@mcp-use/client 2.4.5 → 2.4.6-canary.1

package/dist/auth/url.d.ts

@@ -3,11 +3,10 @@
  *
  * Sanitizes URLs to prevent security issues by:
  * - Restricting to http/https protocols only
- * - Encoding URL components properly
- * - Validating hostnames
+ * - Validating URL structure using the WHATWG URL parser
  */
 /**
- * Sanitizes a URL string by encoding all components and validating the protocol.
+ * Sanitizes a URL string by validating the protocol and returning its normalized href.
  *
  * @param raw - The raw URL string to sanitize
  * @returns The sanitized URL as a string

package/dist/auth/url.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../src/auth/url.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CA+B/C"}
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../src/auth/url.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAa/C"}

package/dist/code-mode/executor-vm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executor-vm.d.ts","sourceRoot":"","sources":["../../src/code-mode/executor-vm.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAsEvE;;;GAGG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAGvC;AAED;;;GAGG;AACH,qBAAa,cAAe,SAAQ,gBAAgB;IAClD,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,aAAa,CAAC,CAAS;gBAEnB,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,iBAAiB;IAS1D;;OAEG;YACW,cAAc;IAc5B;;;;;OAKG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAsEvE;;;;OAIG;YACW,aAAa;IA6F3B;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B"}
+{"version":3,"file":"executor-vm.d.ts","sourceRoot":"","sources":["../../src/code-mode/executor-vm.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAsEvE;;;GAGG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAGvC;AA6ED;;;GAGG;AACH,qBAAa,cAAe,SAAQ,gBAAgB;IAClD,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,aAAa,CAAC,CAAS;gBAEnB,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,iBAAiB;IAS1D;;OAEG;YACW,cAAc;IAc5B;;;;;OAKG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAsEvE;;;;OAIG;YACW,aAAa;IAuF3B;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B"}

package/dist/index-browser.js

@@ -128,7 +128,7 @@ var Logger = class {
 var logger = Logger.get();
 
 // src/utils/version.ts
-var VERSION = "2.4.5";
+var VERSION = "2.4.6-canary.1";
 function getPackageVersion() {
   return VERSION;
 }
@@ -822,27 +822,17 @@ import { validateClientMetadataUrl } from "@modelcontextprotocol/client";
 
 // src/auth/url.ts
 function sanitizeUrl(raw) {
-  const abort = () => {
-    throw new Error(`Invalid url to pass to open(): ${raw}`);
-  };
   let url;
   try {
     url = new URL(raw);
-  } catch (_) {
-    abort();
-  }
-  if (url.protocol !== "https:" && url.protocol !== "http:") abort();
-  if (url.hostname !== encodeURIComponent(url.hostname)) abort();
-  if (url.username) url.username = encodeURIComponent(url.username);
-  if (url.password) url.password = encodeURIComponent(url.password);
-  url.pathname = url.pathname.slice(0, 1) + encodeURIComponent(url.pathname.slice(1)).replace(/%2f/gi, "/");
-  url.search = url.search.slice(0, 1) + Array.from(url.searchParams.entries()).map(sanitizeParam).join("&");
-  url.hash = url.hash.slice(0, 1) + encodeURIComponent(url.hash.slice(1));
+  } catch {
+    throw new Error(`Invalid url to pass to open(): ${raw}`);
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    throw new Error(`Invalid url to pass to open(): ${raw}`);
+  }
   return url.href;
 }
-function sanitizeParam([k, v]) {
-  return `${encodeURIComponent(k)}${v.length > 0 ? `=${encodeURIComponent(v)}` : ""}`;
-}
 
 // src/auth/session-store.ts
 var OAuthSessionStore = class _OAuthSessionStore {