@mcp-use/client 2.2.4 → 2.2.5

package/dist/auth/node.d.ts

@@ -0,0 +1,212 @@
+import type { OAuthClientInformation, OAuthClientInformationContext, OAuthClientMetadata, OAuthClientProvider, OAuthDiscoveryState, OAuthTokens } from "@modelcontextprotocol/client";
+import type { KVStore } from "./storage.js";
+import { type OAuthSessionStoreOptions } from "./session-store.js";
+/** Configures OAuth authorization for Node.js and CLI clients. */
+export interface NodeOAuthOptions extends OAuthSessionStoreOptions {
+    /** Preferred loopback port. Default 33418. Walks up by `portRange` on EADDRINUSE. */
+    preferredPort?: number;
+    /** Number of consecutive loopback ports to try. Defaults to `10`. */
+    portRange?: number;
+    /** Override the on-disk store directory (mostly for tests). */
+    baseDir?: string;
+    /** Override KV store entirely (mostly for tests). */
+    kvStore?: KVStore;
+    /** Loopback wait timeout. Default 5 minutes. */
+    authTimeoutMs?: number;
+    /** Suppress the default `open(url)` browser launch (test hook). */
+    openBrowser?: (url: string) => Promise<void> | void;
+}
+/**
+ * Error reported by the local OAuth callback flow.
+ *
+ * The {@link OAuthFlowError.code} value is a stable OAuth or local-flow error
+ * code such as `"timeout"` or `"cancelled"`.
+ */
+export declare class OAuthFlowError extends Error {
+    /** OAuth or local-flow error code. */
+    readonly code: string;
+    /** Optional human-readable error description. */
+    readonly description?: string;
+    /**
+     * Creates an OAuth flow error.
+     *
+     * @param code - OAuth or local-flow error code.
+     * @param description - Optional human-readable description.
+     */
+    constructor(code: string, description?: string);
+}
+/** Authorization response captured by the Node loopback callback. */
+export interface NodeOAuthAuthorizationResponse {
+    /** Authorization code returned by the authorization server. */
+    code: string;
+    /** RFC 9207 authorization-server issuer, when present in the callback. */
+    iss?: string;
+}
+/**
+ * Node/CLI OAuth client provider for MCP. Owns a localhost loopback callback
+ * server, opens the user's browser, and resolves the authorization code via
+ * `getAuthorizationCode()` — designed for the orchestrator pattern in
+ * `useMcp.ts:1121-1145`.
+ *
+ * Use the static `create()` factory; the constructor is internal because
+ * port reservation is async.
+ */
+export declare class NodeOAuthClientProvider implements OAuthClientProvider {
+    /** Protected MCP server URL associated with this provider. */
+    readonly serverUrl: string;
+    /** Reserved localhost callback port. */
+    readonly port: number;
+    private session;
+    private kv;
+    private authTimeoutMs;
+    private openBrowserOverride?;
+    /** Whether the selected callback port still needs to be written to storage. */
+    private shouldPersistSelectedPort;
+    private server;
+    /** Provider authorization URL, exposed only through the local redirect route. */
+    private authorizationUrl;
+    /** Currently in-flight deferred — used to prevent overlapping flows. */
+    private pending;
+    /** Latest deferred (settled or in-flight) for the loopback response. */
+    private lastFlow;
+    private pendingTimer;
+    private constructor();
+    /**
+     * Creates a Node OAuth provider and reserves a localhost callback port.
+     *
+     * @param serverUrl - Protected MCP server URL.
+     * @param options - OAuth metadata, storage, loopback, and browser options.
+     * @returns A provider ready to participate in the SDK OAuth flow.
+     */
+    static create(serverUrl: string, options?: NodeOAuthOptions): Promise<NodeOAuthClientProvider>;
+    /** Prefix used for persisted OAuth session keys. */
+    get storageKeyPrefix(): string;
+    /** Stable hash of the protected server URL used to namespace storage. */
+    get serverUrlHash(): string;
+    /** Loopback redirect URL registered for this provider. */
+    get redirectUrl(): string;
+    /** OAuth client metadata presented during registration. */
+    get clientMetadata(): OAuthClientMetadata;
+    /** OAuth Client ID Metadata Document URL, when configured. */
+    get clientMetadataUrl(): string | undefined;
+    /**
+     * Loads saved OAuth tokens.
+     *
+     * @param ctx - Optional client registration context.
+     * @returns Saved tokens, or `undefined` when none exist.
+     */
+    tokens(ctx?: OAuthClientInformationContext): Promise<OAuthTokens | undefined>;
+    /**
+     * Persists OAuth tokens.
+     *
