@mcp-use/client 2.4.6-canary.1 → 2.4.6-canary.3

package/dist/react/index.js

@@ -468,6 +468,9 @@ import {
   UnauthorizedError
 } from "@modelcontextprotocol/client";
 var DEFAULT_AUTH_TIMEOUT_MS = 5 * 6e4;
+function scopeOAuthFetch(provider, baseFetch) {
+  return provider?.getProxyFetch?.(baseFetch) ?? baseFetch;
+}
 function isUnauthorized(err, depth = 0) {
   if (!err || depth > 5) return false;
   if (err instanceof UnauthorizedError) return true;
@@ -1560,13 +1563,16 @@ var HttpConnector = class extends BaseConnector {
       this.headers.Authorization = `Bearer ${opts.authToken}`;
     }
     this.timeout = opts.timeout ?? 1e4;
-    const baseFetch = opts.fetch ?? globalThis.fetch.bind(globalThis);
+    const oauthFetch = scopeOAuthFetch(
+      isOAuthClientProvider(opts.authProvider) ? opts.authProvider : void 0,
+      opts.fetch
+    );
     this.customFetch = this.gatewayUrl ? createMcpProxyFetch(
       originalUrl,
       this.gatewayUrl,
-      baseFetch,
+      oauthFetch ?? globalThis.fetch.bind(globalThis),
       this.serverId
-    ) : opts.fetch;
+    ) : oauthFetch;
     this.clientInfo = opts.clientInfo ?? {
       name: "http-connector",
       version: "1.0.0"
@@ -1979,7 +1985,7 @@ var HttpConnector = class extends BaseConnector {
 };
 
 // src/utils/version.ts
-var VERSION = "2.4.6-canary.1";
+var VERSION = "2.4.6-canary.3";
 function getPackageVersion() {
   return VERSION;
 }
@@ -3282,8 +3288,11 @@ var USER_ID_STORAGE_KEY = "mcp_use_user_id";
 var PROJECT_API_KEY = "phc_lyTtbYwvkdSbrcMQNPiKiiRWrrM1seyKIMjycSvItEI";
 var HOST = "https://eu.i.posthog.com";
 var configuredStorage = null;
+function isBrowser() {
+  return typeof window !== "undefined" && typeof document !== "undefined";
+}
 function isLocalStorageFunctional() {
-  return typeof localStorage !== "undefined" && typeof localStorage.getItem === "function" && typeof localStorage.setItem === "function" && typeof localStorage.removeItem === "function";
+  return isBrowser() && typeof localStorage !== "undefined" && typeof localStorage.getItem === "function" && typeof localStorage.setItem === "function" && typeof localStorage.removeItem === "function";
 }
 function createLocalStorageBackend() {
   if (!isLocalStorageFunctional()) return null;
@@ -3323,7 +3332,7 @@ function detectRuntimeEnvironment() {
     if (typeof globalThis.EdgeRuntime !== "undefined") {
       return "edge";
     }
-    if (typeof window !== "undefined" && typeof document !== "undefined") {
+    if (isBrowser()) {
       return "browser";
     }
     if (typeof process !== "undefined" && typeof process.versions?.node !== "undefined") {
@@ -4361,7 +4370,9 @@ var BaseMCPClient = class {
       logger.info(
         `[MCPClient] Unauthorized connecting to '${serverName}'; completing OAuth\u2026`
       );
-      await completeOAuthFlow(oauthProvider, httpConfig.url);
+      await completeOAuthFlow(oauthProvider, httpConfig.url, {
+        fetchFn: scopeOAuthFetch(oauthProvider, httpConfig.fetch)
+      });
       session = await openSession();
     }
     const previous = this.sessions[serverName];
@@ -4710,7 +4721,7 @@ var BrowserMCPClient = class _BrowserMCPClient extends BaseMCPClient {
     );
     const connectorOptions = {
       headers,
-      fetch: configuredFetch ?? globalThis.fetch.bind(globalThis),
+      fetch: configuredFetch,
       authToken,
       authProvider,
       detectMixedAuth,
@@ -5844,15 +5855,9 @@ function useMcp(options) {
           // Use original URL, not transformed proxy URL
           timeout,
           clientInfo: mergedClientInfo,
-          // Pass a fetch that scopes OAuth-proxy routing to this server's
-          // transport/auth calls. getProxyFetch wraps `customFetch` (e.g. the
-          // OAuth retry fetch for scope step-up), bypasses the browser cache
-          // for OAuth metadata, and optionally routes OAuth through the BFF.
-          // It never mutates the global fetch.
-          ...(() => {
-            const scopedFetch = authProviderRef.current?.getProxyFetch?.(customFetch) ?? customFetch;
-            return scopedFetch ? { fetch: scopedFetch } : {};
-          })(),
+          // The connector wraps this with the provider's OAuth-proxy fetch
+          // (`getProxyFetch`), so pass the caller's fetch unwrapped.
+          ...customFetch ? { fetch: customFetch } : {},
           // Pass clientOptions for custom capabilities (e.g., MCP Apps extension)
           ...effectiveClientOptions && {
             clientOptions: effectiveClientOptions