mirror of
https://github.com/mcp-use/mcp-use.git
synced 2026-09-14 18:06:01 +08:00
Enrico Toniato
4104309fda
* fix: restore Vibe apps and HMR (#2229) * chore: enter canary prerelease mode * chore(typescript): version packages (canary) * fix(cli): route Vibe HMR through public origin * chore(typescript): version packages (canary) * fix(cli): prebundle the Vibe view runtime (#2236) * fix(cli): prebundle the Vibe view runtime * test(cli): update view optimizer contract * fix(cli): skip view optimization for tool-only dev * chore(typescript): version packages (canary) * fix(cli): prebundle Zod for Vibe views * chore(typescript): version packages (canary) * fix(cli): ignore Vibe dev server logs in HMR (#2238) * chore(typescript): version packages (canary) * fix(oauth): restore zero-config provider environment variables (#2241) * fix(oauth): restore v1 environment contract * chore: add OAuth environment changeset * chore(typescript): version packages (canary) * fix(client): replay tool state after guest reinitializes (#2240) * chore(typescript): version packages (canary) * fix(ci): clear the knip findings failing canary (#2235) * fix(ci): clear the knip findings failing canary typescript-knip has been red on canary, so every PR against it shows the failure. The job reports seven items. Three exported types nothing imports. Each is used only inside its own module, as a return type or parameter, so the export keyword was doing nothing. Dropped it. Four stale knip.json entries. test_app is a scaffold output directory that no longer exists, and the three cli ignoreDependencies are detected properly now, which is why knip asks for them to be removed. Build passes, so nothing depended on those type exports for declaration emit. * fix(ci): clear the two knip findings that landed with #2216 Canary moved while this PR was open. #2216 added an inspector test that opts into jsdom via a @vitest-environment pragma without the package declaring jsdom, and an exported reconnect storage key that is only read inside its own module. Declare jsdom in the inspector devDependencies, matching the ^27.0.0 the client package already uses, and drop the unused export. * chore(typescript): version packages (canary) * fix(inspector): ship embedded theme styles (#2243) * chore(typescript): version packages (canary) * feat(inspector): expose CSP audit to Vibe agents (#2244) * fix(create-app): preserve canary skill channel (#2245) * fix(release): move SDK changesets into workspace (#2246) * chore(typescript): version packages (canary) * feat(server): export createJwtVerifier from mcp-use/oauth (#2234) The oauth entry point exports oauthCustomProvider so consumers can build a custom OAuth provider, but not createJwtVerifier, so anyone doing that had to reimplement signature, issuer, audience and expiry checking that all six built-in providers already share. Export it along with JwtVerifierOptions and VerifiedPayload, and drop the @internal tags now that they are public. Documented the option properties, which the package requires for public exports. Closes #2215 * chore(typescript): version packages (canary) --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Andrew Khadder <54488379+khandrew1@users.noreply.github.com> Co-authored-by: Ayaan Gazali <ayaangazali.work@gmail.com>