mcp-use 2.0.0-beta.9 → 2.0.1

package/dist/{chunk-GTOOHAI2.js → chunk-GX6PGIEO.js}

@@ -1,68 +1,25 @@
-// src/landing.ts
-function escapeHtml(text) {
-  return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
-}
-function serializeScriptJson(value) {
-  return JSON.stringify(value).replace(/</g, "\\u003c").replace(/>/g, "\\u003e");
-}
-function sanitizeServerName(name) {
-  return name.replace(/[^a-zA-Z0-9-_]/g, "_").toLowerCase();
-}
-function generateCursorDeepLink(url, name) {
-  const config = { url };
-  const configJson = JSON.stringify(config);
-  const base64Config = typeof Buffer !== "undefined" ? Buffer.from(configJson).toString("base64") : btoa(configJson);
-  const sanitizedName = sanitizeServerName(name);
-  return `cursor://anysphere.cursor-deeplink/mcp/install?config=${encodeURIComponent(base64Config)}&name=${encodeURIComponent(sanitizedName)}`;
-}
-function generateVSCodeDeepLink(url, name) {
-  const config = {
-    url,
-    name: sanitizeServerName(name),
-    type: "http"
-  };
-  const configJson = JSON.stringify(config);
-  const urlEncodedConfig = encodeURIComponent(configJson);
-  return `vscode:mcp/install?${urlEncodedConfig}`;
-}
-function generateVSCodeInsidersDeepLink(url, name) {
-  const config = {
-    url,
-    name: sanitizeServerName(name),
-    type: "http"
-  };
-  const configJson = JSON.stringify(config);
-  const urlEncodedConfig = encodeURIComponent(configJson);
-  return `vscode-insiders:mcp/install?${urlEncodedConfig}`;
-}
-function generateClaudeCommand(url, name) {
-  const sanitizedName = sanitizeServerName(name);
-  const quotedUrl = `'${url.replace(/'/g, "'\\''")}'`;
-  return `claude mcp add --transport http "${sanitizedName}" ${quotedUrl}`;
-}
-var MANUFACT_INSPECTOR_ORIGIN = "https://inspector.manufact.com";
-function getManufactInspectorUrl(serverUrl) {
-  const params = new URLSearchParams({
-    autoConnect: serverUrl,
-    tab: "chat"
-  });
-  return `${MANUFACT_INSPECTOR_ORIGIN}/inspector?${params.toString()}`;
-}
-var LOGO_SVG_PATHS = {
-  path1: "M105.933 0C164.437 0.000115889 211.865 47.607 211.865 106.333C211.865 131.828 210.494 158.401 221.068 181.6L228.976 198.947C243.585 230.997 269.266 256.7 301.304 271.336L316.156 278.121C340.143 289.079 367.695 287.335 394.067 287.335C452.572 287.335 500 334.942 500 393.668C500 452.394 452.572 500.001 394.067 500.001C335.563 500.001 288.135 452.394 288.135 393.668C288.135 368.974 289.241 343.275 278.992 320.807L270.587 302.38C255.949 270.289 230.214 244.565 198.118 229.939L180.164 221.758C157.282 211.331 131.078 212.666 105.933 212.666C47.4278 212.666 4.92992e-05 165.059 0 106.333C0 47.607 47.4278 0 105.933 0Z",
-  circle: { cx: 100.426, cy: 399.575, r: 100.426 },
-  path2: "M500 100.426C500 155.889 455.037 200.851 399.574 200.851C344.11 200.851 299.148 155.889 299.148 100.426C299.148 44.962 344.11 0 399.574 0C455.037 0 500 44.962 500 100.426Z"
-};
-var LINE_INTERSECTION_PATH = "M10.5 4C10.5 7.31371 7.81371 10 4.5 10H0.5V11H4.5C7.81371 11 10.5 13.6863 10.5 17V21H11.5V17C11.5 13.6863 14.1863 11 17.5 11H21.5V10H17.5C14.1863 10 11.5 7.31371 11.5 4V0H10.5V4Z";
-function getMeshGradientScript() {
-  const VERT = `#version 300 es
+function escapeHtml(text){return text.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;")}function serializeScriptJson(value){return JSON.stringify(value).replace(/</g,"\\u003c").replace(/>/g,"\\u003e")}function sanitizeServerName(name){return name.replace(/[^a-zA-Z0-9-_]/g,"_").toLowerCase()}function generateCursorDeepLink(url,name){let configJson=JSON.stringify({url}),base64Config=typeof Buffer<"u"?Buffer.from(configJson).toString("base64"):btoa(configJson),sanitizedName=sanitizeServerName(name);return`cursor://anysphere.cursor-deeplink/mcp/install?config=${encodeURIComponent(base64Config)}&name=${encodeURIComponent(sanitizedName)}`}function generateVSCodeDeepLink(url,name){let config={url,name:sanitizeServerName(name),type:"http"},configJson=JSON.stringify(config);return`vscode:mcp/install?${encodeURIComponent(configJson)}`}function generateVSCodeInsidersDeepLink(url,name){let config={url,name:sanitizeServerName(name),type:"http"},configJson=JSON.stringify(config);return`vscode-insiders:mcp/install?${encodeURIComponent(configJson)}`}function generateClaudeCommand(url,name){let sanitizedName=sanitizeServerName(name),quotedUrl=`'${url.replace(/'/g,"'\\''")}'`;return`claude mcp add --transport http "${sanitizedName}" ${quotedUrl}`}var MANUFACT_INSPECTOR_ORIGIN="https://inspector.manufact.com";function getManufactInspectorUrl(serverUrl){let params=new URLSearchParams({autoConnect:serverUrl,tab:"chat"});return`${MANUFACT_INSPECTOR_ORIGIN}/inspector?${params.toString()}`}var LOGO_SVG_PATHS={path1:"M105.933 0C164.437 0.000115889 211.865 47.607 211.865 106.333C211.865 131.828 210.494 158.401 221.068 181.6L228.976 198.947C243.585 230.997 269.266 256.7 301.304 271.336L316.156 278.121C340.143 289.079 367.695 287.335 394.067 287.335C452.572 287.335 500 334.942 500 393.668C500 452.394 452.572 500.001 394.067 500.001C335.563 500.001 288.135 452.394 288.135 393.668C288.135 368.974 289.241 343.275 278.992 320.807L270.587 302.38C255.949 270.289 230.214 244.565 198.118 229.939L180.164 221.758C157.282 211.331 131.078 212.666 105.933 212.666C47.4278 212.666 4.92992e-05 165.059 0 106.333C0 47.607 47.4278 0 105.933 0Z",circle:{cx:100.426,cy:399.575,r:100.426},path2:"M500 100.426C500 155.889 455.037 200.851 399.574 200.851C344.11 200.851 299.148 155.889 299.148 100.426C299.148 44.962 344.11 0 399.574 0C455.037 0 500 44.962 500 100.426Z"},LINE_INTERSECTION_PATH="M10.5 4C10.5 7.31371 7.81371 10 4.5 10H0.5V11H4.5C7.81371 11 10.5 13.6863 10.5 17V21H11.5V17C11.5 13.6863 14.1863 11 17.5 11H21.5V10H17.5C14.1863 10 11.5 7.31371 11.5 4V0H10.5V4Z";function getMeshGradientScript(){return`(function(){
+var c=document.getElementById('mesh-bg');
+if(!c)return;
+var wrap=c.parentElement;
+if(!wrap)return;
+var gl=c.getContext('webgl2');
+if(!gl)return;
+function compileShader(typ,src){
+  var s=gl.createShader(typ);
+  gl.shaderSource(s,src);
+  gl.compileShader(s);
+  if(!gl.getShaderParameter(s,gl.COMPILE_STATUS)){console.error(gl.getShaderInfoLog(s));return null;}
+  return s;
+}
+var vs=compileShader(gl.VERTEX_SHADER,${JSON.stringify(`#version 300 es
 in vec4 a_position;
 out vec2 v_objectUV;
 void main(){
   gl_Position=a_position;
-  v_objectUV=a_position.xy*0.5+0.5;
-}`;
-  const FRAG = `#version 300 es
+  v_objectUV=a_position.xy*0.5;
+}`)});
+var fs=compileShader(gl.FRAGMENT_SHADER,${JSON.stringify(`#version 300 es
 precision mediump float;
 uniform float u_time;
 uniform vec4 u_colors[4];
@@ -129,23 +86,7 @@ void main(){
   color=mix(color,grainOC,.35*grainOS);
   opacity+=.5*grainOS;