+     * @param tokens - Tokens to save.
+     * @param ctx - Optional client registration context.
+     */
+    saveTokens(tokens: OAuthTokens, ctx?: OAuthClientInformationContext): Promise<void>;
+    /**
+     * Loads saved OAuth client registration information.
+     *
+     * @param ctx - Optional registration context.
+     * @returns Saved registration information, or `undefined`.
+     */
+    clientInformation(ctx?: OAuthClientInformationContext): Promise<OAuthClientInformation | undefined>;
+    /**
+     * Persists OAuth client registration information.
+     *
+     * @param info - Client information to save.
+     * @param ctx - Optional registration context.
+     */
+    saveClientInformation(info: OAuthClientInformation, ctx?: OAuthClientInformationContext): Promise<void>;
+    /**
+     * Loads the saved PKCE code verifier.
+     *
+     * @returns The saved verifier.
+     */
+    codeVerifier(): Promise<string>;
+    /**
+     * Persists a PKCE code verifier.
+     *
+     * @param codeVerifier - Verifier to save.
+     */
+    saveCodeVerifier(codeVerifier: string): Promise<void>;
+    /**
+     * Invalidates selected persisted OAuth credentials.
+     *
+     * @param scope - Credential group to remove.
+     */
+    invalidateCredentials(scope: "all" | "client" | "tokens" | "verifier" | "discovery"): Promise<void>;
+    /**
+     * Persists OAuth discovery state.
+     *
+     * @param state - Discovery state to save.
+     */
+    saveDiscoveryState(state: OAuthDiscoveryState): Promise<void>;
+    /**
+     * Returns previously saved OAuth discovery state.
+     *
+     * @returns Saved discovery state, or `undefined`.
+     */
+    discoveryState(): Promise<OAuthDiscoveryState | undefined>;
+    /**
+     * Bind the loopback server, set up the pending-code deferred, and ask the
+     * platform to open the user's browser. Does NOT await the code; the
+     * orchestrator awaits via `getAuthorizationCode()`.
+     *
+     * @param authorizationUrl - Authorization URL generated by the SDK.
+     * @returns A promise that resolves once the loopback listener is ready and
+     * the browser-open attempt completes.
+     */
+    redirectToAuthorization(authorizationUrl: URL): Promise<void>;
+    /**
+     * Resolves with the authorization code captured by the loopback callback.
+     *
+     * @remarks This compatibility method omits the RFC 9207 issuer. OAuth flow
+     * orchestrators should use {@link getAuthorizationResponse} when available.
+     * Must be called after `redirectToAuthorization()`. Returns the same
+     * promise whether the callback has fired or not — callers may subscribe
+     * before or after.
+     *
+     * @returns The authorization code received by the loopback callback.
+     */
+    getAuthorizationCode(): Promise<string>;
+    /**
+     * Resolves with the authorization code and RFC 9207 issuer captured by the
+     * loopback callback.
+     *
+     * @returns The loopback authorization response.
+     * @throws When called before {@link NodeOAuthClientProvider.redirectToAuthorization}.
+     */
+    getAuthorizationResponse(): Promise<NodeOAuthAuthorizationResponse>;
+    /**
+     * Cancel an in-progress flow (timeout, SIGINT, etc.) and close the loopback.
+     *
+     * Pending calls to {@link NodeOAuthClientProvider.getAuthorizationResponse}
+     * reject with an {@link OAuthFlowError} whose code is `"cancelled"`.
+     */
+    dispose(): void;
+    /** Local callback port, useful for status output and tests. */
+    get callbackPort(): number;
+    /**
+     * True if `redirectToAuthorization()` has been called and we're awaiting
+     * a callback (loopback bound, browser opened). Lets orchestrators detect
+     * when the SDK transport has already kicked off the flow on a 401, so they
+     * can skip straight to `getAuthorizationCode()` instead of calling `auth()`
+     * again (which would throw "already in progress").
+     */
+    get hasPendingFlow(): boolean;
+    private startLoopback;
+    private stopLoopback;
+    private resolvePending;
+    private rejectPending;
+    private handleCallback;
+}
+/**
+ * Creates a Node OAuth provider for an MCP server.
+ *
+ * @param serverUrl - Protected MCP server URL.
+ * @param options - OAuth metadata, storage, loopback, and browser options.
+ * @returns A provider compatible with the MCP SDK OAuth flow.
+ */
+export declare function createOAuthProvider(serverUrl: string, options?: NodeOAuthOptions): Promise<OAuthClientProvider>;
+export type { NodeOAuthOptions as OAuthProviderOptions };
+//# sourceMappingURL=node.d.ts.map

