mcp-use 1.31.1 → 1.32.0

package/dist/{chunk-FPB463GO.js → chunk-4TG7GIKD.js}

@@ -1,6 +1,6 @@
 import {
   BaseConnector
-} from "./chunk-RW5IXYW4.js";
+} from "./chunk-MNFWS6KR.js";
 import {
   __name
 } from "./chunk-3GQAWCBQ.js";

package/dist/{chunk-TMJINEB7.js → chunk-5OTYGJ5I.js}

@@ -3,17 +3,17 @@ import {
 } from "./chunk-GKPKUKD6.js";
 import {
   CodeModeConnector
-} from "./chunk-FPB463GO.js";
+} from "./chunk-4TG7GIKD.js";
 import {
   BaseConnector
-} from "./chunk-RW5IXYW4.js";
+} from "./chunk-MNFWS6KR.js";
 import {
   JSONSchemaToZod
 } from "./chunk-LG5NSHEL.js";
 import {
   Tel,
   getPackageVersion
-} from "./chunk-I7CE4EUX.js";
+} from "./chunk-RRMGSMJF.js";
 import {
   logger
 } from "./chunk-QWQYAQCK.js";
@@ -2356,7 +2356,7 @@ var MCPClient = class _MCPClient extends BaseMCPClient {
       clientInfo: serverConfig.clientInfo ?? this.config.clientInfo
     };
     if ("command" in merged && "args" in merged) {
-      const { StdioConnector } = await import("./stdio-6JH35S33.js");
+      const { StdioConnector } = await import("./stdio-YFXMCFDI.js");
       const stdioConfig = merged;
       return new StdioConnector({
         command: stdioConfig.command,

package/dist/{chunk-C7ODAIQP.js → chunk-6KQBOM7B.js}

@@ -1,6 +1,6 @@
 import {
   CODE_MODE_AGENT_PROMPT
-} from "./chunk-FPB463GO.js";
+} from "./chunk-4TG7GIKD.js";
 import {
   LangChainAdapter
 } from "./chunk-27JERD25.js";
@@ -8,7 +8,7 @@ import {
   Telemetry,
   extractModelInfo,
   getPackageVersion
-} from "./chunk-I7CE4EUX.js";
+} from "./chunk-RRMGSMJF.js";
 import {
   logger
 } from "./chunk-QWQYAQCK.js";

package/dist/{chunk-QSK3JFMD.js → chunk-D4MXTACG.js}

@@ -1,6 +1,6 @@
 import {
   Telemetry
-} from "./chunk-G2SZKR6C.js";
+} from "./chunk-DH2RCNK6.js";
 import {
   logger
 } from "./chunk-QWQYAQCK.js";

package/dist/{chunk-G2SZKR6C.js → chunk-DH2RCNK6.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-3GQAWCBQ.js";
 
 // src/version.ts
-var VERSION = "1.31.1";
+var VERSION = "1.32.0";
 function getPackageVersion() {
   return VERSION;
 }

package/dist/{chunk-GGLNYKLW.js → chunk-G3E7PJXG.js}

@@ -1,7 +1,7 @@
 import {
   OAuthSessionStore,
   sanitizeUrl
-} from "./chunk-MMRBRXYD.js";
+} from "./chunk-HDFPTC56.js";
 import {
   __name
 } from "./chunk-3GQAWCBQ.js";
@@ -234,6 +234,22 @@ var BrowserOAuthClientProvider = class {
   invalidateCredentials(scope) {
     return this.session.invalidateCredentials(scope);
   }
+  /**
+   * Resolve this server's OAuth token endpoint (via discovery, cached). Lets
+   * consumers persist the endpoint alongside the tokens for server-side
+   * proactive refresh. Returns `null` when unavailable.
+   */
+  getTokenEndpoint() {
+    return this.session.getTokenEndpoint();
+  }
+  /**
+   * Return the stored OAuth client credentials (DCR or static). Lets consumers
+   * persist the `client_id`/`client_secret` for server-side refresh. Returns
+   * `null` when unavailable.
+   */
+  getClientCredentials() {
+    return this.session.getClientCredentials();
+  }
   /**
    * Generates and persists `StoredState` for an authorization request,
    * applies browser-only resource rewriting, and returns the sanitized URL

