mcp-use 2.0.0-beta.9 → 2.0.0

package/dist/next/config.d.ts

@@ -0,0 +1,67 @@
+interface NextHeader {
+    key: string;
+    value: string;
+}
+interface NextHeaderRule {
+    source: string;
+    headers: NextHeader[];
+}
+/** Minimal structural Next.js config type, avoiding a runtime Next dependency. */
+export interface NextConfigLike {
+    /** Preserve arbitrary Next.js settings while augmenting the fields we use. */
+    [key: string]: unknown;
+    /** Next.js response-header callback augmented with MCP CORS headers. */
+    headers?: () => NextHeaderRule[] | Promise<NextHeaderRule[]>;
+    /** Next.js output tracing globs augmented with compiled MCP view assets. */
+    outputFileTracingIncludes?: Record<string, string[]>;
+}
+/** Options for {@link withMcpUse}. */
+export interface WithMcpUseOptions {
+    /**
+     * Authored MCP server entry, relative to `projectRoot`.
+     *
+     * @defaultValue `"mcp/server.ts"`
+     */
+    entry?: string;
+    /**
+     * Conventional MCP source directory containing the entry and `views/`.
+     *
+     * @defaultValue `"mcp"`
+     */
+    mcpDir?: string;
+    /** Explicit views directory, relative to `projectRoot`. */
+    viewsDir?: string;
+    /**
+     * MCP route mounted by the application.
+     *
+     * @defaultValue `"/api/mcp"`
+     */
+    basePath?: string;
+    /**
+     * Next.js project root.
+     *
+     * @defaultValue `process.cwd()`
+     */
+    projectRoot?: string;
+}
+/** @internal Exported for focused composition tests, not from `mcp-use/next`. */
+export declare function composeNextConfig<T extends NextConfigLike>(nextConfig: T, basePath: string): T & NextConfigLike;
+/**
+ * Add mcp-use build, CORS, and serverless tracing to a Next.js config.
+ *
+ * The MCP build runs when Next evaluates `next.config`, for both development
+ * and production builds. This removes the need for a separate prebuild script.
+ *
+ * @param nextConfig - Existing Next.js configuration to augment.
+ * @param options - MCP source, route, and project-root settings.
+ * @returns The augmented configuration after the MCP project is built.
+ *
+ * @example
+ * ```ts
+ * import { withMcpUse } from "mcp-use/next";
+ *
+ * export default withMcpUse();
+ * ```
+ */
+export declare function withMcpUse<T extends NextConfigLike = NextConfigLike>(nextConfig?: T, options?: WithMcpUseOptions): Promise<T & NextConfigLike>;
+export {};

package/dist/next/handler.d.ts

@@ -0,0 +1,32 @@
+import type { MCPServer } from "../server.js";
+/** Route Handler exports returned by {@link createNextHandler}. */
+export interface NextMcpHandlers {
+    /** Handles MCP GET requests. */
+    GET(request: Request): Promise<Response>;
+    /** Handles MCP POST requests. */
+    POST(request: Request): Promise<Response>;
+    /** Handles MCP DELETE requests. */
+    DELETE(request: Request): Promise<Response>;
+    /** Handles CORS preflight requests. */
+    OPTIONS(request: Request): Promise<Response>;
+}
+/**
+ * Create App Router method exports for an authored MCP server.
+ *
+ * The generated artifact contains only view registration data; application
+ * source continues to import its own server module. Initialization is lazy so
+ * importing a route during `next build` does not perform filesystem I/O.
+ *
+ * @typeParam TUser - Authenticated application user type.
+ * @param server - MCP server mounted by the route.
+ * @returns App Router method exports for the MCP endpoint.
+ *
+ * @example
+ * ```ts
+ * import { server } from "@/mcp/server";
+ * import { createNextHandler } from "mcp-use/next";
+ *
+ * export const { GET, POST, DELETE, OPTIONS } = createNextHandler(server);
+ * ```
+ */
+export declare function createNextHandler<TUser>(server: MCPServer<TUser>): NextMcpHandlers;

