mcp-use 2.0.0-beta.35 → 2.0.0-beta.37

package/dist/oauth/keycloak.js

@@ -1,93 +1 @@
-import {
-  booleanValue,
-  createJwtVerifier,
-  invalidToken,
-  isRecord,
-  normalizedProviderUrl,
-  normalizedStrings,
-  oauthCustomProvider,
-  payloadFromAuthInfo,
-  providerEndpoint,
-  recordValue,
-  requiredString,
-  stringValue
-} from "../chunk-YF5X7FYF.js";
-
-// src/oauth/keycloak.ts
-function oauthKeycloakProvider(options) {
-  if (typeof options.realm !== "string" || options.realm.trim().length === 0 || /[/?#]/.test(options.realm)) {
-    throw new TypeError("Keycloak realm is invalid");
-  }
-  const serverUrl = normalizedProviderUrl(
-    options.serverUrl,
-    "Keycloak serverUrl"
-  );
-  const issuer = providerEndpoint(
-    serverUrl,
-    `realms/${encodeURIComponent(options.realm)}`
-  ).replace(/\/$/, "");
-  return oauthCustomProvider({
-    ...options,
-    createTokenVerifier: (resource) => createJwtVerifier({
-      issuer,
-      jwksUrl: new URL(
-        providerEndpoint(issuer, "protocol/openid-connect/certs")
-      ),
-      resource
-    }),
-    oauthMetadata: {
-      issuer,
-      authorization_endpoint: providerEndpoint(
-        issuer,
-        "protocol/openid-connect/auth"
-      ),
-      token_endpoint: providerEndpoint(issuer, "protocol/openid-connect/token"),
-      registration_endpoint: providerEndpoint(
-        issuer,
-        "clients-registrations/openid-connect"
-      ),
-      response_types_supported: ["code"],
-      grant_types_supported: ["authorization_code", "refresh_token"],
-      code_challenge_methods_supported: ["S256"]
-    },
-    mapAuthInfo: mapUser
-  });
-}
-function mapUser(authInfo) {
-  const payload = payloadFromAuthInfo(authInfo);
-  const id = requiredString(payload, "sub");
-  if (id === void 0) throw invalidToken("Missing Keycloak subject");
-  const realmAccess = recordValue(payload, "realm_access");
-  const resourceAccess = recordValue(payload, "resource_access");
-  return {
-    user: {
-      id,
-      ...optional("email", stringValue(payload, "email")),
-      ...optional("name", stringValue(payload, "name")),
-      ...optional(
-        "preferredUsername",
-        stringValue(payload, "preferred_username")
-      ),
-      ...optional("givenName", stringValue(payload, "given_name")),
-      ...optional("familyName", stringValue(payload, "family_name")),
-      ...optional("emailVerified", booleanValue(payload, "email_verified")),
-      roles: realmAccess === void 0 ? [] : normalizedStrings(realmAccess["roles"]),
-      ...realmAccess !== void 0 && { realmAccess },
-      ...resourceAccess !== void 0 && { resourceAccess }
-    },
-    payload,
-    permissions: resourcePermissions(resourceAccess)
-  };
-}