package/dist/{chunk-MMRBRXYD.js → chunk-HDFPTC56.js}

@@ -279,6 +279,56 @@ var OAuthSessionStore = class _OAuthSessionStore {
     if (!stored.refresh_token) return null;
     return this._dedupedRefresh(stored);
   }
+  /**
+   * Return the stored OAuth client credentials (from Dynamic Client
+   * Registration or a pre-registered static client). Consumers can persist
+   * these alongside the tokens so a backend can perform a server-side refresh
+   * (most token endpoints require at least the `client_id` on refresh).
+   * Returns `null` when no client info is available.
+   */
+  async getClientCredentials() {
+    try {
+      const info = await this.clientInformation();
+      if (!info?.client_id) return null;
+      return {
+        client_id: info.client_id,
+        ...info.client_secret ? { client_secret: info.client_secret } : {}
+      };
+    } catch {
+      return null;
+    }
+  }
+  /**
+   * Resolve this server's OAuth token endpoint via PRM → authorization-server
+   * metadata discovery. Cached in-memory and persisted (so consumers can store
+   * it alongside the tokens, e.g. for server-side proactive refresh). Returns
+   * `null` when the server is not OAuth-protected or discovery fails.
+   */
+  async getTokenEndpoint() {
+    if (this._cachedMetadata?.token_endpoint) {
+      return this._cachedMetadata.token_endpoint;
+    }
+    try {
+      const persisted = await this.store.get(this.getKey("token_endpoint"));
+      if (persisted) return persisted;
+      const resourceMetadata = await discoverOAuthProtectedResourceMetadata(
+        this.serverUrl
+      );
+      const authServerUrl = resourceMetadata.authorization_servers?.[0];
+      if (!authServerUrl) return null;
+      const metadata = await discoverAuthorizationServerMetadata(authServerUrl);
+      if (!metadata?.token_endpoint) return null;
+      this._cachedAuthServerUrl = authServerUrl;
+      this._cachedMetadata = metadata;
+      await this.store.set(
+        this.getKey("token_endpoint"),
+        metadata.token_endpoint
+      );
+      return metadata.token_endpoint;
+    } catch {
+      return null;
+    }
+  }
 };
 
 export {

package/dist/{chunk-RW5IXYW4.js → chunk-MNFWS6KR.js}

@@ -1,6 +1,6 @@
 import {
   Telemetry
-} from "./chunk-I7CE4EUX.js";
+} from "./chunk-RRMGSMJF.js";
 import {
   logger
 } from "./chunk-QWQYAQCK.js";

package/dist/{chunk-CAOK3APG.js → chunk-NZDEUT7V.js}

@@ -3,11 +3,11 @@ import {
   HttpConnector,
   normalizeClientInfo,
   resolveCallbacks
-} from "./chunk-LTCJ4JN5.js";
+} from "./chunk-OAFYT5AO.js";
 import {
   Tel,
   getPackageVersion
-} from "./chunk-G2SZKR6C.js";
+} from "./chunk-DH2RCNK6.js";
 import {
   logger
 } from "./chunk-QWQYAQCK.js";
@@ -406,6 +406,56 @@ var OAuthSessionStore = class _OAuthSessionStore {
     if (!stored.refresh_token) return null;
     return this._dedupedRefresh(stored);
   }
+  /**
+   * Return the stored OAuth client credentials (from Dynamic Client
+   * Registration or a pre-registered static client). Consumers can persist
+   * these alongside the tokens so a backend can perform a server-side refresh
+   * (most token endpoints require at least the `client_id` on refresh).
+   * Returns `null` when no client info is available.
+   */
+  async getClientCredentials() {
+    try {
+      const info = await this.clientInformation();
+      if (!info?.client_id) return null;
+      return {
+        client_id: info.client_id,
+        ...info.client_secret ? { client_secret: info.client_secret } : {}
+      };
+    } catch {
+      return null;
+    }
+  }
+  /**
+   * Resolve this server's OAuth token endpoint via PRM → authorization-server
+   * metadata discovery. Cached in-memory and persisted (so consumers can store
+   * it alongside the tokens, e.g. for server-side proactive refresh). Returns
+   * `null` when the server is not OAuth-protected or discovery fails.
+   */
+  async getTokenEndpoint() {
+    if (this._cachedMetadata?.token_endpoint) {
+      return this._cachedMetadata.token_endpoint;
+    }
+    try {
+      const persisted = await this.store.get(this.getKey("token_endpoint"));
+      if (persisted) return persisted;
+      const resourceMetadata = await discoverOAuthProtectedResourceMetadata(
+        this.serverUrl
+      );
+      const authServerUrl = resourceMetadata.authorization_servers?.[0];
+      if (!authServerUrl) return null;
+      const metadata = await discoverAuthorizationServerMetadata(authServerUrl);
+      if (!metadata?.token_endpoint) return null;
+      this._cachedAuthServerUrl = authServerUrl;
+      this._cachedMetadata = metadata;
+      await this.store.set(
+        this.getKey("token_endpoint"),
+        metadata.token_endpoint
+      );
+      return metadata.token_endpoint;
+    } catch {
+      return null;
+    }
+  }
 };
 
