@mcp-use/inspector 12.0.4-canary.0 → 20.0.0-beta.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (816) hide show
  1. package/README.md +39 -6
  2. package/dist/cdn/AnimatePresence-B4HhIdgq.js +393 -0
  3. package/dist/cdn/ChatTab-5ya_YTFV.js +13218 -0
  4. package/dist/cdn/CheckboxIndicator-BF2cKfbA.js +251 -0
  5. package/dist/cdn/ConnectionSettingsForm-iwNW86ZU.js +873 -0
  6. package/dist/cdn/ConnectionSettingsTab-CeK83dxn.js +145 -0
  7. package/dist/cdn/ElicitationTab-upPXq2q7.js +654 -0
  8. package/dist/cdn/FormContext-Cl51-7O7.js +135 -0
  9. package/dist/cdn/InspectorContext-DzXtgyTx.js +143 -0
  10. package/dist/cdn/JSONDisplay-D3RcyO9z.js +324 -0
  11. package/dist/cdn/ListTabHeader-8lULn-90.js +88 -0
  12. package/dist/cdn/ManufactOAuthCallback-DEM8mhWD.js +31 -0
  13. package/dist/cdn/NotificationsTab-CWopTIzT.js +290 -0
  14. package/dist/cdn/OAuthCallback-BxuOVgdb.js +58 -0
  15. package/dist/cdn/PromptsTab-Cspfnl6n.js +4400 -0
  16. package/dist/cdn/ResourcesTab-BczUMFil.js +584 -0
  17. package/dist/cdn/SamplingTab-6u5s845G.js +658 -0
  18. package/dist/cdn/ServerMetadataTab-DS0eiyyD.js +244 -0
  19. package/dist/cdn/StatusIcon-BGXOEU2u.js +66 -0
  20. package/dist/cdn/ToolsTab-CUhwP4rZ.js +2067 -0
  21. package/dist/cdn/ViewPreview-CxJc1Kht.js +237 -0
  22. package/dist/cdn/WidgetDebugContext-D4usL_MA.js +324 -0
  23. package/dist/cdn/WidgetWrapper-BJJtLqMb.js +2211 -0
  24. package/dist/cdn/apple-touch-icon.png +0 -0
  25. package/dist/cdn/basePath-B8HuhIMu.js +25 -0
  26. package/dist/cdn/bell-CGjAO_0s.js +10 -0
  27. package/dist/cdn/browser-CbQIH4w2.js +42 -0
  28. package/dist/cdn/brush-B_mKhyxG.js +17 -0
  29. package/dist/cdn/bundle-mjs-B0nmHDtp.js +1953 -0
  30. package/dist/cdn/card-DqjqAq0o.js +41 -0
  31. package/dist/cdn/cfWorker-Bxcs9rNe.js +10799 -0
  32. package/dist/cdn/checkbox-B4oUG6Rr.js +20 -0
  33. package/dist/cdn/chunk-BO2N2NFS-Cy167e0X.js +17500 -0
  34. package/dist/cdn/chunk-QUQL4437-XnDcYQEx.js +1508 -0
  35. package/dist/cdn/clock-CmUbSx_B.js +12 -0
  36. package/dist/cdn/code-V_0nf5rg.js +10 -0
  37. package/dist/cdn/createLucideIcon-C5fZZ6oB.js +38 -0
  38. package/dist/cdn/dialog-Dnl-pZsY.js +1028 -0
  39. package/dist/cdn/dist-DjXr_YO3.js +616 -0
  40. package/dist/cdn/dist-mRDqCgKU.js +2305 -0
  41. package/dist/cdn/external-link-CjmfT6rW.js +17 -0
  42. package/dist/cdn/eye-B7H96av8.js +29 -0
  43. package/dist/cdn/favicon-96x96.png +0 -0
  44. package/dist/cdn/favicon-black.svg +5 -8
  45. package/dist/cdn/favicon-white.svg +4 -7
  46. package/dist/cdn/favicon.ico +0 -0
  47. package/dist/cdn/favicon.svg +5 -0
  48. package/dist/cdn/folder-open-B3lu2rG_.js +7 -0
  49. package/dist/cdn/hash-BVQnWi7q.js +33 -0
  50. package/dist/cdn/highlighted-body-OFNGDK62-CoReNbTX.js +36 -0
  51. package/dist/cdn/history-Csw4rb44.js +17 -0
  52. package/dist/cdn/index-browser-CVUwR-Bu.js +1934 -0
  53. package/dist/cdn/info-CNiOwqkf.js +19 -0
  54. package/dist/cdn/input-BLxOA7V-.js +10215 -0
  55. package/dist/cdn/inspector-settings-layout-0VDsjeqb.js +4 -0
  56. package/dist/cdn/inspector.css +1 -2
  57. package/dist/cdn/inspector.js +10854 -133726
  58. package/dist/cdn/jsx-runtime-CIxvMpEo.js +180 -0
  59. package/dist/cdn/label-CBvG613A.js +60 -0
  60. package/dist/cdn/loader-circle-BLy9A_pp.js +7 -0
  61. package/dist/cdn/manufact-auth-0TVxpeTA.js +387 -0
  62. package/dist/cdn/maximize-2-CH5Lq90B.js +21 -0
  63. package/dist/cdn/maximize-BALCV_ep.js +21 -0
  64. package/dist/cdn/mermaid-GHXKKRXX-DgVIbk-D.js +2 -0
  65. package/dist/cdn/message-square-BnxdpJxZ.js +7 -0
  66. package/dist/cdn/not-found-BcNNsTjS.js +34 -0
  67. package/dist/cdn/pdf-CxFT9FER.js +16291 -0
  68. package/dist/cdn/play-vuZ5PLnI.js +7 -0
  69. package/dist/cdn/popover-C_SSrXT0.js +2005 -0
  70. package/dist/cdn/react-BIs9pQ3H.js +926 -0
  71. package/dist/cdn/react-yUi9mVK4.js +5411 -0
  72. package/dist/cdn/refresh-cw-BXY-Pa0U.js +21 -0
  73. package/dist/cdn/save-Tgil_AJZ.js +34 -0
  74. package/dist/cdn/schemaHelpers-DTV38jGq.js +16 -0
  75. package/dist/cdn/select-BZ_IoKxg.js +2594 -0
  76. package/dist/cdn/servers-Dm72iTpY.js +26 -0
  77. package/dist/cdn/shared-uMiV6Fx1.js +1700 -0
  78. package/dist/cdn/sheet-CerCdhxz.js +78 -0
  79. package/dist/cdn/site.webmanifest +21 -0
  80. package/dist/cdn/sparkles-BntO2rDR.js +23 -0
  81. package/dist/cdn/spinner-CWcJhIY_.js +15 -0
  82. package/dist/cdn/square-check-big-BvwQ17Bl.js +10 -0
  83. package/dist/cdn/switch-DtQOLb9R.js +664 -0
  84. package/dist/cdn/tabs-subtle-C5cy35sY.js +787 -0
  85. package/dist/cdn/telemetry-Ct6pVkM1.js +240 -0
  86. package/dist/cdn/textarea-Bj-CT7hC.js +14 -0
