@mcp-use/client 0.0.0-bootstrap.0 → 2.0.0-beta.0

package/dist/auth/callback.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Completes the browser OAuth callback once per page load.
+ *
+ * This host validates the CSRF state and restores the browser provider. The MCP
+ * SDK transport owns callback parameter parsing, issuer validation, OAuth error
+ * handling, and the authorization-code exchange.
+ */
+export declare function onMcpAuthorization(): Promise<void>;
+//# sourceMappingURL=callback.d.ts.map

package/dist/auth/callback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback.d.ts","sourceRoot":"","sources":["../../src/auth/callback.ts"],"names":[],"mappings":"AA4MA;;;;;;GAMG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAGlD"}

package/dist/auth/flow.d.ts

@@ -0,0 +1,23 @@
+import { type OAuthClientProvider } from "@modelcontextprotocol/client";
+/**
+ * True if the error (or a wrapped cause) is an HTTP 401 / UnauthorizedError
+ * that should trigger the OAuth completion dance.
+ */
+export declare function isUnauthorized(err: unknown, depth?: number): boolean;
+/**
+ * Complete an in-progress or required OAuth authorization for `provider`.
+ *
+ * - Node loopback providers expose `getAuthorizationCode()`; we await the
+ *   code and finish the token exchange.
+ * - Browser providers open a popup/redirect; we wait for the callback page
+ *   (`onMcpAuthorization`) to exchange the code and signal success over
+ *   `BroadcastChannel` / `postMessage`.
+ *
+ * Safe to call when the SDK transport already invoked `auth()` on a 401
+ * (Node: `hasPendingFlow`; we skip a duplicate `auth()` in that case).
+ */
+export declare function completeOAuthFlow(provider: OAuthClientProvider, serverUrl: string, options?: {
+    timeoutMs?: number;
+    fetchFn?: typeof fetch;
+}): Promise<void>;
+//# sourceMappingURL=flow.d.ts.map

package/dist/auth/flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow.d.ts","sourceRoot":"","sources":["../../src/auth/flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AAgBtC;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAgB/D;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,mBAAmB,EAC7B,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO,GAC3D,OAAO,CAAC,IAAI,CAAC,CAyBf"}