package/dist/next/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Integrate an MCP server and its compiled views with Next.js App Router.
+ *
+ * @packageDocumentation
+ */
+export { createNextHandler } from "./handler.js";
+export type { NextMcpHandlers } from "./handler.js";
+export { withMcpUse } from "./config.js";
+export type { NextConfigLike, WithMcpUseOptions } from "./config.js";

package/dist/next/index.js

@@ -0,0 +1 @@
+import{readFile}from"fs/promises";import{join}from"path";function isViewManifestEntry(value){return typeof value!="object"||value===null||!("kind"in value)?!1:value.kind==="inline"?"js"in value&&typeof value.js=="string"&&"css"in value&&typeof value.css=="string":value.kind==="external"&&"entry"in value&&typeof value.entry=="string"&&"css"in value&&Array.isArray(value.css)&&value.css.every(item=>typeof item=="string")&&(!("scripts"in value)||Array.isArray(value.scripts)&&value.scripts.every(item=>typeof item=="string"))}function parseBuildManifest(raw,manifestPath){let parsed;try{parsed=JSON.parse(raw)}catch(error){let reason=error instanceof Error?error.message:String(error);throw new Error(`Invalid mcp-use build manifest at ${manifestPath}: ${reason}`)}if(typeof parsed!="object"||parsed===null||Array.isArray(parsed)||!("views"in parsed)||typeof parsed.views!="object"||parsed.views===null||Array.isArray(parsed.views)||!Object.values(parsed.views).every(isViewManifestEntry))throw new Error(`Invalid mcp-use build manifest at ${manifestPath}.`);return parsed.views}function createNextHandler(server){let projectRoot=process.cwd(),manifestPath=join(process.cwd(),".mcp-use","build","manifest.json"),handlerPromise,initialize=async()=>{let raw;try{raw=await readFile(manifestPath,"utf8")}catch(error){throw(typeof error=="object"&&error!==null&&"code"in error?error.code:void 0)==="ENOENT"?new Error(`No mcp-use build found at ${manifestPath}. Wrap next.config with withMcpUse() before mounting this route.`):error}return server.__primeViews(parseBuildManifest(raw,manifestPath),{projectRoot}),async request=>server.fetch(request)},handle=async request=>(handlerPromise??=initialize(),(await handlerPromise)(request));return{GET:handle,POST:handle,DELETE:handle,OPTIONS:async()=>new Response(null,{status:204,headers:{"Access-Control-Allow-Origin":"*","Access-Control-Allow-Methods":"GET, POST, DELETE, OPTIONS","Access-Control-Allow-Headers":"Authorization, Content-Type, Accept, Mcp-Protocol-Version, Mcp-Method, Mcp-Name, Mcp-Session-Id, Last-Event-ID","Access-Control-Expose-Headers":"Mcp-Session-Id"}})}}var DEFAULT_BASE_PATH="/api/mcp",BUILD_TRACE_GLOB="./.mcp-use/build/**/*",MCP_CORS_HEADERS=[{key:"Access-Control-Allow-Origin",value:"*"},{key:"Access-Control-Allow-Methods",value:"GET, POST, DELETE, OPTIONS"},{key:"Access-Control-Allow-Headers",value:"Authorization, Content-Type, Accept, Mcp-Protocol-Version, Mcp-Method, Mcp-Name, Mcp-Session-Id, Last-Event-ID"},{key:"Access-Control-Expose-Headers",value:"Mcp-Session-Id"}];function normalizeBasePath(value){let raw=value??DEFAULT_BASE_PATH;if(!raw.startsWith("/")||raw==="/"||raw.includes(":"))throw new Error(`withMcpUse basePath must be a concrete absolute path; received ${JSON.stringify(raw)}.`);let end=raw.length;for(;end>0&&raw.charCodeAt(end-1)===47;)end--;return raw.slice(0,end)}function mergeHeaders(existing,additions){let next=[...existing];for(let header of additions){let index=next.findIndex(candidate=>candidate.key.toLowerCase()===header.key.toLowerCase());index===-1?next.push(header):next[index]=header}return next}async function buildMcpProject(projectRoot,options){let{spawn}=process.getBuiltinModule("node:child_process"),{fileURLToPath}=process.getBuiltinModule("node:url"),args=[fileURLToPath(new URL("../bin.js",import.meta.url)),"build"];options.entry!==void 0&&args.push("--entry",options.entry),options.mcpDir!==void 0&&args.push("--mcp-dir",options.mcpDir),options.viewsDir!==void 0&&args.push("--views-dir",options.viewsDir),await new Promise((resolvePromise,reject)=>{let child=spawn(process.execPath,args,{cwd:projectRoot,env:process.env,stdio:"inherit"});child.once("error",reject),child.once("exit",(code,signal)=>{if(code===0){resolvePromise();return}reject(new Error(`mcp-use build failed${code===null?` with signal ${signal}`:` with exit code ${code}`}.`))})})}function composeNextConfig(nextConfig,basePath){let source=`${basePath}/:path*`,originalHeaders=nextConfig.headers?.bind(nextConfig),existingTrace=nextConfig.outputFileTracingIncludes??{},routeTrace=existingTrace[basePath]??[];return{...nextConfig,async headers(){let rules=originalHeaders===void 0?[]:await originalHeaders(),matchingIndex=rules.findIndex(rule=>rule.source===source);return matchingIndex===-1?[...rules,{source,headers:MCP_CORS_HEADERS}]:rules.map((rule,index)=>index===matchingIndex?{...rule,headers:mergeHeaders(rule.headers,MCP_CORS_HEADERS)}:rule)},outputFileTracingIncludes:{...existingTrace,[basePath]:[...new Set([...routeTrace,BUILD_TRACE_GLOB])]}}}async function withMcpUse(nextConfig={},options={}){let basePath=normalizeBasePath(options.basePath),projectRoot=options.projectRoot??process.cwd();return await buildMcpProject(projectRoot,options),composeNextConfig(nextConfig,basePath)}export{createNextHandler,withMcpUse};

