@mcp-use/client 2.0.0-beta.1 → 2.0.0-beta.11

package/dist/index.d.ts

@@ -18,6 +18,6 @@ export * from "./transport/http.js";
 export * from "./transport/stdio.js";
 export * from "./utils/json-schema-validator.js";
 export * from "./code-mode/connector.js";
-export { setTelemetrySource, setProductVersion, Tel, Telemetry, telFetch, capturePostHog, captureScarf, POSTHOG_HOST, POSTHOG_API_KEY, SCARF_GATEWAY_URL, } from "./telemetry/index.js";
+export { setTelemetrySource, setProductVersion, Tel, Telemetry, telFetch, capturePostHog, POSTHOG_HOST, POSTHOG_API_KEY, } from "./telemetry/index.js";
 export { logger } from "./utils/logging.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,+BAA+B,CAAC;AAEvC,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAGlC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,kCAAkC,CAAC;AAGjD,cAAc,0BAA0B,CAAC;AAGzC,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,GAAG,EACH,SAAS,EACT,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,+BAA+B,CAAC;AAEvC,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAGlC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,kCAAkC,CAAC;AAGjD,cAAc,0BAA0B,CAAC;AAGzC,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,GAAG,EACH,SAAS,EACT,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -1108,7 +1108,7 @@ init_connector_telemetry();
 init_logging();
 
 // src/utils/version.ts
-var VERSION = "2.0.0-beta.0";
+var VERSION = "2.0.0-beta.10";
 function getPackageVersion() {
   return VERSION;
 }
@@ -1245,62 +1245,6 @@ async function telFetch(url, init) {
 }
 var POSTHOG_HOST = "https://eu.i.posthog.com";
 var POSTHOG_API_KEY = "phc_lyTtbYwvkdSbrcMQNPiKiiRWrrM1seyKIMjycSvItEI";
-var SCARF_GATEWAY_URL = "https://mcpuse.gateway.scarf.sh/events-ts";
-var SCARF_GATEWAY_BEACON_URL = "https://mcpuse.gateway.scarf.sh/simple/";
-var SCARF_BEACON_MAX_URL = 1800;
-var SCARF_BEACON_TRUNCATED_KEYS = /* @__PURE__ */ new Set(["query", "response", "messages"]);
-function stringifyScarfValue(value) {
-  if (value === null || value === void 0) return "";
-  if (typeof value === "string") return value;
-  if (typeof value === "number" || typeof value === "boolean") {
-    return String(value);
-  }
-  try {
-    return JSON.stringify(value);
-  } catch {
-    return String(value);
-  }
-}
-function buildScarfBeaconUrl(properties, baseUrl = SCARF_GATEWAY_BEACON_URL) {
-  const params = new URLSearchParams();
-  for (const [key, value] of Object.entries(properties)) {
-    let serialized = stringifyScarfValue(value);
-    if (SCARF_BEACON_TRUNCATED_KEYS.has(key) && serialized.length > 120) {
-      serialized = `${serialized.slice(0, 117)}...`;
-    }
-    if (serialized !== "") params.set(key, serialized);
-  }
-  let url = `${baseUrl}${baseUrl.includes("?") ? "&" : "?"}${params.toString()}`;
-  if (url.length <= SCARF_BEACON_MAX_URL) return url;
-  const keys = [...params.keys()].sort(
-    (a, b) => (params.get(b)?.length ?? 0) - (params.get(a)?.length ?? 0)
-  );
-  for (const key of keys) {
-    if (url.length <= SCARF_BEACON_MAX_URL) break;
-    if (key === "event" || key === "user_id") continue;
-    params.delete(key);
-    url = `${baseUrl}${baseUrl.includes("?") ? "&" : "?"}${params.toString()}`;
-  }
-  return url.slice(0, SCARF_BEACON_MAX_URL);
-}
-function captureScarfPost(properties, endpoint) {
-  return telFetch(endpoint, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    keepalive: true,
-    body: JSON.stringify(properties)
-  });
-}
-function captureScarfBeacon(properties, endpoint) {
-  try {
-    const url = buildScarfBeaconUrl(properties, endpoint);
-    const img = new Image();
-    img.referrerPolicy = "no-referrer-when-downgrade";
-    img.src = url;
-  } catch {
-  }
-  return Promise.resolve();
-}
 function capturePostHog(params) {
   const host = params.host ?? POSTHOG_HOST;
   const apiKey = params.apiKey ?? POSTHOG_API_KEY;
@@ -1317,13 +1261,6 @@ function capturePostHog(params) {
     })
   });
 }
-function captureScarf(properties, endpoint = SCARF_GATEWAY_URL) {
-  if (typeof window !== "undefined") {
-    const beaconEndpoint = endpoint === SCARF_GATEWAY_URL ? SCARF_GATEWAY_BEACON_URL : endpoint;
-    return captureScarfBeacon(properties, beaconEndpoint);
-  }
-  return captureScarfPost(properties, endpoint);
-}
 
 // src/telemetry/telemetry.ts
