mcp-use 2.0.0-beta.9 → 2.0.1

package/dist/index.js

@@ -1,2548 +1,41 @@
-import {
-  resolvePublicFilePath,
-  servePublicFile
-} from "./chunk-SMN75YED.js";
-import {
-  registerOpenAPITools
-} from "./chunk-AATFAERC.js";
-import {
-  completable,
-  normalizeCompletions
-} from "./chunk-KIZ72TIK.js";
-import {
-  synthesizeViewDocument
-} from "./chunk-STCR3P5O.js";
-import {
-  hasExplicitAssetsBase,
-  originFromAssetsBase,
-  resolveAssetsBase,
-  resolveServerOrigin
-} from "./chunk-FC2Z2VFO.js";
-import {
-  authInfoFromRequest,
-  getOAuthProtectedResourceMetadataUrl,
-  oauthMetadata,
-  requireBearerAuth
-} from "./chunk-Z326HADF.js";
-import {
-  composeFetch,
-  getRequestBag,
-  hostValidationMiddleware,
-  isHtmlNavigationRequest,
-  jsonBodyMiddleware,
-  matchesPath,
-  matchesPathPrefix,
-  originValidationMiddleware,
-  pathUnderBase,
-  pathnameOf,
-  routeFetch,
-  toFrameworkHandler
-} from "./chunk-QUUANIE4.js";
-import {
-  getOAuthProviderOptions,
-  resolveConfiguredOAuthResource,
-  resolveLocalOAuthResource,
-  wrapOAuthTokenVerifier
-} from "./chunk-DPL7OEXC.js";
-
-// src/server.ts
-import {
-  localhostAllowedHostnames,
-  localhostAllowedOrigins,
-  McpServer as SdkMcpServer,
-  ResourceTemplate,
-  isInputRequiredResult
-} from "@modelcontextprotocol/server";
-
-// src/branding.ts
-var FAVICON_CACHE_CONTROL = "public, max-age=31536000, immutable";
-var FAVICON_REDIRECT_CACHE_CONTROL = "public, max-age=300";
-function protocolOf(value) {
-  const match = /^([a-z][a-z\d+.-]*):/i.exec(value);
-  return match?.[1]?.toLowerCase();
-}
-function publicAssetPath(basePath, source) {
-  const prefix = basePath === "/" ? "" : basePath;
-  return `${prefix}/_mcp-use/public/${source.split("/").map((segment) => encodeURIComponent(segment)).join("/")}`;
-}
-function isLocalPublicSource(source) {
-  return protocolOf(source) === void 0;
-}
-function extensionPath(source) {
-  const protocol = protocolOf(source);
-  if (protocol === "data") {
-    return "";
-  }
-  if (protocol === "http" || protocol === "https") {
-    return new URL(source).pathname.toLowerCase();
-  }
-  return source.toLowerCase();
-}
-function dataUrlMimeType(source) {
-  if (protocolOf(source) !== "data") {
-    return void 0;
-  }
-  const comma = source.indexOf(",");
-  if (comma < 0) {
-    return void 0;
-  }
-  const mimeType = source.slice(5, comma).split(";", 1)[0]?.toLowerCase();
-  return mimeType === "" ? void 0 : mimeType;
-}
-function iconMimeType(icon) {
-  return icon.mimeType?.toLowerCase() ?? dataUrlMimeType(icon.src);
-}
-function isIco(icon) {
-  const mimeType = iconMimeType(icon);
-  return mimeType === "image/x-icon" || mimeType === "image/vnd.microsoft.icon" || extensionPath(icon.src).endsWith(".ico");
-}
-function isPng(icon) {
-  return iconMimeType(icon) === "image/png" || extensionPath(icon.src).endsWith(".png");
-}
-function selectFaviconFromIcons(icons) {
-  return icons.find(isIco) ?? icons.find(
-    (icon) => isPng(icon) && icon.sizes?.some((size) => size === "16x16" || size === "32x32")
-  ) ?? icons.find(isPng) ?? icons[0];
-}
-function assertLocalPublicSource(source, field) {
-  if (source.startsWith("/") || source.includes("\\") || source.includes("?") || source.includes("#") || source.split("/").some((segment) => segment === "" || segment === "..")) {
-    throw new TypeError(
-      `${field} must be an http(s) URL, image data URL, or safe path relative to public/`
-    );
-  }
-}
-function parseDataImage(source, field) {
-  const comma = source.indexOf(",");
-  if (comma < 0) {
-    throw new TypeError(`${field} must be a valid image data URL`);
-  }
-  const metadata = source.slice(5, comma);
-  const payload = source.slice(comma + 1);
-  const parts = metadata.split(";");
-  const mimeType = parts[0]?.toLowerCase() ?? "";
-  if (!mimeType.startsWith("image/")) {
-    throw new TypeError(`${field} data URL must use an image MIME type`);
-  }
-  try {
-    if (parts.includes("base64")) {
-      const binary = atob(payload);
-      return {
-        mimeType,
-        bytes: Uint8Array.from(binary, (character) => character.charCodeAt(0))
-      };
-    }
-    return {
-      mimeType,
-      bytes: new TextEncoder().encode(decodeURIComponent(payload))
-    };
-  } catch {
-    throw new TypeError(`${field} must be a valid image data URL`);
-  }
-}
-function assertBrandingSource(source, field) {
-  if (typeof source !== "string" || source.length === 0) {
-    throw new TypeError(`${field} must be a non-empty string`);
-  }
-  const protocol = protocolOf(source);
-  if (protocol === void 0) {
-    assertLocalPublicSource(source, field);
-    return source;
-  }
-  if (protocol === "data") {
-    parseDataImage(source, field);
-    return source;
-  }
-  if (protocol !== "http" && protocol !== "https") {
-    throw new TypeError(
-      `${field} must be an http(s) URL, image data URL, or safe path relative to public/`
-    );
-  }
-  try {
-    new URL(source);
-  } catch {
-    throw new TypeError(`${field} must be a valid absolute http(s) URL`);
-  }
-  return source;
-}
-function normalizeServerBranding(config) {
-  let websiteUrl;
-  if (config.websiteUrl !== void 0) {
-    if (typeof config.websiteUrl !== "string" || config.websiteUrl.length === 0) {
-      throw new TypeError(
-        "websiteUrl must be a non-empty absolute http(s) URL"
-      );
-    }
-    let parsed;
-    try {
-      parsed = new URL(config.websiteUrl);
-    } catch {
-      throw new TypeError(
-        "websiteUrl must be a non-empty absolute http(s) URL"
-      );
-    }
-    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-      throw new TypeError(
-        "websiteUrl must be a non-empty absolute http(s) URL"
-      );
-    }
-    websiteUrl = config.websiteUrl;
-  }
-  let icons;
-  if (config.icons !== void 0) {
-    if (!Array.isArray(config.icons)) {
-      throw new TypeError("icons must be an array of MCP Icon objects");
-    }
-    icons = Object.freeze(
-      config.icons.map((value, index) => {
-        if (typeof value !== "object" || value === null) {
-          throw new TypeError(`icons[${index}] must be an MCP Icon object`);
-        }
-        const icon = value;
-        const src = assertBrandingSource(icon["src"], `icons[${index}].src`);
-        const mimeType = icon["mimeType"];
-        if (mimeType !== void 0 && (typeof mimeType !== "string" || !mimeType.toLowerCase().startsWith("image/"))) {
-          throw new TypeError(
-            `icons[${index}].mimeType must be an image MIME type when provided`
-          );
-        }
-        const sizes = icon["sizes"];
-        if (sizes !== void 0 && (!Array.isArray(sizes) || sizes.some((size) => typeof size !== "string" || size.length === 0))) {
-          throw new TypeError(
-            `icons[${index}].sizes must be an array of non-empty strings when provided`
-          );
-        }
-        const normalizedSizes = sizes === void 0 ? void 0 : sizes.map((size) => size);
-        const theme = icon["theme"];
-        if (theme !== void 0 && theme !== "light" && theme !== "dark") {
-          throw new TypeError(
-            `icons[${index}].theme must be "light" or "dark" when provided`
-          );
-        }
-        return Object.freeze({
-          src,
-          ...mimeType !== void 0 && { mimeType },
-          ...normalizedSizes !== void 0 && {
-            sizes: Object.freeze(normalizedSizes)
-          },
-          ...theme !== void 0 && { theme }
-        });
-      })
-    );
-  }
-  const explicitFavicon = config.favicon === void 0 ? void 0 : assertBrandingSource(config.favicon, "favicon");
-  const inferred = explicitFavicon === void 0 ? selectFaviconFromIcons(icons ?? []) : void 0;
-  const favicon = explicitFavicon ?? inferred?.src;
-  const faviconMimeType = inferred?.mimeType ?? icons?.find((icon) => icon.src === explicitFavicon)?.mimeType;
-  return Object.freeze({
-    ...favicon !== void 0 && { favicon },
-    ...faviconMimeType !== void 0 && { faviconMimeType },
-    ...icons !== void 0 && { icons },
-    ...websiteUrl !== void 0 && { websiteUrl }
-  });
-}
-function resolveImplementationIcons(icons, request, basePath) {
-  if (icons === void 0) {
-    return void 0;
-  }
-  return icons.map((icon) => ({
-    ...icon,
-    src: request !== void 0 && isLocalPublicSource(icon.src) ? `${resolveAssetsBase(request)}${publicAssetPath(basePath, icon.src)}` : icon.src,
-    ...icon.sizes !== void 0 && { sizes: [...icon.sizes] }
-  }));
-}
-function hasLocalBrandingAsset(branding) {
-  return branding.favicon !== void 0 && isLocalPublicSource(branding.favicon) || branding.icons?.some((icon) => isLocalPublicSource(icon.src)) === true;
-}
-function createFaviconHandler(branding, options) {
-  const source = branding.favicon;
-  if (source === void 0) {
-    return void 0;
-  }
-  return async (request) => {
-    if (request.method !== "GET" && request.method !== "HEAD") {
-      return new Response("Method Not Allowed", {
-        status: 405,
-        headers: { Allow: "GET, HEAD" }
-      });
-    }
-    if (new URL(request.url).pathname !== "/favicon.ico") {
-      return new Response("Not Found", { status: 404 });
-    }
-    const protocol = protocolOf(source);
-    if (protocol === "http" || protocol === "https") {
-      return new Response(null, {
-        status: 307,
-        headers: {
-          Location: source,
-          "Cache-Control": FAVICON_REDIRECT_CACHE_CONTROL
-        }
-      });
-    }
-    if (protocol === "data") {
-      const data = parseDataImage(source, "favicon");
-      return new Response(
-        request.method === "HEAD" ? null : data.bytes.buffer,
-        {
-          status: 200,
-          headers: {
-            "Content-Type": branding.faviconMimeType ?? data.mimeType,
-            "Cache-Control": FAVICON_CACHE_CONTROL,
-            "X-Content-Type-Options": "nosniff"
-          }
-        }
-      );
-    }
-    const { join } = await import("path");
-    const publicRoot = options.dev ? join(options.projectRoot, "public") : join(options.projectRoot, ".mcp-use/build/views/public");
-    const diskPath = await resolvePublicFilePath(publicRoot, source);
-    if (diskPath === null) {
-      return new Response("Not Found", {
-        status: 404,
-        headers: { "Cache-Control": "no-store" }
-      });
-    }
-    const response = await servePublicFile(diskPath, {
-      ...options.deferCors === true && { deferCors: true },
-      ...request.method === "HEAD" && { head: true }
-    });
-    response.headers.set("Cache-Control", FAVICON_CACHE_CONTROL);
-    response.headers.set("X-Content-Type-Options", "nosniff");
-    if (branding.faviconMimeType !== void 0) {
-      response.headers.set("Content-Type", branding.faviconMimeType);
-    }
-    return response;
-  };
-}
-
-// src/config.ts
-function assertServerConfig(config) {
-  if (config.basePath !== void 0) {
-    if (typeof config.basePath !== "string") {
-      throw new TypeError(
-        "basePath must be an absolute URL pathname without empty segments, trailing slash, query, fragment, or whitespace"
-      );
-    }
-    const { basePath } = config;
-    if (!basePath.startsWith("/") || basePath.includes("?") || basePath.includes("#") || /\s/.test(basePath) || basePath.includes("//") || basePath.length > 1 && basePath.endsWith("/")) {
-      throw new TypeError(
-        "basePath must be an absolute URL pathname without empty segments, trailing slash, query, fragment, or whitespace"
-      );
-    }
-  }
-}
-
-// src/context.ts
-import {
-  CLIENT_CAPABILITIES_META_KEY as CLIENT_CAPABILITIES_META_KEY2,
-  inputRequired,
-  inputResponse
-} from "@modelcontextprotocol/server";
-
-// src/views/capabilities.ts
-import {
-  CLIENT_CAPABILITIES_META_KEY
-} from "@modelcontextprotocol/server";
-
-// src/views/constants.ts
-var UI_EXTENSION_ID = "io.modelcontextprotocol/ui";
-var UI_MIME_TYPE = "text/html;profile=mcp-app";
-var UI_RESOURCE_URI_PREFIX = "ui://views/";
-var UI_META_KEY = "ui";
-var UI_RESOURCE_URI_META_KEY = "ui/resourceUri";
-function viewResourceUri(viewName) {
-  return `${UI_RESOURCE_URI_PREFIX}${viewName}.html`;
-}
-
-// src/views/capabilities.ts
-var clientCapabilitiesByRequest = /* @__PURE__ */ new WeakMap();
-function stashClientCapabilities(request, capabilities) {
-  clientCapabilitiesByRequest.set(request, capabilities);
-}
-function extractClientCapabilitiesFromBody(body) {
-  if (typeof body !== "object" || body === null) {
-    return void 0;
-  }
-  const params = body["params"];
-  if (typeof params !== "object" || params === null) {
-    return void 0;
-  }
-  const meta = params["_meta"];
-  if (typeof meta !== "object" || meta === null) {
-    return void 0;
-  }
-  const capabilities = meta[CLIENT_CAPABILITIES_META_KEY];
-  if (typeof capabilities !== "object" || capabilities === null) {
-    return void 0;
-  }
-  return capabilities;
-}
-function supportsViews(capabilities) {
-  const extensions = capabilities?.extensions;
-  if (extensions === void 0) {
-    return false;
-  }
-  const uiExtension = extensions[UI_EXTENSION_ID];
-  if (typeof uiExtension !== "object" || uiExtension === null) {
-    return false;
-  }
-  const mimeTypes = uiExtension["mimeTypes"];
-  if (!Array.isArray(mimeTypes)) {
-    return false;
-  }
-  return mimeTypes.includes(UI_MIME_TYPE);
-}
-
-// src/context.ts
-function requireOAuthAuthInfo(authInfo) {
-  if (authInfo === void 0 || authInfo.extra === void 0 || authInfo.expiresAt === void 0) {
-    throw new Error("OAuth callback did not receive mapped AuthInfo.extra");
-  }
-}
-function toClientContext(ctx) {
-  const envelopeCaps = ctx.mcpReq.envelope?.[CLIENT_CAPABILITIES_META_KEY2];
-  return {
-    supportsViews() {
-      return supportsViews(envelopeCaps);
-    }
-  };
-}
-function createElicit(inputResponses) {
-  return async function elicit(key, message, schemaOrUrl) {
-    let request;
-    let formSchema;
-    if (typeof schemaOrUrl === "string") {
-      request = inputRequired.elicitUrl({
-        message,
-        url: schemaOrUrl
-      });
-    } else if (schemaOrUrl !== void 0) {
-      formSchema = schemaOrUrl;
-      request = inputRequired.elicit({
-        message,
-        requestedSchema: schemaOrUrl
-      });
-    } else {
-      throw new TypeError(
-        "ctx.elicit(key, message, value) requires a form schema or URL string"
-      );
-    }
-    const response = inputResponse(inputResponses, key);
-    if (response.kind === "elicit") {
-      if (response.action !== "accept") {
-        return { status: response.action };
-      }
-      if (formSchema === void 0) {
-        return { status: "accept" };
-      }
-      if (response.content !== void 0) {
-        const outcome = await formSchema["~standard"].validate(
-          response.content
-        );
-        if (outcome.issues === void 0) {
-          return { status: "accept", data: outcome.value };
-        }
-      }
-    }
-    return {
-      status: "required",
-      result: inputRequired({ inputRequests: { [key]: request } })
-    };
-  };
-}
-function toRequestContext(ctx) {
-  const request = ctx.http?.req;
-  return {
-    signal: ctx.mcpReq.signal,
-    ...request !== void 0 && { request },
-    ...ctx.mcpReq.inputResponses !== void 0 && {
-      inputResponses: ctx.mcpReq.inputResponses
-    },
-    client: toClientContext(ctx),
-    elicit: createElicit(ctx.mcpReq.inputResponses),
-    requestState: () => ctx.mcpReq.requestState(),
-    async reportProgress(progress, total, message) {
-      const progressToken = ctx.mcpReq._meta?.progressToken;
-      if (progressToken === void 0) return false;
-      await ctx.mcpReq.notify({
-        method: "notifications/progress",
-        params: {
-          progressToken,
-          progress,
-          ...total !== void 0 && { total },
-          ...message !== void 0 && { message }
-        }
-      });
-      return true;
-    },
-    async sendLog(level, data, logger) {
-      await ctx.mcpReq.notify({
-        method: "notifications/message",
-        params: {
-          level,
-          data,
-          ...logger !== void 0 && { logger }
-        }
-      });
-    }
-  };
-}
-function toAuthenticatedRequestContext(ctx) {
-  const authInfo = ctx.http?.authInfo;
-  requireOAuthAuthInfo(authInfo);
-  return {
-    ...toRequestContext(ctx),
-    auth: {
-      user: authInfo.extra.user,
-      payload: authInfo.extra.payload,
-      accessToken: authInfo.token,
-      scopes: [...authInfo.scopes],
-      permissions: [...authInfo.extra.permissions],
-      ...authInfo.clientId.length > 0 && { clientId: authInfo.clientId },
-      expiresAt: authInfo.expiresAt,
-      ...authInfo.resource !== void 0 && { resource: authInfo.resource }
-    }
-  };
-}
-
-// src/middleware/cors.ts
-var DEFAULT_METHODS = ["GET", "HEAD", "POST", "OPTIONS"];
-var DEFAULT_ALLOWED_HEADERS = [
-  "Content-Type",
-  "Authorization",
-  "mcp-protocol-version",
-  "mcp-method",
-  "mcp-name"
-];
-function resolveAllowedOrigin(origin, requestOrigin) {
-  if (origin === void 0) {
-    return requestOrigin;
-  }
-  if (typeof origin === "function") {
-    return origin(requestOrigin);
-  }
-  if (origin === "*") {
-    return "*";
-  }
-  if (Array.isArray(origin)) {
-    if (requestOrigin !== null && origin.includes(requestOrigin)) {
-      return requestOrigin;
-    }
-    return null;
-  }
-  return origin;
-}
-function corsHeaders(options, request) {
-  if (request.headers.has("Access-Control-Allow-Origin")) {
-    return void 0;
-  }
-  const requestOrigin = request.headers.get("Origin");
-  const allowedOrigin = resolveAllowedOrigin(options.origin, requestOrigin);
-  if (allowedOrigin === null) {
-    return void 0;
-  }
-  const headers = {
-    "Access-Control-Allow-Origin": allowedOrigin,
-    "Access-Control-Allow-Methods": options.methods.join(", "),
-    "Access-Control-Allow-Headers": options.allowedHeaders.join(", ")
-  };
-  if (options.credentials) {
-    headers["Access-Control-Allow-Credentials"] = "true";
-  }
-  if (allowedOrigin !== "*") {
-    headers.Vary = "Origin";
-  }
-  return headers;
-}
-function mergeCorsHeaders(response, headers) {
-  if (response.headers.has("Access-Control-Allow-Origin")) {
-    return response;
-  }
-  const merged = new Headers(response.headers);
-  const corsHeaders2 = new Headers(headers);
-  corsHeaders2.forEach((value, key) => {
-    merged.set(key, value);
-  });
-  return new Response(response.body, {
-    status: response.status,
-    statusText: response.statusText,
-    headers: merged
-  });
-}
-function corsFetchMiddleware(options) {
-  const enabled = options.enabled !== false;
-  if (!enabled) {
-    return async (_request, next) => next();
-  }
-  const resolved = {
-    ...options.origin !== void 0 && { origin: options.origin },
-    methods: options.methods ?? DEFAULT_METHODS,
-    allowedHeaders: options.allowedHeaders ?? DEFAULT_ALLOWED_HEADERS,
-    credentials: options.credentials ?? false
-  };
-  return async (request, next) => {
-    const headers = corsHeaders(resolved, request);
-    if (headers === void 0) {
-      return next();
-    }
-    if (request.method === "OPTIONS") {
-      return new Response(null, { status: 204, headers });
-    }
-    const response = await next();
-    return mergeCorsHeaders(response, headers);
-  };
-}
-function isGlobalCorsEnabled(cors) {
-  return cors !== void 0 && cors.enabled !== false;
-}
-
-// src/middleware/mcp-middleware.ts
-function matchesPattern(pattern, method) {
-  if (pattern === "*") return true;
-  if (pattern.endsWith("/*")) {
-    const prefix = pattern.slice(0, -1);
-    return method.startsWith(prefix);
-  }
-  return pattern === method;
-}
-function composeMiddleware(entries, method, innerFn) {
-  const matching = entries.filter((e) => matchesPattern(e.pattern, method));
-  if (matching.length === 0) {
-    return (_ctx) => innerFn();
-  }
-  return (ctx) => {
-    let index = -1;
-    const dispatch = (i) => {
-      if (i <= index) {
-        return Promise.reject(new Error("next() called multiple times"));
-      }
-      index = i;
-      if (i === matching.length) {
-        return innerFn();
-      }
-      const entry = matching[i];
-      return entry.handler(ctx, () => dispatch(i + 1));
-    };
-    return dispatch(0);
-  };
-}
-function freezeMiddlewareContext(ctx) {
-  return Object.freeze({
-    method: ctx.method,
-    params: Object.freeze({ ...ctx.params }),
-    ...ctx.auth !== void 0 && { auth: ctx.auth },
-    state: ctx.state
-  });
-}
-async function runMcpOperation(middlewares, events, method, ctx, innerFn) {
-  dispatchMcpEvents(events, method, "before", ctx);
-  const chained = composeMiddleware(middlewares, method, innerFn);
-  const result = await chained(ctx);
-  dispatchMcpEvents(events, method, "complete", ctx, result);
-  return result;
-}
-function dispatchMcpEvents(events, method, phase, ctx, result) {
-  const frozen = freezeMiddlewareContext(ctx);
-  for (const entry of events) {
-    if (entry.phase !== phase || !matchesPattern(entry.pattern, method)) {
-      continue;
-    }
-    try {
-      if (phase === "before") {
-        entry.handler(frozen);
-      } else {
-        entry.handler(frozen, result);
-      }
-    } catch (error) {
-      console.error(
-        `[mcp-use] MCP event listener for "${entry.pattern}" (${phase}) threw:`,
-        error
-      );
-    }
-  }
-}
-function parseMcpPattern(raw) {
-  const pattern = raw.startsWith("mcp:") ? raw.slice(4) : raw;
-  if (pattern.endsWith(":complete")) {
-    return {
-      pattern: pattern.slice(0, -":complete".length),
-      phase: "complete"
-    };
-  }
-  return { pattern, phase: "before" };
-}
-function normalizeMcpMiddlewarePattern(raw) {
-  return raw.startsWith("mcp:") ? raw.slice(4) : raw;
-}
-
-// src/inspector-shell.ts
-var INSPECTOR_TAG = "beta";
-var DEFAULT_INSPECTOR_ASSETS_URL = `https://cdn.jsdelivr.net/npm/@mcp-use/inspector@${INSPECTOR_TAG}/dist/cdn/inspector.js`;
-function inspectorStylesUrl(assetsUrl) {
-  return assetsUrl.replace(/\.js(?=$|[?#])/, ".css");
-}
-function isDefaultJsdelivrInspectorUrl(url) {
-  return url.startsWith("https://cdn.jsdelivr.net/npm/@mcp-use/inspector@");
-}
-function withInspectorCacheBust(assetsUrl) {
-  if (!isDefaultJsdelivrInspectorUrl(assetsUrl)) return assetsUrl;
-  const sep = assetsUrl.includes("?") ? "&" : "?";
-  return `${assetsUrl}${sep}cb=${crypto.randomUUID()}`;
-}
-function matchesInspectorShellPath(pathname, basePath) {
-  const prefix = pathUnderBase(basePath, "inspector");
-  if (pathname !== prefix && !pathname.startsWith(`${prefix}/`)) {
-    return false;
-  }
-  const suffix = pathname.slice(prefix.length);
-  return suffix !== "/api" && !suffix.startsWith("/api/");
-}
-function escapeHtml(value) {
-  return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&#39;");
-}
-function serializeForInlineScript(value) {
-  return JSON.stringify(value).replaceAll("<", "\\u003c");
-}
-function renderInspectorShell(options) {
-  const { serverName, basePath, faviconHref, assetsUrl, manufactChatUrl } = options;
-  const serializedBasePath = serializeForInlineScript(basePath);
-  const serializedManufactChatUrl = manufactChatUrl ? serializeForInlineScript(manufactChatUrl) : null;
-  const rawUrl = assetsUrl ?? DEFAULT_INSPECTOR_ASSETS_URL;
-  const bundleUrl = withInspectorCacheBust(rawUrl);
-  const scriptSrc = escapeHtml(bundleUrl);
-  const stylesHref = escapeHtml(inspectorStylesUrl(bundleUrl));
-  return `<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="utf-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <title>${escapeHtml(serverName)} \u2014 MCP Inspector</title>
-    ${faviconHref !== void 0 ? `<link rel="icon" href="${escapeHtml(faviconHref)}" />` : ""}
-    <link rel="preconnect" href="https://fonts.googleapis.com" />
-    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
-    <link
-      href="https://fonts.googleapis.com/css2?family=Ubuntu:wght@400;500;700&display=swap"
-      rel="stylesheet"
-    />
-    <link rel="stylesheet" href="${stylesHref}" />
-    <style>
-      :root { color-scheme: light dark; }
-      html, body { height: 100%; margin: 0; background-color: #f3f3f3; }
-    </style>
-  </head>
-  <body>
-    <div id="root"></div>
-    <script>
-      (function () {
-        var basePath = ${serializedBasePath};
-        // The connect URL is derived from the page's own origin: the server
-        // never guesses the hostname a browser reached it by.