  87. package/dist/cdn/trash-2-RwpJY5SL.js +25 -0
  88. package/dist/cdn/useAriaLabelledBy-Bm9qHGK6.js +29 -0
  89. package/dist/cdn/useCompositeItem-CNJ6MXdi.js +26 -0
  90. package/dist/cdn/useConfig-CwxZ6Quj.js +208 -0
  91. package/dist/cdn/useHostedSession-BA39Aegc.js +153 -0
  92. package/dist/cdn/useMCPPrompts-D3_Hla_z.js +104 -0
  93. package/dist/cdn/useSavedRequests-Ci2I919u.js +51 -0
  94. package/dist/cdn/useViewHostProps-C7vjco2m.js +348 -0
  95. package/dist/cdn/web-app-manifest-192x192.png +0 -0
  96. package/dist/cdn/web-app-manifest-512x512.png +0 -0
  97. package/dist/cdn/wrench-DzGmCfnb.js +7 -0
  98. package/dist/cdn/x-C3vRQIYu.js +10 -0
  99. package/dist/cdn/zap-Mb-pbw2X.js +10 -0
  100. package/dist/cli.js +1060 -3601
  101. package/dist/client/auth/manufact-auth.d.ts +30 -0
  102. package/dist/client/auth/manufact-auth.d.ts.map +1 -0
  103. package/dist/client/chat-history/ChatHistoryHeader.d.ts +4 -0
  104. package/dist/client/chat-history/ChatHistoryHeader.d.ts.map +1 -0
  105. package/dist/client/chat-history/ChatHistoryPanel.d.ts +28 -0
  106. package/dist/client/chat-history/ChatHistoryPanel.d.ts.map +1 -0
  107. package/dist/client/chat-history/ChatHistoryRail.d.ts +5 -0
  108. package/dist/client/chat-history/ChatHistoryRail.d.ts.map +1 -0
  109. package/dist/client/chat-history/ChatList.d.ts +18 -0
  110. package/dist/client/chat-history/ChatList.d.ts.map +1 -0
  111. package/dist/client/chat-history/ChatTitleReveal.d.ts +10 -0
  112. package/dist/client/chat-history/ChatTitleReveal.d.ts.map +1 -0
  113. package/dist/client/chat-history/chat-events-to-inspector-messages.d.ts +13 -0
  114. package/dist/client/chat-history/chat-events-to-inspector-messages.d.ts.map +1 -0
  115. package/dist/client/chat-history/chat-title.d.ts +10 -0
  116. package/dist/client/chat-history/chat-title.d.ts.map +1 -0
  117. package/dist/client/chat-history/providers/local-storage.d.ts +21 -0
  118. package/dist/client/chat-history/providers/local-storage.d.ts.map +1 -0
  119. package/dist/client/chat-history/types.d.ts +39 -0
  120. package/dist/client/chat-history/types.d.ts.map +1 -0
  121. package/dist/client/chat-history/useChatHistory.d.ts +20 -0
  122. package/dist/client/chat-history/useChatHistory.d.ts.map +1 -0
  123. package/dist/client/chat-history/useChatTitleGeneration.d.ts +17 -0
  124. package/dist/client/chat-history/useChatTitleGeneration.d.ts.map +1 -0
  125. package/dist/client/components/AddToClientDropdown.d.ts.map +1 -1
  126. package/dist/client/components/ChatTab.d.ts +28 -3
  127. package/dist/client/components/ChatTab.d.ts.map +1 -1
  128. package/dist/client/components/IframeConsole.d.ts.map +1 -1
  129. package/dist/client/components/MCPAppsDebugControls.d.ts +2 -18
  130. package/dist/client/components/MCPAppsDebugControls.d.ts.map +1 -1
  131. package/dist/client/components/PromptsTab.d.ts +1 -1
  132. package/dist/client/components/PromptsTab.d.ts.map +1 -1
  133. package/dist/client/components/ResourcesTab.d.ts +1 -1
  134. package/dist/client/components/ResourcesTab.d.ts.map +1 -1
  135. package/dist/client/components/ToolsTab.d.ts +3 -3
  136. package/dist/client/components/ToolsTab.d.ts.map +1 -1
  137. package/dist/client/components/chat/AssistantMessage.d.ts +2 -1
  138. package/dist/client/components/chat/AssistantMessage.d.ts.map +1 -1
  139. package/dist/client/components/chat/ChatHeader.d.ts +20 -2
  140. package/dist/client/components/chat/ChatHeader.d.ts.map +1 -1
  141. package/dist/client/components/chat/ChatInput.d.ts +6 -2
  142. package/dist/client/components/chat/ChatInput.d.ts.map +1 -1
  143. package/dist/client/components/chat/ChatInputArea.d.ts +31 -3
  144. package/dist/client/components/chat/ChatInputArea.d.ts.map +1 -1
  145. package/dist/client/components/chat/ChatLandingForm.d.ts +5 -42
  146. package/dist/client/components/chat/ChatLandingForm.d.ts.map +1 -1
  147. package/dist/client/components/chat/ChatScrollToBottomButton.d.ts +7 -0
  148. package/dist/client/components/chat/ChatScrollToBottomButton.d.ts.map +1 -0
  149. package/dist/client/components/chat/ChatTraceView.d.ts +7 -0
  150. package/dist/client/components/chat/ChatTraceView.d.ts.map +1 -0
  151. package/dist/client/components/chat/ConfigurationDialog.d.ts +12 -2
  152. package/dist/client/components/chat/ConfigurationDialog.d.ts.map +1 -1
  153. package/dist/client/components/chat/ConfigureEmptyState.d.ts +2 -5
  154. package/dist/client/components/chat/ConfigureEmptyState.d.ts.map +1 -1
  155. package/dist/client/components/chat/CopyButton.d.ts.map +1 -1
  156. package/dist/client/components/chat/FloatingChatElicitation.d.ts +10 -0
