mcp-use 2.0.0-beta.8 → 2.0.0

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/server.ts","../src/config.ts","../src/context.ts","../src/views/capabilities.ts","../src/views/constants.ts","../src/middleware/cors.ts","../src/middleware/mcp-middleware.ts","../src/inspector-shell.ts","../src/logging.ts","../src/mount-mcp.ts","../src/tools.ts","../src/views/register.ts","../src/views/csp-env.ts","../src/views/routes.ts","../src/views/wire.ts","../src/index.ts"],"sourcesContent":["import {\n  localhostAllowedHostnames,\n  localhostAllowedOrigins,\n  McpServer as SdkMcpServer,\n  ResourceTemplate,\n  isInputRequiredResult,\n  type McpHttpHandler,\n  type McpRequestContext,\n  type PromptCallback as SdkPromptCallback,\n  type ServerEventBus,\n  type ServerContext,\n  type StandardSchemaWithJSON,\n} from \"@modelcontextprotocol/server\";\nimport type { Server as NodeHttpServer } from \"node:http\";\nimport type { AuthInfo } from \"@modelcontextprotocol/server\";\n\nimport { assertServerConfig, type ServerConfig } from \"./config.js\";\nimport {\n  toAuthenticatedRequestContext,\n  toRequestContext,\n  type RequestContext,\n} from \"./context.js\";\nimport {\n  composeFetch,\n  getRequestBag,\n  hostValidationMiddleware,\n  isHtmlNavigationRequest,\n  jsonBodyMiddleware,\n  matchesPath,\n  originValidationMiddleware,\n  routeFetch,\n  toFrameworkHandler,\n  type FetchHandler,\n  type FrameworkHandler,\n} from \"./fetch-app.js\";\nimport { corsFetchMiddleware, isGlobalCorsEnabled } from \"./middleware/cors.js\";\nimport {\n  normalizeMcpMiddlewarePattern,\n  parseMcpPattern,\n  runMcpOperation,\n  type McpCompleteEventListenerFn,\n  type McpEventListenerEntry,\n  type McpEventListenerFn,\n  type McpMiddlewareEntry,\n  type McpMiddlewareFn,\n  type McpMiddlewareFnFor,\n  type MiddlewareContext,\n} from \"./middleware/mcp-middleware.js\";\nimport {\n  createInspectorHandler,\n  matchesInspectorShellPath,\n} from \"./inspector-shell.js\";\nimport { requestLogger } from \"./logging.js\";\nimport { createMcpMount } from \"./mount-mcp.js\";\nimport { normalizeCompletions } from \"./resource-completion.js\";\nimport type { NodeRequestHandler } from \"./node-bridge.js\";\nimport { registerOpenAPITools } from \"./openapi/index.js\";\nimport type { FromOpenAPIOptions } from \"./openapi/types.js\";\nimport {\n  getOAuthProtectedResourceMetadataUrl,\n  requireBearerAuth,\n} from \"./oauth/index.js\";\nimport { authInfoFromRequest, oauthMetadata } from \"./oauth/adapters.js\";\nimport {\n  getOAuthProviderOptions,\n  resolveConfiguredOAuthResource,\n  resolveLocalOAuthResource,\n  wrapOAuthTokenVerifier,\n} from \"./oauth/internal.js\";\nimport type {\n  InferPromptInput,\n  PromptCallback,\n  PromptDefinition,\n} from \"./prompts.js\";\nimport type {\n  InferTemplateParams,\n  ResourceCallback,\n  ResourceDefinition,\n  ResourceTemplateCallback,\n  ResourceTemplateDefinition,\n  TemplateVariableValue,\n} from \"./resources.js\";\nimport type {\n  InferToolInput,\n  InferToolName,\n  InferToolOutput,\n  ToolCallback,\n  ToolDefinition,\n  ToolRef,\n  ToolViewConfig,\n} from \"./tools.js\";\nimport { resolveToolInputSchema } from \"./tools.js\";\nimport type { ViewResourceFacts } from \"./views/types.js\";\nimport {\n  createViewPublicHandler,\n  createViewAssetsHandler,\n  registerViews,\n  resolveAssetsBase,\n  synthesizeViewDocument,\n  viewResourceConfig,\n  viewResourceUri,\n  buildResourceUiMeta,\n  buildToolResultUiMeta,\n  buildToolUiMeta,\n  type BuildResourceUiMetaOptions,\n  type ViewManifestEntry,\n  type ViewsManifest,\n} from \"./views/index.js\";\n\n/*\n * Registry entries hold callbacks type-erased to their widest signature; the\n * registration methods cast the schema-narrowed callback down at `.set()`.\n * Safe because the SDK validates params against the definition's schema\n * before any callback runs.\n */\ntype HasOAuth<TUser> = [TUser] extends [never] ? false : true;\n\n/** Type-erased registry entry replayed when a per-request SDK server is built. */\ninterface ToolEntry<TUser> {\n  /** Declarative tool metadata and schemas supplied at registration time. */\n  definition: ToolDefinition;\n  /** Tool callback widened for heterogeneous storage in the registry. */\n  callback: ToolCallback<\n    Record<string, unknown>,\n    never,\n    TUser,\n    HasOAuth<TUser>\n  >;\n}\n\n/** Static resource definition and callback retained for per-request replay. */\ninterface ResourceEntry<TUser> {\n  /** Declarative resource metadata supplied at registration time. */\n  definition: ResourceDefinition;\n  /** Callback invoked when the registered resource URI is read. */\n  callback: ResourceCallback<TUser, HasOAuth<TUser>>;\n}\n\n/** Parameterized resource definition and type-erased callback registry entry. */\ninterface ResourceTemplateEntry<TUser> {\n  /** Declarative template metadata, including its URI template. */\n  definition: ResourceTemplateDefinition;\n  /** Template callback widened to store every inferred variable shape. */\n  callback: ResourceTemplateCallback<\n    Record<string, TemplateVariableValue>,\n    TUser,\n    HasOAuth<TUser>\n  >;\n  /** SDK callback map normalized once at author-time registration. */\n  complete?: ReturnType<typeof normalizeCompletions>;\n}\n\n/** Prompt definition and type-erased callback retained for request-time replay. */\ninterface PromptEntry<TUser> {\n  /** Declarative prompt metadata and optional argument schema. */\n  definition: PromptDefinition;\n  /** Prompt callback widened to store every inferred argument shape. */\n  callback: PromptCallback<Record<string, unknown>, TUser, HasOAuth<TUser>>;\n}\n\n/** Node HTTP listener returned by `listen()`. */\ninterface NodeHttpListener {\n  close(callback?: (error?: Error) => void): void;\n  once(event: \"error\", listener: (error: unknown) => void): void;\n  listen(port: number, hostname: string, callback?: () => void): NodeHttpServer;\n  address(): { port: number } | string | null;\n}\n\n/**\n * MCP server with declarative tool/resource/prompt registration, served\n * statelessly over a composed fetch handler.\n *\n * Registrations are stored in a registry; a fresh SDK `McpServer` is built\n * from it for every HTTP request (the stateless 2026-07-28 model), so\n * definition-time work must stay cheap — put pools and caches at module\n * scope, not inside callbacks' setup.\n *\n * @example\n * ```ts\n * const server = new MCPServer({ name: \"my-server\", version: \"1.0.0\" });\n * server.tool(\n *   { name: \"add\", inputSchema: z.object({ a: z.number(), b: z.number() }) },\n *   async ({ a, b }) => ({\n *     content: [{ type: \"text\", text: String(a + b) }],\n *   })\n * );\n * await server.listen(3000);\n * ```\n */\nexport class MCPServer<TUser = never> {\n  readonly #config: ServerConfig<TUser>;\n  readonly #tools = new Map<string, ToolEntry<TUser>>();\n  readonly #resources = new Map<string, ResourceEntry<TUser>>();\n  readonly #resourceTemplates = new Map<string, ResourceTemplateEntry<TUser>>();\n  readonly #prompts = new Map<string, PromptEntry<TUser>>();\n  readonly #views = new Map<string, ViewManifestEntry>();\n  /**\n   * One-to-one tool→view bindings. Each view name maps to the single tool\n   * that bound it; that tool's `view:` config is the sole source of\n   * resource facts for the primed view resource.\n   */\n  readonly #viewBindings = new Map<\n    string,\n    {\n      toolName: string;\n      config: ToolViewConfig;\n    }\n  >();\n  #viewsPrimed = false;\n  /** When true, resource CSP emission includes the HMR websocket origin. */\n  #viewsDevMode = false;\n  /** Project root for filesystem-backed view routes (dev `public/`). */\n  #viewsProjectRoot = process.cwd();\n\n  #fetchHandler: FetchHandler | undefined;\n  #handler: McpHttpHandler | undefined;\n  #httpServer: NodeHttpListener | undefined;\n  #oauthResource: URL | undefined;\n  #oauthResourceResolved = false;\n  #oauthResourceConfigurationAbsent = false;\n  /** Whether the mounted app validates Host headers (fixed at first mount). */\n  #hostValidated = false;\n  readonly #mcpMiddlewares: McpMiddlewareEntry[] = [];\n  readonly #mcpEventListeners: McpEventListenerEntry[] = [];\n\n  /**\n   * Create an MCP server from a parsed, bundled OpenAPI document.\n   *\n   * Each included OpenAPI operation becomes a tool that validates its input,\n   * calls the matching upstream HTTP endpoint, and returns the response using\n   * the SDK's raw tool-result shape. External `$ref` values are not fetched;\n   * bundle the document before passing it in.\n   *\n   * @param options - OpenAPI document, operation filters, upstream URL, and\n   * request authentication options.\n   * @returns An unauthenticated MCP server populated with generated tools.\n   *\n   * @example\n   * ```ts\n   * const spec = await fetch(\"https://api.example.com/openapi.json\")\n   *   .then((response) => response.json());\n   * const server = MCPServer.fromOpenAPI({ spec });\n   * await server.listen(3000);\n   * ```\n   */\n  static fromOpenAPI(options: FromOpenAPIOptions): MCPServer {\n    const server = new MCPServer({\n      name: options.name ?? options.spec.info.title,\n      version: options.version ?? options.spec.info.version ?? \"1.0.0\",\n    });\n    registerOpenAPITools(server, options);\n    return server;\n  }\n\n  /**\n   * Create a server. `config.name` and `config.version` identify the server\n   * to clients during initialization. `config.basePath` (default `\"/mcp\"`)\n   * is both the MCP route and the path of the OAuth protected-resource\n   * identity, so any explicit OAuth resource URL must use that exact path.\n   * Nothing binds or listens until {@link MCPServer.listen} or\n   * {@link MCPServer.getHandler} is called.\n   */\n  constructor(config: ServerConfig<TUser>) {\n    assertServerConfig(config);\n    this.#config = config;\n    if (config.oauth !== undefined) {\n      const mcpUrl =\n        typeof process === \"undefined\" ? undefined : process.env[\"MCP_URL\"];\n      const resource = resolveConfiguredOAuthResource({\n        provider: config.oauth,\n        basePath: this.#basePath(),\n        ...(mcpUrl !== undefined && { mcpUrl }),\n      });\n      this.#oauthResource = resource;\n      this.#oauthResourceResolved = resource !== undefined;\n      this.#oauthResourceConfigurationAbsent = resource === undefined;\n    }\n  }\n\n  /**\n   * The URL path prefix the MCP endpoint is mounted at.\n   *\n   * Reflects `config.basePath` (default `\"/mcp\"`). Exposed so tooling that\n   * imports the entry module — `mcp-use dev`'s startup log, for example —\n   * can build the endpoint and inspector URLs without assuming the default.\n   */\n  get basePath(): string {\n    return this.#basePath();\n  }\n\n  /**\n   * Register a tool. Input is validated against `inputSchema` before the callback\n   * runs; results carrying `structuredContent` are type-checked against\n   * `outputSchema` at the callback's return position.\n   *\n   * @returns A {@link ToolRef} carrying the tool name and phantom types for\n   * inference-based view typing.\n   */\n  tool<const T extends ToolDefinition>(\n    definition: T,\n    callback: ToolCallback<\n      InferToolInput<T>,\n      InferToolOutput<T>,\n      TUser,\n      HasOAuth<TUser>\n    >\n  ): ToolRef<InferToolName<T>, InferToolInput<T>, InferToolOutput<T>> {\n    this.#assertNotStarted(\"tool\", definition.name);\n    this.#validateToolViewBinding(definition);\n    this.#tools.set(definition.name, {\n      definition,\n      callback: callback as ToolCallback<\n        Record<string, unknown>,\n        never,\n        TUser,\n        HasOAuth<TUser>\n      >,\n    });\n    return Object.freeze({\n      name: definition.name,\n    }) as ToolRef<InferToolName<T>, InferToolInput<T>, InferToolOutput<T>>;\n  }\n\n  /**\n   * Prime the views registry from a build/dev manifest.\n   *\n   * @param views - Manifest map keyed by view directory name.\n   * @param options - Priming options. When `dev` is true, resource CSP\n   * emission appends the serving origin's websocket variant to\n   * `connectDomains` so Vite HMR passes host-enforced CSP. Pass\n   * `projectRoot` in dev so the `public/` route resolves against the user's\n   * project directory rather than the CLI process cwd.\n   * @throws If views are already primed, or after the server has started.\n   *\n   * @internal\n   */\n  [registerViews](\n    views: ViewsManifest,\n    options?: { dev?: boolean; projectRoot?: string }\n  ): void {\n    if (this.#viewsPrimed) {\n      throw new Error(\n        \"Cannot prime views: the views registry is already primed on this server instance.\"\n      );\n    }\n    this.#assertNotStarted(\"views\", \"manifest\");\n    this.#viewsDevMode = options?.dev === true;\n    if (options?.projectRoot !== undefined) {\n      this.#viewsProjectRoot = options.projectRoot;\n    }\n    for (const [name, entry] of Object.entries(views)) {\n      this.#views.set(name, entry);\n    }\n    this.#viewsPrimed = true;\n  }\n\n  /**\n   * Prime the views registry — string-keyed alias for {@link registerViews}\n   * used by the CLI when the symbol export cannot be shared across duplicate\n   * module copies (dev module runner with an externalized package).\n   *\n   * @param views - Manifest map keyed by view directory name.\n   * @param options - Priming options forwarded to {@link registerViews}.\n   * @throws If views are already primed, or after the server has started.\n   *\n   * @internal\n   */\n  __primeViews(\n    views: ViewsManifest,\n    options?: { dev?: boolean; projectRoot?: string }\n  ): void {\n    this[registerViews](views, options);\n  }\n\n  /** Register a static resource readable at `definition.uri`. */\n  resource(\n    definition: ResourceDefinition,\n    callback: ResourceCallback<TUser, HasOAuth<TUser>>\n  ): this {\n    this.#assertNotStarted(\"resource\", definition.name);\n    this.#resources.set(definition.name, { definition, callback });\n    return this;\n  }\n\n  /**\n   * Register a parameterized resource. Reads matching `uriTemplate` invoke\n   * the callback with the extracted variables.\n   *\n   * The `const` type parameter keeps `uriTemplate` a string literal during\n   * inference (plain generic inference widens object-literal properties to\n   * `string`), which is what lets `InferTemplateParams` type the callback's\n   * `params` from the template's variables.\n   */\n  resourceTemplate<const TUriTemplate extends string>(\n    definition: ResourceTemplateDefinition<TUriTemplate>,\n    callback: ResourceTemplateCallback<\n      InferTemplateParams<{ uriTemplate: TUriTemplate }>,\n      TUser,\n      HasOAuth<TUser>\n    >\n  ): this {\n    this.#assertNotStarted(\"resourceTemplate\", definition.name);\n    const complete =\n      definition.complete === undefined\n        ? undefined\n        : normalizeCompletions(definition.complete);\n    this.#resourceTemplates.set(definition.name, {\n      definition,\n      ...(complete !== undefined && { complete }),\n      callback: callback as ResourceTemplateCallback<\n        Record<string, TemplateVariableValue>,\n        TUser,\n        HasOAuth<TUser>\n      >,\n    });\n    return this;\n  }\n\n  /**\n   * Register a prompt template. Schema fields wrapped with `completable()`\n   * gain autocomplete via `completion/complete`.\n   */\n  prompt<T extends PromptDefinition>(\n    definition: T,\n    callback: PromptCallback<InferPromptInput<T>, TUser, HasOAuth<TUser>>\n  ): this {\n    this.#assertNotStarted(\"prompt\", definition.name);\n    this.#prompts.set(definition.name, {\n      definition,\n      callback: callback as PromptCallback<\n        Record<string, unknown>,\n        TUser,\n        HasOAuth<TUser>\n      >,\n    });\n    return this;\n  }\n\n  /**\n   * Web-standard request handler for the whole app (MCP endpoint included) —\n   * usable directly on serverless/edge runtimes or in tests.\n   *\n   * The handler never binds a socket, so no Host/Origin validation applies\n   * by default: DNS rebinding targets locally bound servers, and platform\n   * edges (Vercel, Cloudflare, …) only route hostnames assigned to the\n   * deployment. Set `allowedHosts`/`allowedOrigins` to opt into validation\n   * (additive — localhost-class values stay allowed).\n   *\n   * Pass the same `bus` to multiple server instances when their handlers\n   * replace one another while existing `subscriptions/listen` streams remain\n   * open. The bus is fixed when this instance first mounts.\n   *\n   * @param options - Optional handler wiring.\n   *\n   * @example\n   * ```ts\n   * const handler = server.getHandler();\n   * export default { fetch: handler };\n   * ```\n   */\n  getHandler(options: { bus?: ServerEventBus } = {}): FrameworkHandler {\n    const { fetch } = this.#ensureMounted(\"handler\", undefined, options.bus);\n    return toFrameworkHandler(fetch);\n  }\n\n  /**\n   * Node `(req, res) => void` handler for composing with an existing\n   * `http.Server`. Uses the same internal `toNodeHandler` bridge as\n   * {@link MCPServer.listen}; MCPServer users do not need to import\n   * `mcp-use/node`.\n   *\n   * @example\n   * ```ts\n   * import { createServer } from \"node:http\";\n   * const httpServer = createServer(await server.getNodeHandler());\n   * httpServer.listen(3000);\n   * ```\n   */\n  async getNodeHandler(): Promise<NodeRequestHandler> {\n    const { fetch } = this.#ensureMounted(\"handler\");\n    const { toNodeHandler } = await import(\"./node-bridge.js\");\n    return toNodeHandler({ fetch });\n  }\n\n  /**\n   * Register MCP operation middleware that intercepts JSON-RPC dispatch.\n   *\n   * Patterns use an `mcp:` prefix (for example `mcp:tools/call`, `mcp:*`).\n   * Middleware runs in registration order; call `next()` to continue the chain.\n   *\n   * @example\n   * ```ts\n   * server.use(\"mcp:tools/call\", async (ctx, next) => {\n   *   console.log(`Calling tool: ${ctx.params.name}`);\n   *   return next();\n   * });\n   * ```\n   */\n  use<P extends string>(\n    pattern: `mcp:${P}` | P,\n    handler: McpMiddlewareFnFor<P>\n  ): this {\n    this.#assertNotStarted(\"middleware\", pattern);\n    this.#mcpMiddlewares.push({\n      pattern: normalizeMcpMiddlewarePattern(pattern),\n      handler: handler as McpMiddlewareFn,\n    });\n    return this;\n  }\n\n  /**\n   * Register a read-only MCP observer. Unlike {@link MCPServer.use}, listeners\n   * cannot block, override, or mutate params. Throwing is logged and does not\n   * fail the request.\n   *\n   * Append `:complete` to run after the handler (for example\n   * `mcp:tools/call:complete`).\n   *\n   * @example\n   * ```ts\n   * server.on(\"mcp:tools/call\", (ctx) => {\n   *   metrics.increment(\"tools.call\", { tool: ctx.params.name });\n   * });\n   * ```\n   */\n  on<P extends string>(\n    pattern: `mcp:${P}` | P,\n    handler: P extends `${string}:complete`\n      ? McpCompleteEventListenerFn\n      : McpEventListenerFn\n  ): this {\n    this.#assertNotStarted(\"event listener\", pattern);\n    const { pattern: stripped, phase } = parseMcpPattern(pattern);\n    this.#mcpEventListeners.push({\n      pattern: stripped,\n      phase,\n      handler: handler as McpEventListenerFn | McpCompleteEventListenerFn,\n    });\n    return this;\n  }\n\n  /**\n   * Publish a tools-list change to v2 clients with active subscriptions.\n   *\n   * @example\n   * ```ts\n   * await server.notifyToolsChanged();\n   * ```\n   */\n  async notifyToolsChanged(): Promise<void> {\n    await this.#ensureMounted(\"handler\").handler.notify.toolsChanged();\n  }\n\n  /**\n   * Publish a prompts-list change to v2 clients with active subscriptions.\n   *\n   * @example\n   * ```ts\n   * await server.notifyPromptsChanged();\n   * ```\n   */\n  async notifyPromptsChanged(): Promise<void> {\n    await this.#ensureMounted(\"handler\").handler.notify.promptsChanged();\n  }\n\n  /**\n   * Publish a resources-list change to v2 clients with active subscriptions.\n   *\n   * @example\n   * ```ts\n   * await server.notifyResourcesChanged();\n   * ```\n   */\n  async notifyResourcesChanged(): Promise<void> {\n    await this.#ensureMounted(\"handler\").handler.notify.resourcesChanged();\n  }\n\n  /**\n   * Publish a resource update to subscribed v2 clients.\n   *\n   * @param uri - Resource URI whose representation changed.\n   *\n   * @example\n   * ```ts\n   * await server.notifyResourceUpdated(\"config://settings\");\n   * ```\n   */\n  async notifyResourceUpdated(uri: string): Promise<void> {\n    await this.#ensureMounted(\"handler\").handler.notify.resourceUpdated(uri);\n  }\n\n  /**\n   * Serve over HTTP on Node. Pass port `0` for an ephemeral port.\n   *\n   * Binds `config.host` (default `127.0.0.1`). Localhost-class binds get\n   * DNS-rebinding protection automatically: `Host` on every request,\n   * `Origin` only on non-GET/HEAD (sandboxed view iframes send\n   * `Origin: null` on asset GETs). To serve publicly set `host: \"0.0.0.0\"`;\n   * behind a platform edge that is all that's needed, and `allowedHosts`\n   * restricts direct exposure (additive — localhost-class values stay allowed).\n   *\n   * With OAuth and no explicit resource or `MCP_URL`, a localhost listener\n   * derives its protected-resource URL from the actual bound port. Mounting\n   * therefore waits for the listener callback (especially for port `0`), and\n   * requests accepted before then are queued. Public/wildcard listeners must\n   * configure the resource before calling this method.\n   *\n   * @throws If called on a localhost-class bind after {@link MCPServer.getHandler}\n   * already mounted the app without Host validation.\n   */\n  async listen(port = 3000): Promise<{ port: number; url: string }> {\n    this.#assertListenOAuthConfiguration();\n    const { createServer } = await import(\"node:http\");\n    const { toNodeHandler } = await import(\"./node-bridge.js\");\n    const host = this.#config.host ?? \"127.0.0.1\";\n\n    return new Promise((resolve, reject) => {\n      let resolveFetch: ((fetch: FetchHandler) => void) | undefined;\n      let rejectFetch: ((error: unknown) => void) | undefined;\n      const fetchReady = new Promise<FetchHandler>(\n        (resolveFetchPromise, rejectFetchPromise) => {\n          resolveFetch = resolveFetchPromise;\n          rejectFetch = rejectFetchPromise;\n        }\n      );\n      void fetchReady.catch(() => undefined);\n\n      let settled = false;\n      const rejectAndClose = (error: unknown) => {\n        if (!settled) {\n          settled = true;\n          reject(error);\n        }\n        rejectFetch?.(error);\n        void new Promise<void>((closeResolve) =>\n          server.close(() => closeResolve())\n        )\n          .catch(() => undefined)\n          .finally(() => {\n            if (this.#httpServer === server) {\n              this.#httpServer = undefined;\n            }\n          });\n      };\n\n      const nodeHandler = toNodeHandler({\n        fetch: async (request) => (await fetchReady)(request),\n      });\n      const server = createServer((req, res) => {\n        void nodeHandler(req, res);\n      }) as NodeHttpListener;\n\n      server.once(\"error\", rejectAndClose);\n      server.listen(port, host, () => {\n        try {\n          const address = server.address();\n          const boundPort =\n            typeof address === \"object\" && address !== null\n              ? address.port\n              : port;\n          const { fetch } = this.#ensureMounted(\"listen\", boundPort);\n          resolveFetch?.(fetch);\n          if (!settled) {\n            settled = true;\n            resolve({\n              port: boundPort,\n              url: `http://localhost:${boundPort}${this.#basePath()}`,\n            });\n          }\n        } catch (error) {\n          rejectAndClose(error);\n        }\n      });\n      this.#httpServer = server;\n    });\n  }\n\n  /**\n   * Abort in-flight MCP exchanges and stop the HTTP listener.\n   *\n   * A closed server is done for good — the underlying MCP handler stays\n   * closed, so `listen()`/`getHandler()` cannot revive it. Create a new\n   * instance to serve again.\n   */\n  async close(): Promise<void> {\n    await this.#handler?.close();\n    const httpServer = this.#httpServer;\n    if (httpServer !== undefined) {\n      await new Promise<void>((resolve, reject) => {\n        httpServer.close((err) => (err ? reject(err) : resolve()));\n      });\n      this.#httpServer = undefined;\n    }\n  }\n\n  #basePath(): string {\n    return this.#config.basePath ?? \"/mcp\";\n  }\n\n  #resolveOAuthResource(\n    mode: \"listen\" | \"handler\",\n    listenPort?: number\n  ): URL | undefined {\n    if (this.#config.oauth === undefined) {\n      return undefined;\n    }\n    if (this.