-        window.__MCP_USE_INSPECTOR__ = {
-          autoConnectUrl: window.location.origin + basePath,
-          basePath: basePath,
-        };
-        // Read by the current inspector bundle to derive its own URLs.
-        window.__MCP_BASE_PATH__ = basePath;
-        ${serializedManufactChatUrl ? `window.__MANUFACT_CHAT_URL__ = ${serializedManufactChatUrl};` : ""}
-        // The bundle carries Node-flavored dependencies that touch \`process\`
-        // at module scope; give them the same browser polyfill the v1
-        // inspector shell provides, or the bundle throws on load.
-        if (typeof window.process === "undefined") {
-          window.process = {
-            env: {},
-            platform: "browser",
-            browser: true,
-            version: "v18.0.0",
-            versions: { node: "18.0.0" },
-            cwd: function () { return "/"; },
-            nextTick: function (fn) {
-              var args = Array.prototype.slice.call(arguments, 1);
-              queueMicrotask(function () { fn.apply(null, args); });
-            },
-          };
-        }
-      })();
-    </script>
-    <script type="module" src="${scriptSrc}"></script>
-  </body>
-</html>
-`;
-}
-function createInspectorHandler(inspector, options) {
-  if (inspector?.enabled === false) {
-    return void 0;
-  }
-  const { assetsUrl: configAssetsUrl, manufactChatUrl: configManufactChatUrl } = inspector ?? {};
-  const assetsUrl = configAssetsUrl ?? process.env["MCP_USE_INSPECTOR_ASSETS_URL"] ?? void 0;
-  const manufactChatUrl = configManufactChatUrl ?? process.env["MANUFACT_CHAT_URL"] ?? void 0;
-  const shellOptions = {
-    serverName: options.serverName,
-    basePath: options.basePath,
-    ...options.faviconHref !== void 0 && {
-      faviconHref: options.faviconHref
-    },
-    assetsUrl,
-    manufactChatUrl
-  };
-  return async (request) => {
-    if (request.method !== "GET" && request.method !== "HEAD") {
-      return new Response("Method Not Allowed", { status: 405 });
-    }
-    const pathname = new URL(request.url).pathname;
-    if (!matchesInspectorShellPath(pathname, options.basePath)) {
-      return new Response("Not Found", { status: 404 });
-    }
-    const html = renderInspectorShell(shellOptions);
-    return new Response(request.method === "HEAD" ? null : html, {
-      status: 200,
-      headers: { "content-type": "text/html; charset=utf-8" }
-    });
-  };
-}
-
-// src/logging.ts
-import {
-  CLIENT_INFO_META_KEY,
-  isJSONRPCRequest
-} from "@modelcontextprotocol/server";
-function colorsEnabled() {
-  if (typeof process === "undefined") return false;
-  if (process.env?.["NO_COLOR"] !== void 0) return false;
-  return process.stdout?.isTTY === true;
-}
-function ansi(open, close) {
-  return (text) => colorsEnabled() ? `\x1B[${open}m${text}\x1B[${close}m` : text;
-}
-var bold = ansi(1, 22);
-var dim = ansi(2, 22);
-var red = ansi(31, 39);
-var green = ansi(32, 39);
-var yellow = ansi(33, 39);
-var blue = ansi(34, 39);
-var magenta = ansi(35, 39);
-var cyan = ansi(36, 39);
-var gray = ansi(90, 39);
-function resolveLogLevel(configured) {
-  const raw = typeof process === "undefined" ? void 0 : process.env?.["MCP_USE_LOG_LEVEL"]?.toLowerCase();
-  if (raw === "info" || raw === "debug" || raw === "trace") return raw;
-  return configured ?? "info";
-}
-function formatClientInfo(info) {
-  if (info === void 0) return void 0;
-  return typeof info.version === "string" && info.version !== "" ? `${info.name}/${info.version}` : info.name;
-}
-var detailFormatters = {
-  initialize: (p) => ({ subject: formatClientInfo(p.clientInfo) }),
-  ping: () => ({}),
-  "server/discover": () => ({}),
-  "completion/complete": (p) => ({
-    subject: p.ref.type === "ref/prompt" ? p.ref.name : p.ref.uri,
-    input: p.argument
-  }),
-  "logging/setLevel": (p) => ({ subject: p.level }),
-  "prompts/get": (p) => ({ subject: p.name, input: p.arguments }),
-  "prompts/list": () => ({}),
-  "resources/list": () => ({}),
-  "resources/templates/list": () => ({}),
-  "resources/read": (p) => ({ subject: p.uri }),
-  "resources/subscribe": (p) => ({ subject: p.uri }),
-  "resources/unsubscribe": (p) => ({ subject: p.uri }),
-  "subscriptions/listen": () => ({}),
-  "tools/call": (p) => ({ subject: p.name, input: p.arguments }),
-  "tools/list": () => ({}),
-  "sampling/createMessage": () => ({}),
-  "elicitation/create": () => ({}),
-  "roots/list": () => ({})
-};
-function isKnownMethod(method) {
-  return Object.prototype.hasOwnProperty.call(detailFormatters, method);
-}
-function formatDetail(message) {
-  if (!isKnownMethod(message.method)) return {};
-  try {
-    const formatter = detailFormatters[message.method];
-    const detail = formatter(message.params);
-    return typeof detail.subject === "string" || detail.subject === void 0 ? detail : {};
-  } catch {
-    return {};
-  }
-}
-var INLINE_JSON_MAX_LENGTH = 80;
-function inlineJson(value) {
-  let text;
-  try {
-    text = JSON.stringify(value) ?? String(value);
-  } catch {
-    text = String(value);
-  }
-  return text.length > INLINE_JSON_MAX_LENGTH ? `${text.slice(0, INLINE_JSON_MAX_LENGTH)}...` : text;
-}
-function formatClientIdentity(message) {
-  const meta = message.params?._meta;
-  if (meta === void 0) return void 0;
-  const info = meta[CLIENT_INFO_META_KEY];
-  if (typeof info !== "object" || info === null || typeof info.name !== "string") {
-    return void 0;
-  }
-  return formatClientInfo(info);
-}
-function sanitize(text) {
-  return text.replace(/[\u0000-\u001F\u007F-\u009F]+/g, " ");
-}
-function methodStyle(method) {
-  if (method.startsWith("tools/")) return cyan;
-  if (method.startsWith("resources/")) return green;
-  if (method.startsWith("prompts/")) return magenta;
-  if (method === "initialize" || method === "ping") return gray;
-  return blue;
-}
-var REDACTED_HEADERS = /* @__PURE__ */ new Set([
-  "authorization",
-  "proxy-authorization",
-  "cookie",
-  "set-cookie",
-  "x-api-key"
-]);
-function redactHeaders(headers) {
-  return Object.fromEntries(
-    Object.entries(headers).map(([name, value]) => [
-      name,
-      REDACTED_HEADERS.has(name.toLowerCase()) ? "[REDACTED]" : value
-    ])
-  );
-}
-async function extractResponseOutcome(res) {
-  if (!res.body) return { errorMessage: null };
-  let text;
-  try {
-    text = await res.clone().text();
-  } catch {
-    return { errorMessage: null };
-  }
-  if (!text) return { errorMessage: null };
-  const isSse = (res.headers.get("content-type") ?? "").includes(
-    "text/event-stream"
-  );
-  const payloads = [];
-  const tryParse = (raw) => {
-    try {
-      payloads.push(JSON.parse(raw));
-    } catch {
-    }
-  };
-  if (isSse) {
-    for (const line of text.split(/\r?\n/)) {
-      if (line.startsWith("data:")) {
-        const data = line.slice(5).trim();
-        if (data) tryParse(data);
-      }
-    }
-  } else {
-    tryParse(text);
-  }
-  let result;
-  for (const payload of payloads) {
-    if (payload === null || typeof payload !== "object") continue;
-    const message = payload;
-    if (typeof message.error?.message === "string") {
-      return { errorMessage: message.error.message };
-    }
-    if (message.result?.isError === true) {
-      const blocks = Array.isArray(message.result.content) ? message.result.content : [];
-      const textBlock = blocks.find(
-        (b) => b?.type === "text" && typeof b.text === "string"
-      );
-      return {
-        errorMessage: textBlock ? String(textBlock.text) : "tool error"
-      };
-    }
-    if ("result" in message) result = message.result;
-  }
-  return { errorMessage: null, result };
-}
-function compactToolResult(result) {
-  if (result === null || typeof result !== "object") return result;
-  const { structuredContent, content } = result;
-  if (structuredContent !== void 0) return structuredContent;
-  if (Array.isArray(content)) {
-    const [block] = content;
-    if (content.length === 1 && block?.type === "text") return block.text;
-  }
-  return content;
-}
-function formatForDump(value) {
-  function truncate(val) {
-    if (typeof val === "string" && val.length > 100) {
-      return `${val.slice(0, 100)}...`;
-    }
-    if (Array.isArray(val)) return val.map(truncate);
-    if (val !== null && typeof val === "object") {
-      return Object.fromEntries(
-        Object.entries(val).map(([k, v]) => [
-          k,
-          truncate(v)
-        ])
-      );
-    }
-    return val;
-  }
-  try {
-    return JSON.stringify(truncate(value), null, 2);
-  } catch {
-    return String(value);
-  }
-}
-var DUMP_BODY_MAX_LENGTH = 1e4;
-async function printTraceDump(response, requestHeaders, requestBody, readResponseBody) {
-  console.log(`
-${cyan("=".repeat(80))}`);
-  console.log(bold(cyan("[TRACE] Request Details")));
-  console.log(cyan("-".repeat(80)));
-  if (Object.keys(requestHeaders).length > 0) {
-    console.log(yellow("Request Headers:"));
-    console.log(formatForDump(redactHeaders(requestHeaders)));
-  }
-  if (requestBody !== void 0) {
-    console.log(yellow("Request Body:"));
-    console.log(
-      typeof requestBody === "string" ? requestBody : formatForDump(requestBody)
-    );
-  }
-  const responseHeaders = {};
-  response.headers.forEach((value, key) => {
-    responseHeaders[key] = value;
-  });
-  if (Object.keys(responseHeaders).length > 0) {
-    console.log(yellow("Response Headers:"));
-    console.log(formatForDump(redactHeaders(responseHeaders)));
-  }
-  if (!readResponseBody) {
-    console.log(`${yellow("Response Body:")} (streaming \u2014 not dumped)`);
-  } else if (response.body === null) {
-    console.log(`${yellow("Response Body:")} (no body)`);
-  } else {
-    try {
-      const text = await response.clone().text();
-      if (text.length === 0) {
-        console.log(`${yellow("Response Body:")} (empty)`);
-      } else {
-        console.log(yellow("Response Body:"));
-        try {
-          console.log(formatForDump(JSON.parse(text)));
-        } catch {
-          console.log(
-            text.length > DUMP_BODY_MAX_LENGTH ? `${text.slice(0, DUMP_BODY_MAX_LENGTH)}
-... (truncated, ${text.length - DUMP_BODY_MAX_LENGTH} more characters)` : text
-          );
-        }
-      }
-    } catch {
-      console.log(`${yellow("Response Body:")} (unable to read)`);
-    }
-  }
-  console.log(`${cyan("=".repeat(80))}
-`);
-}
-function styleStatus(status) {
-  const text = String(status);
-  if (status >= 500) return magenta(text);
-  if (status >= 400) return red(text);
-  if (status >= 300) return yellow(text);
-  return green(text);
-}
-function isNoisyRequest(httpMethod, pathname) {
-  if (httpMethod !== "GET" && httpMethod !== "HEAD") return false;
-  return pathname.includes("/inspector") || pathname.endsWith("/favicon.ico");
-}
-function requestLogger(options = {}) {
-  if (options.enabled === false) {
-    return (_request, next) => next();
-  }
-  return async (request, next) => {
-    const level = resolveLogLevel(options.level);
-    const startedAt = Date.now();
-    const httpMethod = request.method;
-    const pathname = new URL(request.url).pathname;
-    if (isNoisyRequest(httpMethod, pathname)) {
-      return next();
-    }
-    const requestHeaders = {};
-    if (level === "trace") {
-      request.headers.forEach((value, key) => {
-        requestHeaders[key] = value;
-      });
-    }
-    let requestBody;
-    if (httpMethod !== "GET" && httpMethod !== "HEAD") {
-      const parsedBody = getRequestBag(request).parsedBody;
-      if (parsedBody !== void 0) {
-        requestBody = parsedBody;
-      } else {
-        try {
-          requestBody = await request.clone().json();
-        } catch {
-        }
-      }
-    }
-    const response = await next();
-    const durationMs = Date.now() - startedAt;
-    const timestamp = (/* @__PURE__ */ new Date()).toISOString().substring(11, 19);
-    const mcpRequest = isJSONRPCRequest(requestBody) ? requestBody : void 0;
-    const isStreamingMethod = mcpRequest?.method === "subscriptions/listen";
-    const lines = [
-      [
-        dim(timestamp),
-        bold(httpMethod),
-        pathname,
-        styleStatus(response.status),
-        dim(`in ${durationMs}ms`)
-      ].join(" ")
-    ];
-    if (mcpRequest !== void 0) {
-      const method = sanitize(mcpRequest.method);
-      const parts = [`  ${methodStyle(method)(method)}`];
-      const detail = formatDetail(mcpRequest);
-      if (detail.subject !== void 0) {
-        parts.push(bold(sanitize(detail.subject)));
-      }
-      const echoPayloads = level !== "info";
-      if (echoPayloads && detail.input !== void 0) {
-        parts.push(inlineJson(detail.input));
-      }
-      const outcome = isStreamingMethod ? { errorMessage: null } : await extractResponseOutcome(response);
-      if (echoPayloads && mcpRequest.method === "tools/call" && outcome.errorMessage === null && outcome.result !== void 0) {
-        parts.push(dim("->"), inlineJson(compactToolResult(outcome.result)));
-      }
-      if (mcpRequest.method !== "initialize") {
-        const client = formatClientIdentity(mcpRequest);
-        if (client !== void 0) parts.push(dim(sanitize(client)));
-      }
-      if (outcome.errorMessage !== null) {
-        parts.push(red(`ERROR ${sanitize(outcome.errorMessage)}`));
-      } else if (response.status >= 400) {
-        parts.push(red(`ERROR (HTTP ${response.status})`));
-      }
-      lines.push(parts.join(" "));
-    }
-    console.log(lines.join("\n"));
-    if (level === "trace") {
-      await printTraceDump(
-        response,
-        requestHeaders,
-        requestBody,
-        !isStreamingMethod
-      );
-    }
-    return response;
-  };
-}
-
-// src/mount-mcp.ts
-import {
-  createMcpHandler
-} from "@modelcontextprotocol/server";
-function createMcpMount(factory, options = {}) {
-  const {
-    path = "/mcp",
-    handler: handlerOptions,
-    authInfo: getAuthInfo
-  } = options;
-  const legacyMode = handlerOptions?.legacy ?? "stateless";
-  const handler = createMcpHandler(factory, {
-    legacy: "stateless",
-    ...handlerOptions
-  });
-  const fetch = async (request) => {
-    if (!matchesPath(request, path)) {
-      return new Response("Not Found", { status: 404 });
-    }
-    if (legacyMode === "stateless") {
-      const method = request.method.toUpperCase();
-      if (method === "GET" || method === "DELETE" || method === "HEAD") {
-        return new Response(null, { status: 204 });
-      }
-    }
-    const bag = getRequestBag(request);
-    let parsedBody = bag.parsedBody;
-    if (parsedBody === void 0) {
-      try {
-        parsedBody = await request.clone().json();
-      } catch {
-      }
-    }
-    const capabilities = extractClientCapabilitiesFromBody(parsedBody);
-    if (capabilities !== void 0) {
-      stashClientCapabilities(request, capabilities);
-    }
-    const authInfo = getAuthInfo?.(request) ?? bag.authInfo;
-    return handler.fetch(request, {
-      ...parsedBody !== void 0 && { parsedBody },
-      ...authInfo !== void 0 && { authInfo }
-    });
-  };
-  return { handler, fetch };
-}
-
-// src/tools.ts
-function resolveToolInputSchema(definition) {
-  return definition.inputSchema ?? definition.schema;
-}
-
-// src/views/register.ts
-var registerViews = /* @__PURE__ */ Symbol("mcp-use/registerViews");
-
-// src/views/csp-env.ts
-var CATEGORY_ENV = {
-  connectDomains: "CSP_CONNECT_DOMAINS",
-  resourceDomains: "CSP_RESOURCE_DOMAINS",
-  frameDomains: "CSP_FRAME_DOMAINS",
-  baseUriDomains: "CSP_BASE_URI_DOMAINS"
-};
-function parseDomainList(raw) {
-  if (raw === void 0 || raw.trim() === "") {
-    return [];
-  }
-  return raw.split(",").map((s) => s.trim()).filter((s) => s.length > 0);
-}
-function readEnvDomains(name) {
-  if (typeof process === "undefined") {
-    return void 0;
-  }
-  const raw = process.env[name];
-  if (raw === void 0 || raw.trim() === "") {
-    return void 0;
-  }
-  return parseDomainList(raw);
-}
-function readCspUrlsShortcut() {
-  return readEnvDomains("CSP_URLS") ?? [];
-}
-function readEnvDomainsForCategory(category) {
-  const perCategory = readEnvDomains(CATEGORY_ENV[category]);
-  if (perCategory !== void 0) {
-    return perCategory;
-  }
-  return readCspUrlsShortcut();
-}
-function mergeDomainLists(...segments) {
-  const seen = /* @__PURE__ */ new Set();
-  const out = [];
-  for (const segment of segments) {
-    for (const domain of segment) {
-      if (!seen.has(domain)) {
-        seen.add(domain);
-        out.push(domain);
-      }
-    }
-  }
-  return out;
-}
-function toWebSocketOrigin(serverOrigin) {
-  if (serverOrigin.startsWith("https://")) {
-    return `wss://${serverOrigin.slice("https://".length)}`;
-  }
-  if (serverOrigin.startsWith("http://")) {
-    return `ws://${serverOrigin.slice("http://".length)}`;
-  }
-  return serverOrigin;
-}
-function buildMergedResourceCsp(authorFacts, options) {
-  const author = authorFacts?.csp;
-  const mcpConnectAuto = [];
-  if (options.serverOrigin !== "") {
-    mcpConnectAuto.push(options.serverOrigin);
-    if (options.hmrWs === true) {
-      mcpConnectAuto.push(toWebSocketOrigin(options.serverOrigin));
-    }
-  }
-  const mcpResourceAuto = [];
-  const resourceOrigin = options.explicitAssetsBase ? options.assetsOrigin : options.serverOrigin;
-  if (resourceOrigin !== "") {
-    mcpResourceAuto.push(resourceOrigin);
-  }
-  const connectDomains = mergeDomainLists(
-    author?.connectDomains ?? [],
-    readEnvDomainsForCategory("connectDomains"),
-    mcpConnectAuto
-  );
-  const resourceDomains = mergeDomainLists(
-    author?.resourceDomains ?? [],
-    readEnvDomainsForCategory("resourceDomains"),
-    mcpResourceAuto
-  );
-  const frameDomains = mergeDomainLists(
-    author?.frameDomains ?? [],
-    readEnvDomainsForCategory("frameDomains")
-  );
-  const baseUriDomains = mergeDomainLists(
-    author?.baseUriDomains ?? [],
-    readEnvDomainsForCategory("baseUriDomains")
-  );
-  return {
-    ...author,
-    connectDomains,
-    resourceDomains,
-    frameDomains,
-    baseUriDomains
-  };
-}
-
-// src/views/routes.ts
-var PUBLIC_BUILD_DIR = ".mcp-use/build/views/public";
-var PUBLIC_DEV_DIR = "public";
-var VIEW_ASSETS_BUILD_ROOT = ".mcp-use/build/views";
-function createViewAssetsHandler(basePath, views, options) {
-  if (views.size === 0) {
-    return void 0;