package/dist/auth/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/auth/node.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACZ,MAAM,8BAA8B,CAAC;AAItC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,oBAAoB,CAAC;AAM5B,kEAAkE;AAClE,MAAM,WAAW,gBAAiB,SAAQ,wBAAwB;IAChE,qFAAqF;IACrF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gDAAgD;IAChD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACrD;AAED;;;;;GAKG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B;;;;;OAKG;gBACS,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM;CAM/C;AAED,qEAAqE;AACrE,MAAM,WAAW,8BAA8B;IAC7C,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA+DD;;;;;;;;GAQG;AACH,qBAAa,uBAAwB,YAAW,mBAAmB;IACjE,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,EAAE,CAAU;IACpB,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,mBAAmB,CAAC,CAAwC;IACpE,+EAA+E;IAC/E,OAAO,CAAC,yBAAyB,CAAU;IAE3C,OAAO,CAAC,MAAM,CAAuB;IACrC,iFAAiF;IACjF,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,wEAAwE;IACxE,OAAO,CAAC,OAAO,CAAyD;IACxE,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAyD;IACzE,OAAO,CAAC,YAAY,CAA+B;IAEnD,OAAO;IAiBP;;;;;;OAMG;WACU,MAAM,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,uBAAuB,CAAC;IAkDnC,oDAAoD;IACpD,IAAI,gBAAgB,IAAI,MAAM,CAE7B;IAED,yEAAyE;IACzE,IAAI,aAAa,IAAI,MAAM,CAE1B;IAID,0DAA0D;IAC1D,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,2DAA2D;IAC3D,IAAI,cAAc,IAAI,mBAAmB,CAExC;IAED,8DAA8D;IAC9D,IAAI,iBAAiB,IAAI,MAAM,GAAG,SAAS,CAE1C;IAED;;;;;OAKG;IACH,MAAM,CACJ,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAInC;;;;;OAKG;IACH,UAAU,CACR,MAAM,EAAE,WAAW,EACnB,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,IAAI,CAAC;IAIhB;;;;;OAKG;IACH,iBAAiB,CACf,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC;IAI9C;;;;;OAKG;IACH,qBAAqB,CACnB,IAAI,EAAE,sBAAsB,EAC5B,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,IAAI,CAAC;IAIhB;;;;OAIG;IACH,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAI/B;;;;OAIG;IACH,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD;;;;OAIG;IACH,qBAAqB,CACnB,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,GAC5D,OAAO,CAAC,IAAI,CAAC;IAIhB;;;;OAIG;IACH,kBAAkB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D;;;;OAIG;IACH,cAAc,IAAI,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAI1D;;;;;;;;OAQG;IACG,uBAAuB,CAAC,gBAAgB,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAmDnE;;;;;;;;;;OAUG;IACH,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC;IAIvC;;;;;;OAMG;IACH,wBAAwB,IAAI,OAAO,CAAC,8BAA8B,CAAC;IAWnE;;;;;OAKG;IACH,OAAO,IAAI,IAAI;IAQf,+DAA+D;IAC/D,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;;;;OAMG;IACH,IAAI,cAAc,IAAI,OAAO,CAE5B;YAIa,aAAa;IAwB3B,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,cAAc;CAoDvB;AAmBD;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CAE9B;AAED,YAAY,EAAE,gBAAgB,IAAI,oBAAoB,EAAE,CAAC"}