 function generateUUID() {
@@ -1334,18 +1271,6 @@ function secureRandomString() {
   globalThis.crypto.getRandomValues(array);
   return Array.from(array, (v) => v.toString(16).padStart(2, "0")).join("");
 }
-function isVersionGreater(a, b) {
-  const parse = (v) => v.split("-")[0].split(".").map((n) => parseInt(n, 10) || 0);
-  const pa = parse(a);
-  const pb = parse(b);
-  const len = Math.max(pa.length, pb.length);
-  for (let i = 0; i < len; i++) {
-    const da = pa[i] ?? 0;
-    const db = pb[i] ?? 0;
-    if (da !== db) return da > db;
-  }
-  return false;
-}
 var USER_ID_STORAGE_KEY = "mcp_use_user_id";
 var PROJECT_API_KEY = "phc_lyTtbYwvkdSbrcMQNPiKiiRWrrM1seyKIMjycSvItEI";
 var HOST = "https://eu.i.posthog.com";
@@ -1377,10 +1302,7 @@ function createLocalStorageBackend() {
         localStorage.setItem(USER_ID_STORAGE_KEY, id);
       } catch {
       }
-    },
-    // Package-download dedup is node/Scarf-oriented; localStorage unused.
-    getDownloadedVersion: () => null,
-    setDownloadedVersion: () => void 0
+    }
   };
 }
 function detectRuntimeEnvironment() {
@@ -1448,17 +1370,13 @@ var Telemetry = class _Telemetry {
   _currUserId = null;
   _telemetryEnabled = false;
   _pending = /* @__PURE__ */ new Set();
-  _scarfEnabled = false;
   _runtimeEnvironment;
   _storageCapability;
   _storage;
-  /** True when node entry installed fs storage (package-download dedup). */
-  _fsBacked;
   _source;
   _productVersion;
   constructor() {
     this._runtimeEnvironment = detectRuntimeEnvironment();
-    this._fsBacked = configuredStorage !== null;
     this._storage = configuredStorage ?? createLocalStorageBackend() ?? null;
     this._storageCapability = this._storage ? "persistent" : "session-only";
     this._source = readSourceHint() || this._runtimeEnvironment;
@@ -1477,14 +1395,6 @@ var Telemetry = class _Telemetry {
         "Anonymized telemetry enabled. Set MCP_USE_ANONYMIZED_TELEMETRY=false to disable."
       );
       this._telemetryEnabled = true;
-      this._scarfEnabled = true;
-      if (this._fsBacked) {
-        setTimeout(() => {
-          this.trackPackageDownload({ triggered_by: "initialization" }).catch(
-            (e) => logger.debug(`Failed to track package download: ${e}`)
-          );
-        }, 0);
-      }
     }
   }
   get runtimeEnvironment() {
@@ -1516,7 +1426,7 @@ var Telemetry = class _Telemetry {
     this._productVersion = version;
   }
   get isEnabled() {
-    return this._telemetryEnabled || this._scarfEnabled;
+    return this._telemetryEnabled;
   }
   get userId() {
     if (this._currUserId) return this._currUserId;
@@ -1539,7 +1449,7 @@ var Telemetry = class _Telemetry {
     return this._currUserId;
   }
   async capture(event) {
-    if (!this._telemetryEnabled && !this._scarfEnabled) return;
+    if (!this._telemetryEnabled) return;
     const currentUserId = this.userId;
     const properties = {
       ...event.properties,
@@ -1548,52 +1458,15 @@ var Telemetry = class _Telemetry {
       source: this._source,
       runtime: this._runtimeEnvironment
     };
-    if (this._telemetryEnabled) {
-      const p = capturePostHog({
-        host: HOST,
-        apiKey: PROJECT_API_KEY,
-        event: event.name,
-        distinctId: currentUserId,
-        properties
-      });
-      this._pending.add(p);
-      void p.finally(() => this._pending.delete(p));
-    }
-    if (this._scarfEnabled) {
-      const p = captureScarf({
-        ...properties,
-        user_id: currentUserId,
-        event: event.name
-      });
-      this._pending.add(p);
-      void p.finally(() => this._pending.delete(p));
-    }
-  }
-  async trackPackageDownload(properties) {
-    if (!this._scarfEnabled || !this._fsBacked || !this._storage) return;
-    const currentVersion = getPackageVersion();
-    const saved = this._storage.getDownloadedVersion();
-    let firstDownload = false;
-    let shouldTrack = false;
-    if (!saved) {
-      shouldTrack = true;
-      firstDownload = true;
-      this._storage.setDownloadedVersion(currentVersion);
-    } else if (isVersionGreater(currentVersion, saved)) {
-      shouldTrack = true;
-      this._storage.setDownloadedVersion(currentVersion);
-    }
-    if (!shouldTrack) return;
-    await captureScarf({
-      ...properties || {},