package/dist/node-bridge.d.ts

@@ -1,33 +1,43 @@
 /**
- * Vendored from `@modelcontextprotocol/node` `toNodeHandler.ts` (SDK 2.0.0-beta.4).
- * ponytail: track upstream SSE/backpressure fixes when bumping `@modelcontextprotocol/server`.
+ * Adapt Web-standard MCP handlers to Node.js HTTP request and response objects.
  *
- * @internal Lazy-imported from `listen()` and `mcp-use dev` only.
+ * @packageDocumentation
  */
 import type { AuthInfo, McpHandlerRequestOptions } from "@modelcontextprotocol/server";
 /** Minimal duck-typed shape of a Node.js `IncomingMessage`. */
 export interface NodeIncomingMessageLike extends AsyncIterable<Uint8Array | string> {
+    /** HTTP method. Defaults to `GET` when omitted. */
     method?: string | undefined;
+    /** Request target. Defaults to `/` when omitted. */
     url?: string | undefined;
+    /** Incoming HTTP headers, including `host` or `:authority` when available. */
     headers: Record<string, string | string[] | undefined>;
+    /** Verified authentication information forwarded to the Fetch handler. */
     auth?: AuthInfo;
 }
 /** Minimal duck-typed shape of a Node.js `ServerResponse`. */
 export interface NodeServerResponseLike {
+    /** Writes the HTTP status and response headers. */
     writeHead(statusCode: number, headers?: Record<string, string>): unknown;
+    /** Writes a response-body chunk and returns `false` when backpressure applies. */
     write(chunk: string | Uint8Array): unknown;
+    /** Completes the response, optionally with a final body chunk. */
     end(chunk?: string | Uint8Array): unknown;
+    /** Subscribes to response lifecycle events such as `close` and `drain`. */
     on(event: string, listener: (...args: unknown[]) => void): unknown;
+    /** Whether the underlying response stream has already been destroyed. */
     destroyed?: boolean;
 }
 /** Web-standard fetch face accepted by {@link toNodeHandler}. */
 export interface FetchLikeHandler {
+    /** Handles a converted Web-standard request. */
     fetch: (request: Request, options?: McpHandlerRequestOptions) => Promise<Response>;
 }
 /** Node `(req, res, parsedBody?)` handler produced by {@link toNodeHandler}. */
 export type NodeRequestHandler = (req: NodeIncomingMessageLike, res: NodeServerResponseLike, parsedBody?: unknown) => Promise<void>;
 /** Options for {@link toNodeHandler}. */
 export interface ToNodeHandlerOptions {
+    /** Observes conversion or handler errors before a JSON-RPC error is returned. */
     onerror?: (error: Error) => void;
 }
 /**
@@ -35,10 +45,22 @@ export interface ToNodeHandlerOptions {
  *
  * @param handler - Handler whose `fetch` receives converted `Request` objects.
  * @param opts - Optional adapter error observer.
+ * @returns A Node-compatible asynchronous request handler.
+ *
+ * @example
+ * ```ts
+ * import { createServer } from "node:http";
+ * import { MCPServer } from "mcp-use";
+ * import { toNodeHandler } from "mcp-use/node";
+ *
+ * const server = new MCPServer({ name: "example", version: "1.0.0" });
+ * createServer(toNodeHandler(server)).listen(3000);
+ * ```
  */
 export declare function toNodeHandler(handler: FetchLikeHandler, opts?: ToNodeHandlerOptions): NodeRequestHandler;
 /** Options for {@link toWebRequest}. */
 export interface ToWebRequestOptions {
+    /** Signal that aborts the constructed request. */
     signal?: AbortSignal;
 }
 /**
@@ -47,6 +69,13 @@ export interface ToWebRequestOptions {
  * @param req - Node `IncomingMessage` (or Express `req`).
  * @param parsedBody - Optional pre-parsed JSON body.
  * @param options - Optional abort signal for the constructed request.
+ * @returns A Web-standard request with the Node headers and body.
+ *
+ * @example
+ * ```ts
+ * import { toWebRequest } from "mcp-use/node";
+ *
+ * const request = await toWebRequest(incomingMessage);
+ * ```
  */
 export declare function toWebRequest(req: NodeIncomingMessageLike, parsedBody?: unknown, options?: ToWebRequestOptions): Promise<Request>;
-//# sourceMappingURL=node-bridge.d.ts.map

