mcp-use 2.0.0-beta.35 → 2.0.0-beta.36

package/dist/oauth/keycloak.js

@@ -1,93 +1 @@
-import {
-  booleanValue,
-  createJwtVerifier,
-  invalidToken,
-  isRecord,
-  normalizedProviderUrl,
-  normalizedStrings,
-  oauthCustomProvider,
-  payloadFromAuthInfo,
-  providerEndpoint,
-  recordValue,
-  requiredString,
-  stringValue
-} from "../chunk-YF5X7FYF.js";
-
-// src/oauth/keycloak.ts
-function oauthKeycloakProvider(options) {
-  if (typeof options.realm !== "string" || options.realm.trim().length === 0 || /[/?#]/.test(options.realm)) {
-    throw new TypeError("Keycloak realm is invalid");
-  }
-  const serverUrl = normalizedProviderUrl(
-    options.serverUrl,
-    "Keycloak serverUrl"
-  );
-  const issuer = providerEndpoint(
-    serverUrl,
-    `realms/${encodeURIComponent(options.realm)}`
-  ).replace(/\/$/, "");
-  return oauthCustomProvider({
-    ...options,
-    createTokenVerifier: (resource) => createJwtVerifier({
-      issuer,
-      jwksUrl: new URL(
-        providerEndpoint(issuer, "protocol/openid-connect/certs")
-      ),
-      resource
-    }),
-    oauthMetadata: {
-      issuer,
-      authorization_endpoint: providerEndpoint(
-        issuer,
-        "protocol/openid-connect/auth"
-      ),
-      token_endpoint: providerEndpoint(issuer, "protocol/openid-connect/token"),
-      registration_endpoint: providerEndpoint(
-        issuer,
-        "clients-registrations/openid-connect"
-      ),
-      response_types_supported: ["code"],
-      grant_types_supported: ["authorization_code", "refresh_token"],
-      code_challenge_methods_supported: ["S256"]
-    },
-    mapAuthInfo: mapUser
-  });
-}
-function mapUser(authInfo) {
-  const payload = payloadFromAuthInfo(authInfo);
-  const id = requiredString(payload, "sub");
-  if (id === void 0) throw invalidToken("Missing Keycloak subject");
-  const realmAccess = recordValue(payload, "realm_access");
-  const resourceAccess = recordValue(payload, "resource_access");
-  return {
-    user: {
-      id,
-      ...optional("email", stringValue(payload, "email")),
-      ...optional("name", stringValue(payload, "name")),
-      ...optional(
-        "preferredUsername",
-        stringValue(payload, "preferred_username")
-      ),
-      ...optional("givenName", stringValue(payload, "given_name")),
-      ...optional("familyName", stringValue(payload, "family_name")),
-      ...optional("emailVerified", booleanValue(payload, "email_verified")),
-      roles: realmAccess === void 0 ? [] : normalizedStrings(realmAccess["roles"]),
-      ...realmAccess !== void 0 && { realmAccess },
-      ...resourceAccess !== void 0 && { resourceAccess }
-    },
-    payload,
-    permissions: resourcePermissions(resourceAccess)
-  };
-}
-function optional(key, value) {
-  return value === void 0 ? {} : { [key]: value };
-}
-function resourcePermissions(resourceAccess) {
-  if (resourceAccess === void 0) return [];
-  return Object.entries(resourceAccess).flatMap(
-    ([resource, value]) => isRecord(value) ? normalizedStrings(value["roles"]).map((role) => `${resource}:${role}`) : []
-  );
-}
-export {
-  oauthKeycloakProvider
-};
+import{booleanValue,createJwtVerifier,invalidToken,isRecord,normalizedProviderUrl,normalizedStrings,oauthCustomProvider,payloadFromAuthInfo,providerEndpoint,recordValue,requiredString,stringValue}from"../chunk-JMDHTN6N.js";function oauthKeycloakProvider(options){if(typeof options.realm!="string"||options.realm.trim().length===0||/[/?#]/.test(options.realm))throw new TypeError("Keycloak realm is invalid");let serverUrl=normalizedProviderUrl(options.serverUrl,"Keycloak serverUrl"),issuer=providerEndpoint(serverUrl,`realms/${encodeURIComponent(options.realm)}`).replace(/\/$/,"");return oauthCustomProvider({...options,createTokenVerifier:resource=>createJwtVerifier({issuer,jwksUrl:new URL(providerEndpoint(issuer,"protocol/openid-connect/certs")),resource}),oauthMetadata:{issuer,authorization_endpoint:providerEndpoint(issuer,"protocol/openid-connect/auth"),token_endpoint:providerEndpoint(issuer,"protocol/openid-connect/token"),registration_endpoint:providerEndpoint(issuer,"clients-registrations/openid-connect"),response_types_supported:["code"],grant_types_supported:["authorization_code","refresh_token"],code_challenge_methods_supported:["S256"]},mapAuthInfo:mapUser})}function mapUser(authInfo){let payload=payloadFromAuthInfo(authInfo),id=requiredString(payload,"sub");if(id===void 0)throw invalidToken("Missing Keycloak subject");let realmAccess=recordValue(payload,"realm_access"),resourceAccess=recordValue(payload,"resource_access");return{user:{id,...optional("email",stringValue(payload,"email")),...optional("name",stringValue(payload,"name")),...optional("preferredUsername",stringValue(payload,"preferred_username")),...optional("givenName",stringValue(payload,"given_name")),...optional("familyName",stringValue(payload,"family_name")),...optional("emailVerified",booleanValue(payload,"email_verified")),roles:realmAccess===void 0?[]:normalizedStrings(realmAccess.roles),...realmAccess!==void 0&&{realmAccess},...resourceAccess!==void 0&&{resourceAccess}},payload,permissions:resourcePermissions(resourceAccess)}}function optional(key,value){return value===void 0?{}:{[key]:value}}function resourcePermissions(resourceAccess){return resourceAccess===void 0?[]:Object.entries(resourceAccess).flatMap(([resource,value])=>isRecord(value)?normalizedStrings(value.roles).map(role=>`${resource}:${role}`):[])}export{oauthKeycloakProvider};