package/dist/auth/popup.d.ts

@@ -0,0 +1,67 @@
+/** Channel name shared by the popup callback notifier and every listener. */
+export declare const MCP_AUTH_BROADCAST_CHANNEL = "mcp_auth_callback";
+/** Result message type posted by the OAuth callback page. */
+export declare const MCP_AUTH_CALLBACK_MESSAGE_TYPE = "mcp_auth_callback";
+/**
+ * Payload shape posted by the OAuth callback page over `postMessage` /
+ * `BroadcastChannel`. `state` and `serverUrlHash` are used to scope a result
+ * to the flow / server that initiated it; both are optional for backward
+ * compatibility with callback pages built against older versions.
+ */
+export interface McpAuthCallbackMessage {
+    type?: string;
+    success?: boolean;
+    error?: string;
+    /** OAuth `state` parameter of the originating authorization request. */
+    state?: string;
+    /** Hash of the server URL the flow authenticated against. */
+    serverUrlHash?: string;
+}
+/** Terminal outcome of an opener-owned popup flow. */
+type AuthPopupResult = {
+    kind: "success";
+} | {
+    kind: "error";
+    error: string;
+} | {
+    kind: "cancelled";
+} | {
+    kind: "timeout";
+};
+interface RunAuthPopupOptions {
+    /**
+     * The popup window handle returned by `window.open`. May be `null` when the
+     * popup was blocked or opened out-of-band (e.g. a manual fallback link); the
+     * runner then relies on the message / storage / timeout signals only.
+     */
+    popup: globalThis.Window | null;
+    /** OAuth `state` parameter for this flow. Used to ignore unrelated results. */
+    state: string | null;
+    /** localStorage key under which the flow's tokens are persisted on success. */
+    tokensKey: string;
+    /** Overall flow timeout. Default 5 minutes. */
+    timeoutMs?: number;
+    /** Interval for the `popup.closed` poll. Default 1s (matches auth0-spa-js). */
+    closePollMs?: number;
+    /**
+     * How long to keep waiting for a result after the popup reports closed
+     * without tokens, before settling `cancelled`. COOP browsing-context-group
+     * swaps (popup navigating cross-origin) make `popup.closed` report `true`
+     * while the real window is still open mid-flow, so a closed signal is only
+     * a soft hint — message/storage listeners stay alive during this grace
+     * window and can still settle `success`. Default 20s.
+     */
+    closeGraceMs?: number;
+    /**
+     * Origin to accept `postMessage` results from. Defaults to the current
+     * window origin. BroadcastChannel results are same-origin by definition.
+     */
+    expectedOrigin?: string;
+}
+/**
+ * Run an opener-owned OAuth popup flow and resolve once it reaches a terminal
+ * outcome. Never rejects — all failure modes map to an {@link AuthPopupResult}.
+ */
+export declare function runAuthPopup({ popup, state, tokensKey, timeoutMs, closePollMs, closeGraceMs, expectedOrigin, }: RunAuthPopupOptions): Promise<AuthPopupResult>;
+export {};
+//# sourceMappingURL=popup.d.ts.map

package/dist/auth/popup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"popup.d.ts","sourceRoot":"","sources":["../../src/auth/popup.ts"],"names":[],"mappings":"AAsBA,6EAA6E;AAC7E,eAAO,MAAM,0BAA0B,sBAAsB,CAAC;AAE9D,6DAA6D;AAC7D,eAAO,MAAM,8BAA8B,sBAAsB,CAAC;AAElE;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,sDAAsD;AACtD,KAAK,eAAe,GAChB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAExB,UAAU,mBAAmB;IAC3B;;;;OAIG;IACH,KAAK,EAAE,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC;IAChC,+EAA+E;IAC/E,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAYD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,EAC3B,KAAK,EACL,KAAK,EACL,SAAS,EACT,SAAsB,EACtB,WAAkB,EAClB,YAAqB,EACrB,cAA4E,GAC7E,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC,CAoIhD"}

