mcp-use 2.0.0-beta.9 → 2.0.0

package/dist/chunk-RQRT27Q3.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/commands/client.ts","../src/commands/load-client.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { rm } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { parseArgs } from \"node:util\";\n\nimport type { MCPConnection } from \"@mcp-use/client\";\n\nimport { loadClientPackage } from \"./load-client.js\";\nimport {\n  confirm,\n  GLOBAL_STATE_DIR,\n  openBrowser,\n  pathExists,\n  printResult,\n  readJson,\n  reportError,\n  UsageError,\n  wantsJson,\n  writePrivateJson,\n} from \"./shared.js\";\n\ninterface SavedServer {\n  url: string;\n  oauth: boolean;\n  protocol: \"auto\" | \"2026-07-28\" | \"2025-11-25\";\n}\n\ninterface SavedServers {\n  servers: Record<string, SavedServer>;\n}\n\ninterface SavedCredentials {\n  headers?: Record<string, string>;\n}\n\nconst CLIENT_DIR = join(GLOBAL_STATE_DIR, \"client\");\nconst SERVERS_PATH = join(CLIENT_DIR, \"servers.json\");\n\n/** Run the `mcp-use client` command family. */\nexport async function runClient(argv: readonly string[]): Promise<number> {\n  const json = wantsJson(argv);\n  try {\n    const first = argv[0];\n    if (first === \"connect\") return await connect(argv.slice(1), json);\n    if (first === \"list\") return await list(argv.slice(1), json);\n    if (first === \"remove\") return await remove(argv.slice(1), json);\n    if (first === undefined) {\n      throw new UsageError(\"Usage: mcp-use client <connect|list|remove|name>\");\n    }\n    return await savedServerCommand(first, argv.slice(1), json);\n  } catch (error) {\n    return reportError(\n      error instanceof TypeError ? new UsageError(error.message) : error,\n      json\n    );\n  }\n}\n\nasync function connect(\n  argv: readonly string[],\n  json: boolean\n): Promise<number> {\n  const { values, positionals } = parseArgs({\n    args: [...argv],\n    allowPositionals: true,\n    strict: true,\n    options: {\n      header: { type: \"string\", short: \"H\", multiple: true },\n      \"no-oauth\": { type: \"boolean\" },\n      \"auth-timeout\": { type: \"string\" },\n      protocol: { type: \"string\", default: \"auto\" },\n      json: { type: \"boolean\" },\n    },\n  });\n  if (positionals.length !== 2) {\n    throw new UsageError(\"Usage: mcp-use client connect <name> <url>\");\n  }\n  const [name, rawUrl] = positionals as [string, string];\n  validateName(name);\n  const url = new URL(rawUrl);\n  if (![\"http:\", \"https:\"].includes(url.protocol)) {\n    throw new UsageError(\"Client URLs must use http or https.\");\n  }\n  const protocol = parseProtocol(values.protocol);\n  const timeout = parsePositiveInteger(\n    values[\"auth-timeout\"] ?? \"300000\",\n    \"--auth-timeout\"\n  );\n  const saved = await readServers();\n  if (saved.servers[name] !== undefined) {\n    throw new UsageError(`Saved server already exists: ${name}`);\n  }\n  const credentials = { headers: parseHeaders(values.header ?? []) };\n  const definition: SavedServer = {\n    url: url.href,\n    oauth: values[\"no-oauth\"] !== true,\n    protocol,\n  };\n  const connection = await openConnection(\n    name,\n    definition,\n    credentials,\n    timeout\n  );\n  await connection.disconnect();\n  saved.servers[name] = definition;\n  await writePrivateJson(SERVERS_PATH, saved);\n  await writePrivateJson(credentialsPath(name), credentials);\n  printResult(\n    { name, url: definition.url, protocol },\n    json,\n    `Connected and saved ${name}.`\n  );\n  return 0;\n}\n\nasync function list(argv: readonly string[], json: boolean): Promise<number> {\n  parseJsonOnly(argv);\n  const saved = await readServers();\n  const result = Object.entries(saved.servers).map(([name, server]) => ({\n    name,\n    ...server,\n  }));\n  printResult(\n    result,\n    json,\n    result.map((server) => `${server.name}\\t${server.url}`).join(\"\\n\") ||\n      \"No saved servers.\"\n  );\n  return 0;\n}\n\nasync function remove(argv: readonly string[], json: boolean): Promise<number> {\n  const { values, positionals } = parseArgs({\n    args: [...argv],\n    allowPositionals: true,\n    strict: true,\n    options: { yes: { type: \"boolean\" }, json: { type: \"boolean\" } },\n  });\n  const name = one(positionals, \"mcp-use client remove <name>\");\n  if (\n    !(await confirm(`Remove saved server ${name}?`, {\n      yes: values.yes === true,\n      json,\n    }))\n  ) {\n    return 0;\n  }\n  const saved = await readServers();\n  delete saved.servers[name];\n  await writePrivateJson(SERVERS_PATH, saved);\n  await rm(credentialsDirectory(name), { recursive: true, force: true });\n  printResult({ removed: name }, json, `Removed ${name}.`);\n  return 0;\n}\n\nasync function savedServerCommand(\n  name: string,\n  argv: readonly string[],\n  json: boolean\n): Promise<number> {\n  const saved = await readServers();\n  const definition = saved.servers[name];\n  if (definition === undefined) {\n    throw new UsageError(\n      `Unknown saved server: ${name}. Run \\`mcp-use client connect ${name} <url>\\`.`\n    );\n  }\n  const family = argv[0];\n  const operation = argv[1];\n  if (family === \"auth\") {\n    if (operation === \"status\") {\n      parseJsonOnly(argv.slice(2));\n      const authenticated = await pathExists(oauthDirectory(name));\n      printResult(\n        { name, oauth: definition.oauth, authenticated },\n        json,\n        authenticated ? \"Authenticated.\" : \"No saved OAuth session.\"\n      );\n      return 0;\n    }\n    if (operation === \"logout\") {\n      const { values, positionals } = parseArgs({\n        args: [...argv.slice(2)],\n        allowPositionals: true,\n        strict: true,\n        options: { yes: { type: \"boolean\" }, json: { type: \"boolean\" } },\n      });\n      if (positionals.length !== 0) {\n        throw new UsageError(`Usage: mcp-use client ${name} auth logout`);\n      }\n      if (\n        !(await confirm(`Delete OAuth credentials for ${name}?`, {\n          yes: values.yes === true,\n          json,\n        }))\n      ) {\n        return 0;\n      }\n      await rm(oauthDirectory(name), { recursive: true, force: true });\n      printResult({ loggedOut: name }, json, `Logged out ${name}.`);\n      return 0;\n    }\n  }\n\n  const credentials = await readJson<SavedCredentials>(\n    credentialsPath(name),\n    {}\n  );\n  const connection = await openConnection(\n    name,\n    definition,\n    credentials,\n    300_000\n  );\n  try {\n    if (family === \"tools\") {\n      if (operation === \"list\") {\n        parseJsonOnly(argv.slice(2));\n        const tools = await connection.listTools();\n        printResult(\n          tools,\n          json,\n          tools\n            .map((tool) => `${tool.name}\\t${tool.description ?? \"\"}`)\n            .join(\"\\n\")\n        );\n        return 0;\n      }\n      if (operation === \"describe\") {\n        const toolName = one(\n          argv.slice(2),\n          `mcp-use client ${name} tools describe <tool>`\n        );\n        const tool = (await connection.listTools()).find(\n          (candidate) => candidate.name === toolName\n        );\n        if (tool === undefined)\n          throw new UsageError(`Tool not found: ${toolName}`);\n        printResult(tool, json);\n        return 0;\n      }\n      if (operation === \"call\") {\n        return await callTool(connection, name, argv.slice(2), json);\n      }\n    }\n    if (family === \"resources\") {\n      if (operation === \"list\") {\n        parseJsonOnly(argv.slice(2));\n        const resources = await connection.listResources();\n        printResult(resources, json);\n        return 0;\n      }\n      if (operation === \"read\") {\n        const uri = one(\n          argv.slice(2),\n          `mcp-use client ${name} resources read <uri>`\n        );\n        printResult(await connection.readResource(uri), json);\n        return 0;\n      }\n    }\n    if (family === \"prompts\") {\n      if (operation === \"list\") {\n        parseJsonOnly(argv.slice(2));\n        printResult(await connection.listPrompts(), json);\n        return 0;\n      }\n      if (operation === \"get\") {\n        const prompt = argv[2];\n        if (prompt === undefined) {\n          throw new UsageError(\n            `Usage: mcp-use client ${name} prompts get <prompt> [args]`\n          );\n        }\n        printResult(\n          await connection.getPrompt(prompt, parseMcpArguments(argv.slice(3))),\n          json\n        );\n        return 0;\n      }\n    }\n    throw new UsageError(\n      `Usage: mcp-use client ${name} <tools|resources|prompts|auth> ...`\n    );\n  } finally {\n    await connection.disconnect();\n  }\n}\n\nasync function callTool(\n  connection: MCPConnection,\n  serverName: string,\n  argv: readonly string[],\n  json: boolean\n): Promise<number> {\n  const tool = argv[0];\n  if (tool === undefined) {\n    throw new UsageError(\n      `Usage: mcp-use client ${serverName} tools call <tool> [args]`\n    );\n  }\n  const { values, positionals } = parseArgs({\n    args: [...argv.slice(1)],\n    allowPositionals: true,\n    strict: true,\n    options: {\n      timeout: { type: \"string\", default: \"30000\" },\n      json: { type: \"boolean\" },\n    },\n  });\n  const timeout = parsePositiveInteger(values.timeout, \"--timeout\");\n  const result = await connection.callTool(\n    tool,\n    parseMcpArguments(positionals),\n    { timeout }\n  );\n  if (result.isError === true) {\n    throw new Error(\n      `Tool ${tool} returned an error: ${JSON.stringify(result)}`\n    );\n  }\n  printResult(result, json);\n  return 0;\n}\n\nasync function openConnection(\n  name: string,\n  definition: SavedServer,\n  credentials: SavedCredentials,\n  authTimeoutMs: number\n): Promise<MCPConnection> {\n  const { createOAuthProvider, MCPClient } = await loadClientPackage();\n  const oauthBase = oauthDirectory(name);\n  const authProvider = definition.oauth\n    ? await createOAuthProvider(definition.url, {\n        baseDir: oauthBase,\n        authTimeoutMs,\n        storageKeyPrefix: `mcp-use-cli:${name}`,\n        openBrowser: (url: string) => {\n          process.stderr.write(`Open this URL to authenticate:\\n${url}\\n`);\n          openBrowser(url);\n        },\n        // Conditional exports select NodeOAuthOptions at runtime. TypeScript\n        // resolves the package's browser-default declaration in this build.\n      } as unknown as Parameters<typeof createOAuthProvider>[1])\n    : undefined;\n  const protocolNegotiation =\n    definition.protocol === \"auto\" ? \"auto\" : { pin: definition.protocol };\n  const client = new MCPClient({\n    mcpServers: {\n      [name]: {\n        url: definition.url,\n        ...(credentials.headers !== undefined\n          ? { headers: credentials.headers }\n          : {}),\n        ...(authProvider !== undefined ? { authProvider } : { oauth: false }),\n        protocolNegotiation,\n      },\n    },\n  });\n  return client.connect(name);\n}\n\n/**\n * Open a saved server for another CLI command.\n *\n * @internal\n */\nexport async function openSavedConnection(\n  name: string,\n  authTimeoutMs = 300_000\n): Promise<MCPConnection> {\n  const saved = await readServers();\n  const definition = saved.servers[name];\n  if (definition === undefined) {\n    throw new UsageError(`Unknown saved server: ${name}`);\n  }\n  const credentials = await readJson<SavedCredentials>(\n    credentialsPath(name),\n    {}\n  );\n  return openConnection(name, definition, credentials, authTimeoutMs);\n}\n\n/**\n * Open an ad-hoc HTTP MCP connection.\n *\n * @internal\n */\nexport async function openDirectConnection(\n  url: string,\n  headers: Record<string, string>\n): Promise<MCPConnection> {\n  return openConnection(\n    \"screenshot\",\n    { url, oauth: false, protocol: \"auto\" },\n    { headers },\n    300_000\n  );\n}\n\n/**\n * Parse the CLI's JSON/key-value MCP argument grammar.\n *\n * @internal\n */\nexport function parseMcpArguments(\n  argv: readonly string[]\n): Record<string, unknown> {\n  if (argv.length === 0) return {};\n  if (argv.length === 1 && argv[0]?.trimStart().startsWith(\"{\")) {\n    const value = JSON.parse(argv[0]) as unknown;\n    if (value === null || Array.isArray(value) || typeof value !== \"object\") {\n      throw new UsageError(\"The JSON argument must be an object.\");\n    }\n    return value as Record<string, unknown>;\n  }\n  const result: Record<string, unknown> = {};\n  for (const token of argv) {\n    const typed = token.indexOf(\":=\");\n    const plain = token.indexOf(\"=\");\n    const separator = typed >= 0 ? typed : plain;\n    const width = typed >= 0 ? 2 : 1;\n    if (separator <= 0) {\n      throw new UsageError(\n        `Expected key=value or key:=<json>, received: ${token}`\n      );\n    }\n    const key = token.slice(0, separator).replace(/^--/, \"\");\n    const raw = token.slice(separator + width);\n    result[key] = typed >= 0 ? (JSON.parse(raw) as unknown) : raw;\n  }\n  return result;\n}\n\nfunction parseHeaders(values: readonly string[]): Record<string, string> {\n  const headers: Record<string, string> = {};\n  for (const value of values) {\n    const separator = value.indexOf(\":\");\n    if (separator <= 0) throw new UsageError(`Invalid header: ${value}`);\n    headers[value.slice(0, separator).trim()] = value\n      .slice(separator + 1)\n      .trim();\n  }\n  return headers;\n}\n\nfunction parseProtocol(value: string | undefined): SavedServer[\"protocol\"] {\n  if (value !== \"auto\" && value !== \"2026-07-28\" && value !== \"2025-11-25\") {\n    throw new UsageError(`Invalid protocol: ${value}`);\n  }\n  return value;\n}\n\nfunction parsePositiveInteger(value: string | undefined, name: string): number {\n  const result = Number(value);\n  if (!Number.isInteger(result) || result <= 0) {\n    throw new UsageError(`${name} must be a positive integer.`);\n  }\n  return result;\n}\n\nfunction validateName(name: string): void {\n  if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/.test(name)) {\n    throw new UsageError(\n      \"Server names must be 1-64 filesystem-safe letters, numbers, dots, dashes, or underscores.\"\n    );\n  }\n}\n\nasync function readServers(): Promise<SavedServers> {\n  return readJson(SERVERS_PATH, { servers: {} });\n}\n\nfunction credentialsDirectory(name: string): string {\n  return join(\n    CLIENT_DIR,\n    \"credentials\",\n    createHash(\"sha256\").update(name).digest(\"hex\")\n  );\n}\n\nfunction credentialsPath(name: string): string {\n  return join(credentialsDirectory(name), \"credentials.json\");\n}\n\nfunction oauthDirectory(name: string): string {\n  return join(credentialsDirectory(name), \"oauth\");\n}\n\nfunction parseJsonOnly(argv: readonly string[]): void {\n  parseArgs({\n    args: [...argv],\n    allowPositionals: false,\n    strict: true,\n    options: { json: { type: \"boolean\" } },\n  });\n}\n\nfunction one(positionals: readonly string[], usage: string): string {\n  if (positionals.length !