package/dist/oauth/supabase.js

@@ -1,100 +1 @@
-import {
-  createJwtVerifier,
-  invalidToken,
-  isRecord,
-  normalizedProviderUrl,
-  oauthCustomProvider,
-  payloadFromAuthInfo,
-  providerEndpoint,
-  recordValue,
-  requiredString,
-  stringValue
-} from "../chunk-YF5X7FYF.js";
-
-// src/oauth/supabase.ts
-function oauthSupabaseProvider(options) {
-  const supabaseUrl = resolveSupabaseUrl(options);
-  const issuer = providerEndpoint(supabaseUrl, "auth/v1").replace(/\/$/, "");
-  const secret = options.jwtSecret;
-  if (secret !== void 0 && new TextEncoder().encode(secret).length < 32) {
-    throw new TypeError("Supabase jwtSecret must be at least 32 bytes");
-  }
-  return oauthCustomProvider({
-    ...options,
-    createTokenVerifier: (resource) => createJwtVerifier({
-      issuer,
-      jwksUrl: new URL(
-        providerEndpoint(supabaseUrl, "auth/v1/.well-known/jwks.json")
-      ),
-      ...secret !== void 0 ? { key: new TextEncoder().encode(secret), algorithms: ["HS256"] } : { algorithms: ["ES256"] },
-      resource
-    }),
-    oauthMetadata: {
-      issuer,
-      authorization_endpoint: providerEndpoint(
-        supabaseUrl,
-        "auth/v1/oauth/authorize"
-      ),
-      token_endpoint: providerEndpoint(supabaseUrl, "auth/v1/oauth/token"),
-      registration_endpoint: providerEndpoint(
-        supabaseUrl,
-        "auth/v1/oauth/clients/register"
-      ),
-      response_types_supported: ["code"],
-      grant_types_supported: ["authorization_code", "refresh_token"],
-      code_challenge_methods_supported: ["S256"]
-    },
-    mapAuthInfo: mapUser
-  });
-}
-function mapUser(authInfo) {
-  const payload = payloadFromAuthInfo(authInfo);
-  const id = requiredString(payload, "sub") ?? requiredString(payload, "user_id");
-  if (id === void 0) throw invalidToken("Missing Supabase subject");
-  const userMetadata = recordValue(payload, "user_metadata") ?? {};
-  const aal = stringValue(payload, "aal");
-  return {
-    user: {
-      id,
-      ...optional("email", stringValue(payload, "email")),
-      ...optional("name", stringValue(userMetadata, "name")),
-      ...optional("fullName", stringValue(userMetadata, "full_name")),
-      ...optional("username", stringValue(userMetadata, "username")),
-      ...optional("avatarUrl", stringValue(userMetadata, "avatar_url")),
-      ...optional("role", stringValue(payload, "role")),
-      ...optional("aal", aal),
-      amr: supabaseAmr(payload["amr"]),
-      ...optional("sessionId", stringValue(payload, "session_id"))
-    },
-    payload,
-    permissions: aal === void 0 ? [] : [`aal:${aal}`]
-  };
-}
-function optional(key, value) {
-  return value === void 0 ? {} : { [key]: value };
-}
-function resolveSupabaseUrl(options) {
-  if (options.supabaseUrl !== void 0) {
-    return normalizedProviderUrl(options.supabaseUrl, "supabaseUrl");
-  }
-  if (options.projectId === void 0 || !/^[a-z0-9-]+$/i.test(options.projectId)) {
-    throw new TypeError("Supabase requires projectId or supabaseUrl");
-  }
-  return new URL(`https://${options.projectId}.supabase.co`);
-}
-function supabaseAmr(value) {
-  if (!Array.isArray(value)) return [];
-  return value.flatMap((item) => {