 // src/auth/browser-provider.ts
@@ -612,6 +662,22 @@ var BrowserOAuthClientProvider = class {
   invalidateCredentials(scope) {
     return this.session.invalidateCredentials(scope);
   }
+  /**
+   * Resolve this server's OAuth token endpoint (via discovery, cached). Lets
+   * consumers persist the endpoint alongside the tokens for server-side
+   * proactive refresh. Returns `null` when unavailable.
+   */
+  getTokenEndpoint() {
+    return this.session.getTokenEndpoint();
+  }
+  /**
+   * Return the stored OAuth client credentials (DCR or static). Lets consumers
+   * persist the `client_id`/`client_secret` for server-side refresh. Returns
+   * `null` when unavailable.
+   */
+  getClientCredentials() {
+    return this.session.getClientCredentials();
+  }
   /**
    * Generates and persists `StoredState` for an authorization request,
    * applies browser-only resource rewriting, and returns the sanitized URL

package/dist/{chunk-LTCJ4JN5.js → chunk-OAFYT5AO.js}

@@ -1,11 +1,11 @@
 import {
   BaseConnector,
   ConnectionManager
-} from "./chunk-QSK3JFMD.js";
+} from "./chunk-D4MXTACG.js";
 import {
   Tel,
   getPackageVersion
-} from "./chunk-G2SZKR6C.js";
+} from "./chunk-DH2RCNK6.js";
 import {
   logger
 } from "./chunk-QWQYAQCK.js";

package/dist/{chunk-L3MMM6MR.js → chunk-OKVO7FBP.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-GKPKUKD6.js";
 import {
   BaseConnector
-} from "./chunk-RW5IXYW4.js";
+} from "./chunk-MNFWS6KR.js";
 import {
   logger
 } from "./chunk-QWQYAQCK.js";

package/dist/{chunk-I7CE4EUX.js → chunk-RRMGSMJF.js}

@@ -13,7 +13,7 @@ import {
 } from "./chunk-3GQAWCBQ.js";
 
 // src/version.ts
-var VERSION = "1.31.1";
+var VERSION = "1.32.0";
 function getPackageVersion() {
   return VERSION;
 }

package/dist/{chunk-G75KKA2M.js → chunk-S7X3LKYT.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-KUEVOU4M.js";
 import {
   Telemetry
-} from "./chunk-I7CE4EUX.js";
+} from "./chunk-RRMGSMJF.js";
 import {
   generateUUID
 } from "./chunk-MTHLLDCX.js";

package/dist/{client-ZSC7UQDB.js → client-3KX7OSGL.js}

@@ -7,15 +7,15 @@ import {
   createConnectorFromConfig,
   normalizeClientInfo,
   resolveCallbacks
-} from "./chunk-LTCJ4JN5.js";
+} from "./chunk-OAFYT5AO.js";
 import "./chunk-URE3PRDB.js";
 import {
   BaseConnector
-} from "./chunk-QSK3JFMD.js";
+} from "./chunk-D4MXTACG.js";
 import {
   Tel,
   getPackageVersion
-} from "./chunk-G2SZKR6C.js";
+} from "./chunk-DH2RCNK6.js";
 import {
   logger
 } from "./chunk-QWQYAQCK.js";
@@ -1107,7 +1107,7 @@ var MCPClient = class _MCPClient extends BaseMCPClient {
       clientInfo: serverConfig.clientInfo ?? this.config.clientInfo
     };
     if ("command" in merged && "args" in merged) {
-      const { StdioConnector } = await import("./stdio-4B64EGZM.js");
+      const { StdioConnector } = await import("./stdio-GW5RCDKN.js");
       const stdioConfig = merged;
       return new StdioConnector({
         command: stdioConfig.command,