   fragColor=vec4(color,clamp(opacity,0.,1.));
-}`;
-  return `(function(){
-var c=document.getElementById('mesh-bg');
-if(!c)return;
-var wrap=c.parentElement;
-if(!wrap)return;
-var gl=c.getContext('webgl2');
-if(!gl)return;
-function compileShader(typ,src){
-  var s=gl.createShader(typ);
-  gl.shaderSource(s,src);
-  gl.compileShader(s);
-  if(!gl.getShaderParameter(s,gl.COMPILE_STATUS)){console.error(gl.getShaderInfoLog(s));return null;}
-  return s;
-}
-var vs=compileShader(gl.VERTEX_SHADER,${JSON.stringify(VERT)});
-var fs=compileShader(gl.FRAGMENT_SHADER,${JSON.stringify(FRAG)});
+}`)});
 if(!vs||!fs)return;
 var prog=gl.createProgram();
 gl.attachShader(prog,vs);
@@ -196,55 +137,10 @@ function draw(){
 resize();
 new ResizeObserver(resize).observe(wrap);
 draw();
-})();`;
-}
-function generateLandingPage(options) {
-  const {
-    name: protocolName,
-    title,
-    version,
-    url,
-    description,
-    tools,
-    prompts,
-    resources,
-    iconUrl
-  } = options;
-  const name = title ?? protocolName;
-  const cursorDeepLink = generateCursorDeepLink(url, name);
-  const vscodeDeepLink = generateVSCodeDeepLink(url, name);
-  const vscodeInsidersDeepLink = generateVSCodeInsidersDeepLink(url, name);
-  const claudeCommand = generateClaudeCommand(url, name);
-  const manufactInspectorUrl = getManufactInspectorUrl(url);
-  const safeName = escapeHtml(name);
-  const safeDescription = description ? escapeHtml(description) : "";
-  const rawMetaDescription = description || `${name} MCP Server \u2014 Connect with Claude Code, Cursor, and VS Code. Model Context Protocol server.`;
-  const metaDescription = escapeHtml(rawMetaDescription);
-  const pageTitle = `${safeName} MCP Server \u2014 Connect with Claude Code, Cursor & VS Code`;
-  const jsonLd = serializeScriptJson({
-    "@context": "https://schema.org",
-    "@type": "SoftwareApplication",
-    name,
-    softwareVersion: version,
-    description: rawMetaDescription,
-    applicationCategory: "DeveloperApplication"
-  });
-  const normalizedTools = tools && tools.length > 0 ? tools.map((tool) => ({
-    name: tool.title ?? tool.name,
-    ...tool.description !== void 0 && {
-      description: tool.description
-    }
-  })) : [];
-  const toolsListHtml = normalizedTools.length > 0 ? normalizedTools.map(
-    (t) => `<div class="spec-item"><code class="spec-name">${escapeHtml(t.name)}</code>${t.description ? `<p class="spec-desc">${escapeHtml(t.description)}</p>` : ""}</div>`
-  ).join("\n") : "";
-  const promptsListHtml = prompts && prompts.length > 0 ? prompts.map(
-    (p) => `<div class="spec-item"><code class="spec-name">${escapeHtml(p.title ?? p.name)}</code>${p.description ? `<p class="spec-desc">${escapeHtml(p.description)}</p>` : ""}</div>`
-  ).join("\n") : "";
-  const resourcesListHtml = resources && resources.length > 0 ? resources.map(
-    (r) => `<div class="spec-item"><code class="spec-uri">${escapeHtml(r.uri)}</code>${r.description ? `<p class="spec-desc">${escapeHtml(r.description)}</p>` : ""}</div>`
-  ).join("\n") : "";
-  return `<!DOCTYPE html>
+})();`}function generateLandingPage(options){let{name:protocolName,title,version,url,description,tools,prompts,resources,iconUrl,iconType}=options,name=title??protocolName,cursorDeepLink=generateCursorDeepLink(url,name),vscodeDeepLink=generateVSCodeDeepLink(url,name),vscodeInsidersDeepLink=generateVSCodeInsidersDeepLink(url,name),claudeCommand=generateClaudeCommand(url,name),manufactInspectorUrl=getManufactInspectorUrl(url),safeName=escapeHtml(name),safeDescription=description?escapeHtml(description):"",rawMetaDescription=description||`${name} MCP Server \u2014 Connect with Claude Code, Cursor, and VS Code. Model Context Protocol server.`,metaDescription=escapeHtml(rawMetaDescription),pageTitle=`${safeName} MCP Server \u2014 Connect with Claude Code, Cursor & VS Code`,jsonLd=serializeScriptJson({"@context":"https://schema.org","@type":"SoftwareApplication",name,softwareVersion:version,description:rawMetaDescription,applicationCategory:"DeveloperApplication"}),normalizedTools=tools&&tools.length>0?tools.map(tool=>({name:tool.title??tool.name,...tool.description!==void 0&&{description:tool.description}})):[],toolsListHtml=normalizedTools.length>0?normalizedTools.map(t=>`<div class="spec-item"><code class="spec-name">${escapeHtml(t.name)}</code>${t.description?`<p class="spec-desc">${escapeHtml(t.description)}</p>`:""}</div>`).join(`
+`):"",promptsListHtml=prompts&&prompts.length>0?prompts.map(p=>`<div class="spec-item"><code class="spec-name">${escapeHtml(p.title??p.name)}</code>${p.description?`<p class="spec-desc">${escapeHtml(p.description)}</p>`:""}</div>`).join(`
+`):"",resourcesListHtml=resources&&resources.length>0?resources.map(r=>`<div class="spec-item"><code class="spec-uri">${escapeHtml(r.uri)}</code>${r.description?`<p class="spec-desc">${escapeHtml(r.description)}</p>`:""}</div>`).join(`
+`):"";return`<!DOCTYPE html>
 <html lang="en">
 <head>
 <meta charset="UTF-8">
@@ -257,7 +153,7 @@ function generateLandingPage(options) {
 <meta name="twitter:card" content="summary">
 <meta name="twitter:title" content="${pageTitle}">
 <meta name="twitter:description" content="${metaDescription}">
-${iconUrl ? `<link rel="icon" href="${escapeHtml(iconUrl)}">` : ""}
+${iconUrl?`<link rel="icon"${iconType?` type="${escapeHtml(iconType)}"`:""} href="${escapeHtml(iconUrl)}">`:""}
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <link href="https://fonts.googleapis.com/css2?family=Outfit:wght@400;500;600;700&display=swap" rel="stylesheet">
@@ -578,12 +474,12 @@ a:hover { text-decoration: underline; }
     <div class="hero-gradient-wrap" id="hero-gradient-wrap">
       <canvas id="mesh-bg" aria-hidden="true"></canvas>
       <div class="hero-inner">
-        <div class="card-header ${iconUrl ? "has-icon" : ""}">
-          ${iconUrl ? `<img src="${escapeHtml(iconUrl)}" alt="" class="hero-icon" width="64" height="64" />` : ""}
+        <div class="card-header ${iconUrl?"has-icon":""}">
+          ${iconUrl?`<img src="${escapeHtml(iconUrl)}" alt="" class="hero-icon" width="64" height="64" />`:""}
           <div class="hero-row">
             <h1>${safeName} <span class="version">(v${escapeHtml(version)})</span></h1>
           </div>
-          ${safeDescription ? `<p class="hero-description">${safeDescription}</p>` : ""}
+          ${safeDescription?`<p class="hero-description">${safeDescription}</p>`:""}
           <div class="hero-url-block">
             <div class="url-block">
               <div class="url-box" data-copy="${escapeHtml(url)}">${escapeHtml(url)}</div>
@@ -661,16 +557,16 @@ a:hover { text-decoration: underline; }
     </div>
   </div>
 