  157. package/dist/client/components/chat/FloatingChatElicitation.d.ts.map +1 -0
  158. package/dist/client/components/chat/MessageList.d.ts +6 -11
  159. package/dist/client/components/chat/MessageList.d.ts.map +1 -1
  160. package/dist/client/components/chat/MessageMetaActions.d.ts +7 -0
  161. package/dist/client/components/chat/MessageMetaActions.d.ts.map +1 -0
  162. package/dist/client/components/chat/PromptsDropdown.d.ts +1 -1
  163. package/dist/client/components/chat/PromptsDropdown.d.ts.map +1 -1
  164. package/dist/client/components/chat/StreamingAssistantContent.d.ts +7 -0
  165. package/dist/client/components/chat/StreamingAssistantContent.d.ts.map +1 -0
  166. package/dist/client/components/chat/SystemPromptButton.d.ts +11 -0
  167. package/dist/client/components/chat/SystemPromptButton.d.ts.map +1 -0
  168. package/dist/client/components/chat/ToolCallDisplay.d.ts.map +1 -1
  169. package/dist/client/components/chat/ToolResultRenderer.d.ts +2 -9
  170. package/dist/client/components/chat/ToolResultRenderer.d.ts.map +1 -1
  171. package/dist/client/components/chat/ToolSelector.d.ts.map +1 -1
  172. package/dist/client/components/chat/UserMessage.d.ts +2 -1
  173. package/dist/client/components/chat/UserMessage.d.ts.map +1 -1
  174. package/dist/client/components/chat/chat-bar-styles.d.ts +6 -0
  175. package/dist/client/components/chat/chat-bar-styles.d.ts.map +1 -0
  176. package/dist/client/components/chat/conversion.d.ts +1 -1
  177. package/dist/client/components/chat/conversion.d.ts.map +1 -1
  178. package/dist/client/components/chat/freeTier.d.ts +11 -0
  179. package/dist/client/components/chat/freeTier.d.ts.map +1 -1
  180. package/dist/client/components/chat/providerMeta.d.ts +10 -1
  181. package/dist/client/components/chat/providerMeta.d.ts.map +1 -1
  182. package/dist/client/components/chat/streamdown-code-slim.d.ts +4 -0
  183. package/dist/client/components/chat/streamdown-code-slim.d.ts.map +1 -0
  184. package/dist/client/components/chat/system-prompt/local-storage.d.ts +5 -0
  185. package/dist/client/components/chat/system-prompt/local-storage.d.ts.map +1 -0
  186. package/dist/client/components/chat/system-prompt/types.d.ts +8 -0
  187. package/dist/client/components/chat/system-prompt/types.d.ts.map +1 -0
  188. package/dist/client/components/chat/system-prompt/useLocalSystemPrompt.d.ts +3 -0
  189. package/dist/client/components/chat/system-prompt/useLocalSystemPrompt.d.ts.map +1 -0
  190. package/dist/client/components/chat/system-prompt-default.d.ts +2 -0
  191. package/dist/client/components/chat/system-prompt-default.d.ts.map +1 -0
  192. package/dist/client/components/chat/trace.d.ts +84 -0
  193. package/dist/client/components/chat/trace.d.ts.map +1 -0
  194. package/dist/client/components/chat/types.d.ts +2 -1
  195. package/dist/client/components/chat/types.d.ts.map +1 -1
  196. package/dist/client/components/chat/useChatMessages.d.ts +4 -0
  197. package/dist/client/components/chat/useChatMessages.d.ts.map +1 -1
  198. package/dist/client/components/chat/useChatMessagesClientSide.d.ts +14 -2
  199. package/dist/client/components/chat/useChatMessagesClientSide.d.ts.map +1 -1
  200. package/dist/client/components/chat/useChatScrollToBottom.d.ts +13 -0
  201. package/dist/client/components/chat/useChatScrollToBottom.d.ts.map +1 -0
  202. package/dist/client/components/chat/useConfig.d.ts +2 -2
  203. package/dist/client/components/chat/useConfig.d.ts.map +1 -1
  204. package/dist/client/components/chat/useHostedChatMode.d.ts +14 -0
  205. package/dist/client/components/chat/useHostedChatMode.d.ts.map +1 -0
  206. package/dist/client/components/chat/useManagedCloudModel.d.ts +14 -0
  207. package/dist/client/components/chat/useManagedCloudModel.d.ts.map +1 -0
  208. package/dist/client/components/chat/utils.d.ts +0 -4
  209. package/dist/client/components/chat/utils.d.ts.map +1 -1
  210. package/dist/client/components/elicitation/shared/ElicitationAskUserPanel.d.ts +12 -0
  211. package/dist/client/components/elicitation/shared/ElicitationAskUserPanel.d.ts.map +1 -0
  212. package/dist/client/components/elicitation/shared/elicitationToAskUserQuestions.d.ts +9 -0
  213. package/dist/client/components/elicitation/shared/elicitationToAskUserQuestions.d.ts.map +1 -0
  214. package/dist/client/components/prompts/PromptExecutionPanel.d.ts +1 -1
  215. package/dist/client/components/prompts/PromptExecutionPanel.d.ts.map +1 -1
  216. package/dist/client/components/prompts/PromptInputForm.d.ts +1 -1
  217. package/dist/client/components/prompts/PromptInputForm.d.ts.map +1 -1
  218. package/dist/client/components/prompts/PromptResultDisplay.d.ts +1 -1