-function optional(key, value) {
-  return value === void 0 ? {} : { [key]: value };
-}
-function resourcePermissions(resourceAccess) {
-  if (resourceAccess === void 0) return [];
-  return Object.entries(resourceAccess).flatMap(
-    ([resource, value]) => isRecord(value) ? normalizedStrings(value["roles"]).map((role) => `${resource}:${role}`) : []
-  );
-}
-export {
-  oauthKeycloakProvider
-};
+import{booleanValue,createJwtVerifier,invalidToken,isRecord,normalizedProviderUrl,normalizedStrings,oauthCustomProvider,payloadFromAuthInfo,providerEndpoint,recordValue,requiredString,stringValue}from"../chunk-JMDHTN6N.js";function oauthKeycloakProvider(options){if(typeof options.realm!="string"||options.realm.trim().length===0||/[/?#]/.test(options.realm))throw new TypeError("Keycloak realm is invalid");let serverUrl=normalizedProviderUrl(options.serverUrl,"Keycloak serverUrl"),issuer=providerEndpoint(serverUrl,`realms/${encodeURIComponent(options.realm)}`).replace(/\/$/,"");return oauthCustomProvider({...options,createTokenVerifier:resource=>createJwtVerifier({issuer,jwksUrl:new URL(providerEndpoint(issuer,"protocol/openid-connect/certs")),resource}),oauthMetadata:{issuer,authorization_endpoint:providerEndpoint(issuer,"protocol/openid-connect/auth"),token_endpoint:providerEndpoint(issuer,"protocol/openid-connect/token"),registration_endpoint:providerEndpoint(issuer,"clients-registrations/openid-connect"),response_types_supported:["code"],grant_types_supported:["authorization_code","refresh_token"],code_challenge_methods_supported:["S256"]},mapAuthInfo:mapUser})}function mapUser(authInfo){let payload=payloadFromAuthInfo(authInfo),id=requiredString(payload,"sub");if(id===void 0)throw invalidToken("Missing Keycloak subject");let realmAccess=recordValue(payload,"realm_access"),resourceAccess=recordValue(payload,"resource_access");return{user:{id,...optional("email",stringValue(payload,"email")),...optional("name",stringValue(payload,"name")),...optional("preferredUsername",stringValue(payload,"preferred_username")),...optional("givenName",stringValue(payload,"given_name")),...optional("familyName",stringValue(payload,"family_name")),...optional("emailVerified",booleanValue(payload,"email_verified")),roles:realmAccess===void 0?[]:normalizedStrings(realmAccess.roles),...realmAccess!==void 0&&{realmAccess},...resourceAccess!==void 0&&{resourceAccess}},payload,permissions:resourcePermissions(resourceAccess)}}function optional(key,value){return value===void 0?{}:{[key]:value}}function resourcePermissions(resourceAccess){return resourceAccess===void 0?[]:Object.entries(resourceAccess).flatMap(([resource,value])=>isRecord(value)?normalizedStrings(value.roles).map(role=>`${resource}:${role}`):[])}export{oauthKeycloakProvider};