package/dist/node-bridge.js

@@ -1,151 +1 @@
-// src/node-bridge.ts
-function toNodeHandler(handler, opts) {
-  return async (req, res, parsedBody) => {
-    if (typeof parsedBody === "function") {
-      parsedBody = void 0;
-    }
-    let finished = false;
-    const abort = new AbortController();
-    res.on("close", () => {
-      if (!finished) {
-        abort.abort();
-      }
-    });
-    if (res.destroyed === true) {
-      abort.abort();
-    }
-    let response;
-    try {
-      const request = await toWebRequest(req, parsedBody, {
-        signal: abort.signal
-      });
-      response = await handler.fetch(request, {
-        ...req.auth !== void 0 && { authInfo: req.auth },
-        ...parsedBody !== void 0 && { parsedBody }
-      });
-    } catch (error) {
-      try {
-        opts?.onerror?.(
-          error instanceof Error ? error : new Error(String(error))
-        );
-      } catch {
-      }
-      response = internalServerErrorResponse(echoableRequestId(parsedBody));
-    }
-    const headers = {};
-    for (const [name, value] of response.headers) {
-      headers[name] = value;
-    }
-    res.writeHead(response.status, headers);
-    if (response.body === null) {
-      finished = true;
-      res.end();
-      return;
-    }
-    let drainResolve;
-    const releaseDrainWait = () => {
-      drainResolve?.();
-      drainResolve = void 0;
-    };
-    const waitForDrain = () => new Promise((resolve) => {
-      drainResolve = resolve;
-    });
-    res.on("drain", releaseDrainWait);
-    const closed = new Promise((resolve) => {
-      abort.signal.addEventListener("abort", () => resolve(), { once: true });
-    });
-    try {
-      for await (const chunk of response.body) {
-        if (abort.signal.aborted) {
-          break;
-        }
-        const bytes = chunk instanceof Uint8Array ? chunk : new Uint8Array(chunk);
-        if (res.write(bytes) === false) {
-          await Promise.race([waitForDrain(), closed]);
-        }
-      }
-    } catch {
-    }
-    finished = true;
-    res.end();
-  };
-}
-async function toWebRequest(req, parsedBody, options) {
-  const method = (req.method ?? "GET").toUpperCase();
-  const host = singleHeaderValue(req.headers["host"]) ?? singleHeaderValue(req.headers[":authority"]) ?? "localhost";
-  const url = `http://${host}${req.url ?? "/"}`;
-  const headers = new Headers();
-  for (const [name, value] of Object.entries(req.headers)) {
-    if (value === void 0 || name.startsWith(":")) {
-      continue;
-    }
-    if (Array.isArray(value)) {
-      for (const item of value) {
-        headers.append(name, item);
-      }
-    } else {
-      headers.set(name, value);
-    }
-  }
-  let body;
-  if (method !== "GET" && method !== "HEAD") {
-    if (parsedBody === void 0) {
-      const decoder = new TextDecoder();
-      let collected = "";
-      for await (const chunk of req) {
-        collected += typeof chunk === "string" ? chunk : decoder.decode(chunk, { stream: true });
-      }
-      collected += decoder.decode();
-      if (collected.length > 0) {
-        body = collected;
-      }
-    } else {
-      const serialized = JSON.stringify(parsedBody);
-      headers.delete("content-encoding");
-      headers.delete("transfer-encoding");
-      if (serialized === void 0) {
-        headers.delete("content-length");
-      } else {
-        body = serialized;
-        headers.set(
-          "content-length",
-          String(new TextEncoder().encode(serialized).byteLength)
-        );
-      }
-    }
-  }
-  return new Request(url, {
-    method,
-    headers,
-    ...options?.signal !== void 0 && { signal: options.signal },
-    ...body !== void 0 && { body }
-  });
-}
-function singleHeaderValue(value) {
-  return Array.isArray(value) ? value[0] : value;
-}
-function echoableRequestId(body) {
-  if (body === null || typeof body !== "object" || Array.isArray(body)) {
-    return null;
-  }
-  const { method, id } = body;
-  if (typeof method !== "string") {
-    return null;
-  }
-  return typeof id === "string" || typeof id === "number" ? id : null;
-}
-function internalServerErrorResponse(id) {
-  return Response.json(
-    {
-      jsonrpc: "2.0",
-      error: { code: -32603, message: "Internal server error" },
-      id
-    },
-    { status: 500 }
-  );
-}
-export {
-  toNodeHandler,
-  toWebRequest
-};
-//# sourceMappingURL=node-bridge.js.map
+import{toNodeHandler,toWebRequest}from"./chunk-XYHHP43G.js";export{toNodeHandler,toWebRequest};

package/dist/node-http-unavailable.d.ts

@@ -0,0 +1,9 @@
+import type { createServer as NodeCreateServer } from "node:http";
+/**
+ * Non-Node target for the internal conditional Node HTTP import.
+ *
+ * Fetch-based runtimes never call `listen()`. Keeping this as a runtime error
+ * preserves a Node-free package graph for Workers and browser-oriented
+ * bundlers while Node resolves the same internal specifier to `node:http`.
+ */
+export declare const createServer: typeof NodeCreateServer;

package/dist/node-http.d.ts

@@ -0,0 +1,2 @@
+/** @internal Node target for the package's conditional HTTP import. */
+export { createServer } from "node:http";

package/dist/oauth/adapters.d.ts

@@ -23,4 +23,3 @@ export declare function oauthMetadata<TUser>(provider: OAuthProvider<TUser>, res
  * @param request - Request that passed through bearer auth middleware.
  */
 export declare function authInfoFromRequest(request: Request): AuthInfo | undefined;
-//# sourceMappingURL=adapters.d.ts.map