package/dist/auth/session-store.d.ts

@@ -0,0 +1,125 @@
+import type { OAuthClientInformation, OAuthClientInformationContext, OAuthClientMetadata, OAuthDiscoveryState, StoredOAuthTokens } from "@modelcontextprotocol/client";
+import type { KVStore } from "./storage.js";
+/**
+ * Internal type for storing OAuth state during the OAuth flow.
+ * @internal
+ */
+export interface StoredState {
+    expiry: number;
+    serverUrlHash: string;
+    providerOptions: {
+        serverUrl: string;
+        storageKeyPrefix: string;
+        clientName: string;
+        clientUri: string;
+        callbackUrl: string;
+        oauthProxyUrl?: string;
+        clientMetadataUrl?: string;
+        staticClientInfo?: OAuthClientInformation;
+        scope?: string;
+    };
+    flowType?: "popup" | "redirect";
+    returnUrl?: string;
+}
+/**
+ * Common options for OAuthSessionStore.
+ *
+ * @internal
+ */
+export interface OAuthSessionStoreOptions {
+    /** Prefix used for persisted OAuth keys. */
+    storageKeyPrefix?: string;
+    /** Human-readable OAuth client name. */
+    clientName?: string;
+    /** Public website describing the OAuth client. */
+    clientUri?: string;
+    /** Public OAuth client logo URL. */
+    logoUri?: string;
+    /** OAuth redirect URI. */
+    callbackUrl?: string;
+    /** OAuth Client ID Metadata Document URL. */
+    clientMetadataUrl?: string;
+    /** Whether this platform may persist confidential-client credentials. */
+    allowClientSecret?: boolean;
+    /** OAuth scope string forwarded to the SDK via clientMetadata.scope. */
+    scope?: string;
+}
+/**
+ * Options passed by the platform provider when persisting an authorization
+ * request prior to redirecting the user agent.
+ *
+ * @internal
+ */
+interface StoreAuthorizationStateOptions {
+    /**
+     * Platform-specific provider options that should round-trip through the
+     * stored state so the callback handler can rebuild the provider.
+     */
+    extraProviderOptions?: Record<string, unknown>;
+    flowType?: "popup" | "redirect";
+    returnUrl?: string;
+}
+/**
+ * Platform-neutral helper that owns OAuth session persistence and refresh
+ * logic. Used by `BrowserOAuthClientProvider` and `NodeOAuthClientProvider`
+ * — each platform provider implements `OAuthClientProvider` directly and
+ * delegates the generic methods here.
+ *
+ * @internal
+ */
+export declare class OAuthSessionStore {
+    readonly serverUrl: string;
+    readonly storageKeyPrefix: string;
+    readonly serverUrlHash: string;
+    readonly clientName: string;
+    readonly clientUri: string;
+    readonly logoUri: string;
+    readonly callbackUrl: string;
+    readonly clientMetadataUrl?: string;
+    readonly scope?: string;
+    private store;
+    private allowClientSecret;
+    constructor(serverUrl: string, options: OAuthSessionStoreOptions, store: KVStore);
+    getKey(keySuffix: string): string;
+    static hashString(str: string): string;
+    get redirectUrl(): string;
+    get clientMetadata(): OAuthClientMetadata;
+    private credentialKey;
+    private readCredential;
+    tokens(ctx?: OAuthClientInformationContext): Promise<StoredOAuthTokens | undefined>;
+    saveTokens(tokens: StoredOAuthTokens, ctx?: OAuthClientInformationContext): Promise<void>;
+    clientInformation(ctx?: OAuthClientInformationContext): Promise<OAuthClientInformation | undefined>;
+    saveClientInformation(clientInformation: OAuthClientInformation, ctx?: OAuthClientInformationContext): Promise<void>;
+    saveCodeVerifier(codeVerifier: string): Promise<void>;
+    codeVerifier(): Promise<string>;
+    invalidateCredentials(scope: "all" | "registration" | "client" | "tokens" | "verifier" | "discovery"): Promise<void>;
+    /**
+     * Persist the OAuth discovery state (authorization-server metadata resolved
+     * during the auth flow). Stored with the same durability as the code
+     * verifier so the callback leg can verify it is exchanging the code at the
+     * same authorization server the redirect targeted (SEP-2352 mix-up defense).
+     */
+    saveDiscoveryState(state: OAuthDiscoveryState): Promise<void>;
+    /** Return the previously saved discovery state, or `undefined`. */
+    discoveryState(): Promise<OAuthDiscoveryState | undefined>;
+    /**
+     * Generates and persists `StoredState` for an authorization request,
+     * appends the `state` query param to the URL, and persists the sanitized
+     * URL to `last_auth_url` so it can be replayed on popup-blocker fallback.
+     *
+     * @returns The sanitized authorization URL string with the `state` param appended.
+     */
+    storeAuthorizationState(authorizationUrl: URL, opts?: StoreAuthorizationStateOptions): Promise<string>;
+    /**
+     * Return the token endpoint from SDK-managed discovery state. The SDK
+     * persists this state during `auth()`, avoiding a second discovery flow.
+     */
+    getTokenEndpoint(): Promise<string | null>;
+    /**
+     * Return the protected-resource URL selected during OAuth discovery.
+     * Consumers can persist it and reuse it for server-side refresh exchanges.
+     */
+    getResource(): Promise<string | null>;
+}
+export {};
+//# sourceMappingURL=session-store.d.ts.map

package/dist/auth/session-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.d.ts","sourceRoot":"","sources":["../../src/auth/session-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;QAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,QAAQ,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,4CAA4C;IAC5C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0BAA0B;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,UAAU,8BAA8B;IACtC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,QAAQ,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,OAAO,CAAC,KAAK,CAAU;IACvB,OAAO,CAAC,iBAAiB,CAAU;gBAGjC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,wBAAwB,EACjC,KAAK,EAAE,OAAO;IAyBhB,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAIjC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAYtC,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,cAAc,IAAI,mBAAmB,CAWxC;IAED,OAAO,CAAC,aAAa;YASP,cAAc;IAyCtB,MAAM,CACV,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAInC,UAAU,CACd,MAAM,EAAE,iBAAiB,EACzB,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,IAAI,CAAC;IAYV,iBAAiB,CACrB,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC;IAwDxC,qBAAqB,CACzB,iBAAiB,EAAE,sBAAsB,EACzC,GAAG,CAAC,EAAE,6BAA6B,GAClC,OAAO,CAAC,IAAI,CAAC;IAkCV,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAW/B,qBAAqB,CACzB,KAAK,EACD,KAAK,GACL,cAAc,GACd,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,WAAW,GACd,OAAO,CAAC,IAAI,CAAC;IAoDhB;;;;;OAKG;IACG,kBAAkB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAInE,mEAAmE;IAC7D,cAAc,IAAI,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAahE;;;;;;OAMG;IACG,uBAAuB,CAC3B,gBAAgB,EAAE,GAAG,EACrB,IAAI,GAAE,8BAAmC,GACxC,OAAO,CAAC,MAAM,CAAC;IAqClB;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAOhD;;;OAGG;IACG,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAI5C"}

