@assistant-ui/react-mcp 0.1.17 → 0.1.19

package/dist/resources/storage/McpLocalStorage.js.map

@@ -1 +1 @@
-{"version":3,"file":"McpLocalStorage.js","names":["resource","useMemo","OAuthMetadataSchema","OAuthClientInformationFullSchema","OAuthProtectedResourceMetadataSchema","OAuthTokensSchema","normalizeMcpServerUrl","MCPAuthConfig","MCPCustomServerRecord","MCPPersistedAuthState","assertValidServerId","MCPStorage","McpLocalStorageOptions","keyPrefix","storage","Storage","scopeId","resolveStorage","opts","globalThis","localStorage","isRecord","value","Record","Array","isArray","isOptionalString","undefined","isNonEmptyString","trim","length","isOptionalNonEmptyString","isOptionalStringArray","every","item","isOptionalConnectionTimeout","Number","isFinite","isValidServerId","id","isMCPAuthConfig","auth","type","token","scopes","authorizationEndpoint","tokenEndpoint","registrationEndpoint","clientId","clientSecret","isCustomServerRecord","name","url","createdAt","connectionTimeout","normalizeCustomServerRecord","record","normalizeCustomServerRecords","flatMap","normalizeOAuthTokens","result","safeParse","success","data","normalizeClientInformation","isSecureNetworkUrl","URL","protocol","hostname","endsWith","startsWith","isMcpServerUrl","normalizeDiscoveryState","authorizationServerUrl","state","NonNullable","resourceMetadataUrl","metadata","authorizationServerMetadata","resourceMetadata","normalizePersistedAuthState","serverUrl","tokensClientId","codeVerifier","tokens","clientInformation","clientInformationSource","discoveryState","Object","keys","useMcpLocalStorage","t0","$","_c","t1","prefix","t2","customServersKey","t3","authKey","t4","key","fallback","raw","getItem","JSON","parse","T","read","t5","key_0","setItem","stringify","write","t6","key_1","removeItem","remove","t7","t8","t9","records","t10","id_0","t11","id_1","t12","id_2","t13","loadCustomServers","saveCustomServers","loadAuthState","saveAuthState","clearAuthState","McpLocalStorage"],"sources":["../../../src/resources/storage/McpLocalStorage.ts"],"sourcesContent":["import { resource } from \"@assistant-ui/tap\";\nimport { useMemo } from \"react\";\nimport {\n  OAuthMetadataSchema,\n  OAuthClientInformationFullSchema,\n  OAuthProtectedResourceMetadataSchema,\n  OAuthTokensSchema,\n} from \"@modelcontextprotocol/core\";\nimport { normalizeMcpServerUrl } from \"../../utils/serverUrl\";\nimport type { MCPAuthConfig, MCPCustomServerRecord } from \"../../mcp-scope\";\nimport type { MCPPersistedAuthState } from \"../../auth/types\";\nimport { assertValidServerId } from \"../../utils/serverId\";\nimport type { MCPStorage } from \"./types\";\n\nexport type McpLocalStorageOptions = {\n  /** Namespace prefix for keys. Default \"aui-mcp\". */\n  keyPrefix?: string;\n  /** Override the underlying Storage. Defaults to globalThis.localStorage. */\n  storage?: Storage;\n  /**\n   * Stable identity for the backing data, used to key server reconnects.\n   * Required to get reconnect-on-swap behavior when `storage` is overridden;\n   * without it a custom backing store declares no scope, since a prefix\n   * alone cannot distinguish two different stores.\n   */\n  scopeId?: string;\n};\n\nfunction resolveStorage(opts: McpLocalStorageOptions): Storage | null {\n  if (opts.storage) return opts.storage;\n  if (typeof globalThis !== \"undefined\" && \"localStorage\" in globalThis) {\n    try {\n      return (globalThis as { localStorage: Storage }).localStorage;\n    } catch {\n      return null;\n    }\n  }\n  return null;\n}\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nconst isOptionalString = (value: unknown): value is string | undefined =>\n  value === undefined || typeof value === \"string\";\n\nconst isNonEmptyString = (value: unknown): value is string =>\n  typeof value === \"string\" && value.trim().length > 0;\n\nconst isOptionalNonEmptyString = (\n  value: unknown,\n): value is string | undefined =>\n  value === undefined || isNonEmptyString(value);\n\nconst isOptionalStringArray = (value: unknown): value is string[] | undefined =>\n  value === undefined ||\n  (Array.isArray(value) && value.every((item) => typeof item === \"string\"));\n\nconst isOptionalConnectionTimeout = (\n  value: unknown,\n): value is number | undefined =>\n  value === undefined ||\n  (typeof value === \"number\" && Number.isFinite(value) && value >= 0);\n\nconst isValidServerId = (id: string): boolean => {\n  try {\n    assertValidServerId(id);\n    return true;\n  } catch {\n    return false;\n  }\n};\n\nconst isMCPAuthConfig = (auth: unknown): auth is MCPAuthConfig => {\n  if (!isRecord(auth)) return false;\n\n  switch (auth.type) {\n    case \"none\":\n      return true;\n    case \"bearer\":\n      return isOptionalNonEmptyString(auth.token);\n    case \"oauth\":\n      return (\n        isOptionalStringArray(auth.scopes) &&\n        isOptionalString(auth.authorizationEndpoint) &&\n        isOptionalString(auth.tokenEndpoint) &&\n        isOptionalString(auth.registrationEndpoint) &&\n        isOptionalString(auth.clientId) &&\n        isOptionalString(auth.clientSecret)\n      );\n    default:\n      return false;\n  }\n};\n\nconst isCustomServerRecord = (\n  value: unknown,\n): value is MCPCustomServerRecord => {\n  if (!isRecord(value)) return false;\n  if (typeof value.id !== \"string\" || !isValidServerId(value.id)) {\n    return false;\n  }\n  return (\n    isNonEmptyString(value.name) &&\n    isNonEmptyString(value.url) &&\n    Number.isFinite(value.createdAt) &&\n    isMCPAuthConfig(value.auth) &&\n    isOptionalConnectionTimeout(value.connectionTimeout)\n  );\n};\n\nconst normalizeCustomServerRecord = (\n  value: unknown,\n): MCPCustomServerRecord | null => {\n  if (isCustomServerRecord(value)) return value;\n  if (!isRecord(value)) return null;\n\n  const record = { ...value };\n  delete record.connectionTimeout;\n  return isCustomServerRecord(record) ? record : null;\n};\n\nexport const normalizeCustomServerRecords = (\n  value: unknown,\n): MCPCustomServerRecord[] => {\n  if (!Array.isArray(value)) return [];\n  return value.flatMap((item) => {\n    const record = normalizeCustomServerRecord(item);\n    return record === null ? [] : [record];\n  });\n};\n\nconst normalizeOAuthTokens = (\n  value: unknown,\n): MCPPersistedAuthState[\"tokens\"] | undefined => {\n  const result = OAuthTokensSchema.safeParse(value);\n  return result.success ? result.data : undefined;\n};\n\nconst normalizeClientInformation = (\n  value: unknown,\n): MCPPersistedAuthState[\"clientInformation\"] | undefined => {\n  const result = OAuthClientInformationFullSchema.safeParse(value);\n  return result.success ? result.data : undefined;\n};\n\nconst isSecureNetworkUrl = (value: unknown): value is string => {\n  if (!isNonEmptyString(value)) return false;\n  try {\n    const url = new URL(value);\n    return (\n      url.protocol === \"https:\" ||\n      (url.protocol === \"http:\" &&\n        (url.hostname === \"localhost\" ||\n          url.hostname.endsWith(\".localhost\") ||\n          url.hostname.startsWith(\"127.