-      mcp_use_version: currentVersion,
-      user_id: this.userId,
-      event: "package_download",
-      first_download: firstDownload,
-      language: "typescript",
-      source: this._source,
-      runtime: this._runtimeEnvironment
+    const p = capturePostHog({
+      host: HOST,
+      apiKey: PROJECT_API_KEY,
+      event: event.name,
+      distinctId: currentUserId,
+      properties
     });
+    this._pending.add(p);
+    void p.finally(() => this._pending.delete(p));
   }
   async trackAgentExecution(data) {
     if (!this.isEnabled) return;
@@ -1718,14 +1591,11 @@ function createFsStorage() {
   } catch {
     return {
       getUserId: () => null,
-      setUserId: () => void 0,
-      getDownloadedVersion: () => null,
-      setDownloadedVersion: () => void 0
+      setUserId: () => void 0
     };
   }
   const cacheHome = getCacheHome(os, path2);
   const userIdPath = path2.join(cacheHome, "mcp_use_3", "telemetry_user_id");
-  const versionPath = path2.join(cacheHome, "mcp_use", "download_version");
   return {
     getUserId() {
       try {
@@ -1741,21 +1611,6 @@ function createFsStorage() {
         fs2.writeFileSync(userIdPath, id);
       } catch {
       }
-    },
-    getDownloadedVersion() {
-      try {
-        if (!fs2.existsSync(versionPath)) return null;
-        return fs2.readFileSync(versionPath, "utf-8").trim() || null;
-      } catch {
-        return null;
-      }
-    },
-    setDownloadedVersion(version) {
-      try {
-        fs2.mkdirSync(path2.dirname(versionPath), { recursive: true });
-        fs2.writeFileSync(versionPath, version);
-      } catch {
-      }
     }
   };
 }
@@ -2199,29 +2054,39 @@ var OAuthSessionStore = class _OAuthSessionStore {
     if (ctx) await this.store.set(this.credentialKey("tokens"), serialized);
     await this.store.remove(this.getKey("code_verifier"));
     await this.store.remove(this.getKey("last_auth_url"));
+    await this.store.remove(this.getKey("last_auth_callback_url"));
   }
   async clientInformation(ctx) {
+    if (!this.allowClientSecret) {
+      const registeredRedirectUri = await this.store.get(
+        this.getKey("client_info_redirect_uri")
+      );
+      if (registeredRedirectUri !== this.redirectUrl) {
+        await this.invalidateCredentials("registration");
+        console.info(
+          `[${this.storageKeyPrefix}] Re-registering browser OAuth client after its Inspector callback changed or could not be verified.`
+        );
+        return void 0;
+      }
+    }
     const stored = await this.readCredential("client_info", ctx);
     if (!stored) return void 0;
     const { key, value: clientInfo } = stored;
     try {
       if (!this.allowClientSecret && clientInfo.client_secret) {
-        await this.store.remove(key);
-        if (ctx) await this.store.remove(this.credentialKey("client_info"));
+        await this.invalidateCredentials("registration");
         console.warn(
-          `[${this.storageKeyPrefix}] Removed OAuth client information containing a browser client_secret.`
+          `[${this.storageKeyPrefix}] Recovered stale browser OAuth credentials containing a client_secret.`
         );
         return void 0;
       }
       const storedRedirectUris = Array.isArray(clientInfo.redirect_uris) ? clientInfo.redirect_uris : [];
-      const hasMatchingRedirect = storedRedirectUris.length === 0 || storedRedirectUris.includes(this.redirectUrl);
+      const hasMatchingRedirect = storedRedirectUris.length === 0 && this.allowClientSecret || storedRedirectUris.includes(this.redirectUrl);
       if (!hasMatchingRedirect) {
         console.info(
-          `[${this.storageKeyPrefix}] Invalidating cached OAuth client info due to redirect URI mismatch.`
+          `[${this.storageKeyPrefix}] Recovering cached OAuth credentials after a redirect URI change.`
         );
-        await this.store.remove(key);
-        await this.store.remove(this.credentialKey("tokens", ctx));
-        await this.store.remove(this.getKey("last_auth_url"));
+        await this.invalidateCredentials("registration");
         return void 0;
       }
       return clientInfo;
@@ -2239,11 +2104,20 @@ var OAuthSessionStore = class _OAuthSessionStore {
         "Browser OAuth clients must be public clients; client_secret persistence is not allowed."
