tavus-cli 0.9.0__tar.gz → 0.9.1__tar.gz

tavus_cli-0.9.1/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.9.1"
+}

{tavus_cli-0.9.0 → tavus_cli-0.9.1}/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.9.1](https://github.com/Tavus-Engineering/tavus-mcp/compare/v0.9.0...v0.9.1) (2026-10-09)
+
+
+### Bug Fixes
+
+* **worker:** allow Vercel Connect OAuth registration ([#66](https://github.com/Tavus-Engineering/tavus-mcp/issues/66)) ([2ed7925](https://github.com/Tavus-Engineering/tavus-mcp/commit/2ed7925183e726f6a2614adeb6ca75257d2d78b1))
+
 ## [0.9.0](https://github.com/Tavus-Engineering/tavus-mcp/compare/v0.8.1...v0.9.0) (2026-10-09)
 
 

{tavus_cli-0.9.0 → tavus_cli-0.9.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: tavus-cli
-Version: 0.9.0
+Version: 0.9.1
 Summary: Tavus CLI and MCP server for agentic PAL creation and editing.
 Requires-Python: >=3.11
 Requires-Dist: fastmcp>=2.0.0
@@ -60,7 +60,7 @@ The API key never appears in client configuration or browser callback URLs.
 
 Dynamic client registration accepts loopback callbacks from any local client
 (Claude Code, Codex, Gemini CLI) and the hosted callbacks of Claude, ChatGPT,
-Cursor, VS Code, v0, Lovable, Bolt and Replit. They are listed in `KNOWN_REMOTE_CLIENTS` in
+Cursor, VS Code, v0, Vercel Connect, Lovable, Bolt and Replit. They are listed in `KNOWN_REMOTE_CLIENTS` in
 `workers/tavus-mcp/src/oauth.ts`. To add a client, press Connect in it once,
 read its callback from the Worker's `oauth_register_rejected` log line, and add
 an entry with a test. Clients that don't use dynamic registration, such as

{tavus_cli-0.9.0 → tavus_cli-0.9.1}/README.md

@@ -38,7 +38,7 @@ The API key never appears in client configuration or browser callback URLs.
 
 Dynamic client registration accepts loopback callbacks from any local client
 (Claude Code, Codex, Gemini CLI) and the hosted callbacks of Claude, ChatGPT,
-Cursor, VS Code, v0, Lovable, Bolt and Replit. They are listed in `KNOWN_REMOTE_CLIENTS` in
+Cursor, VS Code, v0, Vercel Connect, Lovable, Bolt and Replit. They are listed in `KNOWN_REMOTE_CLIENTS` in
 `workers/tavus-mcp/src/oauth.ts`. To add a client, press Connect in it once,
 read its callback from the Worker's `oauth_register_rejected` log line, and add
 an entry with a test. Clients that don't use dynamic registration, such as

{tavus_cli-0.9.0 → tavus_cli-0.9.1}/packages/tavus/pyproject.toml

@@ -1,11 +1,11 @@
 [project]
 name = "tavus"
-version = "0.9.0" # x-release-please-version
+version = "0.9.1" # x-release-please-version
 description = "Official alias for tavus-cli, the Tavus CLI and MCP server."
 readme = "README.md"
 requires-python = ">=3.11"
 dependencies = [
-  "tavus-cli==0.9.0", # x-release-please-version
+  "tavus-cli==0.9.1", # x-release-please-version
 ]
 
 [project.urls]

{tavus_cli-0.9.0 → tavus_cli-0.9.1}/packages/tavus-mcp/pyproject.toml

@@ -1,11 +1,11 @@
 [project]
 name = "tavus-mcp"
-version = "0.9.0" # x-release-please-version
+version = "0.9.1" # x-release-please-version
 description = "Official alias for tavus-cli, which provides the tavus-mcp MCP server."
 readme = "README.md"
 requires-python = ">=3.11"
 dependencies = [
-  "tavus-cli==0.9.0", # x-release-please-version
+  "tavus-cli==0.9.1", # x-release-please-version
 ]
 
 [project.urls]

{tavus_cli-0.9.0 → tavus_cli-0.9.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "tavus-cli"
-version = "0.9.0"
+version = "0.9.1"
 description = "Tavus CLI and MCP server for agentic PAL creation and editing."
 readme = "README.md"
 requires-python = ">=3.11"

{tavus_cli-0.9.0 → tavus_cli-0.9.1}/src/tavus_mcp/__init__.py

@@ -1,4 +1,4 @@
 """Tavus CLI and MCP server package."""
 