-  ${toolsListHtml || promptsListHtml || resourcesListHtml ? `
+  ${toolsListHtml||promptsListHtml||resourcesListHtml?`
   <div class="card">
     <div class="card-header">
       <h2 class="card-title">Primitives</h2>
-      ${toolsListHtml ? `<div class="spec-section"><h3>Tools (${normalizedTools.length})</h3>${toolsListHtml}</div>` : ""}
-      ${promptsListHtml ? `<div class="spec-section"><h3>Prompts (${prompts.length})</h3>${promptsListHtml}</div>` : ""}
-      ${resourcesListHtml ? `<div class="spec-section"><h3>Resources (${resources.length})</h3>${resourcesListHtml}</div>` : ""}
+      ${toolsListHtml?`<div class="spec-section"><h3>Tools (${normalizedTools.length})</h3>${toolsListHtml}</div>`:""}
+      ${promptsListHtml?`<div class="spec-section"><h3>Prompts (${prompts.length})</h3>${promptsListHtml}</div>`:""}
+      ${resourcesListHtml?`<div class="spec-section"><h3>Resources (${resources.length})</h3>${resourcesListHtml}</div>`:""}
     </div>
   </div>
-  ` : ""}
+  `:""}
 
   <footer class="footer-content">
     <a href="https://manufact.com" target="_blank" rel="noopener noreferrer" class="footer-brand-link" aria-label="Manufact">
@@ -731,10 +627,4 @@ a:hover { text-decoration: underline; }
 })();
 </script>
 </body>
-</html>`;
-}
-
-export {
-  generateLandingPage
-};
-//# sourceMappingURL=chunk-GTOOHAI2.js.map
+</html>`}export{generateLandingPage};

package/dist/chunk-IS7FKXFR.js

@@ -0,0 +1 @@
+function isRecord(value){return value!==null&&typeof value=="object"&&!Array.isArray(value)}function isLocalhost(url){let hostname=url.hostname.toLowerCase();return hostname==="localhost"||hostname.endsWith(".localhost")||hostname==="[::1]"||/^127(?:\.\d{1,3}){3}$/.test(hostname)}function parseAbsoluteUrl(value,name){let url;try{url=new URL(value)}catch{throw new Error(`${name} must be an absolute URL`)}if(url.origin==="null"||url.username!==""||url.password!=="")throw new Error(`${name} must be an absolute URL without credentials`);return url}function assertSecureHttpUrl(url,name){if(url.protocol!=="https:"&&!(url.protocol==="http:"&&isLocalhost(url)))throw new Error(`${name} must use HTTPS, or HTTP for localhost`)}import{OAuthError,OAuthErrorCode}from"@modelcontextprotocol/server";function invalidToken(message,cause){let error=new OAuthError(OAuthErrorCode.InvalidToken,message);return cause!==void 0&&(error.cause=cause),error}function resolveConfiguredOAuthResource(options){let provider=options.provider,basePath=normalizeBasePath(options.basePath);if(provider.resource!==void 0)return validateOAuthResource(provider.resource,basePath);if(options.mcpUrl!==void 0)return validateOAuthResource(appendBasePath(requireAbsoluteOrigin(options.mcpUrl,"MCP_URL"),basePath),basePath)}function resolveLocalOAuthResource(listenOrigin,basePath){let listenOriginUrl=requireAbsoluteOrigin(listenOrigin,"listen origin");if(!isLocalhost(listenOriginUrl))throw new Error("OAuth listen origin must be localhost or a loopback address");return validateOAuthResource(appendBasePath(listenOriginUrl,normalizeBasePath(basePath)),basePath)}function validateOAuthResource(resource,basePath){let normalizedBasePath=normalizeBasePath(basePath),url=parseAbsoluteUrl(resource,"OAuth resource");if(url.search!==""||url.hash!=="")throw new Error("OAuth resource must not include a query string or fragment");if(assertSecureHttpUrl(url,"OAuth resource"),normalizePathname(url.pathname)!==normalizedBasePath)throw new Error(`OAuth resource path must exactly match basePath (${normalizedBasePath})`);return url.pathname=normalizedBasePath,url}function wrapOAuthTokenVerifier(provider,expectedResource){let canonicalResource=normalizeResourceUrl(expectedResource),tokenVerifier=provider.createTokenVerifier(new URL(canonicalResource.href));if(tokenVerifier===null||typeof tokenVerifier!="object"||typeof tokenVerifier.verifyAccessToken!="function")throw new TypeError("OAuth provider createTokenVerifier must return an OAuthTokenVerifier");return{async verifyAccessToken(token){let authInfo=await tokenVerifier.verifyAccessToken(token);assertVerifiedAuthInfo(authInfo),assertResourceBinding(authInfo,canonicalResource);let mapped;try{mapped=provider.mapAuthInfo(authInfo)}catch(error){throw invalidToken("Token identity mapping failed",error)}return assertMappedExtra(mapped),{...authInfo,scopes:[...authInfo.scopes],extra:{...authInfo.extra,...mapped}}}}}function assertResourceBinding(authInfo,expectedResource){if(authInfo.resource===void 0)throw invalidToken("Token verifier did not return a validated protected resource");if(parseTokenResource(authInfo.resource).href!==normalizeResourceUrl(expectedResource).href)throw invalidToken("Token resource does not match the protected resource")}function parseTokenResource(value){if(!(value instanceof URL))throw invalidToken("Token resource must be an absolute HTTPS URL, or HTTP URL for localhost");let resource=value;if(!/^https?:$/.test(resource.protocol)||resource.username!==""||resource.password!==""||resource.search!==""||resource.hash!==""||resource.protocol==="http:"&&!isLocalhost(resource))throw invalidToken("Token resource must be an absolute HTTPS URL, or HTTP URL for localhost");return normalizeResourceUrl(resource)}function normalizeResourceUrl(resource){let normalized=new URL(resource);return normalized.pathname=normalized.pathname==="/"?"/":normalized.pathname.replace(/\/+$/,""),normalized}function getOAuthProviderOptions(provider){return{oauthMetadata:provider.oauthMetadata,...provider.requiredScopes!==void 0&&{requiredScopes:[...provider.requiredScopes]},...provider.scopesSupported!==void 0&&{scopesSupported:[...provider.scopesSupported]},...provider.resourceName!==void 0&&{resourceName:provider.resourceName},...provider.serviceDocumentationUrl!==void 0&&{serviceDocumentationUrl:provider.serviceDocumentationUrl}}}function assertVerifiedAuthInfo(authInfo){if(authInfo===null||typeof authInfo!="object"||typeof authInfo.token!="string"||authInfo.token.length===0||typeof authInfo.clientId!="string"||!Array.isArray(authInfo.scopes)||!authInfo.scopes.every(scope=>typeof scope=="string")||typeof authInfo.expiresAt!="number"||!Number.isFinite(authInfo.expiresAt)||authInfo.expiresAt<=Date.now()/1e3)throw invalidToken("Token verifier returned invalid authentication information")}function assertMappedExtra(mapped){if(mapped===null||typeof mapped!="object"||!("user"in mapped)||mapped.user===void 0||!isRecord(mapped.payload)||!Array.isArray(mapped.permissions)||!mapped.permissions.every(permission=>typeof permission=="string"))throw invalidToken("Token identity mapping must return user, payload, and string permissions")}function requireAbsoluteOrigin(value,name){let url=parseAbsoluteUrl(value,name);if(url.pathname!=="/"||url.search!==""||url.hash!==""||url.username!==""||url.password!=="")throw new Error(`${name} must be an absolute origin without a path`);return url}function appendBasePath(origin,basePath){let resource=new URL(origin.origin);return resource.pathname=basePath,resource}function normalizeBasePath(basePath){if(!basePath.startsWith("/")||basePath.includes("?")||basePath.includes("#"))throw new Error("basePath must be an absolute URL pathname");return normalizePathname(basePath)}function normalizePathname(pathname){if(pathname==="/")return"/";let end=pathname.length;for(;end>0&&pathname.charCodeAt(end-1)===47;)end--;return pathname.slice(0,end)}function oauthCustomProvider(options){if(options===null||typeof options!="object"||typeof options.createTokenVerifier!="function"||typeof options.mapAuthInfo!="function")throw new TypeError("oauthCustomProvider requires createTokenVerifier, oauthMetadata, and mapAuthInfo");if(assertOAuthMetadata(options.oauthMetadata),options.resource!==void 0&&assertResourceUrl(options.resource),assertStringArray(options.requiredScopes,"requiredScopes"),assertStringArray(options.scopesSupported,"scopesSupported"),options.resourceName!==void 0&&(typeof options.resourceName!="string"||options.resourceName.trim().length===0))throw new TypeError("resourceName must be a non-empty string");if(options.serviceDocumentationUrl!==void 0){if(!(options.serviceDocumentationUrl instanceof URL))throw new TypeError("serviceDocumentationUrl must be a URL");assertSecureHttpUrl(options.serviceDocumentationUrl,"serviceDocumentationUrl")}return{createTokenVerifier:options.createTokenVerifier,oauthMetadata:options.oauthMetadata,mapAuthInfo:options.mapAuthInfo,...options.resource!==void 0&&{resource:options.resource},...options.requiredScopes!==void 0&&{requiredScopes:[...options.requiredScopes]},...options.scopesSupported!==void 0&&{scopesSupported:[...options.scopesSupported]},...options.resourceName!==void 0&&{resourceName:options.resourceName},...options.serviceDocumentationUrl!==void 0&&{serviceDocumentationUrl:options.serviceDocumentationUrl}}}function assertOAuthMetadata(metadata){if(metadata===null||typeof metadata!="object"||!("issuer"in metadata)||typeof metadata.issuer!="string")throw new TypeError("oauthMetadata must include a string issuer");assertSecureHttpUrl(parseAbsoluteUrl(metadata.issuer,"oauthMetadata.issuer"),"oauthMetadata.issuer")}function assertResourceUrl(resource){assertSecureHttpUrl(parseAbsoluteUrl(resource,"resource"),"resource")}function assertStringArray(value,name){if(value!==void 0&&(!Array.isArray(value)||!value.every(item=>typeof item=="string")))throw new TypeError(`${name} must be an array of strings`)}export{isRecord,isLocalhost,invalidToken,resolveConfiguredOAuthResource,resolveLocalOAuthResource,wrapOAuthTokenVerifier,getOAuthProviderOptions,oauthCustomProvider};

