mcp-use 2.0.0-beta.2 → 2.0.0-beta.21

package/dist/next/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/next/handler.ts","../../src/next/config.ts"],"sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport type { MCPServer } from \"../server.js\";\nimport type { ViewManifestEntry, ViewsManifest } from \"../views/types.js\";\n\n/** Route Handler exports returned by {@link createNextHandler}. */\nexport interface NextMcpHandlers {\n  GET(request: Request): Promise<Response>;\n  POST(request: Request): Promise<Response>;\n  DELETE(request: Request): Promise<Response>;\n  OPTIONS(request: Request): Promise<Response>;\n}\n\nfunction isViewManifestEntry(value: unknown): value is ViewManifestEntry {\n  if (typeof value !== \"object\" || value === null || !(\"kind\" in value)) {\n    return false;\n  }\n  if (value.kind === \"inline\") {\n    return (\n      \"js\" in value &&\n      typeof value.js === \"string\" &&\n      \"css\" in value &&\n      typeof value.css === \"string\"\n    );\n  }\n  return (\n    value.kind === \"external\" &&\n    \"entry\" in value &&\n    typeof value.entry === \"string\" &&\n    \"css\" in value &&\n    Array.isArray(value.css) &&\n    value.css.every((item) => typeof item === \"string\") &&\n    (!(\"scripts\" in value) ||\n      (Array.isArray(value.scripts) &&\n        value.scripts.every((item) => typeof item === \"string\")))\n  );\n}\n\nfunction parseBuildManifest(raw: string, manifestPath: string): ViewsManifest {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch (error) {\n    const reason = error instanceof Error ? error.message : String(error);\n    throw new Error(\n      `Invalid mcp-use build manifest at ${manifestPath}: ${reason}`\n    );\n  }\n  if (\n    typeof parsed !== \"object\" ||\n    parsed === null ||\n    Array.isArray(parsed) ||\n    !(\"views\" in parsed) ||\n    typeof parsed.views !== \"object\" ||\n    parsed.views === null ||\n    Array.isArray(parsed.views) ||\n    !Object.values(parsed.views).every(isViewManifestEntry)\n  ) {\n    throw new Error(`Invalid mcp-use build manifest at ${manifestPath}.`);\n  }\n  return parsed.views as ViewsManifest;\n}\n\n/**\n * Create App Router method exports for an authored MCP server.\n *\n * The generated artifact contains only view registration data; application\n * source continues to import its own server module. Initialization is lazy so\n * importing a route during `next build` does not perform filesystem I/O.\n */\nexport function createNextHandler<TUser>(\n  server: MCPServer<TUser>\n): NextMcpHandlers {\n  const projectRoot = process.cwd();\n  const manifestPath = join(\n    process.cwd(),\n    \".mcp-use\",\n    \"build\",\n    \"manifest.json\"\n  );\n\n  let handlerPromise:\n    | Promise<(request: Request) => Promise<Response>>\n    | undefined;\n\n  const initialize = async (): Promise<\n    (request: Request) => Promise<Response>\n  > => {\n    let raw: string;\n    try {\n      raw = await readFile(manifestPath, \"utf8\");\n    } catch (error) {\n      const code =\n        typeof error === \"object\" && error !== null && \"code\" in error\n          ? error.code\n          : undefined;\n      if (code === \"ENOENT\") {\n        throw new Error(\n          `No mcp-use build found at ${manifestPath}. ` +\n            \"Wrap next.config with withMcpUse() before mounting this route.\"\n        );\n      }\n      throw error;\n    }\n    server.__primeViews(parseBuildManifest(raw, manifestPath), {\n      projectRoot,\n    });\n    return server.getHandler();\n  };\n\n  const handle = async (request: Request): Promise<Response> => {\n    handlerPromise ??= initialize();\n    return (await handlerPromise)(request);\n  };\n\n  const preflight = async (): Promise<Response> =>\n    new Response(null, {\n      status: 204,\n      headers: {\n        \"Access-Control-Allow-Origin\": \"*\",\n        \"Access-Control-Allow-Methods\": \"GET, POST, DELETE, OPTIONS\",\n        \"Access-Control-Allow-Headers\":\n          \"Authorization, Content-Type, Accept, Mcp-Protocol-Version, Mcp-Method, Mcp-Name, Mcp-Session-Id, Last-Event-ID\",\n        \"Access-Control-Expose-Headers\": \"Mcp-Session-Id\",\n      },\n    });\n\n  return { GET: handle, POST: handle, DELETE: handle, OPTIONS: preflight };\n}\n","const DEFAULT_BASE_PATH = \"/api/mcp\";\nconst BUILD_TRACE_GLOB = \"./.mcp-use/build/**/*\";\n\ninterface NextHeader {\n  key: string;\n  value: string;\n}\n\ninterface NextHeaderRule {\n  source: string;\n  headers: NextHeader[];\n}\n\n/** Minimal structural Next.js config type, avoiding a runtime Next dependency. */\nexport interface NextConfigLike {\n  /** Preserve arbitrary Next.js settings while augmenting the fields we use. */\n  [key: string]: unknown;\n  headers?: () => NextHeaderRule[] | Promise<NextHeaderRule[]>;\n  outputFileTracingIncludes?: Record<string, string[]>;\n}\n\n/** Options for {@link withMcpUse}. */\nexport interface WithMcpUseOptions {\n  /** Authored MCP server entry, relative to `projectRoot`. */\n  entry?: string;\n  /** Conventional MCP source directory containing the entry and `views/`. */\n  mcpDir?: string;\n  /** Explicit views directory, relative to `projectRoot`. */\n  viewsDir?: string;\n  /** MCP route mounted by the application. Defaults to `/api/mcp`. */\n  basePath?: string;\n  /** Next.js project root. Defaults to `process.cwd()`. */\n  projectRoot?: string;\n}\n\nconst MCP_CORS_HEADERS: NextHeader[] = [\n  { key: \"Access-Control-Allow-Origin\", value: \"*\" },\n  {\n    key: \"Access-Control-Allow-Methods\",\n    value: \"GET, POST, DELETE, OPTIONS\",\n  },\n  {\n    key: \"Access-Control-Allow-Headers\",\n    value:\n      \"Authorization, Content-Type, Accept, Mcp-Protocol-Version, Mcp-Method, Mcp-Name, Mcp-Session-Id, Last-Event-ID\",\n  },\n  { key: \"Access-Control-Expose-Headers\", value: \"Mcp-Session-Id\" },\n];\n\nfunction normalizeBasePath(value: string | undefined): string {\n  const raw = value ?? DEFAULT_BASE_PATH;\n  if (!raw.startsWith(\"/\") || raw === \"/\" || raw.includes(\":\")) {\n    throw new Error(\n      `withMcpUse basePath must be a concrete absolute path; received ${JSON.stringify(raw)}.`\n    );\n  }\n  return raw.replace(/\\/+$/, \"\");\n}\n\nfunction mergeHeaders(\n  existing: NextHeader[],\n  additions: NextHeader[]\n): NextHeader[] {\n  const next = [...existing];\n  for (const header of additions) {\n    const index = next.findIndex(\n      (candidate) => candidate.key.toLowerCase() === header.key.toLowerCase()\n    );\n    if (index === -1) next.push(header);\n    else next[index] = header;\n  }\n  return next;\n}\n\nasync function buildMcpProject(\n  projectRoot: string,\n  options: WithMcpUseOptions\n): Promise<void> {\n  // Resolve Node built-ins only when Next evaluates its config. Keeping them\n  // out of the static module graph prevents Turbopack's route tracer from\n  // treating this config-time hook as an application runtime dependency.