-  }
-  const assetsPrefix = pathUnderBase(basePath, "_mcp-use/views");
-  const projectRoot = options?.projectRoot ?? process.cwd();
-  return async (request) => {
-    if (request.method !== "GET" && request.method !== "HEAD") {
-      return new Response("Method Not Allowed", { status: 405 });
-    }
-    if (!matchesPathPrefix(request, assetsPrefix)) {
-      return new Response("Not Found", { status: 404 });
-    }
-    const pathname = pathnameOf(request);
-    const remainder = pathname.slice(assetsPrefix.length + 1);
-    const slash = remainder.indexOf("/");
-    if (slash <= 0 || slash === remainder.length - 1) {
-      return new Response("Not Found", { status: 404 });
-    }
-    const viewName = remainder.slice(0, slash);
-    const subpath = remainder.slice(slash + 1);
-    const entry = views.get(viewName);
-    if (entry === void 0 || entry.kind !== "external") {
-      return new Response("Not Found", { status: 404 });
-    }
-    const [{ join }, { resolvePublicFilePath: resolvePublicFilePath2, servePublicFile: servePublicFile2 }] = await Promise.all([import("path"), import("./public-route-5JEGFEIN.js")]);
-    const viewRoot = join(projectRoot, VIEW_ASSETS_BUILD_ROOT, viewName);
-    const diskPath = await resolvePublicFilePath2(viewRoot, subpath);
-    if (diskPath === null) {
-      return new Response("Not Found", { status: 404 });
-    }
-    return await servePublicFile2(diskPath, {
-      ...options?.deferCors === true && { deferCors: true },
-      ...request.method === "HEAD" && { head: true }
-    });
-  };
-}
-function createViewPublicHandler(basePath, views, options) {
-  if (views.size === 0 && options?.enabled !== true) {
-    return void 0;
-  }
-  const publicPrefix = pathUnderBase(basePath, "_mcp-use/public");
-  const subdir = options?.dev === true ? PUBLIC_DEV_DIR : PUBLIC_BUILD_DIR;
-  const projectRoot = options?.projectRoot ?? process.cwd();
-  return async (request) => {
-    if (request.method !== "GET" && request.method !== "HEAD") {
-      return new Response("Method Not Allowed", { status: 405 });
-    }
-    if (!matchesPathPrefix(request, publicPrefix)) {
-      return new Response("Not Found", { status: 404 });
-    }
-    const pathname = pathnameOf(request);
-    const encodedSubpath = pathname.slice(publicPrefix.length + 1);
-    let subpath;
-    try {
-      subpath = decodeURIComponent(encodedSubpath);
-    } catch {
-      return new Response("Not Found", { status: 404 });
-    }
-    if (subpath.length === 0) {
-      return new Response("Not Found", { status: 404 });
-    }
-    const [{ join }, { resolvePublicFilePath: resolvePublicFilePath2, servePublicFile: servePublicFile2 }] = await Promise.all([import("path"), import("./public-route-5JEGFEIN.js")]);
-    const publicRoot = join(projectRoot, subdir);
-    const diskPath = await resolvePublicFilePath2(publicRoot, subpath);
-    if (diskPath === null) {
-      return new Response("Not Found", { status: 404 });
-    }
-    return await servePublicFile2(diskPath, {
-      ...options?.deferCors === true && { deferCors: true },
-      ...request.method === "HEAD" && { head: true }
-    });
-  };
-}
-
-// src/views/wire.ts
-function buildToolUiMeta(viewName, visibility, existingMetadata) {
-  if (viewName === void 0 && visibility === void 0 && existingMetadata === void 0) {
-    return void 0;
-  }
-  const meta = { ...existingMetadata };
-  const existingUi = existingMetadata?.[UI_META_KEY];
-  const existingUiIsObject = typeof existingUi === "object" && existingUi !== null && !Array.isArray(existingUi);
-  const ui = existingUiIsObject ? { ...existingUi } : {};
-  if (viewName !== void 0) {
-    const resourceUri = viewResourceUri(viewName);
-    ui["resourceUri"] = resourceUri;
-    meta[UI_RESOURCE_URI_META_KEY] = resourceUri;
-  } else {
-    delete ui["resourceUri"];
-    delete meta[UI_RESOURCE_URI_META_KEY];
-  }
-  if (visibility !== void 0) {
-    ui["visibility"] = [visibility];
-  } else {
-    delete ui["visibility"];
-  }
-  if (viewName !== void 0 || visibility !== void 0 || existingUiIsObject) {
-    meta[UI_META_KEY] = ui;
-  }
-  return meta;
-}
-function buildToolResultUiMeta(viewName) {
-  const resourceUri = viewResourceUri(viewName);
-  return {
-    [UI_META_KEY]: { resourceUri },
-    [UI_RESOURCE_URI_META_KEY]: resourceUri
-  };
-}
-function resolveCspOptions(options) {
-  const request = options?.request;
-  const serverOrigin = options?.serverOrigin ?? (request !== void 0 ? resolveServerOrigin(request) : "");
-  const assetsBase = options?.assetsBase ?? (request !== void 0 ? resolveAssetsBase(request) : serverOrigin);
-  return {
-    serverOrigin,
-    assetsOrigin: originFromAssetsBase(assetsBase),
-    explicitAssetsBase: hasExplicitAssetsBase(),
-    ...options?.hmrWs === true ? { hmrWs: true } : {}
-  };
-}
-function buildResourceUiMeta(authorFacts, options) {
-  const csp = buildMergedResourceCsp(authorFacts, resolveCspOptions(options));
-  const ui = { csp };
-  if (authorFacts?.permissions !== void 0) {
-    ui["permissions"] = authorFacts.permissions;
-  }
-  if (authorFacts?.domain !== void 0) {
-    ui["domain"] = authorFacts.domain;
-  }
-  if (authorFacts?.prefersBorder !== void 0) {
-    ui["prefersBorder"] = authorFacts.prefersBorder;
-  }
-  return { [UI_META_KEY]: ui };
-}
-function viewResourceConfig(_viewName, _entry, authorFacts, options) {
-  return {
-    mimeType: UI_MIME_TYPE,
-    ...authorFacts?.description !== void 0 && {
-      description: authorFacts.description
-    },
-    _meta: buildResourceUiMeta(authorFacts, options)
-  };
-}
-
-// src/server.ts
-var MCPServer = class _MCPServer {
-  #config;
-  #branding;
-  #tools = /* @__PURE__ */ new Map();
-  #resources = /* @__PURE__ */ new Map();
-  #resourceTemplates = /* @__PURE__ */ new Map();
-  #prompts = /* @__PURE__ */ new Map();
-  #views = /* @__PURE__ */ new Map();
-  /**
-   * One-to-one tool→view bindings. Each view name maps to the single tool
-   * that bound it; that tool's `view:` config is the sole source of
-   * resource facts for the primed view resource.
-   */
-  #viewBindings = /* @__PURE__ */ new Map();
-  #viewsPrimed = false;
-  /** When true, resource CSP emission includes the HMR websocket origin. */
-  #viewsDevMode = false;
-  /** Project root for filesystem-backed view routes (dev `public/`). */
-  #viewsProjectRoot = process.cwd();
-  #fetchHandler;
-  #handler;
-  #httpServer;
-  #oauthResource;
-  #oauthResourceResolved = false;
-  #oauthResourceConfigurationAbsent = false;
-  /** Whether the mounted app validates Host headers (fixed at first mount). */
-  #hostValidated = false;
-  #mcpMiddlewares = [];
-  #mcpEventListeners = [];
-  /**
-   * Create an MCP server from a parsed, bundled OpenAPI document.
-   *
-   * Each included OpenAPI operation becomes a tool that validates its input,
-   * calls the matching upstream HTTP endpoint, and returns the response using
-   * the SDK's raw tool-result shape. External `$ref` values are not fetched;
-   * bundle the document before passing it in.
-   *
-   * @param options - OpenAPI document, operation filters, upstream URL, and
-   * request authentication options.
-   * @returns An unauthenticated MCP server populated with generated tools.
-   *
-   * @example
-   * ```ts
-   * const spec = await fetch("https://api.example.com/openapi.json")
-   *   .then((response) => response.json());
-   * const server = MCPServer.fromOpenAPI({ spec });
-   * await server.listen(3000);
-   * ```
-   */
-  static fromOpenAPI(options) {
-    const server = new _MCPServer({
-      name: options.name ?? options.spec.info.title,
-      version: options.version ?? options.spec.info.version ?? "1.0.0"
-    });
-    registerOpenAPITools(server, options);
-    return server;
-  }
-  /**
-   * Create a server. `config.name` and `config.version` identify the server
-   * to clients during initialization. `config.basePath` (default `"/mcp"`)
-   * is both the MCP route and the path of the OAuth protected-resource
-   * identity, so any explicit OAuth resource URL must use that exact path.
-   * Nothing binds or listens until {@link MCPServer.listen} or
-   * {@link MCPServer.getHandler} is called.
-   */
-  constructor(config) {
-    assertServerConfig(config);
-    this.#config = config;
-    this.#branding = normalizeServerBranding(config);
-    if (config.oauth !== void 0) {
-      const mcpUrl = typeof process === "undefined" ? void 0 : process.env["MCP_URL"];
-      const resource = resolveConfiguredOAuthResource({
-        provider: config.oauth,
-        basePath: this.#basePath(),
-        ...mcpUrl !== void 0 && { mcpUrl }
-      });
-      this.#oauthResource = resource;
-      this.#oauthResourceResolved = resource !== void 0;
-      this.#oauthResourceConfigurationAbsent = resource === void 0;
-    }
-  }
-  /**
-   * The URL path prefix the MCP endpoint is mounted at.
-   *
-   * Reflects `config.basePath` (default `"/mcp"`). Exposed so tooling that
-   * imports the entry module — `mcp-use dev`'s startup log, for example —
-   * can build the endpoint and inspector URLs without assuming the default.
-   */
-  get basePath() {
-    return this.#basePath();
-  }
-  /**
-   * Immutable normalized branding shared by MCP identity and browser pages.
-   *
-   * `favicon` is the final source after explicit-favicon and icon-selection
-   * precedence. Landing-page integrations can use this accessor and link to
-   * the server's root-level `/favicon.ico` route without reading private
-   * configuration or depending on the inspector/view layers.
-   *
-   * @example
-   * ```ts
-   * if (server.branding.favicon) {
-   *   console.log("Browser favicon: /favicon.ico");
-   * }
-   * ```
-   */
-  get branding() {
-    return this.#branding;
-  }
-  /**
-   * Register a tool. Input is validated against `inputSchema` before the callback
-   * runs; results carrying `structuredContent` are type-checked against
-   * `outputSchema` at the callback's return position.
-   *
-   * @returns A {@link ToolRef} carrying the tool name and phantom types for
-   * inference-based view typing.
-   */
-  tool(definition, callback) {
-    this.#assertNotStarted("tool", definition.name);
-    this.#validateToolViewBinding(definition);
-    this.#tools.set(definition.name, {
-      definition,
-      callback
-    });
-    return Object.freeze({
-      name: definition.name
-    });
-  }
-  /**
-   * Prime the views registry from a build/dev manifest.
-   *
-   * @param views - Manifest map keyed by view directory name.
-   * @param options - Priming options. When `dev` is true, resource CSP
-   * emission appends the serving origin's websocket variant to
-   * `connectDomains` so Vite HMR passes host-enforced CSP. Pass
-   * `projectRoot` in dev so the `public/` route resolves against the user's
-   * project directory rather than the CLI process cwd.
-   * @throws If views are already primed, or after the server has started.
-   *
-   * @internal
-   */
-  [registerViews](views, options) {
-    if (this.#viewsPrimed) {
-      throw new Error(
-        "Cannot prime views: the views registry is already primed on this server instance."
-      );
-    }
-    this.#assertNotStarted("views", "manifest");
-    this.#viewsDevMode = options?.dev === true;
-    if (options?.projectRoot !== void 0) {
-      this.#viewsProjectRoot = options.projectRoot;
-    }
-    for (const [name, entry] of Object.entries(views)) {
-      this.#views.set(name, entry);
-    }
-    this.#viewsPrimed = true;
-  }
-  /**
-   * Prime the views registry — string-keyed alias for {@link registerViews}
-   * used by the CLI when the symbol export cannot be shared across duplicate
-   * module copies (dev module runner with an externalized package).
-   *
-   * @param views - Manifest map keyed by view directory name.
-   * @param options - Priming options forwarded to {@link registerViews}.
-   * @throws If views are already primed, or after the server has started.
-   *
-   * @internal
-   */
-  __primeViews(views, options) {
-    this[registerViews](views, options);
-  }
-  /** Register a static resource readable at `definition.uri`. */
-  resource(definition, callback) {
-    this.#assertNotStarted("resource", definition.name);
-    this.#resources.set(definition.name, { definition, callback });
-    return this;
-  }
-  /**
-   * Register a parameterized resource. Reads matching `uriTemplate` invoke
-   * the callback with the extracted variables.
-   *
-   * The `const` type parameter keeps `uriTemplate` a string literal during
-   * inference (plain generic inference widens object-literal properties to
-   * `string`), which is what lets `InferTemplateParams` type the callback's
-   * `params` from the template's variables.
-   */
-  resourceTemplate(definition, callback) {
-    this.#assertNotStarted("resourceTemplate", definition.name);
-    const complete = definition.complete === void 0 ? void 0 : normalizeCompletions(definition.complete);
-    this.#resourceTemplates.set(definition.name, {
-      definition,
-      ...complete !== void 0 && { complete },
-      callback
-    });
-    return this;
-  }
-  /**
-   * Register a prompt template. Schema fields wrapped with `completable()`
-   * gain autocomplete via `completion/complete`.
-   */
-  prompt(definition, callback) {
-    this.#assertNotStarted("prompt", definition.name);
-    this.#prompts.set(definition.name, {
-      definition,
-      callback
-    });
-    return this;
-  }
-  /**
-   * Web-standard request handler for the whole app (MCP endpoint included) —
-   * usable directly on serverless/edge runtimes or in tests.
-   *
-   * The handler never binds a socket, so no Host/Origin validation applies
-   * by default: DNS rebinding targets locally bound servers, and platform
-   * edges (Vercel, Cloudflare, …) only route hostnames assigned to the
-   * deployment. Set `allowedHosts`/`allowedOrigins` to opt into validation
-   * (additive — localhost-class values stay allowed).
-   *
-   * Pass the same `bus` to multiple server instances when their handlers
-   * replace one another while existing `subscriptions/listen` streams remain
-   * open. The bus is fixed when this instance first mounts.
-   *
-   * @param options - Optional handler wiring.
-   *
-   * @example
-   * ```ts
-   * const handler = server.getHandler();
-   * export default { fetch: handler };
-   * ```
-   */
-  getHandler(options = {}) {
-    const { fetch } = this.#ensureMounted("handler", void 0, options.bus);
-    return toFrameworkHandler(fetch);
-  }
-  /**
-   * Node `(req, res) => void` handler for composing with an existing
-   * `http.Server`. Uses the same internal `toNodeHandler` bridge as
-   * {@link MCPServer.listen}; MCPServer users do not need to import
-   * `mcp-use/node`.
-   *
-   * @example
-   * ```ts
-   * import { createServer } from "node:http";
-   * const httpServer = createServer(await server.getNodeHandler());
-   * httpServer.listen(3000);
-   * ```
-   */
-  async getNodeHandler() {
-    const { fetch } = this.#ensureMounted("handler");
-    const { toNodeHandler } = await import("./node-bridge.js");
-    return toNodeHandler({ fetch });
-  }
-  /**
-   * Register MCP operation middleware that intercepts JSON-RPC dispatch.
-   *
-   * Patterns use an `mcp:` prefix (for example `mcp:tools/call`, `mcp:*`).
-   * Middleware runs in registration order; call `next()` to continue the chain.
-   *
-   * @example
-   * ```ts
-   * server.use("mcp:tools/call", async (ctx, next) => {
-   *   console.log(`Calling tool: ${ctx.params.name}`);
-   *   return next();
-   * });
-   * ```
-   */
-  use(pattern, handler) {
-    this.#assertNotStarted("middleware", pattern);
-    this.#mcpMiddlewares.push({
-      pattern: normalizeMcpMiddlewarePattern(pattern),
-      handler
-    });
-    return this;
-  }
-  /**
-   * Register a read-only MCP observer. Unlike {@link MCPServer.use}, listeners
-   * cannot block, override, or mutate params. Throwing is logged and does not
-   * fail the request.
-   *
-   * Append `:complete` to run after the handler (for example
-   * `mcp:tools/call:complete`).
-   *
-   * @example
-   * ```ts
-   * server.on("mcp:tools/call", (ctx) => {
-   *   metrics.increment("tools.call", { tool: ctx.params.name });
-   * });
-   * ```
-   */
-  on(pattern, handler) {
-    this.#assertNotStarted("event listener", pattern);
-    const { pattern: stripped, phase } = parseMcpPattern(pattern);
-    this.#mcpEventListeners.push({
-      pattern: stripped,
-      phase,
-      handler
-    });
-    return this;
-  }
-  /**
-   * Publish a tools-list change to v2 clients with active subscriptions.
-   *
-   * @example
-   * ```ts
-   * await server.notifyToolsChanged();
-   * ```
-   */
-  async notifyToolsChanged() {
-    await this.#ensureMounted("handler").handler.notify.toolsChanged();
-  }
-  /**
-   * Publish a prompts-list change to v2 clients with active subscriptions.
-   *
-   * @example
-   * ```ts
-   * await server.notifyPromptsChanged();
-   * ```
-   */
-  async notifyPromptsChanged() {
-    await this.#ensureMounted("handler").handler.notify.promptsChanged();
-  }
-  /**
-   * Publish a resources-list change to v2 clients with active subscriptions.
-   *
-   * @example
-   * ```ts
-   * await server.notifyResourcesChanged();
-   * ```
-   */
-  async notifyResourcesChanged() {
-    await this.#ensureMounted("handler").handler.notify.resourcesChanged();
-  }
-  /**
-   * Publish a resource update to subscribed v2 clients.
-   *
-   * @param uri - Resource URI whose representation changed.
-   *
-   * @example
-   * ```ts
-   * await server.notifyResourceUpdated("config://settings");
-   * ```
-   */
-  async notifyResourceUpdated(uri) {
-    await this.#ensureMounted("handler").handler.notify.resourceUpdated(uri);
-  }
-  /**
-   * Serve over HTTP on Node. Pass port `0` for an ephemeral port.
-   *
-   * Binds `config.host` (default `127.0.0.1`). Localhost-class binds get
-   * DNS-rebinding protection automatically: `Host` on every request,
-   * `Origin` only on non-GET/HEAD (sandboxed view iframes send
-   * `Origin: null` on asset GETs). To serve publicly set `host: "0.0.0.0"`;
-   * behind a platform edge that is all that's needed, and `allowedHosts`
-   * restricts direct exposure (additive — localhost-class values stay allowed).