package/dist/chunk-KGTOBJW2.js

@@ -0,0 +1 @@
+import{invalidToken,isLocalhost,isRecord}from"./chunk-IS7FKXFR.js";import{OAuthError}from"@modelcontextprotocol/server";import{createRemoteJWKSet,jwtVerify,errors}from"jose";function createJwtVerifier(options){let key=options.key??createRemoteJWKSet(options.jwksUrl),configuredResource=canonicalUrl(options.resource),configuredAudience=verifierAudience(options.audience);if(configuredAudience!==void 0&&options.issuerBoundAccessTokens===!0)throw new TypeError("JWT verifier cannot combine audience and issuer-bound access tokens");return{async verifyAccessToken(token){try{let{payload}=await jwtVerify(token,key,{issuer:options.issuer,...configuredAudience!==void 0&&{audience:configuredAudience},...options.algorithms!==void 0&&{algorithms:[...options.algorithms]},requiredClaims:["exp","sub"]}),claims={...payload},clientId=requiredString(claims,"client_id")??requiredString(claims,"azp"),expiresAt=requiredFutureNumber(claims,"exp"),resource=verifiedResource(claims,configuredResource,configuredAudience!==void 0||options.issuerBoundAccessTokens===!0);return{token,clientId:clientId??"",scopes:normalizedStrings(claims.scope),expiresAt,extra:{payload:claims},resource}}catch(error){throw error instanceof OAuthError?error:isCredentialFailure(error)?(process.env.MCP_USE_OAUTH_DEBUG&&logJwtFailure(token,error),invalidToken("JWT verification failed",error)):error}}}}function normalizedProviderUrl(value,name){let raw=typeof value=="string"&&!value.includes("://")?`https://${value}`:value,url;try{url=new URL(raw)}catch{throw new TypeError(`${name} must be an absolute HTTP(S) URL`)}if(!isAllowedHttpUrl(url))throw new TypeError(`${name} must use HTTPS, or HTTP for localhost, without credentials, query, or fragment`);return url.pathname=url.pathname.replace(/\/+$/,"")||"/",url}function providerEndpoint(issuer,path){let base=new URL(issuer);return base.pathname=`${base.pathname.replace(/\/+$/,"")}/`,new URL(path.replace(/^\/+/,""),base).href}function payloadFromAuthInfo(authInfo){let payload=authInfo.extra?.payload;if(!isRecord(payload))throw invalidToken("Verified token payload is missing");return payload}function requiredString(claims,name){let value=claims[name];return typeof value=="string"&&value.trim().length>0?value:void 0}function stringValue(claims,name){let value=claims[name];return typeof value=="string"?value:void 0}function booleanValue(claims,name){let value=claims[name];return typeof value=="boolean"?value:void 0}function numberValue(claims,name){let value=claims[name];return typeof value=="number"&&Number.isFinite(value)?value:void 0}function recordValue(claims,name){let value=claims[name];return isRecord(value)?value:void 0}function normalizedStrings(value){return typeof value=="string"?value.split(/\s+/).filter(Boolean):Array.isArray(value)?value.filter(item=>typeof item=="string"&&item.length>0):[]}function requiredFutureNumber(claims,name){let value=numberValue(claims,name);if(value===void 0||value<=Date.now()/1e3)throw invalidToken(`Missing or expired ${name} claim`);return value}function verifiedResource(claims,configuredResource,providerBindingWasValidated){let value=claims.resource;if(value!==void 0){if(typeof value!="string")throw invalidToken("Token resource claim must be an absolute URL");if(canonicalUrl(value).href!==configuredResource.href)throw invalidToken("Token resource claim does not match protected resource");return configuredResource}if(providerBindingWasValidated)return configuredResource;let audience=claims.aud;if(!validAudience(audience))throw invalidToken("Token audience claim must be a string or string array");if(!(typeof audience=="string"?[audience]:audience).includes(configuredResource.href))throw invalidToken("Token audience does not include the protected resource");return configuredResource}function verifierAudience(value){if(value!==void 0){if(typeof value=="string"&&value.trim().length>0)return value;if(Array.isArray(value)&&value.length>0&&value.every(audience=>typeof audience=="string"&&audience.trim().length>0))return[...value];throw new TypeError("JWT verifier audience must be a non-empty string or string array")}}function validAudience(value){return typeof value=="string"||Array.isArray(value)&&value.length>0&&value.every(item=>typeof item=="string")}function canonicalUrl(value){try{let url=new URL(value);if(!isAllowedHttpUrl(url))throw new TypeError;return url.pathname=url.pathname==="/"?"/":url.pathname.replace(/\/+$/,""),url}catch{throw invalidToken("Token resource claim must be an absolute HTTPS URL, or HTTP URL for localhost")}}function isAllowedHttpUrl(url){return/^https?:$/.test(url.protocol)&&!url.username&&!url.password&&!url.search&&!url.hash&&(url.protocol!=="http:"||isLocalhost(url))}function isCredentialFailure(error){return error instanceof errors.JWTClaimValidationFailed||error instanceof errors.JWTExpired||error instanceof errors.JOSEAlgNotAllowed||error instanceof errors.JOSENotSupported||error instanceof errors.JWSInvalid||error instanceof errors.JWTInvalid||error instanceof errors.JWSSignatureVerificationFailed||error instanceof errors.JWKSNoMatchingKey}var JWT_DEBUG_CLAIMS=["iss","aud","azp","sub","exp","iat","nbf","client_id","scope","typ","jti"];function debugErrorText(error){return error instanceof Error?error.message:String(error)}function logJwtFailure(token,error){try{let decodeSegment2=function(segment,label){try{return Buffer.from(segment,"base64url").toString("utf8")}catch(decodeError){console.error(`[oauth-debug] ${label} decode failed: ${debugErrorText(decodeError)}`);return}};var decodeSegment=decodeSegment2;let name=error instanceof Error?error.constructor.name:typeof error;console.error(`[oauth-debug] JWT verify failed: ${name}: ${debugErrorText(error)}`),error instanceof errors.JWTClaimValidationFailed&&console.error(`[oauth-debug] claim=${error.claim} reason=${error.reason}`);let segments=token.split(".");if(console.error(`[oauth-debug] token segments: ${segments.length}`),segments.length!==3){let preview=token.length>12?`${token.slice(0,12)}\u2026`:token;console.error(`[oauth-debug] non-JWT token preview=${preview} length=${token.length}`);return}let headerJson=decodeSegment2(segments[0],"header");headerJson!==void 0&&console.error(`[oauth-debug] header=${headerJson}`);let payloadJson=decodeSegment2(segments[1],"payload");if(payloadJson===void 0)return;try{let payload=JSON.parse(payloadJson),selected={};for(let claim of JWT_DEBUG_CLAIMS)claim in payload&&(selected[claim]=payload[claim]);selected.now=Math.floor(Date.now()/1e3),console.error(`[oauth-debug] payload=${JSON.stringify(selected)}`)}catch(decodeError){console.error(`[oauth-debug] payload decode failed: ${debugErrorText(decodeError)}`)}}catch{}}export{createJwtVerifier,normalizedProviderUrl,providerEndpoint,payloadFromAuthInfo,requiredString,stringValue,booleanValue,recordValue,normalizedStrings};