package/dist/oauth/auth0.d.ts

@@ -1,17 +1,31 @@
+/**
+ * Verify Auth0 access tokens for an mcp-use resource server.
+ *
+ * @packageDocumentation
+ */
 import { type OAuthProvider, type OAuthResourceOptions } from "./provider.js";
 /** Verified Auth0 user claims exposed to authenticated MCP callbacks. */
 export interface Auth0OAuthUser {
+    /** Auth0 subject identifier. */
     id: string;
+    /** Primary email address, when included in the access token. */
     email?: string;
+    /** Display name, when included in the access token. */
     name?: string;
+    /** Auth0 nickname, when included in the access token. */
     nickname?: string;
+    /** Profile image URL, when included in the access token. */
     picture?: string;
+    /** Whether Auth0 has verified {@link Auth0OAuthUser.email}. */
     emailVerified?: boolean;
+    /** ISO timestamp for the most recent profile update. */
     updatedAt?: string;
+    /** Roles from the access token's `roles` claim. */
     roles: string[];
 }
 /** Configures Auth0 JWT verification and protected-resource metadata. */
 export interface Auth0OAuthProviderOptions extends OAuthResourceOptions {
+    /** Auth0 tenant domain or issuer URL. */
     domain: URL | string;
 }
 /**
@@ -19,6 +33,15 @@ export interface Auth0OAuthProviderOptions extends OAuthResourceOptions {
  *
  * @param options - Auth0 domain and resource-server settings.
  * @returns A provider that rejects tokens not issued for the resolved MCP resource.
+ * @throws A `TypeError` if `domain` is not a valid HTTP or HTTPS URL.
+ *
+ * @example
+ * ```ts
+ * import { oauthAuth0Provider } from "mcp-use/oauth/auth0";
+ *
+ * const oauth = oauthAuth0Provider({
+ *   domain: "https://example.us.auth0.com",
+ * });
+ * ```
  */
 export declare function oauthAuth0Provider(options: Auth0OAuthProviderOptions): OAuthProvider<Auth0OAuthUser>;
-//# sourceMappingURL=auth0.d.ts.map

package/dist/oauth/auth0.js

@@ -1,61 +1 @@
-import {
-  booleanValue,
-  createJwtVerifier,
-  invalidToken,
-  normalizedProviderUrl,
-  normalizedStrings,
-  oauthCustomProvider,
-  payloadFromAuthInfo,
-  providerEndpoint,
-  requiredString,
-  stringValue
-} from "../chunk-DPL7OEXC.js";
-
-// src/oauth/auth0.ts
-function oauthAuth0Provider(options) {
-  const issuer = normalizedProviderUrl(options.domain, "Auth0 domain").href;
-  return oauthCustomProvider({
-    ...options,
-    createTokenVerifier: (resource) => createJwtVerifier({
-      issuer,
-      jwksUrl: new URL(providerEndpoint(issuer, ".well-known/jwks.json")),
-      resource
-    }),
-    oauthMetadata: {
-      issuer,
-      authorization_endpoint: providerEndpoint(issuer, "authorize"),
-      token_endpoint: providerEndpoint(issuer, "oauth/token"),