  219. package/dist/client/components/prompts/PromptResultDisplay.d.ts.map +1 -1
  220. package/dist/client/components/prompts/PromptsList.d.ts +1 -1
  221. package/dist/client/components/prompts/PromptsList.d.ts.map +1 -1
  222. package/dist/client/components/prompts/SavedPromptsList.d.ts.map +1 -1
  223. package/dist/client/components/resources/PropsConfigDialog.d.ts +1 -1
  224. package/dist/client/components/resources/PropsConfigDialog.d.ts.map +1 -1
  225. package/dist/client/components/resources/ResourceResultDisplay.d.ts +1 -1
  226. package/dist/client/components/resources/ResourceResultDisplay.d.ts.map +1 -1
  227. package/dist/client/components/resources/ResourcesList.d.ts +1 -1
  228. package/dist/client/components/resources/ResourcesList.d.ts.map +1 -1
  229. package/dist/client/components/shared/CollapsibleJSON.d.ts +6 -0
  230. package/dist/client/components/shared/CollapsibleJSON.d.ts.map +1 -0
  231. package/dist/client/components/shared/InspectorScrollArea.d.ts +9 -0
  232. package/dist/client/components/shared/InspectorScrollArea.d.ts.map +1 -0
  233. package/dist/client/components/shared/JSONDisplay.d.ts +5 -1
  234. package/dist/client/components/shared/JSONDisplay.d.ts.map +1 -1
  235. package/dist/client/components/shared/ListItem.d.ts +1 -3
  236. package/dist/client/components/shared/ListItem.d.ts.map +1 -1
  237. package/dist/client/components/shared/ListTabHeader.d.ts +4 -1
  238. package/dist/client/components/shared/ListTabHeader.d.ts.map +1 -1
  239. package/dist/client/components/shared/MarkdownRenderer.d.ts.map +1 -1
  240. package/dist/client/components/shared/SearchTabHeader.d.ts +28 -0
  241. package/dist/client/components/shared/SearchTabHeader.d.ts.map +1 -0
  242. package/dist/client/components/shared/StatusIcon.d.ts +12 -0
  243. package/dist/client/components/shared/StatusIcon.d.ts.map +1 -0
  244. package/dist/client/components/shared/index.d.ts +4 -1
  245. package/dist/client/components/shared/index.d.ts.map +1 -1
  246. package/dist/client/components/tools/SavedRequestsList.d.ts.map +1 -1
  247. package/dist/client/components/tools/ToolExecutionPanel.d.ts +1 -1
  248. package/dist/client/components/tools/ToolExecutionPanel.d.ts.map +1 -1
  249. package/dist/client/components/tools/ToolInputForm.d.ts +1 -1
  250. package/dist/client/components/tools/ToolInputForm.d.ts.map +1 -1
  251. package/dist/client/components/tools/ToolResultDisplay.d.ts +0 -6
  252. package/dist/client/components/tools/ToolResultDisplay.d.ts.map +1 -1
  253. package/dist/client/components/tools/ToolsList.d.ts +1 -1
  254. package/dist/client/components/tools/ToolsList.d.ts.map +1 -1
  255. package/dist/client/components/tools/useToolExecution.d.ts +26 -0
  256. package/dist/client/components/tools/useToolExecution.d.ts.map +1 -0
  257. package/dist/client/components/tools/useToolsTabNavigation.d.ts +35 -0
  258. package/dist/client/components/tools/useToolsTabNavigation.d.ts.map +1 -0
  259. package/dist/client/components/ui/WidgetWrapper.d.ts +2 -2
  260. package/dist/client/components/ui/WidgetWrapper.d.ts.map +1 -1
  261. package/dist/client/components/ui/alert-dialog.d.ts +8 -5
  262. package/dist/client/components/ui/alert-dialog.d.ts.map +1 -1
  263. package/dist/client/components/ui/ask-user-questions.d.ts +80 -0
  264. package/dist/client/components/ui/ask-user-questions.d.ts.map +1 -0
  265. package/dist/client/components/ui/badge.d.ts +32 -7
  266. package/dist/client/components/ui/badge.d.ts.map +1 -1
  267. package/dist/client/components/ui/button.d.ts +31 -11
  268. package/dist/client/components/ui/button.d.ts.map +1 -1
  269. package/dist/client/components/ui/chat-message.d.ts +23 -0
  270. package/dist/client/components/ui/chat-message.d.ts.map +1 -0
  271. package/dist/client/components/ui/checkbox.d.ts +2 -3
  272. package/dist/client/components/ui/checkbox.d.ts.map +1 -1
  273. package/dist/client/components/ui/client-icons.d.ts +0 -4
  274. package/dist/client/components/ui/client-icons.d.ts.map +1 -1
  275. package/dist/client/components/ui/command.d.ts +13 -64
  276. package/dist/client/components/ui/command.d.ts.map +1 -1
  277. package/dist/client/components/ui/dialog.d.ts +36 -12
  278. package/dist/client/components/ui/dialog.d.ts.map +1 -1
  279. package/dist/client/components/ui/dropdown-menu.d.ts +17 -48
  280. package/dist/client/components/ui/dropdown-menu.d.ts.map +1 -1
  281. package/dist/client/components/ui/dropdown.d.ts +30 -0
  282. package/dist/client/components/ui/dropdown.d.ts.map +1 -0
  283. package/dist/client/components/ui/file-thumbnail.d.ts +9 -0
  284. package/dist/client/components/ui/file-thumbnail.d.ts.map +1 -0
  285. package/dist/client/components/ui/label.d.ts +1 -2