package/dist/auth/storage-file.d.ts

@@ -0,0 +1,18 @@
+import type { KVStore } from "./storage.js";
+/**
+ * `KVStore` implementation backed by `~/.mcp-use/oauth/<serverUrlHash>/`.
+ *
+ * @internal
+ */
+export declare class FileKVStore implements KVStore {
+    readonly dir: string;
+    constructor(serverUrlHash: string, baseDir?: string);
+    private ensureDir;
+    private sanitize;
+    private pathFor;
+    get(key: string): string | null;
+    set(key: string, value: string): void;
+    remove(key: string): void;
+    keys(): string[];
+}
+//# sourceMappingURL=storage-file.d.ts.map

package/dist/auth/storage-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-file.d.ts","sourceRoot":"","sources":["../../src/auth/storage-file.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAI5C;;;;GAIG;AACH,qBAAa,WAAY,YAAW,OAAO;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBAET,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;IAOnD,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,OAAO;IAIf,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAU/B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAerC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAOzB,IAAI,IAAI,MAAM,EAAE;CAIjB"}

package/dist/auth/storage.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Minimal key/value storage abstraction used by OAuthSessionStore.
+ *
+ * Browser-safe module — Node filesystem KV lives in `storage-file.ts`.
+ *
+ * @internal
+ */
+export interface KVStore {
+    get(key: string): Promise<string | null> | string | null;
+    set(key: string, value: string): Promise<void> | void;
+    remove(key: string): Promise<void> | void;
+    keys(): Promise<string[]> | string[];
+}
+/**
+ * Encrypted `KVStore` backed by `globalThis.localStorage`.
+ *
+ * Values use AES-256-GCM with a non-extractable origin key held by IndexedDB.
+ * Legacy plaintext values are encrypted on first read. When durable browser
+ * cryptography is unavailable, the store removes plaintext and falls back to
+ * memory for the lifetime of this instance.
+ *
+ * @internal
+ */
+export declare class LocalStorageKVStore implements KVStore {
+    private readonly fallback;
+    private keyPromise;
+    private durable;
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string): Promise<void>;
+    remove(key: string): void;
+    keys(): string[];
+    private getCryptoKey;
+}
+//# sourceMappingURL=storage.d.ts.map

package/dist/auth/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/auth/storage.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,OAAO;IACtB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC;IACzD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACtD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1C,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC;CACtC;AAeD;;;;;;;;;GASG;AACH,qBAAa,mBAAoB,YAAW,OAAO;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,UAAU,CAAiC;IACnD,OAAO,CAAC,OAAO,CAAQ;IAEjB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAoCxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqCpD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IASzB,IAAI,IAAI,MAAM,EAAE;IAehB,OAAO,CAAC,YAAY;CAIrB"}

package/dist/auth/url.d.ts

@@ -0,0 +1,17 @@
+/**
+ * URL sanitization utility
+ *
+ * Sanitizes URLs to prevent security issues by:
+ * - Restricting to http/https protocols only
+ * - Encoding URL components properly
+ * - Validating hostnames
+ */
+/**
+ * Sanitizes a URL string by encoding all components and validating the protocol.
+ *
+ * @param raw - The raw URL string to sanitize
+ * @returns The sanitized URL as a string
+ * @throws Error if the URL is invalid or uses an unsupported protocol
+ */
+export declare function sanitizeUrl(raw: string): string;
+//# sourceMappingURL=url.d.ts.map

package/dist/auth/url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../src/auth/url.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CA+B/C"}