-    if (!isRecord(item)) return [];
-    const method = item["method"];
-    const timestamp = item["timestamp"];
-    if (typeof method !== "string" || method.length === 0) return [];
-    if (timestamp !== void 0 && (typeof timestamp !== "number" || !Number.isFinite(timestamp))) {
-      return [];
-    }
-    return [timestamp === void 0 ? { method } : { method, timestamp }];
-  });
-}
-export {
-  oauthSupabaseProvider
-};
+import{createJwtVerifier,invalidToken,isRecord,normalizedProviderUrl,oauthCustomProvider,payloadFromAuthInfo,providerEndpoint,recordValue,requiredString,stringValue}from"../chunk-JMDHTN6N.js";function oauthSupabaseProvider(options){let supabaseUrl=resolveSupabaseUrl(options),issuer=providerEndpoint(supabaseUrl,"auth/v1").replace(/\/$/,""),secret=options.jwtSecret;if(secret!==void 0&&new TextEncoder().encode(secret).length<32)throw new TypeError("Supabase jwtSecret must be at least 32 bytes");return oauthCustomProvider({...options,createTokenVerifier:resource=>createJwtVerifier({issuer,jwksUrl:new URL(providerEndpoint(supabaseUrl,"auth/v1/.well-known/jwks.json")),...secret!==void 0?{key:new TextEncoder().encode(secret),algorithms:["HS256"]}:{algorithms:["ES256"]},resource}),oauthMetadata:{issuer,authorization_endpoint:providerEndpoint(supabaseUrl,"auth/v1/oauth/authorize"),token_endpoint:providerEndpoint(supabaseUrl,"auth/v1/oauth/token"),registration_endpoint:providerEndpoint(supabaseUrl,"auth/v1/oauth/clients/register"),response_types_supported:["code"],grant_types_supported:["authorization_code","refresh_token"],code_challenge_methods_supported:["S256"]},mapAuthInfo:mapUser})}function mapUser(authInfo){let payload=payloadFromAuthInfo(authInfo),id=requiredString(payload,"sub")??requiredString(payload,"user_id");if(id===void 0)throw invalidToken("Missing Supabase subject");let userMetadata=recordValue(payload,"user_metadata")??{},aal=stringValue(payload,"aal");return{user:{id,...optional("email",stringValue(payload,"email")),...optional("name",stringValue(userMetadata,"name")),...optional("fullName",stringValue(userMetadata,"full_name")),...optional("username",stringValue(userMetadata,"username")),...optional("avatarUrl",stringValue(userMetadata,"avatar_url")),...optional("role",stringValue(payload,"role")),...optional("aal",aal),amr:supabaseAmr(payload.amr),...optional("sessionId",stringValue(payload,"session_id"))},payload,permissions:aal===void 0?[]:[`aal:${aal}`]}}function optional(key,value){return value===void 0?{}:{[key]:value}}function resolveSupabaseUrl(options){if(options.supabaseUrl!==void 0)return normalizedProviderUrl(options.supabaseUrl,"supabaseUrl");if(options.projectId===void 0||!/^[a-z0-9-]+$/i.test(options.projectId))throw new TypeError("Supabase requires projectId or supabaseUrl");return new URL(`https://${options.projectId}.supabase.co`)}function supabaseAmr(value){return Array.isArray(value)?value.flatMap(item=>{if(!isRecord(item))return[];let method=item.method,timestamp=item.timestamp;return typeof method!="string"||method.length===0?[]:timestamp!==void 0&&(typeof timestamp!="number"||!Number.isFinite(timestamp))?[]:[timestamp===void 0?{method}:{method,timestamp}]}):[]}export{oauthSupabaseProvider};