\") ||\n          url.hostname === \"[::1]\"))\n    );\n  } catch {\n    return false;\n  }\n};\n\nconst isMcpServerUrl = (value: unknown): value is string => {\n  if (typeof value !== \"string\") return false;\n  try {\n    const url = new URL(value);\n    return url.protocol === \"https:\" || url.protocol === \"http:\";\n  } catch {\n    return false;\n  }\n};\n\nconst normalizeDiscoveryState = (\n  value: unknown,\n): MCPPersistedAuthState[\"discoveryState\"] | undefined => {\n  if (!isRecord(value) || !isSecureNetworkUrl(value.authorizationServerUrl)) {\n    return undefined;\n  }\n\n  // A malformed optional field is dropped alone: keeping the validated\n  // authorization server URL preserves the redirect-time binding, and the SDK\n  // re-discovers whatever metadata is missing.\n  const state: NonNullable<MCPPersistedAuthState[\"discoveryState\"]> = {\n    authorizationServerUrl: value.authorizationServerUrl,\n  };\n\n  if (isSecureNetworkUrl(value.resourceMetadataUrl)) {\n    state.resourceMetadataUrl = value.resourceMetadataUrl;\n  }\n\n  const metadata = OAuthMetadataSchema.safeParse(\n    value.authorizationServerMetadata,\n  );\n  if (metadata.success) state.authorizationServerMetadata = metadata.data;\n\n  const resourceMetadata = OAuthProtectedResourceMetadataSchema.safeParse(\n    value.resourceMetadata,\n  );\n  if (resourceMetadata.success) state.resourceMetadata = resourceMetadata.data;\n\n  return state;\n};\n\nexport const normalizePersistedAuthState = (\n  value: unknown,\n): MCPPersistedAuthState | null => {\n  if (!isRecord(value)) return null;\n  if (\"serverUrl\" in value && !isMcpServerUrl(value.serverUrl)) return null;\n\n  const state: MCPPersistedAuthState = {};\n  if (isMcpServerUrl(value.serverUrl)) {\n    state.serverUrl = normalizeMcpServerUrl(value.serverUrl);\n  }\n  if (isNonEmptyString(value.token)) state.token = value.token;\n  if (isNonEmptyString(value.tokensClientId)) {\n    state.tokensClientId = value.tokensClientId;\n  }\n  if (isNonEmptyString(value.codeVerifier)) {\n    state.codeVerifier = value.codeVerifier;\n  }\n  if (isNonEmptyString(value.state)) state.state = value.state;\n\n  const tokens = normalizeOAuthTokens(value.tokens);\n  if (tokens) state.tokens = tokens;\n\n  const clientInformation = normalizeClientInformation(value.clientInformation);\n  if (clientInformation) state.clientInformation = clientInformation;\n  if (value.clientInformationSource === \"registered\") {\n    state.clientInformationSource = value.clientInformationSource;\n  }\n\n  const discoveryState = normalizeDiscoveryState(value.discoveryState);\n  if (discoveryState) state.discoveryState = discoveryState;\n\n  return Object.keys(state).length > 0 ? state : null;\n};\n\nconst useMcpLocalStorage = (opts: McpLocalStorageOptions = {}): MCPStorage => {\n  const prefix = opts.keyPrefix ?? \"aui-mcp\";\n  const storage = resolveStorage(opts);\n  // Deriving a scope from the prefix is only honest for the shared\n  // globalThis.localStorage; two custom backing stores under one prefix hold\n  // different data, so an overridden backing declares no scope unless the\n  // caller names one.\n  const scopeId =\n    opts.scopeId ??\n    (opts.storage === undefined ? `local-storage:${prefix}` : undefined);\n\n  // Callers key per-server coordination state on this instance, so it has to\n  // stay referentially stable for as long as the underlying store does.\n  return useMemo(() => {\n    const customServersKey = `${prefix}:custom-servers`;\n    const authKey = (id: string) => `${prefix}:auth:${id}`;\n\n    const read = <T>(key: string, fallback: T): T => {\n      if (!storage) return fallback;\n      try {\n        const raw = storage.getItem(key);\n        if (raw == null) return fallback;\n        return JSON.parse(raw) as T;\n      } catch {\n        return fallback;\n      }\n    };\n\n    const write = (key: string, value: unknown): void => {\n      if (!storage) return;\n      try {\n        storage.setItem(key, JSON.stringify(value));\n      } catch {\n        // quota or serialization failure — silently drop\n      }\n    };\n\n    const remove = (key: string): void => {\n      if (!storage) return;\n      try {\n        storage.removeItem(key);\n      } catch {\n        // ignore\n      }\n    };\n\n    return {\n      ...(scopeId !== undefined ? { scopeId } : {}),\n      loadCustomServers: async () =>\n        normalizeCustomServerRecords(read<unknown>(customServersKey, [])),\n      saveCustomServers: async (records) => {\n        write(customServersKey, records);\n      },\n      loadAuthState: async (id) =>\n        normalizePersistedAuthState(read<unknown>(authKey(id), null)),\n      saveAuthState: async (id, state) => {\n        write(authKey(id), state);\n      },\n      clearAuthState: async (id) => {\n        remove(authKey(id));\n      },\n    };\n  }, [prefix, storage, scopeId]);\n};\n\nexport const McpLocalStorage = resource(useMcpLocalStorage);\n"],"mappings":";;;;;;;AA4BA,SAASiB,eAAeC,MAA8C;CACpE,IAAIA,KAAKJ,SAAS,OAAOI,KAAKJ;CAC9B,IAAI,OAAOK,eAAe,eAAe,kBAAkBA,YACzD,IAAI;EACF,OAAQA,WAAyCC;CACnD,QAAQ;EACN,OAAO;CACT;CAEF,OAAO;AACT;AAEA,MAAMC,YAAYC,UAChB,OAAOA,UAAU,YAAYA,UAAU,QAAQ,CAACE,MAAMC,QAAQH,KAAK;AAErE,MAAMI,oBAAoBJ,UACxBA,UAAUK,KAAAA,KAAa,OAAOL,UAAU;AAE1C,MAAMM,oBAAoBN,UACxB,OAAOA,UAAU,YAAYA,MAAMO,KAAK,CAAC,CAACC,SAAS;AAErD,MAAMC,4BACJT,UAEAA,UAAUK,KAAAA,KAAaC,iBAAiBN,KAAK;AAE/C,MAAMU,yBAAyBV,UAC7BA,UAAUK,KAAAA,KACTH,MAAMC,QAAQH,KAAK,KAAKA,MAAMW,OAAOC,SAAS,OAAOA,SAAS,QAAQ;AAEzE,MAAMC,+BACJb,UAEAA,UAAUK,KAAAA,KACT,OAAOL,UAAU,YAAYc,OAAOC,SAASf,KAAK,KAAKA,SAAS;AAEnE,MAAMgB,mBAAmBC,OAAwB;CAC/C,IAAI;EACF7B,oBAAoB6B,EAAE;EACtB,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAMC,mBAAmBC,SAAyC;CAChE,IAAI,CAACpB,SAASoB,IAAI,GAAG,OAAO;CAE5B,QAAQA,KAAKC,MAAb;EACE,KAAK,QACH,OAAO;EACT,KAAK,UACH,OAAOX,yBAAyBU,KAAKE,KAAK;EAC5C,KAAK,SACH,OACEX,sBAAsBS,KAAKG,MAAM,KACjClB,iBAAiBe,KAAKI,qBAAqB,KAC3CnB,iBAAiBe,KAAKK,aAAa,KACnCpB,iBAAiBe,KAAKM,oBAAoB,KAC1CrB,iBAAiBe,KAAKO,QAAQ,KAC9BtB,iBAAiBe,KAAKQ,YAAY;EAEtC,SACE,OAAO;CACX;AACF;AAEA,MAAMC,wBACJ5B,UACmC;CACnC,IAAI,CAACD,SAASC,KAAK,GAAG,OAAO;CAC7B,IAAI,OAAOA,MAAMiB,OAAO,YAAY,CAACD,gBAAgBhB,MAAMiB,EAAE,GAC3D,OAAO;CAET,OACEX,iBAAiBN,MAAM6B,IAAI,KAC3BvB,iBAAiBN,MAAM8B,GAAG,KAC1BhB,OAAOC,SAASf,MAAM+B,SAAS,KAC/Bb,gBAAgBlB,MAAMmB,IAAI,KAC1BN,4BAA4Bb,MAAMgC,iBAAiB;AAEvD;AAEA,MAAMC,+BACJjC,UACiC;CACjC,IAAI4B,qBAAqB5B,KAAK,GAAG,OAAOA;CACxC,IAAI,CAACD,SAASC,KAAK,GAAG,OAAO;CAE7B,MAAMkC,SAAS,EAAE,GAAGlC,MAAM;CAC1B,OAAOkC,OAAOF;CACd,OAAOJ,qBAAqBM,MAAM,IAAIA,SAAS;AACjD;AAEA,MAAaC,gCACXnC,UAC4B;CAC5B,IAAI,CAACE,MAAMC,QAAQH,KAAK,GAAG,OAAO,CAAA;CAClC,OAAOA,MAAMoC,SAASxB,SAAS;EAC7B,MAAMsB,SAASD,4BAA4BrB,IAAI;EAC/C,OAAOsB,WAAW,OAAO,CAAA,IAAK,CAACA,MAAM;CACvC,CAAC;AACH;AAEA,MAAMG,wBACJrC,UACgD;CAChD,MAAMsC,SAASvD,kBAAkBwD,UAAUvC,KAAK;CAChD,OAAOsC,OAAOE,UAAUF,OAAOG,OAAOpC,KAAAA;AACxC;AAEA,MAAMqC,8BACJ1C,UAC2D;CAC3D,MAAMsC,SAASzD,iCAAiC0D,UAAUvC,KAAK;CAC/D,OAAOsC,OAAOE,UAAUF,OAAOG,OAAOpC,KAAAA;AACxC;AAEA,MAAMsC,sBAAsB3C,UAAoC;CAC9D,IAAI,CAACM,iBAAiBN,KAAK,GAAG,OAAO;CACrC,IAAI;EACF,MAAM8B,MAAM,IAAIc,IAAI5C,KAAK;EACzB,OACE8B,IAAIe,aAAa,YAChBf,IAAIe,aAAa,YACff,IAAIgB,aAAa,eAChBhB,IAAIgB,SAASC,SAAS,YAAY,KAClCjB,IAAIgB,SAASE,WAAW,MAAM,KAC9BlB,IAAIgB,aAAa;CAEzB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAMG,kBAAkBjD,UAAoC;CAC1D,IAAI,OAAOA,UAAU,UAAU,OAAO;CACtC,IAAI;EACF,MAAM8B,MAAM,IAAIc,IAAI5C,KAAK;EACzB,OAAO8B,IAAIe,aAAa,YAAYf,IAAIe,aAAa;CACvD,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAMK,2BACJlD,UACwD;CACxD,IAAI,CAACD,SAASC,KAAK,KAAK,CAAC2C,mBAAmB3C,MAAMmD,sBAAsB,GACtE;CAMF,MAAMC,QAA8D,EAClED,wBAAwBnD,MAAMmD,uBAChC;CAEA,IAAIR,mBAAmB3C,MAAMsD,mBAAmB,GAC9CF,MAAME,sBAAsBtD,MAAMsD;CAGpC,MAAMC,WAAW3E,oBAAoB2D,UACnCvC,MAAMwD,2BACR;CACA,IAAID,SAASf,SAASY,MAAMI,8BAA8BD,SAASd;CAEnE,MAAMgB,mBAAmB3E,qCAAqCyD,UAC5DvC,MAAMyD,gBACR;CACA,IAAIA,iBAAiBjB,SAASY,MAAMK,mBAAmBA,iBAAiBhB;CAExE,OAAOW;AACT;AAEA,MAAaM,+BACX1D,UACiC;CACjC,IAAI,CAACD,SAASC,KAAK,GAAG,OAAO;CAC7B,IAAI,eAAeA,SAAS,CAACiD,eAAejD,MAAM2D,SAAS,GAAG,OAAO;CAErE,MAAMP,QAA+B,CAAC;CACtC,IAAIH,eAAejD,MAAM2D,SAAS,GAChCP,MAAMO,YAAY3E,sBAAsBgB,MAAM2D,SAAS;CAEzD,IAAIrD,iBAAiBN,MAAMqB,KAAK,GAAG+B,MAAM/B,QAAQrB,MAAMqB;CACvD,IAAIf,iBAAiBN,MAAM4D,cAAc,GACvCR,MAAMQ,iBAAiB5D,MAAM4D;CAE/B,IAAItD,iBAAiBN,MAAM6D,YAAY,GACrCT,MAAMS,eAAe7D,MAAM6D;CAE7B,IAAIvD,iBAAiBN,MAAMoD,KAAK,GAAGA,MAAMA,QAAQpD,MAAMoD;CAEvD,MAAMU,SAASzB,qBAAqBrC,MAAM8D,MAAM;CAChD,IAAIA,QAAQV,MAAMU,SAASA;CAE3B,MAAMC,oBAAoBrB,2BAA2B1C,MAAM+D,iBAAiB;CAC5E,IAAIA,mBAAmBX,MAAMW,oBAAoBA;CACjD,IAAI/D,MAAMgE,4BAA4B,cACpCZ,MAAMY,0BAA0BhE,MAAMgE;CAGxC,MAAMC,iBAAiBf,wBAAwBlD,MAAMiE,cAAc;CACnE,IAAIA,gBAAgBb,MAAMa,iBAAiBA;CAE3C,OAAOC,OAAOC,KAAKf,KAAK,CAAC,CAAC5C,SAAS,IAAI4C,QAAQ;AACjD;AAEA,MAAMgB,sBAAqBC,OAAA;CAAA,MAAAC,IAAAC,EAAA,EAAA;CAAA,IAAAC;CAAA,IAAAF,EAAA,OAAAD,IAAA;EAACG,KAAAH,OAAAhE,KAAAA,IAAA,CAAgC,IAAhCgE;EAAiCC,EAAA,KAAAD;EAAAC,EAAA,KAAAE;CAAA,OAAAA,KAAAF,EAAA;CAAjC,MAAA1E,OAAA4E;CAC1B,MAAAC,SAAe7E,KAAIL,aAAJ;CAA4B,IAAAmF;CAAA,IAAAJ,EAAA,OAAA1E,MAAA;EAC3B8E,KAAA/E,eAAeC,IAAI;EAAC0E,EAAA,KAAA1E;EAAA0E,EAAA,KAAAI;CAAA,OAAAA,KAAAJ,EAAA;CAApC,MAAA9E,UAAgBkF;CAKhB,MAAAhF,UACEE,KAAIF,YACHE,KAAIJ,YAAaa,KAAAA,IAAjB,iBAA8CoE,WAA9CpE,KAAAA;CAKD,MAAAsE,mBAAyB,GAAGF,OAAM;CAAkB,IAAAG;CAAA,IAAAN,EAAA,OAAAG,QAAA;EACpCG,MAAA3D,OAAgB,GAAGwD,OAAM,QAASxD;EAAIqD,EAAA,KAAAG;EAAAH,EAAA,KAAAM;CAAA,OAAAA,KAAAN,EAAA;CAAtD,MAAAO,UAAgBD;CAAuC,IAAAE;CAAA,IAAAR,EAAA,OAAA9E,SAAA;EAE1CsF,MAAAC,KAAAC,aAAA;GACX,IAAI,CAACxF,SAAO,OAASwF;GACrB,IAAA;IACE,MAAAC,MAAYzF,QAAO0F,QAASH,GAAG;IAC/B,IAAIE,OAAO,MAAI,OAASD;IAAS,OAC1BG,KAAIC,MAAOH,GAAG;GAAM,QAAA;IAAA,OAEpBD;GAAQ;EAChB;EACFV,EAAA,KAAA9E;EAAA8E,EAAA,KAAAQ;CAAA,OAAAA,KAAAR,EAAA;CATD,MAAAgB,OAAaR;CASX,IAAAS;CAAA,IAAAjB,EAAA,OAAA9E,SAAA;EAEY+F,MAAAC,OAAAxF,UAAA;GACZ,IAAI,CAACR,SAAO;GACZ,IAAA;IACEA,QAAOiG,QAASV,OAAKI,KAAIO,UAAW1F,KAAK,CAAC;GAAC,QAAA,CAAA;EAG5C;EACFsE,EAAA,KAAA9E;EAAA8E,EAAA,KAAAiB;CAAA,OAAAA,KAAAjB,EAAA;CAPD,MAAAqB,QAAcJ;CAOZ,IAAAK;CAAA,IAAAtB,EAAA,QAAA9E,SAAA;EAEaoG,MAAAC,UAAA;GACb,IAAI,CAACrG,SAAO;GACZ,IAAA;IACEA,QAAOsG,WAAYf,KAAG;GAAC,QAAA,CAAA;EAGxB;EACFT,EAAA,MAAA9E;EAAA8E,EAAA,MAAAsB;CAAA,OAAAA,KAAAtB,EAAA;CAPD,MAAAyB,SAAeH;CAOb,IAAAI;CAAA,IAAA1B,EAAA,QAAA5E,SAAA;EAGIsG,KAAAtG,YAAYW,KAAAA,IAAZ,EAAAX,QAAuC,IAAvC,CAAuC;EAAC4E,EAAA,MAAA5E;EAAA4E,EAAA,MAAA0B;CAAA,OAAAA,KAAA1B,EAAA;CAAA,IAAA2B;CAAA,IAAA3B,EAAA,QAAAK,oBAAAL,EAAA,QAAAgB,MAAA;EACzBW,KAAA,YACjB9D,6BAA6BmD,KAAcX,kBAAkB,CAAA,CAAE,CAAC;EAACL,EAAA,MAAAK;EAAAL,EAAA,MAAAgB;EAAAhB,EAAA,MAAA2B;CAAA,OAAAA,KAAA3B,EAAA;CAAA,IAAA4B;CAAA,IAAA5B,EAAA,QAAAK,oBAAAL,EAAA,QAAAqB,OAAA;EAChDO,KAAA,OAAAC,YAAA;GACjBR,MAAMhB,kBAAkBwB,OAAO;EAAC;EACjC7B,EAAA,MAAAK;EAAAL,EAAA,MAAAqB;EAAArB,EAAA,MAAA4B;CAAA,OAAAA,KAAA5B,EAAA;CAAA,IAAA8B;CAAA,IAAA9B,EAAA,QAAAO,WAAAP,EAAA,QAAAgB,MAAA;EACcc,MAAA,OAAAC,SACb3C,4BAA4B4B,KAAcT,QAAQ5D,IAAE,GAAG,IAAI,CAAC;EAACqD,EAAA,MAAAO;EAAAP,EAAA,MAAAgB;EAAAhB,EAAA,MAAA8B;CAAA,OAAAA,MAAA9B,EAAA;CAAA,IAAAgC;CAAA,IAAAhC,EAAA,QAAAO,WAAAP,EAAA,QAAAqB,OAAA;EAChDW,MAAA,OAAAC,MAAAnD,UAAA;GACbuC,MAAMd,QAAQ5D,IAAE,GAAGmC,KAAK;EAAC;EAC1BkB,EAAA,MAAAO;EAAAP,EAAA,MAAAqB;EAAArB,EAAA,MAAAgC;CAAA,OAAAA,MAAAhC,EAAA;CAAA,IAAAkC;CAAA,IAAAlC,EAAA,QAAAO,WAAAP,EAAA,QAAAyB,QAAA;EACeS,MAAA,OAAAC,SAAA;GACdV,OAAOlB,QAAQ5D,IAAE,CAAC;EAAC;EACpBqD,EAAA,MAAAO;EAAAP,EAAA,MAAAyB;EAAAzB,EAAA,MAAAkC;CAAA,OAAAA,MAAAlC,EAAA;CAAA,IAAAoC;CAAA,IAAApC,EAAA,QAAA8B,OAAA9B,EAAA,QAAAgC,OAAAhC,EAAA,QAAAkC,OAAAlC,EAAA,QAAA0B,MAAA1B,EAAA,QAAA2B,MAAA3B,EAAA,QAAA4B,IAAA;EAdIQ,MAAA;GAAA,GACDV;GAAwCW,mBACzBV;GACgDW,mBAChDV;GAElBW,eACcT;GACgDU,eAChDR;GAEdS,gBACeP;EAGlB;EAAClC,EAAA,MAAA8B;EAAA9B,EAAA,MAAAgC;EAAAhC,EAAA,MAAAkC;EAAAlC,EAAA,MAAA0B;EAAA1B,EAAA,MAAA2B;EAAA3B,EAAA,MAAA4B;EAAA5B,EAAA,MAAAoC;CAAA,OAAAA,MAAApC,EAAA;CAAA,OAfDoC;AAeE;AAIN,MAAaM,kBAAkBtI,SAAS0F,kBAAkB"}
