mcp-remote 0.1.14 → 0.1.16

package/dist/{chunk-FBGYN3F2.js → chunk-4PNJQ7WT.js}

@@ -11707,7 +11707,7 @@ var Client = class extends Protocol {
 };
 
 // package.json
-var version = "0.1.14";
+var version = "0.1.16";
 
 // node_modules/.pnpm/pkce-challenge@5.0.0/node_modules/pkce-challenge/dist/index.node.js
 var crypto;
@@ -13669,6 +13669,28 @@ function setupSignalHandlers(cleanup) {
 function getServerUrlHash(serverUrl) {
   return crypto2.createHash("md5").update(serverUrl).digest("hex");
 }
+function sanitizeUrl(raw) {
+  const abort = () => {
+    throw new Error(`Invalid url to pass to open(): ${raw}`);
+  };
+  let url;
+  try {
+    url = new URL(raw);
+  } catch (_) {
+    abort();
+  }
+  if (url.protocol !== "https:" && url.protocol !== "http:") abort();
+  if (url.hostname !== encodeURIComponent(url.hostname)) abort();
+  if (url.username) url.username = encodeURIComponent(url.username);
+  if (url.password) url.password = encodeURIComponent(url.password);
+  url.pathname = url.pathname.slice(0, 1) + encodeURIComponent(url.pathname.slice(1)).replace(/%2f/ig, "/");
+  url.search = url.search.slice(0, 1) + Array.from(url.searchParams.entries()).map(sanitizeParam).join("&");
+  url.hash = url.hash.slice(0, 1) + encodeURIComponent(url.hash.slice(1));
+  return url.href;
+}
+function sanitizeParam([k, v]) {
+  return `${encodeURIComponent(k)}${v.length > 0 ? `=${encodeURIComponent(v)}` : ""}`;
+}
 
 // src/lib/node-oauth-client-provider.ts
 import open from "open";
@@ -13812,7 +13834,7 @@ ${authorizationUrl.toString()}
 `);
     if (DEBUG) debugLog("Redirecting to authorization URL", authorizationUrl.toString());
     try {
-      await open(authorizationUrl.toString());
+      await open(sanitizeUrl(authorizationUrl.toString()));
       log("Browser opened automatically.");
     } catch (error) {
       log("Could not open browser automatically. Please copy and paste the URL above into your browser.");

package/dist/client.js

@@ -11,7 +11,7 @@ import {
   parseCommandLineArgs,
   setupSignalHandlers,
   version
-} from "./chunk-FBGYN3F2.js";
+} from "./chunk-4PNJQ7WT.js";
 
 // src/client.ts
 import { EventEmitter } from "events";

package/dist/proxy.js

@@ -9,7 +9,7 @@ import {
   mcpProxy,
   parseCommandLineArgs,
   setupSignalHandlers
-} from "./chunk-FBGYN3F2.js";
+} from "./chunk-4PNJQ7WT.js";
 
 // src/proxy.ts
 import { EventEmitter } from "events";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-remote",
-  "version": "0.1.14",
+  "version": "0.1.16",
   "description": "Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth",
   "keywords": [
     "mcp",
@@ -26,7 +26,9 @@
     "build": "tsup",
     "build:watch": "tsup --watch",
     "check": "prettier --check . && tsc",
-    "lint-fix": "prettier --check . --write"
+    "lint-fix": "prettier --check . --write",
+    "test:unit": "vitest run",
+    "test:unit:watch": "vitest"
   },
   "dependencies": {
     "express": "^4.21.2",
@@ -39,7 +41,8 @@
     "prettier": "^3.5.3",
     "tsup": "^8.4.0",
     "tsx": "^4.19.3",
-    "typescript": "^5.8.2"
+    "typescript": "^5.8.2",
+    "vitest": "^3.2.3"
   },
   "tsup": {
     "entry": [
@@ -54,5 +57,12 @@
     "outDir": "dist",
     "external": []
   },
+  "vitest": {
+    "environment": "node",
+    "globals": true,
+    "include": [
+      "src/**/*.test.ts"
+    ]
+  },
   "packageManager": "pnpm@10.11.0+sha512.6540583f41cc5f628eb3d9773ecee802f4f9ef9923cc45b69890fb47991d4b092964694ec3a4f738a420c918a333062c8b925d312f42e4f0c263eb603551f977"
 }