mcp-use 2.0.0-beta.4 → 2.0.0-beta.41

package/dist/oauth/workos.js

@@ -1,77 +1 @@
-import {
-  booleanValue,
-  createJwtVerifier,
-  invalidToken,
-  normalizedProviderUrl,
-  normalizedStrings,
-  oauthCustomProvider,
-  payloadFromAuthInfo,
-  providerEndpoint,
-  requiredString,
-  stringValue
-} from "../chunk-DPL7OEXC.js";
-
-// src/oauth/workos.ts
-function oauthWorkOSProvider(options) {
-  const issuer = workosIssuer(options.subdomain);
-  return oauthCustomProvider({
-    ...options,
-    createTokenVerifier: (resource) => createJwtVerifier({
-      issuer,
-      jwksUrl: new URL(providerEndpoint(issuer, "oauth2/jwks")),
-      resource
-    }),
-    oauthMetadata: {
-      issuer,
-      authorization_endpoint: providerEndpoint(issuer, "oauth2/authorize"),
-      token_endpoint: providerEndpoint(issuer, "oauth2/token"),
-      registration_endpoint: providerEndpoint(issuer, "oauth2/register"),
-      response_types_supported: ["code"],
-      grant_types_supported: ["authorization_code", "refresh_token"],
-      code_challenge_methods_supported: ["S256"]
-    },
-    mapAuthInfo: mapUser
-  });
-}
-function mapUser(authInfo) {
-  const payload = payloadFromAuthInfo(authInfo);
-  const id = requiredString(payload, "sub");
-  if (id === void 0) throw invalidToken("Missing WorkOS subject");
-  return {
-    user: {
-      id,
-      ...optional("email", stringValue(payload, "email")),
-      ...optional("emailVerified", booleanValue(payload, "email_verified")),
-      ...optional("name", stringValue(payload, "name")),
-      ...optional(
-        "preferredUsername",
-        stringValue(payload, "preferred_username")
-      ),
-      ...optional("firstName", stringValue(payload, "first_name")),
-      ...optional("lastName", stringValue(payload, "last_name")),
-      ...optional("picture", stringValue(payload, "picture")),
-      roles: normalizedStrings(payload["roles"]),
-      ...optional("organizationId", stringValue(payload, "org_id")),
-      ...optional("sessionId", stringValue(payload, "sid"))
-    },
-    payload,
-    permissions: normalizedStrings(payload["permissions"])
-  };
-}
-function optional(key, value) {
-  return value === void 0 ? {} : { [key]: value };
-}
-function workosIssuer(value) {
-  if (typeof value !== "string" || value.trim().length === 0) {
-    throw new TypeError("WorkOS subdomain is required");
-  }
-  const url = normalizedProviderUrl(value, "WorkOS subdomain");
-  if (url.pathname !== "/") {
-    throw new TypeError("WorkOS subdomain must be a hostname or HTTPS origin");
-  }
-  return url.href.replace(/\/$/, "");
-}
-export {
-  oauthWorkOSProvider
-};
-//# sourceMappingURL=workos.js.map
+import{booleanValue,createJwtVerifier,invalidToken,normalizedProviderUrl,normalizedStrings,oauthCustomProvider,payloadFromAuthInfo,providerEndpoint,requiredString,stringValue}from"../chunk-JMDHTN6N.js";function oauthWorkOSProvider(options){let issuer=workosIssuer(options.subdomain);return oauthCustomProvider({...options,createTokenVerifier:resource=>createJwtVerifier({issuer,jwksUrl:new URL(providerEndpoint(issuer,"oauth2/jwks")),resource}),oauthMetadata:{issuer,authorization_endpoint:providerEndpoint(issuer,"oauth2/authorize"),token_endpoint:providerEndpoint(issuer,"oauth2/token"),registration_endpoint:providerEndpoint(issuer,"oauth2/register"),response_types_supported:["code"],grant_types_supported:["authorization_code","refresh_token"],code_challenge_methods_supported:["S256"]},mapAuthInfo:mapUser})}function mapUser(authInfo){let payload=payloadFromAuthInfo(authInfo),id=requiredString(payload,"sub");if(id===void 0)throw invalidToken("Missing WorkOS subject");return{user:{id,...optional("email",stringValue(payload,"email")),...optional("emailVerified",booleanValue(payload,"email_verified")),...optional("name",stringValue(payload,"name")),...optional("preferredUsername",stringValue(payload,"preferred_username")),...optional("firstName",stringValue(payload,"first_name")),...optional("lastName",stringValue(payload,"last_name")),...optional("picture",stringValue(payload,"picture")),roles:normalizedStrings(payload.roles),...optional("organizationId",stringValue(payload,"org_id")),...optional("sessionId",stringValue(payload,"sid"))},payload,permissions:normalizedStrings(payload.permissions)}}function optional(key,value){return value===void 0?{}:{[key]:value}}function workosIssuer(value){if(typeof value!="string"||value.trim().length===0)throw new TypeError("WorkOS subdomain is required");let url=normalizedProviderUrl(value,"WorkOS subdomain");if(url.pathname!=="/")throw new TypeError("WorkOS subdomain must be a hostname or HTTPS origin");return url.href.replace(/\/$/,"")}export{oauthWorkOSProvider};