+{"version":3,"file":"McpLocalStorage.js","names":["resource","useMemo","OAuthMetadataSchema","OAuthClientInformationFullSchema","OAuthProtectedResourceMetadataSchema","OAuthTokensSchema","normalizeMcpServerUrl","MCPAuthConfig","MCPCustomServerRecord","MCPPersistedAuthState","assertValidServerId","MCPStorage","McpLocalStorageOptions","keyPrefix","storage","Storage","scopeId","resolveStorage","opts","globalThis","localStorage","isRecord","value","Record","Array","isArray","isOptionalString","undefined","isNonEmptyString","trim","length","isOptionalNonEmptyString","isOptionalStringArray","every","item","isOptionalConnectionTimeout","Number","isFinite","isValidServerId","id","isMCPAuthConfig","auth","type","token","scopes","authorizationEndpoint","tokenEndpoint","registrationEndpoint","clientId","clientSecret","isCustomServerRecord","name","url","createdAt","connectionTimeout","normalizeCustomServerRecord","record","normalizeCustomServerRecords","flatMap","normalizeOAuthTokens","result","safeParse","success","data","normalizeClientInformation","isSecureNetworkUrl","URL","isIpv4Loopback","test","hostname","protocol","endsWith","isMcpServerUrl","normalizeDiscoveryState","authorizationServerUrl","state","NonNullable","resourceMetadataUrl","metadata","authorizationServerMetadata","resourceMetadata","normalizePersistedAuthState","serverUrl","tokensClientId","codeVerifier","tokens","clientInformation","clientInformationSource","discoveryState","Object","keys","useMcpLocalStorage","t0","$","_c","t1","prefix","t2","customServersKey","t3","authKey","t4","key","fallback","raw","getItem","JSON","parse","T","read","t5","key_0","setItem","stringify","write","t6","key_1","removeItem","remove","t7","t8","t9","records","t10","id_0","t11","id_1","t12","id_2","t13","loadCustomServers","saveCustomServers","loadAuthState","saveAuthState","clearAuthState","McpLocalStorage"],"sources":["../../../src/resources/storage/McpLocalStorage.ts"],"sourcesContent":["import { resource } from \"@assistant-ui/tap\";\nimport { useMemo } from \"react\";\nimport {\n  OAuthMetadataSchema,\n  OAuthClientInformationFullSchema,\n  OAuthProtectedResourceMetadataSchema,\n  OAuthTokensSchema,\n} from \"@modelcontextprotocol/core\";\nimport { normalizeMcpServerUrl } from \"../../utils/serverUrl\";\nimport type { MCPAuthConfig, MCPCustomServerRecord } from \"../../mcp-scope\";\nimport type { MCPPersistedAuthState } from \"../../auth/types\";\nimport { assertValidServerId } from \"../../utils/serverId\";\nimport type { MCPStorage } from \"./types\";\n\nexport type McpLocalStorageOptions = {\n  /** Namespace prefix for keys. Default \"aui-mcp\". */\n  keyPrefix?: string;\n  /** Override the underlying Storage. Defaults to globalThis.localStorage. */\n  storage?: Storage;\n  /**\n   * Stable identity for the backing data, used to key server reconnects.\n   * Required to get reconnect-on-swap behavior when `storage` is overridden;\n   * without it a custom backing store declares no scope, since a prefix\n   * alone cannot distinguish two different stores.\n   */\n  scopeId?: string;\n};\n\nfunction resolveStorage(opts: McpLocalStorageOptions): Storage | null {\n  if (opts.storage) return opts.storage;\n  if (typeof globalThis !== \"undefined\" && \"localStorage\" in globalThis) {\n    try {\n      return (globalThis as { localStorage: Storage }).localStorage;\n    } catch {\n      return null;\n    }\n  }\n  return null;\n}\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nconst isOptionalString = (value: unknown): value is string | undefined =>\n  value === undefined || typeof value === \"string\";\n\nconst isNonEmptyString = (value: unknown): value is string =>\n  typeof value === \"string\" && value.trim().length > 0;\n\nconst isOptionalNonEmptyString = (\n  value: unknown,\n): value is string | undefined =>\n  value === undefined || isNonEmptyString(value);\n\nconst isOptionalStringArray = (value: unknown): value is string[] | undefined =>\n  value === undefined ||\n  (Array.isArray(value) && value.every((item) => typeof item === \"string\"));\n\nconst isOptionalConnectionTimeout = (\n  value: unknown,\n): value is number | undefined =>\n  value === undefined ||\n  (typeof value === \"number\" && Number.isFinite(value) && value >= 0);\n\nconst isValidServerId = (id: string): boolean => {\n  try {\n    assertValidServerId(id);\n    return true;\n  } catch {\n    return false;\n  }\n};\n\nconst isMCPAuthConfig = (auth: unknown): auth is MCPAuthConfig => {\n  if (!isRecord(auth)) return false;\n\n  switch (auth.type) {\n    case \"none\":\n      return true;\n    case \"bearer\":\n      return isOptionalNonEmptyString(auth.token);\n    case \"oauth\":\n      return (\n        isOptionalStringArray(auth.scopes) &&\n        isOptionalString(auth.authorizationEndpoint) &&\n        isOptionalString(auth.tokenEndpoint) &&\n        isOptionalString(auth.registrationEndpoint) &&\n        isOptionalString(auth.clientId) &&\n        isOptionalString(auth.clientSecret)\n      );\n    default:\n      return false;\n  }\n};\n\nconst isCustomServerRecord = (\n  value: unknown,\n): value is MCPCustomServerRecord => {\n  if (!isRecord(value)) return false;\n  if (typeof value.id !== \"string\" || !isValidServerId(value.id)) {\n    return false;\n  }\n  return (\n    isNonEmptyString(value.name) &&\n    isNonEmptyString(value.url) &&\n    Number.isFinite(value.createdAt) &&\n    isMCPAuthConfig(value.auth) &&\n    isOptionalConnectionTimeout(value.connectionTimeout)\n  );\n};\n\nconst normalizeCustomServerRecord = (\n  value: unknown,\n): MCPCustomServerRecord | null => {\n  if (isCustomServerRecord(value)) return value;\n  if (!isRecord(value)) return null;\n\n  const record = { ...value };\n  delete record.connectionTimeout;\n  return isCustomServerRecord(record) ? record : null;\n};\n\nexport const normalizeCustomServerRecords = (\n  value: unknown,\n): MCPCustomServerRecord[] => {\n  if (!Array.isArray(value)) return [];\n  return value.flatMap((item) => {\n    const record = normalizeCustomServerRecord(item);\n    return record === null ? [] : [record];\n  });\n};\n\nconst normalizeOAuthTokens = (\n  value: unknown,\n): MCPPersistedAuthState[\"tokens\"] | undefined => {\n  const result = OAuthTokensSchema.safeParse(value);\n  return result.success ? result.data : undefined;\n};\n\nconst normalizeClientInformation = (\n  value: unknown,\n): MCPPersistedAuthState[\"clientInformation\"] | undefined => {\n  const result = OAuthClientInformationFullSchema.safeParse(value);\n  return result.success ? result.data : undefined;\n};\n\nconst isSecureNetworkUrl = (value: unknown): value is string => {\n  if (!isNonEmptyString(value)) return false;\n  try {\n    const url = new URL(value);\n    const isIpv4Loopback = /^127(?:\\.