\n  const { spawn } = process.getBuiltinModule(\n    \"node:child_process\"\n  ) as typeof import(\"node:child_process\");\n  const { fileURLToPath } = process.getBuiltinModule(\n    \"node:url\"\n  ) as typeof import(\"node:url\");\n  const cliEntry = fileURLToPath(new URL(\"../bin.js\", import.meta.url));\n  const args = [cliEntry, \"build\"];\n  if (options.entry !== undefined) args.push(\"--entry\", options.entry);\n  if (options.mcpDir !== undefined) args.push(\"--mcp-dir\", options.mcpDir);\n  if (options.viewsDir !== undefined)\n    args.push(\"--views-dir\", options.viewsDir);\n\n  await new Promise<void>((resolvePromise, reject) => {\n    const child = spawn(process.execPath, args, {\n      cwd: projectRoot,\n      env: process.env,\n      stdio: \"inherit\",\n    });\n    child.once(\"error\", reject);\n    child.once(\"exit\", (code, signal) => {\n      if (code === 0) {\n        resolvePromise();\n        return;\n      }\n      reject(\n        new Error(\n          `mcp-use build failed${code === null ? ` with signal ${signal}` : ` with exit code ${code}`}.`\n        )\n      );\n    });\n  });\n}\n\n/** @internal Exported for focused composition tests, not from `mcp-use/next`. */\nexport function composeNextConfig<T extends NextConfigLike>(\n  nextConfig: T,\n  basePath: string\n): T & NextConfigLike {\n  const source = `${basePath}/:path*`;\n  const originalHeaders = nextConfig.headers?.bind(nextConfig);\n  const existingTrace = nextConfig.outputFileTracingIncludes ?? {};\n  const routeTrace = existingTrace[basePath] ?? [];\n\n  return {\n    ...nextConfig,\n    async headers(): Promise<NextHeaderRule[]> {\n      const rules =\n        originalHeaders === undefined ? [] : await originalHeaders();\n      const matchingIndex = rules.findIndex((rule) => rule.source === source);\n      if (matchingIndex === -1) {\n        return [...rules, { source, headers: MCP_CORS_HEADERS }];\n      }\n      return rules.map((rule, index) =>\n        index === matchingIndex\n          ? { ...rule, headers: mergeHeaders(rule.headers, MCP_CORS_HEADERS) }\n          : rule\n      );\n    },\n    outputFileTracingIncludes: {\n      ...existingTrace,\n      [basePath]: [...new Set([...routeTrace, BUILD_TRACE_GLOB])],\n    },\n  };\n}\n\n/**\n * Add mcp-use build, CORS, and serverless tracing to a Next.js config.\n *\n * The MCP build runs when Next evaluates `next.config`, for both development\n * and production builds. This removes the need for a separate prebuild script.\n */\nexport async function withMcpUse<T extends NextConfigLike = NextConfigLike>(\n  nextConfig: T = {} as T,\n  options: WithMcpUseOptions = {}\n): Promise<T & NextConfigLike> {\n  const basePath = normalizeBasePath(options.basePath);\n  const projectRoot = options.projectRoot ?? process.cwd();\n  // Build in a separate process so the Vite view compiler never becomes part\n  // of the module graph imported by a Next.js Route Handler.\n  await buildMcpProject(projectRoot, options);\n  return composeNextConfig(nextConfig, basePath);\n}\n"],"mappings":";AAAA,SAAS,gBAAgB;AACzB,SAAS,YAAY;AAarB,SAAS,oBAAoB,OAA4C;AACvE,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,UAAU,QAAQ;AACrE,WAAO;AAAA,EACT;AACA,MAAI,MAAM,SAAS,UAAU;AAC3B,WACE,QAAQ,SACR,OAAO,MAAM,OAAO,YACpB,SAAS,SACT,OAAO,MAAM,QAAQ;AAAA,EAEzB;AACA,SACE,MAAM,SAAS,cACf,WAAW,SACX,OAAO,MAAM,UAAU,YACvB,SAAS,SACT,MAAM,QAAQ,MAAM,GAAG,KACvB,MAAM,IAAI,MAAM,CAAC,SAAS,OAAO,SAAS,QAAQ,MACjD,EAAE,aAAa,UACb,MAAM,QAAQ,MAAM,OAAO,KAC1B,MAAM,QAAQ,MAAM,CAAC,SAAS,OAAO,SAAS,QAAQ;AAE9D;AAEA,SAAS,mBAAmB,KAAa,cAAqC;AAC5E,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,SAAS,OAAO;AACd,UAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpE,UAAM,IAAI;AAAA,MACR,qCAAqC,YAAY,KAAK,MAAM;AAAA,IAC9D;AAAA,EACF;AACA,MACE,OAAO,WAAW,YAClB,WAAW,QACX,MAAM,QAAQ,MAAM,KACpB,EAAE,WAAW,WACb,OAAO,OAAO,UAAU,YACxB,OAAO,UAAU,QACjB,MAAM,QAAQ,OAAO,KAAK,KAC1B,CAAC,OAAO,OAAO,OAAO,KAAK,EAAE,MAAM,mBAAmB,GACtD;AACA,UAAM,IAAI,MAAM,qCAAqC,YAAY,GAAG;AAAA,EACtE;AACA,SAAO,OAAO;AAChB;AASO,SAAS,kBACd,QACiB;AACjB,QAAM,cAAc,QAAQ,IAAI;AAChC,QAAM,eAAe;AAAA,IACnB,QAAQ,IAAI;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI;AAIJ,QAAM,aAAa,YAEd;AACH,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,SAAS,cAAc,MAAM;AAAA,IAC3C,SAAS,OAAO;AACd,YAAM,OACJ,OAAO,UAAU,YAAY,UAAU,QAAQ,UAAU,QACrD,MAAM,OACN;AACN,UAAI,SAAS,UAAU;AACrB,cAAM,IAAI;AAAA,UACR,6BAA6B,YAAY;AAAA,QAE3C;AAAA,MACF;AACA,YAAM;AAAA,IACR;AACA,WAAO,aAAa,mBAAmB,KAAK,YAAY,GAAG;AAAA,MACzD;AAAA,IACF,CAAC;AACD,WAAO,OAAO,WAAW;AAAA,EAC3B;AAEA,QAAM,SAAS,OAAO,YAAwC;AAC5D,uBAAmB,WAAW;AAC9B,YAAQ,MAAM,gBAAgB,OAAO;AAAA,EACvC;AAEA,QAAM,YAAY,YAChB,IAAI,SAAS,MAAM;AAAA,IACjB,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,+BAA+B;AAAA,MAC/B,gCAAgC;AAAA,MAChC,gCACE;AAAA,MACF,iCAAiC;AAAA,IACnC;AAAA,EACF,CAAC;AAEH,SAAO,EAAE,KAAK,QAAQ,MAAM,QAAQ,QAAQ,QAAQ,SAAS,UAAU;AACzE;;;ACjIA,IAAM,oBAAoB;AAC1B,IAAM,mBAAmB;AAkCzB,IAAM,mBAAiC;AAAA,EACrC,EAAE,KAAK,+BAA+B,OAAO,IAAI;AAAA,EACjD;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OACE;AAAA,EACJ;AAAA,EACA,EAAE,KAAK,iCAAiC,OAAO,iBAAiB;AAClE;AAEA,SAAS,kBAAkB,OAAmC;AAC5D,QAAM,MAAM,SAAS;AACrB,MAAI,CAAC,IAAI,WAAW,GAAG,KAAK,QAAQ,OAAO,IAAI,SAAS,GAAG,GAAG;AAC5D,UAAM,IAAI;AAAA,MACR,kEAAkE,KAAK,UAAU,GAAG,CAAC;AAAA,IACvF;AAAA,EACF;AACA,SAAO,IAAI,QAAQ,QAAQ,EAAE;AAC/B;AAEA,SAAS,aACP,UACA,WACc;AACd,QAAM,OAAO,CAAC,GAAG,QAAQ;AACzB,aAAW,UAAU,WAAW;AAC9B,UAAM,QAAQ,KAAK;AAAA,MACjB,CAAC,cAAc,UAAU,IAAI,YAAY,MAAM,OAAO,IAAI,YAAY;AAAA,IACxE;AACA,QAAI,UAAU,GAAI,MAAK,KAAK,MAAM;AAAA,QAC7B,MAAK,KAAK,IAAI;AAAA,EACrB;AACA,SAAO;AACT;AAEA,eAAe,gBACb,aACA,SACe;AAIf,QAAM,EAAE,MAAM,IAAI,QAAQ;AAAA,IACxB;AAAA,EACF;AACA,QAAM,EAAE,cAAc,IAAI,QAAQ;AAAA,IAChC;AAAA,EACF;AACA,QAAM,WAAW,cAAc,IAAI,IAAI,aAAa,YAAY,GAAG,CAAC;AACpE,QAAM,OAAO,CAAC,UAAU,OAAO;AAC/B,MAAI,QAAQ,UAAU,OAAW,MAAK,KAAK,WAAW,QAAQ,KAAK;AACnE,MAAI,QAAQ,WAAW,OAAW,MAAK,KAAK,aAAa,QAAQ,MAAM;AACvE,MAAI,QAAQ,aAAa;AACvB,SAAK,KAAK,eAAe,QAAQ,QAAQ;AAE3C,QAAM,IAAI,QAAc,CAAC,gBAAgB,WAAW;AAClD,UAAM,QAAQ,MAAM,QAAQ,UAAU,MAAM;AAAA,MAC1C,KAAK;AAAA,MACL,KAAK,QAAQ;AAAA,MACb,OAAO;AAAA,IACT,CAAC;AACD,UAAM,KAAK,SAAS,MAAM;AAC1B,UAAM,KAAK,QAAQ,CAAC,MAAM,WAAW;AACnC,UAAI,SAAS,GAAG;AACd,uBAAe;AACf;AAAA,MACF;AACA;AAAA,QACE,IAAI;AAAA,UACF,uBAAuB,SAAS,OAAO,gBAAgB,MAAM,KAAK,mBAAmB,IAAI,EAAE;AAAA,QAC7F;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;AAGO,SAAS,kBACd,YACA,UACoB;AACpB,QAAM,SAAS,GAAG,QAAQ;AAC1B,QAAM,kBAAkB,WAAW,SAAS,KAAK,UAAU;AAC3D,QAAM,gBAAgB,WAAW,6BAA6B,CAAC;AAC/D,QAAM,aAAa,cAAc,QAAQ,KAAK,CAAC;AAE/C,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM,UAAqC;AACzC,YAAM,QACJ,oBAAoB,SAAY,CAAC,IAAI,MAAM,gBAAgB;AAC7D,YAAM,gBAAgB,MAAM,UAAU,CAAC,SAAS,KAAK,WAAW,MAAM;AACtE,UAAI,kBAAkB,IAAI;AACxB,eAAO,CAAC,GAAG,OAAO,EAAE,QAAQ,SAAS,iBAAiB,CAAC;AAAA,MACzD;AACA,aAAO,MAAM;AAAA,QAAI,CAAC,MAAM,UACtB,UAAU,gBACN,EAAE,GAAG,MAAM,SAAS,aAAa,KAAK,SAAS,gBAAgB,EAAE,IACjE;AAAA,MACN;AAAA,IACF;AAAA,IACA,2BAA2B;AAAA,MACzB,GAAG;AAAA,MACH,CAAC,QAAQ,GAAG,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,YAAY,gBAAgB,CAAC,CAAC;AAAA,IAC5D;AAAA,EACF;AACF;AAQA,eAAsB,WACpB,aAAgB,CAAC,GACjB,UAA6B,CAAC,GACD;AAC7B,QAAM,WAAW,kBAAkB,QAAQ,QAAQ;AACnD,QAAM,cAAc,QAAQ,eAAe,QAAQ,IAAI;AAGvD,QAAM,gBAAgB,aAAa,OAAO;AAC1C,SAAO,kBAAkB,YAAY,QAAQ;AAC/C;","names":[]}