package/dist/auth/node.d.ts

@@ -0,0 +1,100 @@
+import type { OAuthClientInformation, OAuthClientInformationContext, OAuthClientMetadata, OAuthClientProvider, OAuthDiscoveryState, OAuthTokens } from "@modelcontextprotocol/client";
+import type { KVStore } from "./storage.js";
+import { type OAuthSessionStoreOptions } from "./session-store.js";
+export interface NodeOAuthOptions extends OAuthSessionStoreOptions {
+    /** Preferred loopback port. Default 33418. Walks up by `portRange` on EADDRINUSE. */
+    preferredPort?: number;
+    portRange?: number;
+    /** Override the on-disk store directory (mostly for tests). */
+    baseDir?: string;
+    /** Override KV store entirely (mostly for tests). */
+    kvStore?: KVStore;
+    /** Loopback wait timeout. Default 5 minutes. */
+    authTimeoutMs?: number;
+    /** Suppress the default `open(url)` browser launch (test hook). */
+    openBrowser?: (url: string) => Promise<void> | void;
+}
+export declare class OAuthFlowError extends Error {
+    readonly code: string;
+    readonly description?: string;
+    constructor(code: string, description?: string);
+}
+/**
+ * Node/CLI OAuth client provider for MCP. Owns a localhost loopback callback
+ * server, opens the user's browser, and resolves the authorization code via
+ * `getAuthorizationCode()` — designed for the orchestrator pattern in
+ * `useMcp.ts:1121-1145`.
+ *
+ * Use the static `create()` factory; the constructor is internal because
+ * port reservation is async.
+ */
+export declare class NodeOAuthClientProvider implements OAuthClientProvider {
+    readonly serverUrl: string;
+    readonly port: number;
+    private session;
+    private kv;
+    private authTimeoutMs;
+    private openBrowserOverride?;
+    private server;
+    /** Currently in-flight deferred — used to prevent overlapping flows. */
+    private pending;
+    /** Latest deferred (settled or in-flight) — what `getAuthorizationCode()` returns. */
+    private lastFlow;
+    private pendingTimer;
+    private constructor();
+    static create(serverUrl: string, options?: NodeOAuthOptions): Promise<NodeOAuthClientProvider>;
+    get storageKeyPrefix(): string;
+    get serverUrlHash(): string;
+    get redirectUrl(): string;
+    get clientMetadata(): OAuthClientMetadata;
+    get clientMetadataUrl(): string | undefined;
+    tokens(ctx?: OAuthClientInformationContext): Promise<OAuthTokens | undefined>;
+    saveTokens(tokens: OAuthTokens, ctx?: OAuthClientInformationContext): Promise<void>;
+    clientInformation(ctx?: OAuthClientInformationContext): Promise<OAuthClientInformation | undefined>;
+    saveClientInformation(info: OAuthClientInformation, ctx?: OAuthClientInformationContext): Promise<void>;
+    codeVerifier(): Promise<string>;
+    saveCodeVerifier(codeVerifier: string): Promise<void>;
+    invalidateCredentials(scope: "all" | "client" | "tokens" | "verifier" | "discovery"): Promise<void>;
+    /** Persist OAuth discovery state (SEP-2352). Delegated to the session store. */
+    saveDiscoveryState(state: OAuthDiscoveryState): Promise<void>;
+    /** Return previously saved OAuth discovery state, or `undefined`. */
+    discoveryState(): Promise<OAuthDiscoveryState | undefined>;
+    /**
+     * Bind the loopback server, set up the pending-code deferred, and ask the
+     * platform to open the user's browser. Does NOT await the code; the
+     * orchestrator awaits via `getAuthorizationCode()`.
+     */
+    redirectToAuthorization(authorizationUrl: URL): Promise<void>;
+    /**
+     * Resolves with the authorization code captured by the loopback callback.
+     * Must be called after `redirectToAuthorization()`. Returns the same
+     * promise whether the callback has fired or not — callers may subscribe
+     * before or after.
+     */
+    getAuthorizationCode(): Promise<string>;
+    /**
+     * Cancel an in-progress flow (timeout, SIGINT, etc.) and close the loopback.
+     */
+    dispose(): void;
+    /** Best-effort port for tests / status output. */
+    get callbackPort(): number;
+    /**
+     * True if `redirectToAuthorization()` has been called and we're awaiting
+     * a callback (loopback bound, browser opened). Lets orchestrators detect
+     * when the SDK transport has already kicked off the flow on a 401, so they
+     * can skip straight to `getAuthorizationCode()` instead of calling `auth()`
+     * again (which would throw "already in progress").
+     */
+    get hasPendingFlow(): boolean;
+    private startLoopback;
+    private stopLoopback;
+    private resolvePending;
+    private rejectPending;
+    private handleCallback;
+}
+/**
+ * Creates the Node OAuth provider used by the root client entry.
+ */
+export declare function createOAuthProvider(serverUrl: string, options?: NodeOAuthOptions): Promise<OAuthClientProvider>;
+export type { NodeOAuthOptions as OAuthProviderOptions };
+//# sourceMappingURL=node.d.ts.map

package/dist/auth/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/auth/node.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACZ,MAAM,8BAA8B,CAAC;AAItC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,oBAAoB,CAAC;AAM5B,MAAM,WAAW,gBAAiB,SAAQ,wBAAwB;IAChE,qFAAqF;IACrF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gDAAgD;IAChD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACrD;AAED,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;gBAClB,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM;CAM/C;AA+DD;;;;;;;;GAQG;AACH,qBAAa,uBAAwB,YAAW,mBAAmB;IACjE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,EAAE,CAAU;IACpB,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,mBAAmB,CAAC,CAAwC;IAEpE,OAAO,CAAC,MAAM,CAAuB;IACrC,wEAAwE;IACxE,OAAO,CAAC,OAAO,CAAiC;IAChD,sFAAsF;IACtF,OAAO,CAAC,QAAQ,CAAiC;IACjD,OAAO,CAAC,YAAY,CAA+B;IAEnD,OAAO;WAeM,MAAM,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,uBAAuB,CAAC;IA+CnC,IAAI,gBAAgB,IAAI,MAAM,CAE7B;IAED,IAAI,aAAa,IAAI,MAAM,CAE1B;IAID,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,cAAc,IAAI,mBAAmB,CAExC;IAED,IAAI,iBAAiB,IAAI,MAAM,GAAG,SAAS,CAE1C;IAED,MAAM,CACJ,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAInC,UAAU,CACR,MAAM,EAAE,WAAW,EACnB,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,IAAI,CAAC;IAIhB,iBAAiB,CACf,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC;IAI9C,qBAAqB,CACnB,IAAI,EAAE,sBAAsB,EAC5B,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,IAAI,CAAC;IAIhB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAI/B,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,qBAAqB,CACnB,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,GAC5D,OAAO,CAAC,IAAI,CAAC;IAIhB,gFAAgF;IAChF,kBAAkB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D,qEAAqE;IACrE,cAAc,IAAI,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAI1D;;;;OAIG;IACG,uBAAuB,CAAC,gBAAgB,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CnE;;;;;OAKG;IACH,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC;IAWvC;;OAEG;IACH,OAAO,IAAI,IAAI;IAQf,kDAAkD;IAClD,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;;;;OAMG;IACH,IAAI,cAAc,IAAI,OAAO,CAE5B;YAIa,aAAa;IAe3B,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,cAAc;CAqCvB;AAmBD;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CAE9B;AAED,YAAY,EAAE,gBAAgB,IAAI,oBAAoB,EAAE,CAAC"}