package/dist/oauth/supabase.js

@@ -1,100 +1 @@
-import {
-  createJwtVerifier,
-  invalidToken,
-  isRecord,
-  normalizedProviderUrl,
-  oauthCustomProvider,
-  payloadFromAuthInfo,
-  providerEndpoint,
-  recordValue,
-  requiredString,
-  stringValue
-} from "../chunk-YF5X7FYF.js";
-
-// src/oauth/supabase.ts
-function oauthSupabaseProvider(options) {
-  const supabaseUrl = resolveSupabaseUrl(options);
-  const issuer = providerEndpoint(supabaseUrl, "auth/v1").replace(/\/$/, "");
-  const secret = options.jwtSecret;
-  if (secret !== void 0 && new TextEncoder().encode(secret).length < 32) {
-    throw new TypeError("Supabase jwtSecret must be at least 32 bytes");
-  }
-  return oauthCustomProvider({
-    ...options,
-    createTokenVerifier: (resource) => createJwtVerifier({
-      issuer,
-      jwksUrl: new URL(
-        providerEndpoint(supabaseUrl, "auth/v1/.well-known/jwks.json")
-      ),
-      ...secret !== void 0 ? { key: new TextEncoder().encode(secret), algorithms: ["HS256"] } : { algorithms: ["ES256"] },
-      resource
-    }),
-    oauthMetadata: {
-      issuer,
-      authorization_endpoint: providerEndpoint(
-        supabaseUrl,
-        "auth/v1/oauth/authorize"
-      ),
-      token_endpoint: providerEndpoint(supabaseUrl, "auth/v1/oauth/token"),
-      registration_endpoint: providerEndpoint(
-        supabaseUrl,
-        "auth/v1/oauth/clients/register"
-      ),
-      response_types_supported: ["code"],
-      grant_types_supported: ["authorization_code", "refresh_token"],
-      code_challenge_methods_supported: ["S256"]
-    },
-    mapAuthInfo: mapUser
-  });
-}
-function mapUser(authInfo) {
-  const payload = payloadFromAuthInfo(authInfo);
-  const id = requiredString(payload, "sub") ?? requiredString(payload, "user_id");
-  if (id === void 0) throw invalidToken("Missing Supabase subject");
-  const userMetadata = recordValue(payload, "user_metadata") ?? {};
-  const aal = stringValue(payload, "aal");
-  return {
-    user: {
-      id,
-      ...optional("email", stringValue(payload, "email")),
-      ...optional("name", stringValue(userMetadata, "name")),
-      ...optional("fullName", stringValue(userMetadata, "full_name")),
-      ...optional("username", stringValue(userMetadata, "username")),
-      ...optional("avatarUrl", stringValue(userMetadata, "avatar_url")),
-      ...optional("role", stringValue(payload, "role")),
-      ...optional("aal", aal),
-      amr: supabaseAmr(payload["amr"]),
-      ...optional("sessionId", stringValue(payload, "session_id"))
-    },
-    payload,
-    permissions: aal === void 0 ? [] : [`aal:${aal}`]
-  };
-}
-function optional(key, value) {
-  return value === void 0 ? {} : { [key]: value };
-}
-function resolveSupabaseUrl(options) {
-  if (options.supabaseUrl !== void 0) {
-    return normalizedProviderUrl(options.supabaseUrl, "supabaseUrl");
-  }
-  if (options.projectId === void 0 || !/^[a-z0-9-]+$/i.test(options.projectId)) {
-    throw new TypeError("Supabase requires projectId or supabaseUrl");
-  }
-  return new URL(`https://${options.projectId}.supabase.co`);
-}
-function supabaseAmr(value) {
-  if (!Array.isArray(value)) return [];
-  return value.flatMap((item) => {