package/dist/code-mode/connector.d.ts

@@ -0,0 +1,27 @@
+import type { CallToolResult, Tool } from "@modelcontextprotocol/client";
+import type { MCPClient } from "../core/node.js";
+import { BaseConnector } from "../transport/base.js";
+export declare const CODE_MODE_AGENT_PROMPT = "\n## MCP Code Mode Tool Usage Guide\n\nYou have access to an MCP Code Mode Client that allows you to execute JavaScript/TypeScript code with access to registered tools. Follow this workflow:\n\n### 1. Tool Discovery Phase\n**Always start by discovering available tools:**\n- Tools are organized by server namespace (e.g., `server_name.tool_name`)\n- Use the `search_tools(query, detail_level)` function to find available tools\n- You can access `__tool_namespaces` to see all available server namespaces\n\n```javascript\n// Find all GitHub-related tools\nconst tools = await search_tools(\"github\");\nfor (const tool of tools) {\n    console.log(`${tool.server}.${tool.name}: ${tool.description}`);\n}\n\n// Get only tool names for quick overview\nconst tools = await search_tools(\"\", \"names\");\n```\n\n### 2. Interface Introspection\n**Understand tool contracts before using them:**\n- Use `search_tools` to get tool descriptions and input schemas\n- Look for \"Access as: server.tool(args)\" patterns in descriptions\n\n### 3. Code Execution Guidelines\n**When writing code:**\n- Use `await server.tool({ param: value })` syntax for all tool calls\n- Tools are async functions that return promises\n- You have access to standard JavaScript globals: `console`, `JSON`, `Math`, `Date`, etc.\n- All console output (`console.log`, `console.error`, etc.) is automatically captured and returned\n- Build properly structured input objects based on interface definitions\n- Handle errors appropriately with try/catch blocks\n- Chain tool calls by using results from previous calls\n\n### 4. Best Practices\n- **Discover first, code second**: Always explore available tools before writing execution code\n- **Respect namespaces**: Use full `server.tool` names to avoid conflicts\n- **Minimize Context**: Process large data in code, return only essential results\n- **Error handling**: Wrap tool calls in try/catch for robustness\n- **Data flow**: Chain tools by passing outputs as inputs to subsequent tools\n\n### 5. Available Runtime Context\n- `search_tools(query, detail_level)`: Function to discover tools\n- `__tool_namespaces`: Array of available server namespaces\n- All registered tools as `server.tool` functions\n- Standard JavaScript built-ins for data processing\n\n### Example Workflow\n\n```javascript\n// 1. Discover available tools\nconst github_tools = await search_tools(\"github pull request\");\nconsole.log(`Available GitHub PR tools: ${github_tools.map(t => t.name)}`);\n\n// 2. Call tools with proper parameters\nconst pr = await github.get_pull_request({\n    owner: \"facebook\",\n    repo: \"react\",\n    number: 12345\n});\n\n// 3. Process results\nlet result;\nif (pr.state === 'open' && pr.labels.some(l => l.name === 'bug')) {\n    // 4. Chain with other tools\n    await slack.post_message({\n        channel: \"#bugs\",\n        text: `\uD83D\uDC1B Bug PR needs review: ${pr.title}`\n    });\n    result = \"Notification sent\";\n} else {\n    result = \"No action needed\";\n}\n\n// 5. Return structured results\nreturn {\n    pr_number: pr.number,\n    pr_title: pr.title,\n    action_taken: result\n};\n```\n\nRemember: Always discover and understand available tools before attempting to use them in code execution.\n";
+/**
+ * CodeModeConnector provides a special "code mode" interface for executing JavaScript/TypeScript
+ * code with access to MCP tools. Unlike other connectors, it doesn't establish its own external
+ * connection - instead, it wraps an already-connected BaseMCPClient and exposes special tools
+ * (execute_code, search_tools) on top of it.
+ *
+ * Since there's no connection phase to perform, the connector is immediately ready to use
+ * (connected=true) upon construction. The connect() and disconnect() methods exist for
+ * lifecycle compatibility with the BaseConnector interface but don't manage actual connections.
+ */
+export declare class CodeModeConnector extends BaseConnector {
+    private mcpClient;
+    private _tools;
+    constructor(client: MCPClient);
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    get publicIdentifier(): Record<string, string>;
+    private _createToolsList;
+    get tools(): Tool[];
+    initialize(): Promise<any>;
+    callTool(name: string, args: Record<string, any>): Promise<CallToolResult>;
+}
+//# sourceMappingURL=connector.d.ts.map

package/dist/code-mode/connector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../../src/code-mode/connector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,eAAO,MAAM,sBAAsB,0rGAsFlC,CAAC;AAKF;;;;;;;;;GASG;AACH,qBAAa,iBAAkB,SAAQ,aAAa;IAClD,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,SAAS;IAOvB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAIxB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,IAAI,gBAAgB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE7C;IAED,OAAO,CAAC,gBAAgB;IA4DxB,IAAI,KAAK,IAAI,IAAI,EAAE,CAElB;IAEK,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC;IAK1B,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GACxB,OAAO,CAAC,cAAc,CAAC;CAyC3B"}