-      registration_endpoint: providerEndpoint(issuer, "oidc/register"),
-      response_types_supported: ["code"],
-      grant_types_supported: ["authorization_code", "refresh_token"],
-      code_challenge_methods_supported: ["S256"]
-    },
-    mapAuthInfo: mapUser
-  });
-}
-function mapUser(authInfo) {
-  const payload = payloadFromAuthInfo(authInfo);
-  const id = requiredString(payload, "sub");
-  if (id === void 0) throw invalidToken("Missing Auth0 subject");
-  return {
-    user: {
-      id,
-      ...optional("email", stringValue(payload, "email")),
-      ...optional("name", stringValue(payload, "name")),
-      ...optional("nickname", stringValue(payload, "nickname")),
-      ...optional("picture", stringValue(payload, "picture")),
-      ...optional("emailVerified", booleanValue(payload, "email_verified")),
-      ...optional("updatedAt", stringValue(payload, "updated_at")),
-      roles: normalizedStrings(payload["roles"])
-    },
-    payload,
-    permissions: normalizedStrings(payload["permissions"])
-  };
-}
-function optional(key, value) {
-  return value === void 0 ? {} : { [key]: value };
-}
-export {
-  oauthAuth0Provider
-};
-//# sourceMappingURL=auth0.js.map
+import{booleanValue,createJwtVerifier,normalizedProviderUrl,normalizedStrings,payloadFromAuthInfo,providerEndpoint,requiredString,stringValue}from"../chunk-KGTOBJW2.js";import{invalidToken,oauthCustomProvider}from"../chunk-IS7FKXFR.js";function oauthAuth0Provider(options){let issuer=normalizedProviderUrl(options.domain,"Auth0 domain").href;return oauthCustomProvider({...options,createTokenVerifier:resource=>createJwtVerifier({issuer,jwksUrl:new URL(providerEndpoint(issuer,".well-known/jwks.json")),resource}),oauthMetadata:{issuer,authorization_endpoint:providerEndpoint(issuer,"authorize"),token_endpoint:providerEndpoint(issuer,"oauth/token"),registration_endpoint:providerEndpoint(issuer,"oidc/register"),response_types_supported:["code"],grant_types_supported:["authorization_code","refresh_token"],code_challenge_methods_supported:["S256"]},mapAuthInfo:mapUser})}function mapUser(authInfo){let payload=payloadFromAuthInfo(authInfo),id=requiredString(payload,"sub");if(id===void 0)throw invalidToken("Missing Auth0 subject");return{user:{id,...optional("email",stringValue(payload,"email")),...optional("name",stringValue(payload,"name")),...optional("nickname",stringValue(payload,"nickname")),...optional("picture",stringValue(payload,"picture")),...optional("emailVerified",booleanValue(payload,"email_verified")),...optional("updatedAt",stringValue(payload,"updated_at")),roles:normalizedStrings(payload.roles)},payload,permissions:normalizedStrings(payload.permissions)}}function optional(key,value){return value===void 0?{}:{[key]:value}}export{oauthAuth0Provider};