#oauthResourceResolved) {\n      return this.#oauthResource;\n    }\n\n    const host = this.#config.host ?? \"127.0.0.1\";\n    const localListen =\n      mode === \"listen\" &&\n      listenPort !== undefined &&\n      [\"127.0.0.1\", \"localhost\", \"::1\"].includes(host);\n    if (this.#oauthResourceConfigurationAbsent && localListen) {\n      this.#oauthResource = resolveLocalOAuthResource(\n        `http://localhost:${listenPort}`,\n        this.#basePath()\n      );\n      this.#oauthResourceResolved = true;\n      return this.#oauthResource;\n    }\n\n    throw new Error(\n      \"OAuth requires an explicit resource or MCP_URL when using getHandler() or listening on a non-local host\"\n    );\n  }\n\n  #assertListenOAuthConfiguration(): void {\n    if (this.#config.oauth === undefined) {\n      return;\n    }\n    const host = this.#config.host ?? \"127.0.0.1\";\n    if ([\"127.0.0.1\", \"localhost\", \"::1\"].includes(host)) {\n      return;\n    }\n    if (!this.#oauthResourceResolved) {\n      // Public/wildcard listeners have no stable local fallback. Their\n      // configured resource was already validated during construction.\n      throw new Error(\n        \"OAuth listen() on a public or wildcard host requires an explicit provider resource or valid MCP_URL.\"\n      );\n    }\n  }\n\n  #assertNotStarted(kind: string, name: string): void {\n    if (this.#handler !== undefined) {\n      throw new Error(\n        `Cannot register ${kind} \"${name}\" after the server has started: ` +\n          `registrations are replayed per request from the registry, ` +\n          `so register everything before listen()/getHandler().`\n      );\n    }\n  }\n\n  /**\n   * Effective Host/Origin allowlists for a mount mode; `undefined` means the\n   * corresponding validation is off.\n   *\n   * Configured lists are additive to the localhost-class allowlists, so local\n   * runs keep working when a deployment hostname is added. With nothing\n   * configured, `listen()` on a localhost-class bind validates against the\n   * localhost lists (the DNS-rebinding threat model), while `getHandler()` —\n   * which never binds — applies no validation. `allowedOrigins` defaults to\n   * mirroring the effective Host allowlist. Origin validation runs only on\n   * non-GET/HEAD requests.\n   */\n  #validationPolicy(mode: \"listen\" | \"handler\"): {\n    hosts: string[] | undefined;\n    origins: string[] | undefined;\n  } {\n    const { host = \"127.0.0.1\", allowedHosts, allowedOrigins } = this.#config;\n    const localhostBind = [\"127.0.0.1\", \"localhost\", \"::1\"].includes(host);\n    const hosts =\n      allowedHosts !== undefined\n        ? [...new Set([...localhostAllowedHostnames(), ...allowedHosts])]\n        : mode === \"listen\" && localhostBind\n          ? localhostAllowedHostnames()\n          : undefined;\n    const origins =\n      allowedOrigins !== undefined\n        ? [...new Set([...localhostAllowedOrigins(), ...allowedOrigins])]\n        : hosts;\n    return { hosts, origins };\n  }\n\n  #ensureMounted(\n    mode: \"listen\" | \"handler\",\n    listenPort?: number,\n    bus?: ServerEventBus\n  ): {\n    fetch: FetchHandler;\n    handler: McpHttpHandler;\n  } {\n    if (this.#fetchHandler === undefined || this.#handler === undefined) {\n      const { hosts, origins } = this.#validationPolicy(mode);\n      const basePath = this.#basePath();\n      const nestedBasePath = basePath === \"/\" ? \"\" : basePath;\n      const middlewares = [\n        jsonBodyMiddleware(),\n        requestLogger(this.#config.logging),\n      ];\n\n      const corsConfig = this.#config.cors;\n      if (corsConfig !== undefined) {\n        middlewares.unshift(corsFetchMiddleware(corsConfig));\n      }\n      const deferViewCors = isGlobalCorsEnabled(corsConfig);\n\n      if (hosts !== undefined) {\n        middlewares.unshift(hostValidationMiddleware(hosts));\n        middlewares.push(originValidationMiddleware(origins ?? hosts));\n      } else {\n        if (origins !== undefined) {\n          middlewares.push(originValidationMiddleware(origins));\n        }\n        if (mode === \"listen\") {\n          console.warn(\n            `[mcp-use] listen() is serving on ${this.#config.host} without ` +\n              `Host validation. Behind a platform edge that only routes your ` +\n              `own domains this is expected; if this process is reachable ` +\n              `directly, set allowedHosts to restrict it.`\n          );\n        }\n      }\n\n      this.#validateViewBindingsAtMount();\n\n      const resource = this.#resolveOAuthResource(mode, listenPort);\n      if (resource !== undefined) {\n        const provider = this.#config.oauth!;\n        middlewares.push(oauthMetadata(provider, resource));\n      }\n\n      const { handler, fetch: mcpFetch } = createMcpMount(\n        (ctx) => this.#buildSdkServer(ctx),\n        {\n          path: basePath,\n          ...((this.#config.legacy !== undefined || bus !== undefined) && {\n            handler: {\n              ...(this.#config.legacy !== undefined && {\n                legacy: this.#config.legacy,\n              }),\n              ...(bus !== undefined && { bus }),\n            },\n          }),\n          ...(resource !== undefined && {\n            authInfo: (request) => authInfoFromRequest(request),\n          }),\n        }\n      );\n\n      let protectWithBearer: (\n        request: Request,\n        next: () => Promise<Response>\n      ) => Promise<Response> = async (_request, next) => next();\n      if (resource !== undefined) {\n        const provider = this.#config.oauth!;\n        const providerOptions = getOAuthProviderOptions(provider);\n        const gate = requireBearerAuth({\n          verifier: wrapOAuthTokenVerifier(provider, resource),\n          resourceMetadataUrl: getOAuthProtectedResourceMetadataUrl(resource),\n          ...(providerOptions.requiredScopes !== undefined && {\n            requiredScopes: providerOptions.requiredScopes,\n          }),\n        });\n        protectWithBearer = async (request, next) => {\n          const result = await gate(request);\n          if (result instanceof Response) {\n            return result;\n          }\n          const bag = getRequestBag(request);\n          bag.authInfo = result;\n          return next();\n        };\n      }\n\n      const mcpRouteHandler: FetchHandler = (request) =>\n        protectWithBearer(request, () => mcpFetch(request));\n      const endpointHandler: FetchHandler = async (request) => {\n        if (!isHtmlNavigationRequest(request)) {\n          return mcpRouteHandler(request);\n        }\n        const respond = async (): Promise<Response> => {\n          const { createLandingPageResponse } =\n            await import(\"./landing-handler.js\");\n          return createLandingPageResponse(\n            request,\n            basePath,\n            this.#config,\n            this.#tools.values(),\n            this.#prompts.values(),\n            this.#resources.values()\n          );\n        };\n        if (resource !== undefined && this.#config.publicLandingPage !== true) {\n          return protectWithBearer(request, respond);\n        }\n        return respond();\n      };\n\n      const routes: Array<{\n        match: (request: Request) => boolean;\n        handler: FetchHandler;\n      }> = [];\n\n      const viewHandler = createViewPublicHandler(basePath, this.#views, {\n        dev: this.#viewsDevMode,\n        projectRoot: this.#viewsProjectRoot,\n        deferCors: deferViewCors,\n      });\n      if (viewHandler !== undefined) {\n        routes.push({\n          match: (request) =>\n            request.method === \"GET\" || request.method === \"HEAD\"\n              ? new URL(request.url).pathname.startsWith(\n                  `${nestedBasePath}/_mcp-use/public/`\n                )\n              : false,\n          handler: viewHandler,\n        });\n      }\n\n      if (!this.#viewsDevMode) {\n        const viewAssetsHandler = createViewAssetsHandler(\n          basePath,\n          this.#views,\n          { projectRoot: this.#viewsProjectRoot, deferCors: deferViewCors }\n        );\n        if (viewAssetsHandler !== undefined) {\n          routes.push({\n            match: (request) =>\n              request.method === \"GET\" || request.method === \"HEAD\"\n                ? new URL(request.url).pathname.startsWith(\n                    `${nestedBasePath}/_mcp-use/views/`\n                  )\n                : false,\n            handler: viewAssetsHandler,\n          });\n        }\n      }\n\n      const inspectorHandler = createInspectorHandler(this.#config.inspector, {\n        serverName: this.#config.name,\n        basePath,\n      });\n      if (inspectorHandler !== undefined) {\n        routes.push({\n          match: (request) => {\n            if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n              return false;\n            }\n            const pathname = new URL(request.url).pathname;\n            return matchesInspectorShellPath(pathname, basePath);\n          },\n          handler: inspectorHandler,\n        });\n      }\n\n      routes.push({\n        match: (request) => matchesPath(request, basePath),\n        handler: endpointHandler,\n      });\n\n      const terminal = routeFetch(routes);\n      this.#fetchHandler = composeFetch(terminal, ...middlewares);\n      this.#handler = handler;\n      this.#hostValidated = hosts !== undefined;\n    } else if (bus !== undefined && this.#handler.bus !== bus) {\n      throw new Error(\n        \"Cannot change the MCP event bus after the server has started.\"\n      );\n    } else if (\n      mode === \"listen\" &&\n      !this.#hostValidated &&\n      this.#validationPolicy(\"listen\").hosts !== undefined\n    ) {\n      throw new Error(\n        \"Cannot listen() on a localhost bind after getHandler(): the app is \" +\n          \"already mounted without Host validation (getHandler() expects a \" +\n          \"platform edge in front). Call listen() first, or set allowedHosts.\"\n      );\n    }\n    return { fetch: this.#fetchHandler, handler: this.#handler };\n  }\n\n  #validateToolViewBinding(definition: ToolDefinition): void {\n    const view = definition.view;\n    if (view === undefined) {\n      return;\n    }\n    if (definition.outputSchema === undefined) {\n      throw new Error(\n        `Tool \"${definition.name}\" declares view \"${view.name}\" but has no outputSchema. ` +\n          `View-bound tools require an outputSchema — the view reads structuredContent typed from it. ` +\n          `Use outputSchema: z.object({}) for a view that takes no structured output.`\n      );\n    }\n\n    const existing = this.#viewBindings.get(view.name);\n    if (existing !== undefined) {\n      throw new Error(\n        `View \"${view.name}\" is already bound to tool \"${existing.toolName}\"; ` +\n          `tool \"${definition.name}\" cannot bind the same view. ` +\n          `Each view may be bound to one tool.`\n      );\n    }\n\n    this.#viewBindings.set(view.name, {\n      toolName: definition.name,\n      config: view,\n    });\n  }\n\n  #validateViewBindingsAtMount(): void {\n    if (this.#viewBindings.size > 0 && !this.#viewsPrimed) {\n      const first = [...this.#tools.values()].find(\n        (entry) => entry.definition.view !== undefined\n      );\n      const viewName = first?.definition.view?.name ?? \"unknown\";\n      throw new Error(\n        `Tool \"${first?.definition.name ?? \"unknown\"}\" is bound to view \"${viewName}\" ` +\n          `but no views were primed. Run \\`mcp-use build\\` and deploy the built entry, ` +\n          `or in dev let the CLI prime views automatically.`\n      );\n    }\n\n    for (const entry of this.#tools.values()) {\n      const viewName = entry.definition.view?.name;\n      if (viewName !== undefined && !this.#views.has(viewName)) {\n        throw new Error(\n          `Tool \"${entry.definition.name}\" is bound to view \"${viewName}\" ` +\n            `which is not in the primed views registry. Run \\`mcp-use build\\` ` +\n            `and deploy the built entry, or in dev let the CLI prime views automatically.`\n        );\n      }\n    }\n\n    for (const viewName of this.#views.keys()) {\n      if (!this.#viewBindings.has(viewName)) {\n        console.warn(\n          `[mcp-use] View \"${viewName}\" is registered but no tool binds it.`\n        );\n      }\n    }\n  }\n\n  /** Build a fresh SDK server from the registry (runs once per request). */\n  #buildSdkServer(ctx: McpRequestContext): SdkMcpServer {\n    const { name, version, title, description, instructions } = this.#config;\n    const authInfo = ctx.authInfo;\n    const server = new SdkMcpServer(\n      {\n        name,\n        version,\n        ...(title !== undefined && { title }),\n        ...(description !== undefined && { description }),\n      },\n      {\n        capabilities: {\n          tools: { listChanged: true },\n          prompts: { listChanged: true },\n          resources: { listChanged: true, subscribe: true },\n        },\n        ...(instructions !== undefined && { instructions }),\n        ...(authInfo !== undefined && { authInfo }),\n        ...(this.#config.requestState !== undefined && {\n          requestState: this.#config.requestState,\n        }),\n      }\n    );\n\n    const request = ctx.requestInfo;\n    const viewMetaOptions =\n      request !== undefined\n        ? { request, hmrWs: this.#viewsDevMode }\n        : { hmrWs: this.#viewsDevMode };\n    const basePath = this.#basePath();\n\n    for (const entry of this.#tools.values()) {\n      this.#registerTool(server, entry);\n    }\n    for (const entry of this.#resources.values()) {\n      this.#registerResource(server, entry);\n    }\n    for (const entry of this.#resourceTemplates.values()) {\n      this.#registerResourceTemplate(server, entry);\n    }\n    for (const entry of this.#prompts.values()) {\n      this.#registerPrompt(server, entry);\n    }\n    for (const [viewName, viewEntry] of this.#views.entries()) {\n      this.#registerViewResource(\n        server,\n        viewName,\n        viewEntry,\n        viewMetaOptions,\n        basePath\n      );\n    }\n    this.#wrapListHandlers(server);\n    return server;\n  }\n\n  #createMiddlewareContext(\n    method: string,\n    params: Record<string, unknown>,\n    ctx: ServerContext\n  ): MiddlewareContext {\n    return {\n      method,\n      params,\n      ...(ctx.http?.authInfo !== undefined && { auth: ctx.http.authInfo }),\n      state: new Map(),\n    };\n  }\n\n  #runMcpHook(\n    method: string,\n    ctx: MiddlewareContext,\n    innerFn: () => Promise<unknown>\n  ): Promise<unknown> {\n    return runMcpOperation(\n      this.#mcpMiddlewares,\n      this.#mcpEventListeners,\n      method,\n      ctx,\n      innerFn\n    );\n  }\n\n  /**\n   * Wrap native SDK list handlers with the MCP middleware chain.\n   *\n   * ponytail: uses SDK-private `_requestHandlers`; pin compile-time test.\n   *\n   * @internal\n   */\n  #wrapListHandlers(server: SdkMcpServer): void {\n    type RequestHandler = (\n      request: unknown,\n      extra: unknown\n    ) => Promise<unknown>;\n    const handlers = (\n      server.server as unknown as {\n        _requestHandlers?: Map<string, RequestHandler>;\n      }\n    )._requestHandlers;\n    if (handlers === undefined) {\n      return;\n    }\n\n    const wrapListMethod = (\n      method: \"tools/list\" | \"resources/list\" | \"prompts/list\",\n      resultKey: \"tools\" | \"resources\" | \"prompts\"\n    ) => {\n      const original = handlers.get(method);\n      if (original === undefined) {\n        return;\n      }\n      if ((original as { __mcpListWrapped?: boolean }).__mcpListWrapped) {\n        return;\n      }\n\n      const wrapped = async (request: unknown, extra: unknown) => {\n        const authInfo = (\n          extra as { http?: { authInfo?: AuthInfo } } | undefined\n        )?.http?.authInfo;\n        const mwCtx: MiddlewareContext = {\n          method,\n          params: {},\n          ...(authInfo !== undefined && { auth: authInfo }),\n          state: new Map(),\n        };\n        const innerFn = async () => {\n          const result = (await original(request, extra)) as Record<\n            string,\n            unknown\n          >;\n          return result[resultKey] ?? result;\n        };\n        const filtered = await this.#runMcpHook(method, mwCtx, innerFn);\n        if (Array.isArray(filtered)) {\n          return { [resultKey]: filtered };\n        }\n        return filtered;\n      };\n      (wrapped as { __mcpListWrapped?: boolean }).__mcpListWrapped = true;\n      handlers.set(method, wrapped);\n    };\n\n    wrapListMethod(\"tools/list\", \"tools\");\n    wrapListMethod(\"resources/list\", \"resources\");\n    wrapListMethod(\"prompts/list\", \"prompts\");\n  }\n\n  #registerTool(\n    server: SdkMcpServer,\n    { definition, callback }: ToolEntry<TUser>\n  ): void {\n    const view = definition.view;\n\n    const toolMeta = buildToolUiMeta(\n      view?.name,\n      definition.visibility,\n      definition._meta\n    );\n    const config = {\n      ...(definition.title !== undefined && { title: definition.title }),\n      ...(definition.description !== undefined && {\n        description: definition.description,\n      }),\n      ...(definition.annotations !== undefined && {\n        annotations: definition.annotations,\n      }),\n      ...(definition.outputSchema !== undefined && {\n        outputSchema: definition.outputSchema,\n      }),\n      ...(toolMeta !== undefined && { _meta: toolMeta }),\n    };\n    const wireResultMeta =\n      view !== undefined ? buildToolResultUiMeta(view.name) : undefined;\n\n    const inputSchema = resolveToolInputSchema(definition);\n\n    const invokeTool = async (\n      args: Record<string, unknown>,\n      ctx: ServerContext\n    ) => {\n      const mwCtx = this.#createMiddlewareContext(\n        \"tools/call\",\n        { name: definition.name, arguments: args },\n        ctx\n      );\n      const innerFn = async () => {\n        const effectiveArgs = (mwCtx.params.arguments ?? {}) as Record<\n          string,\n          unknown\n        >;\n        const result = await callback(\n          effectiveArgs,\n          this.#toRequestContext(ctx)\n        );\n        if (\n          isInputRequiredResult(result) ||\n          wireResultMeta === undefined ||\n          result.isError === true\n        ) {\n          return result;\n        }\n        return {\n          ...result,\n          _meta: { ...result._meta, ...wireResultMeta },\n        };\n      };\n      return (await this.#runMcpHook(\"tools/call\", mwCtx, innerFn)) as Awaited<\n        ReturnType<typeof callback>\n      >;\n    };\n\n    if (inputSchema !== undefined) {\n      server.registerTool(\n        definition.name,\n        { ...config, inputSchema },\n        async (args, ctx) => invokeTool(args as Record<string, unknown>, ctx)\n      );\n    } else {\n      server.registerTool(definition.name, config, async (ctx) =>\n        invokeTool({}, ctx)\n      );\n    }\n  }\n\n  #registerViewResource(\n    server: SdkMcpServer,\n    viewName: string,\n    entry: ViewManifestEntry,\n    metaOptions: { request?: Request; hmrWs?: boolean },\n    basePath: string\n  ): void {\n    const uri = viewResourceUri(viewName);\n    const authorFacts = this.#viewResourceFacts(\n      this.#viewBindings.get(viewName)?.config\n    );\n    const resourceConfig = viewResourceConfig(\n      viewName,\n      entry,\n      authorFacts,\n      metaOptions\n    );\n    server.registerResource(\n      viewName,\n      uri,\n      resourceConfig,\n      async (readUri, ctx) => {\n        const req = ctx.http?.req;\n        const readOptions: BuildResourceUiMetaOptions =\n          req !== undefined\n            ? {\n                request: req,\n                ...(metaOptions.hmrWs === true ? { hmrWs: true } : {}),\n              }\n            : metaOptions.hmrWs === true\n              ? { hmrWs: true }\n              : {};\n        const assetsBase =\n          req !== undefined\n            ? resolveAssetsBase(req)\n            : metaOptions.request !== undefined\n              ? resolveAssetsBase(metaOptions.request)\n              : \"\";\n        const html = synthesizeViewDocument(\n          entry,\n          assetsBase,\n          basePath,\n          viewName\n        );\n        return {\n          contents: [\n            {\n              uri: readUri.href,\n              mimeType: resourceConfig.mimeType,\n              text: html,\n              _meta: buildResourceUiMeta(authorFacts, readOptions),\n            },\n          ],\n        };\n      }\n    );\n  }\n\n  #registerResource(\n    server: SdkMcpServer,\n    { definition, callback }: ResourceEntry<TUser>\n  ): void {\n    server.registerResource(\n      definition.name,\n      definition.uri,\n      {\n        ...(definition.title !== undefined && { title: definition.title }),\n        ...(definition.description !== undefined && {\n          description: definition.description,\n        }),\n        ...(definition.mimeType !== undefined && {\n          mimeType: definition.mimeType,\n        }),\n        ...(definition.annotations !== undefined && {\n          annotations: definition.annotations,\n        }),\n        ...(definition._meta !== undefined && {\n          _meta: { ...definition._meta },\n        }),\n      },\n      async (uri, ctx) => {\n        const mwCtx = this.#createMiddlewareContext(\n          \"resources/read\",\n          { uri: uri.href },\n          ctx\n        );\n        const innerFn = async () => callback(uri, this.#toRequestContext(ctx));\n        return (await this.#runMcpHook(\n          \"resources/read\",\n          mwCtx,\n          innerFn\n        )) as Awaited<ReturnType<typeof callback>>;\n      }\n    );\n  }\n\n  #registerResourceTemplate(\n    server: SdkMcpServer,\n    { definition, callback, complete }: ResourceTemplateEntry<TUser>\n  ): void {\n    const template = new ResourceTemplate(definition.uriTemplate, {\n      list: undefined,\n      ...(complete !== undefined && { complete }),\n    });\n    server.registerResource(\n      definition.name,\n      template,\n      {\n        ...(definition.title !== undefined && { title: definition.title }),\n        ...(definition.description !== undefined && {\n          description: definition.description,\n        }),\n        ...(definition.mimeType !== undefined && {\n          mimeType: definition.mimeType,\n        }),\n        ...(definition.annotations !== undefined && {\n          annotations: definition.annotations,\n        }),\n        ...(definition._meta !== undefined && {\n          _meta: { ...definition._meta },\n        }),\n      },\n      async (uri, variables, ctx) => {\n        const mwCtx = this.#createMiddlewareContext(\n          \"resources/read\",\n          { uri: uri.href },\n          ctx\n        );\n        const innerFn = async () =>\n          callback(\n            uri,\n            variables as Record<string, TemplateVariableValue>,\n            this.#toRequestContext(ctx)\n          );\n        return (await this.#runMcpHook(\n          \"resources/read\",\n          mwCtx,\n          innerFn\n        )) as Awaited<ReturnType<typeof callback>>;\n      }\n    );\n  }\n\n  #viewResourceFacts(\n    viewConfig: ToolViewConfig | undefined\n  ): ViewResourceFacts | undefined {\n    if (viewConfig === undefined) {\n      return undefined;\n    }\n    return {\n      ...(viewConfig.description !== undefined && {\n        description: viewConfig.description,\n      }),\n      ...(viewConfig.csp !== undefined && { csp: viewConfig.csp }),\n      ...(viewConfig.permissions !== undefined && {\n        permissions: viewConfig.permissions,\n      }),\n      ...(viewConfig.domain !== undefined && { domain: viewConfig.domain }),\n      ...(viewConfig.prefersBorder !== undefined && {\n        prefersBorder: viewConfig.prefersBorder,\n      }),\n    };\n  }\n\n  #registerPrompt(\n    server: SdkMcpServer,\n    { definition, callback }: PromptEntry<TUser>\n  ): void {\n    const config = {\n      ...(definition.title !== undefined && { title: definition.title }),\n      ...(definition.description !== undefined && {\n        description: definition.description,\n      }),\n    };\n    const invokePrompt = async (\n      args: Record<string, unknown>,\n      ctx: ServerContext\n    ) => {\n      const mwCtx = this.#createMiddlewareContext(\n        \"prompts/get\",\n        { name: definition.name, arguments: args as Record<string, string> },\n        ctx\n      );\n      const innerFn = async () => {\n        const effectiveArgs = (mwCtx.params.arguments ?? {}) as Record<\n          string,\n          unknown\n        >;\n        return callback(effectiveArgs, this.