\\d{1,3}){3}$/.test(url.hostname);\n    return (\n      url.protocol === \"https:\" ||\n      (url.protocol === \"http:\" &&\n        (url.hostname === \"localhost\" ||\n          url.hostname.endsWith(\".localhost\") ||\n          isIpv4Loopback ||\n          url.hostname === \"[::1]\"))\n    );\n  } catch {\n    return false;\n  }\n};\n\nconst isMcpServerUrl = (value: unknown): value is string => {\n  if (typeof value !== \"string\") return false;\n  try {\n    const url = new URL(value);\n    return url.protocol === \"https:\" || url.protocol === \"http:\";\n  } catch {\n    return false;\n  }\n};\n\nconst normalizeDiscoveryState = (\n  value: unknown,\n): MCPPersistedAuthState[\"discoveryState\"] | undefined => {\n  if (!isRecord(value) || !isSecureNetworkUrl(value.authorizationServerUrl)) {\n    return undefined;\n  }\n\n  // A malformed optional field is dropped alone: keeping the validated\n  // authorization server URL preserves the redirect-time binding, and the SDK\n  // re-discovers whatever metadata is missing.\n  const state: NonNullable<MCPPersistedAuthState[\"discoveryState\"]> = {\n    authorizationServerUrl: value.authorizationServerUrl,\n  };\n\n  if (isSecureNetworkUrl(value.resourceMetadataUrl)) {\n    state.resourceMetadataUrl = value.resourceMetadataUrl;\n  }\n\n  const metadata = OAuthMetadataSchema.safeParse(\n    value.authorizationServerMetadata,\n  );\n  if (metadata.success) state.authorizationServerMetadata = metadata.data;\n\n  const resourceMetadata = OAuthProtectedResourceMetadataSchema.safeParse(\n    value.resourceMetadata,\n  );\n  if (resourceMetadata.success) state.resourceMetadata = resourceMetadata.data;\n\n  return state;\n};\n\nexport const normalizePersistedAuthState = (\n  value: unknown,\n): MCPPersistedAuthState | null => {\n  if (!isRecord(value)) return null;\n  if (\"serverUrl\" in value && !isMcpServerUrl(value.serverUrl)) return null;\n\n  const state: MCPPersistedAuthState = {};\n  if (isMcpServerUrl(value.serverUrl)) {\n    state.serverUrl = normalizeMcpServerUrl(value.serverUrl);\n  }\n  if (isNonEmptyString(value.token)) state.token = value.token;\n  if (isNonEmptyString(value.tokensClientId)) {\n    state.tokensClientId = value.tokensClientId;\n  }\n  if (isNonEmptyString(value.codeVerifier)) {\n    state.codeVerifier = value.codeVerifier;\n  }\n  if (isNonEmptyString(value.state)) state.state = value.state;\n\n  const tokens = normalizeOAuthTokens(value.tokens);\n  if (tokens) state.tokens = tokens;\n\n  const clientInformation = normalizeClientInformation(value.clientInformation);\n  if (clientInformation) state.clientInformation = clientInformation;\n  if (value.clientInformationSource === \"registered\") {\n    state.clientInformationSource = value.clientInformationSource;\n  }\n\n  const discoveryState = normalizeDiscoveryState(value.discoveryState);\n  if (discoveryState) state.discoveryState = discoveryState;\n\n  return Object.keys(state).length > 0 ? state : null;\n};\n\nconst useMcpLocalStorage = (opts: McpLocalStorageOptions = {}): MCPStorage => {\n  const prefix = opts.keyPrefix ?? \"aui-mcp\";\n  const storage = resolveStorage(opts);\n  // Deriving a scope from the prefix is only honest for the shared\n  // globalThis.localStorage; two custom backing stores under one prefix hold\n  // different data, so an overridden backing declares no scope unless the\n  // caller names one.\n  const scopeId =\n    opts.scopeId ??\n    (opts.storage === undefined ? `local-storage:${prefix}` : undefined);\n\n  // Callers key per-server coordination state on this instance, so it has to\n  // stay referentially stable for as long as the underlying store does.\n  return useMemo(() => {\n    const customServersKey = `${prefix}:custom-servers`;\n    const authKey = (id: string) => `${prefix}:auth:${id}`;\n\n    const read = <T>(key: string, fallback: T): T => {\n      if (!storage) return fallback;\n      try {\n        const raw = storage.getItem(key);\n        if (raw == null) return fallback;\n        return JSON.parse(raw) as T;\n      } catch {\n        return fallback;\n      }\n    };\n\n    const write = (key: string, value: unknown): void => {\n      if (!storage) return;\n      try {\n        storage.setItem(key, JSON.stringify(value));\n      } catch {\n        // quota or serialization failure — silently drop\n      }\n    };\n\n    const remove = (key: string): void => {\n      if (!storage) return;\n      try {\n        storage.removeItem(key);\n      } catch {\n        // ignore\n      }\n    };\n\n    return {\n      ...(scopeId !== undefined ? { scopeId } : {}),\n      loadCustomServers: async () =>\n        normalizeCustomServerRecords(read<unknown>(customServersKey, [])),\n      saveCustomServers: async (records) => {\n        write(customServersKey, records);\n      },\n      loadAuthState: async (id) =>\n        normalizePersistedAuthState(read<unknown>(authKey(id), null)),\n      saveAuthState: async (id, state) => {\n        write(authKey(id), state);\n      },\n      clearAuthState: async (id) => {\n        remove(authKey(id));\n      },\n    };\n  }, [prefix, storage, scopeId]);\n};\n\nexport const McpLocalStorage = resource(useMcpLocalStorage);\n"],"mappings":";;;;;;;AA4BA,SAASiB,eAAeC,MAA8C;CACpE,IAAIA,KAAKJ,SAAS,OAAOI,KAAKJ;CAC9B,IAAI,OAAOK,eAAe,eAAe,kBAAkBA,YACzD,IAAI;EACF,OAAQA,WAAyCC;CACnD,QAAQ;EACN,OAAO;CACT;CAEF,OAAO;AACT;AAEA,MAAMC,YAAYC,UAChB,OAAOA,UAAU,YAAYA,UAAU,QAAQ,CAACE,MAAMC,QAAQH,KAAK;AAErE,MAAMI,oBAAoBJ,UACxBA,UAAUK,KAAAA,KAAa,OAAOL,UAAU;AAE1C,MAAMM,oBAAoBN,UACxB,OAAOA,UAAU,YAAYA,MAAMO,KAAK,CAAC,CAACC,SAAS;AAErD,MAAMC,4BACJT,UAEAA,UAAUK,KAAAA,KAAaC,iBAAiBN,KAAK;AAE/C,MAAMU,yBAAyBV,UAC7BA,UAAUK,KAAAA,KACTH,MAAMC,QAAQH,KAAK,KAAKA,MAAMW,OAAOC,SAAS,OAAOA,SAAS,QAAQ;AAEzE,MAAMC,+BACJb,UAEAA,UAAUK,KAAAA,KACT,OAAOL,UAAU,YAAYc,OAAOC,SAASf,KAAK,KAAKA,SAAS;AAEnE,MAAMgB,mBAAmBC,OAAwB;CAC/C,IAAI;EACF7B,oBAAoB6B,EAAE;EACtB,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAMC,mBAAmBC,SAAyC;CAChE,IAAI,CAACpB,SAASoB,IAAI,GAAG,OAAO;CAE5B,QAAQA,KAAKC,MAAb;EACE,KAAK,QACH,OAAO;EACT,KAAK,UACH,OAAOX,yBAAyBU,KAAKE,KAAK;EAC5C,KAAK,SACH,OACEX,sBAAsBS,KAAKG,MAAM,KACjClB,iBAAiBe,KAAKI,qBAAqB,KAC3CnB,iBAAiBe,KAAKK,aAAa,KACnCpB,iBAAiBe,KAAKM,oBAAoB,KAC1CrB,iBAAiBe,KAAKO,QAAQ,KAC9BtB,iBAAiBe,KAAKQ,YAAY;EAEtC,SACE,OAAO;CACX;AACF;AAEA,MAAMC,wBACJ5B,UACmC;CACnC,IAAI,CAACD,SAASC,KAAK,GAAG,OAAO;CAC7B,IAAI,OAAOA,MAAMiB,OAAO,YAAY,CAACD,gBAAgBhB,MAAMiB,EAAE,GAC3D,OAAO;CAET,OACEX,iBAAiBN,MAAM6B,IAAI,KAC3BvB,iBAAiBN,MAAM8B,GAAG,KAC1BhB,OAAOC,SAASf,MAAM+B,SAAS,KAC/Bb,gBAAgBlB,MAAMmB,IAAI,KAC1BN,4BAA4Bb,MAAMgC,iBAAiB;AAEvD;AAEA,MAAMC,+BACJjC,UACiC;CACjC,IAAI4B,qBAAqB5B,KAAK,GAAG,OAAOA;CACxC,IAAI,CAACD,SAASC,KAAK,GAAG,OAAO;CAE7B,MAAMkC,SAAS,EAAE,GAAGlC,MAAM;CAC1B,OAAOkC,OAAOF;CACd,OAAOJ,qBAAqBM,MAAM,IAAIA,SAAS;AACjD;AAEA,MAAaC,gCACXnC,UAC4B;CAC5B,IAAI,CAACE,MAAMC,QAAQH,KAAK,GAAG,OAAO,CAAA;CAClC,OAAOA,MAAMoC,SAASxB,SAAS;EAC7B,MAAMsB,SAASD,4BAA4BrB,IAAI;EAC/C,OAAOsB,WAAW,OAAO,CAAA,IAAK,CAACA,MAAM;CACvC,CAAC;AACH;AAEA,MAAMG,wBACJrC,UACgD;CAChD,MAAMsC,SAASvD,kBAAkBwD,UAAUvC,KAAK;CAChD,OAAOsC,OAAOE,UAAUF,OAAOG,OAAOpC,KAAAA;AACxC;AAEA,MAAMqC,8BACJ1C,UAC2D;CAC3D,MAAMsC,SAASzD,iCAAiC0D,UAAUvC,KAAK;CAC/D,OAAOsC,OAAOE,UAAUF,OAAOG,OAAOpC,KAAAA;AACxC;AAEA,MAAMsC,sBAAsB3C,UAAoC;CAC9D,IAAI,CAACM,iBAAiBN,KAAK,GAAG,OAAO;CACrC,IAAI;EACF,MAAM8B,MAAM,IAAIc,IAAI5C,KAAK;EACzB,MAAM6C,iBAAiB,wBAAwBC,KAAKhB,IAAIiB,QAAQ;EAChE,OACEjB,IAAIkB,aAAa,YAChBlB,IAAIkB,aAAa,YACflB,IAAIiB,aAAa,eAChBjB,IAAIiB,SAASE,SAAS,YAAY,KAClCJ,kBACAf,IAAIiB,aAAa;CAEzB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAMG,kBAAkBlD,UAAoC;CAC1D,IAAI,OAAOA,UAAU,UAAU,OAAO;CACtC,IAAI;EACF,MAAM8B,MAAM,IAAIc,IAAI5C,KAAK;EACzB,OAAO8B,IAAIkB,aAAa,YAAYlB,IAAIkB,aAAa;CACvD,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAMG,2BACJnD,UACwD;CACxD,IAAI,CAACD,SAASC,KAAK,KAAK,CAAC2C,mBAAmB3C,MAAMoD,sBAAsB,GACtE;CAMF,MAAMC,QAA8D,EAClED,wBAAwBpD,MAAMoD,uBAChC;CAEA,IAAIT,mBAAmB3C,MAAMuD,mBAAmB,GAC9CF,MAAME,sBAAsBvD,MAAMuD;CAGpC,MAAMC,WAAW5E,oBAAoB2D,UACnCvC,MAAMyD,2BACR;CACA,IAAID,SAAShB,SAASa,MAAMI,8BAA8BD,SAASf;CAEnE,MAAMiB,mBAAmB5E,qCAAqCyD,UAC5DvC,MAAM0D,gBACR;CACA,IAAIA,iBAAiBlB,SAASa,MAAMK,mBAAmBA,iBAAiBjB;CAExE,OAAOY;AACT;AAEA,MAAaM,+BACX3D,UACiC;CACjC,IAAI,CAACD,SAASC,KAAK,GAAG,OAAO;CAC7B,IAAI,eAAeA,SAAS,CAACkD,eAAelD,MAAM4D,SAAS,GAAG,OAAO;CAErE,MAAMP,QAA+B,CAAC;CACtC,IAAIH,eAAelD,MAAM4D,SAAS,GAChCP,MAAMO,YAAY5E,sBAAsBgB,MAAM4D,SAAS;CAEzD,IAAItD,iBAAiBN,MAAMqB,KAAK,GAAGgC,MAAMhC,QAAQrB,MAAMqB;CACvD,IAAIf,iBAAiBN,MAAM6D,cAAc,GACvCR,MAAMQ,iBAAiB7D,MAAM6D;CAE/B,IAAIvD,iBAAiBN,MAAM8D,YAAY,GACrCT,MAAMS,eAAe9D,MAAM8D;CAE7B,IAAIxD,iBAAiBN,MAAMqD,KAAK,GAAGA,MAAMA,QAAQrD,MAAMqD;CAEvD,MAAMU,SAAS1B,qBAAqBrC,MAAM+D,MAAM;CAChD,IAAIA,QAAQV,MAAMU,SAASA;CAE3B,MAAMC,oBAAoBtB,2BAA2B1C,MAAMgE,iBAAiB;CAC5E,IAAIA,mBAAmBX,MAAMW,oBAAoBA;CACjD,IAAIhE,MAAMiE,4BAA4B,cACpCZ,MAAMY,0BAA0BjE,MAAMiE;CAGxC,MAAMC,iBAAiBf,wBAAwBnD,MAAMkE,cAAc;CACnE,IAAIA,gBAAgBb,MAAMa,iBAAiBA;CAE3C,OAAOC,OAAOC,KAAKf,KAAK,CAAC,CAAC7C,SAAS,IAAI6C,QAAQ;AACjD;AAEA,MAAMgB,sBAAqBC,OAAA;CAAA,MAAAC,IAAAC,EAAA,EAAA;CAAA,IAAAC;CAAA,IAAAF,EAAA,OAAAD,IAAA;EAACG,KAAAH,OAAAjE,KAAAA,IAAA,CAAgC,IAAhCiE;EAAiCC,EAAA,KAAAD;EAAAC,EAAA,KAAAE;CAAA,OAAAA,KAAAF,EAAA;CAAjC,MAAA3E,OAAA6E;CAC1B,MAAAC,SAAe9E,KAAIL,aAAJ;CAA4B,IAAAoF;CAAA,IAAAJ,EAAA,OAAA3E,MAAA;EAC3B+E,KAAAhF,eAAeC,IAAI;EAAC2E,EAAA,KAAA3E;EAAA2E,EAAA,KAAAI;CAAA,OAAAA,KAAAJ,EAAA;CAApC,MAAA/E,UAAgBmF;CAKhB,MAAAjF,UACEE,KAAIF,YACHE,KAAIJ,YAAaa,KAAAA,IAAjB,iBAA8CqE,WAA9CrE,KAAAA;CAKD,MAAAuE,mBAAyB,GAAGF,OAAM;CAAkB,IAAAG;CAAA,IAAAN,EAAA,OAAAG,QAAA;EACpCG,MAAA5D,OAAgB,GAAGyD,OAAM,QAASzD;EAAIsD,EAAA,KAAAG;EAAAH,EAAA,KAAAM;CAAA,OAAAA,KAAAN,EAAA;CAAtD,MAAAO,UAAgBD;CAAuC,IAAAE;CAAA,IAAAR,EAAA,OAAA/E,SAAA;EAE1CuF,MAAAC,KAAAC,aAAA;GACX,IAAI,CAACzF,SAAO,OAASyF;GACrB,IAAA;IACE,MAAAC,MAAY1F,QAAO2F,QAASH,GAAG;IAC/B,IAAIE,OAAO,MAAI,OAASD;IAAS,OAC1BG,KAAIC,MAAOH,GAAG;GAAM,QAAA;IAAA,OAEpBD;GAAQ;EAChB;EACFV,EAAA,KAAA/E;EAAA+E,EAAA,KAAAQ;CAAA,OAAAA,KAAAR,EAAA;CATD,MAAAgB,OAAaR;CASX,IAAAS;CAAA,IAAAjB,EAAA,OAAA/E,SAAA;EAEYgG,MAAAC,OAAAzF,UAAA;GACZ,IAAI,CAACR,SAAO;GACZ,IAAA;IACEA,QAAOkG,QAASV,OAAKI,KAAIO,UAAW3F,KAAK,CAAC;GAAC,QAAA,CAAA;EAG5C;EACFuE,EAAA,KAAA/E;EAAA+E,EAAA,KAAAiB;CAAA,OAAAA,KAAAjB,EAAA;CAPD,MAAAqB,QAAcJ;CAOZ,IAAAK;CAAA,IAAAtB,EAAA,QAAA/E,SAAA;EAEaqG,MAAAC,UAAA;GACb,IAAI,CAACtG,SAAO;GACZ,IAAA;IACEA,QAAOuG,WAAYf,KAAG;GAAC,QAAA,CAAA;EAGxB;EACFT,EAAA,MAAA/E;EAAA+E,EAAA,MAAAsB;CAAA,OAAAA,KAAAtB,EAAA;CAPD,MAAAyB,SAAeH;CAOb,IAAAI;CAAA,IAAA1B,EAAA,QAAA7E,SAAA;EAGIuG,KAAAvG,YAAYW,KAAAA,IAAZ,EAAAX,QAAuC,IAAvC,CAAuC;EAAC6E,EAAA,MAAA7E;EAAA6E,EAAA,MAAA0B;CAAA,OAAAA,KAAA1B,EAAA;CAAA,IAAA2B;CAAA,IAAA3B,EAAA,QAAAK,oBAAAL,EAAA,QAAAgB,MAAA;EACzBW,KAAA,YACjB/D,6BAA6BoD,KAAcX,kBAAkB,CAAA,CAAE,CAAC;EAACL,EAAA,MAAAK;EAAAL,EAAA,MAAAgB;EAAAhB,EAAA,MAAA2B;CAAA,OAAAA,KAAA3B,EAAA;CAAA,IAAA4B;CAAA,IAAA5B,EAAA,QAAAK,oBAAAL,EAAA,QAAAqB,OAAA;EAChDO,KAAA,OAAAC,YAAA;GACjBR,MAAMhB,kBAAkBwB,OAAO;EAAC;EACjC7B,EAAA,MAAAK;EAAAL,EAAA,MAAAqB;EAAArB,EAAA,MAAA4B;CAAA,OAAAA,KAAA5B,EAAA;CAAA,IAAA8B;CAAA,IAAA9B,EAAA,QAAAO,WAAAP,EAAA,QAAAgB,MAAA;EACcc,MAAA,OAAAC,SACb3C,4BAA4B4B,KAAcT,QAAQ7D,IAAE,GAAG,IAAI,CAAC;EAACsD,EAAA,MAAAO;EAAAP,EAAA,MAAAgB;EAAAhB,EAAA,MAAA8B;CAAA,OAAAA,MAAA9B,EAAA;CAAA,IAAAgC;CAAA,IAAAhC,EAAA,QAAAO,WAAAP,EAAA,QAAAqB,OAAA;EAChDW,MAAA,OAAAC,MAAAnD,UAAA;GACbuC,MAAMd,QAAQ7D,IAAE,GAAGoC,KAAK;EAAC;EAC1BkB,EAAA,MAAAO;EAAAP,EAAA,MAAAqB;EAAArB,EAAA,MAAAgC;CAAA,OAAAA,MAAAhC,EAAA;CAAA,IAAAkC;CAAA,IAAAlC,EAAA,QAAAO,WAAAP,EAAA,QAAAyB,QAAA;EACeS,MAAA,OAAAC,SAAA;GACdV,OAAOlB,QAAQ7D,IAAE,CAAC;EAAC;EACpBsD,EAAA,MAAAO;EAAAP,EAAA,MAAAyB;EAAAzB,EAAA,MAAAkC;CAAA,OAAAA,MAAAlC,EAAA;CAAA,IAAAoC;CAAA,IAAApC,EAAA,QAAA8B,OAAA9B,EAAA,QAAAgC,OAAAhC,EAAA,QAAAkC,OAAAlC,EAAA,QAAA0B,MAAA1B,EAAA,QAAA2B,MAAA3B,EAAA,QAAA4B,IAAA;EAdIQ,MAAA;GAAA,GACDV;GAAwCW,mBACzBV;GACgDW,mBAChDV;GAElBW,eACcT;GACgDU,eAChDR;GAEdS,gBACeP;EAGlB;EAAClC,EAAA,MAAA8B;EAAA9B,EAAA,MAAAgC;EAAAhC,EAAA,MAAAkC;EAAAlC,EAAA,MAAA0B;EAAA1B,EAAA,MAAA2B;EAAA3B,EAAA,MAAA4B;EAAA5B,EAAA,MAAAoC;CAAA,OAAAA,MAAApC,EAAA;CAAA,OAfDoC;AAeE;AAIN,MAAaM,kBAAkBvI,SAAS2F,kBAAkB"}