  286. package/dist/client/components/ui/label.d.ts.map +1 -1
  287. package/dist/client/components/ui/menu-item.d.ts +52 -0
  288. package/dist/client/components/ui/menu-item.d.ts.map +1 -0
  289. package/dist/client/components/ui/mesh-tab-background.d.ts +10 -0
  290. package/dist/client/components/ui/mesh-tab-background.d.ts.map +1 -0
  291. package/dist/client/components/ui/not-found.d.ts.map +1 -1
  292. package/dist/client/components/ui/popover.d.ts +4 -5
  293. package/dist/client/components/ui/popover.d.ts.map +1 -1
  294. package/dist/client/components/ui/scroll-area.d.ts +4 -0
  295. package/dist/client/components/ui/scroll-area.d.ts.map +1 -0
  296. package/dist/client/components/ui/select.d.ts +50 -9
  297. package/dist/client/components/ui/select.d.ts.map +1 -1
  298. package/dist/client/components/ui/sheet.d.ts +9 -7
  299. package/dist/client/components/ui/sheet.d.ts.map +1 -1
  300. package/dist/client/components/ui/skeleton.d.ts +4 -0
  301. package/dist/client/components/ui/skeleton.d.ts.map +1 -0
  302. package/dist/client/components/ui/spinner.d.ts +1 -1
  303. package/dist/client/components/ui/spinner.d.ts.map +1 -1
  304. package/dist/client/components/ui/switch.d.ts +19 -7
  305. package/dist/client/components/ui/switch.d.ts.map +1 -1
  306. package/dist/client/components/ui/tabs-subtle.d.ts +25 -0
  307. package/dist/client/components/ui/tabs-subtle.d.ts.map +1 -0
  308. package/dist/client/components/ui/tooltip.d.ts +41 -6
  309. package/dist/client/components/ui/tooltip.d.ts.map +1 -1
  310. package/dist/client/context/InspectorContext.d.ts +6 -10
  311. package/dist/client/context/InspectorContext.d.ts.map +1 -1
  312. package/dist/client/context/WidgetDebugContext.d.ts +2 -3
  313. package/dist/client/context/WidgetDebugContext.d.ts.map +1 -1
  314. package/dist/client/hooks/use-merge-split.d.ts +36 -0
  315. package/dist/client/hooks/use-merge-split.d.ts.map +1 -0
  316. package/dist/client/hooks/use-proximity-hover-index.d.ts +27 -0
  317. package/dist/client/hooks/use-proximity-hover-index.d.ts.map +1 -0
  318. package/dist/client/hooks/use-proximity-hover.d.ts +26 -0
  319. package/dist/client/hooks/use-proximity-hover.d.ts.map +1 -0
  320. package/dist/client/hooks/use-touch-primary.d.ts +2 -0
  321. package/dist/client/hooks/use-touch-primary.d.ts.map +1 -0
  322. package/dist/client/hooks/useHostedSession.d.ts +4 -14
  323. package/dist/client/hooks/useHostedSession.d.ts.map +1 -1
  324. package/dist/client/hooks/useMCPPrompts.d.ts +1 -1
  325. package/dist/client/hooks/useMCPPrompts.d.ts.map +1 -1
  326. package/dist/client/hooks/useMcpAppsHostContext.d.ts +2 -2
  327. package/dist/client/hooks/useMcpAppsHostContext.d.ts.map +1 -1
  328. package/dist/client/hooks/usePropsLLM.d.ts +1 -1
  329. package/dist/client/hooks/usePropsLLM.d.ts.map +1 -1
  330. package/dist/client/hooks/useSavedRequests.d.ts +6 -0
  331. package/dist/client/hooks/useSavedRequests.d.ts.map +1 -0
  332. package/dist/client/hooks/useViewHostProps.d.ts +19 -0
  333. package/dist/client/hooks/useViewHostProps.d.ts.map +1 -0
  334. package/dist/client/index.d.ts +19 -2
  335. package/dist/client/index.d.ts.map +1 -1
  336. package/dist/client/index.js +19306 -16141
  337. package/dist/client/lib/elevated.d.ts +28 -0
  338. package/dist/client/lib/elevated.d.ts.map +1 -0
  339. package/dist/client/lib/font-weight.d.ts +10 -0
  340. package/dist/client/lib/font-weight.d.ts.map +1 -0
  341. package/dist/client/lib/icon-context.d.ts +15 -0
  342. package/dist/client/lib/icon-context.d.ts.map +1 -0
  343. package/dist/client/lib/shape-context.d.ts +21 -0
  344. package/dist/client/lib/shape-context.d.ts.map +1 -0
  345. package/dist/client/lib/springs.d.ts +32 -0
  346. package/dist/client/lib/springs.d.ts.map +1 -0
  347. package/dist/client/lib/surface-classes.d.ts +2 -0
  348. package/dist/client/lib/surface-classes.d.ts.map +1 -0
  349. package/dist/client/lib/surface-context.d.ts +7 -0
  350. package/dist/client/lib/surface-context.d.ts.map +1 -0
  351. package/dist/client/lib/utils.d.ts +1 -1
  352. package/dist/client/lib/utils.d.ts.map +1 -1
  353. package/dist/client/mcp-apps/csp.d.ts +26 -0
  354. package/dist/client/mcp-apps/csp.d.ts.map +1 -0
  355. package/dist/client/mcp-apps/debug/csp-suggestions.d.ts +17 -0
  356. package/dist/client/mcp-apps/debug/csp-suggestions.d.ts.map +1 -0
  357. package/dist/client/mcp-apps/logging-transport.d.ts +13 -0
  358. package/dist/client/mcp-apps/logging-transport.d.ts.map +1 -0
  359. package/dist/client/rpc-traffic-coalesce.d.ts +7 -0
  360. package/dist/client/rpc-traffic-coalesce.d.ts.map +1 -0