#toRequestContext(ctx));\n      };\n      return (await this.#runMcpHook(\"prompts/get\", mwCtx, innerFn)) as Awaited<\n        ReturnType<typeof callback>\n      >;\n    };\n\n    if (definition.schema !== undefined) {\n      server.registerPrompt(\n        definition.name,\n        { ...config, argsSchema: definition.schema },\n        async (args, ctx) => invokePrompt(args as Record<string, unknown>, ctx)\n      );\n    } else {\n      const handler = async (ctx: ServerContext) => invokePrompt({}, ctx);\n      server.registerPrompt(\n        definition.name,\n        config,\n        handler as unknown as SdkPromptCallback<StandardSchemaWithJSON>\n      );\n    }\n  }\n\n  #toRequestContext(\n    ctx: ServerContext\n  ): RequestContext<TUser, HasOAuth<TUser>> {\n    if (this.#config.oauth === undefined) {\n      return toRequestContext(ctx) as RequestContext<TUser, HasOAuth<TUser>>;\n    }\n    return toAuthenticatedRequestContext<TUser>(ctx) as RequestContext<\n      TUser,\n      HasOAuth<TUser>\n    >;\n  }\n}\n","import type { ServerOptions } from \"@modelcontextprotocol/server\";\n\nimport type { LoggingOptions } from \"./logging.js\";\nimport type { OAuthProvider } from \"./oauth/index.js\";\n\n/**\n * Options for the inspector shell route — the shape of\n * {@link ServerConfig.inspector}.\n */\nexport interface InspectorOptions {\n  /**\n   * Whether the inspector shell route is mounted.\n   *\n   * @defaultValue `true`\n   */\n  enabled?: boolean;\n  /**\n   * Full replacement URL for the inspector bundle script (FastAPI's\n   * `swagger_js_url` analog). The shell's `<script type=\"module\">` loads\n   * exactly this URL, so it must point at a complete copy of the\n   * `@mcp-use/inspector` CDN bundle (`dist/cdn/inspector.js`) — self-host it\n   * for air-gapped environments where the public CDN is unreachable.\n   *\n   * @defaultValue The mcp-use CDN URL for the `@mcp-use/inspector` bundle,\n   * pinned to the current version.\n   */\n  assetsUrl?: string;\n  /**\n   * Hosted managed-chat backend URL (injected as `window.__MANUFACT_CHAT_URL__`).\n   * Defaults to `process.env.MANUFACT_CHAT_URL` when the shell is mounted.\n   */\n  manufactChatUrl?: string;\n}\n\n/**\n * Common server identity and behavior, passed to `new MCPServer(...)`.\n *\n * Includes the fields consumed by the core HTTP and OAuth resource-server\n * wiring. Other legacy configuration is added with the feature that reads it.\n */\ninterface BaseServerConfig {\n  /** Server name reported to clients during negotiation. */\n  name: string;\n  /** Server version reported to clients. */\n  version: string;\n  /** Human-readable display name (falls back to `name`). */\n  title?: string;\n  /**\n   * Human-readable description of the server, reported to clients as\n   * implementation metadata during negotiation.\n   */\n  description?: string;\n  /** Usage instructions surfaced to the model by clients. */\n  instructions?: string;\n  /**\n   * Route path the MCP endpoint is served on.\n   *\n   * Must be an absolute URL pathname: starts with `/`, and contains no `?`,\n   * `#`, whitespace, empty path segments (`//`), or trailing slash (except\n   * for the root path `/`).\n   *\n   * @defaultValue `\"/mcp\"`\n   * @throws TypeError When the value fails the pathname rules above\n   * (validated by {@link assertServerConfig}).\n   */\n  basePath?: string;\n  /**\n   * Hostname `listen()` binds. Defaults to `127.0.0.1`; localhost-class\n   * binds get DNS-rebinding protection (`Host` on every request; `Origin`\n   * only on non-GET/HEAD) automatically. Set `\"0.0.0.0\"` to serve publicly — behind a platform\n   * edge (Railway, Fly, …) nothing more is needed, since the edge only\n   * routes hostnames assigned to the deployment. Ignored by `getHandler()`,\n   * which never binds.\n   */\n  host?: string;\n  /**\n   * Extra allowed hostnames for Host-header validation (DNS-rebinding\n   * protection), e.g. `[\"api.example.com\"]`. Port-agnostic and additive:\n   * localhost-class hostnames stay allowed, so local runs keep working\n   * unmodified. Setting this also turns Host validation on for\n   * `getHandler()`, which otherwise applies none.\n   */\n  allowedHosts?: string[];\n  /**\n   * Extra allowed origin hostnames for Origin-header validation\n   * (port-agnostic, additive to the localhost-class origins). When unset,\n   * mirrors the effective Host allowlist. Origin is validated only on\n   * non-GET/HEAD requests (sandboxed view iframes send `Origin: null` on\n   * asset GETs; the MCP wire is POST). Requests without an `Origin` header\n   * always pass (non-browser MCP clients don't send one).\n   */\n  allowedOrigins?: string[];\n  /**\n   * How 2025-era (non-envelope) requests are served.\n   *\n   * `\"stateless\"` answers each legacy request with a fresh instance over a\n   * session-less streamable HTTP transport (2025 session operations — GET and\n   * DELETE — get `405`). `\"reject\"` is modern-only strict: legacy-classified\n   * requests are refused with the unsupported-protocol-version error naming\n   * the supported revisions.\n   *\n   * @defaultValue `\"stateless\"`\n   */\n  legacy?: \"stateless\" | \"reject\";\n  /**\n   * Expose the HTML landing page without bearer authentication when OAuth is\n   * configured.\n   *\n   * The landing page itself is always mounted at `basePath` for browser GET\n   * and HEAD requests that explicitly accept `text/html`. Without OAuth it is\n   * public. With OAuth, it requires a valid bearer token unless this option is\n   * `true`. MCP protocol requests remain protected in either case.\n   *\n   * @defaultValue `false`\n   */\n  publicLandingPage?: boolean;\n  /**\n   * Inspector shell route at `${basePath}/inspector` — a browser UI for\n   * exploring and calling the server's tools, resources, and prompts.\n   *\n   * @remarks\n   * Follows the FastAPI `/docs` model: the server itself ships only a tiny\n   * dependency-free HTML page whose `<script type=\"module\">` loads the\n   * `@mcp-use/inspector` bundle from a CDN (pinned to the current inspector\n   * version), so the UI updates independently of SDK releases and adds\n   * nothing to the install. The page tells the inspector to connect to this\n   * server's MCP endpoint at `basePath`, deriving the URL from the browser's\n   * own origin.\n   *\n   * Enabled by default; set `{ enabled: false }` to disable the route, or\n   * pass `{ assetsUrl }` to load the bundle from a self-hosted copy instead\n   * of the public CDN (air-gapped environments). For local development,\n   * `MCP_USE_INSPECTOR_ASSETS_URL` provides the same override without changing\n   * application code; an explicit `assetsUrl` takes precedence.\n   *\n   * @example\n   * ```ts\n   * // Default: inspector served at /mcp/inspector from the public CDN.\n   * new MCPServer({ name: \"my-server\", version: \"1.0.0\" });\n   *\n   * // Disabled:\n   * new MCPServer({\n   *   name: \"my-server\",\n   *   version: \"1.0.0\",\n   *   inspector: { enabled: false },\n   * });\n   *\n   * // Air-gapped: load a self-hosted copy of the inspector bundle.\n   * new MCPServer({\n   *   name: \"my-server\",\n   *   version: \"1.0.0\",\n   *   inspector: { assetsUrl: \"https://intranet.example.com/inspector.js\" },\n   * });\n   * ```\n   */\n  inspector?: InspectorOptions;\n  /**\n   * HTTP/MCP request logging: one summary line per request plus an indented\n   * detail line naming the MCP method, its subject (tool name, resource URI,\n   * prompt name), and the calling client.\n   *\n   * Enabled at the `info` level by default, which prints no request or\n   * response payloads. Set `{ enabled: false }` to disable,\n   * `{ level: \"debug\" }` to echo compact truncated tool/prompt input and\n   * tool output on the detail line, or `{ level: \"trace\" }` for debug plus\n   * full request/response header and body dumps. The `MCP_USE_LOG_LEVEL`\n   * environment variable (`info` | `debug` | `trace`) overrides the\n   * configured level.\n   */\n  logging?: LoggingOptions;\n  /**\n   * Integrity verification for `requestState` echoed across\n   * `input_required` rounds.\n   *\n   * Use the SDK's `createRequestStateCodec(...).verify` here when state\n   * affects authorization, resource access, or business logic. Without a\n   * verifier, {@link RequestContext.requestState} returns the raw,\n   * attacker-controlled wire string.\n   *\n   * @defaultValue `undefined`\n   */\n  requestState?: ServerOptions[\"requestState\"];\n  /**\n   * Optional CORS headers on every route served by `getHandler()` / `listen()`\n   * (MCP endpoint, view assets, inspector, OAuth metadata). Off when omitted.\n   *\n   * Pair with {@link BaseServerConfig.allowedOrigins | allowedOrigins} for\n   * browser clients: CORS tells the browser it may read the response; Origin\n   * validation decides whether the server accepts the request.\n   *\n   * @example\n   * ```ts\n   * new MCPServer({\n   *   name: \"api\",\n   *   version: \"1.0.0\",\n   *   allowedOrigins: [\"app.example.com\"],\n   *   cors: {\n   *     origin: \"https://app.example.com\",\n   *     credentials: true,\n   *   },\n   * });\n   * ```\n   */\n  cors?: CorsOptions;\n}\n\n/**\n * CORS configuration for routes owned by mcp-use (`getHandler()` / `listen()`).\n *\n * Omit `cors` entirely for the current no-CORS behavior. Pass `cors: {}` to\n * enable with defaults (reflects the request `Origin` when present; wildcard\n * `origin: \"*\"` requires an explicit opt-in).\n */\nexport interface CorsOptions {\n  /** @defaultValue `true` when `cors` is set; ignored when `cors` is omitted */\n  enabled?: boolean;\n  /** Allowed Origin(s). Reflect matching `Origin` header, or `\"*\"` when set. */\n  origin?: string | string[] | ((origin: string | null) => string | null);\n  /** @defaultValue `[\"GET\", \"HEAD\", \"POST\", \"OPTIONS\"]` */\n  methods?: string[];\n  /** @defaultValue common MCP + JSON headers */\n  allowedHeaders?: string[];\n  /** @defaultValue `false` */\n  credentials?: boolean;\n}\n\n/**\n * Runtime checks for optional {@link ServerConfig} fields that TypeScript\n * alone cannot enforce when values arrive from untyped call sites.\n *\n * @throws TypeError When `basePath` is present but not an absolute URL\n * pathname without empty segments, trailing slash, query, fragment, or\n * whitespace.\n */\nexport function assertServerConfig(config: { basePath?: unknown }): void {\n  if (config.basePath !== undefined) {\n    if (typeof config.basePath !== \"string\") {\n      throw new TypeError(\n        \"basePath must be an absolute URL pathname without empty segments, trailing slash, query, fragment, or whitespace\"\n      );\n    }\n    const { basePath } = config;\n    if (\n      !basePath.startsWith(\"/\") ||\n      basePath.includes(\"?\") ||\n      basePath.includes(\"#\") ||\n      /\\s/.test(basePath) ||\n      basePath.includes(\"//\") ||\n      (basePath.length > 1 && basePath.endsWith(\"/\"))\n    ) {\n      throw new TypeError(\n        \"basePath must be an absolute URL pathname without empty segments, trailing slash, query, fragment, or whitespace\"\n      );\n    }\n  }\n}\n\n/**\n * Server identity and behavior, passed to `new MCPServer(...)`.\n *\n * A user type other than `never` requires an OAuth provider, preventing a\n * callback from declaring authenticated context without authentication at\n * runtime. Omitting the type keeps the no-OAuth API ergonomic.\n */\nexport type ServerConfig<TUser = never> = BaseServerConfig &\n  ([TUser] extends [never]\n    ? {\n        /** OAuth is unavailable when no authenticated user type is declared. */\n        oauth?: undefined;\n      }\n    : {\n        /**\n         * External OAuth resource-server provider. Callback contexts receive\n         * this provider's user type as required `ctx.auth.user`.\n         */\n        oauth: OAuthProvider<TUser>;\n      });\n","import {\n  CLIENT_CAPABILITIES_META_KEY,\n  inputRequired,\n  inputResponse,\n  type AuthInfo,\n  type InputRequest,\n  type InputRequiredResult,\n  type RequestStateAccessor,\n  type ServerContext,\n  type StandardSchemaWithJSON,\n} from \"@modelcontextprotocol/server\";\n\nimport type { OAuthExtra } from \"./oauth/provider.js\";\nimport { supportsViews } from \"./views/capabilities.js\";\n\n/**\n * Per-request client capability queries.\n *\n * Reads the modern per-request envelope only — never session state.\n */\nexport interface RequestClientContext {\n  /**\n   * Whether this request's client advertises MCP Apps / UI support.\n   *\n   * True when the client declares the `io.modelcontextprotocol/ui` extension\n   * with `text/html;profile=mcp-app` in `mimeTypes`. Legacy (non-envelope)\n   * requests always return `false`.\n   */\n  supportsViews(): boolean;\n}\n\n/**\n * Result of a {@link Elicit} call.\n *\n * `required` means the callback must return `result`; the client then gathers\n * input and retries the tool. Accepted form results carry schema-validated,\n * inferred `data`. URL acceptances and declined/cancelled results carry no\n * data.\n */\nexport type ElicitationResult<T = never> =\n  | { status: \"required\"; result: InputRequiredResult }\n  | { status: \"decline\" | \"cancel\" }\n  | ([T] extends [never]\n      ? { status: \"accept\" }\n      : { status: \"accept\"; data: T });\n\n/**\n * Requests or reads one keyed elicitation in a multi-round-trip tool callback.\n *\n * The explicit key correlates the request with the client's response on\n * re-entry. On the first entry, or after an invalid form response, this returns\n * `{ status: \"required\", result }`; return that result from the tool. On\n * re-entry it returns `accept`, `decline`, or `cancel` and validates accepted\n * Standard Schema form data before exposing it. Validation may be synchronous\n * or asynchronous.\n *\n * @example\n * ```ts\n * const confirmation = await ctx.elicit(\n *   \"confirm\",\n *   \"Deploy to production?\",\n *   schema,\n * );\n * if (confirmation.status === \"required\") {\n *   return confirmation.result;\n * }\n * ```\n */\nexport interface Elicit {\n  /** Request or read a typed form-mode elicitation. */\n  <S extends StandardSchemaWithJSON>(\n    key: string,\n    message: string,\n    schema: S\n  ): Promise<ElicitationResult<StandardSchemaWithJSON.InferOutput<S>>>;\n  /** Request or read a URL-mode elicitation. */\n  (key: string, message: string, url: string): Promise<ElicitationResult>;\n}\n\n/**\n * Per-request context passed to tool/resource/prompt callbacks.\n */\nexport type OAuthAuth<TUser> = {\n  user: TUser;\n  payload: Record<string, unknown>;\n  accessToken: string;\n  scopes: string[];\n  permissions: string[];\n  /**\n   * The OAuth client identifier from the token's `client_id` or `azp` claim;\n   * undefined when the identity provider's access tokens carry no client claim\n   * (e.g. WorkOS AuthKit, Supabase).\n   */\n  clientId?: string;\n  expiresAt: number;\n  resource?: URL;\n};\n\ntype RequestContextBase = {\n  /** Aborted when the client cancels the request or the connection drops. */\n  signal: AbortSignal;\n  /** The originating HTTP request, when served over HTTP. */\n  request?: Request;\n  /** Per-request client capability queries. */\n  client: RequestClientContext;\n  /** Request or read a keyed form- or URL-mode elicitation. */\n  elicit: Elicit;\n  /**\n   * Bare responses supplied when the client retries an `input_required`\n   * round. Values are client input; validate them before use.\n   */\n  inputResponses?: ServerContext[\"mcpReq\"][\"inputResponses\"];\n  /**\n   * Read opaque state echoed by the client for this `input_required` round.\n   * The generic is only a type assertion. Configure `requestState.verify`\n   * when state affects authorization or business logic.\n   */\n  requestState: RequestStateAccessor;\n  /**\n   * Report request-scoped progress when the caller supplied a progress token.\n   *\n   * @returns `true` when a notification was sent, `false` when the caller did\n   * not request progress.\n   */\n  reportProgress(\n    progress: number,\n    total?: number,\n    message?: string\n  ): Promise<boolean>;\n  /** Send a log message notification to the client during tool execution. */\n  sendLog(\n    level:\n      | \"debug\"\n      | \"info\"\n      | \"notice\"\n      | \"warning\"\n      | \"error\"\n      | \"critical\"\n      | \"alert\"\n      | \"emergency\",\n    data: unknown,\n    logger?: string\n  ): Promise<void>;\n};\n\n/**\n * Per-request callback context, authenticated when OAuth is configured.\n */\nexport type RequestContext<\n  TUser = never,\n  HasOAuth extends boolean = false,\n> = HasOAuth extends true\n  ? RequestContextBase & { auth: OAuthAuth<TUser> }\n  : RequestContextBase & { auth?: never };\n\ntype MappedOAuthAuthInfo<TUser> = AuthInfo & {\n  expiresAt: number;\n  extra: OAuthExtra<TUser>;\n};\n\nfunction requireOAuthAuthInfo<TUser>(\n  authInfo: AuthInfo | undefined\n): asserts authInfo is MappedOAuthAuthInfo<TUser> {\n  if (\n    authInfo === undefined ||\n    authInfo.extra === undefined ||\n    authInfo.expiresAt === undefined\n  ) {\n    throw new Error(\"OAuth callback did not receive mapped AuthInfo.extra\");\n  }\n}\n\nfunction toClientContext(ctx: ServerContext): RequestClientContext {\n  const envelopeCaps = ctx.mcpReq.envelope?.[CLIENT_CAPABILITIES_META_KEY];\n  return {\n    supportsViews(): boolean {\n      return supportsViews(envelopeCaps);\n    },\n  };\n}\n\nfunction createElicit(\n  inputResponses: ServerContext[\"mcpReq\"][\"inputResponses\"]\n): Elicit {\n  return async function elicit(\n    key: string,\n    message: string,\n    schemaOrUrl?: StandardSchemaWithJSON | string\n  ): Promise<ElicitationResult<unknown> | ElicitationResult> {\n    let request: InputRequest;\n    let formSchema: StandardSchemaWithJSON | undefined;\n\n    if (typeof schemaOrUrl === \"string\") {\n      request = inputRequired.elicitUrl({\n        message,\n        url: schemaOrUrl,\n      });\n    } else if (schemaOrUrl !== undefined) {\n      formSchema = schemaOrUrl;\n      request = inputRequired.elicit({\n        message,\n        requestedSchema: schemaOrUrl,\n      });\n    } else {\n      throw new TypeError(\n        \"ctx.elicit(key, message, value) requires a form schema or URL string\"\n      );\n    }\n\n    const response = inputResponse(inputResponses, key);\n    if (response.kind === \"elicit\") {\n      if (response.action !== \"accept\") {\n        return { status: response.action };\n      }\n      if (formSchema === undefined) {\n        return { status: \"accept\" };\n      }\n      if (response.content !== undefined) {\n        const outcome = await formSchema[\"~standard\"].validate(\n          response.content\n        );\n        if (outcome.issues === undefined) {\n          return { status: \"accept\", data: outcome.value };\n        }\n      }\n    }\n\n    return {\n      status: \"required\",\n      result: inputRequired({ inputRequests: { [key]: request } }),\n    };\n  } as Elicit;\n}\n\n/**\n * Derive the callback-facing {@link RequestContext} from the SDK's\n * per-request `ServerContext`.\n *\n * @internal\n */\nexport function toRequestContext(\n  ctx: ServerContext\n): RequestContext<never, false> {\n  const request = ctx.http?.req;\n  return {\n    signal: ctx.mcpReq.signal,\n    ...(request !== undefined && { request }),\n    ...(ctx.mcpReq.inputResponses !== undefined && {\n      inputResponses: ctx.mcpReq.inputResponses,\n    }),\n    client: toClientContext(ctx),\n    elicit: createElicit(ctx.mcpReq.inputResponses),\n    requestState: <T = unknown>() => ctx.mcpReq.requestState<T>(),\n    async reportProgress(progress, total, message): Promise<boolean> {\n      const progressToken = ctx.mcpReq._meta?.progressToken;\n      if (progressToken === undefined) return false;\n      await ctx.mcpReq.notify({\n        method: \"notifications/progress\",\n        params: {\n          progressToken,\n          progress,\n          ...(total !== undefined && { total }),\n          ...(message !== undefined && { message }),\n        },\n      });\n      return true;\n    },\n    async sendLog(level, data, logger): Promise<void> {\n      await ctx.mcpReq.notify({\n        method: \"notifications/message\",\n        params: {\n          level,\n          data,\n          ...(logger !== undefined && { logger }),\n        },\n      });\n    },\n  };\n}\n\n/** @internal Projects mapped OAuth auth information into callback context. */\nexport function toAuthenticatedRequestContext<TUser>(\n  ctx: ServerContext\n): RequestContext<TUser, true> {\n  const authInfo = ctx.http?.authInfo;\n  requireOAuthAuthInfo<TUser>(authInfo);\n  return {\n    ...toRequestContext(ctx),\n    auth: {\n      user: authInfo.extra.user,\n      payload: authInfo.extra.payload,\n      accessToken: authInfo.token,\n      scopes: [...authInfo.scopes],\n      permissions: [...authInfo.extra.permissions],\n      ...(authInfo.clientId.length > 0 && { clientId: authInfo.clientId }),\n      expiresAt: authInfo.expiresAt,\n      ...(authInfo.resource !== undefined && { resource: authInfo.resource }),\n    },\n  };\n}\n","import {\n  CLIENT_CAPABILITIES_META_KEY,\n  type ClientCapabilities,\n} from \"@modelcontextprotocol/server\";\n\nimport { UI_EXTENSION_ID, UI_MIME_TYPE } from \"./constants.js\";\n\n/** Per-request client capabilities stashed before the SDK handler runs. */\nconst clientCapabilitiesByRequest = new WeakMap<Request, ClientCapabilities>();\n\n/**\n * Stash parsed client capabilities on the request for the per-request server\n * factory.\n *\n * @internal\n */\nexport function stashClientCapabilities(\n  request: Request,\n  capabilities: ClientCapabilities\n): void {\n  clientCapabilitiesByRequest.set(request, capabilities);\n}\n\n/**\n * Read stashed client capabilities for an HTTP request.\n *\n * @internal\n */\nexport function getStashedClientCapabilities(\n  request: Request | undefined\n): ClientCapabilities | undefined {\n  if (request === undefined) {\n    return undefined;\n  }\n  return clientCapabilitiesByRequest.get(request);\n}\n\n/**\n * Extract `clientCapabilities` from a parsed JSON-RPC body, when present.\n *\n * @internal\n */\nexport function extractClientCapabilitiesFromBody(\n  body: unknown\n): ClientCapabilities | undefined {\n  if (typeof body !== \"object\" || body === null) {\n    return undefined;\n  }\n  const params = (body as Record<string, unknown>)[\"params\"];\n  if (typeof params !== \"object\" || params === null) {\n    return undefined;\n  }\n  const meta = (params as Record<string, unknown>)[\"_meta\"];\n  if (typeof meta !== \"object\" || meta === null) {\n    return undefined;\n  }\n  const capabilities = (meta as Record<string, unknown>)[\n    CLIENT_CAPABILITIES_META_KEY\n  ];\n  if (typeof capabilities !== \"object\" || capabilities === null) {\n    return undefined;\n  }\n  return capabilities as ClientCapabilities;\n}\n\n/**\n * Whether the client advertises MCP Apps / UI support for this request.\n *\n * True when `capabilities.extensions[\"io.modelcontextprotocol/ui\"]` exists\n * and its `mimeTypes` array includes `text/html;profile=mcp-app`.\n *\n * @remarks\n * Used only for {@link RequestContext.client} queries (e.g.\n * `ctx.client.supportsViews()`). Capability negotiation does not affect the\n * wire surface — `tools/list` always includes every registered tool regardless\n * of this result.\n */\nexport function supportsViews(\n  capabilities: ClientCapabilities | undefined\n): boolean {\n  const extensions = capabilities?.extensions;\n  if (extensions === undefined) {\n    return false;\n  }\n  const uiExtension = extensions[UI_EXTENSION_ID];\n  if (typeof uiExtension !== \"object\" || uiExtension === null) {\n    return false;\n  }\n  const mimeTypes = (uiExtension as Record<string, unknown>)[\"mimeTypes\"];\n  if (!Array.isArray(mimeTypes)) {\n    return false;\n  }\n  return mimeTypes.includes(UI_MIME_TYPE);\n}\n","/** MCP Apps extension identifier (`io.modelcontextprotocol/ui`). */\nexport const UI_EXTENSION_ID = \"io.modelcontextprotocol/ui\" as const;\n\n/** MIME type for MCP App view resources. */\nexport const UI_MIME_TYPE = \"text/html;profile=mcp-app\" as const;\n\n/** URI scheme prefix for view resources (`ui://views/<name>.html`). */\nexport const UI_RESOURCE_URI_PREFIX = \"ui://views/\" as const;\n\n/** Nested `_meta` key for UI metadata on tools and resources. */\nexport const UI_META_KEY = \"ui\" as const;\n\n/** Legacy flat `_meta` key for the view resource URI (kept while hosts read it). */\nexport const UI_RESOURCE_URI_META_KEY = \"ui/resourceUri\" as const;\n\n/**\n * Build the stable `ui://` resource URI for a view name.