name,value]of Object.entries(req.headers))if(!(value===void 0||name.startsWith(":")))if(Array.isArray(value))for(let item of value)headers.append(name,item);else headers.set(name,value);let body;if(method!=="GET"&&method!=="HEAD")if(parsedBody===void 0){let decoder=new TextDecoder,collected="";for await(let chunk of req)collected+=typeof chunk=="string"?chunk:decoder.decode(chunk,{stream:!0});collected+=decoder.decode(),collected.length>0&&(body=collected)}else{let serialized=JSON.stringify(parsedBody);headers.delete("content-encoding"),headers.delete("transfer-encoding"),serialized===void 0?headers.delete("content-length"):(body=serialized,headers.set("content-length",String(new TextEncoder().encode(serialized).byteLength)))}return new Request(url,{method,headers,...options?.signal!==void 0&&{signal:options.signal},...body!==void 0&&{body}})}function singleHeaderValue(value){return Array.isArray(value)?value[0]:value}function echoableRequestId(body){if(body===null||typeof body!="object"||Array.isArray(body))return null;let{method,id}=body;return typeof method!="string"?null:typeof id=="string"||typeof id=="number"?id:null}function internalServerErrorResponse(id){return Response.json({jsonrpc:"2.0",error:{code:-32603,message:"Internal server error"},id},{status:500})}export{trackBufferedResponse,inheritBufferedResponse,toNodeHandler,toWebRequest};