package/dist/openapi/index.d.ts

@@ -8,4 +8,3 @@ export type { FromOpenAPIOptions, OpenAPIAuth, OpenAPIDocument, OpenAPIExcludeRu
  * @internal
  */
 export declare function registerOpenAPITools(server: Pick<MCPServer, "tool">, options: FromOpenAPIOptions): void;
-//# sourceMappingURL=index.d.ts.map

package/dist/openapi/index.js

@@ -1,7 +1 @@
-import {
-  registerOpenAPITools
-} from "../chunk-AATFAERC.js";
-export {
-  registerOpenAPITools
-};
-//# sourceMappingURL=index.js.map
+import{registerOpenAPITools}from"../chunk-Y26DNVWA.js";export{registerOpenAPITools};

package/dist/openapi/types.d.ts

@@ -171,4 +171,3 @@ export interface CollectedOpenAPIOperation {
     /** Resolved JSON request body definition, when present. */
     requestBody?: OpenAPIRequestBodyObject;
 }
-//# sourceMappingURL=types.d.ts.map

package/dist/prompts.d.ts

@@ -1,4 +1,5 @@
-import type { GetPromptResult, StandardSchemaWithJSON } from "@modelcontextprotocol/server";
+import type { CallToolResult, GetPromptResult, StandardSchemaWithJSON } from "@modelcontextprotocol/server";
+import type { Env } from "hono";
 import type { RequestContext } from "./context.js";
 /** Declares a prompt's identity and argument schema. First argument to {@link MCPServer.prompt}. */
 export interface PromptDefinition {
@@ -20,7 +21,10 @@ export type InferPromptInput<T> = T extends {
     schema: infer S extends StandardSchemaWithJSON;
 } ? StandardSchemaWithJSON.InferOutput<S> : Record<string, unknown>;
 /**
- * Prompt execution callback. Returns the SDK's raw {@link GetPromptResult}.
+ * Prompt execution callback. Prefer the SDK's raw {@link GetPromptResult}.
+ *
+ * Deprecated response helpers that return a {@link CallToolResult} are still
+ * accepted and converted at registration time.
  *
  * @example
  * ```ts
@@ -31,5 +35,4 @@ export type InferPromptInput<T> = T extends {
  * })
  * ```
  */
-export type PromptCallback<TInput = Record<string, unknown>, TUser = never, HasOAuth extends boolean = false> = (params: TInput, ctx: RequestContext<TUser, HasOAuth>) => GetPromptResult | Promise<GetPromptResult>;
-//# sourceMappingURL=prompts.d.ts.map
+export type PromptCallback<TInput = Record<string, unknown>, TUser = never, HasOAuth extends boolean = false, TEnv extends Env = Env> = (params: TInput, ctx: RequestContext<TUser, HasOAuth, TEnv>) => GetPromptResult | CallToolResult | Promise<GetPromptResult | CallToolResult>;