package/dist/auth/popup.d.ts

@@ -0,0 +1,67 @@
+/** Channel name shared by the popup callback notifier and every listener. */
+export declare const MCP_AUTH_BROADCAST_CHANNEL = "mcp_auth_callback";
+/** Result message type posted by the OAuth callback page. */
+export declare const MCP_AUTH_CALLBACK_MESSAGE_TYPE = "mcp_auth_callback";
+/**
+ * Payload shape posted by the OAuth callback page over `postMessage` /
+ * `BroadcastChannel`. `state` and `serverUrlHash` are used to scope a result
+ * to the flow / server that initiated it; both are optional for backward
+ * compatibility with callback pages built against older versions.
+ */
+export interface McpAuthCallbackMessage {
+    type?: string;
+    success?: boolean;
+    error?: string;
+    /** OAuth `state` parameter of the originating authorization request. */
+    state?: string;
+    /** Hash of the server URL the flow authenticated against. */
+    serverUrlHash?: string;
+}
+/** Terminal outcome of an opener-owned popup flow. */
+type AuthPopupResult = {
+    kind: "success";
+} | {
+    kind: "error";
+    error: string;
+} | {
+    kind: "cancelled";
+} | {
+    kind: "timeout";
+};
+interface RunAuthPopupOptions {
+    /**
+     * The popup window handle returned by `window.open`. May be `null` when the
+     * popup was blocked or opened out-of-band (e.g. a manual fallback link); the
+     * runner then relies on the message / storage / timeout signals only.
+     */
+    popup: globalThis.Window | null;
+    /** OAuth `state` parameter for this flow. Used to ignore unrelated results. */
+    state: string | null;
+    /** localStorage key under which the flow's tokens are persisted on success. */
+    tokensKey: string;
+    /** Overall flow timeout. Default 5 minutes. */
+    timeoutMs?: number;
+    /** Interval for the `popup.closed` poll. Default 1s (matches auth0-spa-js). */
+    closePollMs?: number;
+    /**
+     * How long to keep waiting for a result after the popup reports closed
+     * without tokens, before settling `cancelled`. COOP browsing-context-group
+     * swaps (popup navigating cross-origin) make `popup.closed` report `true`
+     * while the real window is still open mid-flow, so a closed signal is only
+     * a soft hint — message/storage listeners stay alive during this grace
+     * window and can still settle `success`. Default 20s.
+     */
+    closeGraceMs?: number;
+    /**
+     * Origin to accept `postMessage` results from. Defaults to the current
+     * window origin. BroadcastChannel results are same-origin by definition.
+     */
+    expectedOrigin?: string;
+}
+/**
+ * Run an opener-owned OAuth popup flow and resolve once it reaches a terminal
+ * outcome. Never rejects — all failure modes map to an {@link AuthPopupResult}.
+ */
+export declare function runAuthPopup({ popup, state, tokensKey, timeoutMs, closePollMs, closeGraceMs, expectedOrigin, }: RunAuthPopupOptions): Promise<AuthPopupResult>;
+export {};
+//# sourceMappingURL=popup.d.ts.map

package/dist/auth/popup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"popup.d.ts","sourceRoot":"","sources":["../../src/auth/popup.ts"],"names":[],"mappings":"AAsBA,6EAA6E;AAC7E,eAAO,MAAM,0BAA0B,sBAAsB,CAAC;AAE9D,6DAA6D;AAC7D,eAAO,MAAM,8BAA8B,sBAAsB,CAAC;AAElE;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,sDAAsD;AACtD,KAAK,eAAe,GAChB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAExB,UAAU,mBAAmB;IAC3B;;;;OAIG;IACH,KAAK,EAAE,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC;IAChC,+EAA+E;IAC/E,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAYD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,EAC3B,KAAK,EACL,KAAK,EACL,SAAS,EACT,SAAsB,EACtB,WAAkB,EAClB,YAAqB,EACrB,cAA4E,GAC7E,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC,CAoIhD"}