package/dist/resources/storage/McpMemoryStorage.d.ts

@@ -1,6 +1,5 @@
 import { MCPStorage } from "./types.js";
 //#region src/resources/storage/McpMemoryStorage.d.ts
-declare const McpMemoryStorage: import("@assistant-ui/tap").Resource<MCPStorage, []>;
+export declare const McpMemoryStorage: import("@assistant-ui/tap").Resource<MCPStorage, []>;
 //#endregion
-export { McpMemoryStorage };
 //# sourceMappingURL=McpMemoryStorage.d.ts.map

package/dist/resources/storage/McpMemoryStorage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"McpMemoryStorage.d.ts","names":[],"sources":["../../../src/resources/storage/McpMemoryStorage.ts"],"mappings":";;cA6Ba,8CAAgB,SAAA"}
+{"version":3,"file":"McpMemoryStorage.d.ts","names":[],"sources":["../../../src/resources/storage/McpMemoryStorage.ts"],"mappings":";;qBA6Ba,8CAAgB,SAAA"}

package/dist/resources/storage/types.d.ts

@@ -2,17 +2,19 @@ import { MCPCustomServerRecord } from "../../mcp-scope.js";
 import { MCPPersistedAuthState } from "../../auth/types.js";
 import { ResourceElement } from "@assistant-ui/tap";
 //#region src/resources/storage/types.d.ts
-type MCPStorage = {
+export type MCPStorage = {
   /**
    * Stable identity of the backing store. Two storages with the same scopeId
-   * must read and write the same persisted data. When present, server
-   * connections and the OAuth write fence key on it, so swapping to a
-   * differently-scoped storage reconnects instead of leaving a live OAuth flow
-   * on the replaced store, and clearing through a same-scoped replacement still
-   * waits for writes queued against the storage it replaced. When absent, the
-   * fence falls back to object identity while connections never re-key at all,
-   * so a storage rebuilt on every render has to declare a scopeId; without one
-   * a clear runs unfenced against the writes queued by the object it replaced.
+   * must read and write the same persisted data. When present, custom servers,
+   * server connections, and the OAuth write fence key on it. Swapping to a
+   * differently-scoped storage rehydrates its custom servers and reconnects
+   * authenticated servers instead of retaining data or a live OAuth flow from
+   * the replaced store. Clearing through a same-scoped replacement still waits
+   * for writes queued against the storage it replaced. When absent, the fence
+   * falls back to object identity while custom servers and connections never
+   * re-key. Replacing an unscoped storage can therefore persist the previous
+   * store's custom servers into the replacement, and a clear runs unfenced
+   * against writes queued by the object it replaced.
    */
   scopeId?: string;
   loadCustomServers: () => Promise<MCPCustomServerRecord[]>;
@@ -21,7 +23,6 @@ type MCPStorage = {
   saveAuthState: (serverId: string, state: MCPPersistedAuthState) => Promise<void>;
   clearAuthState: (serverId: string) => Promise<void>;
 };
-type MCPStorageElement = ResourceElement<MCPStorage>;
+export type MCPStorageElement = ResourceElement<MCPStorage>;
 //#endregion
-export { MCPStorage, MCPStorageElement };
 //# sourceMappingURL=types.d.ts.map

package/dist/resources/storage/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","names":[],"sources":["../../../src/resources/storage/types.ts"],"mappings":";;;;KAIY;;;;;;;;;;;;EAYV;EACA,yBAAyB,QAAQ;EACjC,oBAAoB,SAAS,4BAA4B;EACzD,gBAAgB,qBAAqB,QAAQ;EAC7C,gBACE,kBACA,OAAO,0BACJ;EACL,iBAAiB,qBAAqB;;KAG5B,oBAAoB,gBAAgB"}
+{"version":3,"file":"types.d.ts","names":[],"sources":["../../../src/resources/storage/types.ts"],"mappings":";;;;YAIY;;;;;;;;;;;;;;EAcV;EACA,yBAAyB,QAAQ;EACjC,oBAAoB,SAAS,4BAA4B;EACzD,gBAAgB,qBAAqB,QAAQ;EAC7C,gBACE,kBACA,OAAO,0BACJ;EACL,iBAAiB,qBAAqB;;YAG5B,oBAAoB,gBAAgB"}

package/dist/resources/validateElicitationContent.d.ts

@@ -3,7 +3,6 @@ type ValidationError = {
   property: string;
   message: string;
 };
-declare const validateElicitationContent: (requestedSchema: unknown, content: Record<string, unknown>) => readonly ValidationError[];
+export declare const validateElicitationContent: (requestedSchema: unknown, content: Record<string, unknown>) => readonly ValidationError[];
 //#endregion
-export { validateElicitationContent };
 //# sourceMappingURL=validateElicitationContent.d.ts.map

package/dist/resources/validateElicitationContent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validateElicitationContent.d.ts","names":[],"sources":["../../src/resources/validateElicitationContent.ts"],"mappings":";KAAK;EACH;EACA;;cA+BW,6BACX,0BACA,SAAS,qCACC"}
+{"version":3,"file":"validateElicitationContent.d.ts","names":[],"sources":["../../src/resources/validateElicitationContent.ts"],"mappings":";KAAK;EACH;EACA;;qBA+BW,6BACX,0BACA,SAAS,qCACC"}

package/dist/utils/createMcpId.d.ts

@@ -3,7 +3,6 @@
  * Both forms are alphanumeric or hyphenated, so neither can contain the
  * separators `assertValidServerId` reserves.
  */
-declare const createMcpId: () => string;
+export declare const createMcpId: () => string;
 //#endregion
-export { createMcpId };
 //# sourceMappingURL=createMcpId.d.ts.map

package/dist/utils/createMcpId.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createMcpId.d.ts","names":[],"sources":["../../src/utils/createMcpId.ts"],"mappings":";;;;;cAMa"}
+{"version":3,"file":"createMcpId.d.ts","names":[],"sources":["../../src/utils/createMcpId.ts"],"mappings":";;;;;qBAMa"}

package/dist/utils/invokeMcpCallback.d.ts

@@ -1,5 +1,4 @@
 //#region src/utils/invokeMcpCallback.d.ts
-declare const invokeMcpCallback: <TArgs extends unknown[]>(name: string, callback: ((...args: TArgs) => void) | undefined, ...args: TArgs) => void;
+export declare const invokeMcpCallback: <TArgs extends unknown[]>(name: string, callback: ((...args: TArgs) => void) | undefined, ...args: TArgs) => void;
 //#endregion
-export { invokeMcpCallback };
 //# sourceMappingURL=invokeMcpCallback.d.ts.map