package/dist/oauth/workos.js

@@ -1,76 +1 @@
-import {
-  booleanValue,
-  createJwtVerifier,
-  invalidToken,
-  normalizedProviderUrl,
-  normalizedStrings,
-  oauthCustomProvider,
-  payloadFromAuthInfo,
-  providerEndpoint,
-  requiredString,
-  stringValue
-} from "../chunk-YF5X7FYF.js";
-
-// src/oauth/workos.ts
-function oauthWorkOSProvider(options) {
-  const issuer = workosIssuer(options.subdomain);
-  return oauthCustomProvider({
-    ...options,
-    createTokenVerifier: (resource) => createJwtVerifier({
-      issuer,
-      jwksUrl: new URL(providerEndpoint(issuer, "oauth2/jwks")),
-      resource
-    }),
-    oauthMetadata: {
-      issuer,
-      authorization_endpoint: providerEndpoint(issuer, "oauth2/authorize"),
-      token_endpoint: providerEndpoint(issuer, "oauth2/token"),
-      registration_endpoint: providerEndpoint(issuer, "oauth2/register"),
-      response_types_supported: ["code"],
-      grant_types_supported: ["authorization_code", "refresh_token"],
-      code_challenge_methods_supported: ["S256"]
-    },
-    mapAuthInfo: mapUser
-  });
-}
-function mapUser(authInfo) {
-  const payload = payloadFromAuthInfo(authInfo);
-  const id = requiredString(payload, "sub");
-  if (id === void 0) throw invalidToken("Missing WorkOS subject");
-  return {
-    user: {
-      id,
-      ...optional("email", stringValue(payload, "email")),
-      ...optional("emailVerified", booleanValue(payload, "email_verified")),
-      ...optional("name", stringValue(payload, "name")),
-      ...optional(
-        "preferredUsername",
-        stringValue(payload, "preferred_username")
-      ),
-      ...optional("firstName", stringValue(payload, "first_name")),
-      ...optional("lastName", stringValue(payload, "last_name")),
-      ...optional("picture", stringValue(payload, "picture")),
-      roles: normalizedStrings(payload["roles"]),
-      ...optional("organizationId", stringValue(payload, "org_id")),
-      ...optional("sessionId", stringValue(payload, "sid"))
-    },
-    payload,
-    permissions: normalizedStrings(payload["permissions"])
-  };
-}
-function optional(key, value) {
-  return value === void 0 ? {} : { [key]: value };
-}
-function workosIssuer(value) {
-  if (typeof value !== "string" || value.trim().length === 0) {
-    throw new TypeError("WorkOS subdomain is required");
-  }
-  const url = normalizedProviderUrl(value, "WorkOS subdomain");
-  if (url.pathname !== "/") {
-    throw new TypeError("WorkOS subdomain must be a hostname or HTTPS origin");
-  }
-  return url.href.replace(/\/$/, "");
-}
-export {
-  oauthWorkOSProvider
-};
+import{booleanValue,createJwtVerifier,invalidToken,normalizedProviderUrl,normalizedStrings,oauthCustomProvider,payloadFromAuthInfo,providerEndpoint,requiredString,stringValue}from"../chunk-JMDHTN6N.js";function oauthWorkOSProvider(options){let issuer=workosIssuer(options.subdomain);return oauthCustomProvider({...options,createTokenVerifier:resource=>createJwtVerifier({issuer,jwksUrl:new URL(providerEndpoint(issuer,"oauth2/jwks")),resource}),oauthMetadata:{issuer,authorization_endpoint:providerEndpoint(issuer,"oauth2/authorize"),token_endpoint:providerEndpoint(issuer,"oauth2/token"),registration_endpoint:providerEndpoint(issuer,"oauth2/register"),response_types_supported:["code"],grant_types_supported:["authorization_code","refresh_token"],code_challenge_methods_supported:["S256"]},mapAuthInfo:mapUser})}function mapUser(authInfo){let payload=payloadFromAuthInfo(authInfo),id=requiredString(payload,"sub");if(id===void 0)throw invalidToken("Missing WorkOS subject");return{user:{id,...optional("email",stringValue(payload,"email")),...optional("emailVerified",booleanValue(payload,"email_verified")),...optional("name",stringValue(payload,"name")),...optional("preferredUsername",stringValue(payload,"preferred_username")),...optional("firstName",stringValue(payload,"first_name")),...optional("lastName",stringValue(payload,"last_name")),...optional("picture",stringValue(payload,"picture")),roles:normalizedStrings(payload.roles),...optional("organizationId",stringValue(payload,"org_id")),...optional("sessionId",stringValue(payload,"sid"))},payload,permissions:normalizedStrings(payload.permissions)}}function optional(key,value){return value===void 0?{}:{[key]:value}}function workosIssuer(value){if(typeof value!="string"||value.trim().length===0)throw new TypeError("WorkOS subdomain is required");let url=normalizedProviderUrl(value,"WorkOS subdomain");if(url.pathname!=="/")throw new TypeError("WorkOS subdomain must be a hostname or HTTPS origin");return url.href.replace(/\/$/,"")}export{oauthWorkOSProvider};