 __all__ = ["__version__"]
-__version__ = "0.9.0"  # x-release-please-version
+__version__ = "0.9.1"  # x-release-please-version

{tavus_cli-0.9.0 → tavus_cli-0.9.1}/uv.lock

@@ -1303,7 +1303,7 @@ wheels = [
 
 [[package]]
 name = "tavus-cli"
-version = "0.9.0"
+version = "0.9.1"
 source = { editable = "." }
 dependencies = [
     { name = "fastmcp" },

{tavus_cli-0.9.0 → tavus_cli-0.9.1}/workers/tavus-mcp/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@tavus/tavus-mcp-worker",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@tavus/tavus-mcp-worker",
-      "version": "0.9.0",
+      "version": "0.9.1",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.29.0",
         "agents": "^0.12.2",

{tavus_cli-0.9.0 → tavus_cli-0.9.1}/workers/tavus-mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tavus/tavus-mcp-worker",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "private": true,
   "type": "module",
   "scripts": {

{tavus_cli-0.9.0 → tavus_cli-0.9.1}/workers/tavus-mcp/src/oauth.ts

@@ -868,6 +868,9 @@ const KNOWN_REMOTE_CLIENTS: ReadonlyArray<{
   // also in https://v0.app/docs/api/platform/guides/oauth-mcp-servers.
   { name: "v0", hosts: ["v0.app"], path: /^\/api\/chat\/integrations\/oauth\/callback$/ },
   { name: "v0", hosts: ["api.v0.dev"], path: /^\/v1\/mcp-servers\/oauth\/callback$/ },
+  // Vercel Connect uses a separate callback from v0.
+  // https://vercel.com/docs/connect/providers#accept-the-redirect-url
+  { name: "Vercel Connect", hosts: ["connect.vercel.com"], path: /^\/callback$/ },
   // Lovable does not document its callback (https://docs.lovable.dev/integrations/custom-mcp).
   // This one is captured from Lovable's own registration on staging
   // (oauth_register_rejected).

tavus_cli-0.9.1/workers/tavus-mcp/src/version.ts

@@ -0,0 +1 @@
+export const VERSION = "0.9.1"; // x-release-please-version

{tavus_cli-0.9.0 → tavus_cli-0.9.1}/workers/tavus-mcp/test/tavus.test.ts

@@ -855,6 +855,7 @@ describe("Cloudflare Tavus MCP helpers", () => {
     // Both callbacks from v0's client metadata document.
     ["v0", ["https://v0.app/api/chat/integrations/oauth/callback"]],
     ["v0", ["https://api.v0.dev/v1/mcp-servers/oauth/callback"]],
+    ["Vercel Connect", ["https://connect.vercel.com/callback"]],
     // Lovable's registration, captured from the staging Worker logs.
     ["Lovable", ["https://api.lovable.dev/workspaces/connectors/mcp/oauth/callback"]],
     // Bolt's registration, captured from the staging Worker logs.
@@ -880,6 +881,10 @@ describe("Cloudflare Tavus MCP helpers", () => {
     ["the unverified Lovable callback", "https://lovable.dev/oauth/callback"],
     ["a Bolt subdomain", "https://evil.bolt.new/mcp/oauth/callback"],
     ["a subdomain", "https://evil.v0.app/api/chat/integrations/oauth/callback"],
+    ["Vercel Connect over HTTP", "http://connect.vercel.com/callback"],
+    ["a Vercel Connect lookalike host", "https://connect.vercel.com.attacker.example/callback"],
+    ["a longer Vercel Connect path", "https://connect.vercel.com/callback/extra"],
+    ["a Vercel Connect query string", "https://connect.vercel.com/callback?next=https://attacker.example"],
   ])("rejects a known client's callback with %s", async (_label, redirectUri) => {
     expect((await registerClient([redirectUri]))?.status).toBe(400);
   });
@@ -893,7 +898,7 @@ describe("Cloudflare Tavus MCP helpers", () => {
     expect(response?.status).toBe(400);
     await expect(response?.json()).resolves.toMatchObject({
       error: "invalid_client_metadata",
-      error_description: expect.stringContaining("Claude, ChatGPT, Cursor, VS Code, v0, Lovable, Bolt, Replit"),
+      error_description: expect.stringContaining("Claude, ChatGPT, Cursor, VS Code, v0, Vercel Connect, Lovable, Bolt, Replit"),
     });
   });
 

tavus_cli-0.9.0/.release-please-manifest.json

@@ -1,3 +0,0 @@
-{
-  ".": "0.9.0"
-}

tavus_cli-0.9.0/workers/tavus-mcp/src/version.ts

@@ -1 +0,0 @@
-export const VERSION = "0.9.0"; // x-release-please-version