package/dist/next-server-shims.js

@@ -0,0 +1,108 @@
+// src/cli/next-server-shims.ts
+function revalidatePath() {
+}
+function revalidateTag() {
+}
+function unstable_noStore() {
+}
+function unstable_cacheLife() {
+}
+function unstable_cacheTag() {
+}
+function unstable_cache(fn) {
+  return fn;
+}
+async function headers() {
+  return new Headers();
+}
+var emptyCookies = {
+  get: () => void 0,
+  getAll: () => [],
+  has: () => false,
+  set: () => {
+  },
+  delete: () => {
+  }
+};
+async function cookies() {
+  return emptyCookies;
+}
+async function draftMode() {
+  return { isEnabled: false, enable() {
+  }, disable() {
+  } };
+}
+function redirect(url) {
+  const error = new Error(`redirect(${String(url)}) called outside Next.js`);
+  Object.assign(error, { digest: `NEXT_REDIRECT;${String(url)}` });
+  throw error;
+}
+var permanentRedirect = redirect;
+function notFound() {
+  const error = new Error("notFound() called outside Next.js");
+  Object.assign(error, { digest: "NEXT_NOT_FOUND" });
+  throw error;
+}
+var RedirectType = { push: "push", replace: "replace" };
+var NextResponse = class _NextResponse extends Response {
+  static json(data, init) {
+    const responseHeaders = new Headers(init?.headers);
+    responseHeaders.set("content-type", "application/json");
+    return new _NextResponse(JSON.stringify(data), {
+      ...init,
+      headers: responseHeaders
+    });
+  }
+  static redirect(url, status = 302) {
+    return new _NextResponse(null, {
+      status,
+      headers: { location: String(url) }
+    });
+  }
+  static next() {
+    return new _NextResponse(null);
+  }
+  static rewrite() {
+    return new _NextResponse(null);
+  }
+};
+var NextRequest = class extends Request {
+  nextUrl;
+  cookies = emptyCookies;
+  constructor(input, init) {
+    super(input, init);
+    this.nextUrl = new URL(
+      typeof input === "string" ? input : input instanceof URL ? input.href : input.url
+    );
+  }
+};
+function userAgent() {
+  return {
+    ua: "",
+    browser: {},
+    device: {},
+    engine: {},
+    os: {},
+    cpu: {},
+    isBot: false
+  };
+}
+export {
+  NextRequest,
+  NextResponse,
+  RedirectType,
+  cookies,
+  draftMode,
+  headers,
+  notFound,
+  permanentRedirect,
+  redirect,
+  revalidatePath,
+  revalidateTag,
+  unstable_cache,
+  unstable_cacheLife,
+  unstable_cacheTag,
+  unstable_noStore,
+  userAgent
+};
+//# sourceMappingURL=next-server-shims.js.map