package/dist/public-route-DAQJGS6K.js

@@ -0,0 +1 @@
+import{resolvePublicFilePath,servePublicFile}from"./chunk-ZMU5USAZ.js";export{resolvePublicFilePath,servePublicFile};

package/dist/react/components/error-boundary.d.ts

@@ -23,4 +23,3 @@ export declare class ErrorBoundary extends React.Component<ErrorBoundaryProps, {
     render(): string | number | bigint | boolean | React.JSX.Element | Iterable<React.ReactNode> | Promise<string | number | bigint | boolean | Iterable<React.ReactNode> | React.ReactElement<unknown, string | React.JSXElementConstructor<any>> | React.ReactPortal | null | undefined> | null | undefined;
 }
 export {};
-//# sourceMappingURL=error-boundary.d.ts.map

package/dist/react/components/image.d.ts

@@ -9,4 +9,3 @@ import React from "react";
  * through unchanged. Fully-relative paths are left as-is.
  */
 export declare const Image: React.FC<React.ImgHTMLAttributes<HTMLImageElement>>;
-//# sourceMappingURL=image.d.ts.map

package/dist/react/components/model-context.d.ts

@@ -14,20 +14,17 @@ interface ModelContextProps {
  * Annotate a portion of the view UI with a description the model can see.
  *
  * Registers `content` in a hierarchical tree that serializes into an indented
- * markdown list and is pushed to the host via `ui/update-model-context`
- * (ext-apps `App.updateModelContext`). Updates batch per microtask. An async
- * flush pump acknowledges a payload only after a successful send; failed
- * update requests and missing host capability stay dirty and retry on the next
- * mutation. Each push carries the complete current context — the spec's
- * overwrite semantics (the host may defer delivery until the next model turn).
+ * markdown list under `_uiContext`. The store merges that field with
+ * `useViewState` and sends the complete snapshot through ChatGPT widget state
+ * or MCP Apps `ui/update-model-context`. Updates batch per microtask. Failed
+ * requests stay dirty and retry after the next mutation.
  *
  * An empty `content` (trimmed) does not register a node and does not orphan
  * children — nested {@link ModelContext} nodes re-parent to the nearest
  * registered ancestor (or root).
  *
- * When the host does not declare the `updateModelContext` capability, pushes
- * are skipped (payload stays dirty) and a one-time `console.warn` names the
- * gap.
+ * On the MCP Apps path, a host without the `updateModelContext` capability
+ * skips pushes and receives a one-time `console.warn`.
  *
  * @param props - Component props.
  * @param props.content - Text describing what the user is currently seeing.
@@ -51,11 +48,9 @@ export declare function ModelContext({ content, children }: ModelContextProps):
  *
  * Delegates to the active document runtime's {@link ModelContextStore}.
  * Strings register as root-level nodes in the same tree {@link ModelContext}
- * builds; each push overwrites the previous context on the host (the host may
- * defer delivery until the next model turn). Updates batch per microtask and
- * use the same async flush pump (ack only on success). When the host lacks the
- * `updateModelContext` capability, pushes stay dirty with a one-time
- * `console.warn`.
+ * builds. Every push merges the complete tree under `_uiContext` beside the
+ * current `useViewState` object. Updates batch per microtask and use the same
+ * async flush pump as the component API.
  *
  * @throws When no view runtime is mounted (`bootstrapView` has not activated a
  *   runtime, or it has been disposed).
@@ -110,4 +105,3 @@ export declare function buildDescriptionString(): string;
  */
 export declare function buildModelContextParams(): ModelContextParams;
 export {};
-//# sourceMappingURL=model-context.d.ts.map