-   *
-   * With OAuth and no explicit resource or `MCP_URL`, a localhost listener
-   * derives its protected-resource URL from the actual bound port. Mounting
-   * therefore waits for the listener callback (especially for port `0`), and
-   * requests accepted before then are queued. Public/wildcard listeners must
-   * configure the resource before calling this method.
-   *
-   * @throws If called on a localhost-class bind after {@link MCPServer.getHandler}
-   * already mounted the app without Host validation.
-   */
-  async listen(port = 3e3) {
-    this.#assertListenOAuthConfiguration();
-    const { createServer } = await import("http");
-    const { toNodeHandler } = await import("./node-bridge.js");
-    const host = this.#config.host ?? "127.0.0.1";
-    return new Promise((resolve, reject) => {
-      let resolveFetch;
-      let rejectFetch;
-      const fetchReady = new Promise(
-        (resolveFetchPromise, rejectFetchPromise) => {
-          resolveFetch = resolveFetchPromise;
-          rejectFetch = rejectFetchPromise;
-        }
-      );
-      void fetchReady.catch(() => void 0);
-      let settled = false;
-      const rejectAndClose = (error) => {
-        if (!settled) {
-          settled = true;
-          reject(error);
-        }
-        rejectFetch?.(error);
-        void new Promise(
-          (closeResolve) => server.close(() => closeResolve())
-        ).catch(() => void 0).finally(() => {
-          if (this.#httpServer === server) {
-            this.#httpServer = void 0;
-          }
-        });
-      };
-      const nodeHandler = toNodeHandler({
-        fetch: async (request) => (await fetchReady)(request)
-      });
-      const server = createServer((req, res) => {
-        void nodeHandler(req, res);
-      });
-      server.once("error", rejectAndClose);
-      server.listen(port, host, () => {
-        try {
-          const address = server.address();
-          const boundPort = typeof address === "object" && address !== null ? address.port : port;
-          const { fetch } = this.#ensureMounted("listen", boundPort);
-          resolveFetch?.(fetch);
-          if (!settled) {
-            settled = true;
-            resolve({
-              port: boundPort,
-              url: `http://localhost:${boundPort}${this.#basePath()}`
-            });
-          }
-        } catch (error) {
-          rejectAndClose(error);
-        }
-      });
-      this.#httpServer = server;
-    });
-  }
-  /**
-   * Abort in-flight MCP exchanges and stop the HTTP listener.
-   *
-   * A closed server is done for good — the underlying MCP handler stays
-   * closed, so `listen()`/`getHandler()` cannot revive it. Create a new
-   * instance to serve again.
-   */
-  async close() {
-    await this.#handler?.close();
-    const httpServer = this.#httpServer;
-    if (httpServer !== void 0) {
-      await new Promise((resolve, reject) => {
-        httpServer.close((err) => err ? reject(err) : resolve());
-      });
-      this.#httpServer = void 0;
-    }
-  }
-  #basePath() {
-    return this.#config.basePath ?? "/mcp";
-  }
-  #resolveOAuthResource(mode, listenPort) {
-    if (this.#config.oauth === void 0) {
-      return void 0;
-    }
-    if (this.#oauthResourceResolved) {
-      return this.#oauthResource;
-    }
-    const host = this.#config.host ?? "127.0.0.1";
-    const localListen = mode === "listen" && listenPort !== void 0 && ["127.0.0.1", "localhost", "::1"].includes(host);
-    if (this.#oauthResourceConfigurationAbsent && localListen) {
-      this.#oauthResource = resolveLocalOAuthResource(
-        `http://localhost:${listenPort}`,
-        this.#basePath()
-      );
-      this.#oauthResourceResolved = true;
-      return this.#oauthResource;
-    }
-    throw new Error(
-      "OAuth requires an explicit resource or MCP_URL when using getHandler() or listening on a non-local host"
-    );
-  }
-  #assertListenOAuthConfiguration() {
-    if (this.#config.oauth === void 0) {
-      return;
-    }
-    const host = this.#config.host ?? "127.0.0.1";
-    if (["127.0.0.1", "localhost", "::1"].includes(host)) {
-      return;
-    }
-    if (!this.#oauthResourceResolved) {
-      throw new Error(
-        "OAuth listen() on a public or wildcard host requires an explicit provider resource or valid MCP_URL."
-      );
-    }
-  }
-  #assertNotStarted(kind, name) {
-    if (this.#handler !== void 0) {
-      throw new Error(
-        `Cannot register ${kind} "${name}" after the server has started: registrations are replayed per request from the registry, so register everything before listen()/getHandler().`
-      );
-    }
-  }
-  /**
-   * Effective Host/Origin allowlists for a mount mode; `undefined` means the
-   * corresponding validation is off.
-   *
-   * Configured lists are additive to the localhost-class allowlists, so local
-   * runs keep working when a deployment hostname is added. With nothing
-   * configured, `listen()` on a localhost-class bind validates against the
-   * localhost lists (the DNS-rebinding threat model), while `getHandler()` —
-   * which never binds — applies no validation. `allowedOrigins` defaults to
-   * mirroring the effective Host allowlist. Origin validation runs only on
-   * non-GET/HEAD requests.
-   */
-  #validationPolicy(mode) {
-    const { host = "127.0.0.1", allowedHosts, allowedOrigins } = this.#config;
-    const localhostBind = ["127.0.0.1", "localhost", "::1"].includes(host);
-    const hosts = allowedHosts !== void 0 ? [.../* @__PURE__ */ new Set([...localhostAllowedHostnames(), ...allowedHosts])] : mode === "listen" && localhostBind ? localhostAllowedHostnames() : void 0;
-    const origins = allowedOrigins !== void 0 ? [.../* @__PURE__ */ new Set([...localhostAllowedOrigins(), ...allowedOrigins])] : hosts;
-    return { hosts, origins };
-  }
-  #ensureMounted(mode, listenPort, bus) {
-    if (this.#fetchHandler === void 0 || this.#handler === void 0) {
-      const { hosts, origins } = this.#validationPolicy(mode);
-      const basePath = this.#basePath();
-      const nestedBasePath = basePath === "/" ? "" : basePath;
-      const middlewares = [
-        jsonBodyMiddleware(),
-        requestLogger(this.#config.logging)
-      ];
-      const corsConfig = this.#config.cors;
-      if (corsConfig !== void 0) {
-        middlewares.unshift(corsFetchMiddleware(corsConfig));
-      }
-      const deferViewCors = isGlobalCorsEnabled(corsConfig);
-      if (hosts !== void 0) {
-        middlewares.unshift(hostValidationMiddleware(hosts));
-        middlewares.push(originValidationMiddleware(origins ?? hosts));
-      } else {
-        if (origins !== void 0) {
-          middlewares.push(originValidationMiddleware(origins));
-        }
-        if (mode === "listen") {
-          console.warn(
-            `[mcp-use] listen() is serving on ${this.#config.host} without Host validation. Behind a platform edge that only routes your own domains this is expected; if this process is reachable directly, set allowedHosts to restrict it.`
-          );
-        }
-      }
-      this.#validateViewBindingsAtMount();
-      const resource = this.#resolveOAuthResource(mode, listenPort);
-      if (resource !== void 0) {
-        const provider = this.#config.oauth;
-        middlewares.push(oauthMetadata(provider, resource));
-      }
-      const { handler, fetch: mcpFetch } = createMcpMount(
-        (ctx) => this.#buildSdkServer(ctx),
-        {
-          path: basePath,
-          ...(this.#config.legacy !== void 0 || bus !== void 0) && {
-            handler: {
-              ...this.#config.legacy !== void 0 && {
-                legacy: this.#config.legacy
-              },
-              ...bus !== void 0 && { bus }
-            }
-          },
-          ...resource !== void 0 && {
-            authInfo: (request) => authInfoFromRequest(request)
-          }
-        }
-      );
-      let protectWithBearer = async (_request, next) => next();
-      if (resource !== void 0) {
-        const provider = this.#config.oauth;
-        const providerOptions = getOAuthProviderOptions(provider);
-        const gate = requireBearerAuth({
-          verifier: wrapOAuthTokenVerifier(provider, resource),
-          resourceMetadataUrl: getOAuthProtectedResourceMetadataUrl(resource),
-          ...providerOptions.requiredScopes !== void 0 && {
-            requiredScopes: providerOptions.requiredScopes
-          }
-        });
-        protectWithBearer = async (request, next) => {
-          const result = await gate(request);
-          if (result instanceof Response) {
-            return result;
-          }
-          const bag = getRequestBag(request);
-          bag.authInfo = result;
-          return next();
-        };
-      }
-      const mcpRouteHandler = (request) => protectWithBearer(request, () => mcpFetch(request));
-      const endpointHandler = async (request) => {
-        if (!isHtmlNavigationRequest(request)) {
-          return mcpRouteHandler(request);
-        }
-        const respond = async () => {
-          const { createLandingPageResponse } = await import("./landing-handler-3VN4BMR2.js");
-          return createLandingPageResponse(
-            request,
-            basePath,
-            this.#config,
-            this.#branding,
-            this.#tools.values(),
-            this.#prompts.values(),
-            this.#resources.values()
-          );
-        };
-        if (resource !== void 0 && this.#config.publicLandingPage !== true) {
-          return protectWithBearer(request, respond);
-        }
-        return respond();
-      };
-      const routes = [];
-      const brandingDevMode = this.#viewsPrimed ? this.#viewsDevMode : process.env["NODE_ENV"] !== "production";
-      const faviconHandler = createFaviconHandler(this.#branding, {
-        dev: brandingDevMode,
-        projectRoot: this.#viewsProjectRoot,
-        deferCors: deferViewCors
-      });
-      if (faviconHandler !== void 0) {
-        routes.push({
-          match: (request) => new URL(request.url).pathname === "/favicon.ico",
-          handler: faviconHandler
-        });
-      }
-      const viewHandler = createViewPublicHandler(basePath, this.#views, {
-        dev: this.#viewsPrimed ? this.#viewsDevMode : brandingDevMode,
-        projectRoot: this.#viewsProjectRoot,
-        enabled: hasLocalBrandingAsset(this.#branding),
-        deferCors: deferViewCors
-      });
-      if (viewHandler !== void 0) {
-        routes.push({
-          match: (request) => request.method === "GET" || request.method === "HEAD" ? new URL(request.url).pathname.startsWith(
-            `${nestedBasePath}/_mcp-use/public/`
-          ) : false,
-          handler: viewHandler
-        });
-      }
-      if (!this.#viewsDevMode) {
-        const viewAssetsHandler = createViewAssetsHandler(
-          basePath,
-          this.#views,
-          { projectRoot: this.#viewsProjectRoot, deferCors: deferViewCors }
-        );
-        if (viewAssetsHandler !== void 0) {
-          routes.push({
-            match: (request) => request.method === "GET" || request.method === "HEAD" ? new URL(request.url).pathname.startsWith(
-              `${nestedBasePath}/_mcp-use/views/`
-            ) : false,
-            handler: viewAssetsHandler
-          });
-        }
-      }
-      const inspectorHandler = createInspectorHandler(this.#config.inspector, {
-        serverName: this.#config.name,
-        basePath,
-        ...faviconHandler !== void 0 && { faviconHref: "/favicon.ico" }
-      });
-      if (inspectorHandler !== void 0) {
-        routes.push({
-          match: (request) => {
-            if (request.method !== "GET" && request.method !== "HEAD") {
-              return false;
-            }
-            const pathname = new URL(request.url).pathname;
-            return matchesInspectorShellPath(pathname, basePath);
-          },
-          handler: inspectorHandler
-        });
-      }
-      routes.push({
-        match: (request) => matchesPath(request, basePath),
-        handler: endpointHandler
-      });
-      const terminal = routeFetch(routes);
-      this.#fetchHandler = composeFetch(terminal, ...middlewares);
-      this.#handler = handler;
-      this.#hostValidated = hosts !== void 0;
-    } else if (bus !== void 0 && this.#handler.bus !== bus) {
-      throw new Error(
-        "Cannot change the MCP event bus after the server has started."
-      );
-    } else if (mode === "listen" && !this.#hostValidated && this.#validationPolicy("listen").hosts !== void 0) {
-      throw new Error(
-        "Cannot listen() on a localhost bind after getHandler(): the app is already mounted without Host validation (getHandler() expects a platform edge in front). Call listen() first, or set allowedHosts."
-      );
-    }
-    return { fetch: this.#fetchHandler, handler: this.#handler };
-  }
-  #validateToolViewBinding(definition) {
-    const view = definition.view;
-    if (view === void 0) {
-      return;
-    }
-    if (definition.outputSchema === void 0) {
-      throw new Error(
-        `Tool "${definition.name}" declares view "${view.name}" but has no outputSchema. View-bound tools require an outputSchema \u2014 the view reads structuredContent typed from it. Use outputSchema: z.object({}) for a view that takes no structured output.`
-      );
-    }
-    const existing = this.#viewBindings.get(view.name);
-    if (existing !== void 0) {
-      throw new Error(
-        `View "${view.name}" is already bound to tool "${existing.toolName}"; tool "${definition.name}" cannot bind the same view. Each view may be bound to one tool.`
-      );
-    }
-    this.#viewBindings.set(view.name, {
-      toolName: definition.name,
-      config: view
-    });
-  }
-  #validateViewBindingsAtMount() {
-    if (this.#viewBindings.size > 0 && !this.#viewsPrimed) {
-      const first = [...this.#tools.values()].find(
-        (entry) => entry.definition.view !== void 0
-      );
-      const viewName = first?.definition.view?.name ?? "unknown";
-      throw new Error(
-        `Tool "${first?.definition.name ?? "unknown"}" is bound to view "${viewName}" but no views were primed. Run \`mcp-use build\` and deploy the built entry, or in dev let the CLI prime views automatically.`
-      );
-    }
-    for (const entry of this.#tools.values()) {
-      const viewName = entry.definition.view?.name;
-      if (viewName !== void 0 && !this.#views.has(viewName)) {
-        throw new Error(
-          `Tool "${entry.definition.name}" is bound to view "${viewName}" which is not in the primed views registry. Run \`mcp-use build\` and deploy the built entry, or in dev let the CLI prime views automatically.`
-        );
-      }
-    }
-    for (const viewName of this.#views.keys()) {
-      if (!this.#viewBindings.has(viewName)) {
-        console.warn(
-          `[mcp-use] View "${viewName}" is registered but no tool binds it.`
-        );
-      }
-    }
-  }
-  /** Build a fresh SDK server from the registry (runs once per request). */
-  #buildSdkServer(ctx) {
-    const { name, version, title, description, instructions } = this.#config;
-    const authInfo = ctx.authInfo;
-    const server = new SdkMcpServer(
-      {
-        name,
-        version,
-        ...title !== void 0 && { title },
-        ...description !== void 0 && { description },
-        ...this.#branding.websiteUrl !== void 0 && {
-          websiteUrl: this.#branding.websiteUrl
-        },
-        ...this.#branding.icons !== void 0 && {
-          icons: resolveImplementationIcons(
-            this.#branding.icons,
-            ctx.requestInfo,
-            this.#basePath()
-          )
-        }
-      },
-      {
-        capabilities: {
-          tools: { listChanged: true },
-          prompts: { listChanged: true },
-          resources: { listChanged: true, subscribe: true }
-        },
-        ...instructions !== void 0 && { instructions },
-        ...authInfo !== void 0 && { authInfo },
-        ...this.#config.requestState !== void 0 && {
-          requestState: this.#config.requestState
-        }
-      }
-    );
-    const request = ctx.requestInfo;
-    const viewMetaOptions = request !== void 0 ? { request, hmrWs: this.#viewsDevMode } : { hmrWs: this.#viewsDevMode };
-    const basePath = this.#basePath();
-    for (const entry of this.#tools.values()) {
-      this.#registerTool(server, entry);
-    }
-    for (const entry of this.#resources.values()) {
-      this.#registerResource(server, entry);
-    }
-    for (const entry of this.#resourceTemplates.values()) {
-      this.#registerResourceTemplate(server, entry);
-    }
-    for (const entry of this.#prompts.values()) {
-      this.#registerPrompt(server, entry);
-    }
-    for (const [viewName, viewEntry] of this.#views.entries()) {
-      this.#registerViewResource(
-        server,
-        viewName,
-        viewEntry,
-        viewMetaOptions,
-        basePath
-      );
-    }
-    this.#wrapListHandlers(server);
-    return server;
-  }
-  #createMiddlewareContext(method, params, ctx) {
-    return {
-      method,
-      params,
-      ...ctx.http?.authInfo !== void 0 && { auth: ctx.http.authInfo },
-      state: /* @__PURE__ */ new Map()
-    };
-  }
-  #runMcpHook(method, ctx, innerFn) {
-    return runMcpOperation(
-      this.#mcpMiddlewares,
-      this.#mcpEventListeners,
-      method,
-      ctx,
-      innerFn
-    );
-  }
-  /**
-   * Wrap native SDK list handlers with the MCP middleware chain.
-   *
-   * ponytail: uses SDK-private `_requestHandlers`; pin compile-time test.