package/dist/chunk-MIZQEWZS.js

@@ -0,0 +1 @@
+import{getOAuthProviderOptions,wrapOAuthTokenVerifier}from"./chunk-IS7FKXFR.js";import{OAuthError,OAuthErrorCode,bearerAuthChallengeResponse,getOAuthProtectedResourceMetadataUrl as getOAuthProtectedResourceMetadataUrl2,oauthMetadataResponse as oauthMetadataResponse2,requireBearerAuth as requireBearerAuth2,verifyBearerToken}from"@modelcontextprotocol/server";import{getOAuthProtectedResourceMetadataUrl,oauthMetadataResponse,requireBearerAuth}from"@modelcontextprotocol/server";import{hostHeaderValidationResponse,originValidationResponse}from"@modelcontextprotocol/server";var requestBags=new WeakMap;function getRequestBag(request){let bag=requestBags.get(request);return bag===void 0&&(bag={},requestBags.set(request,bag)),bag}function composeFetch(terminal,...middlewares){return async request=>{let index=0,dispatch=async()=>{if(index<middlewares.length){let middleware=middlewares[index];return index+=1,middleware(request,dispatch)}return terminal(request)};return dispatch()}}function pathnameOf(request){return new URL(request.url).pathname}function matchesPath(request,path){return pathnameOf(request)===path}function matchesPathPrefix(request,prefix){let pathname=pathnameOf(request);return pathname===prefix||pathname.startsWith(`${prefix}/`)}function pathUnderBase(basePath,childPath){let child=childPath.replace(/^\/+/,"");return basePath==="/"?`/${child}`:`${basePath}/${child}`}function isHtmlNavigationRequest(request){if(request.method!=="GET"&&request.method!=="HEAD")return!1;let accept=request.headers.get("accept");return accept===null?!1:accept.split(",").some(range=>{let[mediaType,...parameters]=range.split(";");return mediaType?.trim().toLowerCase()!=="text/html"?!1:!parameters.some(parameter=>{let[name,value]=parameter.trim().toLowerCase().split("=");return name==="q"&&Number(value)===0})})}function jsonBodyMiddleware(){return async(request,next)=>{let bag=getRequestBag(request);if(bag.parsedBody!==void 0||!(request.headers.get("content-type")??"").includes("application/json"))return next();try{bag.parsedBody=await request.clone().json()}catch{return new Response("Invalid JSON",{status:400})}return next()}}function hostValidationMiddleware(hosts){return async(request,next)=>hostHeaderValidationResponse(request,hosts)??next()}function originValidationMiddleware(origins,skipSafeMethods=!0){return async(request,next)=>skipSafeMethods&&(request.method==="GET"||request.method==="HEAD")?next():originValidationResponse(request,origins)??next()}function bearerAuth(provider,resource){let options=getOAuthProviderOptions(provider),gate=requireBearerAuth({verifier:wrapOAuthTokenVerifier(provider,resource),resourceMetadataUrl:getOAuthProtectedResourceMetadataUrl(resource),...options.requiredScopes!==void 0&&{requiredScopes:[...options.requiredScopes]}});return async(request,next)=>{let result=await gate(request);return result instanceof Response?result:(getRequestBag(request).authInfo=result,next())}}function oauthMetadata(provider,resource){let options=getOAuthProviderOptions(provider);return async(request,next)=>{let response=oauthMetadataResponse(request,{oauthMetadata:options.oauthMetadata,resourceServerUrl:resource,...options.scopesSupported!==void 0&&{scopesSupported:[...options.scopesSupported]},...options.resourceName!==void 0&&{resourceName:options.resourceName},...options.serviceDocumentationUrl!==void 0&&{serviceDocumentationUrl:options.serviceDocumentationUrl}});return response!==void 0?response:next()}}function authInfoFromRequest(request){return getRequestBag(request).authInfo}export{getRequestBag,composeFetch,pathnameOf,matchesPath,matchesPathPrefix,pathUnderBase,isHtmlNavigationRequest,jsonBodyMiddleware,hostValidationMiddleware,originValidationMiddleware,bearerAuth,oauthMetadata,authInfoFromRequest,OAuthError,OAuthErrorCode,bearerAuthChallengeResponse,getOAuthProtectedResourceMetadataUrl2 as getOAuthProtectedResourceMetadataUrl,oauthMetadataResponse2 as oauthMetadataResponse,requireBearerAuth2 as requireBearerAuth,verifyBearerToken};

package/dist/chunk-OJF6B5EU.js

@@ -0,0 +1 @@
+import{completable as sdkCompletable}from"@modelcontextprotocol/server";function createPrefixCompletion(values){let strings=values.map(String);return value=>{let prefix=String(value??"").toLowerCase();return strings.filter(candidate=>candidate.toLowerCase().startsWith(prefix))}}function completable(schema,complete){return typeof complete=="function"?sdkCompletable(schema,(value,context)=>complete(String(value??""),context)):sdkCompletable(schema,createPrefixCompletion(complete))}function normalizeCompletions(completions){let normalized=Object.create(null);for(let[variable,completer]of Object.entries(completions))completer!==void 0&&(normalized[variable]=Array.isArray(completer)?createPrefixCompletion(completer):completer);return normalized}export{completable,normalizeCompletions};

package/dist/chunk-PSKSL567.js

@@ -0,0 +1 @@
+function stripTrailingSlashes(value){return value.replace(/\/+$/,"")}function readEnv(name){if(typeof process>"u")return;let value=process.env[name];return value!==void 0&&value!==""?value:void 0}function parseForwardedHeader(header){for(let part of header.split(",")){let params=new Map;for(let token of part.split(";")){let[key,...rest]=token.trim().split("=");key===void 0||rest.length===0||params.set(key.toLowerCase(),rest.join("=").replace(/^"|"$/g,""))}let proto=params.get("proto"),host=params.get("host");if(proto!==void 0&&host!==void 0)return`${proto}://${host}`}}function resolveRequestOriginFromHeaders(request){let forwarded=request.headers.get("forwarded");if(forwarded!==null){let fromForwarded=parseForwardedHeader(forwarded);if(fromForwarded!==void 0)return fromForwarded}let proto=request.headers.get("x-forwarded-proto"),host=request.headers.get("x-forwarded-host");if(proto!==null&&host!==null){let firstHost=host.split(",")[0]?.trim(),firstProto=proto.split(",")[0]?.trim();if(firstHost!==void 0&&firstProto!==void 0&&firstHost!=="")return`${firstProto}://${firstHost}`}return new URL(request.url).origin}function resolveServerOrigin(request){let mcpUrl=readEnv("MCP_URL");if(mcpUrl!==void 0)try{return new URL(mcpUrl).origin}catch{}return resolveRequestOriginFromHeaders(request)}function originFromAssetsBase(assetsBase){try{return new URL(assetsBase).origin}catch{return assetsBase}}function normalizeAssetsBaseUrl(value){return stripTrailingSlashes(value)}function resolveAssetsBase(request){let assetsUrl=readEnv("MCP_ASSETS_URL");if(assetsUrl!==void 0)try{return normalizeAssetsBaseUrl(new URL(assetsUrl).href.replace(/\/$/,""))}catch{}return resolveServerOrigin(request)}function hasExplicitAssetsBase(){let assetsUrl=readEnv("MCP_ASSETS_URL");if(assetsUrl===void 0)return!1;try{return new URL(assetsUrl),!0}catch{return!1}}export{resolveServerOrigin,originFromAssetsBase,resolveAssetsBase,hasExplicitAssetsBase};

package/dist/chunk-XYHHP43G.js

@@ -0,0 +1 @@
+var bufferedResponses=new WeakSet,bufferedSources=new WeakMap;function markBufferedResponse(response){return response.body!==null&&bufferedResponses.add(response),response}function trackBufferedResponse(request,response){return markBufferedResponse(response),bufferedSources.set(request,response),response}function isBufferedResponse(response,request){if(response.body===null)return!1;if(bufferedResponses.has(response))return!0;let source=request===void 0?void 0:bufferedSources.get(request);return source!==void 0&&source.body!==null&&source.body===response.body}function inheritBufferedResponse(source,target){return isBufferedResponse(source)?markBufferedResponse(target):target}function toNodeHandler(handler,opts){return async(req,res,parsedBody)=>{typeof parsedBody=="function"&&(parsedBody=void 0);let finished=!1,abort=new AbortController;res.on("close",()=>{finished||abort.abort()}),res.destroyed===!0&&abort.abort();let request,response;try{request=await toWebRequest(req,parsedBody,{signal:abort.signal}),response=await handler.fetch(request,{...req.auth!==void 0&&{authInfo:req.auth},...parsedBody!==void 0&&{parsedBody}})}catch(error){try{opts?.onerror?.(error instanceof Error?error:new Error(String(error)))}catch{}response=internalServerErrorResponse(echoableRequestId(parsedBody))}let headers={};for(let[name,value]of response.headers)headers[name]=value;if(res.writeHead(response.status,headers),response.body===null){finished=!0,res.end();return}if(isBufferedResponse(response,request)){try{let bytes=new Uint8Array(await response.arrayBuffer());finished=!0,res.end(bytes)}catch{finished=!0,res.end()}return}let drainResolve,releaseDrainWait=()=>{drainResolve?.(),drainResolve=void 0},waitForDrain=()=>new Promise(resolve=>{drainResolve=resolve});res.on("drain",releaseDrainWait);let closed=new Promise(resolve=>{abort.signal.addEventListener("abort",()=>resolve(),{once:!0})});try{for await(let chunk of response.body){if(abort.signal.aborted)break;let bytes=chunk instanceof Uint8Array?chunk:new Uint8Array(chunk);res.write(bytes)===!1&&await Promise.race([waitForDrain(),closed])}}catch{}finished=!0,res.end()}}async function toWebRequest(req,parsedBody,options){let method=(req.method??"GET").toUpperCase(),url=`http://${singleHeaderValue(req.headers.host)??singleHeaderValue(req.headers[":authority"])??"localhost"}${req.url??"/"}`,headers=new Headers;for(let[name,value]of Object.entries(req.headers))if(!(value===void 0||name.startsWith(":")))if(Array.isArray(value))for(let item of value)headers.append(name,item);else headers.set(name,value);let body;if(method!=="GET"&&method!=="HEAD")if(parsedBody===void 0){let decoder=new TextDecoder,collected="";for await(let chunk of req)collected+=typeof chunk=="string"?chunk:decoder.decode(chunk,{stream:!0});collected+=decoder.decode(),collected.length>0&&(body=collected)}else{let serialized=JSON.stringify(parsedBody);headers.delete("content-encoding"),headers.delete("transfer-encoding"),serialized===void 0?headers.delete("content-length"):(body=serialized,headers.set("content-length",String(new TextEncoder().encode(serialized).byteLength)))}return new Request(url,{method,headers,...options?.signal!==void 0&&{signal:options.signal},...body!==void 0&&{body}})}function singleHeaderValue(value){return Array.isArray(value)?value[0]:value}function echoableRequestId(body){if(body===null||typeof body!="object"||Array.isArray(body))return null;let{method,id}=body;return typeof method!="string"?null:typeof id=="string"||typeof id=="number"?id:null}function internalServerErrorResponse(id){return Response.json({jsonrpc:"2.0",error:{code:-32603,message:"Internal server error"},id},{status:500})}export{trackBufferedResponse,inheritBufferedResponse,toNodeHandler,toWebRequest};