package/dist/index.cjs

@@ -1170,7 +1170,7 @@ var VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    VERSION = "1.31.1";
+    VERSION = "1.32.0";
     __name(getPackageVersion, "getPackageVersion");
   }
 });
@@ -9981,6 +9981,56 @@ var OAuthSessionStore = class _OAuthSessionStore {
     if (!stored.refresh_token) return null;
     return this._dedupedRefresh(stored);
   }
+  /**
+   * Return the stored OAuth client credentials (from Dynamic Client
+   * Registration or a pre-registered static client). Consumers can persist
+   * these alongside the tokens so a backend can perform a server-side refresh
+   * (most token endpoints require at least the `client_id` on refresh).
+   * Returns `null` when no client info is available.
+   */
+  async getClientCredentials() {
+    try {
+      const info = await this.clientInformation();
+      if (!info?.client_id) return null;
+      return {
+        client_id: info.client_id,
+        ...info.client_secret ? { client_secret: info.client_secret } : {}
+      };
+    } catch {
+      return null;
+    }
+  }
+  /**
+   * Resolve this server's OAuth token endpoint via PRM → authorization-server
+   * metadata discovery. Cached in-memory and persisted (so consumers can store
+   * it alongside the tokens, e.g. for server-side proactive refresh). Returns
+   * `null` when the server is not OAuth-protected or discovery fails.
+   */
+  async getTokenEndpoint() {
+    if (this._cachedMetadata?.token_endpoint) {
+      return this._cachedMetadata.token_endpoint;
+    }
+    try {
+      const persisted = await this.store.get(this.getKey("token_endpoint"));
+      if (persisted) return persisted;
+      const resourceMetadata = await (0, import_auth.discoverOAuthProtectedResourceMetadata)(
+        this.serverUrl
+      );
+      const authServerUrl = resourceMetadata.authorization_servers?.[0];
+      if (!authServerUrl) return null;
+      const metadata = await (0, import_auth.discoverAuthorizationServerMetadata)(authServerUrl);
+      if (!metadata?.token_endpoint) return null;
+      this._cachedAuthServerUrl = authServerUrl;
+      this._cachedMetadata = metadata;
+      await this.store.set(
+        this.getKey("token_endpoint"),
+        metadata.token_endpoint
+      );
+      return metadata.token_endpoint;
+    } catch {
+      return null;
+    }
+  }
 };
 
 // src/auth/browser-provider.ts
@@ -10187,6 +10237,22 @@ var BrowserOAuthClientProvider = class {
   invalidateCredentials(scope) {
     return this.session.invalidateCredentials(scope);
   }
+  /**
+   * Resolve this server's OAuth token endpoint (via discovery, cached). Lets
+   * consumers persist the endpoint alongside the tokens for server-side
+   * proactive refresh. Returns `null` when unavailable.
+   */
+  getTokenEndpoint() {
+    return this.session.getTokenEndpoint();
+  }
+  /**
+   * Return the stored OAuth client credentials (DCR or static). Lets consumers
+   * persist the `client_id`/`client_secret` for server-side refresh. Returns
+   * `null` when unavailable.
+   */
+  getClientCredentials() {
+    return this.session.getClientCredentials();
+  }
   /**
    * Generates and persists `StoredState` for an authorization request,
    * applies browser-only resource rewriting, and returns the sanitized URL
@@ -12453,6 +12519,18 @@ function useMcp(options) {
           }
           if (tokens?.access_token) {
             const expiresAt = tokens.expires_in ? Date.now() + tokens.expires_in * 1e3 : void 0;
+            let tokenEndpoint = null;
+            let clientCreds = null;
+            try {
+              tokenEndpoint = await authProviderRef.current.getTokenEndpoint?.() ?? null;
+            } catch {
+              tokenEndpoint = null;
+            }
+            try {
+              clientCreds = await authProviderRef.current.getClientCredentials?.() ?? null;
+            } catch {
+              clientCreds = null;
+            }
             if (!isMountedRef.current) {
               addLog("debug", "Skipping state update - component unmounted");
               return "failed";
@@ -12462,7 +12540,10 @@ function useMcp(options) {
               token_type: tokens.token_type || "Bearer",
               expires_at: expiresAt,
               refresh_token: tokens.refresh_token,
-              scope: tokens.scope
+              scope: tokens.scope,
+              ...tokenEndpoint ? { token_endpoint: tokenEndpoint } : {},
+              ...clientCreds?.client_id ? { client_id: clientCreds.client_id } : {},
+              ...clientCreds?.client_secret ? { client_secret: clientCreds.client_secret } : {}
             });
           }
         }