-   *
-   * @internal
-   */
-  #wrapListHandlers(server) {
-    const handlers = server.server._requestHandlers;
-    if (handlers === void 0) {
-      return;
-    }
-    const wrapListMethod = (method, resultKey) => {
-      const original = handlers.get(method);
-      if (original === void 0) {
-        return;
-      }
-      if (original.__mcpListWrapped) {
-        return;
-      }
-      const wrapped = async (request, extra) => {
-        const authInfo = extra?.http?.authInfo;
-        const mwCtx = {
-          method,
-          params: {},
-          ...authInfo !== void 0 && { auth: authInfo },
-          state: /* @__PURE__ */ new Map()
-        };
-        const innerFn = async () => {
-          const result = await original(request, extra);
-          return result[resultKey] ?? result;
-        };
-        const filtered = await this.#runMcpHook(method, mwCtx, innerFn);
-        if (Array.isArray(filtered)) {
-          return { [resultKey]: filtered };
-        }
-        return filtered;
-      };
-      wrapped.__mcpListWrapped = true;
-      handlers.set(method, wrapped);
-    };
-    wrapListMethod("tools/list", "tools");
-    wrapListMethod("resources/list", "resources");
-    wrapListMethod("prompts/list", "prompts");
-  }
-  #registerTool(server, { definition, callback }) {
-    const view = definition.view;
-    const toolMeta = buildToolUiMeta(
-      view?.name,
-      definition.visibility,
-      definition._meta
-    );
-    const config = {
-      ...definition.title !== void 0 && { title: definition.title },
-      ...definition.description !== void 0 && {
-        description: definition.description
-      },
-      ...definition.annotations !== void 0 && {
-        annotations: definition.annotations
-      },
-      ...definition.outputSchema !== void 0 && {
-        outputSchema: definition.outputSchema
-      },
-      ...toolMeta !== void 0 && { _meta: toolMeta }
-    };
-    const wireResultMeta = view !== void 0 ? buildToolResultUiMeta(view.name) : void 0;
-    const inputSchema = resolveToolInputSchema(definition);
-    const invokeTool = async (args, ctx) => {
-      const mwCtx = this.#createMiddlewareContext(
-        "tools/call",
-        { name: definition.name, arguments: args },
-        ctx
-      );
-      const innerFn = async () => {
-        const effectiveArgs = mwCtx.params.arguments ?? {};
-        const result = await callback(
-          effectiveArgs,
-          this.#toRequestContext(ctx)
-        );
-        if (isInputRequiredResult(result) || wireResultMeta === void 0 || result.isError === true) {
-          return result;
-        }
-        return {
-          ...result,
-          _meta: { ...result._meta, ...wireResultMeta }
-        };
-      };
-      return await this.#runMcpHook("tools/call", mwCtx, innerFn);
-    };
-    if (inputSchema !== void 0) {
-      server.registerTool(
-        definition.name,
-        { ...config, inputSchema },
-        async (args, ctx) => invokeTool(args, ctx)
-      );
-    } else {
-      server.registerTool(
-        definition.name,
-        config,
-        async (ctx) => invokeTool({}, ctx)
-      );
-    }
-  }
-  #registerViewResource(server, viewName, entry, metaOptions, basePath) {
-    const uri = viewResourceUri(viewName);
-    const authorFacts = this.#viewResourceFacts(
-      this.#viewBindings.get(viewName)?.config
-    );
-    const resourceConfig = viewResourceConfig(
-      viewName,
-      entry,
-      authorFacts,
-      metaOptions
-    );
-    server.registerResource(
-      viewName,
-      uri,
-      resourceConfig,
-      async (readUri, ctx) => {
-        const req = ctx.http?.req;
-        const readOptions = req !== void 0 ? {
-          request: req,
-          ...metaOptions.hmrWs === true ? { hmrWs: true } : {}
-        } : metaOptions.hmrWs === true ? { hmrWs: true } : {};
-        const assetsBase = req !== void 0 ? resolveAssetsBase(req) : metaOptions.request !== void 0 ? resolveAssetsBase(metaOptions.request) : "";
-        const html = synthesizeViewDocument(
-          entry,
-          assetsBase,
-          basePath,
-          viewName
-        );
-        return {
-          contents: [
-            {
-              uri: readUri.href,
-              mimeType: resourceConfig.mimeType,
-              text: html,
-              _meta: buildResourceUiMeta(authorFacts, readOptions)
-            }
-          ]
-        };
-      }
-    );
-  }
-  #registerResource(server, { definition, callback }) {
-    server.registerResource(
-      definition.name,
-      definition.uri,
-      {
-        ...definition.title !== void 0 && { title: definition.title },
-        ...definition.description !== void 0 && {
-          description: definition.description
-        },
-        ...definition.mimeType !== void 0 && {
-          mimeType: definition.mimeType
-        },
-        ...definition.annotations !== void 0 && {
-          annotations: definition.annotations
-        },
-        ...definition._meta !== void 0 && {
-          _meta: { ...definition._meta }
-        }
-      },
-      async (uri, ctx) => {
-        const mwCtx = this.#createMiddlewareContext(
-          "resources/read",
-          { uri: uri.href },
-          ctx
-        );
-        const innerFn = async () => callback(uri, this.#toRequestContext(ctx));
-        return await this.#runMcpHook(
-          "resources/read",
-          mwCtx,
-          innerFn
-        );
-      }
-    );
-  }
-  #registerResourceTemplate(server, { definition, callback, complete }) {
-    const template = new ResourceTemplate(definition.uriTemplate, {
-      list: void 0,
-      ...complete !== void 0 && { complete }
-    });
-    server.registerResource(
-      definition.name,
-      template,
-      {
-        ...definition.title !== void 0 && { title: definition.title },
-        ...definition.description !== void 0 && {
-          description: definition.description
-        },
-        ...definition.mimeType !== void 0 && {
-          mimeType: definition.mimeType
-        },
-        ...definition.annotations !== void 0 && {
-          annotations: definition.annotations
-        },
-        ...definition._meta !== void 0 && {
-          _meta: { ...definition._meta }
-        }
-      },
-      async (uri, variables, ctx) => {
-        const mwCtx = this.#createMiddlewareContext(
-          "resources/read",
-          { uri: uri.href },
-          ctx
-        );
-        const innerFn = async () => callback(
-          uri,
-          variables,
-          this.#toRequestContext(ctx)
-        );
-        return await this.#runMcpHook(
-          "resources/read",
-          mwCtx,
-          innerFn
-        );
-      }
-    );
-  }
-  #viewResourceFacts(viewConfig) {
-    if (viewConfig === void 0) {
-      return void 0;
-    }
-    return {
-      ...viewConfig.description !== void 0 && {
-        description: viewConfig.description
-      },
-      ...viewConfig.csp !== void 0 && { csp: viewConfig.csp },
-      ...viewConfig.permissions !== void 0 && {
-        permissions: viewConfig.permissions
-      },
-      ...viewConfig.domain !== void 0 && { domain: viewConfig.domain },
-      ...viewConfig.prefersBorder !== void 0 && {
-        prefersBorder: viewConfig.prefersBorder
-      }
-    };
-  }
-  #registerPrompt(server, { definition, callback }) {
-    const config = {
-      ...definition.title !== void 0 && { title: definition.title },
-      ...definition.description !== void 0 && {
-        description: definition.description
-      }
-    };
-    const invokePrompt = async (args, ctx) => {
-      const mwCtx = this.#createMiddlewareContext(
-        "prompts/get",
-        { name: definition.name, arguments: args },
-        ctx
-      );
-      const innerFn = async () => {
-        const effectiveArgs = mwCtx.params.arguments ?? {};
-        return callback(effectiveArgs, this.#toRequestContext(ctx));
-      };
-      return await this.#runMcpHook("prompts/get", mwCtx, innerFn);
-    };
-    if (definition.schema !== void 0) {
-      server.registerPrompt(
-        definition.name,
-        { ...config, argsSchema: definition.schema },
-        async (args, ctx) => invokePrompt(args, ctx)
-      );
-    } else {
-      const handler = async (ctx) => invokePrompt({}, ctx);
-      server.registerPrompt(
-        definition.name,
-        config,
-        handler
-      );
-    }
-  }
-  #toRequestContext(ctx) {
-    if (this.#config.oauth === void 0) {
-      return toRequestContext(ctx);
-    }
-    return toAuthenticatedRequestContext(ctx);
-  }
-};
-
-// src/index.ts
-import {
-  acceptedContent,
-  createRequestStateCodec,
-  inputRequired as inputRequired2,
-  inputResponse as inputResponse2,
-  isInputRequiredResult as isInputRequiredResult2
-} from "@modelcontextprotocol/server";
-export {
-  MCPServer,
-  acceptedContent,
-  completable,
-  composeFetch,
-  composeMiddleware,
-  createMcpMount,
-  createRequestStateCodec,
-  getRequestBag,
-  hostValidationMiddleware,
-  inputRequired2 as inputRequired,
-  inputResponse2 as inputResponse,
-  isInputRequiredResult2 as isInputRequiredResult,
-  jsonBodyMiddleware,
-  matchesPath,
-  matchesPathPrefix,
-  matchesPattern,
-  originValidationMiddleware,
-  pathnameOf,
-  registerViews,
-  requestLogger,
-  routeFetch,
-  toFrameworkHandler
-};
-//# sourceMappingURL=index.js.map
+import{resolvePublicFilePath,servePublicFile}from"./chunk-ZMU5USAZ.js";import{hasExplicitAssetsBase,originFromAssetsBase,resolveAssetsBase,resolveServerOrigin}from"./chunk-PSKSL567.js";import{registerOpenAPITools}from"./chunk-Y26DNVWA.js";import{completable,normalizeCompletions}from"./chunk-OJF6B5EU.js";import{isUsageDisabled,recordUsage}from"./chunk-ZXGOR5YI.js";import{inheritBufferedResponse,toNodeHandler,trackBufferedResponse}from"./chunk-XYHHP43G.js";import{authInfoFromRequest,composeFetch,getOAuthProtectedResourceMetadataUrl,getRequestBag,hostValidationMiddleware,isHtmlNavigationRequest,jsonBodyMiddleware,matchesPath,matchesPathPrefix,oauthMetadata,originValidationMiddleware,pathUnderBase,pathnameOf,requireBearerAuth}from"./chunk-MIZQEWZS.js";import{getOAuthProviderOptions,resolveConfiguredOAuthResource,resolveLocalOAuthResource,wrapOAuthTokenVerifier}from"./chunk-IS7FKXFR.js";import{localhostAllowedHostnames,localhostAllowedOrigins,McpServer as SdkMcpServer,ResourceTemplate,CLIENT_CAPABILITIES_META_KEY as CLIENT_CAPABILITIES_META_KEY3,CLIENT_INFO_META_KEY as CLIENT_INFO_META_KEY3,PROTOCOL_VERSION_META_KEY,isJSONRPCRequest as isJSONRPCRequest2,isInputRequiredResult as isInputRequiredResult2}from"@modelcontextprotocol/server";import{createServer as createNodeHttpServer}from"#mcp-use-node-http";import{Hono}from"hono";var FAVICON_CACHE_CONTROL="public, max-age=31536000, immutable",FAVICON_REDIRECT_CACHE_CONTROL="public, max-age=300";function protocolOf(value){return/^([a-z][a-z\d+.-]*):/i.exec(value)?.[1]?.toLowerCase()}function publicAssetPath(basePath,source){return`${basePath==="/"?"":basePath}/_mcp-use/public/${source.split("/").map(segment=>encodeURIComponent(segment)).join("/")}`}function isLocalPublicSource(source){return protocolOf(source)===void 0}function selectFaviconFromIcons(icons){return icons[0]}function assertLocalPublicSource(source,field){if(source.startsWith("/")||source.includes("\\")||source.includes("?")||source.includes("#")||source.split("/").some(segment=>segment===""||segment===".."))throw new TypeError(`${field} must be an http(s) URL, image data URL, or safe path relative to public/`)}function parseDataImage(source,field){let comma=source.indexOf(",");if(comma<0)throw new TypeError(`${field} must be a valid image data URL`);let metadata=source.slice(5,comma),payload=source.slice(comma+1),parts=metadata.split(";"),mimeType=parts[0]?.toLowerCase()??"";if(!mimeType.startsWith("image/"))throw new TypeError(`${field} data URL must use an image MIME type`);try{if(parts.includes("base64")){let binary2=atob(payload);return{mimeType,bytes:Uint8Array.from(binary2,character=>character.charCodeAt(0))}}return{mimeType,bytes:new TextEncoder().encode(decodeURIComponent(payload))}}catch{throw new TypeError(`${field} must be a valid image data URL`)}}function assertBrandingSource(source,field){if(typeof source!="string"||source.length===0)throw new TypeError(`${field} must be a non-empty string`);let protocol=protocolOf(source);if(protocol===void 0)return assertLocalPublicSource(source,field),source;if(protocol==="data")return parseDataImage(source,field),source;if(protocol!=="http"&&protocol!=="https")throw new TypeError(`${field} must be an http(s) URL, image data URL, or safe path relative to public/`);try{new URL(source)}catch{throw new TypeError(`${field} must be a valid absolute http(s) URL`)}return source}function normalizeServerBranding(config){let websiteUrl;if(config.websiteUrl!==void 0){if(typeof config.websiteUrl!="string"||config.websiteUrl.length===0)throw new TypeError("websiteUrl must be a non-empty absolute http(s) URL");let parsed;try{parsed=new URL(config.websiteUrl)}catch{throw new TypeError("websiteUrl must be a non-empty absolute http(s) URL")}if(parsed.protocol!=="http:"&&parsed.protocol!=="https:")throw new TypeError("websiteUrl must be a non-empty absolute http(s) URL");websiteUrl=config.websiteUrl}let icons;if(config.icons!==void 0){if(!Array.isArray(config.icons))throw new TypeError("icons must be an array of MCP Icon objects");icons=Object.freeze(config.icons.map((value,index)=>{if(typeof value!="object"||value===null)throw new TypeError(`icons[${index}] must be an MCP Icon object`);let icon=value,src=assertBrandingSource(icon.src,`icons[${index}].src`),mimeType=icon.mimeType;if(mimeType!==void 0&&(typeof mimeType!="string"||!mimeType.toLowerCase().startsWith("image/")))throw new TypeError(`icons[${index}].mimeType must be an image MIME type when provided`);let sizes=icon.sizes;if(sizes!==void 0&&(!Array.isArray(sizes)||sizes.some(size=>typeof size!="string"||size.length===0)))throw new TypeError(`icons[${index}].sizes must be an array of non-empty strings when provided`);let normalizedSizes=sizes===void 0?void 0:sizes.map(size=>size),theme=icon.theme;if(theme!==void 0&&theme!=="light"&&theme!=="dark")throw new TypeError(`icons[${index}].theme must be "light" or "dark" when provided`);return Object.freeze({src,...mimeType!==void 0&&{mimeType},...normalizedSizes!==void 0&&{sizes:Object.freeze(normalizedSizes)},...theme!==void 0&&{theme}})}))}let explicitFavicon=config.favicon===void 0?void 0:assertBrandingSource(config.favicon,"favicon"),inferred=explicitFavicon===void 0?selectFaviconFromIcons(icons??[]):void 0,favicon=explicitFavicon??inferred?.src,faviconMimeType=inferred?.mimeType??icons?.find(icon=>icon.src===explicitFavicon)?.mimeType;return Object.freeze({...favicon!==void 0&&{favicon},...faviconMimeType!==void 0&&{faviconMimeType},...icons!==void 0&&{icons},...websiteUrl!==void 0&&{websiteUrl}})}function resolveImplementationIcons(icons,request,basePath){if(icons!==void 0)return icons.map(icon=>({...icon,src:request!==void 0&&isLocalPublicSource(icon.src)?`${resolveAssetsBase(request)}${publicAssetPath(basePath,icon.src)}`:icon.src,...icon.sizes!==void 0&&{sizes:[...icon.sizes]}}))}function hasLocalBrandingAsset(branding){return branding.favicon!==void 0&&isLocalPublicSource(branding.favicon)||branding.icons?.some(icon=>isLocalPublicSource(icon.src))===!0}function createFaviconHandler(branding,options){let source=branding.favicon;if(source!==void 0)return async request=>{if(request.method!=="GET"&&request.method!=="HEAD")return new Response("Method Not Allowed",{status:405,headers:{Allow:"GET, HEAD"}});if(new URL(request.url).pathname!=="/favicon.ico")return new Response("Not Found",{status:404});let protocol=protocolOf(source);if(protocol==="http"||protocol==="https")return new Response(null,{status:307,headers:{Location:source,"Cache-Control":FAVICON_REDIRECT_CACHE_CONTROL}});if(protocol==="data"){let data=parseDataImage(source,"favicon");return new Response(request.method==="HEAD"?null:data.bytes.buffer,{status:200,headers:{"Content-Type":branding.faviconMimeType??data.mimeType,"Cache-Control":FAVICON_CACHE_CONTROL,"X-Content-Type-Options":"nosniff"}})}let{join}=await import("path"),publicRoot=options.dev?join(options.projectRoot,"public"):join(options.projectRoot,".mcp-use/build/views/public"),diskPath=await resolvePublicFilePath(publicRoot,source);if(diskPath===null)return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});let response=await servePublicFile(diskPath,{...options.deferCors===!0&&{deferCors:!0},...request.method==="HEAD"&&{head:!0}});return response.headers.set("Cache-Control",FAVICON_CACHE_CONTROL),response.headers.set("X-Content-Type-Options","nosniff"),branding.faviconMimeType!==void 0&&response.headers.set("Content-Type",branding.faviconMimeType),response}}function assertServerConfig(config){if(config.basePath!==void 0){if(typeof config.basePath!="string")throw new TypeError("basePath must be an absolute URL pathname without empty segments, trailing slash, query, fragment, or whitespace");let{basePath}=config;if(!basePath.startsWith("/")||basePath.includes("?")||basePath.includes("#")||/\s/.test(basePath)||basePath.includes("//")||basePath.length>1&&basePath.endsWith("/"))throw new TypeError("basePath must be an absolute URL pathname without empty segments, trailing slash, query, fragment, or whitespace")}if(config.port!==void 0&&(typeof config.port!="number"||!Number.isInteger(config.port)||config.port<0||config.port>65535))throw new TypeError("port must be an integer between 0 and 65535")}var DEFAULT_LISTEN_HOST="127.0.0.1";function resolveListenHost(explicitHost,configuredHost,env=process.env){if(explicitHost!==void 0)return explicitHost;let envHost=env.HOST?.trim();return envHost!==void 0&&envHost!==""?envHost:configuredHost??DEFAULT_LISTEN_HOST}function resolveListenPort(explicitPort,configuredPort,env=process.env){if(explicitPort!==void 0)return explicitPort;let envPort=parsePort(env.PORT);return envPort!==void 0?envPort:configuredPort??3e3}function parsePort(value){if(value===void 0||value.trim()==="")return;let port=Number(value);return Number.isInteger(port)&&port>=0&&port<=65535?port:void 0}import{CLIENT_CAPABILITIES_META_KEY as CLIENT_CAPABILITIES_META_KEY2,CLIENT_INFO_META_KEY}from"@modelcontextprotocol/server";import{HonoRequest}from"hono/request";import{CLIENT_CAPABILITIES_META_KEY}from"@modelcontextprotocol/server";var UI_EXTENSION_ID="io.modelcontextprotocol/ui",UI_MIME_TYPE="text/html;profile=mcp-app",UI_RESOURCE_URI_PREFIX="ui://views/";var UI_RESOURCE_URI_META_KEY="ui/resourceUri";function viewResourceUri(viewName){return`${UI_RESOURCE_URI_PREFIX}${viewName}.html`}var clientCapabilitiesByRequest=new WeakMap;function stashClientCapabilities(request,capabilities){clientCapabilitiesByRequest.set(request,capabilities)}function extractClientCapabilitiesFromBody(body){if(typeof body!="object"||body===null)return;let params=body.params;if(typeof params!="object"||params===null)return;let meta=params._meta;if(typeof meta!="object"||meta===null)return;let capabilities=meta[CLIENT_CAPABILITIES_META_KEY];if(!(typeof capabilities!="object"||capabilities===null))return capabilities}function supportsViews(capabilities){let extensions=capabilities?.extensions;if(extensions===void 0)return!1;let uiExtension=extensions[UI_EXTENSION_ID];if(typeof uiExtension!="object"||uiExtension===null)return!1;let mimeTypes=uiExtension.mimeTypes;return Array.isArray(mimeTypes)?mimeTypes.includes(UI_MIME_TYPE):!1}function requireOAuthAuthInfo(authInfo){if(authInfo===void 0||authInfo.extra===void 0||authInfo.expiresAt===void 0)throw new Error("OAuth callback did not receive mapped AuthInfo.extra")}function stringValue(value){return typeof value=="string"?value:void 0}function coordinateValue(value){return typeof value=="string"||typeof value=="number"&&Number.isFinite(value)?value:void 0}function normalizeUserContext(meta){if(meta===void 0)return;let locale=stringValue(meta["openai/locale"])??stringValue(meta["webplus/i18n"]),userAgent=stringValue(meta["openai/userAgent"]),subject=stringValue(meta["openai/subject"]),conversationId=stringValue(meta["openai/session"]),organizationId=stringValue(meta["openai/organization"]),rawLocation=meta["openai/userLocation"],location;if(typeof rawLocation=="object"&&rawLocation!==null&&!Array.isArray(rawLocation)){let values=rawLocation,normalized={city:stringValue(values.city),region:stringValue(values.region),country:stringValue(values.country),timezone:stringValue(values.timezone),latitude:coordinateValue(values.latitude),longitude:coordinateValue(values.longitude)},entries=Object.entries(normalized).filter(entry=>entry[1]!==void 0);entries.length>0&&(location=Object.fromEntries(entries))}if(!(locale===void 0&&userAgent===void 0&&location===void 0&&subject===void 0&&conversationId===void 0&&organizationId===void 0))return{...locale!==void 0&&{locale},...userAgent!==void 0&&{userAgent},...location!==void 0&&{location},...subject!==void 0&&{subject},...conversationId!==void 0&&{conversationId},...organizationId!==void 0&&{organizationId}}}function toClientContext(ctx){let envelope=ctx.mcpReq.envelope,capabilities={...envelope?.