package/dist/chunk-Y26DNVWA.js

@@ -0,0 +1,3 @@
+import{fromJsonSchema}from"@modelcontextprotocol/server";var HTTP_METHODS=["get","put","post","delete","options","head","patch","trace"];function registerOpenAPITools(server,options){let operations=collectOperations(options.spec,options),names=createToolNames(operations),baseUrl=operations.length>0?resolveBaseUrl(options):void 0;for(let[index,operation]of operations.entries()){let name=names[index];if(name===void 0||baseUrl===void 0)continue;let inputBindings=createInputBindings(operation);server.tool({name,description:createToolDescription(operation),inputSchema:createToolInputSchema(options.spec,operation,inputBindings)},async params=>callOpenAPIOperation(operation,params,options,inputBindings,baseUrl))}}function collectOperations(spec,options){let collected=[];for(let[path,pathItemOrRef]of Object.entries(spec.paths??{})){let pathItem=resolveRef(spec,pathItemOrRef);if(pathItem===void 0||isReferenceObject(pathItem))continue;let pathParameters=resolveParameters(spec,pathItem.parameters);for(let method of HTTP_METHODS){let operationOrRef=pathItem[method];if(operationOrRef===void 0)continue;let operation=resolveRef(spec,operationOrRef);if(operation===void 0||isReferenceObject(operation))continue;let operationParameters=resolveParameters(spec,operation.parameters),requestBody=operation.requestBody===void 0?void 0:resolveRef(spec,operation.requestBody),item={method,path,operation,parameters:mergeParameters(pathParameters,operationParameters),...requestBody!==void 0&&!isReferenceObject(requestBody)&&{requestBody}};isIncluded(item,options)&&collected.push(item)}}return collected}function resolveParameters(spec,parameters){let resolved=[];for(let parameter of parameters??[]){let value=resolveRef(spec,parameter);value!==void 0&&!isReferenceObject(value)&&resolved.push(value)}return resolved}function mergeParameters(pathParameters,operationParameters){let merged=new Map;for(let parameter of[...pathParameters,...operationParameters])merged.set(`${parameter.in}:${parameter.name}`,parameter);return[...merged.values()]}function isIncluded(operation,options){if(options.tags?.length){let tags=new Set(operation.operation.tags??[]);if(!options.tags.some(tag=>tags.has(tag)))return!1}return!(options.exclude??[]).some(rule=>matchesExcludeRule(operation,rule))}function matchesExcludeRule(operation,rule){if(rule.method&&rule.method.toLowerCase()!==operation.method||rule.operationId&&!matchesPattern(rule.operationId,operation.operation.operationId??"")||rule.path&&!matchesPattern(rule.path,operation.path))return!1;if(rule.tags?.length){let tags=new Set(operation.operation.tags??[]);if(!rule.tags.some(tag=>tags.has(tag)))return!1}return!0}function matchesPattern(pattern,value){return typeof pattern=="string"?pattern===value:(pattern.lastIndex=0,pattern.test(value))}function createToolNames(operations){let seen=new Map;return operations.map(operation=>{let baseName=slugifyToolName(operation.operation.operationId??`${operation.method}_${operation.path.replace(/[{}]/g,"").replace(/\//g,"_")}`),count=seen.get(baseName)??0;if(seen.set(baseName,count+1),count===0)return baseName;let suffix=`_${count+1}`;return`${baseName.slice(0,64-suffix.length)}${suffix}`})}function createToolDescription(operation){return[operation.operation.summary,operation.operation.description,`HTTP: ${operation.method.toUpperCase()} ${operation.path}`].filter(part=>!!part).join(`
+
+`)}function slugifyToolName(value){return value.trim().replace(/[^a-zA-Z0-9_-]+/g,"_").replace(/_+/g,"_").replace(/^_/,"").replace(/_$/,"").slice(0,64)||"openapi_tool"}function createToolInputSchema(spec,operation,inputBindings){let properties={},required=[];for(let{parameter,inputName}of inputBindings.parameters){let parameterSchema=transformSchema(spec,parameter.schema??{});properties[inputName]={...parameterSchema,description:parameter.description??`${parameter.in} parameter`},(parameter.required||parameter.in==="path")&&required.push(inputName)}let bodySchema=getJsonRequestBodySchema(operation.requestBody);bodySchema!==void 0&&inputBindings.bodyInputName!==void 0&&(properties[inputBindings.bodyInputName]=transformSchema(spec,bodySchema),operation.requestBody?.required&&required.push(inputBindings.bodyInputName));let definitions=createSchemaDefinitions(spec),schema={type:"object",properties,additionalProperties:!1,...required.length>0&&{required},...definitions!==void 0&&{$defs:definitions}};return fromJsonSchema(schema)}function createInputBindings(operation){let parameters=operation.parameters.filter(parameter=>parameter.in!=="cookie"),bodyInputName=getJsonRequestBodySchema(operation.requestBody)===void 0?void 0:"body",nameCounts=new Map;for(let parameter of parameters)nameCounts.set(parameter.name,(nameCounts.get(parameter.name)??0)+1);let usedNames=new Set(bodyInputName===void 0?[]:[bodyInputName]);return{parameters:parameters.map(parameter=>{let preferredName=(nameCounts.get(parameter.name)??0)>1||parameter.name===bodyInputName?`${parameter.name}_${parameter.in}`:parameter.name;return{parameter,inputName:claimInputName(preferredName,usedNames)}}),...bodyInputName!==void 0&&{bodyInputName}}}function claimInputName(preferredName,usedNames){let inputName=preferredName,suffix=2;for(;usedNames.has(inputName);)inputName=`${preferredName}_${suffix}`,suffix+=1;return usedNames.add(inputName),inputName}function createSchemaDefinitions(spec){let schemas=readRecord(spec.components?.schemas);if(schemas===void 0)return;let definitions={};for(let[name,schema]of Object.entries(schemas))definitions[name]=transformSchemaNode(spec,schema,new Set);return definitions}function transformSchema(spec,schema){let transformed=transformSchemaNode(spec,schema,new Set);return readRecord(transformed)??{}}function transformSchemaNode(spec,value,resolvingRefs){if(Array.isArray(value))return value.map(item=>transformSchemaNode(spec,item,resolvingRefs));let object=readRecord(value);if(object===void 0)return value;let ref=typeof object.$ref=="string"?object.$ref:void 0,siblings={};for(let[key,child]of Object.entries(object))key!=="$ref"&&(key==="nullable"&&typeof child=="boolean"||(siblings[key]=transformSchemaNode(spec,child,resolvingRefs)));let transformed=siblings;if(ref!==void 0){let schemaRef=rewriteSchemaRef(spec,ref);if(schemaRef!==void 0)transformed={$ref:schemaRef,...siblings};else if(!resolvingRefs.has(ref)){let resolved=resolveRef(spec,{$ref:ref});if(resolved!==void 0){let nextRefs=new Set(resolvingRefs);nextRefs.add(ref),transformed={...readRecord(transformSchemaNode(spec,resolved,nextRefs))??{},...siblings}}}}return object.nullable===!0?{anyOf:[transformed,{type:"null"}]}:transformed}function rewriteSchemaRef(spec,ref){let prefix="#/components/schemas/";if(ref.startsWith(prefix))return resolveRef(spec,{$ref:ref})===void 0?void 0:`#/$defs/${ref.slice(prefix.length)}`}function getJsonRequestBodySchema(requestBody){let content=requestBody?.content;if(content!==void 0)return content["application/json"]?.schema??content["application/*+json"]?.schema??Object.entries(content).find(([mediaType])=>mediaType.includes("+json"))?.[1].schema}async function callOpenAPIOperation(operation,params,options,inputBindings,baseUrl){let fetchImpl=options.fetch??globalThis.fetch,url=buildUrl(operation,params,inputBindings.parameters,baseUrl),headers=buildHeaders(inputBindings.parameters,params,options),bodyInputName=inputBindings.bodyInputName,body=bodyInputName===void 0||params[bodyInputName]===void 0?void 0:JSON.stringify(params[bodyInputName]);body!==void 0&&!hasHeader(headers,"content-type")&&(headers["content-type"]="application/json");let response=await fetchImpl(url,{method:operation.method.toUpperCase(),headers,...body!==void 0&&{body}}),contentType=response.headers.get("content-type")??"";if(!response.ok)return{content:[{type:"text",text:await response.text()}],isError:!0};if(contentType.includes("application/json")||contentType.includes("+json")){let text=await response.text();try{let data=JSON.parse(text);return{content:[{type:"text",text:JSON.stringify(data)}],structuredContent:data}}catch{return{content:[{type:"text",text}]}}}return{content:[{type:"text",text:await response.text()}]}}function buildUrl(operation,params,parameterBindings,baseUrl){let interpolatedPath=operation.path.replace(/{([^}]+)}/g,(_match,name)=>{let binding=parameterBindings.find(({parameter})=>parameter.in==="path"&&parameter.name===name);return encodeURIComponent(String(binding===void 0?"":params[binding.inputName]??""))}),url=new URL(interpolatedPath.replace(/^\/+/,""),ensureTrailingSlash(baseUrl));for(let{parameter,inputName}of parameterBindings){if(parameter.in!=="query")continue;let value=params[inputName];value==null||value===""||appendQueryParam(url,parameter.name,value)}return url.toString()}function buildHeaders(parameterBindings,params,options){let headers={...options.headers??{}};for(let{parameter,inputName}of parameterBindings){if(parameter.in!=="header")continue;let value=params[inputName];value==null||value===""||(headers[parameter.name]=String(value))}return options.auth?.type==="bearer"&&options.auth.token&&(headers.authorization=`Bearer ${options.auth.token}`),options.auth?.type==="header"&&options.auth.value&&(headers[options.auth.name]=options.auth.value),headers}function resolveBaseUrl(options){let baseUrl=options.baseUrl??options.spec.servers?.[0]?.url;if(baseUrl===void 0||baseUrl.trim()==="")throw new Error("MCPServer.fromOpenAPI requires options.baseUrl or spec.servers[0].url");return baseUrl}function appendQueryParam(url,name,value){if(Array.isArray(value)){for(let item of value)item!=null&&item!==""&&url.searchParams.append(name,String(item));return}url.searchParams.set(name,String(value))}function ensureTrailingSlash(url){return url.endsWith("/")?url:`${url}/`}function hasHeader(headers,name){return Object.keys(headers).some(headerName=>headerName.toLowerCase()===name)}function isReferenceObject(value){let object=readRecord(value);return object!==void 0&&typeof object.$ref=="string"}function resolveRef(spec,value){if(!isReferenceObject(value))return value;if(!value.$ref.startsWith("#/"))return;let segments=value.$ref.slice(2).split("/").map(segment=>segment.replace(/~1/g,"/").replace(/~0/g,"~")),current=spec;for(let segment of segments){let object=readRecord(current);if(object===void 0||!(segment in object))return;current=object[segment]}return current}function readRecord(value){return typeof value=="object"&&value!==null&&!Array.isArray(value)?value:void 0}export{registerOpenAPITools};