== 1) throw new UsageError(`Usage: ${usage}`);\n  return positionals[0]!;\n}\n","import { UsageError } from \"./shared.js\";\n\n/** Runtime surface loaded from the independently published client SDK. */\nexport type ClientPackage = typeof import(\"@mcp-use/client\");\n\nconst INSTALL_HINT = [\n  \"[mcp-use] @mcp-use/client is not installed.\",\n  \"The `mcp-use client` and `mcp-use screenshot` commands require it.\",\n  \"Install it in your project:\",\n  \"\",\n  \"  npm install @mcp-use/client\",\n  \"\",\n  \"  pnpm add @mcp-use/client\",\n  \"\",\n  \"  bun add @mcp-use/client\",\n].join(\"\\n\");\n\n/**\n * Load `@mcp-use/client` on demand so the framework library entry does not\n * pull the client SDK (or legacy v1 transitive deps) into every install.\n *\n * @throws {@link UsageError} When the package is not installed, with install\n * instructions for npm, pnpm, and bun.\n */\nexport async function loadClientPackage(): Promise<ClientPackage> {\n  try {\n    return await import(\"@mcp-use/client\");\n  } catch (error) {\n    if (isClientPackageMissing(error)) {\n      throw new UsageError(INSTALL_HINT);\n    }\n    throw error;\n  }\n}\n\nfunction isClientPackageMissing(error: unknown): boolean {\n  if (!(error instanceof Error)) return false;\n  const code = (error as NodeJS.ErrnoException).code;\n  if (code === \"ERR_MODULE_NOT_FOUND\" || code === \"MODULE_NOT_FOUND\") {\n    return (\n      error.message.includes(\"@mcp-use/client\") ||\n      error.message.includes(\"Cannot find package\")\n    );\n  }\n  return false;\n}\n"],"mappings":";;;;;;;;;;;;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,UAAU;AACnB,SAAS,YAAY;AACrB,SAAS,iBAAiB;;;ACE1B,IAAM,eAAe;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AASX,eAAsB,oBAA4C;AAChE,MAAI;AACF,WAAO,MAAM,OAAO,iBAAiB;AAAA,EACvC,SAAS,OAAO;AACd,QAAI,uBAAuB,KAAK,GAAG;AACjC,YAAM,IAAI,WAAW,YAAY;AAAA,IACnC;AACA,UAAM;AAAA,EACR;AACF;AAEA,SAAS,uBAAuB,OAAyB;AACvD,MAAI,EAAE,iBAAiB,OAAQ,QAAO;AACtC,QAAM,OAAQ,MAAgC;AAC9C,MAAI,SAAS,0BAA0B,SAAS,oBAAoB;AAClE,WACE,MAAM,QAAQ,SAAS,iBAAiB,KACxC,MAAM,QAAQ,SAAS,qBAAqB;AAAA,EAEhD;AACA,SAAO;AACT;;;ADVA,IAAM,aAAa,KAAK,kBAAkB,QAAQ;AAClD,IAAM,eAAe,KAAK,YAAY,cAAc;AAGpD,eAAsB,UAAU,MAA0C;AACxE,QAAM,OAAO,UAAU,IAAI;AAC3B,MAAI;AACF,UAAM,QAAQ,KAAK,CAAC;AACpB,QAAI,UAAU,UAAW,QAAO,MAAM,QAAQ,KAAK,MAAM,CAAC,GAAG,IAAI;AACjE,QAAI,UAAU,OAAQ,QAAO,MAAM,KAAK,KAAK,MAAM,CAAC,GAAG,IAAI;AAC3D,QAAI,UAAU,SAAU,QAAO,MAAM,OAAO,KAAK,MAAM,CAAC,GAAG,IAAI;AAC/D,QAAI,UAAU,QAAW;AACvB,YAAM,IAAI,WAAW,kDAAkD;AAAA,IACzE;AACA,WAAO,MAAM,mBAAmB,OAAO,KAAK,MAAM,CAAC,GAAG,IAAI;AAAA,EAC5D,SAAS,OAAO;AACd,WAAO;AAAA,MACL,iBAAiB,YAAY,IAAI,WAAW,MAAM,OAAO,IAAI;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAe,QACb,MACA,MACiB;AACjB,QAAM,EAAE,QAAQ,YAAY,IAAI,UAAU;AAAA,IACxC,MAAM,CAAC,GAAG,IAAI;AAAA,IACd,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,QAAQ,EAAE,MAAM,UAAU,OAAO,KAAK,UAAU,KAAK;AAAA,MACrD,YAAY,EAAE,MAAM,UAAU;AAAA,MAC9B,gBAAgB,EAAE,MAAM,SAAS;AAAA,MACjC,UAAU,EAAE,MAAM,UAAU,SAAS,OAAO;AAAA,MAC5C,MAAM,EAAE,MAAM,UAAU;AAAA,IAC1B;AAAA,EACF,CAAC;AACD,MAAI,YAAY,WAAW,GAAG;AAC5B,UAAM,IAAI,WAAW,4CAA4C;AAAA,EACnE;AACA,QAAM,CAAC,MAAM,MAAM,IAAI;AACvB,eAAa,IAAI;AACjB,QAAM,MAAM,IAAI,IAAI,MAAM;AAC1B,MAAI,CAAC,CAAC,SAAS,QAAQ,EAAE,SAAS,IAAI,QAAQ,GAAG;AAC/C,UAAM,IAAI,WAAW,qCAAqC;AAAA,EAC5D;AACA,QAAM,WAAW,cAAc,OAAO,QAAQ;AAC9C,QAAM,UAAU;AAAA,IACd,OAAO,cAAc,KAAK;AAAA,IAC1B;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,YAAY;AAChC,MAAI,MAAM,QAAQ,IAAI,MAAM,QAAW;AACrC,UAAM,IAAI,WAAW,gCAAgC,IAAI,EAAE;AAAA,EAC7D;AACA,QAAM,cAAc,EAAE,SAAS,aAAa,OAAO,UAAU,CAAC,CAAC,EAAE;AACjE,QAAM,aAA0B;AAAA,IAC9B,KAAK,IAAI;AAAA,IACT,OAAO,OAAO,UAAU,MAAM;AAAA,IAC9B;AAAA,EACF;AACA,QAAM,aAAa,MAAM;AAAA,IACvB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,WAAW,WAAW;AAC5B,QAAM,QAAQ,IAAI,IAAI;AACtB,QAAM,iBAAiB,cAAc,KAAK;AAC1C,QAAM,iBAAiB,gBAAgB,IAAI,GAAG,WAAW;AACzD;AAAA,IACE,EAAE,MAAM,KAAK,WAAW,KAAK,SAAS;AAAA,IACtC;AAAA,IACA,uBAAuB,IAAI;AAAA,EAC7B;AACA,SAAO;AACT;AAEA,eAAe,KAAK,MAAyB,MAAgC;AAC3E,gBAAc,IAAI;AAClB,QAAM,QAAQ,MAAM,YAAY;AAChC,QAAM,SAAS,OAAO,QAAQ,MAAM,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,MAAM,OAAO;AAAA,IACpE;AAAA,IACA,GAAG;AAAA,EACL,EAAE;AACF;AAAA,IACE;AAAA,IACA;AAAA,IACA,OAAO,IAAI,CAAC,WAAW,GAAG,OAAO,IAAI,IAAK,OAAO,GAAG,EAAE,EAAE,KAAK,IAAI,KAC/D;AAAA,EACJ;AACA,SAAO;AACT;AAEA,eAAe,OAAO,MAAyB,MAAgC;AAC7E,QAAM,EAAE,QAAQ,YAAY,IAAI,UAAU;AAAA,IACxC,MAAM,CAAC,GAAG,IAAI;AAAA,IACd,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,SAAS,EAAE,KAAK,EAAE,MAAM,UAAU,GAAG,MAAM,EAAE,MAAM,UAAU,EAAE;AAAA,EACjE,CAAC;AACD,QAAM,OAAO,IAAI,aAAa,8BAA8B;AAC5D,MACE,CAAE,MAAM,QAAQ,uBAAuB,IAAI,KAAK;AAAA,IAC9C,KAAK,OAAO,QAAQ;AAAA,IACpB;AAAA,EACF,CAAC,GACD;AACA,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,MAAM,YAAY;AAChC,SAAO,MAAM,QAAQ,IAAI;AACzB,QAAM,iBAAiB,cAAc,KAAK;AAC1C,QAAM,GAAG,qBAAqB,IAAI,GAAG,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACrE,cAAY,EAAE,SAAS,KAAK,GAAG,MAAM,WAAW,IAAI,GAAG;AACvD,SAAO;AACT;AAEA,eAAe,mBACb,MACA,MACA,MACiB;AACjB,QAAM,QAAQ,MAAM,YAAY;AAChC,QAAM,aAAa,MAAM,QAAQ,IAAI;AACrC,MAAI,eAAe,QAAW;AAC5B,UAAM,IAAI;AAAA,MACR,yBAAyB,IAAI,kCAAkC,IAAI;AAAA,IACrE;AAAA,EACF;AACA,QAAM,SAAS,KAAK,CAAC;AACrB,QAAM,YAAY,KAAK,CAAC;AACxB,MAAI,WAAW,QAAQ;AACrB,QAAI,cAAc,UAAU;AAC1B,oBAAc,KAAK,MAAM,CAAC,CAAC;AAC3B,YAAM,gBAAgB,MAAM,WAAW,eAAe,IAAI,CAAC;AAC3D;AAAA,QACE,EAAE,MAAM,OAAO,WAAW,OAAO,cAAc;AAAA,QAC/C;AAAA,QACA,gBAAgB,mBAAmB;AAAA,MACrC;AACA,aAAO;AAAA,IACT;AACA,QAAI,cAAc,UAAU;AAC1B,YAAM,EAAE,QAAQ,YAAY,IAAI,UAAU;AAAA,QACxC,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;AAAA,QACvB,kBAAkB;AAAA,QAClB,QAAQ;AAAA,QACR,SAAS,EAAE,KAAK,EAAE,MAAM,UAAU,GAAG,MAAM,EAAE,MAAM,UAAU,EAAE;AAAA,MACjE,CAAC;AACD,UAAI,YAAY,WAAW,GAAG;AAC5B,cAAM,IAAI,WAAW,yBAAyB,IAAI,cAAc;AAAA,MAClE;AACA,UACE,CAAE,MAAM,QAAQ,gCAAgC,IAAI,KAAK;AAAA,QACvD,KAAK,OAAO,QAAQ;AAAA,QACpB;AAAA,MACF,CAAC,GACD;AACA,eAAO;AAAA,MACT;AACA,YAAM,GAAG,eAAe,IAAI,GAAG,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC/D,kBAAY,EAAE,WAAW,KAAK,GAAG,MAAM,cAAc,IAAI,GAAG;AAC5D,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,cAAc,MAAM;AAAA,IACxB,gBAAgB,IAAI;AAAA,IACpB,CAAC;AAAA,EACH;AACA,QAAM,aAAa,MAAM;AAAA,IACvB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI;AACF,QAAI,WAAW,SAAS;AACtB,UAAI,cAAc,QAAQ;AACxB,sBAAc,KAAK,MAAM,CAAC,CAAC;AAC3B,cAAM,QAAQ,MAAM,WAAW,UAAU;AACzC;AAAA,UACE;AAAA,UACA;AAAA,UACA,MACG,IAAI,CAAC,SAAS,GAAG,KAAK,IAAI,IAAK,KAAK,eAAe,EAAE,EAAE,EACvD,KAAK,IAAI;AAAA,QACd;AACA,eAAO;AAAA,MACT;AACA,UAAI,cAAc,YAAY;AAC5B,cAAM,WAAW;AAAA,UACf,KAAK,MAAM,CAAC;AAAA,UACZ,kBAAkB,IAAI;AAAA,QACxB;AACA,cAAM,QAAQ,MAAM,WAAW,UAAU,GAAG;AAAA,UAC1C,CAAC,cAAc,UAAU,SAAS;AAAA,QACpC;AACA,YAAI,SAAS;AACX,gBAAM,IAAI,WAAW,mBAAmB,QAAQ,EAAE;AACpD,oBAAY,MAAM,IAAI;AACtB,eAAO;AAAA,MACT;AACA,UAAI,cAAc,QAAQ;AACxB,eAAO,MAAM,SAAS,YAAY,MAAM,KAAK,MAAM,CAAC,GAAG,IAAI;AAAA,MAC7D;AAAA,IACF;AACA,QAAI,WAAW,aAAa;AAC1B,UAAI,cAAc,QAAQ;AACxB,sBAAc,KAAK,MAAM,CAAC,CAAC;AAC3B,cAAM,YAAY,MAAM,WAAW,cAAc;AACjD,oBAAY,WAAW,IAAI;AAC3B,eAAO;AAAA,MACT;AACA,UAAI,cAAc,QAAQ;AACxB,cAAM,MAAM;AAAA,UACV,KAAK,MAAM,CAAC;AAAA,UACZ,kBAAkB,IAAI;AAAA,QACxB;AACA,oBAAY,MAAM,WAAW,aAAa,GAAG,GAAG,IAAI;AACpD,eAAO;AAAA,MACT;AAAA,IACF;AACA,QAAI,WAAW,WAAW;AACxB,UAAI,cAAc,QAAQ;AACxB,sBAAc,KAAK,MAAM,CAAC,CAAC;AAC3B,oBAAY,MAAM,WAAW,YAAY,GAAG,IAAI;AAChD,eAAO;AAAA,MACT;AACA,UAAI,cAAc,OAAO;AACvB,cAAM,SAAS,KAAK,CAAC;AACrB,YAAI,WAAW,QAAW;AACxB,gBAAM,IAAI;AAAA,YACR,yBAAyB,IAAI;AAAA,UAC/B;AAAA,QACF;AACA;AAAA,UACE,MAAM,WAAW,UAAU,QAAQ,kBAAkB,KAAK,MAAM,CAAC,CAAC,CAAC;AAAA,UACnE;AAAA,QACF;AACA,eAAO;AAAA,MACT;AAAA,IACF;AACA,UAAM,IAAI;AAAA,MACR,yBAAyB,IAAI;AAAA,IAC/B;AAAA,EACF,UAAE;AACA,UAAM,WAAW,WAAW;AAAA,EAC9B;AACF;AAEA,eAAe,SACb,YACA,YACA,MACA,MACiB;AACjB,QAAM,OAAO,KAAK,CAAC;AACnB,MAAI,SAAS,QAAW;AACtB,UAAM,IAAI;AAAA,MACR,yBAAyB,UAAU;AAAA,IACrC;AAAA,EACF;AACA,QAAM,EAAE,QAAQ,YAAY,IAAI,UAAU;AAAA,IACxC,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;AAAA,IACvB,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,SAAS,EAAE,MAAM,UAAU,SAAS,QAAQ;AAAA,MAC5C,MAAM,EAAE,MAAM,UAAU;AAAA,IAC1B;AAAA,EACF,CAAC;AACD,QAAM,UAAU,qBAAqB,OAAO,SAAS,WAAW;AAChE,QAAM,SAAS,MAAM,WAAW;AAAA,IAC9B;AAAA,IACA,kBAAkB,WAAW;AAAA,IAC7B,EAAE,QAAQ;AAAA,EACZ;AACA,MAAI,OAAO,YAAY,MAAM;AAC3B,UAAM,IAAI;AAAA,MACR,QAAQ,IAAI,uBAAuB,KAAK,UAAU,MAAM,CAAC;AAAA,IAC3D;AAAA,EACF;AACA,cAAY,QAAQ,IAAI;AACxB,SAAO;AACT;AAEA,eAAe,eACb,MACA,YACA,aACA,eACwB;AACxB,QAAM,EAAE,qBAAqB,UAAU,IAAI,MAAM,kBAAkB;AACnE,QAAM,YAAY,eAAe,IAAI;AACrC,QAAM,eAAe,WAAW,QAC5B,MAAM,oBAAoB,WAAW,KAAK;AAAA,IACxC,SAAS;AAAA,IACT;AAAA,IACA,kBAAkB,eAAe,IAAI;AAAA,IACrC,aAAa,CAAC,QAAgB;AAC5B,cAAQ,OAAO,MAAM;AAAA,EAAmC,GAAG;AAAA,CAAI;AAC/D,kBAAY,GAAG;AAAA,IACjB;AAAA;AAAA;AAAA,EAGF,CAAyD,IACzD;AACJ,QAAM,sBACJ,WAAW,aAAa,SAAS,SAAS,EAAE,KAAK,WAAW,SAAS;AACvE,QAAM,SAAS,IAAI,UAAU;AAAA,IAC3B,YAAY;AAAA,MACV,CAAC,IAAI,GAAG;AAAA,QACN,KAAK,WAAW;AAAA,QAChB,GAAI,YAAY,YAAY,SACxB,EAAE,SAAS,YAAY,QAAQ,IAC/B,CAAC;AAAA,QACL,GAAI,iBAAiB,SAAY,EAAE,aAAa,IAAI,EAAE,OAAO,MAAM;AAAA,QACnE;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACD,SAAO,OAAO,QAAQ,IAAI;AAC5B;AAOA,eAAsB,oBACpB,MACA,gBAAgB,KACQ;AACxB,QAAM,QAAQ,MAAM,YAAY;AAChC,QAAM,aAAa,MAAM,QAAQ,IAAI;AACrC,MAAI,eAAe,QAAW;AAC5B,UAAM,IAAI,WAAW,yBAAyB,IAAI,EAAE;AAAA,EACtD;AACA,QAAM,cAAc,MAAM;AAAA,IACxB,gBAAgB,IAAI;AAAA,IACpB,CAAC;AAAA,EACH;AACA,SAAO,eAAe,MAAM,YAAY,aAAa,aAAa;AACpE;AAOA,eAAsB,qBACpB,KACA,SACwB;AACxB,SAAO;AAAA,IACL;AAAA,IACA,EAAE,KAAK,OAAO,OAAO,UAAU,OAAO;AAAA,IACtC,EAAE,QAAQ;AAAA,IACV;AAAA,EACF;AACF;AAOO,SAAS,kBACd,MACyB;AACzB,MAAI,KAAK,WAAW,EAAG,QAAO,CAAC;AAC/B,MAAI,KAAK,WAAW,KAAK,KAAK,CAAC,GAAG,UAAU,EAAE,WAAW,GAAG,GAAG;AAC7D,UAAM,QAAQ,KAAK,MAAM,KAAK,CAAC,CAAC;AAChC,QAAI,UAAU,QAAQ,MAAM,QAAQ,KAAK,KAAK,OAAO,UAAU,UAAU;AACvE,YAAM,IAAI,WAAW,sCAAsC;AAAA,IAC7D;AACA,WAAO;AAAA,EACT;AACA,QAAM,SAAkC,CAAC;AACzC,aAAW,SAAS,MAAM;AACxB,UAAM,QAAQ,MAAM,QAAQ,IAAI;AAChC,UAAM,QAAQ,MAAM,QAAQ,GAAG;AAC/B,UAAM,YAAY,SAAS,IAAI,QAAQ;AACvC,UAAM,QAAQ,SAAS,IAAI,IAAI;AAC/B,QAAI,aAAa,GAAG;AAClB,YAAM,IAAI;AAAA,QACR,gDAAgD,KAAK;AAAA,MACvD;AAAA,IACF;AACA,UAAM,MAAM,MAAM,MAAM,GAAG,SAAS,EAAE,QAAQ,OAAO,EAAE;AACvD,UAAM,MAAM,MAAM,MAAM,YAAY,KAAK;AACzC,WAAO,GAAG,IAAI,SAAS,IAAK,KAAK,MAAM,GAAG,IAAgB;AAAA,EAC5D;AACA,SAAO;AACT;AAEA,SAAS,aAAa,QAAmD;AACvE,QAAM,UAAkC,CAAC;AACzC,aAAW,SAAS,QAAQ;AAC1B,UAAM,YAAY,MAAM,QAAQ,GAAG;AACnC,QAAI,aAAa,EAAG,OAAM,IAAI,WAAW,mBAAmB,KAAK,EAAE;AACnE,YAAQ,MAAM,MAAM,GAAG,SAAS,EAAE,KAAK,CAAC,IAAI,MACzC,MAAM,YAAY,CAAC,EACnB,KAAK;AAAA,EACV;AACA,SAAO;AACT;AAEA,SAAS,cAAc,OAAoD;AACzE,MAAI,UAAU,UAAU,UAAU,gBAAgB,UAAU,cAAc;AACxE,UAAM,IAAI,WAAW,qBAAqB,KAAK,EAAE;AAAA,EACnD;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,OAA2B,MAAsB;AAC7E,QAAM,SAAS,OAAO,KAAK;AAC3B,MAAI,CAAC,OAAO,UAAU,MAAM,KAAK,UAAU,GAAG;AAC5C,UAAM,IAAI,WAAW,GAAG,IAAI,8BAA8B;AAAA,EAC5D;AACA,SAAO;AACT;AAEA,SAAS,aAAa,MAAoB;AACxC,MAAI,CAAC,oCAAoC,KAAK,IAAI,GAAG;AACnD,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAe,cAAqC;AAClD,SAAO,SAAS,cAAc,EAAE,SAAS,CAAC,EAAE,CAAC;AAC/C;AAEA,SAAS,qBAAqB,MAAsB;AAClD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,WAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AAAA,EAChD;AACF;AAEA,SAAS,gBAAgB,MAAsB;AAC7C,SAAO,KAAK,qBAAqB,IAAI,GAAG,kBAAkB;AAC5D;AAEA,SAAS,eAAe,MAAsB;AAC5C,SAAO,KAAK,qBAAqB,IAAI,GAAG,OAAO;AACjD;AAEA,SAAS,cAAc,MAA+B;AACpD,YAAU;AAAA,IACR,MAAM,CAAC,GAAG,IAAI;AAAA,IACd,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,SAAS,EAAE,MAAM,EAAE,MAAM,UAAU,EAAE;AAAA,EACvC,CAAC;AACH;AAEA,SAAS,IAAI,aAAgC,OAAuB;AAClE,MAAI,YAAY,WAAW,EAAG,OAAM,IAAI,WAAW,UAAU,KAAK,EAAE;AACpE,SAAO,YAAY,CAAC;AACtB;","names":[]}

package/dist/chunk-SMN75YED.js

@@ -1,66 +0,0 @@
-// src/views/public-route.ts
-var PUBLIC_CONTENT_TYPES = {
-  ".css": "text/css",
-  ".gif": "image/gif",
-  ".html": "text/html",
-  ".ico": "image/x-icon",
-  ".jpeg": "image/jpeg",
-  ".jpg": "image/jpeg",
-  ".js": "application/javascript",
-  ".json": "application/json",
-  ".map": "application/json",
-  ".png": "image/png",
-  ".svg": "image/svg+xml",
-  ".txt": "text/plain",
-  ".webp": "image/webp",
-  ".woff": "font/woff",
-  ".woff2": "font/woff2"
-};
-async function resolvePublicFilePath(publicRoot, subpath) {
-  const { stat } = await import("fs/promises");
-  const { resolve, sep } = await import("path");
-  if (subpath === "" || subpath.includes("\\") || subpath.split("/").some((segment) => segment === "..")) {
-    return null;
-  }
-  const clean = subpath.replace(/^\/+/, "");
-  if (clean === "" || clean.endsWith("/")) {
-    return null;
-  }
-  const root = resolve(publicRoot);
-  const abs = resolve(root, clean);
-  if (abs !== root && !abs.startsWith(root + sep)) {
-    return null;
-  }
-  try {
-    if (!(await stat(abs)).isFile()) {
-      return null;
-    }
-  } catch {
-    return null;
-  }
-  return abs;
-}
-async function servePublicFile(diskPath, options = {}) {
-  const { createReadStream } = await import("fs");
-  const { extname } = await import("path");
-  const { Readable } = await import("stream");
-  const ext = extname(diskPath).toLowerCase();
-  const contentType = PUBLIC_CONTENT_TYPES[ext] ?? "application/octet-stream";
-  const body = options.head === true ? null : Readable.toWeb(createReadStream(diskPath));
-  return new Response(body, {
-    status: 200,
-    headers: {
-      "Content-Type": contentType,
-      "Cache-Control": "public, max-age=0, must-revalidate",
-      ...options.deferCors !== true && {
-        "Access-Control-Allow-Origin": "*"
-      }
-    }
-  });
-}
-
-export {
-  resolvePublicFilePath,
-  servePublicFile
-};
-//# sourceMappingURL=chunk-SMN75YED.js.map

package/dist/chunk-SMN75YED.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/views/public-route.ts"],"sourcesContent":["const PUBLIC_CONTENT_TYPES: Record<string, string> = {\n  \".css\": \"text/css\",\n  \".gif\": \"image/gif\",\n  \".html\": \"text/html\",\n  \".ico\": \"image/x-icon\",\n  \".jpeg\": \"image/jpeg\",\n  \".jpg\": \"image/jpeg\",\n  \".js\": \"application/javascript\",\n  \".json\": \"application/json\",\n  \".map\": \"application/json\",\n  \".png\": \"image/png\",\n  \".svg\": \"image/svg+xml\",\n  \".txt\": \"text/plain\",\n  \".webp\": \"image/webp\",\n  \".woff\": \"font/woff\",\n  \".woff2\": \"font/woff2\",\n};\n\n/**\n * Resolve a request subpath to an on-disk file under `publicRoot`, rejecting\n * path traversal.\n *\n * @param publicRoot - Absolute path to the `public/` directory on disk.\n * @param subpath - Request path after the `/public/` route prefix.\n * @returns Absolute file path when safe and present, otherwise `null`.\n *\n * @internal\n */\nexport async function resolvePublicFilePath(\n  publicRoot: string,\n  subpath: string\n): Promise<string | null> {\n  const { stat } = await import(\"node:fs/promises\");\n  const { resolve, sep } = await import(\"node:path\");\n\n  if (\n    subpath === \"\" ||\n    subpath.includes(\"\\\\\") ||\n    subpath.split(\"/\").some((segment) => segment === \"..