[CLIENT_CAPABILITIES_META_KEY2]??{}},info={...envelope?.[CLIENT_INFO_META_KEY]??{}},user=normalizeUserContext(ctx.mcpReq._meta);return{can(capability){return Object.hasOwn(capabilities,capability)},capabilities(){return{...capabilities}},extension(id){let settings=capabilities.extensions?.[id];return settings===void 0?void 0:{...settings}},info(){return{...info}},user(){return user===void 0?void 0:{...user,...user.location!==void 0&&{location:{...user.location}}}},supportsViews(){return supportsViews(capabilities)}}}function toRequestContext(ctx){let rawRequest=ctx.http?.req,http=rawRequest===void 0?void 0:getRequestBag(rawRequest).honoContext,request=http?.req??(rawRequest===void 0?void 0:new HonoRequest(rawRequest)),additions={signal:ctx.mcpReq.signal,...request!==void 0&&{request},...ctx.mcpReq.inputResponses!==void 0&&{inputResponses:ctx.mcpReq.inputResponses},client:toClientContext(ctx),requestState:()=>ctx.mcpReq.requestState(),async sendNotification(method,params){await ctx.mcpReq.notify({method,...params!==void 0&&{params}})},async reportProgress(progress,total,message){let progressToken=ctx.mcpReq._meta?.progressToken;return progressToken===void 0?!1:(await ctx.mcpReq.notify({method:"notifications/progress",params:{progressToken,progress,...total!==void 0&&{total},...message!==void 0&&{message}}}),!0)},async sendLog(level,data,logger){await ctx.mcpReq.notify({method:"notifications/message",params:{level,data,...logger!==void 0&&{logger}}})}};return http!==void 0?Object.assign(http,additions):{...additions,...request!==void 0&&{req:request}}}function toAuthenticatedRequestContext(ctx){let authInfo=ctx.http?.authInfo;return requireOAuthAuthInfo(authInfo),Object.assign(toRequestContext(ctx),{auth:{user:authInfo.extra.user,payload:authInfo.extra.payload,accessToken:authInfo.token,scopes:[...authInfo.scopes],permissions:[...authInfo.extra.permissions],...authInfo.clientId.length>0&&{clientId:authInfo.clientId},expiresAt:authInfo.expiresAt,...authInfo.resource!==void 0&&{resource:authInfo.resource}}})}function isReadResourceResult(result){return"contents"in result&&Array.isArray(result.contents)}function isGetPromptResult(result){return"messages"in result&&Array.isArray(result.messages)}function toResourceResult(result,uri){if(isReadResourceResult(result))return result;let mime=result._meta&&typeof result._meta=="object"&&typeof result._meta.mimeType=="string"?result._meta.mimeType:void 0,contents=[];for(let block of result.content??[]){let mapped=contentBlockToResourceContents(block,uri,mime);mapped!==void 0&&contents.push(mapped)}return contents.length===0&&result.structuredContent!==void 0&&contents.push({uri,mimeType:"application/json",text:JSON.stringify(result.structuredContent)}),contents.length===0&&contents.push({uri,mimeType:"text/plain",text:""}),{contents}}function contentBlockToResourceContents(block,uri,mimeHint){if(block.type==="text")return{uri,mimeType:mimeHint??"text/plain",text:block.text};if(block.type==="image"||block.type==="audio")return{uri,mimeType:block.mimeType,blob:block.data};if(block.type==="resource")return{...block.resource}}function toPromptResult(result){if(isGetPromptResult(result))return result;let messages=(result.content??[]).map(content=>({role:"user",content}));return messages.length===0&&result.structuredContent!==void 0&&messages.push({role:"user",content:{type:"text",text:JSON.stringify(result.structuredContent)}}),messages.length===0&&messages.push({role:"user",content:{type:"text",text:""}}),{messages}}var DEFAULT_METHODS=["GET","HEAD","POST","OPTIONS"],DEFAULT_ALLOWED_HEADERS=["Content-Type","Authorization","mcp-protocol-version","mcp-method","mcp-name"];function resolveAllowedOrigin(origin,requestOrigin){return origin===void 0?requestOrigin:typeof origin=="function"?origin(requestOrigin):origin==="*"?"*":Array.isArray(origin)?requestOrigin!==null&&origin.includes(requestOrigin)?requestOrigin:null:origin}function corsHeaders(options,request){if(request.headers.has("Access-Control-Allow-Origin"))return;let requestOrigin=request.headers.get("Origin"),allowedOrigin=resolveAllowedOrigin(options.origin,requestOrigin);if(allowedOrigin===null)return;let headers={"Access-Control-Allow-Origin":allowedOrigin,"Access-Control-Allow-Methods":options.methods.join(", "),"Access-Control-Allow-Headers":options.allowedHeaders.join(", ")};return options.credentials&&(headers["Access-Control-Allow-Credentials"]="true"),allowedOrigin!=="*"&&(headers.Vary="Origin"),headers}function mergeCorsHeaders(response,headers){if(response.headers.has("Access-Control-Allow-Origin"))return response;let merged=new Headers(response.headers);return new Headers(headers).forEach((value,key)=>{merged.set(key,value)}),inheritBufferedResponse(response,new Response(response.body,{status:response.status,statusText:response.statusText,headers:merged}))}function corsFetchMiddleware(options){if(!(options.enabled!==!1))return async(_request,next)=>next();let resolved={...options.origin!==void 0&&{origin:options.origin},methods:options.methods??DEFAULT_METHODS,allowedHeaders:options.allowedHeaders??DEFAULT_ALLOWED_HEADERS,credentials:options.credentials??!1};return async(request,next)=>{let headers=corsHeaders(resolved,request);if(headers===void 0)return next();if(request.method==="OPTIONS")return new Response(null,{status:204,headers});let response=await next();return mergeCorsHeaders(response,headers)}}function isGlobalCorsEnabled(cors){return cors!==void 0&&cors.enabled!==!1}import{CallToolResultSchema,GetPromptResultSchema,ListPromptsResultSchema,ListResourcesResultSchema,ListToolsResultSchema,ReadResourceResultSchema}from"@modelcontextprotocol/core";import{isInputRequiredResult}from"@modelcontextprotocol/server";var MCP_MIDDLEWARE_METHODS=["tools/call","tools/list","resources/read","resources/list","prompts/get","prompts/list"];function withMcpMiddlewareParams(request,params){if(typeof request!="object"||request===null||Array.isArray(request))throw new TypeError("[mcp-use] MCP middleware received an invalid downstream request");return{...request,params}}function createMcpMiddlewareEntry(pattern,handler){let normalizedPattern=normalizeMcpMiddlewarePattern(pattern),invoke=handler;if(normalizedPattern!=="*"&&!isMcpMiddlewareMethod(normalizedPattern))throw new TypeError(`Unsupported MCP middleware pattern "${pattern}". Use an exact MCP method or "mcp:*".`);return normalizedPattern==="*"?{pattern:normalizedPattern,handler:async(ctx,next)=>{let downstreamCalled=!1,downstreamResult;if(await invoke(ctx,async()=>{downstreamResult=await next(),downstreamCalled=!0}),!downstreamCalled)throw new Error(`Wildcard MCP middleware "${normalizedPattern}" must call next()`);return downstreamResult}}:{pattern:normalizedPattern,handler:(ctx,next)=>invoke(ctx,next)}}function createMcpEventListenerEntry(pattern,handler){let{pattern:normalizedPattern,phase}=parseMcpPattern(pattern),invoke=handler;return{pattern:normalizedPattern,phase,handler:(ctx,result)=>invoke(ctx,result)}}function matchesPattern(pattern,method){if(pattern==="*")return!0;if(pattern.endsWith("/*")){let prefix=pattern.slice(0,-1);return method.startsWith(prefix)}return pattern===method}function isMcpMiddlewareMethod(value){return MCP_MIDDLEWARE_METHODS.some(method=>method===value)}function composeMiddleware(entries,method,innerFn){let matching=entries.filter(entry=>matchesPattern(entry.pattern,method));return matching.length===0?_ctx=>innerFn():ctx=>{let index=-1,dispatch=i=>i<=index?Promise.reject(new Error("next() called multiple times")):(index=i,i===matching.length?innerFn():matching[i].handler(ctx,()=>dispatch(i+1)));return dispatch(0)}}function freezeMiddlewareContext(ctx){return Object.freeze({method:ctx.method,params:Object.freeze({...ctx.params}),...ctx.request!==void 0&&{request:ctx.request},...ctx.req!==void 0&&{req:ctx.req},...ctx.session!==void 0&&{session:Object.freeze({...ctx.session})},...ctx.auth!==void 0&&{auth:ctx.auth},state:new Map(ctx.state)})}async function runMcpOperation(middlewares,events,method,ctx,innerFn){dispatchMcpEvents(events,method,"before",ctx);let result=await composeMiddleware(middlewares,method,innerFn)(ctx);return assertValidMiddlewareResult(method,result),dispatchMcpEvents(events,method,"complete",ctx,result),result}function assertValidMiddlewareResult(method,result){if((method==="tools/call"||method==="resources/read"||method==="prompts/get")&&isInputRequiredResult(result))return;let validation=(()=>{switch(method){case"tools/call":return assertArrayProperty(method,result,"content"),CallToolResultSchema.safeParse(result);case"tools/list":return assertArrayResult(method,result),ListToolsResultSchema.safeParse({tools:result});case"resources/read":return assertArrayProperty(method,result,"contents"),ReadResourceResultSchema.safeParse(result);case"resources/list":return assertArrayResult(method,result),ListResourcesResultSchema.safeParse({resources:result});case"prompts/get":return assertArrayProperty(method,result,"messages"),GetPromptResultSchema.safeParse(result);case"prompts/list":return assertArrayResult(method,result),ListPromptsResultSchema.safeParse({prompts:result});default:throw new TypeError(`Unsupported MCP middleware method "${method}"`)}})();if(!validation.success)throw new TypeError(`[mcp-use] ${method} middleware returned an invalid result: ${validation.error.message}`)}function assertArrayResult(method,result){if(!Array.isArray(result))throw new TypeError(`[mcp-use] ${method} middleware returned an invalid result: expected an array`)}function assertArrayProperty(method,result,property){if(typeof result!="object"||result===null||!Array.isArray(result[property]))throw new TypeError(`[mcp-use] ${method} middleware returned an invalid result: expected a ${property} array`)}function dispatchMcpEvents(events,method,phase,ctx,result){let frozen=freezeMiddlewareContext(ctx);for(let entry of events)if(!(entry.phase!==phase||!matchesPattern(entry.pattern,method)))try{entry.handler(frozen,result)}catch(error2){console.error(`[mcp-use] MCP event listener for "${entry.pattern}" (${phase}) threw:`,error2)}}function parseMcpPattern(raw){let pattern=raw.startsWith("mcp:")?raw.slice(4):raw;return pattern.endsWith(":complete")?{pattern:pattern.slice(0,-9),phase:"complete"}:{pattern,phase:"before"}}function normalizeMcpMiddlewarePattern(raw){return raw.startsWith("mcp:")?raw.slice(4):raw}import{CLIENT_INFO_META_KEY as CLIENT_INFO_META_KEY2,isJSONRPCRequest}from"@modelcontextprotocol/server";function colorsEnabled(){return typeof process>"u"||process.env?.NO_COLOR!==void 0?!1:process.stdout?.isTTY===!0}function ansi(open,close){return text2=>colorsEnabled()?`\x1B[${open}m${text2}\x1B[${close}m`:text2}var bold=ansi(1,22),dim=ansi(2,22),red=ansi(31,39),green=ansi(32,39),yellow=ansi(33,39),blue=ansi(34,39),magenta=ansi(35,39),cyan=ansi(36,39),gray=ansi(90,39);function resolveLogLevel(configured){let raw=typeof process>"u"?void 0:process.env?.MCP_USE_LOG_LEVEL?.toLowerCase();return raw==="info"||raw==="debug"||raw==="trace"?raw:configured??"info"}function formatClientInfo(info){if(info!==void 0)return typeof info.version=="string"&&info.version!==""?`${info.name}/${info.version}`:info.name}var detailFormatters={initialize:p=>({subject:formatClientInfo(p.clientInfo)}),ping:()=>({}),"server/discover":()=>({}),"completion/complete":p=>({subject:p.ref.type==="ref/prompt"?p.ref.name:p.ref.uri,input:p.argument}),"logging/setLevel":p=>({subject:p.level}),"prompts/get":p=>({subject:p.name,input:p.arguments}),"prompts/list":()=>({}),"resources/list":()=>({}),"resources/templates/list":()=>({}),"resources/read":p=>({subject:p.uri}),"resources/subscribe":p=>({subject:p.uri}),"resources/unsubscribe":p=>({subject:p.uri}),"subscriptions/listen":()=>({}),"tools/call":p=>({subject:p.name,input:p.arguments}),"tools/list":()=>({}),"sampling/createMessage":()=>({}),"elicitation/create":()=>({}),"roots/list":()=>({})};function isKnownMethod(method){return Object.prototype.hasOwnProperty.call(detailFormatters,method)}function formatDetail(message){if(!isKnownMethod(message.method))return{};try{let formatter=detailFormatters[message.method],detail=formatter(message.params);return typeof detail.subject=="string"||detail.subject===void 0?detail:{}}catch{return{}}}var INLINE_JSON_MAX_LENGTH=80;function inlineJson(value){let text2;try{text2=JSON.stringify(value)??String(value)}catch{text2=String(value)}return text2.length>INLINE_JSON_MAX_LENGTH?`${text2.slice(0,INLINE_JSON_MAX_LENGTH)}...`:text2}function formatClientIdentity(message){let meta=message.params?._meta;if(meta===void 0)return;let info=meta[CLIENT_INFO_META_KEY2];if(!(typeof info!="object"||info===null||typeof info.name!="string"))return formatClientInfo(info)}function sanitize(text2){return text2.replace(/[\u0000-\u001F\u007F-\u009F]+/g," ")}function methodStyle(method){return method.startsWith("tools/")?cyan:method.startsWith("resources/")?green:method.startsWith("prompts/")?magenta:method==="initialize"||method==="ping"?gray:blue}var REDACTED_HEADERS=new Set(["authorization","proxy-authorization","cookie","set-cookie","x-api-key"]);function redactHeaders(headers){return Object.fromEntries(Object.entries(headers).map(([name,value])=>[name,REDACTED_HEADERS.has(name.toLowerCase())?"[REDACTED]":value]))}async function extractResponseOutcome(res){if(!res.body)return{errorMessage:null};let text2;try{text2=await res.clone().text()}catch{return{errorMessage:null}}if(!text2)return{errorMessage:null};let isSse=(res.headers.get("content-type")??"").includes("text/event-stream"),payloads=[],tryParse=raw=>{try{payloads.push(JSON.parse(raw))}catch{}};if(isSse){for(let line of text2.split(/\r?\n/))if(line.startsWith("data:")){let data=line.slice(5).trim();data&&tryParse(data)}}else tryParse(text2);let result;for(let payload of payloads){if(payload===null||typeof payload!="object")continue;let message=payload;if(typeof message.error?.message=="string")return{errorMessage:message.error.message};if(message.result?.isError===!0){let textBlock=(Array.isArray(message.result.content)?message.result.content:[]).find(b=>b?.type==="text"&&typeof b.text=="string");return{errorMessage:textBlock?String(textBlock.text):"tool error"}}"result"in message&&(result=message.result)}return{errorMessage:null,result}}function compactToolResult(result){if(result===null||typeof result!="object")return result;let{structuredContent,content}=result;if(structuredContent!==void 0)return structuredContent;if(Array.isArray(content)){let[block]=content;if(content.length===1&&block?.type==="text")return block.text}return content}function formatForDump(value){function truncate(val){return typeof val=="string"&&val.length>100?`${val.slice(0,100)}...`:Array.isArray(val)?val.map(truncate):val!==null&&typeof val=="object"?Object.fromEntries(Object.entries(val).map(([k,v])=>[k,truncate(v)])):val}try{return JSON.stringify(truncate(value),null,2)}catch{return String(value)}}var DUMP_BODY_MAX_LENGTH=1e4;async function printTraceDump(response,requestHeaders,requestBody,readResponseBody){console.log(`
+${cyan("=".repeat(80))}`),console.log(bold(cyan("[TRACE] Request Details"))),console.log(cyan("-".repeat(80))),Object.keys(requestHeaders).length>0&&(console.log(yellow("Request Headers:")),console.log(formatForDump(redactHeaders(requestHeaders)))),requestBody!==void 0&&(console.log(yellow("Request Body:")),console.log(typeof requestBody=="string"?requestBody:formatForDump(requestBody)));let responseHeaders={};if(response.headers.forEach((value,key)=>{responseHeaders[key]=value}),Object.keys(responseHeaders).length>0&&(console.log(yellow("Response Headers:")),console.log(formatForDump(redactHeaders(responseHeaders)))),!readResponseBody)console.log(`${yellow("Response Body:")} (streaming \u2014 not dumped)`);else if(response.body===null)console.log(`${yellow("Response Body:")} (no body)`);else try{let text2=await response.clone().text();if(text2.length===0)console.log(`${yellow("Response Body:")} (empty)`);else{console.log(yellow("Response Body:"));try{console.log(formatForDump(JSON.parse(text2)))}catch{console.log(text2.length>DUMP_BODY_MAX_LENGTH?`${text2.slice(0,DUMP_BODY_MAX_LENGTH)}
+... (truncated, ${text2.length-DUMP_BODY_MAX_LENGTH} more characters)`:text2)}}}catch{console.log(`${yellow("Response Body:")} (unable to read)`)}console.log(`${cyan("=".repeat(80))}
+`)}function styleStatus(status){let text2=String(status);return status>=500?magenta(text2):status>=400?red(text2):status>=300?yellow(text2):green(text2)}function isNoisyRequest(httpMethod,pathname){return httpMethod!=="GET"&&httpMethod!=="HEAD"?!1:pathname.endsWith("/favicon.ico")}function requestLogger(options={}){return options.enabled===!1?(_request,next)=>next():async(request,next)=>{let level=resolveLogLevel(options.level),startedAt=Date.now(),httpMethod=request.method,pathname=new URL(request.url).pathname;if(isNoisyRequest(httpMethod,pathname))return next();let requestHeaders={};level==="trace"&&request.headers.forEach((value,key)=>{requestHeaders[key]=value});let requestBody;if(httpMethod!=="GET"&&httpMethod!=="HEAD"){let parsedBody=getRequestBag(request).parsedBody;if(parsedBody!==void 0)requestBody=parsedBody;else try{requestBody=await request.clone().json()}catch{}}let response=await next(),durationMs=Date.now()-startedAt,timestamp=new Date().toISOString().substring(11,19),mcpRequest=isJSONRPCRequest(requestBody)?requestBody:void 0,isStreamingMethod=mcpRequest?.method==="subscriptions/listen",lines=[[dim(timestamp),bold(httpMethod),pathname,styleStatus(response.status),dim(`in ${durationMs}ms`)].join(" ")];if(mcpRequest!==void 0){let method=sanitize(mcpRequest.method),parts=[`  ${methodStyle(method)(method)}`],detail=formatDetail(mcpRequest);detail.subject!==void 0&&parts.push(bold(sanitize(detail.subject)));let echoPayloads=level!=="info";echoPayloads&&detail.input!==void 0&&parts.push(inlineJson(detail.input));let outcome=isStreamingMethod?{errorMessage:null}:await extractResponseOutcome(response);if(echoPayloads&&mcpRequest.method==="tools/call"&&outcome.errorMessage===null&&outcome.result!==void 0&&parts.push(dim("->"),inlineJson(compactToolResult(outcome.result))),mcpRequest.method!=="initialize"){let client=formatClientIdentity(mcpRequest);client!==void 0&&parts.push(dim(sanitize(client)))}outcome.errorMessage!==null?parts.push(red(`ERROR ${sanitize(outcome.errorMessage)}`)):response.status>=400&&parts.push(red(`ERROR (HTTP ${response.status})`)),lines.push(parts.join(" "))}return console.log(lines.join(`
+`)),level==="trace"&&await printTraceDump(response,requestHeaders,requestBody,!isStreamingMethod),response}}import{createMcpHandler}from"@modelcontextprotocol/server";function createMcpMount(factory,options={}){let{path="/mcp",handler:handlerOptions,authInfo:getAuthInfo}=options,legacyMode=handlerOptions?.legacy??"stateless",handler=createMcpHandler(factory,{legacy:"stateless",...handlerOptions});return{handler,fetch:async request=>{if(!matchesPath(request,path))return new Response("Not Found",{status:404});if(legacyMode==="stateless"){let method=request.method.toUpperCase();if(method==="GET"||method==="DELETE"||method==="HEAD")return new Response(null,{status:204})}let bag=getRequestBag(request),parsedBody=bag.parsedBody;if(parsedBody===void 0)try{parsedBody=await request.clone().json()}catch{}let capabilities=extractClientCapabilitiesFromBody(parsedBody);capabilities!==void 0&&stashClientCapabilities(request,capabilities);let authInfo=getAuthInfo?.(request)??bag.authInfo,response=await handler.fetch(request,{...parsedBody!==void 0&&{parsedBody},...authInfo!==void 0&&{authInfo}});return response.headers.get("content-type")?.toLowerCase().includes("application/json")?"Bun"in globalThis&&response.body!==null?new Response(await response.arrayBuffer(),{status:response.status,statusText:response.statusText,headers:response.headers}):trackBufferedResponse(request,response):response}}}function resolveToolInputSchema(definition){return definition.inputSchema??definition.schema}var registerViews=Symbol("mcp-use/registerViews");function resolveAssetUrl(assetPath,origin){if(!assetPath.startsWith("/"))throw new Error(`View manifest asset path must be origin-absolute (start with "/"); got ${JSON.stringify(assetPath)}`);return`${origin}${assetPath}`}function viewAssetsBasePath(basePath,viewName){return`${pathUnderBase(basePath,`_mcp-use/views/${viewName}`)}/`}function resolveExternalAssetUrl(assetPath,assetsBase,basePath,viewName){return assetPath.startsWith("http://")||assetPath.startsWith("https://")||assetPath.startsWith("data:")?assetPath:assetPath.startsWith("/")?resolveAssetUrl(assetPath,assetsBase):`${assetsBase}${viewAssetsBasePath(basePath,viewName)}${assetPath.replace(/^\/+/,"")}`}function resolvePublicBase(assetsBase,basePath){return`${assetsBase}${pathUnderBase(basePath,"_mcp-use/public")}/`}function escapeInlineScript(code){return code.replaceAll(/<\/script/gi,"<\\/script").replaceAll("<!--","\\x3C!--")}function escapeInlineStyle(css2){return css2.replaceAll(/<\/style/gi,"<\\/style")}function escapeHtml(value){return value.replaceAll("&","&amp;").replaceAll('"',"&quot;").replaceAll("<","&lt;").replaceAll(">","&gt;")}var VIEW_BOOTSTRAP_STYLE=`<style>