package/dist/oauth/better-auth.d.ts

@@ -1,13 +1,26 @@
+/**
+ * Verify access tokens from the Better Auth OAuth 2.1 Provider plugin.
+ *
+ * @packageDocumentation
+ */
 import { type OAuthProvider, type OAuthResourceOptions } from "./provider.js";
 /** Verified Better Auth claims exposed to authenticated MCP callbacks. */
 export interface BetterAuthOAuthUser {
+    /** Better Auth subject identifier. */
     id: string;
+    /** Primary email address, when included in the access token. */
     email?: string;
+    /** Display name, when included in the access token. */
     name?: string;
+    /** Profile image URL, when included in the access token. */
     picture?: string;
+    /** Whether Better Auth has verified {@link BetterAuthOAuthUser.email}. */
     emailVerified?: boolean;
+    /** Better Auth session identifier. */
     sessionId?: string;
+    /** Whether the session belongs to an anonymous user. */
     isAnonymous?: boolean;
+    /** Roles from the access token's `roles` claim. */
     roles: string[];
 }
 /** Configures Better Auth JWT verification and protected-resource metadata. */
@@ -24,6 +37,15 @@ export interface BetterAuthOAuthProviderOptions extends OAuthResourceOptions {
  *
  * @param options - Better Auth issuer URL and resource-server settings.
  * @returns A provider that rejects tokens not issued for the resolved MCP resource.
+ * @throws A `TypeError` if `authURL` is not a valid HTTP or HTTPS URL.
+ *
+ * @example
+ * ```ts
+ * import { oauthBetterAuthProvider } from "mcp-use/oauth/better-auth";
+ *
+ * const oauth = oauthBetterAuthProvider({
+ *   authURL: "https://auth.example.com/api/auth",
+ * });
+ * ```
  */
 export declare function oauthBetterAuthProvider(options: BetterAuthOAuthProviderOptions): OAuthProvider<BetterAuthOAuthUser>;
-//# sourceMappingURL=better-auth.d.ts.map