\")\n  ) {\n    return null;\n  }\n  const clean = subpath.replace(/^\\/+/, \"\");\n  if (clean === \"\" || clean.endsWith(\"/\")) {\n    return null;\n  }\n  const root = resolve(publicRoot);\n  const abs = resolve(root, clean);\n  if (abs !== root && !abs.startsWith(root + sep)) {\n    return null;\n  }\n  try {\n    if (!(await stat(abs)).isFile()) {\n      return null;\n    }\n  } catch {\n    return null;\n  }\n  return abs;\n}\n\n/**\n * Serve one file from the project's `public/` directory.\n *\n * @param diskPath - Absolute path resolved by {@link resolvePublicFilePath}.\n * @param options - `head` returns headers without opening a file stream.\n *   When `deferCors` is true, omit hardcoded `ACAO: *` so global\n *   {@link ServerConfig.cors} middleware owns CORS headers.\n * @returns A `Response` with `Cache-Control: public, max-age=0, must-revalidate`\n * and optionally `Access-Control-Allow-Origin: *` so cross-origin sandboxed\n * view iframes can load public files (module scripts and fetches use CORS mode).\n *\n * @internal\n */\nexport async function servePublicFile(\n  diskPath: string,\n  options: { deferCors?: boolean; head?: boolean } = {}\n): Promise<Response> {\n  const { createReadStream } = await import(\"node:fs\");\n  const { extname } = await import(\"node:path\");\n  const { Readable } = await import(\"node:stream\");\n\n  const ext = extname(diskPath).toLowerCase();\n  const contentType = PUBLIC_CONTENT_TYPES[ext] ?? \"application/octet-stream\";\n  const body =\n    options.head === true\n      ? null\n      : (Readable.toWeb(createReadStream(diskPath)) as ReadableStream);\n  return new Response(body, {\n    status: 200,\n    headers: {\n      \"Content-Type\": contentType,\n      \"Cache-Control\": \"public, max-age=0, must-revalidate\",\n      ...(options.deferCors !== true && {\n        \"Access-Control-Allow-Origin\": \"*\",\n      }),\n    },\n  });\n}\n"],"mappings":";AAAA,IAAM,uBAA+C;AAAA,EACnD,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,UAAU;AACZ;AAYA,eAAsB,sBACpB,YACA,SACwB;AACxB,QAAM,EAAE,KAAK,IAAI,MAAM,OAAO,aAAkB;AAChD,QAAM,EAAE,SAAS,IAAI,IAAI,MAAM,OAAO,MAAW;AAEjD,MACE,YAAY,MACZ,QAAQ,SAAS,IAAI,KACrB,QAAQ,MAAM,GAAG,EAAE,KAAK,CAAC,YAAY,YAAY,IAAI,GACrD;AACA,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,QAAQ,QAAQ,QAAQ,EAAE;AACxC,MAAI,UAAU,MAAM,MAAM,SAAS,GAAG,GAAG;AACvC,WAAO;AAAA,EACT;AACA,QAAM,OAAO,QAAQ,UAAU;AAC/B,QAAM,MAAM,QAAQ,MAAM,KAAK;AAC/B,MAAI,QAAQ,QAAQ,CAAC,IAAI,WAAW,OAAO,GAAG,GAAG;AAC/C,WAAO;AAAA,EACT;AACA,MAAI;AACF,QAAI,EAAE,MAAM,KAAK,GAAG,GAAG,OAAO,GAAG;AAC/B,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAeA,eAAsB,gBACpB,UACA,UAAmD,CAAC,GACjC;AACnB,QAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,IAAS;AACnD,QAAM,EAAE,QAAQ,IAAI,MAAM,OAAO,MAAW;AAC5C,QAAM,EAAE,SAAS,IAAI,MAAM,OAAO,QAAa;AAE/C,QAAM,MAAM,QAAQ,QAAQ,EAAE,YAAY;AAC1C,QAAM,cAAc,qBAAqB,GAAG,KAAK;AACjD,QAAM,OACJ,QAAQ,SAAS,OACb,OACC,SAAS,MAAM,iBAAiB,QAAQ,CAAC;AAChD,SAAO,IAAI,SAAS,MAAM;AAAA,IACxB,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,iBAAiB;AAAA,MACjB,GAAI,QAAQ,cAAc,QAAQ;AAAA,QAChC,+BAA+B;AAAA,MACjC;AAAA,IACF;AAAA,EACF,CAAC;AACH;","names":[]}

package/dist/chunk-STCR3P5O.js

@@ -1,95 +0,0 @@
-import {
-  pathUnderBase
-} from "./chunk-QUUANIE4.js";
-
-// src/views/document.ts
-function resolveAssetUrl(assetPath, origin) {
-  if (!assetPath.startsWith("/")) {
-    throw new Error(
-      `View manifest asset path must be origin-absolute (start with "/"); got ${JSON.stringify(assetPath)}`
-    );
-  }
-  return `${origin}${assetPath}`;
-}
-function viewAssetsBasePath(basePath, viewName) {
-  return `${pathUnderBase(basePath, `_mcp-use/views/${viewName}`)}/`;
-}
-function resolveExternalAssetUrl(assetPath, assetsBase, basePath, viewName) {
-  if (assetPath.startsWith("http://") || assetPath.startsWith("https://") || assetPath.startsWith("data:")) {
-    return assetPath;
-  }
-  if (assetPath.startsWith("/")) {
-    return resolveAssetUrl(assetPath, assetsBase);
-  }
-  return `${assetsBase}${viewAssetsBasePath(basePath, viewName)}${assetPath.replace(/^\/+/, "")}`;
-}
-function resolvePublicBase(assetsBase, basePath) {
-  return `${assetsBase}${pathUnderBase(basePath, "_mcp-use/public")}/`;
-}
-function escapeInlineScript(code) {
-  return code.replaceAll(/<\/script/gi, "<\\/script").replaceAll("<!--", "\\x3C!--");
-}
-function escapeInlineStyle(css) {
-  return css.replaceAll(/<\/style/gi, "<\\/style");
-}
-function escapeHtml(value) {
-  return value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
-}
-function synthesizeViewDocument(entry, assetsBase, basePath, viewName) {
-  const viewConfig = {
-    publicBase: resolvePublicBase(assetsBase, basePath)
-  };
-  const configScript = `<script>globalThis.__mcpUseViewConfig=${JSON.stringify(viewConfig)};</script>`;
-  if (entry.kind === "inline") {
-    const styleTag = entry.css.length > 0 ? `<style>${escapeInlineStyle(entry.css)}</style>` : "";
-    const moduleScript = `<script type="module">${escapeInlineScript(entry.js)}</script>`;
-    return `<!doctype html>
-<html>
-<head>
-<meta charset="utf-8">
-${configScript}
-${styleTag}
-</head>
-<body>
-<div id="root"></div>
-${moduleScript}
-</body>
-</html>`;
-  }
-  if (viewName === void 0) {
-    throw new Error(
-      "viewName is required when synthesizing an external view document."
-    );
-  }
-  const cssLinks = entry.css.map(
-    (path) => `<link rel="stylesheet" href="${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}">`
-  ).join("\n");
-  const scriptTags = (entry.scripts ?? []).map(
-    (path) => `<script type="module" src="${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}"></script>`
-  ).join("\n");
-  const entryUrl = resolveExternalAssetUrl(
-    entry.entry,
-    assetsBase,
-    basePath,
-    viewName
-  );
-  return `<!doctype html>
-<html>
-<head>
-<meta charset="utf-8">
-${configScript}
-${cssLinks}
-</head>
-<body>
-<div id="root"></div>
-${scriptTags}
-<script type="module" src="${escapeHtml(entryUrl)}"></script>
-</body>
-</html>`;
-}
-
-export {
-  viewAssetsBasePath,
-  synthesizeViewDocument
-};
-//# sourceMappingURL=chunk-STCR3P5O.js.map

package/dist/chunk-STCR3P5O.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/views/document.ts"],"sourcesContent":["import type { McpUseViewConfig } from \"../react/public-assets.js\";\nimport { pathUnderBase } from \"../fetch-app.js\";\nimport type { ViewManifestEntry } from \"./types.js\";\n\n/**\n * Resolve a manifest asset path to an absolute URL for embedding in the\n * synthesized view document.\n *\n * External manifest entries are origin-absolute `/`-prefixed paths by\n * contract ({@link ExternalViewManifestEntry}).\n *\n * @param assetPath - Origin-absolute path starting with `/`.\n * @param origin - Request-resolved public origin.\n * @returns Absolute URL `${origin}${assetPath}`.\n * @throws When `assetPath` does not start with `/`.\n */\nexport function resolveAssetUrl(assetPath: string, origin: string): string {\n  if (!assetPath.startsWith(\"/\")) {\n    throw new Error(\n      `View manifest asset path must be origin-absolute (start with \"/\"); got ${JSON.stringify(assetPath)}`\n    );\n  }\n  return `${origin}${assetPath}`;\n}\n\n/**\n * Build the HTTP path prefix for a view's built assets (no origin).\n *\n * @param basePath - MCP mount prefix (e.g. `/mcp`).