package/dist/auth/session-store.d.ts

@@ -0,0 +1,114 @@
+import type { OAuthClientInformation, OAuthClientInformationContext, OAuthClientMetadata, OAuthDiscoveryState, StoredOAuthTokens } from "@modelcontextprotocol/client";
+import type { KVStore } from "./storage.js";
+/**
+ * Internal type for storing OAuth state during the OAuth flow.
+ * @internal
+ */
+export interface StoredState {
+    expiry: number;
+    serverUrlHash: string;
+    providerOptions: {
+        serverUrl: string;
+        storageKeyPrefix: string;
+        clientName: string;
+        clientUri: string;
+        callbackUrl: string;
+        oauthProxyUrl?: string;
+        clientMetadataUrl?: string;
+        staticClientInfo?: OAuthClientInformation;
+        scope?: string;
+    };
+    flowType?: "popup" | "redirect";
+    returnUrl?: string;
+}
+/**
+ * Common options for OAuthSessionStore.
+ *
+ * @internal
+ */
+export interface OAuthSessionStoreOptions {
+    storageKeyPrefix?: string;
+    clientName?: string;
+    clientUri?: string;
+    logoUri?: string;
+    callbackUrl?: string;
+    clientMetadataUrl?: string;
+    /** Whether this platform may persist confidential-client credentials. */
+    allowClientSecret?: boolean;
+    /** OAuth scope string forwarded to the SDK via clientMetadata.scope. */
+    scope?: string;
+}
+/**
+ * Options passed by the platform provider when persisting an authorization
+ * request prior to redirecting the user agent.
+ *
+ * @internal
+ */
+interface StoreAuthorizationStateOptions {
+    /**
+     * Platform-specific provider options that should round-trip through the
+     * stored state so the callback handler can rebuild the provider.
+     */
+    extraProviderOptions?: Record<string, unknown>;
+    flowType?: "popup" | "redirect";
+    returnUrl?: string;
+}
+/**
+ * Platform-neutral helper that owns OAuth session persistence and refresh
+ * logic. Used by `BrowserOAuthClientProvider` and `NodeOAuthClientProvider`
+ * — each platform provider implements `OAuthClientProvider` directly and
+ * delegates the generic methods here.
+ *
+ * @internal
+ */
+export declare class OAuthSessionStore {
+    readonly serverUrl: string;
+    readonly storageKeyPrefix: string;
+    readonly serverUrlHash: string;
+    readonly clientName: string;
+    readonly clientUri: string;
+    readonly logoUri: string;
+    readonly callbackUrl: string;
+    readonly clientMetadataUrl?: string;
+    readonly scope?: string;
+    private store;
+    private allowClientSecret;
+    constructor(serverUrl: string, options: OAuthSessionStoreOptions, store: KVStore);
+    getKey(keySuffix: string): string;
+    static hashString(str: string): string;
+    get redirectUrl(): string;
+    get clientMetadata(): OAuthClientMetadata;
+    private credentialKey;
+    private readCredential;
+    tokens(ctx?: OAuthClientInformationContext): Promise<StoredOAuthTokens | undefined>;
+    saveTokens(tokens: StoredOAuthTokens, ctx?: OAuthClientInformationContext): Promise<void>;
+    clientInformation(ctx?: OAuthClientInformationContext): Promise<OAuthClientInformation | undefined>;
+    saveClientInformation(clientInformation: OAuthClientInformation, ctx?: OAuthClientInformationContext): Promise<void>;
+    saveCodeVerifier(codeVerifier: string): Promise<void>;
+    codeVerifier(): Promise<string>;
+    invalidateCredentials(scope: "all" | "client" | "tokens" | "verifier" | "discovery"): Promise<void>;
+    /**
+     * Persist the OAuth discovery state (authorization-server metadata resolved
+     * during the auth flow). Stored with the same durability as the code
+     * verifier so the callback leg can verify it is exchanging the code at the
+     * same authorization server the redirect targeted (SEP-2352 mix-up defense).
+     */
+    saveDiscoveryState(state: OAuthDiscoveryState): Promise<void>;
+    /** Return the previously saved discovery state, or `undefined`. */
+    discoveryState(): Promise<OAuthDiscoveryState | undefined>;
+    /**
+     * Generates and persists `StoredState` for an authorization request,
+     * appends the `state` query param to the URL, and persists the sanitized
+     * URL to `last_auth_url` so it can be replayed on popup-blocker fallback.
+     *
+     * @returns The sanitized authorization URL string with the `state` param appended.
+     */
+    storeAuthorizationState(authorizationUrl: URL, opts?: StoreAuthorizationStateOptions): Promise<string>;
+    /**
+     * Return the token endpoint from SDK-managed discovery state. The SDK
+     * persists this state during `auth()`, avoiding a second discovery flow.
+     */
+    getTokenEndpoint(): Promise<string | null>;
+}
+export {};
+//# sourceMappingURL=session-store.d.ts.map