package/dist/next-server-shims.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/next-server-shims.ts"],"sourcesContent":["/**\n * Inert Next server-runtime exports for a separately running MCP process.\n *\n * @internal\n */\n/* eslint-disable jsdoc/require-jsdoc -- shim surface mirrors Next APIs; no-ops need no per-export docs. */\nexport function revalidatePath(): void {}\nexport function revalidateTag(): void {}\nexport function unstable_noStore(): void {}\nexport function unstable_cacheLife(): void {}\nexport function unstable_cacheTag(): void {}\nexport function unstable_cache<T extends (...args: never[]) => unknown>(\n  fn: T\n): T {\n  return fn;\n}\n\nexport async function headers(): Promise<Headers> {\n  return new Headers();\n}\n\nconst emptyCookies = {\n  get: () => undefined,\n  getAll: () => [],\n  has: () => false,\n  set: () => {},\n  delete: () => {},\n};\n\nexport async function cookies(): Promise<typeof emptyCookies> {\n  return emptyCookies;\n}\n\nexport async function draftMode() {\n  return { isEnabled: false as const, enable() {}, disable() {} };\n}\n\nexport function redirect(url: string | URL): never {\n  const error = new Error(`redirect(${String(url)}) called outside Next.js`);\n  Object.assign(error, { digest: `NEXT_REDIRECT;${String(url)}` });\n  throw error;\n}\nexport const permanentRedirect = redirect;\n\nexport function notFound(): never {\n  const error = new Error(\"notFound() called outside Next.js\");\n  Object.assign(error, { digest: \"NEXT_NOT_FOUND\" });\n  throw error;\n}\n\nexport const RedirectType = { push: \"push\", replace: \"replace\" } as const;\n\nexport class NextResponse extends Response {\n  static override json(data: unknown, init?: ResponseInit): NextResponse {\n    const responseHeaders = new Headers(init?.headers);\n    responseHeaders.set(\"content-type\", \"application/json\");\n    return new NextResponse(JSON.stringify(data), {\n      ...init,\n      headers: responseHeaders,\n    });\n  }\n\n  static override redirect(url: string | URL, status = 302): NextResponse {\n    return new NextResponse(null, {\n      status,\n      headers: { location: String(url) },\n    });\n  }\n\n  static next(): NextResponse {\n    return new NextResponse(null);\n  }\n\n  static rewrite(): NextResponse {\n    return new NextResponse(null);\n  }\n}\n\nexport class NextRequest extends Request {\n  readonly nextUrl: URL;\n  readonly cookies = emptyCookies;\n\n  constructor(input: RequestInfo | URL, init?: RequestInit) {\n    super(input, init);\n    this.nextUrl = new URL(\n      typeof input === \"string\"\n        ? input\n        : input instanceof URL\n          ? input.href\n          : input.url\n    );\n  }\n}\n\nexport function userAgent(): Record<string, unknown> {\n  return {\n    ua: \"\",\n    browser: {},\n    device: {},\n    engine: {},\n    os: {},\n    cpu: {},\n    isBot: false,\n  };\n}\n/* eslint-enable jsdoc/require-jsdoc */\n"],"mappings":";AAMO,SAAS,iBAAuB;AAAC;AACjC,SAAS,gBAAsB;AAAC;AAChC,SAAS,mBAAyB;AAAC;AACnC,SAAS,qBAA2B;AAAC;AACrC,SAAS,oBAA0B;AAAC;AACpC,SAAS,eACd,IACG;AACH,SAAO;AACT;AAEA,eAAsB,UAA4B;AAChD,SAAO,IAAI,QAAQ;AACrB;AAEA,IAAM,eAAe;AAAA,EACnB,KAAK,MAAM;AAAA,EACX,QAAQ,MAAM,CAAC;AAAA,EACf,KAAK,MAAM;AAAA,EACX,KAAK,MAAM;AAAA,EAAC;AAAA,EACZ,QAAQ,MAAM;AAAA,EAAC;AACjB;AAEA,eAAsB,UAAwC;AAC5D,SAAO;AACT;AAEA,eAAsB,YAAY;AAChC,SAAO,EAAE,WAAW,OAAgB,SAAS;AAAA,EAAC,GAAG,UAAU;AAAA,EAAC,EAAE;AAChE;AAEO,SAAS,SAAS,KAA0B;AACjD,QAAM,QAAQ,IAAI,MAAM,YAAY,OAAO,GAAG,CAAC,0BAA0B;AACzE,SAAO,OAAO,OAAO,EAAE,QAAQ,iBAAiB,OAAO,GAAG,CAAC,GAAG,CAAC;AAC/D,QAAM;AACR;AACO,IAAM,oBAAoB;AAE1B,SAAS,WAAkB;AAChC,QAAM,QAAQ,IAAI,MAAM,mCAAmC;AAC3D,SAAO,OAAO,OAAO,EAAE,QAAQ,iBAAiB,CAAC;AACjD,QAAM;AACR;AAEO,IAAM,eAAe,EAAE,MAAM,QAAQ,SAAS,UAAU;AAExD,IAAM,eAAN,MAAM,sBAAqB,SAAS;AAAA,EACzC,OAAgB,KAAK,MAAe,MAAmC;AACrE,UAAM,kBAAkB,IAAI,QAAQ,MAAM,OAAO;AACjD,oBAAgB,IAAI,gBAAgB,kBAAkB;AACtD,WAAO,IAAI,cAAa,KAAK,UAAU,IAAI,GAAG;AAAA,MAC5C,GAAG;AAAA,MACH,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAAA,EAEA,OAAgB,SAAS,KAAmB,SAAS,KAAmB;AACtE,WAAO,IAAI,cAAa,MAAM;AAAA,MAC5B;AAAA,MACA,SAAS,EAAE,UAAU,OAAO,GAAG,EAAE;AAAA,IACnC,CAAC;AAAA,EACH;AAAA,EAEA,OAAO,OAAqB;AAC1B,WAAO,IAAI,cAAa,IAAI;AAAA,EAC9B;AAAA,EAEA,OAAO,UAAwB;AAC7B,WAAO,IAAI,cAAa,IAAI;AAAA,EAC9B;AACF;AAEO,IAAM,cAAN,cAA0B,QAAQ;AAAA,EAC9B;AAAA,EACA,UAAU;AAAA,EAEnB,YAAY,OAA0B,MAAoB;AACxD,UAAM,OAAO,IAAI;AACjB,SAAK,UAAU,IAAI;AAAA,MACjB,OAAO,UAAU,WACb,QACA,iBAAiB,MACf,MAAM,OACN,MAAM;AAAA,IACd;AAAA,EACF;AACF;AAEO,SAAS,YAAqC;AACnD,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,SAAS,CAAC;AAAA,IACV,QAAQ,CAAC;AAAA,IACT,QAAQ,CAAC;AAAA,IACT,IAAI,CAAC;AAAA,IACL,KAAK,CAAC;AAAA,IACN,OAAO;AAAA,EACT;AACF;","names":[]}