\n * @param viewName - View directory / manifest key.\n */\nexport function viewAssetsBasePath(basePath: string, viewName: string): string {\n  return `${pathUnderBase(basePath, `_mcp-use/views/${viewName}`)}/`;\n}\n\n/**\n * Resolve a production or dev external asset path to an absolute URL.\n *\n * @param assetPath - Full CDN URL, origin-absolute dev path (`/…`), or\n *   view-relative production path (`assets/…`).\n * @param assetsBase - Assets URL prefix (origin + optional path).\n * @param basePath - MCP mount prefix.\n * @param viewName - View directory / manifest key (required for view-relative paths).\n */\nexport function resolveExternalAssetUrl(\n  assetPath: string,\n  assetsBase: string,\n  basePath: string,\n  viewName: string\n): string {\n  if (\n    assetPath.startsWith(\"http://\") ||\n    assetPath.startsWith(\"https://\") ||\n    assetPath.startsWith(\"data:\")\n  ) {\n    return assetPath;\n  }\n  if (assetPath.startsWith(\"/\")) {\n    return resolveAssetUrl(assetPath, assetsBase);\n  }\n  return `${assetsBase}${viewAssetsBasePath(basePath, viewName)}${assetPath.replace(/^\\/+/, \"\")}`;\n}\n\n/**\n * Resolve the absolute URL prefix for the project's `public/` directory.\n *\n * @param assetsBase - Assets URL prefix (origin + optional path).\n * @param basePath - MCP mount prefix (e.g. `/mcp`).\n * @returns Absolute prefix with trailing slash.\n */\nexport function resolvePublicBase(\n  assetsBase: string,\n  basePath: string\n): string {\n  return `${assetsBase}${pathUnderBase(basePath, \"_mcp-use/public\")}/`;\n}\n\n/**\n * Escape view JS so it can sit inside a HTML `<script>` element without\n * premature termination or comment-open sequences.\n *\n * @param code - Raw module source.\n */\nfunction escapeInlineScript(code: string): string {\n  return code\n    .replaceAll(/<\\/script/gi, \"<\\\\/script\")\n    .replaceAll(\"<!--\", \"\\\\x3C!--\");\n}\n\n/**\n * Escape CSS so it can sit inside a HTML `<style>` element without premature\n * termination.\n *\n * @param css - Raw stylesheet text.\n */\nfunction escapeInlineStyle(css: string): string {\n  return css.replaceAll(/<\\/style/gi, \"<\\\\/style\");\n}\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replaceAll(\"&\", \"&amp;\")\n    .replaceAll('\"', \"&quot;\")\n    .replaceAll(\"<\", \"&lt;\")\n    .replaceAll(\">\", \"&gt;\");\n}\n\n/**\n * Synthesize a complete HTML document for a view from manifest data.\n *\n * Production (`kind: \"external\"`) loads built assets over HTTP with absolute\n * URLs. Legacy `kind: \"inline\"` embeds JS/CSS directly. Dev uses Vite module\n * URLs (`kind: \"external\"` with origin-absolute paths).\n *\n * @param entry - Primed manifest entry for the view.\n * @param assetsBase - Request-resolved assets URL prefix for absolute asset URLs.\n * @param basePath - MCP mount prefix (e.g. `/mcp`).\n * @param viewName - View directory / manifest key (required for production external paths).\n */\nexport function synthesizeViewDocument(\n  entry: ViewManifestEntry,\n  assetsBase: string,\n  basePath: string,\n  viewName?: string\n): string {\n  const viewConfig: McpUseViewConfig = {\n    publicBase: resolvePublicBase(assetsBase, basePath),\n  };\n  const configScript = `<script>globalThis.__mcpUseViewConfig=${JSON.stringify(viewConfig)};</script>`;\n\n  if (entry.kind === \"inline\") {\n    const styleTag =\n      entry.css.length > 0\n        ? `<style>${escapeInlineStyle(entry.css)}</style>`\n        : \"\";\n    const moduleScript = `<script type=\"module\">${escapeInlineScript(entry.js)}</script>`;\n    return `<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n${configScript}\n${styleTag}\n</head>\n<body>\n<div id=\"root\"></div>\n${moduleScript}\n</body>\n</html>`;\n  }\n\n  if (viewName === undefined) {\n    throw new Error(\n      \"viewName is required when synthesizing an external view document.\"\n    );\n  }\n\n  const cssLinks = entry.css\n    .map(\n      (path) =>\n        `<link rel=\"stylesheet\" href=\"${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}\">`\n    )\n    .join(\"\\n\");\n\n  const scriptTags = (entry.scripts ?? [])\n    .map(\n      (path) =>\n        `<script type=\"module\" src=\"${escapeHtml(resolveExternalAssetUrl(path, assetsBase, basePath, viewName))}\"></script>`\n    )\n    .join(\"\\n\");\n\n  const entryUrl = resolveExternalAssetUrl(\n    entry.entry,\n    assetsBase,\n    basePath,\n    viewName\n  );\n\n  return `<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n${configScript}\n${cssLinks}\n</head>\n<body>\n<div id=\"root\"></div>\n${scriptTags}\n<script type=\"module\" src=\"${escapeHtml(entryUrl)}\"></script>\n</body>\n</html>`;\n}\n"],"mappings":";;;;;AAgBO,SAAS,gBAAgB,WAAmB,QAAwB;AACzE,MAAI,CAAC,UAAU,WAAW,GAAG,GAAG;AAC9B,UAAM,IAAI;AAAA,MACR,0EAA0E,KAAK,UAAU,SAAS,CAAC;AAAA,IACrG;AAAA,EACF;AACA,SAAO,GAAG,MAAM,GAAG,SAAS;AAC9B;AAQO,SAAS,mBAAmB,UAAkB,UAA0B;AAC7E,SAAO,GAAG,cAAc,UAAU,kBAAkB,QAAQ,EAAE,CAAC;AACjE;AAWO,SAAS,wBACd,WACA,YACA,UACA,UACQ;AACR,MACE,UAAU,WAAW,SAAS,KAC9B,UAAU,WAAW,UAAU,KAC/B,UAAU,WAAW,OAAO,GAC5B;AACA,WAAO;AAAA,EACT;AACA,MAAI,UAAU,WAAW,GAAG,GAAG;AAC7B,WAAO,gBAAgB,WAAW,UAAU;AAAA,EAC9C;AACA,SAAO,GAAG,UAAU,GAAG,mBAAmB,UAAU,QAAQ,CAAC,GAAG,UAAU,QAAQ,QAAQ,EAAE,CAAC;AAC/F;AASO,SAAS,kBACd,YACA,UACQ;AACR,SAAO,GAAG,UAAU,GAAG,cAAc,UAAU,iBAAiB,CAAC;AACnE;AAQA,SAAS,mBAAmB,MAAsB;AAChD,SAAO,KACJ,WAAW,eAAe,YAAY,EACtC,WAAW,QAAQ,UAAU;AAClC;AAQA,SAAS,kBAAkB,KAAqB;AAC9C,SAAO,IAAI,WAAW,cAAc,WAAW;AACjD;AAEA,SAAS,WAAW,OAAuB;AACzC,SAAO,MACJ,WAAW,KAAK,OAAO,EACvB,WAAW,KAAK,QAAQ,EACxB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,MAAM;AAC3B;AAcO,SAAS,uBACd,OACA,YACA,UACA,UACQ;AACR,QAAM,aAA+B;AAAA,IACnC,YAAY,kBAAkB,YAAY,QAAQ;AAAA,EACpD;AACA,QAAM,eAAe,yCAAyC,KAAK,UAAU,UAAU,CAAC;AAExF,MAAI,MAAM,SAAS,UAAU;AAC3B,UAAM,WACJ,MAAM,IAAI,SAAS,IACf,UAAU,kBAAkB,MAAM,GAAG,CAAC,aACtC;AACN,UAAM,eAAe,yBAAyB,mBAAmB,MAAM,EAAE,CAAC;AAC1E,WAAO;AAAA;AAAA;AAAA;AAAA,EAIT,YAAY;AAAA,EACZ,QAAQ;AAAA;AAAA;AAAA;AAAA,EAIR,YAAY;AAAA;AAAA;AAAA,EAGZ;AAEA,MAAI,aAAa,QAAW;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,MAAM,IACpB;AAAA,IACC,CAAC,SACC,gCAAgC,WAAW,wBAAwB,MAAM,YAAY,UAAU,QAAQ,CAAC,CAAC;AAAA,EAC7G,EACC,KAAK,IAAI;AAEZ,QAAM,cAAc,MAAM,WAAW,CAAC,GACnC;AAAA,IACC,CAAC,SACC,8BAA8B,WAAW,wBAAwB,MAAM,YAAY,UAAU,QAAQ,CAAC,CAAC;AAAA,EAC3G,EACC,KAAK,IAAI;AAEZ,QAAM,WAAW;AAAA,IACf,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,SAAO;AAAA;AAAA;AAAA;AAAA,EAIP,YAAY;AAAA,EACZ,QAAQ;AAAA;AAAA;AAAA;AAAA,EAIR,UAAU;AAAA,6BACiB,WAAW,QAAQ,CAAC;AAAA;AAAA;AAGjD;","names":[]}

package/dist/chunk-XUD22N3Y.js

@@ -1,156 +0,0 @@
-// src/commands/shared.ts
-import { spawn } from "child_process";
-import { constants } from "fs";
-import {
-  access,
-  chmod,
-  mkdir,
-  readFile,
-  rename,
-  rm,
-  writeFile
-} from "fs/promises";
-import { homedir } from "os";
-import { dirname, join } from "path";
-import { createInterface } from "readline/promises";
-var UsageError = class extends Error {
-  /** Process exit code for malformed command lines. */
-  exitCode = 2;
-};
-var CommandError = class extends Error {
-  /** Stable machine-readable error code. */
-  code;
-  /** Optional structured diagnostic details. */
-  details;
-  /**
-   * Create an operational CLI failure.
-   *
-   * @param code - Stable machine-readable code.
-   * @param message - Human-readable failure description.
-   * @param details - Optional structured diagnostics.