  361. package/dist/client/rpc-traffic-store.d.ts +37 -0
  362. package/dist/client/rpc-traffic-store.d.ts.map +1 -0
  363. package/dist/client/telemetry/capture.d.ts +7 -0
  364. package/dist/client/telemetry/capture.d.ts.map +1 -0
  365. package/dist/client/telemetry/events.d.ts +1 -1
  366. package/dist/client/telemetry/events.d.ts.map +1 -1
  367. package/dist/client/telemetry/index.d.ts +2 -1
  368. package/dist/client/telemetry/index.d.ts.map +1 -1
  369. package/dist/client/telemetry/init.d.ts +2 -0
  370. package/dist/client/telemetry/init.d.ts.map +1 -0
  371. package/dist/client/telemetry/utils.d.ts +5 -0
  372. package/dist/client/telemetry/utils.d.ts.map +1 -1
  373. package/dist/client/types/message-content-block.d.ts +19 -0
  374. package/dist/client/types/message-content-block.d.ts.map +1 -0
  375. package/dist/client/types/pending-requests.d.ts +17 -0
  376. package/dist/client/types/pending-requests.d.ts.map +1 -0
  377. package/dist/client/utils/basePath.d.ts +34 -0
  378. package/dist/client/utils/basePath.d.ts.map +1 -0
  379. package/dist/client/utils/browser.d.ts +5 -0
  380. package/dist/client/utils/browser.d.ts.map +1 -0
  381. package/dist/client/utils/format.d.ts +4 -0
  382. package/dist/client/utils/format.d.ts.map +1 -0
  383. package/dist/client/utils/highlightJson.d.ts +11 -0
  384. package/dist/client/utils/highlightJson.d.ts.map +1 -0
  385. package/dist/client/utils/jsonUtils.d.ts +4 -0
  386. package/dist/client/utils/jsonUtils.d.ts.map +1 -1
  387. package/dist/client/utils/mcpClientUtils.d.ts.map +1 -1
  388. package/dist/client/utils/servers.d.ts +14 -0
  389. package/dist/client/utils/servers.d.ts.map +1 -0
  390. package/dist/server/cdn-shell.d.ts +18 -0
  391. package/dist/server/cdn-shell.d.ts.map +1 -0
  392. package/dist/server/cdn-shell.js +10 -0
  393. package/dist/server/chunk-5B3SXGZP.js +43 -0
  394. package/dist/server/chunk-6XWDZEFF.js +194 -0
  395. package/dist/server/chunk-ESODOPDD.js +50 -0
  396. package/dist/server/chunk-IKTZUWSX.js +0 -0
  397. package/dist/server/{chunk-57KIBVKX.js → chunk-J67FVPHF.js} +27 -26
  398. package/dist/server/chunk-K2F2AJOI.js +619 -0
  399. package/dist/server/chunk-K2V2SDQD.js +40 -0
  400. package/dist/server/{chunk-ZPHNDECP.js → chunk-THQ67TSE.js} +31 -32
  401. package/dist/server/chunk-TPHRVELX.js +130 -0
  402. package/dist/server/chunk-WFT4JHYI.js +24 -0
  403. package/dist/server/cli.js +23 -25
  404. package/dist/server/create-dev-api-app.d.ts +4 -0
  405. package/dist/server/create-dev-api-app.d.ts.map +1 -0
  406. package/dist/server/create-dev-api-app.js +11 -0
  407. package/dist/server/favicon-links.d.ts +12 -0
  408. package/dist/server/favicon-links.d.ts.map +1 -0
  409. package/dist/server/favicon-links.js +11 -0
  410. package/dist/server/favicon-static.d.ts +4 -0
  411. package/dist/server/favicon-static.d.ts.map +1 -0
  412. package/dist/server/favicon-static.js +8 -0
  413. package/dist/server/index.d.ts +3 -4
  414. package/dist/server/index.d.ts.map +1 -1
  415. package/dist/server/index.js +13 -17
  416. package/dist/server/middleware.d.ts +14 -3
  417. package/dist/server/middleware.d.ts.map +1 -1
  418. package/dist/server/middleware.js +9 -9
  419. package/dist/server/proxy/index.d.ts +3 -0
  420. package/dist/server/proxy/index.d.ts.map +1 -0
  421. package/dist/server/proxy/index.js +12 -0
  422. package/dist/server/proxy/mcp-proxy.d.ts +99 -0
  423. package/dist/server/proxy/mcp-proxy.d.ts.map +1 -0
  424. package/dist/server/proxy/mcp-proxy.js +8 -0
  425. package/dist/server/proxy/oauth-proxy.d.ts +26 -0
  426. package/dist/server/proxy/oauth-proxy.d.ts.map +1 -0
  427. package/dist/server/proxy/oauth-proxy.js +9 -0
  428. package/dist/server/proxy-routes.d.ts +16 -0
  429. package/dist/server/proxy-routes.d.ts.map +1 -0
  430. package/dist/server/proxy-routes.js +10 -0
  431. package/dist/server/rpc-log-bus.js +73 -3
  432. package/dist/server/server.d.ts +3 -8
  433. package/dist/server/server.d.ts.map +1 -1
  434. package/dist/server/server.js +15 -92
  435. package/dist/server/version.js +1 -1
  436. package/dist/server/vite-dev-api-plugin.d.ts +4 -0
  437. package/dist/server/vite-dev-api-plugin.d.ts.map +1 -0
  438. package/dist/server/vite-dev-api-plugin.js +30 -0
  439. package/dist/web/apple-touch-icon.png +0 -0
  440. package/dist/web/assets/AnimatePresence-CthXziG2.js +9 -0
  441. package/dist/web/assets/ChatTab-CiAqtqhj.js +460 -0
  442. package/dist/web/assets/ConnectionSettingsTab-CTh6MFKE.js +1 -0
  443. package/dist/web/assets/ElicitationTab-B3Eg0_Jm.js +1 -0
  444. package/dist/web/assets/FormContext-Cqc_A12u.js +1 -0
  445. package/dist/web/assets/ListTabHeader-G-nQX18m.js +1 -0