package/dist/utils/invokeMcpCallback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invokeMcpCallback.d.ts","names":[],"sources":["../../src/utils/invokeMcpCallback.ts"],"mappings":";cAEa,oBAAqB,yBAChC,cACA,eAAe,MAAM,gCAClB,MAAM"}
+{"version":3,"file":"invokeMcpCallback.d.ts","names":[],"sources":["../../src/utils/invokeMcpCallback.ts"],"mappings":";qBAEa,oBAAqB,yBAChC,cACA,eAAe,MAAM,gCAClB,MAAM"}

package/dist/utils/serverId.d.ts

@@ -1,6 +1,5 @@
 //#region src/utils/serverId.d.ts
-declare function assertValidServerId(id: string): void;
-declare function assertUniqueServerIds(ids: Iterable<string>): void;
+export declare function assertValidServerId(id: string): void;
+export declare function assertUniqueServerIds(ids: Iterable<string>): void;
 //#endregion
-export { assertUniqueServerIds, assertValidServerId };
 //# sourceMappingURL=serverId.d.ts.map

package/dist/utils/serverId.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serverId.d.ts","names":[],"sources":["../../src/utils/serverId.ts"],"mappings":";iBAIgB,oBAAoB;iBAgBpB,sBAAsB,KAAK"}
+{"version":3,"file":"serverId.d.ts","names":[],"sources":["../../src/utils/serverId.ts"],"mappings":";wBAIgB,oBAAoB;wBAgBpB,sBAAsB,KAAK"}

package/dist/utils/serverUrl.d.ts

@@ -1,8 +1,7 @@
 import { MCPPersistedAuthState } from "../auth/types.js";
 //#region src/utils/serverUrl.d.ts
-declare const normalizeMcpServerUrl: (serverUrl: string) => string;
-declare const isAuthStateForServerUrl: (state: MCPPersistedAuthState | null, serverUrl: string) => boolean;
-declare const hasPersistedCredentials: (state: MCPPersistedAuthState | null) => boolean;
+export declare const normalizeMcpServerUrl: (serverUrl: string) => string;
+export declare const isAuthStateForServerUrl: (state: MCPPersistedAuthState | null, serverUrl: string) => boolean;
+export declare const hasPersistedCredentials: (state: MCPPersistedAuthState | null) => boolean;
 //#endregion
-export { hasPersistedCredentials, isAuthStateForServerUrl, normalizeMcpServerUrl };
 //# sourceMappingURL=serverUrl.d.ts.map

package/dist/utils/serverUrl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serverUrl.d.ts","names":[],"sources":["../../src/utils/serverUrl.ts"],"mappings":";;cAEa,wBAAyB;cAGzB,0BACX,OAAO,8BACP;cAaW,0BACX,OAAO"}
+{"version":3,"file":"serverUrl.d.ts","names":[],"sources":["../../src/utils/serverUrl.ts"],"mappings":";;qBAEa,wBAAyB;qBAGzB,0BACX,OAAO,8BACP;qBAaW,0BACX,OAAO"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@assistant-ui/react-mcp",
-  "version": "0.1.17",
+  "version": "0.1.19",
   "description": "MCP server configuration and connection primitives for @assistant-ui",
   "keywords": [
     "mcp",
@@ -27,13 +27,13 @@
   ],
   "sideEffects": false,
   "dependencies": {
-    "@assistant-ui/core": "^0.3.18",
-    "@assistant-ui/store": "^0.3.13",
-    "@assistant-ui/tap": "^0.9.17",
+    "@assistant-ui/core": "^0.3.20",
+    "@assistant-ui/store": "^0.3.14",
+    "@assistant-ui/tap": "^0.9.18",
     "@modelcontextprotocol/client": "^2.0.0",
     "@modelcontextprotocol/core": "^2.0.0",
     "@radix-ui/react-primitive": "^2.1.10",
-    "assistant-stream": "^0.3.42"
+    "assistant-stream": "^0.3.44"
   },
   "peerDependencies": {
     "@types/react": "*",
@@ -45,13 +45,13 @@
     }
   },
   "devDependencies": {
-    "@assistant-ui/x-buildutils": "0.0.26",
-    "@testing-library/dom": "^10.4.1",
+    "@assistant-ui/x-buildutils": "0.0.28",
+    "@testing-library/dom": "^10.4.2",
     "@testing-library/react": "^16.3.3",
-    "@types/react": "^19.2.18",
+    "@types/react": "^19.3.0",
     "jsdom": "^30.0.1",
-    "react": "^19.2.8",
-    "vitest": "^4.1.11"
+    "react": "^19.3.0",
+    "vitest": "^5.0.1"
   },
   "publishConfig": {
     "access": "public",
@@ -69,6 +69,7 @@
   "scripts": {
     "build": "aui-build",
     "test": "vitest run",
+    "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
     "test:watch": "vitest"
   }
 }

package/src/hooks/useMcpOAuthCallback.test.ts

@@ -2,6 +2,7 @@
 
 import {
   createElement,
+  StrictMode,
   Suspense,
   startTransition,
   type PropsWithChildren,
@@ -171,6 +172,58 @@ describe("useMcpOAuthCallback", () => {
     expect(onCompleteB).not.toHaveBeenCalled();
     expect(onCompleteA).toHaveBeenCalledWith("docs");
   });
+
+  it("keeps the newer callback's result when an older attempt settles late", async () => {
+    const secondUrl =
+      "https://app.example.com/oauth/callback?state=aui-mcp%3AZG9jcw.second";
+    let rejectFirst!: (err: Error) => void;
+    mocks.completeAuth.mockReturnValueOnce(
+      new Promise<void>((_resolve, reject) => {
+        rejectFirst = reject;
+      }),
+    );
+    mocks.completeAuth.mockResolvedValueOnce();
+    const onComplete = vi.fn();
+    const onError = vi.fn();
+
+    const { result, rerender } = renderHook(
+      ({ url }) => useMcpOAuthCallback({ url, onComplete, onError }),
+      { initialProps: { url: callbackUrl } },
+    );
+    await waitFor(() => expect(mocks.completeAuth).toHaveBeenCalledOnce());
+
+    rerender({ url: secondUrl });
+    await waitFor(() => expect(result.current.status).toBe("done"));
+
+    // The first attempt only fails once the second has already succeeded.
+    await act(async () => {
+      rejectFirst(new Error("authorization code expired"));
+      await Promise.resolve();
+    });
+
+    expect(result.current).toMatchObject({ status: "done", error: null });
+    expect(onError).not.toHaveBeenCalled();
+    expect(onComplete).toHaveBeenCalledExactlyOnceWith("docs");
+  });
+
+  // Strict Mode tears the effect down and remounts it without starting a new
+  // attempt, so the one already running must still publish its result.
+  it("publishes the result under Strict Mode's remount", async () => {
+    mocks.completeAuth.mockResolvedValueOnce();
+    const onComplete = vi.fn();
+
+    const { result } = renderHook(
+      () => useMcpOAuthCallback({ url: callbackUrl, onComplete }),
+      {
+        wrapper: ({ children }: PropsWithChildren) =>
+          createElement(StrictMode, null, children),
+      },
+    );
+
+    await waitFor(() => expect(result.current.status).toBe("done"));
+    expect(mocks.completeAuth).toHaveBeenCalledOnce();
+    expect(onComplete).toHaveBeenCalledExactlyOnceWith("docs");
+  });
 });
 
 describe("createMcpOAuthCallbackError", () => {

package/src/hooks/useMcpOAuthCallback.tsx

@@ -62,6 +62,15 @@ export function useMcpOAuthCallback(
     if (startedRef.current === url) return;
     startedRef.current = url;
 
+    // A callback page can be handed a second login URL while the first
+    // completeAuth is still in flight. That attempt keeps running, so it
+    // publishes only while its own URL is still the one being attempted;
+    // otherwise an older failure would overwrite the newer attempt's success.
+    // The check is against `startedRef` rather than a teardown flag so that
+    // Strict Mode's unmount-remount, which starts no new attempt, still
+    // publishes the result of the one already running.
+    const superseded = () => startedRef.current !== url;
+
     void (async () => {
       let serverId: string | null = null;
       try {
@@ -72,10 +81,13 @@ export function useMcpOAuthCallback(
         if (!serverId) {
           throw new Error("state was not created by assistant-ui MCP");
         }
+        if (superseded()) return;
         setResult({ status: "running", serverId, error: null });
         await aui.mcp.server({ id: serverId }).completeAuth(url);
+        if (superseded()) return;
         setResult({ status: "done", serverId, error: null });
       } catch (err) {
+        if (superseded()) return;
         const error = createMcpOAuthCallbackError(err, serverId);
         setResult({ status: "error", serverId, error });
         invokeMcpCallback("onError", optsRef.current.onError, error);

package/src/index.ts

@@ -2,7 +2,8 @@
 import "./mcp-scope";
 
 // Resource — the entry point. Mount via:
-//   useAui({ mcp: McpManagerResource({ connectors }) })
+//   const config = AuiConfig({ mcp: McpManagerResource({ connectors }) })
+//   <AssistantRuntimeProvider runtime={runtime} config={config}>…</AssistantRuntimeProvider>
 export {
   McpManagerResource,
   type McpManagerResourceProps,