package/dist/code-mode/executor-e2b.d.ts

@@ -0,0 +1,46 @@
+import type { E2BExecutorOptions, MCPClient } from "../core/node.js";
+import { BaseCodeExecutor, type ExecutionResult } from "./executor.js";
+/**
+ * E2B-based code executor using remote sandboxes.
+ * Executes code in an E2B sandbox with tool calls proxied back to the host.
+ */
+export declare class E2BCodeExecutor extends BaseCodeExecutor {
+    private e2bApiKey;
+    private codeExecSandbox;
+    private SandboxClass;
+    private timeoutMs;
+    constructor(client: MCPClient, options: E2BExecutorOptions);
+    /**
+     * Lazy load E2B Sandbox class.
+     * This allows the library to work without E2B installed.
+     */
+    private ensureSandboxClass;
+    /**
+     * Get or create a dedicated sandbox for code execution.
+     */
+    private getOrCreateCodeExecSandbox;
+    /**
+     * Generate the shim code that exposes tools to the sandbox environment.
+     * Creates a bridge that intercepts tool calls and sends them back to host.
+     */
+    private generateShim;
+    /**
+     * Build the tool catalog for the shim.
+     * Returns a map of server names to their available tools.
+     */
+    private buildToolCatalog;
+    /**
+     * Execute JavaScript/TypeScript code in an E2B sandbox with MCP tool access.
+     * Tool calls are proxied back to the host via the bridge pattern.
+     *
+     * @param code - Code to execute
+     * @param timeout - Execution timeout in milliseconds (default: 30000)
+     */
+    execute(code: string, timeout?: number): Promise<ExecutionResult>;
+    /**
+     * Clean up the E2B sandbox.
+     * Should be called when the executor is no longer needed.
+     */
+    cleanup(): Promise<void>;
+}
+//# sourceMappingURL=executor-e2b.d.ts.map

package/dist/code-mode/executor-e2b.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor-e2b.d.ts","sourceRoot":"","sources":["../../src/code-mode/executor-e2b.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAErE,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAKvE;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,gBAAgB;IACnD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,eAAe,CAAwB;IAC/C,OAAO,CAAC,YAAY,CAAa;IACjC,OAAO,CAAC,SAAS,CAAS;gBAEd,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB;IAM1D;;;OAGG;YACW,kBAAkB;IAgBhC;;OAEG;YACW,0BAA0B;IAcxC;;;OAGG;IACH,OAAO,CAAC,YAAY;IAoGpB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAWxB;;;;;;OAMG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAAQ,GAAG,OAAO,CAAC,eAAe,CAAC;IAwKtE;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAW/B"}

package/dist/code-mode/executor-vm.d.ts

@@ -0,0 +1,39 @@
+import type { MCPClient, VMExecutorOptions } from "../core/node.js";
+import { BaseCodeExecutor, type ExecutionResult } from "./executor.js";
+/**
+ * Check if VM executor is available in the current environment
+ * This is a synchronous check that returns true if vm was already loaded
+ */
+export declare function isVMAvailable(): boolean;
+/**
+ * VM-based code executor using Node.js vm module.
+ * Executes code in an isolated V8 context with access to MCP tools.
+ */
+export declare class VMCodeExecutor extends BaseCodeExecutor {
+    private defaultTimeout;
+    private memoryLimitMb?;
+    constructor(client: MCPClient, options?: VMExecutorOptions);
+    /**
+     * Ensure VM module is loaded before execution
+     */
+    private ensureVMLoaded;
+    /**
+     * Execute JavaScript/TypeScript code with access to MCP tools.
+     *
+     * @param code - Code to execute
+     * @param timeout - Execution timeout in milliseconds (default: configured timeout or 30000)
+     */
+    execute(code: string, timeout?: number): Promise<ExecutionResult>;
+    /**
+     * Build the VM execution context with MCP tools and standard globals.
+     *
+     * @param logs - Array to capture console output
+     */
+    private _buildContext;
+    /**
+     * Clean up resources.
+     * VM executor doesn't need cleanup, but method kept for interface consistency.
+     */
+    cleanup(): Promise<void>;
+}
+//# sourceMappingURL=executor-vm.d.ts.map

package/dist/code-mode/executor-vm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor-vm.d.ts","sourceRoot":"","sources":["../../src/code-mode/executor-vm.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAsEvE;;;GAGG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAGvC;AAED;;;GAGG;AACH,qBAAa,cAAe,SAAQ,gBAAgB;IAClD,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,aAAa,CAAC,CAAS;gBAEnB,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,iBAAiB;IAS1D;;OAEG;YACW,cAAc;IAc5B;;;;;OAKG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAsEvE;;;;OAIG;YACW,aAAa;IA6F3B;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B"}