modality-ai 0.5.0 → 0.5.2

package/dist/types/index.d.ts

@@ -3,3 +3,4 @@ export { ModalityClient } from "./ModalityClient";
 export { setupStdioToHttpTools, createStdioClient, } from "./setupStdioToHttpTools";
 export type { ModalityClientInstance } from "./ModalityClient";
 export type { StdioClientOptions } from "./setupStdioToHttpTools";
+export { CLIBrowserOAuthProvider, urlStorageKey, } from "./mcp-oauth-provider";

package/dist/types/mcp-oauth-provider.d.ts

@@ -0,0 +1,102 @@
+import type { OAuthClientProvider, OAuthDiscoveryState } from "@modelcontextprotocol/sdk/client/auth.js";
+import type { OAuthClientInformationMixed, OAuthClientMetadata, OAuthTokens } from "@modelcontextprotocol/sdk/shared/auth.js";
+interface CLIBrowserOAuthProviderOptions {
+    /** Display name registered with the OAuth server. Default: "mcp-cli" */
+    clientName?: string;
+    /**
+     * Pre-registered OAuth client ID.
+     * When provided, skips dynamic client registration (RFC 7591) entirely.
+     */
+    clientId?: string;
+    /**
+     * Port for the local callback server.
+     * 0 (default) picks a random available port.
+     * Use a fixed port when registering an OAuth app manually so the redirect
+     * URI stays stable across runs (e.g. callbackPort: 9876).
+     */
+    callbackPort?: number;
+    /**
+     * Skip opening the system browser automatically.
+     * When true the authorization URL is printed but not launched.
+     * Useful for headless / CI environments.
+     */
+    noOpen?: boolean;
+    /**
+     * Key used to namespace the persisted OAuth cache for this server.
+     * Defaults to a short hash of the server URL so each MCP server gets its
+     * own cache entry and re-runs skip dynamic registration entirely.
+     *
+     * Pass an explicit string (e.g. "figma") for a human-readable cache name.
+     * Pass null to disable persistence entirely.
+     */
+    storageKey?: string | null;
+}
+/**
+ * OAuthClientProvider for CLI tools.
+ *
+ * Implements the MCP SDK OAuthClientProvider interface for browser-based
+ * Authorization Code + PKCE flows. Designed to be passed directly to
+ * StreamableHTTPClientTransport as `authProvider`.
+ *
+ * Persists clientInfo + tokens to disk so re-runs skip dynamic registration
+ * and the browser prompt (until the token expires).
+ *
+ * Usage:
+ *   const provider = new CLIBrowserOAuthProvider({ clientName: "my-cli", storageKey: "figma" });
+ *   const transport = new StreamableHTTPClientTransport(url, { authProvider: provider });
+ *   const client = new Client(...);
+ *
+ *   try {
+ *     await client.connect(transport);
+ *   } catch (err) {
+ *     if (err instanceof UnauthorizedError) {
+ *       const code = await provider.waitForCode();
+ *       await transport.finishAuth(code);
+ *       await client.connect(transport); // retry with token now in provider
+ *     }
+ *   }
+ *
+ *   provider.stop();
+ */
+export declare class CLIBrowserOAuthProvider implements OAuthClientProvider {
+    private readonly _clientName;
+    private readonly _noOpen;
+    private readonly _cachePath;
+    private _port;
+    private _server;
+    private _resolveCode?;
+    private _rejectCode?;
+    private _pendingCode;
+    private _codeVerifier?;
+    private _clientInfo?;
+    private _tokens?;
+    private _discoveryState?;
+    constructor(options?: CLIBrowserOAuthProviderOptions);
+    get redirectUrl(): string;
+    get clientMetadata(): OAuthClientMetadata;
+    clientInformation(): OAuthClientInformationMixed | undefined;
+    saveClientInformation(info: OAuthClientInformationMixed): void;
+    tokens(): OAuthTokens | undefined;
+    saveTokens(tokens: OAuthTokens): void;
+    saveDiscoveryState(state: OAuthDiscoveryState): void;
+    discoveryState(): OAuthDiscoveryState | undefined;
+    saveCodeVerifier(verifier: string): void;
+    codeVerifier(): string;
+    redirectToAuthorization(authorizationUrl: URL): Promise<void>;
+    /**
+     * Resolves with the authorization code once the browser redirect completes.
+     */
+    waitForCode(): Promise<string>;
+    /** Discovery state captured before registration — available even when registration fails. */
+    getDiscoveryState(): OAuthDiscoveryState | undefined;
+    /** Remove all persisted state for this server (forces re-registration + re-auth on next run). */
+    clearCache(): void;
+    /** Stop the local callback HTTP server. Call once auth is complete. */
+    stop(): void;
+    private _loadCache;
+    private _persistCache;
+    private _handleCallback;
+}
+/** Short stable hash of a string — used to derive a cache file name from a URL. */
+export declare function urlStorageKey(url: string): string;
+export {};

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.5.0",
+  "version": "0.5.2",
   "name": "modality-ai",
   "repository": {
     "type": "git",
@@ -11,18 +11,18 @@
   "author": "Hill <hill@kimo.com>",
   "license": "ISC",
   "peerDependencies": {
-    "@modelcontextprotocol/sdk": "^1.25.1",
-    "modality-mcp-kit": "^1.0.0"
+    "@modelcontextprotocol/sdk": "^1.28.0",
+    "modality-mcp-kit": "^1.5.0"
   },
   "dependencies": {
-    "@ai-sdk/google": "^3.0.18",
-    "ai": "^6.0.64",
+    "@ai-sdk/google": "^3.0.53",
+    "ai": "^6.0.141",
     "ollama-ai-provider": "^1.2.0"
   },
   "devDependencies": {
-    "@types/bun": "^1.3.8",
+    "@types/bun": "^1.3.11",
     "modality-bun-kit": "^0.0.2",
-    "typescript": "^5.9.3"
+    "typescript": "^6.0.2"
   },
   "exports": {
     "types": "./dist/types/index.d.ts",
@@ -35,7 +35,7 @@
   "scripts": {
     "build:clean": "find ./dist -name '*.*' | xargs rm -rf",
     "build:types": "bun tsc -p ./",
-    "build:src": "bun build src/index.ts --outdir dist --external @modelcontextprotocol/sdk",
+    "build:src": "bun build src/index.ts --outdir dist --target node --external @modelcontextprotocol/sdk",
     "build": "bun run build:clean && bun run build:types && bun run build:src",
     "dev": "bunx concurrently 'bun --watch tsc  -p ./' 'bun build:src -- --watch --sourcemap=inline'",
     "test": "npm run build && bun test",