package/dist/auth/session-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.d.ts","sourceRoot":"","sources":["../../src/auth/session-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;QAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,QAAQ,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,UAAU,8BAA8B;IACtC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,QAAQ,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,OAAO,CAAC,KAAK,CAAU;IACvB,OAAO,CAAC,iBAAiB,CAAU;gBAGjC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,wBAAwB,EACjC,KAAK,EAAE,OAAO;IAyBhB,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAIjC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAYtC,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,cAAc,IAAI,mBAAmB,CAWxC;IAED,OAAO,CAAC,aAAa;YASP,cAAc;IAyCtB,MAAM,CACV,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAInC,UAAU,CACd,MAAM,EAAE,iBAAiB,EACzB,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,IAAI,CAAC;IAWV,iBAAiB,CACrB,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC;IA6CxC,qBAAqB,CACzB,iBAAiB,EAAE,sBAAsB,EACzC,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,IAAI,CAAC;IAkBV,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAW/B,qBAAqB,CACzB,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,GAC5D,OAAO,CAAC,IAAI,CAAC;IAsChB;;;;;OAKG;IACG,kBAAkB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAInE,mEAAmE;IAC7D,cAAc,IAAI,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAahE;;;;;;OAMG;IACG,uBAAuB,CAC3B,gBAAgB,EAAE,GAAG,EACrB,IAAI,GAAE,8BAAmC,GACxC,OAAO,CAAC,MAAM,CAAC;IAiClB;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAMjD"}

package/dist/auth/storage-file.d.ts

@@ -0,0 +1,18 @@
+import type { KVStore } from "./storage.js";
+/**
+ * `KVStore` implementation backed by `~/.mcp-use/oauth/<serverUrlHash>/`.
+ *
+ * @internal
+ */
+export declare class FileKVStore implements KVStore {
+    readonly dir: string;
+    constructor(serverUrlHash: string, baseDir?: string);
+    private ensureDir;
+    private sanitize;
+    private pathFor;
+    get(key: string): string | null;
+    set(key: string, value: string): void;
+    remove(key: string): void;
+    keys(): string[];
+}
+//# sourceMappingURL=storage-file.d.ts.map

package/dist/auth/storage-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-file.d.ts","sourceRoot":"","sources":["../../src/auth/storage-file.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAI5C;;;;GAIG;AACH,qBAAa,WAAY,YAAW,OAAO;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBAET,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;IAMnD,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,OAAO;IAIf,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAU/B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAerC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAOzB,IAAI,IAAI,MAAM,EAAE;CAIjB"}

package/dist/auth/storage.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Minimal key/value storage abstraction used by OAuthSessionStore.
+ *
+ * Browser-safe module — Node filesystem KV lives in `storage-file.ts`.
+ *
+ * @internal
+ */
+export interface KVStore {
+    get(key: string): Promise<string | null> | string | null;
+    set(key: string, value: string): Promise<void> | void;
+    remove(key: string): Promise<void> | void;
+    keys(): Promise<string[]> | string[];
+}
+/**
+ * `KVStore` implementation backed by `globalThis.localStorage`.
+ *
+ * @internal
+ */
+export declare class LocalStorageKVStore implements KVStore {
+    get(key: string): string | null;
+    set(key: string, value: string): void;
+    remove(key: string): void;
+    keys(): string[];
+}
+//# sourceMappingURL=storage.d.ts.map

package/dist/auth/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/auth/storage.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,OAAO;IACtB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC;IACzD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACtD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1C,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC;CACtC;AAED;;;;GAIG;AACH,qBAAa,mBAAoB,YAAW,OAAO;IACjD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAI/B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAIrC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIzB,IAAI,IAAI,MAAM,EAAE;CAQjB"}