package/dist/oauth/better-auth.d.ts

@@ -0,0 +1,29 @@
+import { type OAuthProvider, type OAuthResourceOptions } from "./provider.js";
+/** Verified Better Auth claims exposed to authenticated MCP callbacks. */
+export interface BetterAuthOAuthUser {
+    id: string;
+    email?: string;
+    name?: string;
+    picture?: string;
+    emailVerified?: boolean;
+    sessionId?: string;
+    isAnonymous?: boolean;
+    roles: string[];
+}
+/** Configures Better Auth JWT verification and protected-resource metadata. */
+export interface BetterAuthOAuthProviderOptions extends OAuthResourceOptions {
+    /** Full Better Auth issuer URL, including its base path. */
+    authURL: URL | string;
+}
+/**
+ * Creates a provider for Better Auth's OAuth 2.1 Provider plugin.
+ *
+ * Better Auth owns registration, authorization, consent, and token issuance.
+ * mcp-use advertises those endpoints and verifies the resulting access-token
+ * JWTs against Better Auth's JWKS endpoint.
+ *
+ * @param options - Better Auth issuer URL and resource-server settings.
+ * @returns A provider that rejects tokens not issued for the resolved MCP resource.
+ */
+export declare function oauthBetterAuthProvider(options: BetterAuthOAuthProviderOptions): OAuthProvider<BetterAuthOAuthUser>;
+//# sourceMappingURL=better-auth.d.ts.map

package/dist/oauth/better-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth.d.ts","sourceRoot":"","sources":["../../src/oauth/better-auth.ts"],"names":[],"mappings":"AAaA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAC1B,MAAM,eAAe,CAAC;AAEvB,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,+EAA+E;AAC/E,MAAM,WAAW,8BAA+B,SAAQ,oBAAoB;IAC1E,4DAA4D;IAC5D,OAAO,EAAE,GAAG,GAAG,MAAM,CAAC;CACvB;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,8BAA8B,GACtC,aAAa,CAAC,mBAAmB,CAAC,CAiBpC"}

package/dist/oauth/better-auth.js

@@ -0,0 +1,76 @@
+import {
+  booleanValue,
+  createJwtVerifier,
+  invalidToken,
+  normalizedProviderUrl,
+  normalizedStrings,
+  oauthCustomProvider,
+  payloadFromAuthInfo,
+  providerEndpoint,
+  requiredString,
+  stringValue
+} from "../chunk-DPL7OEXC.js";
+
+// src/oauth/better-auth.ts
+function oauthBetterAuthProvider(options) {
+  const issuer = normalizedProviderUrl(
+    options.authURL,
+    "Better Auth authURL"
+  ).href.replace(/\/$/, "");
+  return oauthCustomProvider({
+    ...options,
+    createTokenVerifier: (resource) => createJwtVerifier({
+      issuer,
+      jwksUrl: new URL(providerEndpoint(issuer, "jwks")),
+      resource
+    }),
+    oauthMetadata: metadata(issuer, options.scopesSupported),
+    mapAuthInfo: mapUser
+  });
+}
+function metadata(issuer, scopesSupported) {
+  return {
+    issuer,
+    authorization_endpoint: providerEndpoint(issuer, "oauth2/authorize"),
+    token_endpoint: providerEndpoint(issuer, "oauth2/token"),
+    registration_endpoint: providerEndpoint(issuer, "oauth2/register"),
+    jwks_uri: providerEndpoint(issuer, "jwks"),
+    response_types_supported: ["code"],
+    grant_types_supported: [
+      "authorization_code",
+      "client_credentials",
+      "refresh_token"
+    ],
+    code_challenge_methods_supported: ["S256"],
+    scopes_supported: scopesSupported === void 0 ? ["openid", "profile", "email", "offline_access"] : [...scopesSupported]
+  };
+}
+function mapUser(authInfo) {
+  const payload = payloadFromAuthInfo(authInfo);
+  const id = requiredString(payload, "sub");
+  if (id === void 0) throw invalidToken("Missing Better Auth subject");
+  return {
+    user: {
+      id,
+      ...optional("email", stringValue(payload, "email")),
+      ...optional("name", stringValue(payload, "name")),
+      ...optional("picture", stringValue(payload, "picture")),
+      ...optional("emailVerified", booleanValue(payload, "email_verified")),
+      ...optional("sessionId", stringValue(payload, "sid")),
+      ...optional(
+        "isAnonymous",
+        booleanValue(payload, "is_anonymous") ?? booleanValue(payload, "isAnonymous")
+      ),
+      roles: normalizedStrings(payload["roles"])
+    },
+    payload,
+    permissions: normalizedStrings(payload["permissions"])
+  };
+}
+function optional(key, value) {
+  return value === void 0 ? {} : { [key]: value };
+}
+export {
+  oauthBetterAuthProvider
+};
+//# sourceMappingURL=better-auth.js.map