-    if (!isRecord(item)) return [];
-    const method = item["method"];
-    const timestamp = item["timestamp"];
-    if (typeof method !== "string" || method.length === 0) return [];
-    if (timestamp !== void 0 && (typeof timestamp !== "number" || !Number.isFinite(timestamp))) {
-      return [];
-    }
-    return [timestamp === void 0 ? { method } : { method, timestamp }];
-  });
-}
-export {
-  oauthSupabaseProvider
-};
+import{createJwtVerifier,invalidToken,isRecord,normalizedProviderUrl,oauthCustomProvider,payloadFromAuthInfo,providerEndpoint,recordValue,requiredString,stringValue}from"../chunk-JMDHTN6N.js";function oauthSupabaseProvider(options){let supabaseUrl=resolveSupabaseUrl(options),issuer=providerEndpoint(supabaseUrl,"auth/v1").replace(/\/$/,""),secret=options.jwtSecret;if(secret!==void 0&&new TextEncoder().encode(secret).length<32)throw new TypeError("Supabase jwtSecret must be at least 32 bytes");return oauthCustomProvider({...options,createTokenVerifier:resource=>createJwtVerifier({issuer,jwksUrl:new URL(providerEndpoint(supabaseUrl,"auth/v1/.well-known/jwks.json")),...secret!==void 0?{key:new TextEncoder().encode(secret),algorithms:["HS256"]}:{algorithms:["ES256"]},resource}),oauthMetadata:{issuer,authorization_endpoint:providerEndpoint(supabaseUrl,"auth/v1/oauth/authorize"),token_endpoint:providerEndpoint(supabaseUrl,"auth/v1/oauth/token"),registration_endpoint:providerEndpoint(supabaseUrl,"auth/v1/oauth/clients/register"),response_types_supported:["code"],grant_types_supported:["authorization_code","refresh_token"],code_challenge_methods_supported:["S256"]},mapAuthInfo:mapUser})}function mapUser(authInfo){let payload=payloadFromAuthInfo(authInfo),id=requiredString(payload,"sub")??requiredString(payload,"user_id");if(id===void 0)throw invalidToken("Missing Supabase subject");let userMetadata=recordValue(payload,"user_metadata")??{},aal=stringValue(payload,"aal");return{user:{id,...optional("email",stringValue(payload,"email")),...optional("name",stringValue(userMetadata,"name")),...optional("fullName",stringValue(userMetadata,"full_name")),...optional("username",stringValue(userMetadata,"username")),...optional("avatarUrl",stringValue(userMetadata,"avatar_url")),...optional("role",stringValue(payload,"role")),...optional("aal",aal),amr:supabaseAmr(payload.amr),...optional("sessionId",stringValue(payload,"session_id"))},payload,permissions:aal===void 0?[]:[`aal:${aal}`]}}function optional(key,value){return value===void 0?{}:{[key]:value}}function resolveSupabaseUrl(options){if(options.supabaseUrl!==void 0)return normalizedProviderUrl(options.supabaseUrl,"supabaseUrl");if(options.projectId===void 0||!/^[a-z0-9-]+$/i.test(options.projectId))throw new TypeError("Supabase requires projectId or supabaseUrl");return new URL(`https://${options.projectId}.supabase.co`)}function supabaseAmr(value){return Array.isArray(value)?value.flatMap(item=>{if(!isRecord(item))return[];let method=item.method,timestamp=item.timestamp;return typeof method!="string"||method.length===0?[]:timestamp!==void 0&&(typeof timestamp!="number"||!Number.isFinite(timestamp))?[]:[timestamp===void 0?{method}:{method,timestamp}]}):[]}export{oauthSupabaseProvider};