package/dist/openapi/index.js

@@ -1,6 +1 @@
-import {
-  registerOpenAPITools
-} from "../chunk-HNNQJLD5.js";
-export {
-  registerOpenAPITools
-};
+import{registerOpenAPITools}from"../chunk-Y26DNVWA.js";export{registerOpenAPITools};

package/dist/public-route-DAQJGS6K.js

@@ -0,0 +1 @@
+import{resolvePublicFilePath,servePublicFile}from"./chunk-ZMU5USAZ.js";export{resolvePublicFilePath,servePublicFile};

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "mcp-use",
   "type": "module",
-  "version": "2.0.0-beta.35",
+  "version": "2.0.0-beta.36",
   "description": "MCP framework and CLI built on the official v2 SDK",
   "author": "mcp-use, Inc.",
   "license": "MIT",
@@ -89,8 +89,8 @@
     "@modelcontextprotocol/server": "2.0.0-beta.5",
     "hono": "^4.12.27",
     "jose": "^6.1.3",
-    "@mcp-use/cli": "4.0.0-beta.7",
-    "@mcp-use/inspector": "20.0.0-beta.27"
+    "@mcp-use/inspector": "20.0.0-beta.28",
+    "@mcp-use/cli": "4.0.0-beta.8"
   },
   "peerDependencies": {
     "@mcp-use/client": "^2.0.0-alpha.0",
@@ -115,16 +115,17 @@
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
     "@vitejs/plugin-react": "^6.0.3",
+    "es-module-lexer": "^2.3.0",
     "happy-dom": "^20.10.6",
     "react": "^19.2.7",
     "react-dom": "^19.2.7",
-    "typescript": "^7.0.2",
     "tailwindcss": "^4.2.0",
+    "typescript": "^7.0.2",
     "vite": "^8.0.16",
     "vitest": "^4.1.9",
     "zod": "^4.4.3",
-    "@mcp-use/client": "2.0.0-beta.12",
-    "mcp-use": "2.0.0-beta.35"
+    "mcp-use": "2.0.0-beta.36",
+    "@mcp-use/client": "2.0.0-beta.12"
   },
   "publishConfig": {
     "access": "public"