package/dist/oauth/better-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/oauth/better-auth.ts"],"sourcesContent":["import type { AuthInfo, OAuthMetadata } from \"@modelcontextprotocol/server\";\n\nimport {\n  booleanValue,\n  createJwtVerifier,\n  invalidToken,\n  normalizedStrings,\n  normalizedProviderUrl,\n  payloadFromAuthInfo,\n  providerEndpoint,\n  requiredString,\n  stringValue,\n} from \"./jwt.js\";\nimport {\n  oauthCustomProvider,\n  type OAuthProvider,\n  type OAuthResourceOptions,\n} from \"./provider.js\";\n\n/** Verified Better Auth claims exposed to authenticated MCP callbacks. */\nexport interface BetterAuthOAuthUser {\n  id: string;\n  email?: string;\n  name?: string;\n  picture?: string;\n  emailVerified?: boolean;\n  sessionId?: string;\n  isAnonymous?: boolean;\n  roles: string[];\n}\n\n/** Configures Better Auth JWT verification and protected-resource metadata. */\nexport interface BetterAuthOAuthProviderOptions extends OAuthResourceOptions {\n  /** Full Better Auth issuer URL, including its base path. */\n  authURL: URL | string;\n}\n\n/**\n * Creates a provider for Better Auth's OAuth 2.1 Provider plugin.\n *\n * Better Auth owns registration, authorization, consent, and token issuance.\n * mcp-use advertises those endpoints and verifies the resulting access-token\n * JWTs against Better Auth's JWKS endpoint.\n *\n * @param options - Better Auth issuer URL and resource-server settings.\n * @returns A provider that rejects tokens not issued for the resolved MCP resource.\n */\nexport function oauthBetterAuthProvider(\n  options: BetterAuthOAuthProviderOptions\n): OAuthProvider<BetterAuthOAuthUser> {\n  const issuer = normalizedProviderUrl(\n    options.authURL,\n    \"Better Auth authURL\"\n  ).href.replace(/\\/$/, \"\");\n\n  return oauthCustomProvider<BetterAuthOAuthUser>({\n    ...options,\n    createTokenVerifier: (resource) =>\n      createJwtVerifier({\n        issuer,\n        jwksUrl: new URL(providerEndpoint(issuer, \"jwks\")),\n        resource,\n      }),\n    oauthMetadata: metadata(issuer, options.scopesSupported),\n    mapAuthInfo: mapUser,\n  });\n}\n\nfunction metadata(\n  issuer: string,\n  scopesSupported: readonly string[] | undefined\n): OAuthMetadata {\n  return {\n    issuer,\n    authorization_endpoint: providerEndpoint(issuer, \"oauth2/authorize\"),\n    token_endpoint: providerEndpoint(issuer, \"oauth2/token\"),\n    registration_endpoint: providerEndpoint(issuer, \"oauth2/register\"),\n    jwks_uri: providerEndpoint(issuer, \"jwks\"),\n    response_types_supported: [\"code\"],\n    grant_types_supported: [\n      \"authorization_code\",\n      \"client_credentials\",\n      \"refresh_token\",\n    ],\n    code_challenge_methods_supported: [\"S256\"],\n    scopes_supported:\n      scopesSupported === undefined\n        ? [\"openid\", \"profile\", \"email\", \"offline_access\"]\n        : [...scopesSupported],\n  };\n}\n\nfunction mapUser(authInfo: AuthInfo) {\n  const payload = payloadFromAuthInfo(authInfo);\n  const id = requiredString(payload, \"sub\");\n  if (id === undefined) throw invalidToken(\"Missing Better Auth subject\");\n\n  return {\n    user: {\n      id,\n      ...optional(\"email\", stringValue(payload, \"email\")),\n      ...optional(\"name\", stringValue(payload, \"name\")),\n      ...optional(\"picture\", stringValue(payload, \"picture\")),\n      ...optional(\"emailVerified\", booleanValue(payload, \"email_verified\")),\n      ...optional(\"sessionId\", stringValue(payload, \"sid\")),\n      ...optional(\n        \"isAnonymous\",\n        booleanValue(payload, \"is_anonymous\") ??\n          booleanValue(payload, \"isAnonymous\")\n      ),\n      roles: normalizedStrings(payload[\"roles\"]),\n    },\n    payload,\n    permissions: normalizedStrings(payload[\"permissions\"]),\n  };\n}\n\nfunction optional<T>(key: string, value: T | undefined): Record<string, T> {\n  return value === undefined ? {} : { [key]: value };\n}\n"],"mappings":";;;;;;;;;;;;;;AA+CO,SAAS,wBACd,SACoC;AACpC,QAAM,SAAS;AAAA,IACb,QAAQ;AAAA,IACR;AAAA,EACF,EAAE,KAAK,QAAQ,OAAO,EAAE;AAExB,SAAO,oBAAyC;AAAA,IAC9C,GAAG;AAAA,IACH,qBAAqB,CAAC,aACpB,kBAAkB;AAAA,MAChB;AAAA,MACA,SAAS,IAAI,IAAI,iBAAiB,QAAQ,MAAM,CAAC;AAAA,MACjD;AAAA,IACF,CAAC;AAAA,IACH,eAAe,SAAS,QAAQ,QAAQ,eAAe;AAAA,IACvD,aAAa;AAAA,EACf,CAAC;AACH;AAEA,SAAS,SACP,QACA,iBACe;AACf,SAAO;AAAA,IACL;AAAA,IACA,wBAAwB,iBAAiB,QAAQ,kBAAkB;AAAA,IACnE,gBAAgB,iBAAiB,QAAQ,cAAc;AAAA,IACvD,uBAAuB,iBAAiB,QAAQ,iBAAiB;AAAA,IACjE,UAAU,iBAAiB,QAAQ,MAAM;AAAA,IACzC,0BAA0B,CAAC,MAAM;AAAA,IACjC,uBAAuB;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,kCAAkC,CAAC,MAAM;AAAA,IACzC,kBACE,oBAAoB,SAChB,CAAC,UAAU,WAAW,SAAS,gBAAgB,IAC/C,CAAC,GAAG,eAAe;AAAA,EAC3B;AACF;AAEA,SAAS,QAAQ,UAAoB;AACnC,QAAM,UAAU,oBAAoB,QAAQ;AAC5C,QAAM,KAAK,eAAe,SAAS,KAAK;AACxC,MAAI,OAAO,OAAW,OAAM,aAAa,6BAA6B;AAEtE,SAAO;AAAA,IACL,MAAM;AAAA,MACJ;AAAA,MACA,GAAG,SAAS,SAAS,YAAY,SAAS,OAAO,CAAC;AAAA,MAClD,GAAG,SAAS,QAAQ,YAAY,SAAS,MAAM,CAAC;AAAA,MAChD,GAAG,SAAS,WAAW,YAAY,SAAS,SAAS,CAAC;AAAA,MACtD,GAAG,SAAS,iBAAiB,aAAa,SAAS,gBAAgB,CAAC;AAAA,MACpE,GAAG,SAAS,aAAa,YAAY,SAAS,KAAK,CAAC;AAAA,MACpD,GAAG;AAAA,QACD;AAAA,QACA,aAAa,SAAS,cAAc,KAClC,aAAa,SAAS,aAAa;AAAA,MACvC;AAAA,MACA,OAAO,kBAAkB,QAAQ,OAAO,CAAC;AAAA,IAC3C;AAAA,IACA;AAAA,IACA,aAAa,kBAAkB,QAAQ,aAAa,CAAC;AAAA,EACvD;AACF;AAEA,SAAS,SAAY,KAAa,OAAyC;AACzE,SAAO,UAAU,SAAY,CAAC,IAAI,EAAE,CAAC,GAAG,GAAG,MAAM;AACnD;","names":[]}

package/dist/oauth/index.js

@@ -8,7 +8,8 @@ import {
   oauthMetadataResponse,
   requireBearerAuth,
   verifyBearerToken
-} from "../chunk-SFI2T6TE.js";
+} from "../chunk-Z326HADF.js";
+import "../chunk-QUUANIE4.js";
 import {
   oauthCustomProvider
 } from "../chunk-DPL7OEXC.js";

package/dist/public-route-RWJVJQTX.js

@@ -0,0 +1,9 @@
+import {
+  resolvePublicFilePath,
+  servePublicFile
+} from "./chunk-G62AMJHS.js";
+export {
+  resolvePublicFilePath,
+  servePublicFile
+};
+//# sourceMappingURL=public-route-RWJVJQTX.js.map

package/dist/public-route-RWJVJQTX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/react/components/theme-provider.d.ts

@@ -5,6 +5,9 @@ import React from "react";
  * Subscribes to the host channel (theme, `styles.variables`, `styles.css.fonts`)
  * via {@link useHostContextSubscription}. Theme-only consumers should use
  * {@link useViewTheme} instead so locale/dimension updates do not rerender them.
+ *
+ * MCP App views render in srcdoc iframes; the document canvas stays transparent
+ * by default so rounded cards do not expose an opaque `color-scheme` backdrop.
  */
 export declare const ThemeProvider: React.FC<{
     children: React.ReactNode;

package/dist/react/components/theme-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"theme-provider.d.ts","sourceRoot":"","sources":["../../../src/react/components/theme-provider.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAoC,MAAM,OAAO,CAAC;AAIzD;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC;IACnC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,yEAAyE;IACzE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAkDA,CAAC"}
+{"version":3,"file":"theme-provider.d.ts","sourceRoot":"","sources":["../../../src/react/components/theme-provider.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAoC,MAAM,OAAO,CAAC;AA2DzD;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC;IACnC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,yEAAyE;IACzE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CA4DA,CAAC"}

package/dist/react/hooks/use-files.d.ts

@@ -0,0 +1,25 @@
+import type { UseFilesResult } from "../types/file-types.js";
+/**
+ * Upload and download files through ChatGPT's optional `window.openai`
+ * extension.
+ *
+ * File handling is not part of the MCP Apps bridge. Always check
+ * `isSupported` before calling either action; unsupported calls reject with a
+ * descriptive error. The hook does not read or update ChatGPT widget state and
+ * does not make uploaded files model-visible as a side effect.
+ *
+ * The returned actions are referentially stable for the lifetime of the
+ * mounted runtime.
+ *
+ * @example
+ * ```tsx
+ * const { isSupported, upload, getDownloadUrl } = useFiles();
+ *
+ * if (!isSupported) return <p>File handling requires ChatGPT.</p>;
+ *
+ * const { fileId } = await upload(file);
+ * const { downloadUrl } = await getDownloadUrl({ fileId });
+ * ```
+ */
+export declare function useFiles(): UseFilesResult;
+//# sourceMappingURL=use-files.d.ts.map