package/dist/oauth/workos.js

@@ -1,76 +1 @@
-import {
-  booleanValue,
-  createJwtVerifier,
-  invalidToken,
-  normalizedProviderUrl,
-  normalizedStrings,
-  oauthCustomProvider,
-  payloadFromAuthInfo,
-  providerEndpoint,
-  requiredString,
-  stringValue
-} from "../chunk-YF5X7FYF.js";
-
-// src/oauth/workos.ts
-function oauthWorkOSProvider(options) {
-  const issuer = workosIssuer(options.subdomain);
-  return oauthCustomProvider({
-    ...options,
-    createTokenVerifier: (resource) => createJwtVerifier({
-      issuer,
-      jwksUrl: new URL(providerEndpoint(issuer, "oauth2/jwks")),
-      resource
-    }),
-    oauthMetadata: {
-      issuer,
-      authorization_endpoint: providerEndpoint(issuer, "oauth2/authorize"),
-      token_endpoint: providerEndpoint(issuer, "oauth2/token"),
-      registration_endpoint: providerEndpoint(issuer, "oauth2/register"),
-      response_types_supported: ["code"],
-      grant_types_supported: ["authorization_code", "refresh_token"],
-      code_challenge_methods_supported: ["S256"]
-    },
-    mapAuthInfo: mapUser
-  });
-}
-function mapUser(authInfo) {
-  const payload = payloadFromAuthInfo(authInfo);
-  const id = requiredString(payload, "sub");
-  if (id === void 0) throw invalidToken("Missing WorkOS subject");
-  return {
-    user: {
-      id,
-      ...optional("email", stringValue(payload, "email")),
-      ...optional("emailVerified", booleanValue(payload, "email_verified")),
-      ...optional("name", stringValue(payload, "name")),
-      ...optional(
-        "preferredUsername",
-        stringValue(payload, "preferred_username")
-      ),
-      ...optional("firstName", stringValue(payload, "first_name")),
-      ...optional("lastName", stringValue(payload, "last_name")),
-      ...optional("picture", stringValue(payload, "picture")),
-      roles: normalizedStrings(payload["roles"]),
-      ...optional("organizationId", stringValue(payload, "org_id")),
-      ...optional("sessionId", stringValue(payload, "sid"))
-    },
-    payload,
-    permissions: normalizedStrings(payload["permissions"])
-  };
-}
-function optional(key, value) {
-  return value === void 0 ? {} : { [key]: value };
-}
-function workosIssuer(value) {
-  if (typeof value !== "string" || value.trim().length === 0) {
-    throw new TypeError("WorkOS subdomain is required");
-  }
-  const url = normalizedProviderUrl(value, "WorkOS subdomain");
-  if (url.pathname !== "/") {
-    throw new TypeError("WorkOS subdomain must be a hostname or HTTPS origin");
-  }
-  return url.href.replace(/\/$/, "");
-}
-export {
-  oauthWorkOSProvider
-};
+import{booleanValue,createJwtVerifier,invalidToken,normalizedProviderUrl,normalizedStrings,oauthCustomProvider,payloadFromAuthInfo,providerEndpoint,requiredString,stringValue}from"../chunk-JMDHTN6N.js";function oauthWorkOSProvider(options){let issuer=workosIssuer(options.subdomain);return oauthCustomProvider({...options,createTokenVerifier:resource=>createJwtVerifier({issuer,jwksUrl:new URL(providerEndpoint(issuer,"oauth2/jwks")),resource}),oauthMetadata:{issuer,authorization_endpoint:providerEndpoint(issuer,"oauth2/authorize"),token_endpoint:providerEndpoint(issuer,"oauth2/token"),registration_endpoint:providerEndpoint(issuer,"oauth2/register"),response_types_supported:["code"],grant_types_supported:["authorization_code","refresh_token"],code_challenge_methods_supported:["S256"]},mapAuthInfo:mapUser})}function mapUser(authInfo){let payload=payloadFromAuthInfo(authInfo),id=requiredString(payload,"sub");if(id===void 0)throw invalidToken("Missing WorkOS subject");return{user:{id,...optional("email",stringValue(payload,"email")),...optional("emailVerified",booleanValue(payload,"email_verified")),...optional("name",stringValue(payload,"name")),...optional("preferredUsername",stringValue(payload,"preferred_username")),...optional("firstName",stringValue(payload,"first_name")),...optional("lastName",stringValue(payload,"last_name")),...optional("picture",stringValue(payload,"picture")),roles:normalizedStrings(payload.roles),...optional("organizationId",stringValue(payload,"org_id")),...optional("sessionId",stringValue(payload,"sid"))},payload,permissions:normalizedStrings(payload.permissions)}}function optional(key,value){return value===void 0?{}:{[key]:value}}function workosIssuer(value){if(typeof value!="string"||value.trim().length===0)throw new TypeError("WorkOS subdomain is required");let url=normalizedProviderUrl(value,"WorkOS subdomain");if(url.pathname!=="/")throw new TypeError("WorkOS subdomain must be a hostname or HTTPS origin");return url.href.replace(/\/$/,"")}export{oauthWorkOSProvider};

package/dist/openapi/index.js

@@ -1,6 +1 @@
-import {
-  registerOpenAPITools
-} from "../chunk-HNNQJLD5.js";
-export {
-  registerOpenAPITools
-};
+import{registerOpenAPITools}from"../chunk-Y26DNVWA.js";export{registerOpenAPITools};

package/dist/public-route-DAQJGS6K.js

@@ -0,0 +1 @@
+import{resolvePublicFilePath,servePublicFile}from"./chunk-ZMU5USAZ.js";export{resolvePublicFilePath,servePublicFile};