package/dist/react/components/theme-provider.d.ts

@@ -5,10 +5,12 @@ import React from "react";
  * Subscribes to the host channel (theme, `styles.variables`, `styles.css.fonts`)
  * via {@link useHostContextSubscription}. Theme-only consumers should use
  * {@link useViewTheme} instead so locale/dimension updates do not rerender them.
+ *
+ * MCP App views render in srcdoc iframes; the document canvas stays transparent
+ * by default so rounded cards do not expose an opaque `color-scheme` backdrop.
  */
 export declare const ThemeProvider: React.FC<{
     children: React.ReactNode;
     /** Set `color-scheme` on the document root to match the active theme. */
     colorScheme?: boolean;
 }>;
-//# sourceMappingURL=theme-provider.d.ts.map

package/dist/react/components/view-controls.d.ts

@@ -11,4 +11,3 @@ interface ViewControlsProps {
  */
 export declare function ViewControls({ children, debugger: enableDebugger, viewControls, }: ViewControlsProps): React.JSX.Element;
 export {};
-//# sourceMappingURL=view-controls.d.ts.map

package/dist/react/hooks/use-call-tool.d.ts

@@ -4,7 +4,8 @@ import { type CallToolSuccess } from "../types/result-types.js";
 export type { CallToolSuccess } from "../types/result-types.js";
 export { ToolError } from "../types/result-types.js";
 /**
- * Typed server-tool call handle returned by {@link useCallTool}.
+ * Typed server-tool call handle returned by {@link useCallTool} and
+ * {@link useDynamicTool}.
  *
  * @typeParam Args - Tool argument object type.
  * @typeParam Result - Expected `structuredContent` type for a successful result.
@@ -39,6 +40,15 @@ export interface CallToolHandle<Args, Result> {
     /** Whether a call is in flight. */
     isPending: boolean;
 }
+type ToolNameParameter<Name extends string> = string extends keyof RegisteredTools ? Name : Name extends keyof RegisteredTools ? Name : `Tool "${Name}" is not exported from the server entry. Export the ToolRef returned by server.tool().`;
+type RegisteredToolInput<Name extends string> = Name extends keyof RegisteredTools ? RegisteredTools[Name]["input"] : Record<string, unknown>;
+type RegisteredToolOutput<Name extends string> = Name extends keyof RegisteredTools ? RegisteredTools[Name]["output"] : unknown;
+/**
+ * Call a server tool using a {@link ToolRef} value (inline-JSX stretch path).
+ *
+ * @typeParam R - Tool ref carrying name, input, and output types.
+ */
+export declare function useCallTool<R extends ToolRef<string, unknown, unknown>>(ref: R): CallToolHandle<R extends ToolRef<string, infer I, unknown> ? I : never, R extends ToolRef<string, unknown, infer O> ? O : never>;
 /**
  * Call a registered server tool from the view with inferred types.
  *
@@ -66,18 +76,25 @@ export interface CallToolHandle<Args, Result> {
  * }
  * ```
  */
-export declare function useCallTool<Name extends keyof RegisteredTools>(name: Name): CallToolHandle<RegisteredTools[Name]["input"], RegisteredTools[Name]["output"]>;
+export declare function useCallTool<const Name extends string>(name: ToolNameParameter<Name>): CallToolHandle<RegisteredToolInput<Name>, RegisteredToolOutput<Name>>;
 /**
- * Call a server tool using a {@link ToolRef} value (inline-JSX stretch path).
+ * Call a tool whose registration cannot be represented by an exported
+ * {@link ToolRef}, such as a tool created from a loop, runtime configuration,
+ * or an OpenAPI document.
  *
