@mcp-use/client 2.0.0-beta.5 → 2.0.0-beta.7

package/dist/react/index.js

@@ -1473,7 +1473,7 @@ var HttpConnector = class extends BaseConnector {
 };
 
 // src/utils/version.ts
-var VERSION = "2.0.0-beta.4";
+var VERSION = "2.0.0-beta.6";
 function getPackageVersion() {
   return VERSION;
 }
@@ -1849,6 +1849,14 @@ var OAuthSessionStore = class _OAuthSessionStore {
   async getTokenEndpoint() {
     return (await this.discoveryState())?.authorizationServerMetadata?.token_endpoint ?? null;
   }
+  /**
+   * Return the protected-resource URL selected during OAuth discovery.
+   * Consumers can persist it and reuse it for server-side refresh exchanges.
+   */
+  async getResource() {
+    const resource = (await this.discoveryState())?.resourceMetadata?.resource;
+    return typeof resource === "string" ? resource : null;
+  }
 };
 
 // src/auth/browser.ts
@@ -2113,6 +2121,10 @@ var BrowserOAuthClientProvider = class {
   getTokenEndpoint() {
     return this.session.getTokenEndpoint();
   }
+  /** Return the protected-resource URL selected during OAuth discovery. */
+  getResource() {
+    return this.session.getResource();
+  }
   /**
    * Return the stored public OAuth client ID. Browser providers do not retain
    * client secrets.
@@ -4925,12 +4937,18 @@ function useMcp(options) {
           if (tokens?.access_token) {
             const expiresAt = tokens.expires_in ? Date.now() + tokens.expires_in * 1e3 : void 0;
             let tokenEndpoint = null;
+            let resource = null;
             let clientCreds = null;
             try {
               tokenEndpoint = await authProviderRef.current.getTokenEndpoint?.() ?? null;
             } catch {
               tokenEndpoint = null;
             }
+            try {
+              resource = await authProviderRef.current.getResource?.() ?? null;
+            } catch {
+              resource = null;
+            }
             try {
               clientCreds = await authProviderRef.current.getClientCredentials?.() ?? null;
             } catch {
@@ -4947,6 +4965,7 @@ function useMcp(options) {
               refresh_token: tokens.refresh_token,
               scope: tokens.scope,
               ...tokenEndpoint ? { token_endpoint: tokenEndpoint } : {},
+              ...resource ? { resource } : {},
               ...clientCreds?.client_id ? { client_id: clientCreds.client_id } : {},
               ...clientCreds?.client_secret ? { client_secret: clientCreds.client_secret } : {}
             });
@@ -7355,6 +7374,9 @@ function ViewRendererBase({
   const iframeRef = useRef4(null);
   const bridgeRef = useRef4(null);
   const containerRef = useRef4(null);
+  const pendingBlobRevocationsRef = useRef4(
+    /* @__PURE__ */ new Map()
+  );
   const connectionRef = useRef4(
     source.kind === "live" ? source.connection : null
   );
@@ -7510,10 +7532,18 @@ function ViewRendererBase({
   }, [source.kind, liveResourceUri, preloadedHtml, cspMode, resolveSandboxUrl]);
   useEffect5(() => {
     const url = activeSandboxUrl;
+    if (!url || url.protocol !== "blob:") return;
+    const pending = pendingBlobRevocationsRef.current.get(url.href);
+    if (pending) {
+      clearTimeout(pending);
+      pendingBlobRevocationsRef.current.delete(url.href);
+    }
     return () => {
-      if (url?.protocol === "blob:") {
+      const timer = setTimeout(() => {
         URL.revokeObjectURL(url.href);
-      }
+        pendingBlobRevocationsRef.current.delete(url.href);
+      }, 1e3);
+      pendingBlobRevocationsRef.current.set(url.href, timer);
     };
   }, [activeSandboxUrl]);
   const isBlobSandbox = activeSandboxUrl?.protocol === "blob:";
@@ -7574,7 +7604,14 @@ function ViewRendererBase({
           iframe.setAttribute("allow", allowAttribute);
         }
         const readyPromise = waitForSandboxProxyReady(iframe);
-        iframe.src = activeSandboxUrl.href;
+        if (activeSandboxUrl.protocol === "blob:") {
+          const response = await fetch(activeSandboxUrl.href);
+          const sandboxHtml = await response.text();
+          if (disposed) return;
+          iframe.srcdoc = sandboxHtml;
+        } else {
+          iframe.src = activeSandboxUrl.href;
+        }
         await readyPromise;
         if (disposed) return;
         const capabilities = {