mcp-use 1.7.0-canary.1 → 1.7.0-canary.3

package/dist/src/agents/index.js

@@ -4,12 +4,13 @@ import {
 import {
   MCPAgent,
   RemoteAgent
-} from "../../chunk-GVVPUU5K.js";
+} from "../../chunk-S6K5QZBJ.js";
 import {
   PROMPTS
 } from "../../chunk-2AOGMX4T.js";
 import "../../chunk-2JBWOW4S.js";
-import "../../chunk-YURRUCIM.js";
+import "../../chunk-MTHLLDCX.js";
+import "../../chunk-CPG2WZUL.js";
 import "../../chunk-34R6SIER.js";
 import "../../chunk-3GQAWCBQ.js";
 export {

package/dist/src/auth/index.cjs

@@ -26,8 +26,33 @@ __export(auth_exports, {
 });
 module.exports = __toCommonJS(auth_exports);
 
+// src/utils/url-sanitize.ts
+function sanitizeUrl(raw) {
+  const abort = /* @__PURE__ */ __name(() => {
+    throw new Error(`Invalid url to pass to open(): ${raw}`);
+  }, "abort");
+  let url;
+  try {
+    url = new URL(raw);
+  } catch (_) {
+    abort();
+  }
+  if (url.protocol !== "https:" && url.protocol !== "http:") abort();
+  if (url.hostname !== encodeURIComponent(url.hostname)) abort();
+  if (url.username) url.username = encodeURIComponent(url.username);
+  if (url.password) url.password = encodeURIComponent(url.password);
+  url.pathname = url.pathname.slice(0, 1) + encodeURIComponent(url.pathname.slice(1)).replace(/%2f/gi, "/");
+  url.search = url.search.slice(0, 1) + Array.from(url.searchParams.entries()).map(sanitizeParam).join("&");
+  url.hash = url.hash.slice(0, 1) + encodeURIComponent(url.hash.slice(1));
+  return url.href;
+}
+__name(sanitizeUrl, "sanitizeUrl");
+function sanitizeParam([k, v]) {
+  return `${encodeURIComponent(k)}${v.length > 0 ? `=${encodeURIComponent(v)}` : ""}`;
+}
+__name(sanitizeParam, "sanitizeParam");
+
 // src/auth/browser-provider.ts
-var import_strict_url_sanitise = require("strict-url-sanitise");
 var BrowserOAuthClientProvider = class {
   static {
     __name(this, "BrowserOAuthClientProvider");
@@ -47,7 +72,7 @@ var BrowserOAuthClientProvider = class {
     this.serverUrlHash = this.hashString(serverUrl);
     this.clientName = options.clientName || "mcp-use";
     this.clientUri = options.clientUri || (typeof window !== "undefined" ? window.location.origin : "");
-    this.callbackUrl = (0, import_strict_url_sanitise.sanitizeUrl)(
+    this.callbackUrl = sanitizeUrl(
       options.callbackUrl || (typeof window !== "undefined" ? new URL("/oauth/callback", window.location.origin).toString() : "/oauth/callback")
     );
     this.preventAutoAuth = options.preventAutoAuth;
@@ -56,7 +81,7 @@ var BrowserOAuthClientProvider = class {
   }
   // --- SDK Interface Methods ---
   get redirectUrl() {
-    return (0, import_strict_url_sanitise.sanitizeUrl)(this.callbackUrl);
+    return sanitizeUrl(this.callbackUrl);
   }
   get clientMetadata() {
     return {
@@ -152,7 +177,7 @@ var BrowserOAuthClientProvider = class {
     localStorage.setItem(stateKey, JSON.stringify(stateData));
     authorizationUrl.searchParams.set("state", state);
     const authUrlString = authorizationUrl.toString();
-    const sanitizedAuthUrl = (0, import_strict_url_sanitise.sanitizeUrl)(authUrlString);
+    const sanitizedAuthUrl = sanitizeUrl(authUrlString);
     localStorage.setItem(this.getKey("last_auth_url"), sanitizedAuthUrl);
     return sanitizedAuthUrl;
   }
@@ -209,7 +234,7 @@ var BrowserOAuthClientProvider = class {
    */
   getLastAttemptedAuthUrl() {
     const storedUrl = localStorage.getItem(this.getKey("last_auth_url"));
-    return storedUrl ? (0, import_strict_url_sanitise.sanitizeUrl)(storedUrl) : null;
+    return storedUrl ? sanitizeUrl(storedUrl) : null;
   }
   clearStorage() {
     const prefixPattern = `${this.storageKeyPrefix}_${this.serverUrlHash}_`;

package/dist/src/auth/index.js

@@ -2,7 +2,7 @@ import "../../chunk-JQKKMUCT.js";
 import {
   BrowserOAuthClientProvider,
   onMcpAuthorization
-} from "../../chunk-PE7UMCVO.js";
+} from "../../chunk-3R5PDYIN.js";
 import "../../chunk-3GQAWCBQ.js";
 export {
   BrowserOAuthClientProvider,