package/dist/auth/url.d.ts

@@ -0,0 +1,17 @@
+/**
+ * URL sanitization utility
+ *
+ * Sanitizes URLs to prevent security issues by:
+ * - Restricting to http/https protocols only
+ * - Encoding URL components properly
+ * - Validating hostnames
+ */
+/**
+ * Sanitizes a URL string by encoding all components and validating the protocol.
+ *
+ * @param raw - The raw URL string to sanitize
+ * @returns The sanitized URL as a string
+ * @throws Error if the URL is invalid or uses an unsupported protocol
+ */
+export declare function sanitizeUrl(raw: string): string;
+//# sourceMappingURL=url.d.ts.map

package/dist/auth/url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../src/auth/url.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CA+B/C"}

package/dist/code-mode/connector.d.ts

@@ -0,0 +1,27 @@
+import type { CallToolResult, Tool } from "@modelcontextprotocol/client";
+import type { MCPClient } from "../core/node.js";
+import { BaseConnector } from "../transport/base.js";
+export declare const CODE_MODE_AGENT_PROMPT = "\n## MCP Code Mode Tool Usage Guide\n\nYou have access to an MCP Code Mode Client that allows you to execute JavaScript/TypeScript code with access to registered tools. Follow this workflow:\n\n### 1. Tool Discovery Phase\n**Always start by discovering available tools:**\n- Tools are organized by server namespace (e.g., `server_name.tool_name`)\n- Use the `search_tools(query, detail_level)` function to find available tools\n- You can access `__tool_namespaces` to see all available server namespaces\n\n```javascript\n// Find all GitHub-related tools\nconst tools = await search_tools(\"github\");\nfor (const tool of tools) {\n    console.log(`${tool.server}.${tool.name}: ${tool.description}`);\n}\n\n// Get only tool names for quick overview\nconst tools = await search_tools(\"\", \"names\");\n```\n\n### 2. Interface Introspection\n**Understand tool contracts before using them:**\n- Use `search_tools` to get tool descriptions and input schemas\n- Look for \"Access as: server.tool(args)\" patterns in descriptions\n\n### 3. Code Execution Guidelines\n**When writing code:**\n- Use `await server.tool({ param: value })` syntax for all tool calls\n- Tools are async functions that return promises\n- You have access to standard JavaScript globals: `console`, `JSON`, `Math`, `Date`, etc.\n- All console output (`console.log`, `console.error`, etc.) is automatically captured and returned\n- Build properly structured input objects based on interface definitions\n- Handle errors appropriately with try/catch blocks\n- Chain tool calls by using results from previous calls\n\n### 4. Best Practices\n- **Discover first, code second**: Always explore available tools before writing execution code\n- **Respect namespaces**: Use full `server.tool` names to avoid conflicts\n- **Minimize Context**: Process large data in code, return only essential results\n- **Error handling**: Wrap tool calls in try/catch for robustness\n- **Data flow**: Chain tools by passing outputs as inputs to subsequent tools\n\n### 5. Available Runtime Context\n- `search_tools(query, detail_level)`: Function to discover tools\n- `__tool_namespaces`: Array of available server namespaces\n- All registered tools as `server.tool` functions\n- Standard JavaScript built-ins for data processing\n\n### Example Workflow\n\n```javascript\n// 1. Discover available tools\nconst github_tools = await search_tools(\"github pull request\");\nconsole.log(`Available GitHub PR tools: ${github_tools.map(t => t.name)}`);\n\n// 2. Call tools with proper parameters\nconst pr = await github.get_pull_request({\n    owner: \"facebook\",\n    repo: \"react\",\n    number: 12345\n});\n\n// 3. Process results\nlet result;\nif (pr.state === 'open' && pr.labels.some(l => l.name === 'bug')) {\n    // 4. Chain with other tools\n    await slack.post_message({\n        channel: \"#bugs\",\n        text: `\uD83D\uDC1B Bug PR needs review: ${pr.title}`\n    });\n    result = \"Notification sent\";\n} else {\n    result = \"No action needed\";\n}\n\n// 5. Return structured results\nreturn {\n    pr_number: pr.number,\n    pr_title: pr.title,\n    action_taken: result\n};\n```\n\nRemember: Always discover and understand available tools before attempting to use them in code execution.\n";
+/**
+ * CodeModeConnector provides a special "code mode" interface for executing JavaScript/TypeScript
+ * code with access to MCP tools. Unlike other connectors, it doesn't establish its own external
+ * connection - instead, it wraps an already-connected BaseMCPClient and exposes special tools
+ * (execute_code, search_tools) on top of it.
+ *
+ * Since there's no connection phase to perform, the connector is immediately ready to use
+ * (connected=true) upon construction. The connect() and disconnect() methods exist for
+ * lifecycle compatibility with the BaseConnector interface but don't manage actual connections.
+ */
+export declare class CodeModeConnector extends BaseConnector {
+    private mcpClient;
+    private _tools;
+    constructor(client: MCPClient);
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    get publicIdentifier(): Record<string, string>;
+    private _createToolsList;
+    get tools(): Tool[];
+    initialize(): Promise<any>;
+    callTool(name: string, args: Record<string, any>): Promise<CallToolResult>;
+}
+//# sourceMappingURL=connector.d.ts.map