\n *\n * @param viewName - View directory / manifest key.\n */\nexport function viewResourceUri(viewName: string): string {\n  return `${UI_RESOURCE_URI_PREFIX}${viewName}.html`;\n}\n","import type { CorsOptions } from \"../config.js\";\nimport type { FetchMiddleware } from \"../fetch-app.js\";\n\nconst DEFAULT_METHODS = [\"GET\", \"HEAD\", \"POST\", \"OPTIONS\"];\nconst DEFAULT_ALLOWED_HEADERS = [\n  \"Content-Type\",\n  \"Authorization\",\n  \"mcp-protocol-version\",\n  \"mcp-method\",\n  \"mcp-name\",\n];\n\nfunction resolveAllowedOrigin(\n  origin: CorsOptions[\"origin\"],\n  requestOrigin: string | null\n): string | null {\n  if (origin === undefined) {\n    return requestOrigin;\n  }\n  if (typeof origin === \"function\") {\n    return origin(requestOrigin);\n  }\n  if (origin === \"*\") {\n    return \"*\";\n  }\n  if (Array.isArray(origin)) {\n    if (requestOrigin !== null && origin.includes(requestOrigin)) {\n      return requestOrigin;\n    }\n    return null;\n  }\n  return origin;\n}\n\nfunction corsHeaders(\n  options: Required<\n    Pick<CorsOptions, \"methods\" | \"allowedHeaders\" | \"credentials\">\n  > &\n    Pick<CorsOptions, \"origin\">,\n  request: Request\n): HeadersInit | undefined {\n  if (request.headers.has(\"Access-Control-Allow-Origin\")) {\n    return undefined;\n  }\n\n  const requestOrigin = request.headers.get(\"Origin\");\n  const allowedOrigin = resolveAllowedOrigin(options.origin, requestOrigin);\n  if (allowedOrigin === null) {\n    return undefined;\n  }\n\n  const headers: Record<string, string> = {\n    \"Access-Control-Allow-Origin\": allowedOrigin,\n    \"Access-Control-Allow-Methods\": options.methods.join(\", \"),\n    \"Access-Control-Allow-Headers\": options.allowedHeaders.join(\", \"),\n  };\n  if (options.credentials) {\n    headers[\"Access-Control-Allow-Credentials\"] = \"true\";\n  }\n  if (allowedOrigin !== \"*\") {\n    headers.Vary = \"Origin\";\n  }\n  return headers;\n}\n\nfunction mergeCorsHeaders(response: Response, headers: HeadersInit): Response {\n  if (response.headers.has(\"Access-Control-Allow-Origin\")) {\n    return response;\n  }\n  const merged = new Headers(response.headers);\n  const corsHeaders = new Headers(headers);\n  corsHeaders.forEach((value, key) => {\n    merged.set(key, value);\n  });\n  return new Response(response.body, {\n    status: response.status,\n    statusText: response.statusText,\n    headers: merged,\n  });\n}\n\n/**\n * Fetch middleware that adds CORS headers to every response.\n *\n * @internal Wired from {@link MCPServer} when `ServerConfig.cors` is set.\n */\nexport function corsFetchMiddleware(options: CorsOptions): FetchMiddleware {\n  const enabled = options.enabled !== false;\n  if (!enabled) {\n    return async (_request, next) => next();\n  }\n\n  const resolved = {\n    ...(options.origin !== undefined && { origin: options.origin }),\n    methods: options.methods ?? DEFAULT_METHODS,\n    allowedHeaders: options.allowedHeaders ?? DEFAULT_ALLOWED_HEADERS,\n    credentials: options.credentials ?? false,\n  };\n\n  return async (request, next) => {\n    const headers = corsHeaders(resolved, request);\n    if (headers === undefined) {\n      return next();\n    }\n\n    if (request.method === \"OPTIONS\") {\n      return new Response(null, { status: 204, headers });\n    }\n\n    const response = await next();\n    return mergeCorsHeaders(response, headers);\n  };\n}\n\n/** Whether global CORS middleware owns response headers for view assets. */\nexport function isGlobalCorsEnabled(cors: CorsOptions | undefined): boolean {\n  return cors !== undefined && cors.enabled !== false;\n}\n","import type { AuthInfo } from \"@modelcontextprotocol/server\";\n\n/**\n * Context passed to every MCP middleware handler.\n *\n * `params` is mutable — middleware can modify params before calling `next()`\n * and those changes will be visible to downstream middleware and the handler.\n *\n * `state` is a shared Map for passing arbitrary data across middleware in\n * the same chain.\n */\nexport interface MiddlewareContext {\n  /** MCP method name, e.g. \"tools/call\", \"tools/list\", \"resources/read\" */\n  method: string;\n  /** JSON-RPC request params (mutable — mutations are passed downstream) */\n  params: Record<string, unknown>;\n  /** OAuth info extracted from JWT, present when OAuth is configured */\n  auth?: AuthInfo;\n  /** Shared state Map for passing data across middleware in the same request */\n  state: Map<string, unknown>;\n}\n\n/** Params shape for `tools/call` method */\ninterface ToolsCallParams {\n  name: string;\n  arguments?: Record<string, unknown>;\n  _meta?: Record<string, unknown>;\n}\n\n/** Params shape for `resources/read` method */\ninterface ResourcesReadParams {\n  uri: string;\n  _meta?: Record<string, unknown>;\n}\n\n/** Params shape for `prompts/get` method */\ninterface PromptsGetParams {\n  name: string;\n  arguments?: Record<string, string>;\n  _meta?: Record<string, unknown>;\n}\n\n/** Context with narrowed `params` for `tools/call` */\nexport interface ToolsCallMiddlewareContext extends MiddlewareContext {\n  method: \"tools/call\";\n  params: ToolsCallParams & Record<string, unknown>;\n}\n\n/** Context with narrowed `params` for `resources/read` */\nexport interface ResourcesReadMiddlewareContext extends MiddlewareContext {\n  method: \"resources/read\";\n  params: ResourcesReadParams & Record<string, unknown>;\n}\n\n/** Context with narrowed `params` for `prompts/get` */\nexport interface PromptsGetMiddlewareContext extends MiddlewareContext {\n  method: \"prompts/get\";\n  params: PromptsGetParams & Record<string, unknown>;\n}\n\n/**\n * Map from MCP middleware pattern strings to their narrowed context type.\n * Used by `McpMiddlewareFnFor<P>` to infer the correct `ctx` parameter.\n */\nexport interface McpMiddlewarePatternMap {\n  \"tools/call\": ToolsCallMiddlewareContext;\n  \"resources/read\": ResourcesReadMiddlewareContext;\n  \"prompts/get\": PromptsGetMiddlewareContext;\n}\n\n/**\n * A typed MCP middleware function whose `ctx` is narrowed based on the\n * pattern string `P`. Falls back to the base `MiddlewareContext` for\n * wildcard or unrecognized patterns.\n */\nexport type McpMiddlewareFnFor<P extends string> =\n  P extends keyof McpMiddlewarePatternMap\n    ? (\n        ctx: McpMiddlewarePatternMap[P],\n        next: () => Promise<unknown>\n      ) => Promise<unknown>\n    : McpMiddlewareFn;\n\n/**\n * A single MCP middleware function.\n *\n * Call `next()` to pass control to the next middleware (or handler).\n * Return its result, or return a different value to override the response.\n * Throw an error to reject the request.\n */\nexport type McpMiddlewareFn = (\n  ctx: MiddlewareContext,\n  next: () => Promise<unknown>\n) => Promise<unknown>;\n\n/**\n * Internal storage entry for a registered MCP middleware.\n * The pattern is stored with the `mcp:` prefix already stripped.\n * @internal\n */\nexport interface McpMiddlewareEntry {\n  /** Pattern after stripping \"mcp:\" — e.g. \"tools/call\", \"tools/*\", \"*\" */\n  pattern: string;\n  handler: McpMiddlewareFn;\n}\n\n/** Phase for MCP observer event listeners registered via `server.on()`. */\nexport type McpEventPhase = \"before\" | \"complete\";\n\n/**\n * Internal storage entry for a registered MCP observer event listener.\n * @internal\n */\nexport interface McpEventListenerEntry {\n  pattern: string;\n  phase: McpEventPhase;\n  handler: McpEventListenerFn | McpCompleteEventListenerFn;\n}\n\n/** Read-only observer invoked before the MCP handler runs. */\nexport type McpEventListenerFn = (ctx: Readonly<MiddlewareContext>) => void;\n\n/** Read-only observer invoked after the MCP handler completes. */\nexport type McpCompleteEventListenerFn = (\n  ctx: Readonly<MiddlewareContext>,\n  result: unknown\n) => void;\n\n/**\n * Test whether a registered middleware pattern matches a given MCP method.\n *\n * Matching rules:\n * - `\"*\"` matches any method\n * - `\"tools/*\"` prefix-matches any method starting with `\"tools/\"`\n * - `\"tools/call\"` exact-matches only `\"tools/call\"`\n */\nexport function matchesPattern(pattern: string, method: string): boolean {\n  if (pattern === \"*\") return true;\n  if (pattern.endsWith(\"/*\")) {\n    const prefix = pattern.slice(0, -1);\n    return method.startsWith(prefix);\n  }\n  return pattern === method;\n}\n\n/**\n * Compose a middleware chain for a given MCP method invocation.\n *\n * Filters `entries` to those matching `method`, then builds a `next()` chain\n * with `innerFn` at the center. Returns the outermost callable.\n *\n * Middleware executes in FIFO registration order (first registered = outermost).\n */\nexport function composeMiddleware(\n  entries: McpMiddlewareEntry[],\n  method: string,\n  innerFn: () => Promise<unknown>\n): (ctx: MiddlewareContext) => Promise<unknown> {\n  const matching = entries.filter((e) => matchesPattern(e.pattern, method));\n\n  if (matching.length === 0) {\n    return (_ctx: MiddlewareContext) => innerFn();\n  }\n\n  return (ctx: MiddlewareContext) => {\n    let index = -1;\n\n    const dispatch = (i: number): Promise<unknown> => {\n      if (i <= index) {\n        return Promise.reject(new Error(\"next() called multiple times\"));\n      }\n      index = i;\n\n      if (i === matching.length) {\n        return innerFn();\n      }\n\n      const entry = matching[i]!;\n      return entry.handler(ctx, () => dispatch(i + 1));\n    };\n\n    return dispatch(0);\n  };\n}\n\n/** Build a read-only snapshot of middleware context for observer events. */\nexport function freezeMiddlewareContext(\n  ctx: MiddlewareContext\n): Readonly<MiddlewareContext> {\n  return Object.freeze({\n    method: ctx.method,\n    params: Object.freeze({ ...ctx.params }),\n    ...(ctx.auth !== undefined && { auth: ctx.auth }),\n    state: ctx.state,\n  });\n}\n\n/**\n * Run before/complete observer listeners around a middleware chain.\n *\n * Listener throws are logged and do not fail the MCP request.\n */\nexport async function runMcpOperation(\n  middlewares: McpMiddlewareEntry[],\n  events: McpEventListenerEntry[],\n  method: string,\n  ctx: MiddlewareContext,\n  innerFn: () => Promise<unknown>\n): Promise<unknown> {\n  dispatchMcpEvents(events, method, \"before\", ctx);\n\n  const chained = composeMiddleware(middlewares, method, innerFn);\n  const result = await chained(ctx);\n\n  dispatchMcpEvents(events, method, \"complete\", ctx, result);\n  return result;\n}\n\nfunction dispatchMcpEvents(\n  events: McpEventListenerEntry[],\n  method: string,\n  phase: McpEventPhase,\n  ctx: MiddlewareContext,\n  result?: unknown\n): void {\n  const frozen = freezeMiddlewareContext(ctx);\n  for (const entry of events) {\n    if (entry.phase !== phase || !matchesPattern(entry.pattern, method)) {\n      continue;\n    }\n    try {\n      if (phase === \"before\") {\n        (entry.handler as McpEventListenerFn)(frozen);\n      } else {\n        (entry.handler as McpCompleteEventListenerFn)(frozen, result);\n      }\n    } catch (error) {\n      console.error(\n        `[mcp-use] MCP event listener for \"${entry.pattern}\" (${phase}) threw:`,\n        error\n      );\n    }\n  }\n}\n\n/** Strip `mcp:` prefix and optional `:complete` suffix from observer patterns. */\nexport function parseMcpPattern(raw: string): {\n  pattern: string;\n  phase: McpEventPhase;\n} {\n  const pattern = raw.startsWith(\"mcp:\") ? raw.slice(4) : raw;\n  if (pattern.endsWith(\":complete\")) {\n    return {\n      pattern: pattern.slice(0, -\":complete\".length),\n      phase: \"complete\",\n    };\n  }\n  return { pattern, phase: \"before\" };\n}\n\n/** Normalize middleware pattern strings (strip `mcp:` prefix). */\nexport function normalizeMcpMiddlewarePattern(raw: string): string {\n  return raw.startsWith(\"mcp:\") ? raw.slice(4) : raw;\n}\n","/**\n * Inspector CDN shell — the FastAPI `/docs` analog.\n *\n * The server ships no inspector code: it serves a tiny self-contained HTML\n * page whose `<script type=\"module\">` loads the `@mcp-use/inspector` CDN\n * bundle entry (`dist/cdn/inspector.js`) plus lazy chunks, pinned to a major\n * version so the UI updates independently of SDK releases. Runtime configuration crosses to\n * the bundle through a serialized `window` global; the connect URL is derived\n * in the browser from the page's own origin, so the server never guesses its\n * public hostname.\n */\nimport type { InspectorOptions } from \"./config.js\";\nimport { pathUnderBase, type FetchHandler } from \"./fetch-app.js\";\n\n/**\n * npm dist-tag of the `@mcp-use/inspector` CDN bundle the default URL follows.\n *\n * Every new Inspector beta published with this tag becomes the default\n * inspector for mcp-use servers without requiring an mcp-use release.\n */\nexport const INSPECTOR_TAG = \"beta\";\n\n/**\n * Default URL the inspector shell loads the UI bundle from: the\n * `@mcp-use/inspector` CDN build (`dist/cdn/inspector.js`) built from this\n * branch and served by jsDelivr from npm's {@link INSPECTOR_TAG} tag.\n * Override per server with {@link InspectorOptions.assetsUrl}.\n */\nexport const DEFAULT_INSPECTOR_ASSETS_URL = `https://cdn.jsdelivr.net/npm/@mcp-use/inspector@${INSPECTOR_TAG}/dist/cdn/inspector.js`;\n\n/**\n * Derive the stylesheet URL that accompanies an inspector bundle URL.\n *\n * The CDN build ships as dist/cdn/inspector.js + dist/cdn/inspector.css\n * plus sibling lazy chunks referenced by the entry script. The stylesheet URL\n * is the script URL with its `.js` suffix swapped for `.css`. Query\n * strings and fragments are preserved.\n */\nexport function inspectorStylesUrl(assetsUrl: string): string {\n  return assetsUrl.replace(/\\.js(?=$|[?#])/, \".css\");\n}\n\n/** True for the default jsDelivr `@mcp-use/inspector@*` CDN bundle URL. */\nexport function isDefaultJsdelivrInspectorUrl(url: string): boolean {\n  return url.startsWith(\"https://cdn.jsdelivr.net/npm/@mcp-use/inspector@\");\n}\n\n/** Append a per-request cache-bust query param for the default jsDelivr CDN URL. */\nexport function withInspectorCacheBust(assetsUrl: string): string {\n  if (!isDefaultJsdelivrInspectorUrl(assetsUrl)) return assetsUrl;\n  const sep = assetsUrl.includes(\"?\") ? \"&\" : \"?\";\n  return `${assetsUrl}${sep}cb=${crypto.randomUUID()}`;\n}\n\n/** True for inspector UI shell routes (SPA), excluding `/inspector/api/*`. */\nexport function matchesInspectorShellPath(\n  pathname: string,\n  basePath: string\n): boolean {\n  const prefix = pathUnderBase(basePath, \"inspector\");\n  if (pathname !== prefix && !pathname.startsWith(`${prefix}/`)) {\n    return false;\n  }\n  const suffix = pathname.slice(prefix.length);\n  return suffix !== \"/api\" && !suffix.startsWith(\"/api/\");\n}\n\n/** Inputs for {@link renderInspectorShell}. */\nexport interface InspectorShellOptions {\n  /** Server display name, used in the page title. */\n  serverName: string;\n  /** Route path the MCP endpoint is mounted on (e.g. `/mcp`). */\n  basePath: string;\n  /**\n   * Full replacement URL for the inspector bundle script. Defaults to\n   * {@link DEFAULT_INSPECTOR_ASSETS_URL}.\n   */\n  assetsUrl?: string | undefined;\n  /** Hosted managed-chat URL (`window.__MANUFACT_CHAT_URL__`). */\n  manufactChatUrl?: string | undefined;\n}\n\n/** Escape a string for interpolation into HTML text or attribute values. */\nfunction escapeHtml(value: string): string {\n  return value\n    .replaceAll(\"&\", \"&amp;\")\n    .replaceAll(\"<\", \"&lt;\")\n    .replaceAll(\">\", \"&gt;\")\n    .replaceAll('\"', \"&quot;\")\n    .replaceAll(\"'\", \"&#39;\");\n}\n\n/**\n * Serialize a value for interpolation inside an inline `<script>` body.\n *\n * `<` is escaped to its unicode JSON escape (backslash-u003c) so serialized\n * config can never form a `</script>` (or `<!--`) sequence and break out of\n * the script element.\n */\nfunction serializeForInlineScript(value: string): string {\n  return JSON.stringify(value).replaceAll(\"<\", \"\\\\u003c\");\n}\n\n/**\n * Render the inspector shell page.\n *\n * A minimal shell document whose background matches the inspector UI\n * with a `#root` mount node, an inline script publishing\n * `window.__MCP_USE_INSPECTOR__ = { autoConnectUrl, basePath }` — where\n * `autoConnectUrl` is computed client-side as\n * `window.location.origin + basePath` — a stylesheet link for the bundle's\n * companion CSS (see {@link inspectorStylesUrl}), and a module script\n * loading the inspector bundle. All server-provided values are HTML-escaped\n * or JSON-serialized with `<` escaped, so config can't inject markup.\n */\nexport function renderInspectorShell(options: InspectorShellOptions): string {\n  const { serverName, basePath, assetsUrl, manufactChatUrl } = options;\n  const serializedBasePath = serializeForInlineScript(basePath);\n  const serializedManufactChatUrl = manufactChatUrl\n    ? serializeForInlineScript(manufactChatUrl)\n    : null;\n  const rawUrl = assetsUrl ?? DEFAULT_INSPECTOR_ASSETS_URL;\n  const bundleUrl = withInspectorCacheBust(rawUrl);\n  const scriptSrc = escapeHtml(bundleUrl);\n  const stylesHref = escapeHtml(inspectorStylesUrl(bundleUrl));\n  return `<!doctype html>\n<html lang=\"en\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <title>${escapeHtml(serverName)} — MCP Inspector</title>\n    <link rel=\"preconnect\" href=\"https://fonts.googleapis.com\" />\n    <link rel=\"preconnect\" href=\"https://fonts.gstatic.com\" crossorigin />\n    <link\n      href=\"https://fonts.googleapis.com/css2?family=Ubuntu:wght@400;500;700&display=swap\"\n      rel=\"stylesheet\"\n    />\n    <link rel=\"stylesheet\" href=\"${stylesHref}\" />\n    <style>\n      :root { color-scheme: light dark; }\n      html, body { height: 100%; margin: 0; background-color: #f3f3f3; }\n    </style>\n  </head>\n  <body>\n    <div id=\"root\"></div>\n    <script>\n      (function () {\n        var basePath = ${serializedBasePath};\n        // The connect URL is derived from the page's own origin: the server\n        // never guesses the hostname a browser reached it by.\n        window.__MCP_USE_INSPECTOR__ = {\n          autoConnectUrl: window.location.origin + basePath,\n          basePath: basePath,\n        };\n        // Read by the current inspector bundle to derive its own URLs.\n        window.__MCP_BASE_PATH__ = basePath;\n        ${serializedManufactChatUrl ? `window.__MANUFACT_CHAT_URL__ = ${serializedManufactChatUrl};` : \"\"}\n        // The bundle carries Node-flavored dependencies that touch \\`process\\`\n        // at module scope; give them the same browser polyfill the v1\n        // inspector shell provides, or the bundle throws on load.\n        if (typeof window.process === \"undefined\") {\n          window.process = {\n            env: {},\n            platform: \"browser\",\n            browser: true,\n            version: \"v18.0.0\",\n            versions: { node: \"18.0.0\" },\n            cwd: function () { return \"/\"; },\n            nextTick: function (fn) {\n              var args = Array.prototype.slice.call(arguments, 1);\n              queueMicrotask(function () { fn.apply(null, args); });\n            },\n          };\n        }\n      })();\n    </script>\n    <script type=\"module\" src=\"${scriptSrc}\"></script>\n  </body>\n</html>\n`;\n}\n\n/**\n * Fetch handler for `${basePath}/inspector` (GET and HEAD).\n *\n * No-op when `inspector.enabled` is `false`; `undefined` and `{}` mean enabled.\n *\n * @internal Wiring for `MCPServer`.\n */\nexport function createInspectorHandler(\n  inspector: InspectorOptions | undefined,\n  options: { serverName: string; basePath: string }\n): FetchHandler | undefined {\n  if (inspector?.enabled === false) {\n    return undefined;\n  }\n  const { assetsUrl: configAssetsUrl, manufactChatUrl: configManufactChatUrl } =\n    inspector ?? {};\n  const assetsUrl =\n    configAssetsUrl ?? process.env[\"MCP_USE_INSPECTOR_ASSETS_URL\"] ?? undefined;\n  const manufactChatUrl =\n    configManufactChatUrl ?? process.env[\"MANUFACT_CHAT_URL\"] ?? undefined;\n  const shellOptions: InspectorShellOptions = {\n    serverName: options.serverName,\n    basePath: options.basePath,\n    assetsUrl,\n    manufactChatUrl,\n  };\n\n  return async (request) => {\n    if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n      return new Response(\"Method Not Allowed\", { status: 405 });\n    }\n    const pathname = new URL(request.url).pathname;\n    if (!matchesInspectorShellPath(pathname, options.basePath)) {\n      return new Response(\"Not Found\", { status: 404 });\n    }\n    const html = renderInspectorShell(shellOptions);\n    return new Response(request.method === \"HEAD\" ? null : html, {\n      status: 200,\n      headers: { \"content-type\": \"text/html; charset=utf-8\" },\n    });\n  };\n}\n\n/**\n * @deprecated Use {@link createInspectorHandler}.\n *\n * @internal\n */\nexport function mountInspectorShell(): void {\n  throw new Error(\n    \"mountInspectorShell(app) was removed — use createInspectorHandler\"\n  );\n}\n","/**\n * Compact HTTP/MCP request logging.\n *\n * One summary line per HTTP request, plus an indented detail line for MCP\n * (JSON-RPC) requests naming the protocol method, its subject (tool name,\n * resource URI, prompt name), and the calling client:\n *\n * ```text\n * 12:45:01 POST /mcp 200 in 12ms\n *   tools/call greet raw-request/0.0.0\n * ```\n *\n * Detail lines are plain two-space-indented ASCII (no box-drawing glyphs) so\n * log parsers and agents can tell the two apart mechanically: summary lines\n * start with a timestamp, detail lines start with whitespace.\n *\n * Three verbosity levels, resolved per request from the `MCP_USE_LOG_LEVEL`\n * environment variable (overriding any configured level):\n *\n * - `info` (default): the compact summary + detail lines only — no request\n *   or response payloads, so secrets in tool arguments/results stay out of\n *   production logs.\n * - `debug`: echoes compact truncated input/output on the detail line:\n *   `tools/call greet {\"who\":\"world\"} -> \"hi world\" raw-request/0.0.0`.\n * - `trace`: debug plus a full request/response dump (headers and bodies)\n *   after the summary.\n */\nimport {\n  CLIENT_INFO_META_KEY,\n  isJSONRPCRequest,\n  type Implementation,\n  type JSONRPCRequest,\n  type RequestMethod,\n  type RequestTypeMap,\n} from \"@modelcontextprotocol/server\";\n\nimport { getRequestBag, type FetchMiddleware } from \"./fetch-app.js\";\n\n/** Verbosity of the request logger. */\nexport type LogLevel = \"info\" | \"debug\" | \"trace\";\n\n/** Options for {@link requestLogger} — the shape of `config.logging`. */\nexport interface LoggingOptions {\n  /**\n   * Whether request logging is on.\n   *\n   * @defaultValue `true`\n   */\n  enabled?: boolean;\n  /**\n   * Verbosity: `info` (compact lines without payloads, default), `debug`\n   * (adds compact truncated input/output on the detail line), or `trace`\n   * (debug plus full request/response header and body dumps). The\n   * `MCP_USE_LOG_LEVEL` environment variable overrides this when set.\n   */\n  level?: LogLevel;\n}\n\n/* ------------------------------------------------------------------------ *\n * ANSI styling (no color-library dependency)\n * ------------------------------------------------------------------------ */\n\n/**\n * Whether to emit ANSI escapes: only on a TTY stdout, and never when the\n * `NO_COLOR` convention is set. Edge runtimes without `process.stdout`\n * (Workers, Deno Deploy) get plain text.\n */\nfunction colorsEnabled(): boolean {\n  if (typeof process === \"undefined\") return false;\n  if (process.env?.[\"NO_COLOR\"] !== undefined) return false;\n  return process.stdout?.isTTY === true;\n}\n\ntype Style = (text: string) => string;\n\nfunction ansi(open: number, close: number): Style {\n  return (text) =>\n    colorsEnabled() ? `\\u001B[${open}m${text}\\u001B[${close}m` : text;\n}\n\nconst bold = ansi(1, 22);\nconst dim = ansi(2, 22);\nconst red = ansi(31, 39);\nconst green = ansi(32, 39);\nconst yellow = ansi(33, 39);\nconst blue = ansi(34, 39);\nconst magenta = ansi(35, 39);\nconst cyan = ansi(36, 39);\nconst gray = ansi(90, 39);\n\n/* ------------------------------------------------------------------------ *\n * Level resolution\n * ------------------------------------------------------------------------ */\n\n/**\n * Effective log level: `MCP_USE_LOG_LEVEL` when it names a known level,\n * otherwise the configured level, otherwise `info`.\n */\nexport function resolveLogLevel(configured?: LogLevel): LogLevel {\n  const raw =\n    typeof process === \"undefined\"\n      ? undefined\n      : process.env?.