package/dist/chunk-ZMU5USAZ.js

@@ -0,0 +1 @@
+var PUBLIC_CONTENT_TYPES={".css":"text/css",".gif":"image/gif",".html":"text/html",".ico":"image/x-icon",".jpeg":"image/jpeg",".jpg":"image/jpeg",".js":"application/javascript",".json":"application/json",".map":"application/json",".png":"image/png",".svg":"image/svg+xml",".txt":"text/plain",".webp":"image/webp",".woff":"font/woff",".woff2":"font/woff2"};async function resolvePublicFilePath(publicRoot,subpath){let{stat}=await import("fs/promises"),{resolve,sep}=await import("path");if(subpath===""||subpath.includes("\\")||subpath.split("/").some(segment=>segment===".."))return null;let clean=subpath.replace(/^\/+/,"");if(clean===""||clean.endsWith("/"))return null;let root=resolve(publicRoot),abs=resolve(root,clean);if(abs!==root&&!abs.startsWith(root+sep))return null;try{if(!(await stat(abs)).isFile())return null}catch{return null}return abs}async function servePublicFile(diskPath,options={}){let{readFile}=await import("fs/promises"),{extname}=await import("path"),ext=extname(diskPath).toLowerCase(),contentType=PUBLIC_CONTENT_TYPES[ext]??"application/octet-stream",body=options.head===!0?null:new Uint8Array(await readFile(diskPath));return new Response(body,{status:200,headers:{"Content-Type":contentType,"Cache-Control":"public, max-age=0, must-revalidate",...options.deferCors!==!0&&{"Access-Control-Allow-Origin":"*"}}})}export{resolvePublicFilePath,servePublicFile};

package/dist/chunk-ZXGOR5YI.js

@@ -0,0 +1,2 @@
+var EVENT="mcp_use_sdk_event",ENDPOINT="https://eu.i.posthog.com/i/v0/e/",TOKEN="phc_lyTtbYwvkdSbrcMQNPiKiiRWrrM1seyKIMjycSvItEI",CONTENT=/(^|_)(arguments?|args|body|command|headers?|location|message|organization|path|query|response|secret|subject|token|uri|url|user_agent)(_|$)/i,RESERVED=new Set("feature action sdk_generation telemetry_schema_version sdk_package sdk_version server_id runtime_id identity_stability distinct_id validation_run_id is_validation".split(" ")),runtimeId;function getRuntimeId(){return runtimeId??=crypto.randomUUID(),runtimeId}var once=new Set,pending=new Set,identities=new Map;function hasControl(value){return[...value].some(character=>{let code=character.charCodeAt(0);return code<32||code===127})}function env(name){return typeof process>"u"?void 0:process.env?.[name]}function safeEnv(name){let value=env(name);return value!==void 0&&value.length>0&&value.length<=128&&!hasControl(value)?value:void 0}function canPersistTelemetryIdentity(){return typeof process>"u"||process.versions?.node===void 0?!1:!("Deno"in globalThis)}function disabled(){if(env("MCP_USE_ANONYMIZED_TELEMETRY")==="false")return!0;try{return globalThis.__MCP_USE_ANONYMIZED_TELEMETRY__===!1||typeof localStorage<"u"&&localStorage.getItem("MCP_USE_ANONYMIZED_TELEMETRY")==="false"}catch{return!1}}function isUsageDisabled(){return disabled()}function clean(properties){return Object.fromEntries(Object.entries(properties).filter(([key,value])=>key.length>128||hasControl(key)||key.startsWith("$")||RESERVED.has(key)||CONTENT.test(key)||value===void 0?!1:typeof value=="string"?value.length<=128&&!hasControl(value):typeof value=="boolean"||typeof value=="number"&&Number.isFinite(value)))}async function identity(serverRoot){let projectId=safeEnv("MCP_USE_TELEMETRY_PROJECT_ID");if(projectId!==void 0)return{id:projectId,stability:"project"};if(serverRoot===void 0||!canPersistTelemetryIdentity())return{id:getRuntimeId(),stability:"process"};let existing=identities.get(serverRoot);if(existing!==void 0)return existing;let resolving=(async()=>{try{let fs=await import("fs/promises"),directory=`${serverRoot}/.mcp-use`,file=`${directory}/usage.json`,read=async()=>{try{let value=JSON.parse(await fs.readFile(file,"utf8"));if(typeof value=="object"&&value!==null&&"schemaVersion"in value&&value.schemaVersion===1&&"serverId"in value&&typeof value.serverId=="string"&&/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value.serverId))return value.serverId}catch{}},stored=await read();if(stored!==void 0)return{id:stored,stability:"server"};await fs.mkdir(directory,{recursive:!0,mode:448});let created=crypto.randomUUID();try{return await fs.writeFile(file,`${JSON.stringify({schemaVersion:1,serverId:created})}
+`,{flag:"wx",mode:384}),{id:created,stability:"server"}}catch{let raced=await read();if(raced!==void 0)return{id:raced,stability:"server"}}}catch{}return{id:getRuntimeId(),stability:"process"}})();return identities.set(serverRoot,resolving),resolving}function capture(feature,action,properties,options,resolveIdentity){let validationId=safeEnv("MCP_USE_TELEMETRY_VALIDATION_ID");if(disabled()||env("NODE_ENV")==="test"&&validationId===void 0||pending.size>=16)return;if(options.onceKey!==void 0){if(once.has(options.onceKey))return;once.add(options.onceKey)}let rate=Math.max(0,Math.min(1,options.sampleRate??1));if(validationId===void 0&&Math.random()>=rate)return;let request=(async()=>{try{let resolvedIdentity=await resolveIdentity(),body=JSON.stringify({api_key:TOKEN,event:EVENT,properties:{...clean(properties),feature,action,sdk_generation:"v2",telemetry_schema_version:2,sdk_package:"mcp-use",sdk_version:"2.0.1",server_id:resolvedIdentity.id,runtime_id:getRuntimeId(),identity_stability:resolvedIdentity.stability,distinct_id:resolvedIdentity.id,sample_rate:validationId===void 0?rate:1,$process_person_profile:!1,$geoip_disable:!0,...validationId!==void 0&&{is_validation:!0,validation_run_id:validationId}}});await fetch(ENDPOINT,{method:"POST",headers:{"content-type":"application/json"},keepalive:!0,body})}catch{return}})();pending.add(request),request.then(()=>pending.delete(request))}function recordUsage(feature,action,properties={},options={}){capture(feature,action,properties,options,()=>identity(options.serverRoot))}async function flushUsage(){await Promise.all([...pending])}export{isUsageDisabled,recordUsage,flushUsage};