package/dist/react/hooks/use-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-files.d.ts","sourceRoot":"","sources":["../../../src/react/hooks/use-files.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,QAAQ,IAAI,cAAc,CAezC"}

package/dist/react/hooks/use-host-context.d.ts

@@ -11,6 +11,11 @@ export interface HostContextHandle {
     timeZone: string;
     /** Host application user-agent string. Falls back to the browser's own user agent. */
     userAgent: string;
+    /**
+     * Host-reported platform. `"mobile"` on mobile hosts; otherwise `"web"`.
+     * Inspector maps Desktop → `"web"` and Mobile → `"mobile"`.
+     */
+    platform: "web" | "mobile";
     /** How the host is currently displaying the view. `"inline"` until the host reports otherwise. */
     displayMode: DisplayMode;
     /** Mobile safe area insets in pixels. All zeros when the host reports none. */

package/dist/react/hooks/use-host-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"use-host-context.d.ts","sourceRoot":"","sources":["../../../src/react/hooks/use-host-context.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,QAAQ,EACR,cAAc,EACf,MAAM,wBAAwB,CAAC;AAwChC;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,kEAAkE;IAClE,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC;IACxB,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,kGAAkG;IAClG,WAAW,EAAE,WAAW,CAAC;IACzB,+EAA+E;IAC/E,QAAQ,EAAE,cAAc,CAAC;IACzB;;;;;;;;OAQG;IACH,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,oFAAoF;IACpF,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC/B,kGAAkG;IAClG,gBAAgB,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC/C;;;;OAIG;IACH,WAAW,EAAE,WAAW,GAAG,SAAS,CAAC;IACrC,0GAA0G;IAC1G,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,cAAc,IAAI,iBAAiB,CAiClD"}
+{"version":3,"file":"use-host-context.d.ts","sourceRoot":"","sources":["../../../src/react/hooks/use-host-context.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,QAAQ,EACR,cAAc,EACf,MAAM,wBAAwB,CAAC;AA8ChC;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,kEAAkE;IAClE,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC;IACxB,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,QAAQ,EAAE,KAAK,GAAG,QAAQ,CAAC;IAC3B,kGAAkG;IAClG,WAAW,EAAE,WAAW,CAAC;IACzB,+EAA+E;IAC/E,QAAQ,EAAE,cAAc,CAAC;IACzB;;;;;;;;OAQG;IACH,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,oFAAoF;IACpF,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC/B,kGAAkG;IAClG,gBAAgB,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC/C;;;;OAIG;IACH,WAAW,EAAE,WAAW,GAAG,SAAS,CAAC;IACrC,0GAA0G;IAC1G,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,cAAc,IAAI,iBAAiB,CAkClD"}

package/dist/react/index.d.ts

@@ -16,6 +16,7 @@ export { ThemeProvider } from "./components/theme-provider.js";
 export { ViewControls } from "./components/view-controls.js";
 export { useCallTool, type CallToolHandle } from "./hooks/use-call-tool.js";
 export { useDisplayMode } from "./hooks/use-display-mode.js";
+export { useFiles } from "./hooks/use-files.js";
 export { useHostContext, type HostContextHandle, } from "./hooks/use-host-context.js";
 export { useOpenExternal } from "./hooks/use-open-external.js";
 export { useSendFollowUp } from "./hooks/use-send-follow-up.js";
@@ -24,6 +25,7 @@ export { useViewTheme } from "./hooks/use-view-theme.js";
 export { useToolContext, type ToolContextHandle, } from "./hooks/use-tool-context.js";
 export { useViewTool, type ViewToolDefinition } from "./hooks/use-view-tool.js";
 export { type DeepPartial, type Register, type RegisteredTools, } from "./types/register.js";
+export type { FileMetadata, UseFilesResult } from "./types/file-types.js";
 export type { DisplayMode, HostCapabilities, HostContext, HostInfo, SafeAreaInsets, } from "./types/host-types.js";
 export { ToolError, toolResultText, type CallToolResult, type CallToolSuccess, type ToolContextError, } from "./types/result-types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/react/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/react/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,aAAa,EACb,WAAW,EACX,KAAK,UAAU,GAChB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EACL,cAAc,EACd,KAAK,iBAAiB,GACvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EACL,cAAc,EACd,KAAK,iBAAiB,GACvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,QAAQ,EACR,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,SAAS,EACT,cAAc,EACd,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/react/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,aAAa,EACb,WAAW,EACX,KAAK,UAAU,GAChB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EACL,cAAc,EACd,KAAK,iBAAiB,GACvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EACL,cAAc,EACd,KAAK,iBAAiB,GACvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC1E,YAAY,EACV,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,QAAQ,EACR,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,SAAS,EACT,cAAc,EACd,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,yBAAyB,CAAC"}