[\"MCP_USE_LOG_LEVEL\"]?.toLowerCase();\n  if (raw === \"info\" || raw === \"debug\" || raw === \"trace\") return raw;\n  return configured ?? \"info\";\n}\n\n/* ------------------------------------------------------------------------ *\n * MCP detail formatting (typed against the SDK's protocol method surface)\n * ------------------------------------------------------------------------ */\n\n/** What one protocol method contributes to the detail line. */\ninterface McpDetail {\n  /** Short subject next to the method name (tool name, resource URI, …). */\n  subject?: string | undefined;\n  /** Caller-provided input worth echoing inline (tool/prompt arguments). */\n  input?: unknown;\n}\n\n/**\n * Detail extractor for one protocol method: given the method's typed params,\n * return the subject and inline input to show, or `{}` when the method name\n * says it all.\n */\ntype DetailFormatter<M extends RequestMethod> = (\n  params: RequestTypeMap[M][\"params\"]\n) => McpDetail;\n\nfunction formatClientInfo(\n  info: Implementation | undefined\n): string | undefined {\n  if (info === undefined) return undefined;\n  return typeof info.version === \"string\" && info.version !== \"\"\n    ? `${info.name}/${info.version}`\n    : info.name;\n}\n\n/**\n * Exhaustive over {@link RequestMethod}: adding a protocol method to the SDK\n * makes this table a compile error until a formatter is chosen — the inverse\n * of v1's silent `[unknown-method]` fallback.\n */\nconst detailFormatters: {\n  [M in RequestMethod]: DetailFormatter<M>;\n} = {\n  initialize: (p) => ({ subject: formatClientInfo(p.clientInfo) }),\n  ping: () => ({}),\n  \"server/discover\": () => ({}),\n  \"completion/complete\": (p) => ({\n    subject: p.ref.type === \"ref/prompt\" ? p.ref.name : p.ref.uri,\n    input: p.argument,\n  }),\n  \"logging/setLevel\": (p) => ({ subject: p.level }),\n  \"prompts/get\": (p) => ({ subject: p.name, input: p.arguments }),\n  \"prompts/list\": () => ({}),\n  \"resources/list\": () => ({}),\n  \"resources/templates/list\": () => ({}),\n  \"resources/read\": (p) => ({ subject: p.uri }),\n  \"resources/subscribe\": (p) => ({ subject: p.uri }),\n  \"resources/unsubscribe\": (p) => ({ subject: p.uri }),\n  \"subscriptions/listen\": () => ({}),\n  \"tools/call\": (p) => ({ subject: p.name, input: p.arguments }),\n  \"tools/list\": () => ({}),\n  \"sampling/createMessage\": () => ({}),\n  \"elicitation/create\": () => ({}),\n  \"roots/list\": () => ({}),\n};\n\nfunction isKnownMethod(method: string): method is RequestMethod {\n  return Object.prototype.hasOwnProperty.call(detailFormatters, method);\n}\n\n/**\n * Detail for a guard-proved JSON-RPC request. The guard proves the JSON-RPC\n * envelope, not method-specific params, so the formatter call is fenced: a\n * malformed body (which the SDK will reject downstream anyway) logs without\n * a subject rather than throwing here.\n */\nfunction formatDetail(message: JSONRPCRequest): McpDetail {\n  if (!isKnownMethod(message.method)) return {};\n  try {\n    const formatter = detailFormatters[message.method] as (\n      params: unknown\n    ) => McpDetail;\n    const detail = formatter(message.params);\n    return typeof detail.subject === \"string\" || detail.subject === undefined\n      ? detail\n      : {};\n  } catch {\n    return {};\n  }\n}\n\n/** Longest inline JSON segment (input or output) before truncation. */\nconst INLINE_JSON_MAX_LENGTH = 80;\n\n/**\n * Compact single-line JSON for inline input/output echoing, truncated to\n * {@link INLINE_JSON_MAX_LENGTH} characters.\n */\nfunction inlineJson(value: unknown): string {\n  let text: string;\n  try {\n    text = JSON.stringify(value) ?? String(value);\n  } catch {\n    text = String(value);\n  }\n  return text.length > INLINE_JSON_MAX_LENGTH\n    ? `${text.slice(0, INLINE_JSON_MAX_LENGTH)}...`\n    : text;\n}\n\n/**\n * Client identity from the per-request `_meta` envelope every 2026-07-28\n * request carries (`io.modelcontextprotocol/clientInfo`) — the stateless\n * replacement for v1's session-id prefix. `undefined` for requests without\n * the envelope (legacy-era traffic).\n */\nfunction formatClientIdentity(message: JSONRPCRequest): string | undefined {\n  const meta = message.params?._meta;\n  if (meta === undefined) return undefined;\n  const info = (meta as Record<string, unknown>)[CLIENT_INFO_META_KEY];\n  if (\n    typeof info !== \"object\" ||\n    info === null ||\n    typeof (info as Implementation).name !== \"string\"\n  ) {\n    return undefined;\n  }\n  return formatClientInfo(info as Implementation);\n}\n\n/**\n * Strip control characters (newlines, ANSI escapes, …) from request-derived\n * strings so a hostile method/subject/error value cannot forge extra log\n * lines or terminal escape sequences.\n */\nfunction sanitize(text: string): string {\n  // eslint-disable-next-line no-control-regex\n  return text.replace(/[\\u0000-\\u001F\\u007F-\\u009F]+/g, \" \");\n}\n\n/** Namespace color for the detail line's method segment. */\nfunction methodStyle(method: string): Style {\n  if (method.startsWith(\"tools/\")) return cyan;\n  if (method.startsWith(\"resources/\")) return green;\n  if (method.startsWith(\"prompts/\")) return magenta;\n  if (method === \"initialize\" || method === \"ping\") return gray;\n  return blue;\n}\n\n/* ------------------------------------------------------------------------ *\n * Response outcome\n * ------------------------------------------------------------------------ */\n\n/** Header names whose values are credentials and never worth dumping. */\nconst REDACTED_HEADERS = new Set([\n  \"authorization\",\n  \"proxy-authorization\",\n  \"cookie\",\n  \"set-cookie\",\n  \"x-api-key\",\n]);\n\n/** Replace credential-bearing header values with a `[REDACTED]` marker. */\nfunction redactHeaders(\n  headers: Record<string, string>\n): Record<string, string> {\n  return Object.fromEntries(\n    Object.entries(headers).map(([name, value]) => [\n      name,\n      REDACTED_HEADERS.has(name.toLowerCase()) ? \"[REDACTED]\" : value,\n    ])\n  );\n}\n\n/** The JSON-RPC-level outcome parsed from a response body. */\ninterface ResponseOutcome {\n  /** Error message when the exchange failed (JSON-RPC error or tool error). */\n  errorMessage: string | null;\n  /** The JSON-RPC `result` payload when the exchange succeeded. */\n  result?: unknown;\n}\n\n/**\n * Parse the JSON-RPC outcome from the response body: an error message from\n * the error envelope (`{ error: { message } }`) or a tool-call error\n * (`{ result: { isError: true, content: [{ text }] } }`), otherwise the\n * successful `result` payload. Handles both `application/json` and\n * `text/event-stream` bodies.\n */\nasync function extractResponseOutcome(res: Response): Promise<ResponseOutcome> {\n  if (!res.body) return { errorMessage: null };\n\n  let text: string;\n  try {\n    text = await res.clone().text();\n  } catch {\n    return { errorMessage: null };\n  }\n  if (!text) return { errorMessage: null };\n\n  const isSse = (res.headers.get(\"content-type\") ?? \"\").includes(\n    \"text/event-stream\"\n  );\n  const payloads: unknown[] = [];\n  const tryParse = (raw: string) => {\n    try {\n      payloads.push(JSON.parse(raw));\n    } catch {\n      // not JSON — skip\n    }\n  };\n  if (isSse) {\n    for (const line of text.split(/\\r?\\n/)) {\n      if (line.startsWith(\"data:\")) {\n        const data = line.slice(5).trim();\n        if (data) tryParse(data);\n      }\n    }\n  } else {\n    tryParse(text);\n  }\n\n  let result: unknown;\n  for (const payload of payloads) {\n    if (payload === null || typeof payload !== \"object\") continue;\n    const message = payload as {\n      error?: { message?: unknown };\n      result?: { isError?: unknown; content?: unknown };\n    };\n    if (typeof message.error?.message === \"string\") {\n      return { errorMessage: message.error.message };\n    }\n    if (message.result?.isError === true) {\n      const blocks = Array.isArray(message.result.content)\n        ? (message.result.content as { type?: unknown; text?: unknown }[])\n        : [];\n      const textBlock = blocks.find(\n        (b) => b?.type === \"text\" && typeof b.text === \"string\"\n      );\n      return {\n        errorMessage: textBlock ? String(textBlock.text) : \"tool error\",\n      };\n    }\n    if (\"result\" in message) result = message.result;\n  }\n  return { errorMessage: null, result };\n}\n\n/**\n * Compact view of a successful `tools/call` result for inline echoing:\n * `structuredContent` when present, a lone text block's text, or the raw\n * content blocks.\n */\nfunction compactToolResult(result: unknown): unknown {\n  if (result === null || typeof result !== \"object\") return result;\n  const { structuredContent, content } = result as {\n    structuredContent?: unknown;\n    content?: unknown;\n  };\n  if (structuredContent !== undefined) return structuredContent;\n  if (Array.isArray(content)) {\n    const [block] = content as { type?: unknown; text?: unknown }[];\n    if (content.length === 1 && block?.type === \"text\") return block.text;\n  }\n  return content;\n}\n\n/* ------------------------------------------------------------------------ *\n * Trace dump\n * ------------------------------------------------------------------------ */\n\n/** Pretty-print a value for the trace dump, truncating long strings. */\nfunction formatForDump(value: unknown): string {\n  function truncate(val: unknown): unknown {\n    if (typeof val === \"string\" && val.length > 100) {\n      return `${val.slice(0, 100)}...`;\n    }\n    if (Array.isArray(val)) return val.map(truncate);\n    if (val !== null && typeof val === \"object\") {\n      return Object.fromEntries(\n        Object.entries(val as Record<string, unknown>).map(([k, v]) => [\n          k,\n          truncate(v),\n        ])\n      );\n    }\n    return val;\n  }\n  try {\n    return JSON.stringify(truncate(value), null, 2);\n  } catch {\n    return String(value);\n  }\n}\n\nconst DUMP_BODY_MAX_LENGTH = 10_000;\n\nasync function printTraceDump(\n  response: Response,\n  requestHeaders: Record<string, string>,\n  requestBody: unknown,\n  readResponseBody: boolean\n): Promise<void> {\n  console.log(`\\n${cyan(\"=\".repeat(80))}`);\n  console.log(bold(cyan(\"[TRACE] Request Details\")));\n  console.log(cyan(\"-\".repeat(80)));\n\n  if (Object.keys(requestHeaders).length > 0) {\n    console.log(yellow(\"Request Headers:\"));\n    console.log(formatForDump(redactHeaders(requestHeaders)));\n  }\n  if (requestBody !== undefined) {\n    console.log(yellow(\"Request Body:\"));\n    console.log(\n      typeof requestBody === \"string\" ? requestBody : formatForDump(requestBody)\n    );\n  }\n\n  const responseHeaders: Record<string, string> = {};\n  response.headers.forEach((value, key) => {\n    responseHeaders[key] = value;\n  });\n  if (Object.keys(responseHeaders).length > 0) {\n    console.log(yellow(\"Response Headers:\"));\n    console.log(formatForDump(redactHeaders(responseHeaders)));\n  }\n\n  if (!readResponseBody) {\n    console.log(`${yellow(\"Response Body:\")} (streaming — not dumped)`);\n  } else if (response.body === null) {\n    console.log(`${yellow(\"Response Body:\")} (no body)`);\n  } else {\n    try {\n      const text = await response.clone().text();\n      if (text.length === 0) {\n        console.log(`${yellow(\"Response Body:\")} (empty)`);\n      } else {\n        console.log(yellow(\"Response Body:\"));\n        try {\n          console.log(formatForDump(JSON.parse(text)));\n        } catch {\n          console.log(\n            text.length > DUMP_BODY_MAX_LENGTH\n              ? `${text.slice(0, DUMP_BODY_MAX_LENGTH)}\\n... (truncated, ${\n                  text.length - DUMP_BODY_MAX_LENGTH\n                } more characters)`\n              : text\n          );\n        }\n      }\n    } catch {\n      console.log(`${yellow(\"Response Body:\")} (unable to read)`);\n    }\n  }\n\n  console.log(`${cyan(\"=\".repeat(80))}\\n`);\n}\n\n/* ------------------------------------------------------------------------ *\n * Middleware\n * ------------------------------------------------------------------------ */\n\n/** Style an HTTP status code by its class. */\nfunction styleStatus(status: number): string {\n  const text = String(status);\n  if (status >= 500) return magenta(text);\n  if (status >= 400) return red(text);\n  if (status >= 300) return yellow(text);\n  return green(text);\n}\n\n/**\n * Cosmetic noise suppression: inspector shell page loads and favicon probes\n * add nothing to a request log.\n */\nfunction isNoisyRequest(httpMethod: string, pathname: string): boolean {\n  if (httpMethod !== \"GET\" && httpMethod !== \"HEAD\") return false;\n  return pathname.includes(\"/inspector\") || pathname.endsWith(\"/favicon.ico\");\n}\n\n/**\n * Fetch middleware logging every request in the compact two-line format (see\n * the module docs). `MCPServer` registers it automatically unless\n * `config.logging.enabled` is `false`.\n */\nexport function requestLogger(options: LoggingOptions = {}): FetchMiddleware {\n  if (options.enabled === false) {\n    return (_request, next) => next();\n  }\n  return async (request, next) => {\n    const level = resolveLogLevel(options.level);\n    const startedAt = Date.now();\n    const httpMethod = request.method;\n    const pathname = new URL(request.url).pathname;\n\n    if (isNoisyRequest(httpMethod, pathname)) {\n      return next();\n    }\n\n    const requestHeaders: Record<string, string> = {};\n    if (level === \"trace\") {\n      request.headers.forEach((value, key) => {\n        requestHeaders[key] = value;\n      });\n    }\n\n    let requestBody: unknown;\n    if (httpMethod !== \"GET\" && httpMethod !== \"HEAD\") {\n      const parsedBody = getRequestBag(request).parsedBody;\n      if (parsedBody !== undefined) {\n        requestBody = parsedBody;\n      } else {\n        try {\n          requestBody = await request.clone().json();\n        } catch {\n          // Non-JSON body — the summary line logs without MCP detail.\n        }\n      }\n    }\n\n    const response = await next();\n\n    const durationMs = Date.now() - startedAt;\n    const timestamp = new Date().toISOString().substring(11, 19);\n    const mcpRequest = isJSONRPCRequest(requestBody) ? requestBody : undefined;\n    const isStreamingMethod = mcpRequest?.method === \"subscriptions/listen\";\n\n    const lines: string[] = [\n      [\n        dim(timestamp),\n        bold(httpMethod),\n        pathname,\n        styleStatus(response.status),\n        dim(`in ${durationMs}ms`),\n      ].join(\" \"),\n    ];\n\n    if (mcpRequest !== undefined) {\n      const method = sanitize(mcpRequest.method);\n      const parts: string[] = [`  ${methodStyle(method)(method)}`];\n      const detail = formatDetail(mcpRequest);\n      if (detail.subject !== undefined) {\n        parts.push(bold(sanitize(detail.subject)));\n      }\n      const echoPayloads = level !== \"info\";\n      if (echoPayloads && detail.input !== undefined) {\n        parts.push(inlineJson(detail.input));\n      }\n      const outcome: ResponseOutcome = isStreamingMethod\n        ? { errorMessage: null }\n        : await extractResponseOutcome(response);\n      if (\n        echoPayloads &&\n        mcpRequest.method === \"tools/call\" &&\n        outcome.errorMessage === null &&\n        outcome.result !== undefined\n      ) {\n        parts.push(dim(\"->\"), inlineJson(compactToolResult(outcome.result)));\n      }\n      if (mcpRequest.method !== \"initialize\") {\n        const client = formatClientIdentity(mcpRequest);\n        if (client !== undefined) parts.push(dim(sanitize(client)));\n      }\n      if (outcome.errorMessage !== null) {\n        parts.push(red(`ERROR ${sanitize(outcome.errorMessage)}`));\n      } else if (response.status >= 400) {\n        parts.push(red(`ERROR (HTTP ${response.status})`));\n      }\n      lines.push(parts.join(\" \"));\n    }\n\n    console.log(lines.join(\"\\n\"));\n\n    if (level === \"trace\") {\n      await printTraceDump(\n        response,\n        requestHeaders,\n        requestBody,\n        !isStreamingMethod\n      );\n    }\n\n    return response;\n  };\n}\n","import {\n  createMcpHandler,\n  type AuthInfo,\n  type CreateMcpHandlerOptions,\n  type McpHttpHandler,\n  type McpServerFactory,\n} from \"@modelcontextprotocol/server\";\n\nimport { getRequestBag, matchesPath, type FetchHandler } from \"./fetch-app.js\";\nimport {\n  extractClientCapabilitiesFromBody,\n  stashClientCapabilities,\n} from \"./views/capabilities.js\";\n\n/** Options for {@link createMcpMount}. */\nexport interface MountMcpOptions {\n  /** Route path the MCP endpoint is served on. Defaults to `/mcp`. */\n  path?: string;\n  /**\n   * Options forwarded to the SDK's `createMcpHandler`.\n   *\n   * `legacy` defaults to `\"stateless\"`: 2025-era (non-envelope) requests are\n   * served by a fresh instance over a session-less streamable HTTP transport.\n   * Pass `legacy: \"reject\"` for modern-only strict serving, where\n   * legacy-classified requests get the unsupported-protocol-version error.\n   */\n  handler?: CreateMcpHandlerOptions;\n  /**\n   * Produce verified {@link AuthInfo} for the request before the SDK handler\n   * runs. When omitted, requests are served without authenticated identity.\n   */\n  authInfo?: (request: Request) => AuthInfo | undefined;\n}\n\n/** Result of {@link createMcpMount}. */\nexport interface McpMount {\n  /** Underlying SDK handler (`close`, `notify`, `bus`). */\n  handler: McpHttpHandler;\n  /** Fetch handler for the MCP path only (compose into a larger app). */\n  fetch: FetchHandler;\n}\n\n/**\n * Create the MCP Streamable HTTP endpoint as a fetch handler.\n *\n * Returns the underlying `McpHttpHandler` so callers can call `close()` on\n * shutdown to abort in-flight exchanges, and use `notify`/`bus` for\n * list-changed notifications.\n *\n * Compose the returned `fetch` into a larger app with {@link composeFetch}\n * from `mcp-use`, and put Host/Origin validation in front when binding\n * locally or exposing the process directly.\n *\n * @example\n * ```ts\n * const { handler, fetch: mcpFetch } = createMcpMount(factory);\n * const app = composeFetch(mcpFetch, jsonBodyMiddleware(), hostValidationMiddleware(hosts));\n * ```\n */\nexport function createMcpMount(\n  factory: McpServerFactory,\n  options: MountMcpOptions = {}\n): McpMount {\n  const {\n    path = \"/mcp\",\n    handler: handlerOptions,\n    authInfo: getAuthInfo,\n  } = options;\n  const legacyMode = handlerOptions?.legacy ?? \"stateless\";\n  const handler = createMcpHandler(factory, {\n    legacy: \"stateless\",\n    ...handlerOptions,\n  });\n\n  const fetch: FetchHandler = async (request) => {\n    if (!matchesPath(request, path)) {\n      return new Response(\"Not Found\", { status: 404 });\n    }\n\n    // ponytail: stateless wire is POST-only; SDK GET/DELETE/HEAD probes are optional.\n    // 204 avoids browser console noise from 405 while remaining client-safe.\n    if (legacyMode === \"stateless\") {\n      const method = request.method.toUpperCase();\n      if (method === \"GET\" || method === \"DELETE\" || method === \"HEAD\") {\n        return new Response(null, { status: 204 });\n      }\n    }\n\n    const bag = getRequestBag(request);\n    let parsedBody = bag.parsedBody;\n    if (parsedBody === undefined) {\n      try {\n        parsedBody = await request.clone().json();\n      } catch {\n        // Non-JSON or empty body — the SDK handler will surface the error.\n      }\n    }\n\n    const capabilities = extractClientCapabilitiesFromBody(parsedBody);\n    if (capabilities !== undefined) {\n      stashClientCapabilities(request, capabilities);\n    }\n\n    const authInfo = getAuthInfo?.(request) ?? bag.authInfo;\n    return handler.fetch(request, {\n      ...(parsedBody !== undefined && { parsedBody }),\n      ...(authInfo !== undefined && { authInfo }),\n    });\n  };\n\n  return { handler, fetch };\n}\n","import type {\n  CallToolResult,\n  InputRequiredResult,\n  MetaObject,\n  StandardSchemaWithJSON,\n  ToolAnnotations,\n} from \"@modelcontextprotocol/server\";\n\nimport type { McpUiResourceCsp } from \"@modelcontextprotocol/ext-apps\";\n\nimport type { RequestContext } from \"./context.js\";\nimport type { UiPermissions } from \"./views/types.js\";\n\n/**\n * Binds a tool to a view directory for MCP Apps rendering.\n *\n * Any number of tools may share the same `name`. Resource facts\n * (`description`, `csp`, `permissions`, `domain`, `prefersBorder`) have one\n * authoring point — at most one binder may declare them; others pass only\n * `{ name }`. The view file exports only the component; the framework reads\n * these fields at registration and emits them on the bound view's MCP\n * resource (hosts read resource `_meta.ui`, not tool-level copies).\n */\nexport interface ToolViewConfig {\n  /** View directory / manifest name, e.g. `\"product-search-result\"`. */\n  name: string;\n  /**\n   * Human-readable description of the view resource → the resource's\n   * `description` on `resources/list` and `resources/read`.\n   */\n  description?: string;\n  /**\n   * CSP domains the host must allow → resource `_meta.ui.csp`. The framework\n   * auto-appends its serving origin to `resourceDomains` at emission time;\n   * other author-set fields (`frameDomains`, `baseUriDomains`, …) pass through.\n   */\n  csp?: McpUiResourceCsp;\n  /** Sandbox permissions the view needs → resource `_meta.ui.permissions`. */\n  permissions?: UiPermissions;\n  /**\n   * Dedicated origin hint for hosts that render views on a separate domain →\n   * resource `_meta.ui.domain`.\n   */\n  domain?: string;\n  /**\n   * Ask the host to draw a border around the view → resource\n   * `_meta.ui.prefersBorder`.\n   */\n  prefersBorder?: boolean;\n}\n\n/** Declares a tool's identity, LLM-facing description, and schemas. First argument to {@link MCPServer.tool}. */\nexport interface ToolDefinition {\n  /** Unique tool identifier, e.g. `\"fetch-weather\"`. */\n  name: string;\n  /** Human-readable title shown in UIs (falls back to `name`). */\n  title?: string;\n  /** LLM-facing description of what the tool does. */\n  description?: string;\n  /**\n   * Object schema for input validation — any Standard Schema library with\n   * JSON Schema conversion ({@link StandardSchemaWithJSON}): zod v4, ArkType,\n   * Valibot, …. Field descriptions become LLM hints. Input is validated by\n   * the SDK before the callback runs. Emitted on the wire as `inputSchema`.\n   */\n  inputSchema?: StandardSchemaWithJSON;\n  /**\n   * Alias for {@link ToolDefinition.inputSchema}. Prefer `inputSchema` in new\n   * code — it matches the MCP wire field name.\n   */\n  schema?: StandardSchemaWithJSON;\n  /**\n   * Schema for structured output ({@link StandardSchemaWithJSON}). Any JSON\n   * root is allowed — object, array, or primitive (2026-07-28 protocol).\n   * When set, the callback must return a result carrying matching\n   * `structuredContent` or an explicit `isError` result — enforced at\n   * compile time and validated by the SDK at runtime.\n   */\n  outputSchema?: StandardSchemaWithJSON;\n  /** Behavioral hints for clients (readOnlyHint, destructiveHint, …). */\n  annotations?: ToolAnnotations;\n  /**\n   * Extension metadata advertised on this tool's `tools/list` descriptor.\n   *\n   * Use vendor-namespaced keys for custom data. This definition metadata is\n   * distinct from a tool callback result's `_meta`: it describes the tool,\n   * while result `_meta` belongs to one invocation. For view-bound or\n   * visibility-restricted tools, framework-owned MCP Apps keys are derived\n   * from {@link ToolDefinition.view} and {@link ToolDefinition.visibility};\n   * those derived values take precedence over colliding entries here.\n   */\n  _meta?: MetaObject;\n  /**\n   * Declares who may call or see the tool. Emitted as `_meta.ui.visibility`\n   * on `tools/list`. Omitted = host default (callable by the model, visible\n   * to the app). The server always lists every registered tool — hosts\n   * filter by this declaration; the server never omits tools from\n   * `tools/list`. `\"app\"` marks app-private helper tools callable from\n   * views via `useCallTool` while the host hides them from the model.\n   */\n  visibility?: \"model\" | \"app\";\n  /**\n   * Bind this tool to a view for MCP Apps rendering. Requires\n   * {@link ToolDefinition.outputSchema} — the view reads the result's\n   * `structuredContent` typed by this schema.\n   */\n  view?: ToolViewConfig;\n}\n\n/**\n * Handle returned by {@link MCPServer.tool} — carries the tool name at runtime\n * and phantom input/output types for inference (e.g. `Register` / `useCallTool`).