package/dist/chunk-DFFP6QPR.js

@@ -1,37 +0,0 @@
-// src/completable.ts
-import {
-  completable as sdkCompletable
-} from "@modelcontextprotocol/server";
-function createPrefixCompletion(values) {
-  const strings = values.map(String);
-  return (value) => {
-    const prefix = String(value ?? "").toLowerCase();
-    return strings.filter(
-      (candidate) => candidate.toLowerCase().startsWith(prefix)
-    );
-  };
-}
-function completable(schema, complete) {
-  if (typeof complete === "function") {
-    return sdkCompletable(
-      schema,
-      (value, context) => complete(String(value ?? ""), context)
-    );
-  }
-  return sdkCompletable(schema, createPrefixCompletion(complete));
-}
-
-// src/resource-completion.ts
-function normalizeCompletions(completions) {
-  const normalized = /* @__PURE__ */ Object.create(null);
-  for (const [variable, completer] of Object.entries(completions)) {
-    if (completer === void 0) continue;
-    normalized[variable] = Array.isArray(completer) ? createPrefixCompletion(completer) : completer;
-  }
-  return normalized;
-}
-
-export {
-  completable,
-  normalizeCompletions
-};

package/dist/chunk-HDV7K2TE.js

@@ -1,97 +0,0 @@
-// src/views/origin.ts
-function stripTrailingSlashes(value) {
-  return value.replace(/\/+$/, "");
-}
-function readEnv(name) {
-  if (typeof process === "undefined") {
-    return void 0;
-  }
-  const value = process.env[name];
-  return value !== void 0 && value !== "" ? value : void 0;
-}
-function parseForwardedHeader(header) {
-  for (const part of header.split(",")) {
-    const params = /* @__PURE__ */ new Map();
-    for (const token of part.split(";")) {
-      const [key, ...rest] = token.trim().split("=");
-      if (key === void 0 || rest.length === 0) {
-        continue;
-      }
-      params.set(key.toLowerCase(), rest.join("=").replace(/^"|"$/g, ""));
-    }
-    const proto = params.get("proto");
-    const host = params.get("host");
-    if (proto !== void 0 && host !== void 0) {
-      return `${proto}://${host}`;
-    }
-  }
-  return void 0;
-}
-function resolveRequestOriginFromHeaders(request) {
-  const forwarded = request.headers.get("forwarded");
-  if (forwarded !== null) {
-    const fromForwarded = parseForwardedHeader(forwarded);
-    if (fromForwarded !== void 0) {
-      return fromForwarded;
-    }
-  }
-  const proto = request.headers.get("x-forwarded-proto");
-  const host = request.headers.get("x-forwarded-host");
-  if (proto !== null && host !== null) {
-    const firstHost = host.split(",")[0]?.trim();
-    const firstProto = proto.split(",")[0]?.trim();
-    if (firstHost !== void 0 && firstProto !== void 0 && firstHost !== "") {
-      return `${firstProto}://${firstHost}`;
-    }
-  }
-  return new URL(request.url).origin;
-}
-function resolveServerOrigin(request) {
-  const mcpUrl = readEnv("MCP_URL");
-  if (mcpUrl !== void 0) {
-    try {
-      return new URL(mcpUrl).origin;
-    } catch {
-    }
-  }
-  return resolveRequestOriginFromHeaders(request);
-}
-function originFromAssetsBase(assetsBase) {
-  try {
-    return new URL(assetsBase).origin;
-  } catch {
-    return assetsBase;
-  }
-}
-function normalizeAssetsBaseUrl(value) {
-  return stripTrailingSlashes(value);
-}
-function resolveAssetsBase(request) {
-  const assetsUrl = readEnv("MCP_ASSETS_URL");
-  if (assetsUrl !== void 0) {
-    try {
-      return normalizeAssetsBaseUrl(new URL(assetsUrl).href.replace(/\/$/, ""));
-    } catch {
-    }
-  }
-  return resolveServerOrigin(request);
-}
-function hasExplicitAssetsBase() {
-  const assetsUrl = readEnv("MCP_ASSETS_URL");
-  if (assetsUrl === void 0) {
-    return false;
-  }
-  try {
-    new URL(assetsUrl);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-export {
-  resolveServerOrigin,
-  originFromAssetsBase,
-  resolveAssetsBase,
-  hasExplicitAssetsBase
-};