- * @typeParam R - Tool ref carrying name, input, and output types.
- */
-export declare function useCallTool<R extends ToolRef<string, unknown, unknown>>(ref: R): CallToolHandle<R extends ToolRef<string, infer I, unknown> ? I : never, R extends ToolRef<string, unknown, infer O> ? O : never>;
-/**
- * Call a server tool with explicit argument/result types (escape hatch).
+ * Prefer {@link useCallTool} for statically declared tools. This explicit
+ * escape hatch requires callers to supply the contract because TypeScript
+ * cannot infer runtime-only registrations.
+ *
+ * @example
+ * ```tsx
+ * const lookup = useDynamicTool<{ id: string }, { value: string }>("lookup");
+ * const result = await lookup.callTool({ id: "item-1" });
+ * ```
  *
- * @typeParam Args - Explicit argument object type.
- * @typeParam Result - Explicit `structuredContent` type.
+ * @typeParam Args - Explicit tool argument object type.
+ * @typeParam Result - Expected `structuredContent` type for a successful result.
+ * @param name - Runtime-registered tool name.
+ * @returns A call handle using the explicitly supplied contract.
  */
-export declare function useCallTool<Args extends Record<string, unknown>, Result = unknown>(name: string): CallToolHandle<Args, Result>;
-//# sourceMappingURL=use-call-tool.d.ts.map
+export declare function useDynamicTool<Args extends Record<string, unknown>, Result = unknown>(name: string): CallToolHandle<Args, Result>;

package/dist/react/hooks/use-display-mode.d.ts

@@ -56,4 +56,3 @@ export declare function useDisplayMode(): {
         mode: DisplayMode;
     }) => Promise<void>;
 };
-//# sourceMappingURL=use-display-mode.d.ts.map

package/dist/react/hooks/use-files.d.ts

@@ -0,0 +1,24 @@
+import type { UseFilesResult } from "../types/file-types.js";
+/**
+ * Upload and download files through ChatGPT's optional `window.openai`
+ * extension.
+ *
+ * File handling is not part of the MCP Apps bridge. Always check
+ * `isSupported` before calling either action; unsupported calls reject with a
+ * descriptive error. The hook does not read or update ChatGPT widget state and
+ * does not make uploaded files model-visible as a side effect.
+ *
+ * The returned actions are referentially stable for the lifetime of the
+ * mounted runtime.
+ *
+ * @example
+ * ```tsx
+ * const { isSupported, upload, getDownloadUrl } = useFiles();
+ *
+ * if (!isSupported) return <p>File handling requires ChatGPT.</p>;
+ *
+ * const { fileId } = await upload(file);
+ * const { downloadUrl } = await getDownloadUrl({ fileId });
+ * ```
+ */
+export declare function useFiles(): UseFilesResult;

package/dist/react/hooks/use-host-context.d.ts

@@ -11,6 +11,11 @@ export interface HostContextHandle {
     timeZone: string;
     /** Host application user-agent string. Falls back to the browser's own user agent. */
     userAgent: string;
+    /**
+     * Host-reported platform. `"mobile"` on mobile hosts; otherwise `"web"`.
+     * Inspector maps Desktop → `"web"` and Mobile → `"mobile"`.
+     */
+    platform: "web" | "mobile";
     /** How the host is currently displaying the view. `"inline"` until the host reports otherwise. */
     displayMode: DisplayMode;
     /** Mobile safe area insets in pixels. All zeros when the host reports none. */
@@ -65,4 +70,3 @@ export interface HostContextHandle {
  * ```
  */
 export declare function useHostContext(): HostContextHandle;
-//# sourceMappingURL=use-host-context.d.ts.map