\n */\nexport interface ToolRef<\n  Name extends string = string,\n  Input = Record<string, unknown>,\n  Output = never,\n> {\n  /** The tool's registered name. */\n  readonly name: Name;\n  /**\n   * Phantom carrier for the tool's inferred input/output types. Never set at\n   * runtime.\n   *\n   * @internal\n   */\n  readonly \"~types\"?: { input: Input; output: Output };\n}\n\n/**\n * Result a tool callback may return, keyed by the tool's inferred output\n * type. Completed calls use the SDK's raw {@link CallToolResult}; interactive\n * calls may return an {@link InputRequiredResult}. There is no\n * framework-specific result layer.\n *\n * Without an `outputSchema` (`TOutput = never`) any `CallToolResult` is\n * accepted. With one, the result must carry `structuredContent` matching the\n * schema or set `isError: true` — mirroring the SDK's runtime rule, which\n * rejects results from schema'd tools that carry no structured content\n * unless `isError` is set.\n *\n * The SDK auto-appends a JSON text block when `structuredContent` is a\n * non-object value and no `type: \"text\"` block is present; for object-shaped\n * payloads include the text serialization yourself:\n *\n * ```ts\n * return {\n *   content: [{ type: \"text\", text: JSON.stringify(data) }],\n *   structuredContent: data,\n * };\n * ```\n */\nexport type ToolResult<TOutput = never> =\n  | InputRequiredResult\n  | ([TOutput] extends [never]\n      ? CallToolResult\n      :\n          | (CallToolResult & { structuredContent: TOutput })\n          | (CallToolResult & { isError: true }));\n\n/** Infer the callback params type from a tool definition's input schema. */\nexport type InferToolInput<T> = T extends {\n  inputSchema: infer S extends StandardSchemaWithJSON;\n}\n  ? StandardSchemaWithJSON.InferOutput<S> extends Record<string, unknown>\n    ? StandardSchemaWithJSON.InferOutput<S>\n    : Record<string, unknown>\n  : T extends {\n        schema: infer S extends StandardSchemaWithJSON;\n      }\n    ? StandardSchemaWithJSON.InferOutput<S> extends Record<string, unknown>\n      ? StandardSchemaWithJSON.InferOutput<S>\n      : Record<string, unknown>\n    : Record<string, unknown>;\n\n/**\n * Resolve a tool definition's input schema. `inputSchema` wins when both are\n * set.\n *\n * @internal\n */\nexport function resolveToolInputSchema(\n  definition: Pick<ToolDefinition, \"inputSchema\" | \"schema\">\n): StandardSchemaWithJSON | undefined {\n  return definition.inputSchema ?? definition.schema;\n}\n\n/**\n * Infer the structured output type from a definition's `outputSchema` —\n * any JSON root, not just objects (2026-07-28 protocol); `never` when the\n * definition declares none (any {@link CallToolResult} is then accepted —\n * see {@link ToolResult}).\n */\nexport type InferToolOutput<T> = T extends {\n  outputSchema: infer S extends StandardSchemaWithJSON;\n}\n  ? StandardSchemaWithJSON.InferOutput<S>\n  : never;\n\n/** Infer the literal tool name from a definition's `name` field. */\nexport type InferToolName<T> = T extends { name: infer N extends string }\n  ? N\n  : string;\n\n/**\n * Tool execution callback. The return type is {@link ToolResult}: tools with\n * an `outputSchema` must return matching `structuredContent` or an `isError`\n * result; tools without one accept any {@link CallToolResult}.\n */\nexport type ToolCallback<\n  TInput = Record<string, unknown>,\n  TOutput = never,\n  TUser = never,\n  HasOAuth extends boolean = false,\n> = (\n  params: TInput,\n  ctx: RequestContext<TUser, HasOAuth>\n) => ToolResult<TOutput> | Promise<ToolResult<TOutput>>;\n","import type { ViewsManifest } from \"./types.js\";\n\n/**\n * Symbol-keyed method on {@link MCPServer} that primes the views registry\n * from a build/dev manifest.\n *\n * @internal\n */\nexport const registerViews: unique symbol = Symbol(\"mcp-use/registerViews\");\n\n/**\n * Options for priming the views registry.\n *\n * @internal\n */\nexport interface RegisterViewsOptions {\n  /**\n   * When true, resource CSP emission appends the serving origin's websocket\n   * variant to `connectDomains` so Vite HMR passes host-enforced CSP.\n   */\n  dev?: boolean;\n  /**\n   * Absolute project root for resolving the `public/` directory in dev.\n   * Defaults to `process.cwd()` when omitted (production `start`).\n   */\n  projectRoot?: string;\n}\n\n/** Type of the {@link registerViews} method on {@link MCPServer}. */\nexport type RegisterViews = (\n  views: ViewsManifest,\n  options?: RegisterViewsOptions\n) => void;\n","import type { McpUiResourceCsp } from \"@modelcontextprotocol/ext-apps\";\n\nimport type { ViewResourceFacts } from \"./types.js\";\n\ntype CspCategory =\n  | \"connectDomains\"\n  | \"resourceDomains\"\n  | \"frameDomains\"\n  | \"baseUriDomains\";\n\nconst CATEGORY_ENV: Record<CspCategory, string> = {\n  connectDomains: \"CSP_CONNECT_DOMAINS\",\n  resourceDomains: \"CSP_RESOURCE_DOMAINS\",\n  frameDomains: \"CSP_FRAME_DOMAINS\",\n  baseUriDomains: \"CSP_BASE_URI_DOMAINS\",\n};\n\n/** Parse a comma-separated env var into trimmed non-empty domain strings. */\nexport function parseDomainList(raw: string | undefined): string[] {\n  if (raw === undefined || raw.trim() === \"\") {\n    return [];\n  }\n  return raw\n    .split(\",\")\n    .map((s) => s.trim())\n    .filter((s) => s.length > 0);\n}\n\nfunction readEnvDomains(name: string): string[] | undefined {\n  if (typeof process === \"undefined\") {\n    return undefined;\n  }\n  const raw = process.env[name];\n  if (raw === undefined || raw.trim() === \"\") {\n    return undefined;\n  }\n  return parseDomainList(raw);\n}\n\n/** Domains from `CSP_URLS` (shortcut for all categories). */\nexport function readCspUrlsShortcut(): string[] {\n  return readEnvDomains(\"CSP_URLS\") ?? [];\n}\n\n/** Per-category env override, or `CSP_URLS` when the category var is unset. */\nexport function readEnvDomainsForCategory(category: CspCategory): string[] {\n  const perCategory = readEnvDomains(CATEGORY_ENV[category]);\n  if (perCategory !== undefined) {\n    return perCategory;\n  }\n  return readCspUrlsShortcut();\n}\n\n/**\n * Merge domain lists: earlier segments win on duplicate (higher priority).\n */\nexport function mergeDomainLists(...segments: string[][]): string[] {\n  const seen = new Set<string>();\n  const out: string[] = [];\n  for (const segment of segments) {\n    for (const domain of segment) {\n      if (!seen.has(domain)) {\n        seen.add(domain);\n        out.push(domain);\n      }\n    }\n  }\n  return out;\n}\n\n/**\n * Resolved origins and flags used when merging author, env, and MCP CSP domains.\n *\n * @internal\n */\nexport interface BuildCspOptions {\n  /** Public server origin from `MCP_URL` or forwarded request headers. */\n  serverOrigin: string;\n  /** Assets origin derived from `MCP_ASSETS_URL` or the server origin. */\n  assetsOrigin: string;\n  /** When false, server origin is appended to resourceDomains (same-origin assets). */\n  explicitAssetsBase: boolean;\n  /** When true, append the server origin's websocket variant for Vite HMR. */\n  hmrWs?: boolean;\n}\n\nfunction toWebSocketOrigin(serverOrigin: string): string {\n  if (serverOrigin.startsWith(\"https://\")) {\n    return `wss://${serverOrigin.slice(\"https://\".length)}`;\n  }\n  if (serverOrigin.startsWith(\"http://\")) {\n    return `ws://${serverOrigin.slice(\"http://\".length)}`;\n  }\n  return serverOrigin;\n}\n\n/**\n * Build final `_meta.ui.csp` from author facts, env vars, and MCP auto-append.\n *\n * Precedence (high → low): author → env (`CSP_*_DOMAINS` or `CSP_URLS`) →\n * MCP auto-append (lowest).\n */\nexport function buildMergedResourceCsp(\n  authorFacts: ViewResourceFacts | undefined,\n  options: BuildCspOptions\n): McpUiResourceCsp {\n  const author = authorFacts?.csp;\n\n  const mcpConnectAuto: string[] = [];\n  if (options.serverOrigin !== \"\") {\n    mcpConnectAuto.push(options.serverOrigin);\n    if (options.hmrWs === true) {\n      mcpConnectAuto.push(toWebSocketOrigin(options.serverOrigin));\n    }\n  }\n\n  const mcpResourceAuto: string[] = [];\n  const resourceOrigin = options.explicitAssetsBase\n    ? options.assetsOrigin\n    : options.serverOrigin;\n  if (resourceOrigin !== \"\") {\n    mcpResourceAuto.push(resourceOrigin);\n  }\n\n  const connectDomains = mergeDomainLists(\n    author?.connectDomains ?? [],\n    readEnvDomainsForCategory(\"connectDomains\"),\n    mcpConnectAuto\n  );\n\n  const resourceDomains = mergeDomainLists(\n    author?.resourceDomains ?? [],\n    readEnvDomainsForCategory(\"resourceDomains\"),\n    mcpResourceAuto\n  );\n\n  const frameDomains = mergeDomainLists(\n    author?.frameDomains ?? [],\n    readEnvDomainsForCategory(\"frameDomains\")\n  );\n\n  const baseUriDomains = mergeDomainLists(\n    author?.baseUriDomains ?? [],\n    readEnvDomainsForCategory(\"baseUriDomains\")\n  );\n\n  return {\n    ...author,\n    connectDomains,\n    resourceDomains,\n    frameDomains,\n    baseUriDomains,\n  };\n}\n","import {\n  matchesPathPrefix,\n  pathUnderBase,\n  pathnameOf,\n  type FetchHandler,\n} from \"../fetch-app.js\";\nimport type { ViewManifestEntry } from \"./types.js\";\n\nconst PUBLIC_BUILD_DIR = \".mcp-use/build/views/public\";\nconst PUBLIC_DEV_DIR = \"public\";\nconst VIEW_ASSETS_BUILD_ROOT = \".mcp-use/build/views\";\n\n/**\n * Fetch handler for built view bundles under\n * `${basePath}/_mcp-use/views/<name>/…`.\n *\n * Production only — dev serves view modules through Vite middleware.\n *\n * @param basePath - MCP mount prefix (e.g. `/mcp`).\n * @param views - Primed view registry; empty skips mounting.\n * @param options - `projectRoot` defaults to `process.cwd()`.\n *\n * @internal\n */\nexport function createViewAssetsHandler(\n  basePath: string,\n  views: ReadonlyMap<string, ViewManifestEntry>,\n  options?: { projectRoot?: string; deferCors?: boolean }\n): FetchHandler | undefined {\n  if (views.size === 0) {\n    return undefined;\n  }\n\n  const assetsPrefix = pathUnderBase(basePath, \"_mcp-use/views\");\n  const projectRoot = options?.projectRoot ?? process.cwd();\n\n  return async (request) => {\n    if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n      return new Response(\"Method Not Allowed\", { status: 405 });\n    }\n    if (!matchesPathPrefix(request, assetsPrefix)) {\n      return new Response(\"Not Found\", { status: 404 });\n    }\n\n    const pathname = pathnameOf(request);\n    const remainder = pathname.slice(assetsPrefix.length + 1);\n    const slash = remainder.indexOf(\"/\");\n    if (slash <= 0 || slash === remainder.length - 1) {\n      return new Response(\"Not Found\", { status: 404 });\n    }\n\n    const viewName = remainder.slice(0, slash);\n    const subpath = remainder.slice(slash + 1);\n    const entry = views.get(viewName);\n    if (entry === undefined || entry.kind !== \"external\") {\n      return new Response(\"Not Found\", { status: 404 });\n    }\n\n    const [{ join }, { resolvePublicFilePath, servePublicFile }] =\n      await Promise.all([import(\"node:path\"), import(\"./public-route.js\")]);\n    const viewRoot = join(projectRoot, VIEW_ASSETS_BUILD_ROOT, viewName);\n    const diskPath = await resolvePublicFilePath(viewRoot, subpath);\n    if (diskPath === null) {\n      return new Response(\"Not Found\", { status: 404 });\n    }\n    return await servePublicFile(\n      diskPath,\n      options?.deferCors === true ? { deferCors: true } : {}\n    );\n  };\n}\n\n/**\n * Fetch handler for public view assets under `${basePath}/_mcp-use/public/`.\n *\n * Public responses include `Access-Control-Allow-Origin: *` for\n * cross-origin sandboxed view iframes.\n *\n * Node filesystem modules load only on the first public-asset request so the\n * library entry stays edge-safe for `getHandler()`-only deployments.\n *\n * @param basePath - MCP mount prefix (e.g. `/mcp`).\n * @param views - Primed view registry; empty skips mounting.\n * @param options - When `dev` is true, the public route reads from\n *   `<projectRoot>/public` instead of `.mcp-use/build/views/public/`.\n *   `projectRoot` defaults to `process.cwd()`.\n *\n * @internal\n */\nexport function createViewPublicHandler(\n  basePath: string,\n  views: ReadonlyMap<string, ViewManifestEntry>,\n  options?: { dev?: boolean; projectRoot?: string; deferCors?: boolean }\n): FetchHandler | undefined {\n  if (views.size === 0) {\n    return undefined;\n  }\n\n  const publicPrefix = pathUnderBase(basePath, \"_mcp-use/public\");\n  const subdir = options?.dev === true ? PUBLIC_DEV_DIR : PUBLIC_BUILD_DIR;\n  const projectRoot = options?.projectRoot ?? process.cwd();\n\n  return async (request) => {\n    if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n      return new Response(\"Method Not Allowed\", { status: 405 });\n    }\n    if (!matchesPathPrefix(request, publicPrefix)) {\n      return new Response(\"Not Found\", { status: 404 });\n    }\n\n    const pathname = pathnameOf(request);\n    const subpath = pathname.slice(publicPrefix.length + 1);\n    if (subpath.length === 0) {\n      return new Response(\"Not Found\", { status: 404 });\n    }\n\n    const [{ join }, { resolvePublicFilePath, servePublicFile }] =\n      await Promise.all([import(\"node:path\"), import(\"./public-route.js\")]);\n    const publicRoot = join(projectRoot, subdir);\n    const diskPath = await resolvePublicFilePath(publicRoot, subpath);\n    if (diskPath === null) {\n      return new Response(\"Not Found\", { status: 404 });\n    }\n    return await servePublicFile(\n      diskPath,\n      options?.deferCors === true ? { deferCors: true } : {}\n    );\n  };\n}\n\n/**\n * @deprecated Use {@link createViewPublicHandler}.\n *\n * @internal\n */\nexport function mountViewRoutes(): void {\n  throw new Error(\n    \"mountViewRoutes(app) was removed — use createViewPublicHandler\"\n  );\n}\n","import type { MetaObject } from \"@modelcontextprotocol/server\";\n\nimport type { ViewManifestEntry, ViewResourceFacts } from \"./types.js\";\nimport {\n  UI_META_KEY,\n  UI_MIME_TYPE,\n  UI_RESOURCE_URI_META_KEY,\n  viewResourceUri,\n} from \"./constants.js\";\nimport { buildMergedResourceCsp, type BuildCspOptions } from \"./csp-env.js\";\nimport {\n  hasExplicitAssetsBase,\n  originFromAssetsBase,\n  resolveAssetsBase,\n  resolveServerOrigin,\n} from \"./origin.js\";\n\n/**\n * Tool declaration `_meta` for `tools/list`.\n *\n * When `viewName` is set, emits `ui.resourceUri` plus the legacy flat\n * {@link UI_RESOURCE_URI_META_KEY} key. When `visibility` is set, emits\n * `ui.visibility: [visibility]`. Either may be set independently — a\n * view-less tool can still declare app-only visibility. Returns `undefined`\n * only when no view, visibility, or existing metadata is provided.\n *\n * @param viewName - Bound view directory / manifest key, or `undefined` when\n * the tool has no view.\n * @param visibility - Optional model/app visibility narrowing from the tool\n * definition's top-level `visibility` field.\n * @param existingMetadata - Optional author-supplied definition metadata. Other\n * keys pass through, while framework-owned resource URI and visibility keys\n * are derived exclusively from `viewName` and `visibility`.\n * @returns Wire metadata for the tool listing, or `undefined` when there is\n * nothing to emit.\n */\nexport function buildToolUiMeta(\n  viewName: string | undefined,\n  visibility: \"model\" | \"app\" | undefined,\n  existingMetadata?: MetaObject\n): MetaObject | undefined {\n  if (\n    viewName === undefined &&\n    visibility === undefined &&\n    existingMetadata === undefined\n  ) {\n    return undefined;\n  }\n\n  const meta: MetaObject = { ...existingMetadata };\n  const existingUi = existingMetadata?.[UI_META_KEY];\n  const existingUiIsObject =\n    typeof existingUi === \"object\" &&\n    existingUi !== null &&\n    !Array.isArray(existingUi);\n  const ui: MetaObject = existingUiIsObject ? { ...existingUi } : {};\n\n  if (viewName !== undefined) {\n    const resourceUri = viewResourceUri(viewName);\n    ui[\"resourceUri\"] = resourceUri;\n    meta[UI_RESOURCE_URI_META_KEY] = resourceUri;\n  } else {\n    // These keys describe the top-level view contract. Do not advertise an\n    // author-supplied URI when the tool has no declared view.\n    delete ui[\"resourceUri\"];\n    delete meta[UI_RESOURCE_URI_META_KEY];\n  }\n\n  if (visibility !== undefined) {\n    ui[\"visibility\"] = [visibility];\n  } else {\n    // Visibility is likewise derived exclusively from the top-level field.\n    delete ui[\"visibility\"];\n  }\n\n  if (\n    viewName !== undefined ||\n    visibility !== undefined ||\n    existingUiIsObject\n  ) {\n    meta[UI_META_KEY] = ui;\n  }\n\n  return meta;\n}\n\n/**\n * Tool result `_meta` stamped on every non-error `CallToolResult` from a\n * view-bound tool.\n *\n * Emits the nested `ui.resourceUri` key and the legacy flat\n * {@link UI_RESOURCE_URI_META_KEY} key so hosts can open the bound view.\n * Error results (`isError: true`) must not receive this metadata — a\n * stamped URI would create a new rendered view through legacy host\n * behavior. Result `_meta` is view-only and never enters model context.\n *\n * @param viewName - Bound view directory / manifest key.\n * @returns Nested and legacy resource-URI wire keys.\n */\nexport function buildToolResultUiMeta(\n  viewName: string\n): Record<string, unknown> {\n  const resourceUri = viewResourceUri(viewName);\n  return {\n    [UI_META_KEY]: { resourceUri },\n    [UI_RESOURCE_URI_META_KEY]: resourceUri,\n  };\n}\n\n/**\n * Options for {@link buildResourceUiMeta}.\n *\n * @internal\n */\nexport interface BuildResourceUiMetaOptions {\n  /** Request used to resolve server/assets origins when not passed explicitly. */\n  request?: Request;\n  /** Explicit server origin (overrides request resolution). */\n  serverOrigin?: string;\n  /** Explicit assets URL prefix (overrides request resolution). */\n  assetsBase?: string;\n  /**\n   * When true, append the server origin's websocket variant to\n   * `csp.connectDomains` for Vite HMR under host-enforced CSP.\n   */\n  hmrWs?: boolean;\n}\n\nfunction resolveCspOptions(\n  options?: BuildResourceUiMetaOptions\n): BuildCspOptions {\n  const request = options?.request;\n  const serverOrigin =\n    options?.serverOrigin ??\n    (request !== undefined ? resolveServerOrigin(request) : \"\");\n  const assetsBase =\n    options?.assetsBase ??\n    (request !== undefined ? resolveAssetsBase(request) : serverOrigin);\n\n  return {\n    serverOrigin,\n    assetsOrigin: originFromAssetsBase(assetsBase),\n    explicitAssetsBase: hasExplicitAssetsBase(),\n    ...(options?.hmrWs === true ? { hmrWs: true as const } : {}),\n  };\n}\n\n/**\n * Resource `_meta.ui` for a primed view.\n *\n * Emits `csp` by merging author `view.csp`, env (`CSP_URLS` / `CSP_*_DOMAINS`),\n * and MCP auto-append (`MCP_URL` → connect; assets origin → resource).\n */\nexport function buildResourceUiMeta(\n  authorFacts: ViewResourceFacts | undefined,\n  options?: BuildResourceUiMetaOptions\n): Record<string, unknown> {\n  const csp = buildMergedResourceCsp(authorFacts, resolveCspOptions(options));\n\n  const ui: Record<string, unknown> = { csp };\n\n  if (authorFacts?.permissions !== undefined) {\n    ui[\"permissions\"] = authorFacts.permissions;\n  }\n  if (authorFacts?.domain !== undefined) {\n    ui[\"domain\"] = authorFacts.domain;\n  }\n  if (authorFacts?.prefersBorder !== undefined) {\n    ui[\"prefersBorder\"] = authorFacts.prefersBorder;\n  }\n\n  return { [UI_META_KEY]: ui };\n}\n\n/**\n * Listing metadata for a primed view resource.\n */\nexport function viewResourceConfig(\n  _viewName: string,\n  _entry: ViewManifestEntry,\n  authorFacts: ViewResourceFacts | undefined,\n  options?: BuildResourceUiMetaOptions\n): {\n  mimeType: string;\n  description?: string;\n  _meta: Record<string, unknown>;\n} {\n  return {\n    mimeType: UI_MIME_TYPE,\n    ...(authorFacts?.description !== undefined && {\n      description: authorFacts.description,\n    }),\n    _meta: buildResourceUiMeta(authorFacts, options),\n  };\n}\n","/**\n * `mcp-use` — MCP server framework on the official v2 SDK (fetch-native).\n *\n * Greenfield rebuild of the mcp-use server package against the stateless\n * 2026-07-28 MCP protocol. See specs/SPEC.md for the phase plan and API contract.\n */\n\nexport { MCPServer } from \"./server.js\";\nexport { createMcpMount } from \"./mount-mcp.js\";\nexport type { MountMcpOptions, McpMount } from \"./mount-mcp.js\";\nexport {\n  composeFetch,\n  getRequestBag,\n  hostValidationMiddleware,\n  jsonBodyMiddleware,\n  matchesPath,\n  matchesPathPrefix,\n  originValidationMiddleware,\n  pathnameOf,\n  routeFetch,\n  toFrameworkHandler,\n} from \"./fetch-app.js\";\nexport type {\n  FetchHandler,\n  FetchMiddleware,\n  FrameworkHandler,\n  FrameworkRequestLike,\n  RequestBag,\n} from \"./fetch-app.js\";\nexport { registerViews } from \"./views/index.js\";\nexport { requestLogger } from \"./logging.js\";\nexport type { LoggingOptions, LogLevel } from \"./logging.js\";\nexport type {\n  LandingPageOptions,\n  LandingPagePrompt,\n  LandingPageResource,\n  LandingPageTool,\n} from \"./landing.js\";\n\n/**\n * Wire result shapes (re-exported from the SDK): callbacks return these raw\n * shapes directly — tools return {@link CallToolResult}, resources\n * {@link ReadResourceResult}, prompts {@link GetPromptResult}. There is no\n * framework-specific result layer.\n */\nexport type {\n  CallToolResult,\n  ContentBlock,\n  GetPromptResult,\n  InputRequest,\n  InputRequiredResult,\n  InputResponses,\n  PromptMessage,\n  ReadResourceResult,\n} from \"@modelcontextprotocol/server\";\n/**\n * Official SDK descriptor metadata contracts. Tools use\n * {@link ToolAnnotations}; resources and resource templates use\n * {@link Annotations}; every descriptor's extension `_meta` uses\n * {@link MetaObject}.\n */\nexport type {\n  Annotations,\n  MetaObject,\n  ToolAnnotations,\n} from \"@modelcontextprotocol/server\";\n/**\n * Official SDK helpers for authoring and reading multi-round-trip\n * `input_required` results.\n */\nexport {\n  acceptedContent,\n  createRequestStateCodec,\n  inputRequired,\n  inputResponse,\n  isInputRequiredResult,\n} from \"@modelcontextprotocol/server\";\n\nexport { completable } from \"./completable.js\";\nexport type { CompletionCallback, CompletionContext } from \"./completable.js\";\n\n/**\n * Schema contracts accepted by `inputSchema`/`outputSchema` fields (re-exported\n * from the SDK): `StandardSchemaWithJSON` requires validation plus JSON\n * Schema conversion; `completable()` needs only `StandardSchemaV1`.