package/dist/oauth/better-auth.js

@@ -1,76 +1 @@
-import {
-  booleanValue,
-  createJwtVerifier,
-  invalidToken,
-  normalizedProviderUrl,
-  normalizedStrings,
-  oauthCustomProvider,
-  payloadFromAuthInfo,
-  providerEndpoint,
-  requiredString,
-  stringValue
-} from "../chunk-DPL7OEXC.js";
-
-// src/oauth/better-auth.ts
-function oauthBetterAuthProvider(options) {
-  const issuer = normalizedProviderUrl(
-    options.authURL,
-    "Better Auth authURL"
-  ).href.replace(/\/$/, "");
-  return oauthCustomProvider({
-    ...options,
-    createTokenVerifier: (resource) => createJwtVerifier({
-      issuer,
-      jwksUrl: new URL(providerEndpoint(issuer, "jwks")),
-      resource
-    }),
-    oauthMetadata: metadata(issuer, options.scopesSupported),
-    mapAuthInfo: mapUser
-  });
-}
-function metadata(issuer, scopesSupported) {
-  return {
-    issuer,
-    authorization_endpoint: providerEndpoint(issuer, "oauth2/authorize"),
-    token_endpoint: providerEndpoint(issuer, "oauth2/token"),
-    registration_endpoint: providerEndpoint(issuer, "oauth2/register"),
-    jwks_uri: providerEndpoint(issuer, "jwks"),
-    response_types_supported: ["code"],
-    grant_types_supported: [
-      "authorization_code",
-      "client_credentials",
-      "refresh_token"
-    ],
-    code_challenge_methods_supported: ["S256"],
-    scopes_supported: scopesSupported === void 0 ? ["openid", "profile", "email", "offline_access"] : [...scopesSupported]
-  };
-}
-function mapUser(authInfo) {
-  const payload = payloadFromAuthInfo(authInfo);
-  const id = requiredString(payload, "sub");
-  if (id === void 0) throw invalidToken("Missing Better Auth subject");
-  return {
-    user: {
-      id,
-      ...optional("email", stringValue(payload, "email")),
-      ...optional("name", stringValue(payload, "name")),
-      ...optional("picture", stringValue(payload, "picture")),
-      ...optional("emailVerified", booleanValue(payload, "email_verified")),
-      ...optional("sessionId", stringValue(payload, "sid")),
-      ...optional(
-        "isAnonymous",
-        booleanValue(payload, "is_anonymous") ?? booleanValue(payload, "isAnonymous")
-      ),
-      roles: normalizedStrings(payload["roles"])
-    },
-    payload,
-    permissions: normalizedStrings(payload["permissions"])
-  };
-}
-function optional(key, value) {
-  return value === void 0 ? {} : { [key]: value };
-}
-export {
-  oauthBetterAuthProvider
-};
-//# sourceMappingURL=better-auth.js.map
+import{booleanValue,createJwtVerifier,normalizedProviderUrl,normalizedStrings,payloadFromAuthInfo,providerEndpoint,requiredString,stringValue}from"../chunk-KGTOBJW2.js";import{invalidToken,oauthCustomProvider}from"../chunk-IS7FKXFR.js";function oauthBetterAuthProvider(options){let issuer=normalizedProviderUrl(options.authURL,"Better Auth authURL").href.replace(/\/$/,"");return oauthCustomProvider({...options,createTokenVerifier:resource=>createJwtVerifier({issuer,jwksUrl:new URL(providerEndpoint(issuer,"jwks")),resource}),oauthMetadata:metadata(issuer,options.scopesSupported),mapAuthInfo:mapUser})}function metadata(issuer,scopesSupported){return{issuer,authorization_endpoint:providerEndpoint(issuer,"oauth2/authorize"),token_endpoint:providerEndpoint(issuer,"oauth2/token"),registration_endpoint:providerEndpoint(issuer,"oauth2/register"),jwks_uri:providerEndpoint(issuer,"jwks"),response_types_supported:["code"],grant_types_supported:["authorization_code","client_credentials","refresh_token"],code_challenge_methods_supported:["S256"],scopes_supported:scopesSupported===void 0?["openid","profile","email","offline_access"]:[...scopesSupported]}}function mapUser(authInfo){let payload=payloadFromAuthInfo(authInfo),id=requiredString(payload,"sub");if(id===void 0)throw invalidToken("Missing Better Auth subject");return{user:{id,...optional("email",stringValue(payload,"email")),...optional("name",stringValue(payload,"name")),...optional("picture",stringValue(payload,"picture")),...optional("emailVerified",booleanValue(payload,"email_verified")),...optional("sessionId",stringValue(payload,"sid")),...optional("isAnonymous",booleanValue(payload,"is_anonymous")??booleanValue(payload,"isAnonymous")),roles:normalizedStrings(payload.roles)},payload,permissions:normalizedStrings(payload.permissions)}}function optional(key,value){return value===void 0?{}:{[key]:value}}export{oauthBetterAuthProvider};