-   */
-  constructor(code, message, details) {
-    super(message);
-    this.code = code;
-    this.details = details;
-  }
-};
-function wantsJson(argv) {
-  return argv.includes("--json");
-}
-function printResult(value, json, human) {
-  if (json) {
-    process.stdout.write(`${JSON.stringify(value)}
-`);
-  } else if (human !== void 0) {
-    process.stdout.write(`${human}
-`);
-  } else if (typeof value === "string") {
-    process.stdout.write(`${value}
-`);
-  } else {
-    process.stdout.write(`${JSON.stringify(value, null, 2)}
-`);
-  }
-}
-function reportError(error, json) {
-  const usage = error instanceof UsageError;
-  const operational = error instanceof CommandError;
-  const code = operational ? error.code : usage ? "usage_error" : "command_failed";
-  const message = error instanceof Error ? error.message : String(error);
-  if (json) {
-    process.stderr.write(
-      `${JSON.stringify({
-        error: {
-          code,
-          message,
-          ...operational && error.details !== void 0 ? { details: error.details } : {}
-        }
-      })}
-`
-    );
-  } else {
-    process.stderr.write(`${message}
-`);
-  }
-  return usage ? 2 : 1;
-}
-async function confirm(message, options) {
-  if (options.yes) return true;
-  if (options.json || !process.stdin.isTTY) {
-    throw new UsageError(`${message} Pass --yes to confirm.`);
-  }
-  const prompt = createInterface({
-    input: process.stdin,
-    output: process.stdout
-  });
-  try {
-    const answer = await prompt.question(`${message} [y/N] `);
-    return answer.trim().toLowerCase() === "y";
-  } finally {
-    prompt.close();
-  }
-}
-function openBrowser(url) {
-  const [command, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
-  try {
-    const child = spawn(command, args, { detached: true, stdio: "ignore" });
-    child.on("error", () => {
-    });
-    child.unref();
-  } catch {
-  }
-}
-async function pathExists(path) {
-  try {
-    await access(path, constants.F_OK);
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function readJson(path, fallback) {
-  try {
-    return JSON.parse(await readFile(path, "utf8"));
-  } catch (error) {
-    if (error.code === "ENOENT") return fallback;
-    throw new CommandError("invalid_state", `Could not read ${path}.`, {
-      cause: error instanceof Error ? error.message : String(error)
-    });
-  }
-}
-async function writePrivateJson(path, value) {
-  const parent = dirname(path);
-  await mkdir(parent, { recursive: true, mode: 448 });
-  await chmod(parent, 448);
-  const temporary = join(
-    parent,
-    `.${path.slice(path.lastIndexOf("/") + 1)}.${process.pid}.${Date.now()}.tmp`
-  );
-  await writeFile(temporary, `${JSON.stringify(value, null, 2)}
-`, {
-    mode: 384
-  });
-  await rename(temporary, path);
-  await chmod(path, 384);
-}
-async function removeFile(path) {
-  await rm(path, { force: true });
-}
-var GLOBAL_STATE_DIR = join(homedir(), ".mcp-use");
-
-export {
-  UsageError,
-  CommandError,
-  wantsJson,
-  printResult,
-  reportError,
-  confirm,
-  openBrowser,
-  pathExists,
-  readJson,
-  writePrivateJson,
-  removeFile,
-  GLOBAL_STATE_DIR
-};
-//# sourceMappingURL=chunk-XUD22N3Y.js.map

package/dist/chunk-XUD22N3Y.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/commands/shared.ts"],"sourcesContent":["import { spawn } from \"node:child_process\";\nimport { constants } from \"node:fs\";\nimport {\n  access,\n  chmod,\n  mkdir,\n  readFile,\n  rename,\n  rm,\n  writeFile,\n} from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { createInterface } from \"node:readline/promises\";\n\n/** Usage error reported with exit code 2 by the CLI boundary. */\nexport class UsageError extends Error {\n  /** Process exit code for malformed command lines. */\n  readonly exitCode = 2;\n}\n\n/** Operational error reported with exit code 1 by the CLI boundary. */\nexport class CommandError extends Error {\n  /** Stable machine-readable error code. */\n  readonly code: string;\n  /** Optional structured diagnostic details. */\n  readonly details: unknown;\n\n  /**\n   * Create an operational CLI failure.\n   *\n   * @param code - Stable machine-readable code.\n   * @param message - Human-readable failure description.\n   * @param details - Optional structured diagnostics.\n   */\n  constructor(code: string, message: string, details?: unknown) {\n    super(message);\n    this.code = code;\n    this.details = details;\n  }\n}\n\n/** Whether a command should emit machine-readable output. */\nexport function wantsJson(argv: readonly string[]): boolean {\n  return argv.includes(\"--json\");\n}\n\n/** Emit one successful human or JSON result. */\nexport function printResult(\n  value: unknown,\n  json: boolean,\n  human?: string\n): void {\n  if (json) {\n    process.stdout.write(`${JSON.stringify(value)}\\n`);\n  } else if (human !== undefined) {\n    process.stdout.write(`${human}\\n`);\n  } else if (typeof value === \"string\") {\n    process.stdout.write(`${value}\\n`);\n  } else {\n    process.stdout.write(`${JSON.stringify(value, null, 2)}\\n`);\n  }\n}\n\n/** Report a command error using the CLI's text or JSON convention. */\nexport function reportError(error: unknown, json: boolean): number {\n  const usage = error instanceof UsageError;\n  const operational = error instanceof CommandError;\n  const code = operational\n    ? error.code\n    : usage\n      ? \"usage_error\"\n      : \"command_failed\";\n  const message = error instanceof Error ? error.message : String(error);\n  if (json) {\n    process.stderr.write(\n      `${JSON.stringify({\n        error: {\n          code,\n          message,\n          ...(operational && error.details !== undefined\n            ? { details: error.details }\n            : {}),\n        },\n      })}\\n`\n    );\n  } else {\n    process.stderr.write(`${message}\\n`);\n  }\n  return usage ? 2 : 1;\n}\n\n/** Require confirmation for destructive operations. */\nexport async function confirm(\n  message: string,\n  options: { yes: boolean; json: boolean }\n): Promise<boolean> {\n  if (options.yes) return true;\n  if (options.json || !process.stdin.isTTY) {\n    throw new UsageError(`${message} Pass --yes to confirm.`);\n  }\n  const prompt = createInterface({\n    input: process.stdin,\n    output: process.stdout,\n  });\n  try {\n    const answer = await prompt.question(`${message} [y/N] `);\n    return answer.trim().toLowerCase() === \"y\";\n  } finally {\n    prompt.close();\n  }\n}\n\n/** Best-effort dependency-free browser opener. */\nexport function openBrowser(url: string): void {\n  const [command, args]: [string, string[]] =\n    process.platform === \"darwin\"\n      ? [\"open\", [url]]\n      : process.platform === \"win32\"\n        ? [\"cmd\", [\"/c\", \"start\", \"\", url]]\n        : [\"xdg-open\", [url]];\n  try {\n    const child = spawn(command, args, { detached: true, stdio: \"ignore\" });\n    child.on(\"error\", () => {});\n    child.unref();\n  } catch {\n    // Opening a browser is always best-effort.\n  }\n}\n\n/** Check whether a filesystem path exists. */\nexport async function pathExists(path: string): Promise<boolean> {\n  try {\n    await access(path, constants.F_OK);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** Read JSON, returning `fallback` when the file does not exist. */\nexport async function readJson<T>(path: string, fallback: T): Promise<T> {\n  try {\n    return JSON.parse(await readFile(path, \"utf8\")) as T;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return fallback;\n    throw new CommandError(\"invalid_state\", `Could not read ${path}.`, {\n      cause: error instanceof Error ? error.message : String(error),\n    });\n  }\n}\n\n/** Atomically write JSON with private directory/file permissions. */\nexport async function writePrivateJson(\n  path: string,\n  value: unknown\n): Promise<void> {\n  const parent = dirname(path);\n  await mkdir(parent, { recursive: true, mode: 0o700 });\n  await chmod(parent, 0o700);\n  const temporary = join(\n    parent,\n    `.${path.slice(path.lastIndexOf(\"/\") + 1)}.${process.pid}.