       );
     }
-    const serialized = JSON.stringify(clientInformation);
+    const persistedClientInformation = !this.allowClientSecret && (!("redirect_uris" in clientInformation) || !Array.isArray(
+      clientInformation.redirect_uris
+    ) || clientInformation.redirect_uris.length === 0) ? { ...clientInformation, redirect_uris: [this.redirectUrl] } : clientInformation;
+    const serialized = JSON.stringify(persistedClientInformation);
     await this.store.set(this.credentialKey("client_info", ctx), serialized);
     if (ctx) {
       await this.store.set(this.credentialKey("client_info"), serialized);
     }
+    if (!this.allowClientSecret) {
+      await this.store.set(
+        this.getKey("client_info_redirect_uri"),
+        this.redirectUrl
+      );
+    }
   }
   async saveCodeVerifier(codeVerifier) {
     await this.store.set(this.getKey("code_verifier"), codeVerifier);
@@ -2268,11 +2142,22 @@ var OAuthSessionStore = class _OAuthSessionStore {
       }
     };
     switch (scope) {
+      case "registration":
+        await removeCredentialKeys("tokens");
+        await removeCredentialKeys("client_info");
+        await this.store.remove(this.getKey("code_verifier"));
+        await this.store.remove(this.getKey("last_auth_url"));
+        await this.store.remove(this.getKey("last_auth_callback_url"));
+        await this.store.remove(this.getKey("client_info_redirect_uri"));
+        await this.store.remove(this.getKey("token_endpoint"));
+        break;
       case "all":
         await removeCredentialKeys("tokens");
         await removeCredentialKeys("client_info");
         await this.store.remove(this.getKey("code_verifier"));
         await this.store.remove(this.getKey("last_auth_url"));
+        await this.store.remove(this.getKey("last_auth_callback_url"));
+        await this.store.remove(this.getKey("client_info_redirect_uri"));
         await this.store.remove(this.getKey("discovery_state"));
         await this.store.remove(this.getKey("token_endpoint"));
         break;
@@ -2342,6 +2227,10 @@ var OAuthSessionStore = class _OAuthSessionStore {
     authorizationUrl.searchParams.set("state", state);
     const sanitizedAuthUrl = sanitizeUrl(authorizationUrl.toString());
     await this.store.set(stateKey, JSON.stringify(stateData));
+    await this.store.set(
+      this.getKey("last_auth_callback_url"),
+      this.redirectUrl
+    );
     await this.store.set(this.getKey("last_auth_url"), sanitizedAuthUrl);
     return sanitizedAuthUrl;
   }
@@ -2352,6 +2241,14 @@ var OAuthSessionStore = class _OAuthSessionStore {
   async getTokenEndpoint() {
     return (await this.discoveryState())?.authorizationServerMetadata?.token_endpoint ?? null;
   }
+  /**
+   * Return the protected-resource URL selected during OAuth discovery.
+   * Consumers can persist it and reuse it for server-side refresh exchanges.
+   */
+  async getResource() {
+    const resource = (await this.discoveryState())?.resourceMetadata?.resource;
+    return typeof resource === "string" ? resource : null;
+  }
 };
 
 // src/auth/node.ts
@@ -4327,7 +4224,7 @@ var E2BCodeExecutor = class extends BaseCodeExecutor {
       this.SandboxClass = e2b.Sandbox;
     } catch (error) {
       throw new Error(
-        "@e2b/code-interpreter is not installed. The E2B code executor requires this optional dependency. Install it with: yarn add @e2b/code-interpreter"
+        "@e2b/code-interpreter is not installed. The E2B code executor requires this optional dependency. Install it with: npm install @e2b/code-interpreter, pnpm add @e2b/code-interpreter, or bun add @e2b/code-interpreter"
       );
     }
   }
@@ -5563,7 +5460,6 @@ export {
   OAuthFlowError,
   POSTHOG_API_KEY,
   POSTHOG_HOST,
-  SCARF_GATEWAY_URL,
   StdioConnectionManager,
   StdioConnector,
   Tel,
@@ -5576,7 +5472,6 @@ export {
   auth2 as auth,
   cancel,
   capturePostHog,
-  captureScarf,
   completeOAuthFlow,
   createConnectorFromConfig,
   createOAuthProvider,