  446. package/dist/web/assets/ManufactOAuthCallback-B-tdkUA2.js +1 -0
  447. package/dist/web/assets/NotificationsTab-BgLjxuos.js +1 -0
  448. package/dist/web/assets/OAuthCallback-Bp-jLoQs.js +1 -0
  449. package/dist/web/assets/PromptsTab-CA-SZs43.js +61 -0
  450. package/dist/web/assets/ResourcesTab-DdMIW_af.js +2 -0
  451. package/dist/web/assets/SamplingTab-DjyDG01W.js +1 -0
  452. package/dist/web/assets/ServerMetadataTab-Q4PlqP_B.js +1 -0
  453. package/dist/web/assets/ToolsTab-BHk8GCmd.js +8 -0
  454. package/dist/web/assets/ViewPreview-DWtmwzCb.js +1 -0
  455. package/dist/web/assets/WidgetWrapper-B43lqbld.js +34 -0
  456. package/dist/web/assets/brush--0LobUi4.js +1 -0
  457. package/dist/web/assets/bundle-mjs-8puS6ou7.js +1 -0
  458. package/dist/web/assets/checkbox-_GzEPQic.js +1 -0
  459. package/dist/web/assets/chunk-BO2N2NFS-BdIeB5Lr.js +131 -0
  460. package/dist/web/assets/code-tME-5H6D.js +1 -0
  461. package/dist/web/assets/createLucideIcon-B3b8EU0b.js +1 -0
  462. package/dist/web/assets/dist-DQjEDTKs.js +21 -0
  463. package/dist/web/assets/highlighted-body-OFNGDK62-Dp3e1QHL.js +1 -0
  464. package/dist/web/assets/index-Bbn-6QR2.js +475 -0
  465. package/dist/web/assets/index-BjH-Qp85.css +1 -0
  466. package/dist/web/assets/input-CjmxOFr6.js +1 -0
  467. package/dist/web/assets/inspector-settings-layout-yjKRJDai.js +1 -0
  468. package/dist/web/assets/jsx-runtime-Cjj9sGSy.js +1 -0
  469. package/dist/web/assets/label-B5Q_Zr8M.js +1 -0
  470. package/dist/web/assets/maximize-2-BTT9QQU9.js +1 -0
  471. package/dist/web/assets/maximize-_O55kFcr.js +1 -0
  472. package/dist/web/assets/mermaid-GHXKKRXX-yq1lkD3x.js +1 -0
  473. package/dist/web/assets/pdf-C3cfS_Ha.js +54 -0
  474. package/dist/web/assets/react-CU_d2d5K.js +1 -0
  475. package/dist/web/assets/refresh-cw-C9wQl8_d.js +1 -0
  476. package/dist/web/assets/save-B-MsgxX9.js +1 -0
  477. package/dist/web/assets/schemaHelpers-DLNTQr_6.js +1 -0
  478. package/dist/web/assets/select-C0xlfLAa.js +1 -0
  479. package/dist/web/assets/shared-Dfwy7nyg.js +1 -0
  480. package/dist/web/assets/sheet-CRPrEqAa.js +1 -0
  481. package/dist/web/assets/sparkles-2OAsc1aP.js +1 -0
  482. package/dist/web/assets/tabs-subtle-Dxgism9f.js +1 -0
  483. package/dist/web/assets/textarea-Ci09-en6.js +1 -0
  484. package/dist/web/assets/useConfig-b1f_iVFH.js +1 -0
  485. package/dist/web/assets/useMCPPrompts-CPskz9af.js +1 -0
  486. package/dist/web/assets/useViewHostProps-BgsQ2yYl.js +1 -0
  487. package/dist/web/assets/zap-Du2Uc5pa.js +1 -0
  488. package/dist/web/favicon-96x96.png +0 -0
  489. package/dist/web/favicon-black.svg +5 -8
  490. package/dist/web/favicon-white.svg +4 -7
  491. package/dist/web/favicon.ico +0 -0
  492. package/dist/web/favicon.svg +5 -0
  493. package/dist/web/index.html +13 -20
  494. package/dist/web/site.webmanifest +21 -0
  495. package/dist/web/web-app-manifest-192x192.png +0 -0
  496. package/dist/web/web-app-manifest-512x512.png +0 -0
  497. package/package.json +29 -30
  498. package/dist/client/components/FullscreenNavbar.d.ts +0 -9
  499. package/dist/client/components/FullscreenNavbar.d.ts.map +0 -1
  500. package/dist/client/components/LoginModal.d.ts +0 -11
  501. package/dist/client/components/LoginModal.d.ts.map +0 -1
  502. package/dist/client/components/MCPAppsRenderer.d.ts +0 -53
  503. package/dist/client/components/MCPAppsRenderer.d.ts.map +0 -1
  504. package/dist/client/components/McpUIRenderer.d.ts +0 -19
  505. package/dist/client/components/McpUIRenderer.d.ts.map +0 -1
  506. package/dist/client/components/OpenAIComponentRenderer.d.ts +0 -51
  507. package/dist/client/components/OpenAIComponentRenderer.d.ts.map +0 -1
  508. package/dist/client/components/chat/InlineElicitationCard.d.ts +0 -10
  509. package/dist/client/components/chat/InlineElicitationCard.d.ts.map +0 -1
  510. package/dist/client/components/chat/MCPUIResource.d.ts +0 -11
  511. package/dist/client/components/chat/MCPUIResource.d.ts.map +0 -1
  512. package/dist/client/components/elicitation/shared/ElicitationFormFields.d.ts +0 -21
  513. package/dist/client/components/elicitation/shared/ElicitationFormFields.d.ts.map +0 -1
  514. package/dist/client/components/elicitation/shared/index.d.ts +0 -3
  515. package/dist/client/components/elicitation/shared/index.d.ts.map +0 -1
  516. package/dist/client/components/elicitation/shared/useElicitationForm.d.ts +0 -23
  517. package/dist/client/components/elicitation/shared/useElicitationForm.d.ts.map +0 -1
  518. package/dist/client/components/logging/JsonRpcLoggerView.d.ts +0 -20
  519. package/dist/client/components/logging/JsonRpcLoggerView.d.ts.map +0 -1