+html,body,#root{background:transparent}
+html,body{margin:0}
+#root[data-mcp-use-loading]{display:flex;min-height:100vh;align-items:center;justify-content:center;flex-direction:column;gap:10px;color:rgba(127,127,127,.9)}
+#root[data-mcp-use-loading]::before{width:20px;height:20px;box-sizing:border-box;border:2px solid currentColor;border-right-color:transparent;border-radius:50%;content:"";animation:mcp-use-view-spin .7s linear infinite}
+#root[data-mcp-use-loading]::after{color:rgba(127,127,127,.9);content:"Compiling...";font:500 13px/1.2 ui-sans-serif,system-ui,sans-serif}
+@keyframes mcp-use-view-spin{to{transform:rotate(360deg)}}
+@media (prefers-reduced-motion:reduce){#root[data-mcp-use-loading]::before{animation-duration:1.4s}}
+</style>`;function synthesizeViewDocument(entry,assetsBase,basePath,viewName){let viewConfig={publicBase:resolvePublicBase(assetsBase,basePath)},configScript=`<script>globalThis.__mcpUseViewConfig=${JSON.stringify(viewConfig)};</script>`;if(entry.kind==="inline"){let styleTag=entry.css.length>0?`<style>${escapeInlineStyle(entry.css)}</style>`:"",moduleScript=`<script type="module">${escapeInlineScript(entry.js)}</script>`;return`<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+${configScript}
+${VIEW_BOOTSTRAP_STYLE}
+${styleTag}
+</head>
+<body>
+<div id="root" data-mcp-use-loading></div>
+${moduleScript}
+</body>
+</html>`}if(viewName===void 0)throw new Error("viewName is required when synthesizing an external view document.");let cssLinks=entry.css.map(path=>`<link rel="stylesheet" href="${escapeHtml(resolveExternalAssetUrl(path,assetsBase,basePath,viewName))}">`).join(`
+`),scriptTags=(entry.scripts??[]).map(path=>`<script type="module" src="${escapeHtml(resolveExternalAssetUrl(path,assetsBase,basePath,viewName))}"></script>`).join(`
+`),devImportMap=entry.entry.startsWith("/")&&(entry.scripts??[]).includes("/@vite/client")?`<script type="importmap">${escapeInlineScript(JSON.stringify({imports:{"/":`${assetsBase.replace(/\/+$/,"")}/`}}))}</script>`:"",entryUrl=resolveExternalAssetUrl(entry.entry,assetsBase,basePath,viewName);return`<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+${configScript}
+${devImportMap}
+${VIEW_BOOTSTRAP_STYLE}
+${cssLinks}
+</head>
+<body>
+<div id="root" data-mcp-use-loading></div>
+${scriptTags}
+<script type="module" src="${escapeHtml(entryUrl)}"></script>
+</body>
+</html>`}var CATEGORY_ENV={connectDomains:"CSP_CONNECT_DOMAINS",resourceDomains:"CSP_RESOURCE_DOMAINS",frameDomains:"CSP_FRAME_DOMAINS",baseUriDomains:"CSP_BASE_URI_DOMAINS"};function parseDomainList(raw){return raw===void 0||raw.trim()===""?[]:raw.split(",").map(s=>s.trim()).filter(s=>s.length>0)}function readEnvDomains(name){if(typeof process>"u")return;let raw=process.env[name];if(!(raw===void 0||raw.trim()===""))return parseDomainList(raw)}function readCspUrlsShortcut(){return readEnvDomains("CSP_URLS")??[]}function readEnvDomainsForCategory(category){let perCategory=readEnvDomains(CATEGORY_ENV[category]);return perCategory!==void 0?perCategory:readCspUrlsShortcut()}function mergeDomainLists(...segments){let seen=new Set,out=[];for(let segment of segments)for(let domain of segment)seen.has(domain)||(seen.add(domain),out.push(domain));return out}function toWebSocketOrigin(serverOrigin){return serverOrigin.startsWith("https://")?`wss://${serverOrigin.slice(8)}`:serverOrigin.startsWith("http://")?`ws://${serverOrigin.slice(7)}`:serverOrigin}function buildMergedResourceCsp(authorFacts,options){let author=authorFacts?.csp,mcpConnectAuto=[];options.serverOrigin!==""&&(mcpConnectAuto.push(options.serverOrigin),options.hmrWs===!0&&mcpConnectAuto.push(toWebSocketOrigin(options.serverOrigin)));let mcpResourceAuto=[],resourceOrigin=options.explicitAssetsBase?options.assetsOrigin:options.serverOrigin;resourceOrigin!==""&&mcpResourceAuto.push(resourceOrigin);let connectDomains=mergeDomainLists(author?.connectDomains??[],readEnvDomainsForCategory("connectDomains"),mcpConnectAuto),resourceDomains=mergeDomainLists(author?.resourceDomains??[],readEnvDomainsForCategory("resourceDomains"),mcpResourceAuto),frameDomains=mergeDomainLists(author?.frameDomains??[],readEnvDomainsForCategory("frameDomains")),baseUriDomains=mergeDomainLists(author?.baseUriDomains??[],readEnvDomainsForCategory("baseUriDomains"));return{...author,connectDomains,resourceDomains,frameDomains,baseUriDomains}}var PUBLIC_BUILD_DIR=".mcp-use/build/views/public",PUBLIC_DEV_DIR="public",VIEW_ASSETS_BUILD_ROOT=".mcp-use/build/views";function createViewAssetsHandler(basePath,views,options){if(views.size===0)return;let assetsPrefix=pathUnderBase(basePath,"_mcp-use/views"),projectRoot=options?.projectRoot??process.cwd();return async request=>{if(request.method!=="GET"&&request.method!=="HEAD")return new Response("Method Not Allowed",{status:405});if(!matchesPathPrefix(request,assetsPrefix))return new Response("Not Found",{status:404});let remainder=pathnameOf(request).slice(assetsPrefix.length+1),slash=remainder.indexOf("/");if(slash<=0||slash===remainder.length-1)return new Response("Not Found",{status:404});let viewName=remainder.slice(0,slash),subpath=remainder.slice(slash+1),entry=views.get(viewName);if(entry===void 0||entry.kind!=="external")return new Response("Not Found",{status:404});let[{join},{resolvePublicFilePath:resolvePublicFilePath2,servePublicFile:servePublicFile2}]=await Promise.all([import("path"),import("./public-route-DAQJGS6K.js")]),viewRoot=join(projectRoot,VIEW_ASSETS_BUILD_ROOT,viewName),diskPath=await resolvePublicFilePath2(viewRoot,subpath);return diskPath===null?new Response("Not Found",{status:404}):await servePublicFile2(diskPath,{...options?.deferCors===!0&&{deferCors:!0},...request.method==="HEAD"&&{head:!0}})}}function createViewPublicHandler(basePath,views,options){if(views.size===0&&options?.enabled!==!0)return;let publicPrefix=pathUnderBase(basePath,"_mcp-use/public"),subdir=options?.dev===!0?PUBLIC_DEV_DIR:PUBLIC_BUILD_DIR,projectRoot=options?.projectRoot??process.cwd();return async request=>{if(request.method!=="GET"&&request.method!=="HEAD")return new Response("Method Not Allowed",{status:405});if(!matchesPathPrefix(request,publicPrefix))return new Response("Not Found",{status:404});let encodedSubpath=pathnameOf(request).slice(publicPrefix.length+1),subpath;try{subpath=decodeURIComponent(encodedSubpath)}catch{return new Response("Not Found",{status:404})}if(subpath.length===0)return new Response("Not Found",{status:404});let[{join},{resolvePublicFilePath:resolvePublicFilePath2,servePublicFile:servePublicFile2}]=await Promise.all([import("path"),import("./public-route-DAQJGS6K.js")]),publicRoot=join(projectRoot,subdir),diskPath=await resolvePublicFilePath2(publicRoot,subpath);return diskPath===null?new Response("Not Found",{status:404}):await servePublicFile2(diskPath,{...options?.deferCors===!0&&{deferCors:!0},...request.method==="HEAD"&&{head:!0}})}}function buildToolUiMeta(viewName,visibility,existingMetadata){if(viewName===void 0&&visibility===void 0&&existingMetadata===void 0)return;let meta={...existingMetadata},existingUi=existingMetadata?.["ui"],existingUiIsObject=typeof existingUi=="object"&&existingUi!==null&&!Array.isArray(existingUi),ui=existingUiIsObject?{...existingUi}:{};if(viewName!==void 0){let resourceUri=viewResourceUri(viewName);ui.resourceUri=resourceUri,meta[UI_RESOURCE_URI_META_KEY]=resourceUri}else delete ui.resourceUri,delete meta[UI_RESOURCE_URI_META_KEY];return visibility!==void 0?ui.visibility=[visibility]:delete ui.visibility,(viewName!==void 0||visibility!==void 0||existingUiIsObject)&&(meta["ui"]=ui),meta}function buildToolResultUiMeta(viewName){let resourceUri=viewResourceUri(viewName);return{ui:{resourceUri},[UI_RESOURCE_URI_META_KEY]:resourceUri}}function resolveCspOptions(options){let request=options?.request,serverOrigin=options?.serverOrigin??(request!==void 0?resolveServerOrigin(request):""),assetsBase=options?.assetsBase??(request!==void 0?resolveAssetsBase(request):serverOrigin);return{serverOrigin,assetsOrigin:originFromAssetsBase(assetsBase),explicitAssetsBase:hasExplicitAssetsBase(),...options?.hmrWs===!0?{hmrWs:!0}:{}}}function buildResourceUiMeta(authorFacts,options){let ui={csp:buildMergedResourceCsp(authorFacts,resolveCspOptions(options))};return authorFacts?.permissions!==void 0&&(ui.permissions=authorFacts.permissions),authorFacts?.domain!==void 0&&(ui.domain=authorFacts.domain),authorFacts?.prefersBorder!==void 0&&(ui.prefersBorder=authorFacts.prefersBorder),{ui}}function viewResourceConfig(_viewName,_entry,authorFacts,options){return{mimeType:UI_MIME_TYPE,...authorFacts?.description!==void 0&&{description:authorFacts.description},_meta:buildResourceUiMeta(authorFacts,options)}}function record(value){return typeof value=="object"&&value!==null&&!Array.isArray(value)?value:void 0}function productId(value,fallback){if(typeof value!="string")return fallback;let normalized=value.trim();return normalized.length>0&&normalized.length<=64&&![...normalized].some(character=>{let code=character.charCodeAt(0);return code<32||code===127})?normalized:fallback}function clientUsageFromBody(body){if(!isJSONRPCRequest2(body))return;let params=record(body.params);if(body.method==="initialize"){let info2=record(params?.clientInfo),capabilities2=record(params?.capabilities)??{};return clientUsage(info2,capabilities2,params?.protocolVersion,"legacy")}let meta=record(params?._meta),info=record(meta?.[CLIENT_INFO_META_KEY3]),capabilities=record(meta?.[CLIENT_CAPABILITIES_META_KEY3]);if(!(info===void 0||capabilities===void 0))return clientUsage(info,capabilities,meta?.[PROTOCOL_VERSION_META_KEY],"modern")}function clientUsage(info,capabilities,protocolVersion,era){let typedCapabilities=capabilities;return{client_name:productId(info?.name,"other"),client_version:productId(info?.version,"unknown"),protocol_era:era,protocol_version:productId(protocolVersion,"unknown"),connection_mode:era==="modern"?"stateless_request":"legacy_session",sampling_capability:Object.hasOwn(capabilities,"sampling"),elicitation_capability:Object.hasOwn(capabilities,"elicitation"),roots_capability:Object.hasOwn(capabilities,"roots"),extensions_capability:Object.hasOwn(capabilities,"extensions"),views_capability:supportsViews(typedCapabilities),capability_count:Object.keys(capabilities).length}}function omitRootSchemaDialect(schema){if(typeof schema!="object"||schema===null||Array.isArray(schema)||!("$schema"in schema))return schema;let emittedSchema={...schema};return delete emittedSchema.$schema,emittedSchema}function omitToolSchemaDialects(tools){return tools.map(tool=>({...tool,inputSchema:omitRootSchemaDialect(tool.inputSchema),...tool.outputSchema===void 0?{}:{outputSchema:omitRootSchemaDialect(tool.outputSchema)}}))}function registerFetchMiddleware(app,middleware){app.use("*",async(context,next)=>{let response=await middleware(context.req.raw,async()=>(await next(),context.res));return context.res=response,response})}var MCPServer=class _MCPServer{#config;#branding;#tools=new Map;#resources=new Map;#resourceTemplates=new Map;#prompts=new Map;#views=new Map;#viewBindings=new Map;#viewsPrimed=!1;#viewsDevMode=!1;#viewsProjectRoot=process.cwd();#fetchHandler;#httpApp;#handler;#eventBus;#httpServer;#oauthResource;#oauthResourceResolved=!1;#oauthResourceConfigurationAbsent=!1;#hostValidated=!1;#mcpMiddlewares=[];#mcpEventListeners=[];#usageScope;#openApiTools=new Set;#proxiedTools=new Set;#proxiedResources=new Set;#proxiedPrompts=new Set;#httpMiddlewareCount=0;#proxyServersConfigured=0;#proxyServersConnected=0;#proxyToolsDiscovered=0;#proxyResourcesDiscovered=0;#proxyPromptsDiscovered=0;#proxyOwners=[];#proxyOperations=new Set;#closed=!1;app;get;post;put;patch;delete;all;fetch;static fromOpenAPI(options){let server=new _MCPServer({name:options.name??options.spec.info.title,version:options.version??options.spec.info.version??"1.0.0"});registerOpenAPITools(server,options);for(let name of server.#tools.keys())server.#openApiTools.add(name);return server}constructor(config){if(assertServerConfig(config),this.#config=config,this.#branding=normalizeServerBranding(config),this.app=new Hono,this.app.use("*",async(context,next)=>{getRequestBag(context.req.raw).honoContext=context,await next()}),this.get=this.app.get.bind(this.app),this.post=this.app.post.bind(this.app),this.put=this.app.put.bind(this.app),this.patch=this.app.patch.bind(this.app),this.delete=this.app.delete.bind(this.app),this.all=this.app.all.bind(this.app),this.fetch=async(request,env,executionCtx)=>(this.#ensureMounted("handler"),this.#httpApp.fetch(request,env,executionCtx)),config.oauth!==void 0){let mcpUrl=typeof process>"u"?void 0:process.env.MCP_URL,resource2=resolveConfiguredOAuthResource({provider:config.oauth,basePath:this.#basePath(),...mcpUrl!==void 0&&{mcpUrl}});this.#oauthResource=resource2,this.#oauthResourceResolved=resource2!==void 0,this.#oauthResourceConfigurationAbsent=resource2===void 0}}get basePath(){return this.#basePath()}get host(){return this.#config.host}get port(){return this.#config.port}get branding(){return this.#branding}getHandler(){return this.fetch}tool(definition,callback){return this.#assertNotStarted("tool",definition.name),this.#validateToolViewBinding(definition),this.#openApiTools.delete(definition.name),this.#proxiedTools.delete(definition.name),this.#tools.set(definition.name,{definition,callback}),Object.freeze({name:definition.name})}[registerViews](views,options){if(this.#viewsPrimed)throw new Error("Cannot prime views: the views registry is already primed on this server instance.");this.#assertNotStarted("views","manifest"),this.#viewsDevMode=options?.dev===!0,options?.projectRoot!==void 0&&(this.#viewsProjectRoot=options.projectRoot);for(let[name,entry]of Object.entries(views))this.#views.set(name,entry);this.#viewsPrimed=!0}__primeViews(views,options){this[registerViews](views,options)}resource(definition,callback){this.#assertNotStarted("resource",definition.name);let previous=this.#resources.get(definition.name);return previous!==void 0&&this.#proxiedResources.delete(previous.definition.uri),this.#resources.set(definition.name,{definition,callback}),this}resourceTemplate(definition,callback){this.#assertNotStarted("resourceTemplate",definition.name);let complete=definition.complete===void 0?void 0:normalizeCompletions(definition.complete);return this.#resourceTemplates.set(definition.name,{definition,...complete!==void 0&&{complete},callback}),this}prompt(definition,callback){return this.#assertNotStarted("prompt",definition.name),this.#proxiedPrompts.delete(definition.name),this.#prompts.set(definition.name,{definition,callback}),this}async proxy(input){this.#assertOpen("proxy()");let operation=(async()=>{let{isProxyConnection,mountProxyConnection,mountProxyServers}=await import("./mcp-proxy-NETCUGUD.js");if(isProxyConnection(input)){this.#proxyServersConfigured+=1,await mountProxyConnection(this.#proxyHost(),input);return}this.#proxyServersConfigured+=Object.keys(input).length,await mountProxyServers(this.#proxyHost(),input)})();this.#proxyOperations.add(operation);try{await operation}finally{this.#proxyOperations.delete(operation)}}use(patternOrHandler,...handlers){if(typeof patternOrHandler=="string"&&patternOrHandler.startsWith("mcp:")){this.#assertNotStarted("middleware",patternOrHandler);let handler=handlers[0];return this.#mcpMiddlewares.push(createMcpMiddlewareEntry(patternOrHandler,handler)),this}return this.app.use.call(this.app,patternOrHandler,...handlers),this.#httpMiddlewareCount+=typeof patternOrHandler=="function"?1:handlers.length,this}on(pattern,handler){return this.#assertNotStarted("event listener",pattern),this.#mcpEventListeners.push(createMcpEventListenerEntry(pattern,handler)),this}__setEventBus(bus){this.#assertNotStarted("event bus","shared"),this.#eventBus=bus}__mount(){this.#ensureMounted("handler")}async notifyToolsChanged(){await this.#ensureMounted("handler").handler.notify.toolsChanged()}async notifyPromptsChanged(){await this.#ensureMounted("handler").handler.notify.promptsChanged()}async notifyResourcesChanged(){await this.#ensureMounted("handler").handler.notify.resourcesChanged()}async notifyResourceUpdated(uri){await this.#ensureMounted("handler").handler.notify.resourceUpdated(uri)}async listen(port=void 0,options={}){this.#assertOpen("listen()");let host=resolveListenHost(options.host,this.#config.host),requestedPort=resolveListenPort(port,this.#config.port);return this.#assertListenOAuthConfiguration(host),new Promise((resolve,reject)=>{let resolveFetch,rejectFetch,fetchReady=new Promise((resolveFetchPromise,rejectFetchPromise)=>{resolveFetch=resolveFetchPromise,rejectFetch=rejectFetchPromise});fetchReady.catch(()=>{});let settled=!1,rejectAndClose=error2=>{settled||(settled=!0,reject(error2)),rejectFetch?.(error2),new Promise(closeResolve=>server.close(()=>closeResolve())).catch(()=>{}).finally(()=>{this.#httpServer===server&&(this.#httpServer=void 0)})},nodeHandler=toNodeHandler({fetch:async request=>(await fetchReady)(request)}),server=createNodeHttpServer((req,res)=>{nodeHandler(req,res)});server.once("error",rejectAndClose),server.listen(requestedPort,host,()=>{try{let address=server.address(),boundPort=typeof address=="object"&&address!==null?address.port:requestedPort,{fetch}=this.#ensureMounted("listen",boundPort,host);resolveFetch?.(fetch),settled||(settled=!0,resolve({port:boundPort,url:`http://localhost:${boundPort}${this.#basePath()}`}))}catch(error2){rejectAndClose(error2)}}),this.#httpServer=server})}async close(){this.#closed=!0,await Promise.allSettled([...this.#proxyOperations]);let errors=[],proxyOwners=this.#proxyOwners.splice(0),ownerResults=await Promise.allSettled(proxyOwners.map(owner=>owner.close()));for(let result of ownerResults)result.status==="rejected"&&errors.push(result.reason);try{await this.#handler?.close()}catch(error2){errors.push(error2)}let httpServer=this.#httpServer;if(httpServer!==void 0)try{await new Promise((resolve,reject)=>{httpServer.close(err=>err?reject(err):resolve())}),this.#httpServer=void 0}catch(error2){errors.push(error2)}if(errors.length>0)throw new AggregateError(errors,"Failed to close MCP server cleanly")}#assertOpen(operation){if(this.#closed)throw operation!==void 0?new Error(`Cannot call ${operation} after the server has closed.`):new Error("Cannot use the server after it has closed.")}#basePath(){return this.#config.basePath??"/mcp"}#resolveOAuthResource(mode,listenPort,listenHost){if(this.#config.oauth===void 0)return;if(this.#oauthResourceResolved)return this.#oauthResource;let host=listenHost??this.#config.host??"127.0.0.1",localListen=mode==="listen"&&listenPort!==void 0&&["127.0.0.1","localhost","::1"].includes(host);if(this.#oauthResourceConfigurationAbsent&&localListen)return this.#oauthResource=resolveLocalOAuthResource(`http://localhost:${listenPort}`,this.#basePath()),this.#oauthResourceResolved=!0,this.#oauthResource;throw new Error("OAuth requires an explicit resource or MCP_URL when using server.fetch or listening on a non-local host")}#assertListenOAuthConfiguration(host){if(this.#config.oauth!==void 0&&!["127.0.0.1","localhost","::1"].includes(host)&&!this.#oauthResourceResolved)throw new Error("OAuth listen() on a public or wildcard host requires an explicit provider resource or valid MCP_URL.")}#assertNotStarted(kind,name){if(this.#handler!==void 0)throw new Error(`Cannot register ${kind} "${name}" after the server has started: registrations are replayed per request from the registry, so register everything before listen()/server.fetch.`)}#trackConfigured(){recordUsage("server","configured",{tools_total:this.#tools.size,tools_local:this.#tools.size-this.#openApiTools.size-this.#proxiedTools.size,tools_openapi:this.#openApiTools.size,tools_proxied:this.#proxiedTools.size,resources:this.#resources.size,resource_templates:this.#resourceTemplates.size,prompts:this.#prompts.size,views:this.#views.size,proxy_servers_configured:this.#proxyServersConfigured,proxy_servers_connected:this.#proxyServersConnected,proxy_tools_discovered:this.#proxyToolsDiscovered,proxy_resources_discovered:this.#proxyResourcesDiscovered,proxy_prompts_discovered:this.#proxyPromptsDiscovered,proxy_tools_mounted:this.#proxiedTools.size,proxy_resources_mounted:this.#proxiedResources.size,proxy_prompts_mounted:this.#proxiedPrompts.size,http_middleware:this.#httpMiddlewareCount,mcp_middleware:this.#mcpMiddlewares.length,observers_before:this.#mcpEventListeners.filter(({phase})=>phase==="before").length,observers_complete:this.#mcpEventListeners.filter(({phase})=>phase==="complete").length,oauth_configured:this.#config.oauth!==void 0,cors_configured:this.#config.cors!==void 0,request_state_configured:this.#config.requestState!==void 0,legacy_policy:this.#config.legacy??"stateless"},{onceKey:`${this.#usageScopeId()}:server`,serverRoot:this.#viewsProjectRoot})}#trackClient(body){let client=clientUsageFromBody(body);client!==void 0&&recordUsage("client","observed",{...client},{onceKey:`${this.#usageScopeId()}:client:${JSON.stringify(client)}`,serverRoot:this.#viewsProjectRoot})}#usageScopeId(){return this.#usageScope??=crypto.randomUUID(),this.#usageScope}#proxyHost(){return{isStarted:()=>this.