package/dist/code-mode/connector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../../src/code-mode/connector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,eAAO,MAAM,sBAAsB,0rGAsFlC,CAAC;AAEF;;;;;;;;;GASG;AACH,qBAAa,iBAAkB,SAAQ,aAAa;IAClD,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,SAAS;IAOvB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAIxB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,IAAI,gBAAgB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE7C;IAED,OAAO,CAAC,gBAAgB;IA4DxB,IAAI,KAAK,IAAI,IAAI,EAAE,CAElB;IAEK,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC;IAK1B,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GACxB,OAAO,CAAC,cAAc,CAAC;CA2C3B"}

package/dist/code-mode/executor-e2b.d.ts

@@ -0,0 +1,46 @@
+import type { E2BExecutorOptions, MCPClient } from "../core/node.js";
+import { BaseCodeExecutor, type ExecutionResult } from "./executor.js";
+/**
+ * E2B-based code executor using remote sandboxes.
+ * Executes code in an E2B sandbox with tool calls proxied back to the host.
+ */
+export declare class E2BCodeExecutor extends BaseCodeExecutor {
+    private e2bApiKey;
+    private codeExecSandbox;
+    private SandboxClass;
+    private timeoutMs;
+    constructor(client: MCPClient, options: E2BExecutorOptions);
+    /**
+     * Lazy load E2B Sandbox class.
+     * This allows the library to work without E2B installed.
+     */
+    private ensureSandboxClass;
+    /**
+     * Get or create a dedicated sandbox for code execution.
+     */
+    private getOrCreateCodeExecSandbox;
+    /**
+     * Generate the shim code that exposes tools to the sandbox environment.
+     * Creates a bridge that intercepts tool calls and sends them back to host.
+     */
+    private generateShim;
+    /**
+     * Build the tool catalog for the shim.
+     * Returns a map of server names to their available tools.
+     */
+    private buildToolCatalog;
+    /**
+     * Execute JavaScript/TypeScript code in an E2B sandbox with MCP tool access.
+     * Tool calls are proxied back to the host via the bridge pattern.
+     *
+     * @param code - Code to execute
+     * @param timeout - Execution timeout in milliseconds (default: 30000)
+     */
+    execute(code: string, timeout?: number): Promise<ExecutionResult>;
+    /**
+     * Clean up the E2B sandbox.
+     * Should be called when the executor is no longer needed.
+     */
+    cleanup(): Promise<void>;
+}
+//# sourceMappingURL=executor-e2b.d.ts.map

package/dist/code-mode/executor-e2b.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor-e2b.d.ts","sourceRoot":"","sources":["../../src/code-mode/executor-e2b.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAErE,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAKvE;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,gBAAgB;IACnD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,eAAe,CAAwB;IAC/C,OAAO,CAAC,YAAY,CAAa;IACjC,OAAO,CAAC,SAAS,CAAS;gBAEd,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB;IAM1D;;;OAGG;YACW,kBAAkB;IAgBhC;;OAEG;YACW,0BAA0B;IAcxC;;;OAGG;IACH,OAAO,CAAC,YAAY;IA6FpB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAWxB;;;;;;OAMG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAAQ,GAAG,OAAO,CAAC,eAAe,CAAC;IAwKtE;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAW/B"}

package/dist/code-mode/executor-vm.d.ts

@@ -0,0 +1,39 @@
+import type { MCPClient, VMExecutorOptions } from "../core/node.js";
+import { BaseCodeExecutor, type ExecutionResult } from "./executor.js";
+/**
+ * Check if VM executor is available in the current environment
+ * This is a synchronous check that returns true if vm was already loaded
+ */
+export declare function isVMAvailable(): boolean;
+/**
+ * VM-based code executor using Node.js vm module.
+ * Executes code in an isolated V8 context with access to MCP tools.
+ */
+export declare class VMCodeExecutor extends BaseCodeExecutor {
+    private defaultTimeout;
+    private memoryLimitMb?;
+    constructor(client: MCPClient, options?: VMExecutorOptions);
+    /**
+     * Ensure VM module is loaded before execution
+     */
+    private ensureVMLoaded;
+    /**
+     * Execute JavaScript/TypeScript code with access to MCP tools.
+     *
+     * @param code - Code to execute
+     * @param timeout - Execution timeout in milliseconds (default: configured timeout or 30000)
+     */
+    execute(code: string, timeout?: number): Promise<ExecutionResult>;
+    /**
+     * Build the VM execution context with MCP tools and standard globals.
+     *
+     * @param logs - Array to capture console output
+     */
+    private _buildContext;
+    /**
+     * Clean up resources.
+     * VM executor doesn't need cleanup, but method kept for interface consistency.
+     */
+    cleanup(): Promise<void>;
+}
+//# sourceMappingURL=executor-vm.d.ts.map