package/dist/react/components/model-context.d.ts

@@ -14,20 +14,17 @@ interface ModelContextProps {
  * Annotate a portion of the view UI with a description the model can see.
  *
  * Registers `content` in a hierarchical tree that serializes into an indented
- * markdown list and is pushed to the host via `ui/update-model-context`
- * (ext-apps `App.updateModelContext`). Updates batch per microtask. An async
- * flush pump acknowledges a payload only after a successful send; failed
- * update requests and missing host capability stay dirty and retry on the next
- * mutation. Each push carries the complete current context — the spec's
- * overwrite semantics (the host may defer delivery until the next model turn).
+ * markdown list under `_uiContext`. The store merges that field with
+ * `useViewState` and sends the complete snapshot through ChatGPT widget state
+ * or MCP Apps `ui/update-model-context`. Updates batch per microtask. Failed
+ * requests stay dirty and retry after the next mutation.
  *
  * An empty `content` (trimmed) does not register a node and does not orphan
  * children — nested {@link ModelContext} nodes re-parent to the nearest
  * registered ancestor (or root).
  *
- * When the host does not declare the `updateModelContext` capability, pushes
- * are skipped (payload stays dirty) and a one-time `console.warn` names the
- * gap.
+ * On the MCP Apps path, a host without the `updateModelContext` capability
+ * skips pushes and receives a one-time `console.warn`.
  *
  * @param props - Component props.
  * @param props.content - Text describing what the user is currently seeing.
@@ -51,11 +48,9 @@ export declare function ModelContext({ content, children }: ModelContextProps):
  *
  * Delegates to the active document runtime's {@link ModelContextStore}.
  * Strings register as root-level nodes in the same tree {@link ModelContext}
- * builds; each push overwrites the previous context on the host (the host may
- * defer delivery until the next model turn). Updates batch per microtask and
- * use the same async flush pump (ack only on success). When the host lacks the
- * `updateModelContext` capability, pushes stay dirty with a one-time
- * `console.warn`.
+ * builds. Every push merges the complete tree under `_uiContext` beside the
+ * current `useViewState` object. Updates batch per microtask and use the same
+ * async flush pump as the component API.
  *
  * @throws When no view runtime is mounted (`bootstrapView` has not activated a
  *   runtime, or it has been disposed).

package/dist/react/hooks/use-view-state.d.ts

@@ -0,0 +1,23 @@
+import { type SetStateAction } from "react";
+/**
+ * Persist model-visible state for the current mounted view.
+ *
+ * Every component in one view runtime reads and updates the same state object.
+ * ChatGPT restores the object from `window.openai.widgetState.modelContent`.
+ * Other MCP Apps hosts keep it for the iframe lifetime and receive it through
+ * `ui/update-model-context`.
+ *
+ * The state must be a JSON-serializable object and cannot contain the reserved
+ * `_uiContext` key used by {@link ModelContext}.
+ *
+ * @param defaultState - Initial object, or a lazy initializer evaluated once
+ * for this hook instance. Restored ChatGPT state takes precedence.
+ * @returns A readonly `[state, setState]` tuple with `useState` ergonomics.
+ *
+ * @example
+ * ```tsx
+ * const [state, setState] = useViewState({ count: 0 });
+ * setState((previous) => ({ ...previous, count: previous.count + 1 }));
+ * ```
+ */
+export declare function useViewState<T extends Record<string, unknown>>(defaultState: T | (() => T)): readonly [T, (state: SetStateAction<T>) => void];

package/dist/react/index.d.ts

@@ -22,6 +22,7 @@ export { useOpenExternal } from "./hooks/use-open-external.js";
 export { useSendFollowUp } from "./hooks/use-send-follow-up.js";
 export { useSendSizeChanged } from "./hooks/use-send-size-changed.js";
 export { useViewTheme } from "./hooks/use-view-theme.js";
+export { useViewState } from "./hooks/use-view-state.js";
 export { useToolContext, type ToolContextHandle, } from "./hooks/use-tool-context.js";
 export { useViewTool, type ViewToolDefinition } from "./hooks/use-view-tool.js";
 export { type DeepPartial, type Register, type RegisteredTools, } from "./types/register.js";