#handler!==void 0,hasTool:name=>this.#tools.has(name),hasResource:name=>this.#resources.has(name),hasPrompt:name=>this.#prompts.has(name),registerTool:(definition,callback)=>{this.#assertNotStarted("tool",definition.name),this.#proxiedTools.add(definition.name),this.#tools.set(definition.name,{definition,callback})},registerResource:(definition,callback)=>{this.#assertNotStarted("resource",definition.name),this.#proxiedResources.add(definition.uri),this.#resources.set(definition.name,{definition,callback})},registerPrompt:(definition,callback)=>{this.#assertNotStarted("prompt",definition.name),this.#proxiedPrompts.add(definition.name),this.#prompts.set(definition.name,{definition,callback})},trackOwner:owner=>{this.#proxyOwners.push(owner)},trackNamespace:({tools,resources,prompts})=>{this.#proxyServersConnected+=1,this.#proxyToolsDiscovered+=tools,this.#proxyResourcesDiscovered+=resources,this.#proxyPromptsDiscovered+=prompts}}}#validationPolicy(mode,listenHost){let{allowedHosts,allowedOrigins}=this.#config,host=listenHost??this.#config.host??"127.0.0.1",localhostBind=["127.0.0.1","localhost","::1"].includes(host),hosts=allowedHosts!==void 0?[...new Set([...localhostAllowedHostnames(),...allowedHosts])]:mode==="listen"&&localhostBind?localhostAllowedHostnames():void 0,origins=allowedOrigins!==void 0?[...new Set([...localhostAllowedOrigins(),...allowedOrigins])]:void 0;return{hosts,origins}}#ensureMounted(mode,listenPort,listenHost){if(this.#assertOpen(),this.#fetchHandler===void 0||this.#handler===void 0){let{hosts,origins}=this.#validationPolicy(mode,listenHost),basePath=this.#basePath(),nestedBasePath=basePath==="/"?"":basePath,httpApp=new Hono,middlewares=[jsonBodyMiddleware(),requestLogger(this.#config.logging)],corsConfig=this.#config.cors;corsConfig!==void 0&&middlewares.unshift(corsFetchMiddleware(corsConfig));let deferViewCors=isGlobalCorsEnabled(corsConfig);hosts!==void 0&&middlewares.unshift(hostValidationMiddleware(hosts)),origins!==void 0&&middlewares.push(originValidationMiddleware(origins)),hosts===void 0&&mode==="listen"&&console.warn(`[mcp-use] listen() is serving on ${listenHost} without Host validation. Behind a platform edge that only routes your own domains this is expected; if this process is reachable directly, set allowedHosts to restrict it.`),this.#validateViewBindingsAtMount();let resource2=this.#resolveOAuthResource(mode,listenPort,listenHost);if(resource2!==void 0){let provider=this.#config.oauth;middlewares.push(oauthMetadata(provider,resource2))}for(let middleware of middlewares)registerFetchMiddleware(httpApp,middleware);let{handler,fetch:mcpFetch}=createMcpMount(ctx=>this.#buildSdkServer(ctx),{path:basePath,...(this.#config.legacy!==void 0||this.#eventBus!==void 0)&&{handler:{...this.#config.legacy!==void 0&&{legacy:this.#config.legacy},...this.#eventBus!==void 0&&{bus:this.#eventBus}}},...resource2!==void 0&&{authInfo:request=>authInfoFromRequest(request)}}),protectWithBearer=async(_request,next)=>next();if(resource2!==void 0){let provider=this.#config.oauth,providerOptions=getOAuthProviderOptions(provider),gate=requireBearerAuth({verifier:wrapOAuthTokenVerifier(provider,resource2),resourceMetadataUrl:getOAuthProtectedResourceMetadataUrl(resource2),...providerOptions.requiredScopes!==void 0&&{requiredScopes:providerOptions.requiredScopes}});protectWithBearer=async(request,next)=>{let result=await gate(request);if(result instanceof Response)return result;let bag=getRequestBag(request);return bag.authInfo=result,next()},httpApp.use("*",async(context,next)=>{if(new URL(context.req.url).pathname!==basePath){await next();return}if(this.#config.publicLandingPage===!0&&isHtmlNavigationRequest(context.req.raw)){await next();return}let response=await protectWithBearer(context.req.raw,async()=>(await next(),context.res));return context.res=response,response})}let mcpRouteHandler=request=>{let body=getRequestBag(request).parsedBody;return isJSONRPCRequest2(body)&&(this.#trackConfigured(),this.#trackClient(body)),mcpFetch(request)},endpointHandler=async request=>isHtmlNavigationRequest(request)?(async()=>{let{createLandingPageResponse}=await import("./landing-handler-TG6LVQBI.js");return createLandingPageResponse(request,basePath,this.#config,this.#branding,this.#tools.values(),this.#prompts.values(),this.#resources.values())})():mcpRouteHandler(request),brandingDevMode=this.#viewsPrimed?this.#viewsDevMode:process.env.NODE_ENV!=="production",faviconHandler=createFaviconHandler(this.#branding,{dev:brandingDevMode,projectRoot:this.#viewsProjectRoot,deferCors:deferViewCors});faviconHandler!==void 0&&this.app.all("/favicon.ico",context=>faviconHandler(context.req.raw));let viewHandler=createViewPublicHandler(basePath,this.#views,{dev:this.#viewsPrimed?this.#viewsDevMode:brandingDevMode,projectRoot:this.#viewsProjectRoot,enabled:hasLocalBrandingAsset(this.#branding),deferCors:deferViewCors});if(viewHandler!==void 0&&this.app.on(["GET","HEAD"],`${nestedBasePath}/_mcp-use/public/*`,context=>viewHandler(context.req.raw)),!this.#viewsDevMode){let viewAssetsHandler=createViewAssetsHandler(basePath,this.#views,{projectRoot:this.#viewsProjectRoot,deferCors:deferViewCors});viewAssetsHandler!==void 0&&this.app.on(["GET","HEAD"],`${nestedBasePath}/_mcp-use/views/*`,context=>viewAssetsHandler(context.req.raw))}this.app.all(basePath,context=>endpointHandler(context.req.raw)),httpApp.route("/",this.app),this.#httpApp=httpApp,this.#fetchHandler=async request=>httpApp.fetch(request),this.#handler=handler,this.#hostValidated=hosts!==void 0}else if(mode==="listen"&&!this.#hostValidated&&this.#validationPolicy("listen",listenHost).hosts!==void 0)throw new Error("Cannot listen() on a localhost bind after server.fetch mounted the app without Host validation (server.fetch expects a platform edge in front). Call listen() first, or set allowedHosts.");return{fetch:this.#fetchHandler,handler:this.#handler}}#validateToolViewBinding(definition){let view=definition.view;if(view===void 0)return;if(definition.outputSchema===void 0)throw new Error(`Tool "${definition.name}" declares view "${view.name}" but has no outputSchema. View-bound tools require an outputSchema \u2014 the view reads structuredContent typed from it. Use outputSchema: z.object({}) for a view that takes no structured output.`);let existing=this.#viewBindings.get(view.name);if(existing!==void 0)throw new Error(`View "${view.name}" is already bound to tool "${existing.toolName}"; tool "${definition.name}" cannot bind the same view. Each view may be bound to one tool.`);this.#viewBindings.set(view.name,{toolName:definition.name,config:view})}#validateViewBindingsAtMount(){if(this.#viewBindings.size>0&&!this.#viewsPrimed){let first=[...this.#tools.values()].find(entry=>entry.definition.view!==void 0),viewName=first?.definition.view?.name??"unknown";throw new Error(`Tool "${first?.definition.name??"unknown"}" is bound to view "${viewName}" but no views were primed. Run \`mcp-use build\` and deploy the built entry, or in dev let the CLI prime views automatically.`)}for(let entry of this.#tools.values()){let viewName=entry.definition.view?.name;if(viewName!==void 0&&!this.#views.has(viewName))throw new Error(`Tool "${entry.definition.name}" is bound to view "${viewName}" which is not in the primed views registry. Run \`mcp-use build\` and deploy the built entry, or in dev let the CLI prime views automatically.`)}for(let viewName of this.#views.keys())this.#viewBindings.has(viewName)||console.warn(`[mcp-use] View "${viewName}" is registered but no tool binds it.`)}#buildSdkServer(ctx){let{name,version,title,description,instructions}=this.#config,authInfo=ctx.authInfo,server=new SdkMcpServer({name,version,...title!==void 0&&{title},...description!==void 0&&{description},...this.#branding.websiteUrl!==void 0&&{websiteUrl:this.#branding.websiteUrl},...this.#branding.icons!==void 0&&{icons:resolveImplementationIcons(this.#branding.icons,ctx.requestInfo,this.#basePath())}},{capabilities:{logging:{},tools:{listChanged:!0},prompts:{listChanged:!0},resources:{listChanged:!0,subscribe:!0}},...instructions!==void 0&&{instructions},...authInfo!==void 0&&{authInfo},...this.#config.requestState!==void 0&&{requestState:this.#config.requestState}}),request=ctx.requestInfo,viewMetaOptions=request!==void 0?{request,hmrWs:this.#viewsDevMode}:{hmrWs:this.#viewsDevMode},basePath=this.#basePath();for(let entry of this.#tools.values())this.#registerTool(server,entry);for(let entry of this.#resources.values())this.#registerResource(server,entry);for(let entry of this.#resourceTemplates.values())this.#registerResourceTemplate(server,entry);for(let entry of this.#prompts.values())this.#registerPrompt(server,entry);for(let[viewName,viewEntry]of this.#views.entries())this.#registerViewResource(server,viewName,viewEntry,viewMetaOptions,basePath);return this.#wrapListHandlers(server),server}#createMiddlewareContext(method,params,ctx){let requestContext=toRequestContext(ctx);return Object.assign(requestContext,{method,params,...ctx.sessionId!==void 0&&{session:{sessionId:ctx.sessionId}},...ctx.http?.authInfo!==void 0&&{auth:ctx.http.authInfo},state:new Map})}#runMcpHook(method,ctx,innerFn){let runOperation=method==="tools/call"&&this.#mcpMiddlewares.length===0&&this.#mcpEventListeners.length===0?innerFn:()=>runMcpOperation(this.#mcpMiddlewares,this.#mcpEventListeners,method,ctx,innerFn);if(isUsageDisabled())return runOperation();let startedAt=performance.now(),matchedMiddleware=this.#mcpMiddlewares.filter(entry=>matchesPattern(entry.pattern,method)).length,matchedObservers=phase=>this.#mcpEventListeners.filter(entry=>entry.phase===phase&&matchesPattern(entry.pattern,method)).length,request=ctx.request?.raw,client=request===void 0?void 0:clientUsageFromBody(getRequestBag(request).parsedBody),capture=(outcome,completedPhase)=>{recordUsage("operation","completed",{method,outcome,duration_ms:Math.max(0,Math.round(performance.now()-startedAt)),primitive_origin:this.#primitiveOrigin(method,ctx.params),matched_middleware:matchedMiddleware,observers_before:matchedObservers("before"),observers_complete:completedPhase?matchedObservers("complete"):0,...client?.protocol_era==="modern"?client:{client_name:"unknown",protocol_era:"legacy"}},{sampleRate:outcome==="success"?.1:1,serverRoot:this.#viewsProjectRoot})};return runOperation().then(result=>{let outcome=isInputRequiredResult2(result)?"input_required":method==="tools/call"&&typeof result=="object"&&result!==null&&"isError"in result&&result.isError===!0?"error":"success";return capture(outcome,!0),result},error2=>{throw capture("error",!1),error2})}#primitiveOrigin(method,params){if(method==="tools/call"){let name=String(params.name);return this.#proxiedTools.has(name)?"proxied":this.#openApiTools.has(name)?"openapi":"local"}return method==="resources/read"?this.#proxiedResources.has(String(params.uri))?"proxied":"local":method==="prompts/get"?this.#proxiedPrompts.has(String(params.name))?"proxied":"local":"mixed"}#wrapListHandlers(server){let handlers=server.server._requestHandlers;if(handlers===void 0)return;let wrapListMethod=(method,resultKey,transform)=>{let original=handlers.get(method);if(original===void 0||original.__mcpListWrapped)return;let wrapped=async(request,extra)=>{let serverContext=extra,params=request.params??{},mwCtx=this.#createMiddlewareContext(method,params,serverContext),originalEnvelope,innerFn=async()=>{let downstreamRequest=withMcpMiddlewareParams(request,mwCtx.params),result=await original(downstreamRequest,extra);if(typeof result!="object"||result===null)throw new TypeError(`[mcp-use] ${method} handler returned a non-object result`);originalEnvelope=result;let items=originalEnvelope[resultKey];if(!Array.isArray(items))throw new TypeError(`[mcp-use] ${method} handler result is missing a ${resultKey} array`);return items},filtered=await this.#runMcpHook(method,mwCtx,innerFn);if(!Array.isArray(filtered))throw new TypeError(`[mcp-use] ${method} middleware must return a ${resultKey} array`);let emitted=transform?.(filtered)??filtered;return{...originalEnvelope,[resultKey]:emitted}};wrapped.__mcpListWrapped=!0,handlers.set(method,wrapped)};wrapListMethod("tools/list","tools",omitToolSchemaDialects),wrapListMethod("resources/list","resources"),wrapListMethod("prompts/list","prompts")}#registerTool(server,{definition,callback}){let view=definition.view,toolMeta=buildToolUiMeta(view?.name,definition.visibility,definition._meta),config={...definition.title!==void 0&&{title:definition.title},...definition.description!==void 0&&{description:definition.description},...definition.annotations!==void 0&&{annotations:definition.annotations},...definition.outputSchema!==void 0&&{outputSchema:definition.outputSchema},...toolMeta!==void 0&&{_meta:toolMeta}},wireResultMeta=view!==void 0?buildToolResultUiMeta(view.name):void 0,inputSchema=resolveToolInputSchema(definition),invokeTool=async(args,ctx)=>{let mwCtx=this.#createMiddlewareContext("tools/call",{name:definition.name,arguments:args,...ctx.mcpReq._meta!==void 0&&{_meta:ctx.mcpReq._meta}},ctx),innerFn=async()=>{let effectiveArgs=mwCtx.params.arguments??{},result=await callback(effectiveArgs,this.#toRequestContext(ctx));return isInputRequiredResult2(result)||wireResultMeta===void 0||result.isError===!0?result:{...result,_meta:{...result._meta,...wireResultMeta}}};return await this.#runMcpHook("tools/call",mwCtx,innerFn)};inputSchema!==void 0?server.registerTool(definition.name,{...config,inputSchema},async(args,ctx)=>invokeTool(args,ctx)):server.registerTool(definition.name,config,async ctx=>invokeTool({},ctx))}#registerViewResource(server,viewName,entry,metaOptions,basePath){let uri=viewResourceUri(viewName),authorFacts=this.#viewResourceFacts(this.#viewBindings.get(viewName)?.config),resourceConfig=viewResourceConfig(viewName,entry,authorFacts,metaOptions);server.registerResource(viewName,uri,resourceConfig,async(readUri,ctx)=>{let req=ctx.http?.req,readOptions=req!==void 0?{request:req,...metaOptions.hmrWs===!0?{hmrWs:!0}:{}}:metaOptions.hmrWs===!0?{hmrWs:!0}:{},assetsBase=req!==void 0?resolveAssetsBase(req):metaOptions.request!==void 0?resolveAssetsBase(metaOptions.request):"",html2=synthesizeViewDocument(entry,assetsBase,basePath,viewName);return{contents:[{uri:readUri.href,mimeType:resourceConfig.mimeType,text:html2,_meta:buildResourceUiMeta(authorFacts,readOptions)}]}})}#registerResource(server,{definition,callback}){server.registerResource(definition.name,definition.uri,{...definition.title!==void 0&&{title:definition.title},...definition.description!==void 0&&{description:definition.description},...definition.mimeType!==void 0&&{mimeType:definition.mimeType},...definition.annotations!==void 0&&{annotations:definition.annotations},...definition._meta!==void 0&&{_meta:{...definition._meta}}},async(uri,ctx)=>{let mwCtx=this.#createMiddlewareContext("resources/read",{uri:uri.href,...ctx.mcpReq._meta!==void 0&&{_meta:ctx.mcpReq._meta}},ctx),innerFn=async()=>toResourceResult(await callback(uri,this.#toRequestContext(ctx)),uri.href);return await this.#runMcpHook("resources/read",mwCtx,innerFn)})}#registerResourceTemplate(server,{definition,callback,complete}){let template=new ResourceTemplate(definition.uriTemplate,{list:void 0,...complete!==void 0&&{complete}});server.registerResource(definition.name,template,{...definition.title!==void 0&&{title:definition.title},...definition.description!==void 0&&{description:definition.description},...definition.mimeType!==void 0&&{mimeType:definition.mimeType},...definition.annotations!==void 0&&{annotations:definition.annotations},...definition._meta!==void 0&&{_meta:{...definition._meta}}},async(uri,variables,ctx)=>{let mwCtx=this.#createMiddlewareContext("resources/read",{uri:uri.href,...ctx.mcpReq._meta!==void 0&&{_meta:ctx.mcpReq._meta}},ctx),innerFn=async()=>toResourceResult(await callback(uri,variables,this.#toRequestContext(ctx)),uri.href);return await this.#runMcpHook("resources/read",mwCtx,innerFn)})}#viewResourceFacts(viewConfig){if(viewConfig!==void 0)return{...viewConfig.description!==void 0&&{description:viewConfig.description},...viewConfig.csp!==void 0&&{csp:viewConfig.csp},...viewConfig.permissions!==void 0&&{permissions:viewConfig.permissions},...viewConfig.domain!==void 0&&{domain:viewConfig.domain},...viewConfig.prefersBorder!==void 0&&{prefersBorder:viewConfig.prefersBorder}}}#registerPrompt(server,{definition,callback}){let config={...definition.title!==void 0&&{title:definition.title},...definition.description!==void 0&&{description:definition.description}},invokePrompt=async(args,ctx)=>{let mwCtx=this.#createMiddlewareContext("prompts/get",{name:definition.name,arguments:args,...ctx.mcpReq._meta!==void 0&&{_meta:ctx.mcpReq._meta}},ctx),innerFn=async()=>{let effectiveArgs=mwCtx.params.arguments??{};return toPromptResult(await callback(effectiveArgs,this.#toRequestContext(ctx)))};return await this.#runMcpHook("prompts/get",mwCtx,innerFn)};if(definition.schema!==void 0)server.registerPrompt(definition.name,{...config,argsSchema:definition.schema},async(args,ctx)=>invokePrompt(args,ctx));else{let handler=async ctx=>invokePrompt({},ctx);server.registerPrompt(definition.name,config,handler)}}#toRequestContext(ctx){return this.#config.oauth===void 0?toRequestContext(ctx):toAuthenticatedRequestContext(ctx)}};import{acceptedContent,createRequestStateCodec,inputRequired,inputResponse,isInputRequiredResult as isInputRequiredResult3}from"@modelcontextprotocol/server";function text(content){return{content:[{type:"text",text:content}],_meta:{mimeType:"text/plain"}}}function markdown(content){return{content:[{type:"text",text:content}],_meta:{mimeType:"text/markdown"}}}function html(content){return{content:[{type:"text",text:content}],_meta:{mimeType:"text/html"}}}function xml(content){return{content:[{type:"text",text:content}],_meta:{mimeType:"text/xml"}}}function css(content){return{content:[{type:"text",text:content}],_meta:{mimeType:"text/css"}}}function javascript(content){return{content:[{type:"text",text:content}],_meta:{mimeType:"text/javascript"}}}function image(data,mimeType="image/png"){return{content:[{type:"image",data,mimeType}],_meta:{mimeType,isImage:!0}}}function audio(data,mimeType="audio/wav"){return{content:[{type:"audio",data,mimeType}],_meta:{mimeType,isAudio:!0}}}function binary(base64Data,mimeType){return{content:[{type:"text",text:base64Data}],_meta:{mimeType,isBinary:!0}}}function resource(uri,mimeTypeOrContent,text2){if(typeof mimeTypeOrContent=="object"&&mimeTypeOrContent!==null&&"content"in mimeTypeOrContent){let contentResult=mimeTypeOrContent,extractedText,extractedMimeType;if(contentResult._meta&&typeof contentResult._meta=="object"){let meta=contentResult._meta;typeof meta.mimeType=="string"&&(extractedMimeType=meta.mimeType)}let first=contentResult.content?.[0];return first?.type==="text"&&"text"in first&&(extractedText=first.text),{content:[{type:"resource",resource:{uri,...extractedMimeType!==void 0&&{mimeType:extractedMimeType},text:extractedText??""}}]}}let mimeType=mimeTypeOrContent;return{content:[{type:"resource",resource:{uri,...mimeType!==void 0&&mimeType!==""&&{mimeType},text:text2??""}}]}}function error(message){return{isError:!0,content:[{type:"text",text:message}]}}function object(data){return Array.isArray(data)?array(data):{content:[{type:"text",text:JSON.stringify(data,null,2)}],structuredContent:data,_meta:{mimeType:"application/json"}}}function array(data){return{content:[{type:"text",text:JSON.stringify(data,null,2)}],structuredContent:data}}function widget(config){let props=config.props??config.data??{},{output,message,metadata}=config,result={content:message?[{type:"text",text:message}]:Array.isArray(output?.content)&&output.content.length>0?output.content:[{type:"text",text:""}]};return metadata!==void 0&&Object.keys(metadata).length>0&&(result._meta=metadata),output?.structuredContent!==void 0?result.structuredContent=output.structuredContent:Object.keys(props).length>0&&(result.structuredContent=props),result}function mix(...results){let withStructured=results.filter(result=>result.structuredContent!==void 0),structuredContent=withStructured.length>0?withStructured.map(result=>result.structuredContent).reduce((acc,value)=>({...acc,...typeof value=="object"&&value!==null?value:{}}),{}):void 0,withMeta=results.filter(result=>result._meta!==void 0),_meta=withMeta.length>0?withMeta.map(result=>result._meta).reduce((acc,value)=>({...acc,...value!==void 0?value:{}}),{}):void 0;return{content:results.flatMap(result=>result.content),...structuredContent!==void 0&&Object.keys(structuredContent).length>0&&{structuredContent},..._meta!==void 0&&Object.keys(_meta).length>0&&{_meta}}}export{MCPServer,acceptedContent,array,audio,binary,completable,composeFetch,composeMiddleware,createMcpEventListenerEntry,createMcpMiddlewareEntry,createMcpMount,createRequestStateCodec,css,error,getRequestBag,hostValidationMiddleware,html,image,inputRequired,inputResponse,isInputRequiredResult3 as isInputRequiredResult,javascript,jsonBodyMiddleware,markdown,matchesPath,matchesPathPrefix,matchesPattern,mix,object,originValidationMiddleware,pathnameOf,registerViews,requestLogger,resource,text,widget,xml};