package/dist/index.js

@@ -5,7 +5,7 @@ import {
 } from "./chunk-OWF2HVMR.js";
 import {
   StdioConnector
-} from "./chunk-L3MMM6MR.js";
+} from "./chunk-OKVO7FBP.js";
 import {
   clearRpcLogs,
   getAllRpcLogs,
@@ -32,7 +32,7 @@ import {
   reject,
   resolveCallbacks,
   validate
-} from "./chunk-TMJINEB7.js";
+} from "./chunk-5OTYGJ5I.js";
 import "./chunk-GKPKUKD6.js";
 import "./chunk-GXNAXUDI.js";
 import {
@@ -50,12 +50,12 @@ import {
   getSupportedProviders,
   isValidLLMString,
   parseLLMString
-} from "./chunk-C7ODAIQP.js";
+} from "./chunk-6KQBOM7B.js";
 import "./chunk-N27VLLMA.js";
-import "./chunk-FPB463GO.js";
+import "./chunk-4TG7GIKD.js";
 import {
   BaseConnector
-} from "./chunk-RW5IXYW4.js";
+} from "./chunk-MNFWS6KR.js";
 import {
   BaseAdapter
 } from "./chunk-27JERD25.js";
@@ -67,10 +67,10 @@ import {
   onMcpAuthorization,
   probeAuthParams,
   runAuthPopup
-} from "./chunk-GGLNYKLW.js";
+} from "./chunk-G3E7PJXG.js";
 import {
   sanitizeUrl
-} from "./chunk-MMRBRXYD.js";
+} from "./chunk-HDFPTC56.js";
 import {
   createNotification,
   createRequest
@@ -98,7 +98,7 @@ import {
   createServerRunEventData,
   getPackageVersion,
   setTelemetrySource
-} from "./chunk-I7CE4EUX.js";
+} from "./chunk-RRMGSMJF.js";
 import {
   telFetch
 } from "./chunk-BXZHMYMM.js";
@@ -1531,6 +1531,18 @@ function useMcp(options) {
           }
           if (tokens?.access_token) {
             const expiresAt = tokens.expires_in ? Date.now() + tokens.expires_in * 1e3 : void 0;
+            let tokenEndpoint = null;
+            let clientCreds = null;
+            try {
+              tokenEndpoint = await authProviderRef.current.getTokenEndpoint?.() ?? null;
+            } catch {
+              tokenEndpoint = null;
+            }
+            try {
+              clientCreds = await authProviderRef.current.getClientCredentials?.() ?? null;
+            } catch {
+              clientCreds = null;
+            }
             if (!isMountedRef.current) {
               addLog("debug", "Skipping state update - component unmounted");
               return "failed";
@@ -1540,7 +1552,10 @@ function useMcp(options) {
               token_type: tokens.token_type || "Bearer",
               expires_at: expiresAt,
               refresh_token: tokens.refresh_token,
-              scope: tokens.scope
+              scope: tokens.scope,
+              ...tokenEndpoint ? { token_endpoint: tokenEndpoint } : {},
+              ...clientCreds?.client_id ? { client_id: clientCreds.client_id } : {},
+              ...clientCreds?.client_secret ? { client_secret: clientCreds.client_secret } : {}
             });
           }
         }

package/dist/src/agents/index.cjs

@@ -583,7 +583,7 @@ var VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    VERSION = "1.31.1";
+    VERSION = "1.32.0";
     __name(getPackageVersion, "getPackageVersion");
   }
 });