package/dist/react/hooks/use-open-external.d.ts

@@ -32,4 +32,3 @@
 export declare function useOpenExternal(): (args: {
     url: string;
 }) => Promise<void>;
-//# sourceMappingURL=use-open-external.d.ts.map

package/dist/react/hooks/use-send-follow-up.d.ts

@@ -32,4 +32,3 @@
 export declare function useSendFollowUp(): (args: {
     prompt: string;
 }) => Promise<void>;
-//# sourceMappingURL=use-send-follow-up.d.ts.map

package/dist/react/hooks/use-send-size-changed.d.ts

@@ -59,4 +59,3 @@ export declare function useSendSizeChanged(): (size: {
     width?: number;
     height?: number;
 }) => Promise<void>;
-//# sourceMappingURL=use-send-size-changed.d.ts.map

package/dist/react/hooks/use-tool-context.d.ts

@@ -69,4 +69,3 @@ export type ToolContextHandle<Name extends keyof RegisteredTools = never> = Pend
  * ```
  */
 export declare function useToolContext<Name extends keyof RegisteredTools = never>(): ToolContextHandle<Name>;
-//# sourceMappingURL=use-tool-context.d.ts.map

package/dist/react/hooks/use-view-state.d.ts

@@ -0,0 +1,23 @@
+import { type SetStateAction } from "react";
+/**
+ * Persist model-visible state for the current mounted view.
+ *
+ * Every component in one view runtime reads and updates the same state object.
+ * ChatGPT restores the object from `window.openai.widgetState.modelContent`.
+ * Other MCP Apps hosts keep it for the iframe lifetime and receive it through
+ * `ui/update-model-context`.
+ *
+ * The state must be a JSON-serializable object and cannot contain the reserved
+ * `_uiContext` key used by {@link ModelContext}.
+ *
+ * @param defaultState - Initial object, or a lazy initializer evaluated once
+ * for this hook instance. Restored ChatGPT state takes precedence.
+ * @returns A readonly `[state, setState]` tuple with `useState` ergonomics.
+ *
+ * @example
+ * ```tsx
+ * const [state, setState] = useViewState({ count: 0 });
+ * setState((previous) => ({ ...previous, count: previous.count + 1 }));
+ * ```
+ */
+export declare function useViewState<T extends Record<string, unknown>>(defaultState: T | (() => T)): readonly [T, (state: SetStateAction<T>) => void];

package/dist/react/hooks/use-view-theme.d.ts

@@ -14,4 +14,3 @@
  * ```
  */
 export declare function useViewTheme(): "light" | "dark";
-//# sourceMappingURL=use-view-theme.d.ts.map

package/dist/react/hooks/use-view-tool.d.ts

@@ -41,4 +41,3 @@ export type ViewToolDefinition = Pick<ToolDefinition, "name" | "title" | "descri
  * ```
  */
 export declare function useViewTool<const TDef extends ViewToolDefinition, TInput = InferToolInput<TDef>, TOutput = InferToolOutput<TDef>>(definition: TDef, handler: (args: TInput) => Exclude<ToolResult<TOutput>, InputRequiredResult> | Promise<Exclude<ToolResult<TOutput>, InputRequiredResult>>): void;
-//# sourceMappingURL=use-view-tool.d.ts.map

package/dist/react/index.d.ts

@@ -14,16 +14,18 @@ export { Image } from "./components/image.js";
 export { ModelContext, modelContext } from "./components/model-context.js";
 export { ThemeProvider } from "./components/theme-provider.js";
 export { ViewControls } from "./components/view-controls.js";
-export { useCallTool, type CallToolHandle } from "./hooks/use-call-tool.js";
+export { useCallTool, useDynamicTool, type CallToolHandle, } from "./hooks/use-call-tool.js";
 export { useDisplayMode } from "./hooks/use-display-mode.js";
+export { useFiles } from "./hooks/use-files.js";
 export { useHostContext, type HostContextHandle, } from "./hooks/use-host-context.js";
 export { useOpenExternal } from "./hooks/use-open-external.js";
 export { useSendFollowUp } from "./hooks/use-send-follow-up.js";
 export { useSendSizeChanged } from "./hooks/use-send-size-changed.js";
 export { useViewTheme } from "./hooks/use-view-theme.js";
+export { useViewState } from "./hooks/use-view-state.js";
 export { useToolContext, type ToolContextHandle, } from "./hooks/use-tool-context.js";
 export { useViewTool, type ViewToolDefinition } from "./hooks/use-view-tool.js";
 export { type DeepPartial, type Register, type RegisteredTools, } from "./types/register.js";
+export type { FileMetadata, UseFilesResult } from "./types/file-types.js";
 export type { DisplayMode, HostCapabilities, HostContext, HostInfo, SafeAreaInsets, } from "./types/host-types.js";
 export { ToolError, toolResultText, type CallToolResult, type CallToolSuccess, type ToolContextError, } from "./types/result-types.js";
-//# sourceMappingURL=index.d.ts.map