\n * Implemented by zod v4, ArkType, Valibot, …\n */\nexport type {\n  StandardSchemaV1,\n  StandardSchemaWithJSON,\n} from \"@modelcontextprotocol/server\";\n\nexport type { InspectorOptions, ServerConfig, CorsOptions } from \"./config.js\";\nexport type {\n  MiddlewareContext,\n  McpCompleteEventListenerFn,\n  McpEventListenerFn,\n  McpMiddlewareFn,\n  McpMiddlewareFnFor,\n  McpMiddlewarePatternMap,\n  PromptsGetMiddlewareContext,\n  ResourcesReadMiddlewareContext,\n  ToolsCallMiddlewareContext,\n} from \"./middleware/mcp-middleware.js\";\nexport {\n  composeMiddleware,\n  matchesPattern,\n} from \"./middleware/mcp-middleware.js\";\nexport type { NodeRequestHandler } from \"./node-bridge.js\";\nexport type {\n  FromOpenAPIOptions,\n  OpenAPIAuth,\n  OpenAPIDocument,\n  OpenAPIExcludeRule,\n} from \"./openapi/index.js\";\nexport type {\n  Elicit,\n  ElicitationResult,\n  OAuthAuth,\n  RequestClientContext,\n  RequestContext,\n} from \"./context.js\";\nexport type {\n  InferToolInput,\n  InferToolName,\n  InferToolOutput,\n  ToolCallback,\n  ToolDefinition,\n  ToolRef,\n  ToolResult,\n  ToolViewConfig,\n} from \"./tools.js\";\nexport type {\n  ExternalViewManifestEntry,\n  InlineViewManifestEntry,\n  UiPermissions,\n  ViewManifestEntry,\n  ViewsManifest,\n} from \"./views/index.js\";\nexport type {\n  InferTemplateParams,\n  ResourceCallback,\n  ResourceDefinition,\n  ResourceTemplateCallback,\n  ResourceTemplateCompleter,\n  ResourceTemplateCompletions,\n  ResourceTemplateDefinition,\n  TemplateVariableValue,\n} from \"./resources.js\";\nexport type {\n  InferPromptInput,\n  PromptCallback,\n  PromptDefinition,\n} from \"./prompts.js\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb;AAAA,EACA;AAAA,OAOK;;;AC8NA,SAAS,mBAAmB,QAAsC;AACvE,MAAI,OAAO,aAAa,QAAW;AACjC,QAAI,OAAO,OAAO,aAAa,UAAU;AACvC,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAM,EAAE,SAAS,IAAI;AACrB,QACE,CAAC,SAAS,WAAW,GAAG,KACxB,SAAS,SAAS,GAAG,KACrB,SAAS,SAAS,GAAG,KACrB,KAAK,KAAK,QAAQ,KAClB,SAAS,SAAS,IAAI,KACrB,SAAS,SAAS,KAAK,SAAS,SAAS,GAAG,GAC7C;AACA,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AC/PA;AAAA,EACE,gCAAAA;AAAA,EACA;AAAA,EACA;AAAA,OAOK;;;ACVP;AAAA,EACE;AAAA,OAEK;;;ACFA,IAAM,kBAAkB;AAGxB,IAAM,eAAe;AAGrB,IAAM,yBAAyB;AAG/B,IAAM,cAAc;AAGpB,IAAM,2BAA2B;AAOjC,SAAS,gBAAgB,UAA0B;AACxD,SAAO,GAAG,sBAAsB,GAAG,QAAQ;AAC7C;;;ADdA,IAAM,8BAA8B,oBAAI,QAAqC;AAQtE,SAAS,wBACd,SACA,cACM;AACN,8BAA4B,IAAI,SAAS,YAAY;AACvD;AAqBO,SAAS,kCACd,MACgC;AAChC,MAAI,OAAO,SAAS,YAAY,SAAS,MAAM;AAC7C,WAAO;AAAA,EACT;AACA,QAAM,SAAU,KAAiC,QAAQ;AACzD,MAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AACjD,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,OAAmC,OAAO;AACxD,MAAI,OAAO,SAAS,YAAY,SAAS,MAAM;AAC7C,WAAO;AAAA,EACT;AACA,QAAM,eAAgB,KACpB,4BACF;AACA,MAAI,OAAO,iBAAiB,YAAY,iBAAiB,MAAM;AAC7D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAcO,SAAS,cACd,cACS;AACT,QAAM,aAAa,cAAc;AACjC,MAAI,eAAe,QAAW;AAC5B,WAAO;AAAA,EACT;AACA,QAAM,cAAc,WAAW,eAAe;AAC9C,MAAI,OAAO,gBAAgB,YAAY,gBAAgB,MAAM;AAC3D,WAAO;AAAA,EACT;AACA,QAAM,YAAa,YAAwC,WAAW;AACtE,MAAI,CAAC,MAAM,QAAQ,SAAS,GAAG;AAC7B,WAAO;AAAA,EACT;AACA,SAAO,UAAU,SAAS,YAAY;AACxC;;;ADmEA,SAAS,qBACP,UACgD;AAChD,MACE,aAAa,UACb,SAAS,UAAU,UACnB,SAAS,cAAc,QACvB;AACA,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AACF;AAEA,SAAS,gBAAgB,KAA0C;AACjE,QAAM,eAAe,IAAI,OAAO,WAAWC,6BAA4B;AACvE,SAAO;AAAA,IACL,gBAAyB;AACvB,aAAO,cAAc,YAAY;AAAA,IACnC;AAAA,EACF;AACF;AAEA,SAAS,aACP,gBACQ;AACR,SAAO,eAAe,OACpB,KACA,SACA,aACyD;AACzD,QAAI;AACJ,QAAI;AAEJ,QAAI,OAAO,gBAAgB,UAAU;AACnC,gBAAU,cAAc,UAAU;AAAA,QAChC;AAAA,QACA,KAAK;AAAA,MACP,CAAC;AAAA,IACH,WAAW,gBAAgB,QAAW;AACpC,mBAAa;AACb,gBAAU,cAAc,OAAO;AAAA,QAC7B;AAAA,QACA,iBAAiB;AAAA,MACnB,CAAC;AAAA,IACH,OAAO;AACL,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WAAW,cAAc,gBAAgB,GAAG;AAClD,QAAI,SAAS,SAAS,UAAU;AAC9B,UAAI,SAAS,WAAW,UAAU;AAChC,eAAO,EAAE,QAAQ,SAAS,OAAO;AAAA,MACnC;AACA,UAAI,eAAe,QAAW;AAC5B,eAAO,EAAE,QAAQ,SAAS;AAAA,MAC5B;AACA,UAAI,SAAS,YAAY,QAAW;AAClC,cAAM,UAAU,MAAM,WAAW,WAAW,EAAE;AAAA,UAC5C,SAAS;AAAA,QACX;AACA,YAAI,QAAQ,WAAW,QAAW;AAChC,iBAAO,EAAE,QAAQ,UAAU,MAAM,QAAQ,MAAM;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ,cAAc,EAAE,eAAe,EAAE,CAAC,GAAG,GAAG,QAAQ,EAAE,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAQO,SAAS,iBACd,KAC8B;AAC9B,QAAM,UAAU,IAAI,MAAM;AAC1B,SAAO;AAAA,IACL,QAAQ,IAAI,OAAO;AAAA,IACnB,GAAI,YAAY,UAAa,EAAE,QAAQ;AAAA,IACvC,GAAI,IAAI,OAAO,mBAAmB,UAAa;AAAA,MAC7C,gBAAgB,IAAI,OAAO;AAAA,IAC7B;AAAA,IACA,QAAQ,gBAAgB,GAAG;AAAA,IAC3B,QAAQ,aAAa,IAAI,OAAO,cAAc;AAAA,IAC9C,cAAc,MAAmB,IAAI,OAAO,aAAgB;AAAA,IAC5D,MAAM,eAAe,UAAU,OAAO,SAA2B;AAC/D,YAAM,gBAAgB,IAAI,OAAO,OAAO;AACxC,UAAI,kBAAkB,OAAW,QAAO;AACxC,YAAM,IAAI,OAAO,OAAO;AAAA,QACtB,QAAQ;AAAA,QACR,QAAQ;AAAA,UACN;AAAA,UACA;AAAA,UACA,GAAI,UAAU,UAAa,EAAE,MAAM;AAAA,UACnC,GAAI,YAAY,UAAa,EAAE,QAAQ;AAAA,QACzC;AAAA,MACF,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,MAAM,QAAQ,OAAO,MAAM,QAAuB;AAChD,YAAM,IAAI,OAAO,OAAO;AAAA,QACtB,QAAQ;AAAA,QACR,QAAQ;AAAA,UACN;AAAA,UACA;AAAA,UACA,GAAI,WAAW,UAAa,EAAE,OAAO;AAAA,QACvC;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAGO,SAAS,8BACd,KAC6B;AAC7B,QAAM,WAAW,IAAI,MAAM;AAC3B,uBAA4B,QAAQ;AACpC,SAAO;AAAA,IACL,GAAG,iBAAiB,GAAG;AAAA,IACvB,MAAM;AAAA,MACJ,MAAM,SAAS,MAAM;AAAA,MACrB,SAAS,SAAS,MAAM;AAAA,MACxB,aAAa,SAAS;AAAA,MACtB,QAAQ,CAAC,GAAG,SAAS,MAAM;AAAA,MAC3B,aAAa,CAAC,GAAG,SAAS,MAAM,WAAW;AAAA,MAC3C,GAAI,SAAS,SAAS,SAAS,KAAK,EAAE,UAAU,SAAS,SAAS;AAAA,MAClE,WAAW,SAAS;AAAA,MACpB,GAAI,SAAS,aAAa,UAAa,EAAE,UAAU,SAAS,SAAS;AAAA,IACvE;AAAA,EACF;AACF;;;AGxSA,IAAM,kBAAkB,CAAC,OAAO,QAAQ,QAAQ,SAAS;AACzD,IAAM,0BAA0B;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,qBACP,QACA,eACe;AACf,MAAI,WAAW,QAAW;AACxB,WAAO;AAAA,EACT;AACA,MAAI,OAAO,WAAW,YAAY;AAChC,WAAO,OAAO,aAAa;AAAA,EAC7B;AACA,MAAI,WAAW,KAAK;AAClB,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,QAAI,kBAAkB,QAAQ,OAAO,SAAS,aAAa,GAAG;AAC5D,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,YACP,SAIA,SACyB;AACzB,MAAI,QAAQ,QAAQ,IAAI,6BAA6B,GAAG;AACtD,WAAO;AAAA,EACT;AAEA,QAAM,gBAAgB,QAAQ,QAAQ,IAAI,QAAQ;AAClD,QAAM,gBAAgB,qBAAqB,QAAQ,QAAQ,aAAa;AACxE,MAAI,kBAAkB,MAAM;AAC1B,WAAO;AAAA,EACT;AAEA,QAAM,UAAkC;AAAA,IACtC,+BAA+B;AAAA,IAC/B,gCAAgC,QAAQ,QAAQ,KAAK,IAAI;AAAA,IACzD,gCAAgC,QAAQ,eAAe,KAAK,IAAI;AAAA,EAClE;AACA,MAAI,QAAQ,aAAa;AACvB,YAAQ,kCAAkC,IAAI;AAAA,EAChD;AACA,MAAI,kBAAkB,KAAK;AACzB,YAAQ,OAAO;AAAA,EACjB;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,UAAoB,SAAgC;AAC5E,MAAI,SAAS,QAAQ,IAAI,6BAA6B,GAAG;AACvD,WAAO;AAAA,EACT;AACA,QAAM,SAAS,IAAI,QAAQ,SAAS,OAAO;AAC3C,QAAMC,eAAc,IAAI,QAAQ,OAAO;AACvC,EAAAA,aAAY,QAAQ,CAAC,OAAO,QAAQ;AAClC,WAAO,IAAI,KAAK,KAAK;AAAA,EACvB,CAAC;AACD,SAAO,IAAI,SAAS,SAAS,MAAM;AAAA,IACjC,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS;AAAA,IACrB,SAAS;AAAA,EACX,CAAC;AACH;AAOO,SAAS,oBAAoB,SAAuC;AACzE,QAAM,UAAU,QAAQ,YAAY;AACpC,MAAI,CAAC,SAAS;AACZ,WAAO,OAAO,UAAU,SAAS,KAAK;AAAA,EACxC;AAEA,QAAM,WAAW;AAAA,IACf,GAAI,QAAQ,WAAW,UAAa,EAAE,QAAQ,QAAQ,OAAO;AAAA,IAC7D,SAAS,QAAQ,WAAW;AAAA,IAC5B,gBAAgB,QAAQ,kBAAkB;AAAA,IAC1C,aAAa,QAAQ,eAAe;AAAA,EACtC;AAEA,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,UAAU,YAAY,UAAU,OAAO;AAC7C,QAAI,YAAY,QAAW;AACzB,aAAO,KAAK;AAAA,IACd;AAEA,QAAI,QAAQ,WAAW,WAAW;AAChC,aAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,KAAK,QAAQ,CAAC;AAAA,IACpD;AAEA,UAAM,WAAW,MAAM,KAAK;AAC5B,WAAO,iBAAiB,UAAU,OAAO;AAAA,EAC3C;AACF;AAGO,SAAS,oBAAoB,MAAwC;AAC1E,SAAO,SAAS,UAAa,KAAK,YAAY;AAChD;;;ACmBO,SAAS,eAAe,SAAiB,QAAyB;AACvE,MAAI,YAAY,IAAK,QAAO;AAC5B,MAAI,QAAQ,SAAS,IAAI,GAAG;AAC1B,UAAM,SAAS,QAAQ,MAAM,GAAG,EAAE;AAClC,WAAO,OAAO,WAAW,MAAM;AAAA,EACjC;AACA,SAAO,YAAY;AACrB;AAUO,SAAS,kBACd,SACA,QACA,SAC8C;AAC9C,QAAM,WAAW,QAAQ,OAAO,CAAC,MAAM,eAAe,EAAE,SAAS,MAAM,CAAC;AAExE,MAAI,SAAS,WAAW,GAAG;AACzB,WAAO,CAAC,SAA4B,QAAQ;AAAA,EAC9C;AAEA,SAAO,CAAC,QAA2B;AACjC,QAAI,QAAQ;AAEZ,UAAM,WAAW,CAAC,MAAgC;AAChD,UAAI,KAAK,OAAO;AACd,eAAO,QAAQ,OAAO,IAAI,MAAM,8BAA8B,CAAC;AAAA,MACjE;AACA,cAAQ;AAER,UAAI,MAAM,SAAS,QAAQ;AACzB,eAAO,QAAQ;AAAA,MACjB;AAEA,YAAM,QAAQ,SAAS,CAAC;AACxB,aAAO,MAAM,QAAQ,KAAK,MAAM,SAAS,IAAI,CAAC,CAAC;AAAA,IACjD;AAEA,WAAO,SAAS,CAAC;AAAA,EACnB;AACF;AAGO,SAAS,wBACd,KAC6B;AAC7B,SAAO,OAAO,OAAO;AAAA,IACnB,QAAQ,IAAI;AAAA,IACZ,QAAQ,OAAO,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC;AAAA,IACvC,GAAI,IAAI,SAAS,UAAa,EAAE,MAAM,IAAI,KAAK;AAAA,IAC/C,OAAO,IAAI;AAAA,EACb,CAAC;AACH;AAOA,eAAsB,gBACpB,aACA,QACA,QACA,KACA,SACkB;AAClB,oBAAkB,QAAQ,QAAQ,UAAU,GAAG;AAE/C,QAAM,UAAU,kBAAkB,aAAa,QAAQ,OAAO;AAC9D,QAAM,SAAS,MAAM,QAAQ,GAAG;AAEhC,oBAAkB,QAAQ,QAAQ,YAAY,KAAK,MAAM;AACzD,SAAO;AACT;AAEA,SAAS,kBACP,QACA,QACA,OACA,KACA,QACM;AACN,QAAM,SAAS,wBAAwB,GAAG;AAC1C,aAAW,SAAS,QAAQ;AAC1B,QAAI,MAAM,UAAU,SAAS,CAAC,eAAe,MAAM,SAAS,MAAM,GAAG;AACnE;AAAA,IACF;AACA,QAAI;AACF,UAAI,UAAU,UAAU;AACtB,QAAC,MAAM,QAA+B,MAAM;AAAA,MAC9C,OAAO;AACL,QAAC,MAAM,QAAuC,QAAQ,MAAM;AAAA,MAC9D;AAAA,IACF,SAAS,OAAO;AACd,cAAQ;AAAA,QACN,qCAAqC,MAAM,OAAO,MAAM,KAAK;AAAA,QAC7D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAGO,SAAS,gBAAgB,KAG9B;AACA,QAAM,UAAU,IAAI,WAAW,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI;AACxD,MAAI,QAAQ,SAAS,WAAW,GAAG;AACjC,WAAO;AAAA,MACL,SAAS,QAAQ,MAAM,GAAG,CAAC,YAAY,MAAM;AAAA,MAC7C,OAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO,EAAE,SAAS,OAAO,SAAS;AACpC;AAGO,SAAS,8BAA8B,KAAqB;AACjE,SAAO,IAAI,WAAW,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI;AACjD;;;ACnPO,IAAM,gBAAgB;AAQtB,IAAM,+BAA+B,mDAAmD,aAAa;AAUrG,SAAS,mBAAmB,WAA2B;AAC5D,SAAO,UAAU,QAAQ,kBAAkB,MAAM;AACnD;AAGO,SAAS,8BAA8B,KAAsB;AAClE,SAAO,IAAI,WAAW,kDAAkD;AAC1E;AAGO,SAAS,uBAAuB,WAA2B;AAChE,MAAI,CAAC,8BAA8B,SAAS,EAAG,QAAO;AACtD,QAAM,MAAM,UAAU,SAAS,GAAG,IAAI,MAAM;AAC5C,SAAO,GAAG,SAAS,GAAG,GAAG,MAAM,OAAO,WAAW,CAAC;AACpD;AAGO,SAAS,0BACd,UACA,UACS;AACT,QAAM,SAAS,cAAc,UAAU,WAAW;AAClD,MAAI,aAAa,UAAU,CAAC,SAAS,WAAW,GAAG,MAAM,GAAG,GAAG;AAC7D,WAAO;AAAA,EACT;AACA,QAAM,SAAS,SAAS,MAAM,OAAO,MAAM;AAC3C,SAAO,WAAW,UAAU,CAAC,OAAO,WAAW,OAAO;AACxD;AAkBA,SAAS,WAAW,OAAuB;AACzC,SAAO,MACJ,WAAW,KAAK,OAAO,EACvB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,QAAQ,EACxB,WAAW,KAAK,OAAO;AAC5B;AASA,SAAS,yBAAyB,OAAuB;AACvD,SAAO,KAAK,UAAU,KAAK,EAAE,WAAW,KAAK,SAAS;AACxD;AAcO,SAAS,qBAAqB,SAAwC;AAC3E,QAAM,EAAE,YAAY,UAAU,WAAW,gBAAgB,IAAI;AAC7D,QAAM,qBAAqB,yBAAyB,QAAQ;AAC5D,QAAM,4BAA4B,kBAC9B,yBAAyB,eAAe,IACxC;AACJ,QAAM,SAAS,aAAa;AAC5B,QAAM,YAAY,uBAAuB,MAAM;AAC/C,QAAM,YAAY,WAAW,SAAS;AACtC,QAAM,aAAa,WAAW,mBAAmB,SAAS,CAAC;AAC3D,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA,aAKI,WAAW,UAAU,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mCAOA,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAUpB,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UASjC,4BAA4B,kCAAkC,yBAAyB,MAAM,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iCAoBxE,SAAS;AAAA;AAAA;AAAA;AAI1C;AASO,SAAS,uBACd,WACA,SAC0B;AAC1B,MAAI,WAAW,YAAY,OAAO;AAChC,WAAO;AAAA,EACT;AACA,QAAM,EAAE,WAAW,iBAAiB,iBAAiB,sBAAsB,IACzE,aAAa,CAAC;AAChB,QAAM,YACJ,mBAAmB,QAAQ,IAAI,8BAA8B,KAAK;AACpE,QAAM,kBACJ,yBAAyB,QAAQ,IAAI,mBAAmB,KAAK;AAC/D,QAAM,eAAsC;AAAA,IAC1C,YAAY,QAAQ;AAAA,IACpB,UAAU,QAAQ;AAAA,IAClB;AAAA,IACA;AAAA,EACF;AAEA,SAAO,OAAO,YAAY;AACxB,QAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,QAAQ;AACzD,aAAO,IAAI,SAAS,sBAAsB,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3D;AACA,UAAM,WAAW,IAAI,IAAI,QAAQ,GAAG,EAAE;AACtC,QAAI,CAAC,0BAA0B,UAAU,QAAQ,QAAQ,GAAG;AAC1D,aAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD;AACA,UAAM,OAAO,qBAAqB,YAAY;AAC9C,WAAO,IAAI,SAAS,QAAQ,WAAW,SAAS,OAAO,MAAM;AAAA,MAC3D,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,2BAA2B;AAAA,IACxD,CAAC;AAAA,EACH;AACF;;;ACpMA;AAAA,EACE;AAAA,EACA;AAAA,OAKK;AAiCP,SAAS,gBAAyB;AAChC,MAAI,OAAO,YAAY,YAAa,QAAO;AAC3C,MAAI,QAAQ,MAAM,UAAU,MAAM,OAAW,QAAO;AACpD,SAAO,QAAQ,QAAQ,UAAU;AACnC;AAIA,SAAS,KAAK,MAAc,OAAsB;AAChD,SAAO,CAAC,SACN,cAAc,IAAI,QAAU,IAAI,IAAI,IAAI,QAAU,KAAK,MAAM;AACjE;AAEA,IAAM,OAAO,KAAK,GAAG,EAAE;AACvB,IAAM,MAAM,KAAK,GAAG,EAAE;AACtB,IAAM,MAAM,KAAK,IAAI,EAAE;AACvB,IAAM,QAAQ,KAAK,IAAI,EAAE;AACzB,IAAM,SAAS,KAAK,IAAI,EAAE;AAC1B,IAAM,OAAO,KAAK,IAAI,EAAE;AACxB,IAAM,UAAU,KAAK,IAAI,EAAE;AAC3B,IAAM,OAAO,KAAK,IAAI,EAAE;AACxB,IAAM,OAAO,KAAK,IAAI,EAAE;AAUjB,SAAS,gBAAgB,YAAiC;AAC/D,QAAM,MACJ,OAAO,YAAY,cACf,SACA,QAAQ,MAAM,mBAAmB,GAAG,YAAY;AACtD,MAAI,QAAQ,UAAU,QAAQ,WAAW,QAAQ,QAAS,QAAO;AACjE,SAAO,cAAc;AACvB;AAuBA,SAAS,iBACP,MACoB;AACpB,MAAI,SAAS,OAAW,QAAO;AAC/B,SAAO,OAAO,KAAK,YAAY,YAAY,KAAK,YAAY,KACxD,GAAG,KAAK,IAAI,IAAI,KAAK,OAAO,KAC5B,KAAK;AACX;AAOA,IAAM,mBAEF;AAAA,EACF,YAAY,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,UAAU,EAAE;AAAA,EAC9D,MAAM,OAAO,CAAC;AAAA,EACd,mBAAmB,OAAO,CAAC;AAAA,EAC3B,uBAAuB,CAAC,OAAO;AAAA,IAC7B,SAAS,EAAE,IAAI,SAAS,eAAe,EAAE,IAAI,OAAO,EAAE,IAAI;AAAA,IAC1D,OAAO,EAAE;AAAA,EACX;AAAA,EACA,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM;AAAA,EAC/C,eAAe,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,EAAE,UAAU;AAAA,EAC7D,gBAAgB,OAAO,CAAC;AAAA,EACxB,kBAAkB,OAAO,CAAC;AAAA,EAC1B,4BAA4B,OAAO,CAAC;AAAA,EACpC,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI;AAAA,EAC3C,uBAAuB,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI;AAAA,EAChD,yBAAyB,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI;AAAA,EAClD,wBAAwB,OAAO,CAAC;AAAA,EAChC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,EAAE,UAAU;AAAA,EAC5D,cAAc,OAAO,CAAC;AAAA,EACtB,0BAA0B,OAAO,CAAC;AAAA,EAClC,sBAAsB,OAAO,CAAC;AAAA,EAC9B,cAAc,OAAO,CAAC;AACxB;AAEA,SAAS,cAAc,QAAyC;AAC9D,SAAO,OAAO,UAAU,eAAe,KAAK,kBAAkB,MAAM;AACtE;AAQA,SAAS,aAAa,SAAoC;AACxD,MAAI,CAAC,cAAc,QAAQ,MAAM,EAAG,QAAO,CAAC;AAC5C,MAAI;AACF,UAAM,YAAY,iBAAiB,QAAQ,MAAM;AAGjD,UAAM,SAAS,UAAU,QAAQ,MAAM;AACvC,WAAO,OAAO,OAAO,YAAY,YAAY,OAAO,YAAY,SAC5D,SACA,CAAC;AAAA,EACP,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAGA,IAAM,yBAAyB;AAM/B,SAAS,WAAW,OAAwB;AAC1C,MAAI;AACJ,MAAI;AACF,WAAO,KAAK,UAAU,KAAK,KAAK,OAAO,KAAK;AAAA,EAC9C,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACA,SAAO,KAAK,SAAS,yBACjB,GAAG,KAAK,MAAM,GAAG,sBAAsB,CAAC,QACxC;AACN;AAQA,SAAS,qBAAqB,SAA6C;AACzE,QAAM,OAAO,QAAQ,QAAQ;AAC7B,MAAI,SAAS,OAAW,QAAO;AAC/B,QAAM,OAAQ,KAAiC,oBAAoB;AACnE,MACE,OAAO,SAAS,YAChB,SAAS,QACT,OAAQ,KAAwB,SAAS,UACzC;AACA,WAAO;AAAA,EACT;AACA,SAAO,iBAAiB,IAAsB;AAChD;AAOA,SAAS,SAAS,MAAsB;AAEtC,SAAO,KAAK,QAAQ,kCAAkC,GAAG;AAC3D;AAGA,SAAS,YAAY,QAAuB;AAC1C,MAAI,OAAO,WAAW,QAAQ,EAAG,QAAO;AACxC,MAAI,OAAO,WAAW,YAAY,EAAG,QAAO;AAC5C,MAAI,OAAO,WAAW,UAAU,EAAG,QAAO;AAC1C,MAAI,WAAW,gBAAgB,WAAW,OAAQ,QAAO;AACzD,SAAO;AACT;AAOA,IAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGD,SAAS,cACP,SACwB;AACxB,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;AAAA,MAC7C;AAAA,MACA,iBAAiB,IAAI,KAAK,YAAY,CAAC,IAAI,eAAe;AAAA,IAC5D,CAAC;AAAA,EACH;AACF;AAiBA,eAAe,uBAAuB,KAAyC;AAC7E,MAAI,CAAC,IAAI,KAAM,QAAO,EAAE,cAAc,KAAK;AAE3C,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,MAAM,EAAE,KAAK;AAAA,EAChC,QAAQ;AACN,WAAO,EAAE,cAAc,KAAK;AAAA,EAC9B;AACA,MAAI,CAAC,KAAM,QAAO,EAAE,cAAc,KAAK;AAEvC,QAAM,SAAS,IAAI,QAAQ,IAAI,cAAc,KAAK,IAAI;AAAA,IACpD;AAAA,EACF;AACA,QAAM,WAAsB,CAAC;AAC7B,QAAM,WAAW,CAAC,QAAgB;AAChC,QAAI;AACF,eAAS,KAAK,KAAK,MAAM,GAAG,CAAC;AAAA,IAC/B,QAAQ;AAAA,IAER;AAAA,EACF;AACA,MAAI,OAAO;AACT,eAAW,QAAQ,KAAK,MAAM,OAAO,GAAG;AACtC,UAAI,KAAK,WAAW,OAAO,GAAG;AAC5B,cAAM,OAAO,KAAK,MAAM,CAAC,EAAE,KAAK;AAChC,YAAI,KAAM,UAAS,IAAI;AAAA,MACzB;AAAA,IACF;AAAA,EACF,OAAO;AACL,aAAS,IAAI;AAAA,EACf;AAEA,MAAI;AACJ,aAAW,WAAW,UAAU;AAC9B,QAAI,YAAY,QAAQ,OAAO,YAAY,SAAU;AACrD,UAAM,UAAU;AAIhB,QAAI,OAAO,QAAQ,OAAO,YAAY,UAAU;AAC9C,aAAO,EAAE,cAAc,QAAQ,MAAM,QAAQ;AAAA,IAC/C;AACA,QAAI,QAAQ,QAAQ,YAAY,MAAM;AACpC,YAAM,SAAS,MAAM,QAAQ,QAAQ,OAAO,OAAO,IAC9C,QAAQ,OAAO,UAChB,CAAC;AACL,YAAM,YAAY,OAAO;AAAA,QACvB,CAAC,MAAM,GAAG,SAAS,UAAU,OAAO,EAAE,SAAS;AAAA,MACjD;AACA,aAAO;AAAA,QACL,cAAc,YAAY,OAAO,UAAU,IAAI,IAAI;AAAA,MACrD;AAAA,IACF;AACA,QAAI,YAAY,QAAS,UAAS,QAAQ;AAAA,EAC5C;AACA,SAAO,EAAE,cAAc,MAAM,OAAO;AACtC;AAOA,SAAS,kBAAkB,QAA0B;AACnD,MAAI,WAAW,QAAQ,OAAO,WAAW,SAAU,QAAO;AAC1D,QAAM,EAAE,mBAAmB,QAAQ,IAAI;AAIvC,MAAI,sBAAsB,OAAW,QAAO;AAC5C,MAAI,MAAM,QAAQ,OAAO,GAAG;AAC1B,UAAM,CAAC,KAAK,IAAI;AAChB,QAAI,QAAQ,WAAW,KAAK,OAAO,SAAS,OAAQ,QAAO,MAAM;AAAA,EACnE;AACA,SAAO;AACT;AAOA,SAAS,cAAc,OAAwB;AAC7C,WAAS,SAAS,KAAuB;AACvC,QAAI,OAAO,QAAQ,YAAY,IAAI,SAAS,KAAK;AAC/C,aAAO,GAAG,IAAI,MAAM,GAAG,GAAG,CAAC;AAAA,IAC7B;AACA,QAAI,MAAM,QAAQ,GAAG,EAAG,QAAO,IAAI,IAAI,QAAQ;AAC/C,QAAI,QAAQ,QAAQ,OAAO,QAAQ,UAAU;AAC3C,aAAO,OAAO;AAAA,QACZ,OAAO,QAAQ,GAA8B,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM;AAAA,UAC7D;AAAA,UACA,SAAS,CAAC;AAAA,QACZ,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,KAAK,UAAU,SAAS,KAAK,GAAG,MAAM,CAAC;AAAA,EAChD,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEA,IAAM,uBAAuB;AAE7B,eAAe,eACb,UACA,gBACA,aACA,kBACe;AACf,UAAQ,IAAI;AAAA,EAAK,KAAK,IAAI,OAAO,EAAE,CAAC,CAAC,EAAE;AACvC,UAAQ,IAAI,KAAK,KAAK,yBAAyB,CAAC,CAAC;AACjD,UAAQ,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC,CAAC;AAEhC,MAAI,OAAO,KAAK,cAAc,EAAE,SAAS,GAAG;AAC1C,YAAQ,IAAI,OAAO,kBAAkB,CAAC;AACtC,YAAQ,IAAI,cAAc,cAAc,cAAc,CAAC,CAAC;AAAA,EAC1D;AACA,MAAI,gBAAgB,QAAW;AAC7B,YAAQ,IAAI,OAAO,eAAe,CAAC;AACnC,YAAQ;AAAA,MACN,OAAO,gBAAgB,WAAW,cAAc,cAAc,WAAW;AAAA,IAC3E;AAAA,EACF;AAEA,QAAM,kBAA0C,CAAC;AACjD,WAAS,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AACvC,oBAAgB,GAAG,IAAI;AAAA,EACzB,CAAC;AACD,MAAI,OAAO,KAAK,eAAe,EAAE,SAAS,GAAG;AAC3C,YAAQ,IAAI,OAAO,mBAAmB,CAAC;AACvC,YAAQ,IAAI,cAAc,cAAc,eAAe,CAAC,CAAC;AAAA,EAC3D;AAEA,MAAI,CAAC,kBAAkB;AACrB,YAAQ,IAAI,GAAG,OAAO,gBAAgB,CAAC,gCAA2B;AAAA,EACpE,WAAW,SAAS,SAAS,MAAM;AACjC,YAAQ,IAAI,GAAG,OAAO,gBAAgB,CAAC,YAAY;AAAA,EACrD,OAAO;AACL,QAAI;AACF,YAAM,OAAO,MAAM,SAAS,MAAM,EAAE,KAAK;AACzC,UAAI,KAAK,WAAW,GAAG;AACrB,gBAAQ,IAAI,GAAG,OAAO,gBAAgB,CAAC,UAAU;AAAA,MACnD,OAAO;AACL,gBAAQ,IAAI,OAAO,gBAAgB,CAAC;AACpC,YAAI;AACF,kBAAQ,IAAI,cAAc,KAAK,MAAM,IAAI,CAAC,CAAC;AAAA,QAC7C,QAAQ;AACN,kBAAQ;AAAA,YACN,KAAK,SAAS,uBACV,GAAG,KAAK,MAAM,GAAG,oBAAoB,CAAC;AAAA,kBACpC,KAAK,SAAS,oBAChB,sBACA;AAAA,UACN;AAAA,QACF;AAAA,MACF;AAAA,IACF,QAAQ;AACN,cAAQ,IAAI,GAAG,OAAO,gBAAgB,CAAC,mBAAmB;AAAA,IAC5D;AAAA,EACF;AAEA,UAAQ,IAAI,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC,CAAC;AAAA,CAAI;AACzC;AAOA,SAAS,YAAY,QAAwB;AAC3C,QAAM,OAAO,OAAO,MAAM;AAC1B,MAAI,UAAU,IAAK,QAAO,QAAQ,IAAI;AACtC,MAAI,UAAU,IAAK,QAAO,IAAI,IAAI;AAClC,MAAI,UAAU,IAAK,QAAO,OAAO,IAAI;AACrC,SAAO,MAAM,IAAI;AACnB;AAMA,SAAS,eAAe,YAAoB,UAA2B;AACrE,MAAI,eAAe,SAAS,eAAe,OAAQ,QAAO;AAC1D,SAAO,SAAS,SAAS,YAAY,KAAK,SAAS,SAAS,cAAc;AAC5E;AAOO,SAAS,cAAc,UAA0B,CAAC,GAAoB;AAC3E,MAAI,QAAQ,YAAY,OAAO;AAC7B,WAAO,CAAC,UAAU,SAAS,KAAK;AAAA,EAClC;AACA,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,QAAQ,gBAAgB,QAAQ,KAAK;AAC3C,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,aAAa,QAAQ;AAC3B,UAAM,WAAW,IAAI,IAAI,QAAQ,GAAG,EAAE;AAEtC,QAAI,eAAe,YAAY,QAAQ,GAAG;AACxC,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,iBAAyC,CAAC;AAChD,QAAI,UAAU,SAAS;AACrB,cAAQ,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AACtC,uBAAe,GAAG,IAAI;AAAA,MACxB,CAAC;AAAA,IACH;AAEA,QAAI;AACJ,QAAI,eAAe,SAAS,eAAe,QAAQ;AACjD,YAAM,aAAa,cAAc,OAAO,EAAE;AAC1C,UAAI,eAAe,QAAW;AAC5B,sBAAc;AAAA,MAChB,OAAO;AACL,YAAI;AACF,wBAAc,MAAM,QAAQ,MAAM,EAAE,KAAK;AAAA,QAC3C,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,KAAK;AAE5B,UAAM,aAAa,KAAK,IAAI,IAAI;AAChC,UAAM,aAAY,oBAAI,KAAK,GAAE,YAAY,EAAE,UAAU,IAAI,EAAE;AAC3D,UAAM,aAAa,iBAAiB,WAAW,IAAI,cAAc;AACjE,UAAM,oBAAoB,YAAY,WAAW;AAEjD,UAAM,QAAkB;AAAA,MACtB;AAAA,QACE,IAAI,SAAS;AAAA,QACb,KAAK,UAAU;AAAA,QACf;AAAA,QACA,YAAY,SAAS,MAAM;AAAA,QAC3B,IAAI,MAAM,UAAU,IAAI;AAAA,MAC1B,EAAE,KAAK,GAAG;AAAA,IACZ;AAEA,QAAI,eAAe,QAAW;AAC5B,YAAM,SAAS,SAAS,WAAW,MAAM;AACzC,YAAM,QAAkB,CAAC,KAAK,YAAY,MAAM,EAAE,MAAM,CAAC,EAAE;AAC3D,YAAM,SAAS,aAAa,UAAU;AACtC,UAAI,OAAO,YAAY,QAAW;AAChC,cAAM,KAAK,KAAK,SAAS,OAAO,OAAO,CAAC,CAAC;AAAA,MAC3C;AACA,YAAM,eAAe,UAAU;AAC/B,UAAI,gBAAgB,OAAO,UAAU,QAAW;AAC9C,cAAM,KAAK,WAAW,OAAO,KAAK,CAAC;AAAA,MACrC;AACA,YAAM,UAA2B,oBAC7B,EAAE,cAAc,KAAK,IACrB,MAAM,uBAAuB,QAAQ;AACzC,UACE,gBACA,WAAW,WAAW,gBACtB,QAAQ,iBAAiB,QACzB,QAAQ,WAAW,QACnB;AACA,cAAM,KAAK,IAAI,IAAI,GAAG,WAAW,kBAAkB,QAAQ,MAAM,CAAC,CAAC;AAAA,MACrE;AACA,UAAI,WAAW,WAAW,cAAc;AACtC,cAAM,SAAS,qBAAqB,UAAU;AAC9C,YAAI,WAAW,OAAW,OAAM,KAAK,IAAI,SAAS,MAAM,CAAC,CAAC;AAAA,MAC5D;AACA,UAAI,QAAQ,iBAAiB,MAAM;AACjC,cAAM,KAAK,IAAI,SAAS,SAAS,QAAQ,YAAY,CAAC,EAAE,CAAC;AAAA,MAC3D,WAAW,SAAS,UAAU,KAAK;AACjC,cAAM,KAAK,IAAI,eAAe,SAAS,MAAM,GAAG,CAAC;AAAA,MACnD;AACA,YAAM,KAAK,MAAM,KAAK,GAAG,CAAC;AAAA,IAC5B;AAEA,YAAQ,IAAI,MAAM,KAAK,IAAI,CAAC;AAE5B,QAAI,UAAU,SAAS;AACrB,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AACF;;;AC1kBA;AAAA,EACE;AAAA,OAKK;AAqDA,SAAS,eACd,SACA,UAA2B,CAAC,GAClB;AACV,QAAM;AAAA,IACJ,OAAO;AAAA,IACP,SAAS;AAAA,IACT,UAAU;AAAA,EACZ,IAAI;AACJ,QAAM,aAAa,gBAAgB,UAAU;AAC7C,QAAM,UAAU,iBAAiB,SAAS;AAAA,IACxC,QAAQ;AAAA,IACR,GAAG;AAAA,EACL,CAAC;AAED,QAAM,QAAsB,OAAO,YAAY;AAC7C,QAAI,CAAC,YAAY,SAAS,IAAI,GAAG;AAC/B,aAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD;AAIA,QAAI,eAAe,aAAa;AAC9B,YAAM,SAAS,QAAQ,OAAO,YAAY;AAC1C,UAAI,WAAW,SAAS,WAAW,YAAY,WAAW,QAAQ;AAChE,eAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,MAAM,cAAc,OAAO;AACjC,QAAI,aAAa,IAAI;AACrB,QAAI,eAAe,QAAW;AAC5B,UAAI;AACF,qBAAa,MAAM,QAAQ,MAAM,EAAE,KAAK;AAAA,MAC1C,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,eAAe,kCAAkC,UAAU;AACjE,QAAI,iBAAiB,QAAW;AAC9B,8BAAwB,SAAS,YAAY;AAAA,IAC/C;AAEA,UAAM,WAAW,cAAc,OAAO,KAAK,IAAI;AAC/C,WAAO,QAAQ,MAAM,SAAS;AAAA,MAC5B,GAAI,eAAe,UAAa,EAAE,WAAW;AAAA,MAC7C,GAAI,aAAa,UAAa,EAAE,SAAS;AAAA,IAC3C,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,SAAS,MAAM;AAC1B;;;ACsEO,SAAS,uBACd,YACoC;AACpC,SAAO,WAAW,eAAe,WAAW;AAC9C;;;ACjLO,IAAM,gBAA+B,uBAAO,uBAAuB;;;ACE1E,IAAM,eAA4C;AAAA,EAChD,gBAAgB;AAAA,EAChB,iBAAiB;AAAA,EACjB,cAAc;AAAA,EACd,gBAAgB;AAClB;AAGO,SAAS,gBAAgB,KAAmC;AACjE,MAAI,QAAQ,UAAa,IAAI,KAAK,MAAM,IAAI;AAC1C,WAAO,CAAC;AAAA,EACV;AACA,SAAO,IACJ,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;AAC/B;AAEA,SAAS,eAAe,MAAoC;AAC1D,MAAI,OAAO,YAAY,aAAa;AAClC,WAAO;AAAA,EACT;AACA,QAAM,MAAM,QAAQ,IAAI,IAAI;AAC5B,MAAI,QAAQ,UAAa,IAAI,KAAK,MAAM,IAAI;AAC1C,WAAO;AAAA,EACT;AACA,SAAO,gBAAgB,GAAG;AAC5B;AAGO,SAAS,sBAAgC;AAC9C,SAAO,eAAe,UAAU,KAAK,CAAC;AACxC;AAGO,SAAS,0BAA0B,UAAiC;AACzE,QAAM,cAAc,eAAe,aAAa,QAAQ,CAAC;AACzD,MAAI,gBAAgB,QAAW;AAC7B,WAAO;AAAA,EACT;AACA,SAAO,oBAAoB;AAC7B;AAKO,SAAS,oBAAoB,UAAgC;AAClE,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,MAAgB,CAAC;AACvB,aAAW,WAAW,UAAU;AAC9B,eAAW,UAAU,SAAS;AAC5B,UAAI,CAAC,KAAK,IAAI,MAAM,GAAG;AACrB,aAAK,IAAI,MAAM;AACf,YAAI,KAAK,MAAM;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAkBA,SAAS,kBAAkB,cAA8B;AACvD,MAAI,aAAa,WAAW,UAAU,GAAG;AACvC,WAAO,SAAS,aAAa,MAAM,WAAW,MAAM,CAAC;AAAA,EACvD;AACA,MAAI,aAAa,WAAW,SAAS,GAAG;AACtC,WAAO,QAAQ,aAAa,MAAM,UAAU,MAAM,CAAC;AAAA,EACrD;AACA,SAAO;AACT;AAQO,SAAS,uBACd,aACA,SACkB;AAClB,QAAM,SAAS,aAAa;AAE5B,QAAM,iBAA2B,CAAC;AAClC,MAAI,QAAQ,iBAAiB,IAAI;AAC/B,mBAAe,KAAK,QAAQ,YAAY;AACxC,QAAI,QAAQ,UAAU,MAAM;AAC1B,qBAAe,KAAK,kBAAkB,QAAQ,YAAY,CAAC;AAAA,IAC7D;AAAA,EACF;AAEA,QAAM,kBAA4B,CAAC;AACnC,QAAM,iBAAiB,QAAQ,qBAC3B,QAAQ,eACR,QAAQ;AACZ,MAAI,mBAAmB,IAAI;AACzB,oBAAgB,KAAK,cAAc;AAAA,EACrC;AAEA,QAAM,iBAAiB;AAAA,IACrB,QAAQ,kBAAkB,CAAC;AAAA,IAC3B,0BAA0B,gBAAgB;AAAA,IAC1C;AAAA,EACF;AAEA,QAAM,kBAAkB;AAAA,IACtB,QAAQ,mBAAmB,CAAC;AAAA,IAC5B,0BAA0B,iBAAiB;AAAA,IAC3C;AAAA,EACF;AAEA,QAAM,eAAe;AAAA,IACnB,QAAQ,gBAAgB,CAAC;AAAA,IACzB,0BAA0B,cAAc;AAAA,EAC1C;AAEA,QAAM,iBAAiB;AAAA,IACrB,QAAQ,kBAAkB,CAAC;AAAA,IAC3B,0BAA0B,gBAAgB;AAAA,EAC5C;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;;;ACjJA,IAAM,mBAAmB;AACzB,IAAM,iBAAiB;AACvB,IAAM,yBAAyB;AAcxB,SAAS,wBACd,UACA,OACA,SAC0B;AAC1B,MAAI,MAAM,SAAS,GAAG;AACpB,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,cAAc,UAAU,gBAAgB;AAC7D,QAAM,cAAc,SAAS,eAAe,QAAQ,IAAI;AAExD,SAAO,OAAO,YAAY;AACxB,QAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,QAAQ;AACzD,aAAO,IAAI,SAAS,sBAAsB,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3D;AACA,QAAI,CAAC,kBAAkB,SAAS,YAAY,GAAG;AAC7C,aAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD;AAEA,UAAM,WAAW,WAAW,OAAO;AACnC,UAAM,YAAY,SAAS,MAAM,aAAa,SAAS,CAAC;AACxD,UAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,QAAI,SAAS,KAAK,UAAU,UAAU,SAAS,GAAG;AAChD,aAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD;AAEA,UAAM,WAAW,UAAU,MAAM,GAAG,KAAK;AACzC,UAAM,UAAU,UAAU,MAAM,QAAQ,CAAC;AACzC,UAAM,QAAQ,MAAM,IAAI,QAAQ;AAChC,QAAI,UAAU,UAAa,MAAM,SAAS,YAAY;AACpD,aAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD;AAEA,UAAM,CAAC,EAAE,KAAK,GAAG,EAAE,uBAAuB,gBAAgB,CAAC,IACzD,MAAM,QAAQ,IAAI,CAAC,OAAO,MAAW,GAAG,OAAO,4BAAmB,CAAC,CAAC;AACtE,UAAM,WAAW,KAAK,aAAa,wBAAwB,QAAQ;AACnE,UAAM,WAAW,MAAM,sBAAsB,UAAU,OAAO;AAC9D,QAAI,aAAa,MAAM;AACrB,aAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD;AACA,WAAO,MAAM;AAAA,MACX;AAAA,MACA,SAAS,cAAc,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;AAAA,IACvD;AAAA,EACF;AACF;AAmBO,SAAS,wBACd,UACA,OACA,SAC0B;AAC1B,MAAI,MAAM,SAAS,GAAG;AACpB,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,cAAc,UAAU,iBAAiB;AAC9D,QAAM,SAAS,SAAS,QAAQ,OAAO,iBAAiB;AACxD,QAAM,cAAc,SAAS,eAAe,QAAQ,IAAI;AAExD,SAAO,OAAO,YAAY;AACxB,QAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,QAAQ;AACzD,aAAO,IAAI,SAAS,sBAAsB,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3D;AACA,QAAI,CAAC,kBAAkB,SAAS,YAAY,GAAG;AAC7C,aAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD;AAEA,UAAM,WAAW,WAAW,OAAO;AACnC,UAAM,UAAU,SAAS,MAAM,aAAa,SAAS,CAAC;AACtD,QAAI,QAAQ,WAAW,GAAG;AACxB,aAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD;AAEA,UAAM,CAAC,EAAE,KAAK,GAAG,EAAE,uBAAuB,gBAAgB,CAAC,IACzD,MAAM,QAAQ,IAAI,CAAC,OAAO,MAAW,GAAG,OAAO,4BAAmB,CAAC,CAAC;AACtE,UAAM,aAAa,KAAK,aAAa,MAAM;AAC3C,UAAM,WAAW,MAAM,sBAAsB,YAAY,OAAO;AAChE,QAAI,aAAa,MAAM;AACrB,aAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD;AACA,WAAO,MAAM;AAAA,MACX;AAAA,MACA,SAAS,cAAc,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;AAAA,IACvD;AAAA,EACF;AACF;;;AC5FO,SAAS,gBACd,UACA,YACA,kBACwB;AACxB,MACE,aAAa,UACb,eAAe,UACf,qBAAqB,QACrB;AACA,WAAO;AAAA,EACT;AAEA,QAAM,OAAmB,EAAE,GAAG,iBAAiB;AAC/C,QAAM,aAAa,mBAAmB,WAAW;AACjD,QAAM,qBACJ,OAAO,eAAe,YACtB,eAAe,QACf,CAAC,MAAM,QAAQ,UAAU;AAC3B,QAAM,KAAiB,qBAAqB,EAAE,GAAG,WAAW,IAAI,CAAC;AAEjE,MAAI,aAAa,QAAW;AAC1B,UAAM,cAAc,gBAAgB,QAAQ;AAC5C,OAAG,aAAa,IAAI;AACpB,SAAK,wBAAwB,IAAI;AAAA,EACnC,OAAO;AAGL,WAAO,GAAG,aAAa;AACvB,WAAO,KAAK,wBAAwB;AAAA,EACtC;AAEA,MAAI,eAAe,QAAW;AAC5B,OAAG,YAAY,IAAI,CAAC,UAAU;AAAA,EAChC,OAAO;AAEL,WAAO,GAAG,YAAY;AAAA,EACxB;AAEA,MACE,aAAa,UACb,eAAe,UACf,oBACA;AACA,SAAK,WAAW,IAAI;AAAA,EACtB;AAEA,SAAO;AACT;AAeO,SAAS,sBACd,UACyB;AACzB,QAAM,cAAc,gBAAgB,QAAQ;AAC5C,SAAO;AAAA,IACL,CAAC,WAAW,GAAG,EAAE,YAAY;AAAA,IAC7B,CAAC,wBAAwB,GAAG;AAAA,EAC9B;AACF;AAqBA,SAAS,kBACP,SACiB;AACjB,QAAM,UAAU,SAAS;AACzB,QAAM,eACJ,SAAS,iBACR,YAAY,SAAY,oBAAoB,OAAO,IAAI;AAC1D,QAAM,aACJ,SAAS,eACR,YAAY,SAAY,kBAAkB,OAAO,IAAI;AAExD,SAAO;AAAA,IACL;AAAA,IACA,cAAc,qBAAqB,UAAU;AAAA,IAC7C,oBAAoB,sBAAsB;AAAA,IAC1C,GAAI,SAAS,UAAU,OAAO,EAAE,OAAO,KAAc,IAAI,CAAC;AAAA,EAC5D;AACF;AAQO,SAAS,oBACd,aACA,SACyB;AACzB,QAAM,MAAM,uBAAuB,aAAa,kBAAkB,OAAO,CAAC;AAE1E,QAAM,KAA8B,EAAE,IAAI;AAE1C,MAAI,aAAa,gBAAgB,QAAW;AAC1C,OAAG,aAAa,IAAI,YAAY;AAAA,EAClC;AACA,MAAI,aAAa,WAAW,QAAW;AACrC,OAAG,QAAQ,IAAI,YAAY;AAAA,EAC7B;AACA,MAAI,aAAa,kBAAkB,QAAW;AAC5C,OAAG,eAAe,IAAI,YAAY;AAAA,EACpC;AAEA,SAAO,EAAE,CAAC,WAAW,GAAG,GAAG;AAC7B;AAKO,SAAS,mBACd,WACA,QACA,aACA,SAKA;AACA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,GAAI,aAAa,gBAAgB,UAAa;AAAA,MAC5C,aAAa,YAAY;AAAA,IAC3B;AAAA,IACA,OAAO,oBAAoB,aAAa,OAAO;AAAA,EACjD;AACF;;;AdLO,IAAM,YAAN,MAAM,WAAyB;AAAA,EAC3B;AAAA,EACA,SAAS,oBAAI,IAA8B;AAAA,EAC3C,aAAa,oBAAI,IAAkC;AAAA,EACnD,qBAAqB,oBAAI,IAA0C;AAAA,EACnE,WAAW,oBAAI,IAAgC;AAAA,EAC/C,SAAS,oBAAI,IAA+B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM5C,gBAAgB,oBAAI,IAM3B;AAAA,EACF,eAAe;AAAA;AAAA,EAEf,gBAAgB;AAAA;AAAA,EAEhB,oBAAoB,QAAQ,IAAI;AAAA,EAEhC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,yBAAyB;AAAA,EACzB,oCAAoC;AAAA;AAAA,EAEpC,iBAAiB;AAAA,EACR,kBAAwC,CAAC;AAAA,EACzC,qBAA8C,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsBxD,OAAO,YAAY,SAAwC;AACzD,UAAM,SAAS,IAAI,WAAU;AAAA,MAC3B,MAAM,QAAQ,QAAQ,QAAQ,KAAK,KAAK;AAAA,MACxC,SAAS,QAAQ,WAAW,QAAQ,KAAK,KAAK,WAAW;AAAA,IAC3D,CAAC;AACD,yBAAqB,QAAQ,OAAO;AACpC,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,YAAY,QAA6B;AACvC,uBAAmB,MAAM;AACzB,SAAK,UAAU;AACf,QAAI,OAAO,UAAU,QAAW;AAC9B,YAAM,SACJ,OAAO,YAAY,cAAc,SAAY,QAAQ,IAAI,SAAS;AACpE,YAAM,WAAW,+BAA+B;AAAA,QAC9C,UAAU,OAAO;AAAA,QACjB,UAAU,KAAK,UAAU;AAAA,QACzB,GAAI,WAAW,UAAa,EAAE,OAAO;AAAA,MACvC,CAAC;AACD,WAAK,iBAAiB;AACtB,WAAK,yBAAyB,aAAa;AAC3C,WAAK,oCAAoC,aAAa;AAAA,IACxD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,IAAI,WAAmB;AACrB,WAAO,KAAK,UAAU;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,KACE,YACA,UAMkE;AAClE,SAAK,kBAAkB,QAAQ,WAAW,IAAI;AAC9C,SAAK,yBAAyB,UAAU;AACxC,SAAK,OAAO,IAAI,WAAW,MAAM;AAAA,MAC/B;AAAA,MACA;AAAA,IAMF,CAAC;AACD,WAAO,OAAO,OAAO;AAAA,MACnB,MAAM,WAAW;AAAA,IACnB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,CAAC,aAAa,EACZ,OACA,SACM;AACN,QAAI,KAAK,cAAc;AACrB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,SAAK,kBAAkB,SAAS,UAAU;AAC1C,SAAK,gBAAgB,SAAS,QAAQ;AACtC,QAAI,SAAS,gBAAgB,QAAW;AACtC,WAAK,oBAAoB,QAAQ;AAAA,IACnC;AACA,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AACjD,WAAK,OAAO,IAAI,MAAM,KAAK;AAAA,IAC7B;AACA,SAAK,eAAe;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,aACE,OACA,SACM;AACN,SAAK,aAAa,EAAE,OAAO,OAAO;AAAA,EACpC;AAAA;AAAA,EAGA,SACE,YACA,UACM;AACN,SAAK,kBAAkB,YAAY,WAAW,IAAI;AAClD,SAAK,WAAW,IAAI,WAAW,MAAM,EAAE,YAAY,SAAS,CAAC;AAC7D,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,iBACE,YACA,UAKM;AACN,SAAK,kBAAkB,oBAAoB,WAAW,IAAI;AAC1D,UAAM,WACJ,WAAW,aAAa,SACpB,SACA,qBAAqB,WAAW,QAAQ;AAC9C,SAAK,mBAAmB,IAAI,WAAW,MAAM;AAAA,MAC3C;AAAA,MACA,GAAI,aAAa,UAAa,EAAE,SAAS;AAAA,MACzC;AAAA,IAKF,CAAC;AACD,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,OACE,YACA,UACM;AACN,SAAK,kBAAkB,UAAU,WAAW,IAAI;AAChD,SAAK,SAAS,IAAI,WAAW,MAAM;AAAA,MACjC;AAAA,MACA;AAAA,IAKF,CAAC;AACD,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,WAAW,UAAoC,CAAC,GAAqB;AACnE,UAAM,EAAE,MAAM,IAAI,KAAK,eAAe,WAAW,QAAW,QAAQ,GAAG;AACvE,WAAO,mBAAmB,KAAK;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,iBAA8C;AAClD,UAAM,EAAE,MAAM,IAAI,KAAK,eAAe,SAAS;AAC/C,UAAM,EAAE,cAAc,IAAI,MAAM,OAAO,kBAAkB;AACzD,WAAO,cAAc,EAAE,MAAM,CAAC;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,IACE,SACA,SACM;AACN,SAAK,kBAAkB,cAAc,OAAO;AAC5C,SAAK,gBAAgB,KAAK;AAAA,MACxB,SAAS,8BAA8B,OAAO;AAAA,MAC9C;AAAA,IACF,CAAC;AACD,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,GACE,SACA,SAGM;AACN,SAAK,kBAAkB,kBAAkB,OAAO;AAChD,UAAM,EAAE,SAAS,UAAU,MAAM,IAAI,gBAAgB,OAAO;AAC5D,SAAK,mBAAmB,KAAK;AAAA,MAC3B,SAAS;AAAA,MACT;AAAA,MACA;AAAA,IACF,CAAC;AACD,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,qBAAoC;AACxC,UAAM,KAAK,eAAe,SAAS,EAAE,QAAQ,OAAO,aAAa;AAAA,EACnE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,uBAAsC;AAC1C,UAAM,KAAK,eAAe,SAAS,EAAE,QAAQ,OAAO,eAAe;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,yBAAwC;AAC5C,UAAM,KAAK,eAAe,SAAS,EAAE,QAAQ,OAAO,iBAAiB;AAAA,EACvE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,sBAAsB,KAA4B;AACtD,UAAM,KAAK,eAAe,SAAS,EAAE,QAAQ,OAAO,gBAAgB,GAAG;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAqBA,MAAM,OAAO,OAAO,KAA8C;AAChE,SAAK,gCAAgC;AACrC,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,MAAW;AACjD,UAAM,EAAE,cAAc,IAAI,MAAM,OAAO,kBAAkB;AACzD,UAAM,OAAO,KAAK,QAAQ,QAAQ;AAElC,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAI;AACJ,UAAI;AACJ,YAAM,aAAa,IAAI;AAAA,QACrB,CAAC,qBAAqB,uBAAuB;AAC3C,yBAAe;AACf,wBAAc;AAAA,QAChB;AAAA,MACF;AACA,WAAK,WAAW,MAAM,MAAM,MAAS;AAErC,UAAI,UAAU;AACd,YAAM,iBAAiB,CAAC,UAAmB;AACzC,YAAI,CAAC,SAAS;AACZ,oBAAU;AACV,iBAAO,KAAK;AAAA,QACd;AACA,sBAAc,KAAK;AACnB,aAAK,IAAI;AAAA,UAAc,CAAC,iBACtB,OAAO,MAAM,MAAM,aAAa,CAAC;AAAA,QACnC,EACG,MAAM,MAAM,MAAS,EACrB,QAAQ,MAAM;AACb,cAAI,KAAK,gBAAgB,QAAQ;AAC/B,iBAAK,cAAc;AAAA,UACrB;AAAA,QACF,CAAC;AAAA,MACL;AAEA,YAAM,cAAc,cAAc;AAAA,QAChC,OAAO,OAAO,aAAa,MAAM,YAAY,OAAO;AAAA,MACtD,CAAC;AACD,YAAM,SAAS,aAAa,CAAC,KAAK,QAAQ;AACxC,aAAK,YAAY,KAAK,GAAG;AAAA,MAC3B,CAAC;AAED,aAAO,KAAK,SAAS,cAAc;AACnC,aAAO,OAAO,MAAM,MAAM,MAAM;AAC9B,YAAI;AACF,gBAAM,UAAU,OAAO,QAAQ;AAC/B,gBAAM,YACJ,OAAO,YAAY,YAAY,YAAY,OACvC,QAAQ,OACR;AACN,gBAAM,EAAE,MAAM,IAAI,KAAK,eAAe,UAAU,SAAS;AACzD,yBAAe,KAAK;AACpB,cAAI,CAAC,SAAS;AACZ,sBAAU;AACV,oBAAQ;AAAA,cACN,MAAM;AAAA,cACN,KAAK,oBAAoB,SAAS,GAAG,KAAK,UAAU,CAAC;AAAA,YACvD,CAAC;AAAA,UACH;AAAA,QACF,SAAS,OAAO;AACd,yBAAe,KAAK;AAAA,QACtB;AAAA,MACF,CAAC;AACD,WAAK,cAAc;AAAA,IACrB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,QAAuB;AAC3B,UAAM,KAAK,UAAU,MAAM;AAC3B,UAAM,aAAa,KAAK;AACxB,QAAI,eAAe,QAAW;AAC5B,YAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,mBAAW,MAAM,CAAC,QAAS,MAAM,OAAO,GAAG,IAAI,QAAQ,CAAE;AAAA,MAC3D,CAAC;AACD,WAAK,cAAc;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,YAAoB;AAClB,WAAO,KAAK,QAAQ,YAAY;AAAA,EAClC;AAAA,EAEA,sBACE,MACA,YACiB;AACjB,QAAI,KAAK,QAAQ,UAAU,QAAW;AACpC,aAAO;AAAA,IACT;AACA,QAAI,KAAK,wBAAwB;AAC/B,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,OAAO,KAAK,QAAQ,QAAQ;AAClC,UAAM,cACJ,SAAS,YACT,eAAe,UACf,CAAC,aAAa,aAAa,KAAK,EAAE,SAAS,IAAI;AACjD,QAAI,KAAK,qCAAqC,aAAa;AACzD,WAAK,iBAAiB;AAAA,QACpB,oBAAoB,UAAU;AAAA,QAC9B,KAAK,UAAU;AAAA,MACjB;AACA,WAAK,yBAAyB;AAC9B,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA,EAEA,kCAAwC;AACtC,QAAI,KAAK,QAAQ,UAAU,QAAW;AACpC;AAAA,IACF;AACA,UAAM,OAAO,KAAK,QAAQ,QAAQ;AAClC,QAAI,CAAC,aAAa,aAAa,KAAK,EAAE,SAAS,IAAI,GAAG;AACpD;AAAA,IACF;AACA,QAAI,CAAC,KAAK,wBAAwB;AAGhC,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,kBAAkB,MAAc,MAAoB;AAClD,QAAI,KAAK,aAAa,QAAW;AAC/B,YAAM,IAAI;AAAA,QACR,mBAAmB,IAAI,KAAK,IAAI;AAAA,MAGlC;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,kBAAkB,MAGhB;AACA,UAAM,EAAE,OAAO,aAAa,cAAc,eAAe,IAAI,KAAK;AAClE,UAAM,gBAAgB,CAAC,aAAa,aAAa,KAAK,EAAE,SAAS,IAAI;AACrE,UAAM,QACJ,iBAAiB,SACb,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,0BAA0B,GAAG,GAAG,YAAY,CAAC,CAAC,IAC9D,SAAS,YAAY,gBACnB,0BAA0B,IAC1B;AACR,UAAM,UACJ,mBAAmB,SACf,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,wBAAwB,GAAG,GAAG,cAAc,CAAC,CAAC,IAC9D;AACN,WAAO,EAAE,OAAO,QAAQ;AAAA,EAC1B;AAAA,EAEA,eACE,MACA,YACA,KAIA;AACA,QAAI,KAAK,kBAAkB,UAAa,KAAK,aAAa,QAAW;AACnE,YAAM,EAAE,OAAO,QAAQ,IAAI,KAAK,kBAAkB,IAAI;AACtD,YAAM,WAAW,KAAK,UAAU;AAChC,YAAM,iBAAiB,aAAa,MAAM,KAAK;AAC/C,YAAM,cAAc;AAAA,QAClB,mBAAmB;AAAA,QACnB,cAAc,KAAK,QAAQ,OAAO;AAAA,MACpC;AAEA,YAAM,aAAa,KAAK,QAAQ;AAChC,UAAI,eAAe,QAAW;AAC5B,oBAAY,QAAQ,oBAAoB,UAAU,CAAC;AAAA,MACrD;AACA,YAAM,gBAAgB,oBAAoB,UAAU;AAEpD,UAAI,UAAU,QAAW;AACvB,oBAAY,QAAQ,yBAAyB,KAAK,CAAC;AACnD,oBAAY,KAAK,2BAA2B,WAAW,KAAK,CAAC;AAAA,MAC/D,OAAO;AACL,YAAI,YAAY,QAAW;AACzB,sBAAY,KAAK,2BAA2B,OAAO,CAAC;AAAA,QACtD;AACA,YAAI,SAAS,UAAU;AACrB,kBAAQ;AAAA,YACN,oCAAoC,KAAK,QAAQ,IAAI;AAAA,UAIvD;AAAA,QACF;AAAA,MACF;AAEA,WAAK,6BAA6B;AAElC,YAAM,WAAW,KAAK,sBAAsB,MAAM,UAAU;AAC5D,UAAI,aAAa,QAAW;AAC1B,cAAM,WAAW,KAAK,QAAQ;AAC9B,oBAAY,KAAK,cAAc,UAAU,QAAQ,CAAC;AAAA,MACpD;AAEA,YAAM,EAAE,SAAS,OAAO,SAAS,IAAI;AAAA,QACnC,CAAC,QAAQ,KAAK,gBAAgB,GAAG;AAAA,QACjC;AAAA,UACE,MAAM;AAAA,UACN,IAAK,KAAK,QAAQ,WAAW,UAAa,QAAQ,WAAc;AAAA,YAC9D,SAAS;AAAA,cACP,GAAI,KAAK,QAAQ,WAAW,UAAa;AAAA,gBACvC,QAAQ,KAAK,QAAQ;AAAA,cACvB;AAAA,cACA,GAAI,QAAQ,UAAa,EAAE,IAAI;AAAA,YACjC;AAAA,UACF;AAAA,UACA,GAAI,aAAa,UAAa;AAAA,YAC5B,UAAU,CAAC,YAAY,oBAAoB,OAAO;AAAA,UACpD;AAAA,QACF;AAAA,MACF;AAEA,UAAI,oBAGqB,OAAO,UAAU,SAAS,KAAK;AACxD,UAAI,aAAa,QAAW;AAC1B,cAAM,WAAW,KAAK,QAAQ;AAC9B,cAAM,kBAAkB,wBAAwB,QAAQ;AACxD,cAAM,OAAO,kBAAkB;AAAA,UAC7B,UAAU,uBAAuB,UAAU,QAAQ;AAAA,UACnD,qBAAqB,qCAAqC,QAAQ;AAAA,UAClE,GAAI,gBAAgB,mBAAmB,UAAa;AAAA,YAClD,gBAAgB,gBAAgB;AAAA,UAClC;AAAA,QACF,CAAC;AACD,4BAAoB,OAAO,SAAS,SAAS;AAC3C,gBAAM,SAAS,MAAM,KAAK,OAAO;AACjC,cAAI,kBAAkB,UAAU;AAC9B,mBAAO;AAAA,UACT;AACA,gBAAM,MAAM,cAAc,OAAO;AACjC,cAAI,WAAW;AACf,iBAAO,KAAK;AAAA,QACd;AAAA,MACF;AAEA,YAAM,kBAAgC,CAAC,YACrC,kBAAkB,SAAS,MAAM,SAAS,OAAO,CAAC;AACpD,YAAM,kBAAgC,OAAO,YAAY;AACvD,YAAI,CAAC,wBAAwB,OAAO,GAAG;AACrC,iBAAO,gBAAgB,OAAO;AAAA,QAChC;AACA,cAAM,UAAU,YAA+B;AAC7C,gBAAM,EAAE,0BAA0B,IAChC,MAAM,OAAO,+BAAsB;AACrC,iBAAO;AAAA,YACL;AAAA,YACA;AAAA,YACA,KAAK;AAAA,YACL,KAAK,OAAO,OAAO;AAAA,YACnB,KAAK,SAAS,OAAO;AAAA,YACrB,KAAK,WAAW,OAAO;AAAA,UACzB;AAAA,QACF;AACA,YAAI,aAAa,UAAa,KAAK,QAAQ,sBAAsB,MAAM;AACrE,iBAAO,kBAAkB,SAAS,OAAO;AAAA,QAC3C;AACA,eAAO,QAAQ;AAAA,MACjB;AAEA,YAAM,SAGD,CAAC;AAEN,YAAM,cAAc,wBAAwB,UAAU,KAAK,QAAQ;AAAA,QACjE,KAAK,KAAK;AAAA,QACV,aAAa,KAAK;AAAA,QAClB,WAAW;AAAA,MACb,CAAC;AACD,UAAI,gBAAgB,QAAW;AAC7B,eAAO,KAAK;AAAA,UACV,OAAO,CAAC,YACN,QAAQ,WAAW,SAAS,QAAQ,WAAW,SAC3C,IAAI,IAAI,QAAQ,GAAG,EAAE,SAAS;AAAA,YAC5B,GAAG,cAAc;AAAA,UACnB,IACA;AAAA,UACN,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAEA,UAAI,CAAC,KAAK,eAAe;AACvB,cAAM,oBAAoB;AAAA,UACxB;AAAA,UACA,KAAK;AAAA,UACL,EAAE,aAAa,KAAK,mBAAmB,WAAW,cAAc;AAAA,QAClE;AACA,YAAI,sBAAsB,QAAW;AACnC,iBAAO,KAAK;AAAA,YACV,OAAO,CAAC,YACN,QAAQ,WAAW,SAAS,QAAQ,WAAW,SAC3C,IAAI,IAAI,QAAQ,GAAG,EAAE,SAAS;AAAA,cAC5B,GAAG,cAAc;AAAA,YACnB,IACA;AAAA,YACN,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,MACF;AAEA,YAAM,mBAAmB,uBAAuB,KAAK,QAAQ,WAAW;AAAA,QACtE,YAAY,KAAK,QAAQ;AAAA,QACzB;AAAA,MACF,CAAC;AACD,UAAI,qBAAqB,QAAW;AAClC,eAAO,KAAK;AAAA,UACV,OAAO,CAAC,YAAY;AAClB,gBAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,QAAQ;AACzD,qBAAO;AAAA,YACT;AACA,kBAAM,WAAW,IAAI,IAAI,QAAQ,GAAG,EAAE;AACtC,mBAAO,0BAA0B,UAAU,QAAQ;AAAA,UACrD;AAAA,UACA,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAEA,aAAO,KAAK;AAAA,QACV,OAAO,CAAC,YAAY,YAAY,SAAS,QAAQ;AAAA,QACjD,SAAS;AAAA,MACX,CAAC;AAED,YAAM,WAAW,WAAW,MAAM;AAClC,WAAK,gBAAgB,aAAa,UAAU,GAAG,WAAW;AAC1D,WAAK,WAAW;AAChB,WAAK,iBAAiB,UAAU;AAAA,IAClC,WAAW,QAAQ,UAAa,KAAK,SAAS,QAAQ,KAAK;AACzD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF,WACE,SAAS,YACT,CAAC,KAAK,kBACN,KAAK,kBAAkB,QAAQ,EAAE,UAAU,QAC3C;AACA,YAAM,IAAI;AAAA,QACR;AAAA,MAGF;AAAA,IACF;AACA,WAAO,EAAE,OAAO,KAAK,eAAe,SAAS,KAAK,SAAS;AAAA,EAC7D;AAAA,EAEA,yBAAyB,YAAkC;AACzD,UAAM,OAAO,WAAW;AACxB,QAAI,SAAS,QAAW;AACtB;AAAA,IACF;AACA,QAAI,WAAW,iBAAiB,QAAW;AACzC,YAAM,IAAI;AAAA,QACR,SAAS,WAAW,IAAI,oBAAoB,KAAK,IAAI;AAAA,MAGvD;AAAA,IACF;AAEA,UAAM,WAAW,KAAK,cAAc,IAAI,KAAK,IAAI;AACjD,QAAI,aAAa,QAAW;AAC1B,YAAM,IAAI;AAAA,QACR,SAAS,KAAK,IAAI,+BAA+B,SAAS,QAAQ,YACvD,WAAW,IAAI;AAAA,MAE5B;AAAA,IACF;AAEA,SAAK,cAAc,IAAI,KAAK,MAAM;AAAA,MAChC,UAAU,WAAW;AAAA,MACrB,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAAA,EAEA,+BAAqC;AACnC,QAAI,KAAK,cAAc,OAAO,KAAK,CAAC,KAAK,cAAc;AACrD,YAAM,QAAQ,CAAC,GAAG,KAAK,OAAO,OAAO,CAAC,EAAE;AAAA,QACtC,CAAC,UAAU,MAAM,WAAW,SAAS;AAAA,MACvC;AACA,YAAM,WAAW,OAAO,WAAW,MAAM,QAAQ;AACjD,YAAM,IAAI;AAAA,QACR,SAAS,OAAO,WAAW,QAAQ,SAAS,uBAAuB,QAAQ;AAAA,MAG7E;AAAA,IACF;AAEA,eAAW,SAAS,KAAK,OAAO,OAAO,GAAG;AACxC,YAAM,WAAW,MAAM,WAAW,MAAM;AACxC,UAAI,aAAa,UAAa,CAAC,KAAK,OAAO,IAAI,QAAQ,GAAG;AACxD,cAAM,IAAI;AAAA,UACR,SAAS,MAAM,WAAW,IAAI,uBAAuB,QAAQ;AAAA,QAG/D;AAAA,MACF;AAAA,IACF;AAEA,eAAW,YAAY,KAAK,OAAO,KAAK,GAAG;AACzC,UAAI,CAAC,KAAK,cAAc,IAAI,QAAQ,GAAG;AACrC,gBAAQ;AAAA,UACN,mBAAmB,QAAQ;AAAA,QAC7B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,gBAAgB,KAAsC;AACpD,UAAM,EAAE,MAAM,SAAS,OAAO,aAAa,aAAa,IAAI,KAAK;AACjE,UAAM,WAAW,IAAI;AACrB,UAAM,SAAS,IAAI;AAAA,MACjB;AAAA,QACE;AAAA,QACA;AAAA,QACA,GAAI,UAAU,UAAa,EAAE,MAAM;AAAA,QACnC,GAAI,gBAAgB,UAAa,EAAE,YAAY;AAAA,MACjD;AAAA,MACA;AAAA,QACE,cAAc;AAAA,UACZ,OAAO,EAAE,aAAa,KAAK;AAAA,UAC3B,SAAS,EAAE,aAAa,KAAK;AAAA,UAC7B,WAAW,EAAE,aAAa,MAAM,WAAW,KAAK;AAAA,QAClD;AAAA,QACA,GAAI,iBAAiB,UAAa,EAAE,aAAa;AAAA,QACjD,GAAI,aAAa,UAAa,EAAE,SAAS;AAAA,QACzC,GAAI,KAAK,QAAQ,iBAAiB,UAAa;AAAA,UAC7C,cAAc,KAAK,QAAQ;AAAA,QAC7B;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAU,IAAI;AACpB,UAAM,kBACJ,YAAY,SACR,EAAE,SAAS,OAAO,KAAK,cAAc,IACrC,EAAE,OAAO,KAAK,cAAc;AAClC,UAAM,WAAW,KAAK,UAAU;AAEhC,eAAW,SAAS,KAAK,OAAO,OAAO,GAAG;AACxC,WAAK,cAAc,QAAQ,KAAK;AAAA,IAClC;AACA,eAAW,SAAS,KAAK,WAAW,OAAO,GAAG;AAC5C,WAAK,kBAAkB,QAAQ,KAAK;AAAA,IACtC;AACA,eAAW,SAAS,KAAK,mBAAmB,OAAO,GAAG;AACpD,WAAK,0BAA0B,QAAQ,KAAK;AAAA,IAC9C;AACA,eAAW,SAAS,KAAK,SAAS,OAAO,GAAG;AAC1C,WAAK,gBAAgB,QAAQ,KAAK;AAAA,IACpC;AACA,eAAW,CAAC,UAAU,SAAS,KAAK,KAAK,OAAO,QAAQ,GAAG;AACzD,WAAK;AAAA,QACH;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,SAAK,kBAAkB,MAAM;AAC7B,WAAO;AAAA,EACT;AAAA,EAEA,yBACE,QACA,QACA,KACmB;AACnB,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,GAAI,IAAI,MAAM,aAAa,UAAa,EAAE,MAAM,IAAI,KAAK,SAAS;AAAA,MAClE,OAAO,oBAAI,IAAI;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,YACE,QACA,KACA,SACkB;AAClB,WAAO;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,kBAAkB,QAA4B;AAK5C,UAAM,WACJ,OAAO,OAGP;AACF,QAAI,aAAa,QAAW;AAC1B;AAAA,IACF;AAEA,UAAM,iBAAiB,CACrB,QACA,cACG;AACH,YAAM,WAAW,SAAS,IAAI,MAAM;AACpC,UAAI,aAAa,QAAW;AAC1B;AAAA,MACF;AACA,UAAK,SAA4C,kBAAkB;AACjE;AAAA,MACF;AAEA,YAAM,UAAU,OAAO,SAAkB,UAAmB;AAC1D,cAAM,WACJ,OACC,MAAM;AACT,cAAM,QAA2B;AAAA,UAC/B;AAAA,UACA,QAAQ,CAAC;AAAA,UACT,GAAI,aAAa,UAAa,EAAE,MAAM,SAAS;AAAA,UAC/C,OAAO,oBAAI,IAAI;AAAA,QACjB;AACA,cAAM,UAAU,YAAY;AAC1B,gBAAM,SAAU,MAAM,SAAS,SAAS,KAAK;AAI7C,iBAAO,OAAO,SAAS,KAAK;AAAA,QAC9B;AACA,cAAM,WAAW,MAAM,KAAK,YAAY,QAAQ,OAAO,OAAO;AAC9D,YAAI,MAAM,QAAQ,QAAQ,GAAG;AAC3B,iBAAO,EAAE,CAAC,SAAS,GAAG,SAAS;AAAA,QACjC;AACA,eAAO;AAAA,MACT;AACA,MAAC,QAA2C,mBAAmB;AAC/D,eAAS,IAAI,QAAQ,OAAO;AAAA,IAC9B;AAEA,mBAAe,cAAc,OAAO;AACpC,mBAAe,kBAAkB,WAAW;AAC5C,mBAAe,gBAAgB,SAAS;AAAA,EAC1C;AAAA,EAEA,cACE,QACA,EAAE,YAAY,SAAS,GACjB;AACN,UAAM,OAAO,WAAW;AAExB,UAAM,WAAW;AAAA,MACf,MAAM;AAAA,MACN,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AACA,UAAM,SAAS;AAAA,MACb,GAAI,WAAW,UAAU,UAAa,EAAE,OAAO,WAAW,MAAM;AAAA,MAChE,GAAI,WAAW,gBAAgB,UAAa;AAAA,QAC1C,aAAa,WAAW;AAAA,MAC1B;AAAA,MACA,GAAI,WAAW,gBAAgB,UAAa;AAAA,QAC1C,aAAa,WAAW;AAAA,MAC1B;AAAA,MACA,GAAI,WAAW,iBAAiB,UAAa;AAAA,QAC3C,cAAc,WAAW;AAAA,MAC3B;AAAA,MACA,GAAI,aAAa,UAAa,EAAE,OAAO,SAAS;AAAA,IAClD;AACA,UAAM,iBACJ,SAAS,SAAY,sBAAsB,KAAK,IAAI,IAAI;AAE1D,UAAM,cAAc,uBAAuB,UAAU;AAErD,UAAM,aAAa,OACjB,MACA,QACG;AACH,YAAM,QAAQ,KAAK;AAAA,QACjB;AAAA,QACA,EAAE,MAAM,WAAW,MAAM,WAAW,KAAK;AAAA,QACzC;AAAA,MACF;AACA,YAAM,UAAU,YAAY;AAC1B,cAAM,gBAAiB,MAAM,OAAO,aAAa,CAAC;AAIlD,cAAM,SAAS,MAAM;AAAA,UACnB;AAAA,UACA,KAAK,kBAAkB,GAAG;AAAA,QAC5B;AACA,YACE,sBAAsB,MAAM,KAC5B,mBAAmB,UACnB,OAAO,YAAY,MACnB;AACA,iBAAO;AAAA,QACT;AACA,eAAO;AAAA,UACL,GAAG;AAAA,UACH,OAAO,EAAE,GAAG,OAAO,OAAO,GAAG,eAAe;AAAA,QAC9C;AAAA,MACF;AACA,aAAQ,MAAM,KAAK,YAAY,cAAc,OAAO,OAAO;AAAA,IAG7D;AAEA,QAAI,gBAAgB,QAAW;AAC7B,aAAO;AAAA,QACL,WAAW;AAAA,QACX,EAAE,GAAG,QAAQ,YAAY;AAAA,QACzB,OAAO,MAAM,QAAQ,WAAW,MAAiC,GAAG;AAAA,MACtE;AAAA,IACF,OAAO;AACL,aAAO;AAAA,QAAa,WAAW;AAAA,QAAM;AAAA,QAAQ,OAAO,QAClD,WAAW,CAAC,GAAG,GAAG;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,sBACE,QACA,UACA,OACA,aACA,UACM;AACN,UAAM,MAAM,gBAAgB,QAAQ;AACpC,UAAM,cAAc,KAAK;AAAA,MACvB,KAAK,cAAc,IAAI,QAAQ,GAAG;AAAA,IACpC;AACA,UAAM,iBAAiB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,SAAS,QAAQ;AACtB,cAAM,MAAM,IAAI,MAAM;AACtB,cAAM,cACJ,QAAQ,SACJ;AAAA,UACE,SAAS;AAAA,UACT,GAAI,YAAY,UAAU,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;AAAA,QACtD,IACA,YAAY,UAAU,OACpB,EAAE,OAAO,KAAK,IACd,CAAC;AACT,cAAM,aACJ,QAAQ,SACJ,kBAAkB,GAAG,IACrB,YAAY,YAAY,SACtB,kBAAkB,YAAY,OAAO,IACrC;AACR,cAAM,OAAO;AAAA,UACX;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,eAAO;AAAA,UACL,UAAU;AAAA,YACR;AAAA,cACE,KAAK,QAAQ;AAAA,cACb,UAAU,eAAe;AAAA,cACzB,MAAM;AAAA,cACN,OAAO,oBAAoB,aAAa,WAAW;AAAA,YACrD;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,kBACE,QACA,EAAE,YAAY,SAAS,GACjB;AACN,WAAO;AAAA,MACL,WAAW;AAAA,MACX,WAAW;AAAA,MACX;AAAA,QACE,GAAI,WAAW,UAAU,UAAa,EAAE,OAAO,WAAW,MAAM;AAAA,QAChE,GAAI,WAAW,gBAAgB,UAAa;AAAA,UAC1C,aAAa,WAAW;AAAA,QAC1B;AAAA,QACA,GAAI,WAAW,aAAa,UAAa;AAAA,UACvC,UAAU,WAAW;AAAA,QACvB;AAAA,QACA,GAAI,WAAW,gBAAgB,UAAa;AAAA,UAC1C,aAAa,WAAW;AAAA,QAC1B;AAAA,QACA,GAAI,WAAW,UAAU,UAAa;AAAA,UACpC,OAAO,EAAE,GAAG,WAAW,MAAM;AAAA,QAC/B;AAAA,MACF;AAAA,MACA,OAAO,KAAK,QAAQ;AAClB,cAAM,QAAQ,KAAK;AAAA,UACjB;AAAA,UACA,EAAE,KAAK,IAAI,KAAK;AAAA,UAChB;AAAA,QACF;AACA,cAAM,UAAU,YAAY,SAAS,KAAK,KAAK,kBAAkB,GAAG,CAAC;AACrE,eAAQ,MAAM,KAAK;AAAA,UACjB;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,0BACE,QACA,EAAE,YAAY,UAAU,SAAS,GAC3B;AACN,UAAM,WAAW,IAAI,iBAAiB,WAAW,aAAa;AAAA,MAC5D,MAAM;AAAA,MACN,GAAI,aAAa,UAAa,EAAE,SAAS;AAAA,IAC3C,CAAC;AACD,WAAO;AAAA,MACL,WAAW;AAAA,MACX;AAAA,MACA;AAAA,QACE,GAAI,WAAW,UAAU,UAAa,EAAE,OAAO,WAAW,MAAM;AAAA,QAChE,GAAI,WAAW,gBAAgB,UAAa;AAAA,UAC1C,aAAa,WAAW;AAAA,QAC1B;AAAA,QACA,GAAI,WAAW,aAAa,UAAa;AAAA,UACvC,UAAU,WAAW;AAAA,QACvB;AAAA,QACA,GAAI,WAAW,gBAAgB,UAAa;AAAA,UAC1C,aAAa,WAAW;AAAA,QAC1B;AAAA,QACA,GAAI,WAAW,UAAU,UAAa;AAAA,UACpC,OAAO,EAAE,GAAG,WAAW,MAAM;AAAA,QAC/B;AAAA,MACF;AAAA,MACA,OAAO,KAAK,WAAW,QAAQ;AAC7B,cAAM,QAAQ,KAAK;AAAA,UACjB;AAAA,UACA,EAAE,KAAK,IAAI,KAAK;AAAA,UAChB;AAAA,QACF;AACA,cAAM,UAAU,YACd;AAAA,UACE;AAAA,UACA;AAAA,UACA,KAAK,kBAAkB,GAAG;AAAA,QAC5B;AACF,eAAQ,MAAM,KAAK;AAAA,UACjB;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,mBACE,YAC+B;AAC/B,QAAI,eAAe,QAAW;AAC5B,aAAO;AAAA,IACT;AACA,WAAO;AAAA,MACL,GAAI,WAAW,gBAAgB,UAAa;AAAA,QAC1C,aAAa,WAAW;AAAA,MAC1B;AAAA,MACA,GAAI,WAAW,QAAQ,UAAa,EAAE,KAAK,WAAW,IAAI;AAAA,MAC1D,GAAI,WAAW,gBAAgB,UAAa;AAAA,QAC1C,aAAa,WAAW;AAAA,MAC1B;AAAA,MACA,GAAI,WAAW,WAAW,UAAa,EAAE,QAAQ,WAAW,OAAO;AAAA,MACnE,GAAI,WAAW,kBAAkB,UAAa;AAAA,QAC5C,eAAe,WAAW;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,gBACE,QACA,EAAE,YAAY,SAAS,GACjB;AACN,UAAM,SAAS;AAAA,MACb,GAAI,WAAW,UAAU,UAAa,EAAE,OAAO,WAAW,MAAM;AAAA,MAChE,GAAI,WAAW,gBAAgB,UAAa;AAAA,QAC1C,aAAa,WAAW;AAAA,MAC1B;AAAA,IACF;AACA,UAAM,eAAe,OACnB,MACA,QACG;AACH,YAAM,QAAQ,KAAK;AAAA,QACjB;AAAA,QACA,EAAE,MAAM,WAAW,MAAM,WAAW,KAA+B;AAAA,QACnE;AAAA,MACF;AACA,YAAM,UAAU,YAAY;AAC1B,cAAM,gBAAiB,MAAM,OAAO,aAAa,CAAC;AAIlD,eAAO,SAAS,eAAe,KAAK,kBAAkB,GAAG,CAAC;AAAA,MAC5D;AACA,aAAQ,MAAM,KAAK,YAAY,eAAe,OAAO,OAAO;AAAA,IAG9D;AAEA,QAAI,WAAW,WAAW,QAAW;AACnC,aAAO;AAAA,QACL,WAAW;AAAA,QACX,EAAE,GAAG,QAAQ,YAAY,WAAW,OAAO;AAAA,QAC3C,OAAO,MAAM,QAAQ,aAAa,MAAiC,GAAG;AAAA,MACxE;AAAA,IACF,OAAO;AACL,YAAM,UAAU,OAAO,QAAuB,aAAa,CAAC,GAAG,GAAG;AAClE,aAAO;AAAA,QACL,WAAW;AAAA,QACX;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,kBACE,KACwC;AACxC,QAAI,KAAK,QAAQ,UAAU,QAAW;AACpC,aAAO,iBAAiB,GAAG;AAAA,IAC7B;AACA,WAAO,8BAAqC,GAAG;AAAA,EAIjD;AACF;;;Ael5CA;AAAA,EACE;AAAA,EACA;AAAA,EACA,iBAAAC;AAAA,EACA,iBAAAC;AAAA,EACA,yBAAAC;AAAA,OACK;","names":["CLIENT_CAPABILITIES_META_KEY","CLIENT_CAPABILITIES_META_KEY","corsHeaders","inputRequired","inputResponse","isInputRequiredResult"]}

package/dist/inspector-shell.d.ts

@@ -1,87 +0,0 @@
-/**
- * Inspector CDN shell — the FastAPI `/docs` analog.
- *
- * The server ships no inspector code: it serves a tiny self-contained HTML
- * page whose `<script type="module">` loads the `@mcp-use/inspector` CDN
- * bundle entry (`dist/cdn/inspector.js`) plus lazy chunks, pinned to a major
- * version so the UI updates independently of SDK releases. Runtime configuration crosses to
- * the bundle through a serialized `window` global; the connect URL is derived
- * in the browser from the page's own origin, so the server never guesses its
- * public hostname.
- */
-import type { InspectorOptions } from "./config.js";
-import { type FetchHandler } from "./fetch-app.js";
-/**
- * npm dist-tag of the `@mcp-use/inspector` CDN bundle the default URL follows.
- *
- * Every new Inspector beta published with this tag becomes the default
- * inspector for mcp-use servers without requiring an mcp-use release.
- */
-export declare const INSPECTOR_TAG = "beta";
-/**
- * Default URL the inspector shell loads the UI bundle from: the
- * `@mcp-use/inspector` CDN build (`dist/cdn/inspector.js`) built from this
- * branch and served by jsDelivr from npm's {@link INSPECTOR_TAG} tag.
- * Override per server with {@link InspectorOptions.assetsUrl}.
- */
-export declare const DEFAULT_INSPECTOR_ASSETS_URL = "https://cdn.jsdelivr.net/npm/@mcp-use/inspector@beta/dist/cdn/inspector.js";
-/**
- * Derive the stylesheet URL that accompanies an inspector bundle URL.
- *
- * The CDN build ships as dist/cdn/inspector.js + dist/cdn/inspector.css
- * plus sibling lazy chunks referenced by the entry script. The stylesheet URL
- * is the script URL with its `.js` suffix swapped for `.css`. Query
- * strings and fragments are preserved.
- */
-export declare function inspectorStylesUrl(assetsUrl: string): string;
-/** True for the default jsDelivr `@mcp-use/inspector@*` CDN bundle URL. */
-export declare function isDefaultJsdelivrInspectorUrl(url: string): boolean;
-/** Append a per-request cache-bust query param for the default jsDelivr CDN URL. */
-export declare function withInspectorCacheBust(assetsUrl: string): string;
-/** True for inspector UI shell routes (SPA), excluding `/inspector/api/*`. */
-export declare function matchesInspectorShellPath(pathname: string, basePath: string): boolean;
-/** Inputs for {@link renderInspectorShell}. */
-export interface InspectorShellOptions {
-    /** Server display name, used in the page title. */
-    serverName: string;
-    /** Route path the MCP endpoint is mounted on (e.g. `/mcp`). */
-    basePath: string;
-    /**
-     * Full replacement URL for the inspector bundle script. Defaults to
-     * {@link DEFAULT_INSPECTOR_ASSETS_URL}.
-     */
-    assetsUrl?: string | undefined;
-    /** Hosted managed-chat URL (`window.__MANUFACT_CHAT_URL__`). */
-    manufactChatUrl?: string | undefined;
-}
-/**
- * Render the inspector shell page.
- *
- * A minimal shell document whose background matches the inspector UI
- * with a `#root` mount node, an inline script publishing
- * `window.__MCP_USE_INSPECTOR__ = { autoConnectUrl, basePath }` — where
- * `autoConnectUrl` is computed client-side as
- * `window.location.origin + basePath` — a stylesheet link for the bundle's
- * companion CSS (see {@link inspectorStylesUrl}), and a module script
- * loading the inspector bundle. All server-provided values are HTML-escaped
- * or JSON-serialized with `<` escaped, so config can't inject markup.
- */
-export declare function renderInspectorShell(options: InspectorShellOptions): string;
-/**
- * Fetch handler for `${basePath}/inspector` (GET and HEAD).
- *
- * No-op when `inspector.enabled` is `false`; `undefined` and `{}` mean enabled.
- *
- * @internal Wiring for `MCPServer`.
- */
-export declare function createInspectorHandler(inspector: InspectorOptions | undefined, options: {
-    serverName: string;
-    basePath: string;
-}): FetchHandler | undefined;
-/**
- * @deprecated Use {@link createInspectorHandler}.
- *
- * @internal
- */
-export declare function mountInspectorShell(): void;
-//# sourceMappingURL=inspector-shell.d.ts.map

package/dist/inspector-shell.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"inspector-shell.d.ts","sourceRoot":"","sources":["../src/inspector-shell.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAElE;;;;;GAKG;AACH,eAAO,MAAM,aAAa,SAAS,CAAC;AAEpC;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,+EAA2F,CAAC;AAErI;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,2EAA2E;AAC3E,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAElE;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAIhE;AAED,8EAA8E;AAC9E,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAOT;AAED,+CAA+C;AAC/C,MAAM,WAAW,qBAAqB;IACpC,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,gEAAgE;IAChE,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAuBD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAiE3E;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,gBAAgB,GAAG,SAAS,EACvC,OAAO,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAChD,YAAY,GAAG,SAAS,CA+B1B;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAI1C"}

package/dist/internal/resource-completion.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/landing-handler-VQRYCQOV.js

@@ -1,31 +0,0 @@
-import {
-  generateLandingPage
-} from "./chunk-FCGJJVL2.js";
-import {
-  resolveServerOrigin
-} from "./chunk-FC2Z2VFO.js";
-
-// src/landing-handler.ts
-function createLandingPageResponse(request, basePath, config, tools, prompts, resources) {
-  const origin = resolveServerOrigin(request);
-  const url = new URL(basePath, `${origin}/`).href;
-  const html = generateLandingPage({
-    ...config,
-    url,
-    tools: Array.from(tools, (entry) => entry.definition),
-    prompts: Array.from(prompts, (entry) => entry.definition),
-    resources: Array.from(resources, (entry) => entry.definition)
-  });
-  return new Response(request.method === "HEAD" ? null : html, {
-    status: 200,
-    headers: {
-      "cache-control": "no-store",
-      "content-type": "text/html; charset=utf-8",
-      "x-content-type-options": "nosniff"
-    }
-  });
-}
-export {
-  createLandingPageResponse
-};
-//# sourceMappingURL=landing-handler-VQRYCQOV.js.map