package/dist/completable.d.ts

@@ -39,4 +39,3 @@ export declare function createPrefixCompletion(values: ReadonlyArray<string | nu
  * ```
  */
 export declare function completable<T extends StandardSchemaV1>(schema: T, complete: ReadonlyArray<string | number | boolean> | CompletionCallback): ReturnType<typeof sdkCompletable<T>>;
-//# sourceMappingURL=completable.d.ts.map

package/dist/config.d.ts

@@ -1,34 +1,6 @@
 import type { Icon, ServerOptions } from "@modelcontextprotocol/server";
 import type { LoggingOptions } from "./logging.js";
 import type { OAuthProvider } from "./oauth/index.js";
-/**
- * Options for the inspector shell route — the shape of
- * {@link ServerConfig.inspector}.
- */
-export interface InspectorOptions {
-    /**
-     * Whether the inspector shell route is mounted.
-     *
-     * @defaultValue `true`
-     */
-    enabled?: boolean;
-    /**
-     * Full replacement URL for the inspector bundle script (FastAPI's
-     * `swagger_js_url` analog). The shell's `<script type="module">` loads
-     * exactly this URL, so it must point at a complete copy of the
-     * `@mcp-use/inspector` CDN bundle (`dist/cdn/inspector.js`) — self-host it
-     * for air-gapped environments where the public CDN is unreachable.
-     *
-     * @defaultValue The mcp-use CDN URL for the `@mcp-use/inspector` bundle,
-     * pinned to the current version.
-     */
-    assetsUrl?: string;
-    /**
-     * Hosted managed-chat backend URL (injected as `window.__MANUFACT_CHAT_URL__`).
-     * Defaults to `process.env.MANUFACT_CHAT_URL` when the shell is mounted.
-     */
-    manufactChatUrl?: string;
-}
 /**
  * Common server identity and behavior, passed to `new MCPServer(...)`.
  *
@@ -52,9 +24,9 @@ interface BaseServerConfig {
      *
      * Accepts a safe path relative to the project `public/` directory, an
      * absolute HTTP(S) URL, or an image data URL. The selected image is served
-     * at the root-level `/favicon.ico` route. When omitted, the `icons` field
-     * selects the favicon using ICO, small PNG, any PNG, then first-icon order.
-     * An explicit value always wins; an empty string is invalid.
+     * at the root-level `/favicon.ico` route. When omitted, the first entry in
+     * `icons` selects the favicon. An explicit value always wins; an empty
+     * string is invalid.
      *
      * @defaultValue Inferred from `icons`, or no favicon when `icons` is absent
      * or empty.
@@ -78,8 +50,8 @@ interface BaseServerConfig {
      * relative to `public/`, an absolute HTTP(S) URL, or an image data URL.
      * Local paths become request-scoped absolute URLs under
      * `${basePath}/_mcp-use/public/`; author order is preserved on the wire.
-     * When `favicon` is omitted, these icons also select `/favicon.ico`.
-     * An empty array is valid and selects no favicon.
+     * When `favicon` is omitted, the first icon in this array also selects
+     * `/favicon.ico`. An empty array is valid and selects no favicon.
      *
      * @defaultValue `undefined`
      * @throws TypeError When an icon has an invalid source, MIME type, sizes,
@@ -130,28 +102,36 @@ interface BaseServerConfig {
      */
     basePath?: string;
     /**
-     * Hostname `listen()` binds. Defaults to `127.0.0.1`; localhost-class
+     * Hostname `listen()` binds when neither an explicit listener host nor
+     * `HOST` is set. Defaults to `127.0.0.1`; localhost-class
      * binds get DNS-rebinding protection (`Host` on every request; `Origin`
      * only on non-GET/HEAD) automatically. Set `"0.0.0.0"` to serve publicly — behind a platform
      * edge (Railway, Fly, …) nothing more is needed, since the edge only
-     * routes hostnames assigned to the deployment. Ignored by `getHandler()`,
-     * which never binds.
+     * routes hostnames assigned to the deployment. Ignored by `server.fetch`,
+     * which never binds a socket.
      */
     host?: string;
+    /**
+     * TCP port `listen()` binds when neither an explicit port nor `PORT` is set.
+     * Use `0` to request an ephemeral port.
+     *
+     * @defaultValue `3000`
+     */
+    port?: number;
     /**
      * Extra allowed hostnames for Host-header validation (DNS-rebinding
      * protection), e.g. `["api.example.com"]`. Port-agnostic and additive:
      * localhost-class hostnames stay allowed, so local runs keep working
      * unmodified. Setting this also turns Host validation on for
-     * `getHandler()`, which otherwise applies none.
+     * `server.fetch`, which otherwise applies none.
      */
     allowedHosts?: string[];
     /**
      * Extra allowed origin hostnames for Origin-header validation
      * (port-agnostic, additive to the localhost-class origins). When unset,
-     * mirrors the effective Host allowlist. Origin is validated only on
-     * non-GET/HEAD requests (sandboxed view iframes send `Origin: null` on
-     * asset GETs; the MCP wire is POST). Requests without an `Origin` header
+     * Origin validation is off (SDK-aligned). When set, Origin is validated
+     * only on non-GET/HEAD requests (sandboxed view iframes send `Origin: null`
+     * on asset GETs; the MCP wire is POST). Requests without an `Origin` header
      * always pass (non-browser MCP clients don't send one).
      */
     allowedOrigins?: string[];
@@ -179,46 +159,6 @@ interface BaseServerConfig {
      * @defaultValue `false`
      */
     publicLandingPage?: boolean;
-    /**
-     * Inspector shell route at `${basePath}/inspector` — a browser UI for
-     * exploring and calling the server's tools, resources, and prompts.
-     *
-     * @remarks
-     * Follows the FastAPI `/docs` model: the server itself ships only a tiny
-     * dependency-free HTML page whose `<script type="module">` loads the
-     * `@mcp-use/inspector` bundle from a CDN (pinned to the current inspector
-     * version), so the UI updates independently of SDK releases and adds
-     * nothing to the install. The page tells the inspector to connect to this
-     * server's MCP endpoint at `basePath`, deriving the URL from the browser's
-     * own origin.
-     *
-     * Enabled by default; set `{ enabled: false }` to disable the route, or
-     * pass `{ assetsUrl }` to load the bundle from a self-hosted copy instead
-     * of the public CDN (air-gapped environments). For local development,
-     * `MCP_USE_INSPECTOR_ASSETS_URL` provides the same override without changing
-     * application code; an explicit `assetsUrl` takes precedence.
-     *
-     * @example
-     * ```ts
-     * // Default: inspector served at /mcp/inspector from the public CDN.
-     * new MCPServer({ name: "my-server", version: "1.0.0" });
-     *
-     * // Disabled:
-     * new MCPServer({
-     *   name: "my-server",
-     *   version: "1.0.0",
-     *   inspector: { enabled: false },
-     * });
-     *
-     * // Air-gapped: load a self-hosted copy of the inspector bundle.
-     * new MCPServer({
-     *   name: "my-server",
-     *   version: "1.0.0",
-     *   inspector: { assetsUrl: "https://intranet.example.com/inspector.js" },
-     * });
-     * ```
-     */
-    inspector?: InspectorOptions;
     /**
      * HTTP/MCP request logging: one summary line per request plus an indented
      * detail line naming the MCP method, its subject (tool name, resource URI,
@@ -246,8 +186,8 @@ interface BaseServerConfig {
      */
     requestState?: ServerOptions["requestState"];
     /**
-     * Optional CORS headers on every route served by `getHandler()` / `listen()`
-     * (MCP endpoint, view assets, inspector, OAuth metadata). Off when omitted.
+     * Optional CORS headers on every route served by `server.fetch` / `listen()`
+     * (MCP endpoint, view assets, landing page, OAuth metadata). Off when omitted.
      *
      * Pair with {@link BaseServerConfig.allowedOrigins | allowedOrigins} for
      * browser clients: CORS tells the browser it may read the response; Origin
@@ -269,7 +209,7 @@ interface BaseServerConfig {
     cors?: CorsOptions;
 }
 /**
- * CORS configuration for routes owned by mcp-use (`getHandler()` / `listen()`).
+ * CORS configuration for routes owned by the Hono application.
  *
  * Omit `cors` entirely for the current no-CORS behavior. Pass `cors: {}` to
  * enable with defaults (reflects the request `Origin` when present; wildcard
@@ -297,6 +237,7 @@ export interface CorsOptions {
  */
 export declare function assertServerConfig(config: {
     basePath?: unknown;
+    port?: unknown;
 }): void;
 /**
  * Server identity and behavior, passed to `new MCPServer(...)`.
@@ -316,4 +257,3 @@ export type ServerConfig<TUser = never> = BaseServerConfig & ([TUser] extends [n
     oauth: OAuthProvider<TUser>;
 });
 export {};
-//# sourceMappingURL=config.d.ts.map