${Date.now()}.tmp`\n  );\n  await writeFile(temporary, `${JSON.stringify(value, null, 2)}\\n`, {\n    mode: 0o600,\n  });\n  await rename(temporary, path);\n  await chmod(path, 0o600);\n}\n\n/** Remove a private state file idempotently. */\nexport async function removeFile(path: string): Promise<void> {\n  await rm(path, { force: true });\n}\n\n/** Global mcp-use state directory. */\nexport const GLOBAL_STATE_DIR = join(homedir(), \".mcp-use\");\n"],"mappings":";AAAA,SAAS,aAAa;AACtB,SAAS,iBAAiB;AAC1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,eAAe;AACxB,SAAS,SAAS,YAAY;AAC9B,SAAS,uBAAuB;AAGzB,IAAM,aAAN,cAAyB,MAAM;AAAA;AAAA,EAE3B,WAAW;AACtB;AAGO,IAAM,eAAN,cAA2B,MAAM;AAAA;AAAA,EAE7B;AAAA;AAAA,EAEA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAST,YAAY,MAAc,SAAiB,SAAmB;AAC5D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,UAAU;AAAA,EACjB;AACF;AAGO,SAAS,UAAU,MAAkC;AAC1D,SAAO,KAAK,SAAS,QAAQ;AAC/B;AAGO,SAAS,YACd,OACA,MACA,OACM;AACN,MAAI,MAAM;AACR,YAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,KAAK,CAAC;AAAA,CAAI;AAAA,EACnD,WAAW,UAAU,QAAW;AAC9B,YAAQ,OAAO,MAAM,GAAG,KAAK;AAAA,CAAI;AAAA,EACnC,WAAW,OAAO,UAAU,UAAU;AACpC,YAAQ,OAAO,MAAM,GAAG,KAAK;AAAA,CAAI;AAAA,EACnC,OAAO;AACL,YAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,CAAI;AAAA,EAC5D;AACF;AAGO,SAAS,YAAY,OAAgB,MAAuB;AACjE,QAAM,QAAQ,iBAAiB;AAC/B,QAAM,cAAc,iBAAiB;AACrC,QAAM,OAAO,cACT,MAAM,OACN,QACE,gBACA;AACN,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,MAAI,MAAM;AACR,YAAQ,OAAO;AAAA,MACb,GAAG,KAAK,UAAU;AAAA,QAChB,OAAO;AAAA,UACL;AAAA,UACA;AAAA,UACA,GAAI,eAAe,MAAM,YAAY,SACjC,EAAE,SAAS,MAAM,QAAQ,IACzB,CAAC;AAAA,QACP;AAAA,MACF,CAAC,CAAC;AAAA;AAAA,IACJ;AAAA,EACF,OAAO;AACL,YAAQ,OAAO,MAAM,GAAG,OAAO;AAAA,CAAI;AAAA,EACrC;AACA,SAAO,QAAQ,IAAI;AACrB;AAGA,eAAsB,QACpB,SACA,SACkB;AAClB,MAAI,QAAQ,IAAK,QAAO;AACxB,MAAI,QAAQ,QAAQ,CAAC,QAAQ,MAAM,OAAO;AACxC,UAAM,IAAI,WAAW,GAAG,OAAO,yBAAyB;AAAA,EAC1D;AACA,QAAM,SAAS,gBAAgB;AAAA,IAC7B,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ;AAAA,EAClB,CAAC;AACD,MAAI;AACF,UAAM,SAAS,MAAM,OAAO,SAAS,GAAG,OAAO,SAAS;AACxD,WAAO,OAAO,KAAK,EAAE,YAAY,MAAM;AAAA,EACzC,UAAE;AACA,WAAO,MAAM;AAAA,EACf;AACF;AAGO,SAAS,YAAY,KAAmB;AAC7C,QAAM,CAAC,SAAS,IAAI,IAClB,QAAQ,aAAa,WACjB,CAAC,QAAQ,CAAC,GAAG,CAAC,IACd,QAAQ,aAAa,UACnB,CAAC,OAAO,CAAC,MAAM,SAAS,IAAI,GAAG,CAAC,IAChC,CAAC,YAAY,CAAC,GAAG,CAAC;AAC1B,MAAI;AACF,UAAM,QAAQ,MAAM,SAAS,MAAM,EAAE,UAAU,MAAM,OAAO,SAAS,CAAC;AACtE,UAAM,GAAG,SAAS,MAAM;AAAA,IAAC,CAAC;AAC1B,UAAM,MAAM;AAAA,EACd,QAAQ;AAAA,EAER;AACF;AAGA,eAAsB,WAAW,MAAgC;AAC/D,MAAI;AACF,UAAM,OAAO,MAAM,UAAU,IAAI;AACjC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,eAAsB,SAAY,MAAc,UAAyB;AACvE,MAAI;AACF,WAAO,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;AAAA,EAChD,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO;AAC/D,UAAM,IAAI,aAAa,iBAAiB,kBAAkB,IAAI,KAAK;AAAA,MACjE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC9D,CAAC;AAAA,EACH;AACF;AAGA,eAAsB,iBACpB,MACA,OACe;AACf,QAAM,SAAS,QAAQ,IAAI;AAC3B,QAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACpD,QAAM,MAAM,QAAQ,GAAK;AACzB,QAAM,YAAY;AAAA,IAChB;AAAA,IACA,IAAI,KAAK,MAAM,KAAK,YAAY,GAAG,IAAI,CAAC,CAAC,IAAI,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC;AAAA,EACxE;AACA,QAAM,UAAU,WAAW,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,GAAM;AAAA,IAChE,MAAM;AAAA,EACR,CAAC;AACD,QAAM,OAAO,WAAW,IAAI;AAC5B,QAAM,MAAM,MAAM,GAAK;AACzB;AAGA,eAAsB,WAAW,MAA6B;AAC5D,QAAM,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC;AAChC;AAGO,IAAM,mBAAmB,KAAK,QAAQ,GAAG,UAAU;","names":[]}

package/dist/chunk-Z326HADF.js

@@ -1,82 +0,0 @@
-import {
-  getRequestBag
-} from "./chunk-QUUANIE4.js";
-import {
-  getOAuthProviderOptions,
-  wrapOAuthTokenVerifier
-} from "./chunk-DPL7OEXC.js";
-
-// src/oauth/index.ts
-import {
-  OAuthError,
-  OAuthErrorCode,
-  bearerAuthChallengeResponse,
-  getOAuthProtectedResourceMetadataUrl as getOAuthProtectedResourceMetadataUrl2,
-  oauthMetadataResponse as oauthMetadataResponse2,
-  requireBearerAuth as requireBearerAuth2,
-  verifyBearerToken
-} from "@modelcontextprotocol/server";
-
-// src/oauth/adapters.ts
-import {
-  getOAuthProtectedResourceMetadataUrl,
-  oauthMetadataResponse,
-  requireBearerAuth
-} from "@modelcontextprotocol/server";
-function bearerAuth(provider, resource) {
-  const options = getOAuthProviderOptions(provider);
-  const gate = requireBearerAuth({
-    verifier: wrapOAuthTokenVerifier(provider, resource),
-    resourceMetadataUrl: getOAuthProtectedResourceMetadataUrl(resource),
-    ...options.requiredScopes !== void 0 && {
-      requiredScopes: [...options.requiredScopes]
-    }
-  });
-  return async (request, next) => {
-    const result = await gate(request);
-    if (result instanceof Response) {
-      return result;
-    }
-    getRequestBag(request).authInfo = result;
-    return next();
-  };
-}
-function oauthMetadata(provider, resource) {
-  const options = getOAuthProviderOptions(provider);
-  return async (request, next) => {
-    const response = oauthMetadataResponse(request, {
-      oauthMetadata: options.oauthMetadata,
-      resourceServerUrl: resource,
-      ...options.scopesSupported !== void 0 && {
-        scopesSupported: [...options.scopesSupported]
-      },
-      ...options.resourceName !== void 0 && {
-        resourceName: options.resourceName
-      },
-      ...options.serviceDocumentationUrl !== void 0 && {
-        serviceDocumentationUrl: options.serviceDocumentationUrl
-      }
-    });
-    if (response !== void 0) {
-      return response;
-    }
-    return next();
-  };
-}
-function authInfoFromRequest(request) {
-  return getRequestBag(request).authInfo;
-}
-
-export {
-  bearerAuth,
-  oauthMetadata,
-  authInfoFromRequest,
-  OAuthError,
-  OAuthErrorCode,
-  bearerAuthChallengeResponse,
-  getOAuthProtectedResourceMetadataUrl2 as getOAuthProtectedResourceMetadataUrl,
-  oauthMetadataResponse2 as oauthMetadataResponse,
-  requireBearerAuth2 as requireBearerAuth,
-  verifyBearerToken
-};
-//# sourceMappingURL=chunk-Z326HADF.js.map

package/dist/chunk-Z326HADF.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/oauth/index.ts","../src/oauth/adapters.ts"],"sourcesContent":["/**\n * OAuth resource-server helpers and provider configuration for mcp-use.\n *\n * @packageDocumentation\n */\nexport {\n  OAuthError,\n  OAuthErrorCode,\n  bearerAuthChallengeResponse,\n  getOAuthProtectedResourceMetadataUrl,\n  oauthMetadataResponse,\n  requireBearerAuth,\n  verifyBearerToken,\n} from \"@modelcontextprotocol/server\";\nexport type {\n  AuthInfo as OAuthAuthInfo,\n  AuthMetadataOptions,\n  BearerAuthOptions,\n  OAuthMetadata,\n  OAuthProtectedResourceMetadata,\n  OAuthTokenVerifier,\n} from \"@modelcontextprotocol/server\";\n\nexport { bearerAuth, oauthMetadata } from \"./adapters.js\";\nexport {\n  oauthCustomProvider,\n  type CustomOAuthProviderOptions,\n  type OAuthExtra,\n  type OAuthProvider,\n  type OAuthResourceOptions,\n} from \"./provider.js\";\n","import {\n  getOAuthProtectedResourceMetadataUrl,\n  oauthMetadataResponse,\n  requireBearerAuth,\n  type AuthInfo,\n} from \"@modelcontextprotocol/server\";\n\nimport { getRequestBag, type FetchMiddleware } from \"../fetch-app.js\";\nimport { getOAuthProviderOptions, wrapOAuthTokenVerifier } from \"./internal.js\";\nimport type { OAuthProvider } from \"./provider.js\";\n\n/**\n * Fetch middleware that requires a bearer token for a canonical resource.\n *\n * @typeParam TUser - Application user type carried by the provider.\n * @param provider - OAuth provider that verifies the bearer token.\n * @param resource - Canonical public MCP endpoint URL.\n */\nexport function bearerAuth<TUser>(\n  provider: OAuthProvider<TUser>,\n  resource: URL\n): FetchMiddleware {\n  const options = getOAuthProviderOptions(provider);\n  const gate = requireBearerAuth({\n    verifier: wrapOAuthTokenVerifier(provider, resource),\n    resourceMetadataUrl: getOAuthProtectedResourceMetadataUrl(resource),\n    ...(options.requiredScopes !== undefined && {\n      requiredScopes: [...options.requiredScopes],\n    }),\n  });\n\n  return async (request, next) => {\n    const result = await gate(request);\n    if (result instanceof Response) {\n      return result;\n    }\n    getRequestBag(request).authInfo = result;\n    return next();\n  };\n}\n\n/**\n * Fetch middleware that serves OAuth discovery metadata.\n *\n * @typeParam TUser - Application user type carried by the provider.\n * @param provider - OAuth provider that supplies authorization-server metadata.\n * @param resource - Canonical public MCP endpoint URL.\n */\nexport function oauthMetadata<TUser>(\n  provider: OAuthProvider<TUser>,\n  resource: URL\n): FetchMiddleware {\n  const options = getOAuthProviderOptions(provider);\n  return async (request, next) => {\n    const response = oauthMetadataResponse(request, {\n      oauthMetadata: options.oauthMetadata,\n      resourceServerUrl: resource,\n      ...(options.scopesSupported !== undefined && {\n        scopesSupported: [...options.scopesSupported],\n      }),\n      ...(options.resourceName !== undefined && {\n        resourceName: options.resourceName,\n      }),\n      ...(options.serviceDocumentationUrl !== undefined && {\n        serviceDocumentationUrl: options.serviceDocumentationUrl,\n      }),\n    });\n    if (response !== undefined) {\n      return response;\n    }\n    return next();\n  };\n}\n/**\n * Read verified {@link AuthInfo} from the request bag after {@link bearerAuth}.\n *\n * @param request - Request that passed through bearer auth middleware.\n */\nexport function authInfoFromRequest(request: Request): AuthInfo | undefined {\n  return getRequestBag(request).authInfo;\n}\n"],"mappings":";;;;;;;;;AAKA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA,wCAAAA;AAAA,EACA,yBAAAC;AAAA,EACA,qBAAAC;AAAA,EACA;AAAA,OACK;;;ACbP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAaA,SAAS,WACd,UACA,UACiB;AACjB,QAAM,UAAU,wBAAwB,QAAQ;AAChD,QAAM,OAAO,kBAAkB;AAAA,IAC7B,UAAU,uBAAuB,UAAU,QAAQ;AAAA,IACnD,qBAAqB,qCAAqC,QAAQ;AAAA,IAClE,GAAI,QAAQ,mBAAmB,UAAa;AAAA,MAC1C,gBAAgB,CAAC,GAAG,QAAQ,cAAc;AAAA,IAC5C;AAAA,EACF,CAAC;AAED,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,SAAS,MAAM,KAAK,OAAO;AACjC,QAAI,kBAAkB,UAAU;AAC9B,aAAO;AAAA,IACT;AACA,kBAAc,OAAO,EAAE,WAAW;AAClC,WAAO,KAAK;AAAA,EACd;AACF;AASO,SAAS,cACd,UACA,UACiB;AACjB,QAAM,UAAU,wBAAwB,QAAQ;AAChD,SAAO,OAAO,SAAS,SAAS;AAC9B,UAAM,WAAW,sBAAsB,SAAS;AAAA,MAC9C,eAAe,QAAQ;AAAA,MACvB,mBAAmB;AAAA,MACnB,GAAI,QAAQ,oBAAoB,UAAa;AAAA,QAC3C,iBAAiB,CAAC,GAAG,QAAQ,eAAe;AAAA,MAC9C;AAAA,MACA,GAAI,QAAQ,iBAAiB,UAAa;AAAA,QACxC,cAAc,QAAQ;AAAA,MACxB;AAAA,MACA,GAAI,QAAQ,4BAA4B,UAAa;AAAA,QACnD,yBAAyB,QAAQ;AAAA,MACnC;AAAA,IACF,CAAC;AACD,QAAI,aAAa,QAAW;AAC1B,aAAO;AAAA,IACT;AACA,WAAO,KAAK;AAAA,EACd;AACF;AAMO,SAAS,oBAAoB,SAAwC;AAC1E,SAAO,cAAc,OAAO,EAAE;AAChC;","names":["getOAuthProtectedResourceMetadataUrl","oauthMetadataResponse","requireBearerAuth"]}