package/dist/src/agents/index.js

@@ -3,13 +3,13 @@ import {
   MCPAgent,
   PROMPTS,
   RemoteAgent
-} from "../../chunk-C7ODAIQP.js";
+} from "../../chunk-6KQBOM7B.js";
 import "../../chunk-N27VLLMA.js";
-import "../../chunk-FPB463GO.js";
-import "../../chunk-RW5IXYW4.js";
+import "../../chunk-4TG7GIKD.js";
+import "../../chunk-MNFWS6KR.js";
 import "../../chunk-27JERD25.js";
 import "../../chunk-LG5NSHEL.js";
-import "../../chunk-I7CE4EUX.js";
+import "../../chunk-RRMGSMJF.js";
 import "../../chunk-BXZHMYMM.js";
 import "../../chunk-MTHLLDCX.js";
 import "../../chunk-QWQYAQCK.js";

package/dist/src/auth/browser-provider.d.ts

@@ -62,6 +62,21 @@ export declare class BrowserOAuthClientProvider implements OAuthClientProvider {
     codeVerifier(): Promise<string>;
     saveCodeVerifier(codeVerifier: string): Promise<void>;
     invalidateCredentials(scope: "all" | "client" | "tokens" | "verifier"): Promise<void>;
+    /**
+     * Resolve this server's OAuth token endpoint (via discovery, cached). Lets
+     * consumers persist the endpoint alongside the tokens for server-side
+     * proactive refresh. Returns `null` when unavailable.
+     */
+    getTokenEndpoint(): Promise<string | null>;
+    /**
+     * Return the stored OAuth client credentials (DCR or static). Lets consumers
+     * persist the `client_id`/`client_secret` for server-side refresh. Returns
+     * `null` when unavailable.
+     */
+    getClientCredentials(): Promise<{
+        client_id: string;
+        client_secret?: string;
+    } | null>;
     /**
      * Generates and persists `StoredState` for an authorization request,
      * applies browser-only resource rewriting, and returns the sanitized URL

package/dist/src/auth/browser-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-provider.d.ts","sourceRoot":"","sources":["../../../src/auth/browser-provider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,KAAK,EACV,sBAAsB,EACtB,mBAAmB,EACnB,WAAW,EACZ,MAAM,0CAA0C,CAAC;AAkBlD,UAAU,mBAAmB;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,CACd,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,IAAI,KAC7B,IAAI,CAAC;CACX;AAED;;GAEG;AACH,qBAAa,0BAA2B,YAAW,mBAAmB;IACpE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IACnD,OAAO,CAAC,OAAO,CAAoB;IAGnC,OAAO,CAAC,eAAe,CAAC,CAAU;IAClC,OAAO,CAAC,eAAe,CAAC,CAAU;IAClC,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,aAAa,CAAC,CAAe;IACrC,OAAO,CAAC,qBAAqB,CAAuB;IACpD,QAAQ,CAAC,aAAa,EAClB,CAAC,CACC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,IAAI,KAC7B,IAAI,CAAC,GACV,SAAS,CAAC;gBAEF,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB;IAiBhE,IAAI,gBAAgB,IAAI,MAAM,CAE7B;IAED,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,KAAK,IAAI,MAAM,GAAG,SAAS,CAE9B;IAED,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAIjC;;OAEG;IACH,uBAAuB,IAAI,IAAI;IA0J/B;;OAEG;IACH,YAAY,IAAI,IAAI;IAUpB,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,cAAc,IAAI,mBAAmB,CAExC;IAED,MAAM,IAAI,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAI1C,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,iBAAiB,IAAI,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC;IAShE,qBAAqB,CACzB,iBAAiB,EAAE,sBAAsB,GACxC,OAAO,CAAC,IAAI,CAAC;IAOhB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAI/B,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,qBAAqB,CACnB,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAC9C,OAAO,CAAC,IAAI,CAAC;IAIhB;;;;;OAKG;IACG,uBAAuB,CAAC,gBAAgB,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IAiBrE;;;OAGG;IACG,uBAAuB,CAAC,gBAAgB,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAuDnE;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAyBnC;;OAEG;IACH,uBAAuB,IAAI,MAAM,GAAG,IAAI;IAMxC,YAAY,IAAI,MAAM;CAqCvB"}
+{"version":3,"file":"browser-provider.d.ts","sourceRoot":"","sources":["../../../src/auth/browser-provider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,KAAK,EACV,sBAAsB,EACtB,mBAAmB,EACnB,WAAW,EACZ,MAAM,0CAA0C,CAAC;AAkBlD,UAAU,mBAAmB;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,CACd,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,IAAI,KAC7B,IAAI,CAAC;CACX;AAED;;GAEG;AACH,qBAAa,0BAA2B,YAAW,mBAAmB;IACpE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IACnD,OAAO,CAAC,OAAO,CAAoB;IAGnC,OAAO,CAAC,eAAe,CAAC,CAAU;IAClC,OAAO,CAAC,eAAe,CAAC,CAAU;IAClC,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,aAAa,CAAC,CAAe;IACrC,OAAO,CAAC,qBAAqB,CAAuB;IACpD,QAAQ,CAAC,aAAa,EAClB,CAAC,CACC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,IAAI,KAC7B,IAAI,CAAC,GACV,SAAS,CAAC;gBAEF,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB;IAiBhE,IAAI,gBAAgB,IAAI,MAAM,CAE7B;IAED,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,KAAK,IAAI,MAAM,GAAG,SAAS,CAE9B;IAED,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAIjC;;OAEG;IACH,uBAAuB,IAAI,IAAI;IA0J/B;;OAEG;IACH,YAAY,IAAI,IAAI;IAUpB,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,cAAc,IAAI,mBAAmB,CAExC;IAED,MAAM,IAAI,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAI1C,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,iBAAiB,IAAI,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC;IAShE,qBAAqB,CACzB,iBAAiB,EAAE,sBAAsB,GACxC,OAAO,CAAC,IAAI,CAAC;IAOhB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAI/B,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,qBAAqB,CACnB,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAC9C,OAAO,CAAC,IAAI,CAAC;IAIhB;;;;OAIG;IACH,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI1C;;;;OAIG;IACH,oBAAoB,IAAI,OAAO,CAAC;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,IAAI,CAAC;IAIT;;;;;OAKG;IACG,uBAAuB,CAAC,gBAAgB,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IAiBrE;;;OAGG;IACG,uBAAuB,CAAC,gBAAgB,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAuDnE;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAyBnC;;OAEG;IACH,uBAAuB,IAAI,MAAM,GAAG,IAAI;IAMxC,YAAY,IAAI,MAAM;CAqCvB"}