package/dist/react/index.js

@@ -365,6 +365,19 @@ var defaultHostSnapshot = {
   isConnected: false,
   connectionError: void 0
 };
+var defaultFilesSnapshot = {
+  isSupported: false
+};
+function getChatGptFilesApi() {
+  if (typeof window === "undefined") return void 0;
+  return window.openai;
+}
+function resolveFilesSnapshot() {
+  const api = getChatGptFilesApi();
+  return {
+    isSupported: typeof api?.uploadFile === "function" && typeof api.getFileDownloadUrl === "function"
+  };
+}
 function resolveDisplayMode(hostContext) {
   return hostContext?.displayMode === "fullscreen" || hostContext?.displayMode === "pip" ? hostContext.displayMode : "inline";
 }
@@ -434,10 +447,12 @@ function createMcpAppRuntime(config, options) {
     displayMode: "inline",
     availableDisplayModes: ["inline"]
   };
+  let filesSnapshot = resolveFilesSnapshot();
   const toolChannel = createChannelStore();
   const hostChannel = createChannelStore();
   const themeChannel = createChannelStore();
   const displayChannel = createChannelStore();
+  const filesChannel = createChannelStore();
   function patchTool(patch) {
     if (!toolSnapshotChanged(toolSnapshot, patch)) {
       return;
@@ -613,6 +628,7 @@ function createMcpAppRuntime(config, options) {
     hostChannel.clear();
     themeChannel.clear();
     displayChannel.clear();
+    filesChannel.clear();
     toolSnapshot = { ...defaultToolSnapshot };
     hostSnapshot = { ...defaultHostSnapshot };
     themeSnapshot = "light";
@@ -620,6 +636,7 @@ function createMcpAppRuntime(config, options) {
       displayMode: "inline",
       availableDisplayModes: ["inline"]
     };
+    filesSnapshot = { ...defaultFilesSnapshot };
     if (activeRuntime === runtime) {
       activeRuntime = null;
     }
@@ -669,6 +686,30 @@ function createMcpAppRuntime(config, options) {
     const app2 = await connect();
     await app2.sendSizeChanged(params);
   }
+  async function uploadFile(file) {
+    if (disposed) {
+      throw new Error("View runtime has been disposed");
+    }
+    const api = getChatGptFilesApi();
+    if (!filesSnapshot.isSupported || typeof api?.uploadFile !== "function") {
+      throw new Error(
+        "[useFiles] File upload is not supported in this host. Check `isSupported` before calling `upload`. File operations are only available in the ChatGPT Apps SDK environment."
+      );
+    }
+    return api.uploadFile(file);
+  }
+  async function getFileDownloadUrl(file) {
+    if (disposed) {
+      throw new Error("View runtime has been disposed");
+    }
+    const api = getChatGptFilesApi();
+    if (!filesSnapshot.isSupported || typeof api?.getFileDownloadUrl !== "function") {
+      throw new Error(
+        "[useFiles] File download is not supported in this host. Check `isSupported` before calling `getDownloadUrl`. File operations are only available in the ChatGPT Apps SDK environment."
+      );
+    }
+    return api.getFileDownloadUrl(file);
+  }
   const runtime = {
     config,
     modelContextStore,
@@ -682,12 +723,16 @@ function createMcpAppRuntime(config, options) {
     getThemeSnapshot: () => themeSnapshot,
     subscribeDisplay: displayChannel.subscribe,
     getDisplaySnapshot: () => displaySnapshot,
+    subscribeFiles: filesChannel.subscribe,
+    getFilesSnapshot: () => filesSnapshot,
     getApp: () => disposed ? null : app,
     callServerTool,
     sendMessage,
     openLink,
     requestDisplayMode,
     sendSizeChanged,
+    uploadFile,
+    getFileDownloadUrl,
     registerViewTool
   };
   return runtime;
@@ -906,7 +951,54 @@ import {
 } from "@modelcontextprotocol/ext-apps";
 import React2, { useLayoutEffect, useState } from "react";
 import { Fragment, jsx as jsx6 } from "react/jsx-runtime";
-var ThemeProvider = ({ children, colorScheme = true }) => {
+function applyTransparentIframeCanvas() {
+  document.documentElement.style.background = "transparent";
+  document.body.style.background = "transparent";
+  const root = document.getElementById("root");
+  if (root) root.style.background = "transparent";
+}
+var FILL_HOST_WRAPPER_STYLE = {
+  position: "relative",
+  height: "100%",
+  minHeight: "100%",
+  display: "flex",
+  flexDirection: "column"
+};
+function useFillHostDocument(fillHost) {
+  useLayoutEffect(() => {
+    if (!fillHost || typeof document === "undefined") return;
+    const html = document.documentElement;
+    const body = document.body;
+    const root = document.getElementById("root");
+    const prev = {
+      htmlH: html.style.height,
+      bodyH: body.style.height,
+      htmlMin: html.style.minHeight,
+      bodyMin: body.style.minHeight,
+      rootH: root?.style.height ?? "",
+      rootMin: root?.style.minHeight ?? ""
+    };
+    for (const el of [html, body]) {
+      el.style.height = "100%";
+      el.style.minHeight = "100%";
+    }
+    if (root) {
+      root.style.height = "100%";
+      root.style.minHeight = "100%";
+    }
+    return () => {
+      html.style.height = prev.htmlH;
+      body.style.height = prev.bodyH;
+      html.style.minHeight = prev.htmlMin;
+      body.style.minHeight = prev.bodyMin;
+      if (root) {
+        root.style.height = prev.rootH;
+        root.style.minHeight = prev.rootMin;
+      }
+    };
+  }, [fillHost]);
+}
+var ThemeProvider = ({ children, colorScheme = false }) => {
   const hostContext = useHostContextSubscription();
   const [systemPreference, setSystemPreference] = useState(
     () => {
@@ -925,9 +1017,12 @@ var ThemeProvider = ({ children, colorScheme = true }) => {
   }, []);
   const hostTheme = hostContext?.theme === "dark" || hostContext?.theme === "light" ? hostContext.theme : void 0;
   const effectiveTheme = hostTheme ?? systemPreference;
+  const fillHost = hostContext?.displayMode === "fullscreen" || hostContext?.displayMode === "pip";
+  useFillHostDocument(fillHost);
   useLayoutEffect(() => {
     if (typeof document === "undefined") return;
     applyDocumentTheme(effectiveTheme);
+    applyTransparentIframeCanvas();
     if (colorScheme) {
       document.documentElement.style.colorScheme = effectiveTheme === "dark" ? "dark" : "light";
     } else {
@@ -944,6 +1039,9 @@ var ThemeProvider = ({ children, colorScheme = true }) => {
       applyHostFonts(fonts);
     }
   }, [hostContext]);
+  if (fillHost) {
+    return /* @__PURE__ */ jsx6("div", { style: FILL_HOST_WRAPPER_STYLE, children });
+  }
   return /* @__PURE__ */ jsx6(Fragment, { children });
 };
 
@@ -994,6 +1092,9 @@ function readMaxWidth(hostContext) {
 function resolveDisplayMode2(hostContext) {
   return hostContext?.displayMode === "fullscreen" || hostContext?.displayMode === "pip" ? hostContext.displayMode : "inline";
 }
+function resolvePlatform(hostContext) {
+  return hostContext?.platform === "mobile" ? "mobile" : "web";
+}
 function useHostContext() {
   const runtime = useViewRuntime();
   const { hostContext, isConnected } = useSyncExternalStore3(
@@ -1006,6 +1107,7 @@ function useHostContext() {
     locale: typeof hostContext?.locale === "string" ? hostContext.locale : "en-US",
     timeZone: typeof hostContext?.timeZone === "string" ? hostContext.timeZone : typeof Intl !== "undefined" ? Intl.DateTimeFormat().resolvedOptions().timeZone : "UTC",
     userAgent: typeof hostContext?.userAgent === "string" ? hostContext.userAgent : typeof navigator !== "undefined" ? navigator.userAgent : "",
+    platform: resolvePlatform(hostContext),
     displayMode: resolveDisplayMode2(hostContext),
     safeArea: hostContext?.safeAreaInsets ?? DEFAULT_SAFE_AREA,
     maxHeight: readMaxHeight(hostContext),
@@ -1257,6 +1359,24 @@ function useCallTool(nameOrRef) {
   return { callTool, data, error, isPending };
 }
 
+// src/react/hooks/use-files.ts
+import { useMemo, useSyncExternalStore as useSyncExternalStore5 } from "react";
+function useFiles() {
+  const runtime = useViewRuntime();
+  const { isSupported } = useSyncExternalStore5(
+    runtime.subscribeFiles,
+    runtime.getFilesSnapshot
+  );
+  return useMemo(
+    () => ({
+      isSupported,
+      upload: runtime.uploadFile,
+      getDownloadUrl: runtime.getFileDownloadUrl
+    }),
+    [runtime, isSupported]
+  );
+}
+
 // src/react/hooks/use-open-external.ts
 import { useCallback as useCallback2 } from "react";
 function useOpenExternal() {
@@ -1291,10 +1411,10 @@ function useSendSizeChanged() {
 }
 
 // src/react/hooks/use-view-theme.ts
-import { useSyncExternalStore as useSyncExternalStore5 } from "react";
+import { useSyncExternalStore as useSyncExternalStore6 } from "react";
 function useViewTheme() {
   const runtime = useViewRuntime();
-  return useSyncExternalStore5(runtime.subscribeTheme, runtime.getThemeSnapshot);
+  return useSyncExternalStore6(runtime.subscribeTheme, runtime.getThemeSnapshot);
 }
 
 // src/react/hooks/use-view-tool.ts
@@ -1406,6 +1526,7 @@ export {
   toolResultText,
   useCallTool,
   useDisplayMode,
+  useFiles,
   useHostContext,
   useOpenExternal,
   useSendFollowUp,