package/dist/code-mode/executor-vm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor-vm.d.ts","sourceRoot":"","sources":["../../src/code-mode/executor-vm.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAsEvE;;;GAGG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAGvC;AAED;;;GAGG;AACH,qBAAa,cAAe,SAAQ,gBAAgB;IAClD,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,aAAa,CAAC,CAAS;gBAEnB,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,iBAAiB;IAS1D;;OAEG;YACW,cAAc;IAc5B;;;;;OAKG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAsEvE;;;;OAIG;YACW,aAAa;IA6F3B;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B"}

package/dist/code-mode/executor.d.ts

@@ -0,0 +1,66 @@
+import type { Tool } from "@modelcontextprotocol/client";
+import type { MCPClient } from "../core/node.js";
+export interface ExecutionResult {
+    result: unknown;
+    logs: string[];
+    error: string | null;
+    execution_time: number;
+}
+interface ToolSearchResult {
+    name: string;
+    server: string;
+    description?: string;
+    input_schema?: Tool["inputSchema"];
+}
+interface ToolSearchMeta {
+    total_tools: number;
+    namespaces: string[];
+    result_count: number;
+}
+export interface ToolSearchResponse {
+    meta: ToolSearchMeta;
+    results: ToolSearchResult[];
+}
+type SearchToolsFunction = (query?: string, detailLevel?: "names" | "descriptions" | "full") => Promise<ToolSearchResponse>;
+interface ToolNamespaceInfo {
+    serverName: string;
+    tools: Tool[];
+    session: any;
+}
+/**
+ * Abstract base class for code executors.
+ * Provides shared functionality for connecting to MCP servers and building tool contexts.
+ */
+export declare abstract class BaseCodeExecutor {
+    protected client: MCPClient;
+    protected _connecting: boolean;
+    constructor(client: MCPClient);
+    /**
+     * Execute code with access to MCP tools.
+     * @param code - The code to execute
+     * @param timeout - Execution timeout in milliseconds
+     */
+    abstract execute(code: string, timeout?: number): Promise<ExecutionResult>;
+    /**
+     * Clean up resources used by the executor.
+     * Should be called when the executor is no longer needed.
+     */
+    abstract cleanup(): Promise<void>;
+    /**
+     * Ensure all configured MCP servers are connected before execution.
+     * Prevents race conditions with a connection lock.
+     */
+    protected ensureServersConnected(): Promise<void>;
+    /**
+     * Get tool namespace information from all active MCP sessions.
+     * Filters out the internal code_mode server.
+     */
+    protected getToolNamespaces(): ToolNamespaceInfo[];
+    /**
+     * Create a search function for discovering available MCP tools.
+     * Used by code execution environments to find tools at runtime.
+     */
+    createSearchToolsFunction(): SearchToolsFunction;
+}
+export {};
+//# sourceMappingURL=executor.d.ts.map

package/dist/code-mode/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/code-mode/executor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,gBAAgB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;CACpC;AAED,UAAU,cAAc;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B;AAED,KAAK,mBAAmB,GAAG,CACzB,KAAK,CAAC,EAAE,MAAM,EACd,WAAW,CAAC,EAAE,OAAO,GAAG,cAAc,GAAG,MAAM,KAC5C,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAEjC,UAAU,iBAAiB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,OAAO,EAAE,GAAG,CAAC;CACd;AAED;;;GAGG;AACH,8BAAsB,gBAAgB;IACpC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC;IAC5B,SAAS,CAAC,WAAW,EAAE,OAAO,CAAS;gBAE3B,MAAM,EAAE,SAAS;IAI7B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAE1E;;;OAGG;IACH,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAEjC;;;OAGG;cACa,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;IA+BvD;;;OAGG;IACH,SAAS,CAAC,iBAAiB,IAAI,iBAAiB,EAAE;IA6BlD;;;OAGG;IACI,yBAAyB,IAAI,mBAAmB;CAoExD"}