package/dist/src/auth/index-node.cjs

@@ -389,6 +389,56 @@ var OAuthSessionStore = class _OAuthSessionStore {
     if (!stored.refresh_token) return null;
     return this._dedupedRefresh(stored);
   }
+  /**
+   * Return the stored OAuth client credentials (from Dynamic Client
+   * Registration or a pre-registered static client). Consumers can persist
+   * these alongside the tokens so a backend can perform a server-side refresh
+   * (most token endpoints require at least the `client_id` on refresh).
+   * Returns `null` when no client info is available.
+   */
+  async getClientCredentials() {
+    try {
+      const info = await this.clientInformation();
+      if (!info?.client_id) return null;
+      return {
+        client_id: info.client_id,
+        ...info.client_secret ? { client_secret: info.client_secret } : {}
+      };
+    } catch {
+      return null;
+    }
+  }
+  /**
+   * Resolve this server's OAuth token endpoint via PRM → authorization-server
+   * metadata discovery. Cached in-memory and persisted (so consumers can store
+   * it alongside the tokens, e.g. for server-side proactive refresh). Returns
+   * `null` when the server is not OAuth-protected or discovery fails.
+   */
+  async getTokenEndpoint() {
+    if (this._cachedMetadata?.token_endpoint) {
+      return this._cachedMetadata.token_endpoint;
+    }
+    try {
+      const persisted = await this.store.get(this.getKey("token_endpoint"));
+      if (persisted) return persisted;
+      const resourceMetadata = await (0, import_auth.discoverOAuthProtectedResourceMetadata)(
+        this.serverUrl
+      );
+      const authServerUrl = resourceMetadata.authorization_servers?.[0];
+      if (!authServerUrl) return null;
+      const metadata = await (0, import_auth.discoverAuthorizationServerMetadata)(authServerUrl);
+      if (!metadata?.token_endpoint) return null;
+      this._cachedAuthServerUrl = authServerUrl;
+      this._cachedMetadata = metadata;
+      await this.store.set(
+        this.getKey("token_endpoint"),
+        metadata.token_endpoint
+      );
+      return metadata.token_endpoint;
+    } catch {
+      return null;
+    }
+  }
 };
 
 // src/auth/node-provider.ts