  520. package/dist/client/components/prompts/PromptsTabHeader.d.ts +0 -17
  521. package/dist/client/components/prompts/PromptsTabHeader.d.ts.map +0 -1
  522. package/dist/client/components/prompts/index.d.ts +0 -6
  523. package/dist/client/components/prompts/index.d.ts.map +0 -1
  524. package/dist/client/components/resources/ResourcesTabHeader.d.ts +0 -16
  525. package/dist/client/components/resources/ResourcesTabHeader.d.ts.map +0 -1
  526. package/dist/client/components/resources/index.d.ts +0 -4
  527. package/dist/client/components/resources/index.d.ts.map +0 -1
  528. package/dist/client/components/shared/RpcPanel.d.ts +0 -21
  529. package/dist/client/components/shared/RpcPanel.d.ts.map +0 -1
  530. package/dist/client/components/tools/ToolsTabHeader.d.ts +0 -17
  531. package/dist/client/components/tools/ToolsTabHeader.d.ts.map +0 -1
  532. package/dist/client/components/tools/index.d.ts +0 -7
  533. package/dist/client/components/tools/index.d.ts.map +0 -1
  534. package/dist/client/components/ui/SandboxedIframe.d.ts +0 -64
  535. package/dist/client/components/ui/SandboxedIframe.d.ts.map +0 -1
  536. package/dist/client/components/ui/aurora-background.d.ts +0 -9
  537. package/dist/client/components/ui/aurora-background.d.ts.map +0 -1
  538. package/dist/client/constants/iframe.d.ts +0 -9
  539. package/dist/client/constants/iframe.d.ts.map +0 -1
  540. package/dist/client/constants/index.d.ts +0 -7
  541. package/dist/client/constants/index.d.ts.map +0 -1
  542. package/dist/client/constants/mcp-apps.d.ts +0 -39
  543. package/dist/client/constants/mcp-apps.d.ts.map +0 -1
  544. package/dist/client/hooks/usePrismTheme.d.ts +0 -5
  545. package/dist/client/hooks/usePrismTheme.d.ts.map +0 -1
  546. package/dist/client/lib/use-sandbox-remount-generation.d.ts +0 -9
  547. package/dist/client/lib/use-sandbox-remount-generation.d.ts.map +0 -1
  548. package/dist/client/lib/widget-fullscreen.d.ts +0 -17
  549. package/dist/client/lib/widget-fullscreen.d.ts.map +0 -1
  550. package/dist/client/telemetry/telemetry.d.ts +0 -42
  551. package/dist/client/telemetry/telemetry.d.ts.map +0 -1
  552. package/dist/client/types/elicitation.d.ts +0 -9
  553. package/dist/client/types/elicitation.d.ts.map +0 -1
  554. package/dist/client/utils/clipboard.d.ts +0 -6
  555. package/dist/client/utils/clipboard.d.ts.map +0 -1
  556. package/dist/client/utils/iframeConsoleInterceptor.d.ts +0 -6
  557. package/dist/client/utils/iframeConsoleInterceptor.d.ts.map +0 -1
  558. package/dist/client/utils/widget-detection.d.ts +0 -31
  559. package/dist/client/utils/widget-detection.d.ts.map +0 -1
  560. package/dist/llm/__tests__/messageFormat.test.d.ts +0 -2
  561. package/dist/llm/__tests__/messageFormat.test.d.ts.map +0 -1
  562. package/dist/llm/__tests__/providerToolResults.test.d.ts +0 -2
  563. package/dist/llm/__tests__/providerToolResults.test.d.ts.map +0 -1
  564. package/dist/llm/__tests__/toolResultParts.test.d.ts +0 -2
  565. package/dist/llm/__tests__/toolResultParts.test.d.ts.map +0 -1
  566. package/dist/llm/messageFormat.d.ts +0 -48
  567. package/dist/llm/messageFormat.d.ts.map +0 -1
  568. package/dist/llm/ndjson.d.ts +0 -5
  569. package/dist/llm/ndjson.d.ts.map +0 -1
  570. package/dist/llm/providers/anthropic.d.ts +0 -19
  571. package/dist/llm/providers/anthropic.d.ts.map +0 -1
  572. package/dist/llm/providers/google.d.ts +0 -19
  573. package/dist/llm/providers/google.d.ts.map +0 -1
  574. package/dist/llm/providers/index.d.ts +0 -19
  575. package/dist/llm/providers/index.d.ts.map +0 -1
  576. package/dist/llm/providers/ollama/index.d.ts +0 -18
  577. package/dist/llm/providers/ollama/index.d.ts.map +0 -1
  578. package/dist/llm/providers/ollama/utils.d.ts +0 -7
  579. package/dist/llm/providers/ollama/utils.d.ts.map +0 -1
  580. package/dist/llm/providers/openai.d.ts +0 -19
  581. package/dist/llm/providers/openai.d.ts.map +0 -1
  582. package/dist/llm/schemaUtils.d.ts +0 -2
  583. package/dist/llm/schemaUtils.d.ts.map +0 -1
  584. package/dist/llm/sse.d.ts +0 -15
  585. package/dist/llm/sse.d.ts.map +0 -1
  586. package/dist/llm/toolLoop.d.ts +0 -40
  587. package/dist/llm/toolLoop.d.ts.map +0 -1
  588. package/dist/llm/toolResultParts.d.ts +0 -28
  589. package/dist/llm/toolResultParts.d.ts.map +0 -1
  590. package/dist/llm/types.d.ts +0 -102
  591. package/dist/llm/types.d.ts.map +0 -1
  592. package/dist/server/chunk-63EJEHRP.js +0 -71
  593. package/dist/server/chunk-A4VH7AIP.js +0 -738
  594. package/dist/server/chunk-CVECQ7BJ.js +0 -78
  595. package/dist/server/chunk-IDMHJUEM.js +0 -42
  596. package/dist/server/chunk-KIJYOTYZ.js +0 -322
  597. package/dist/server/chunk-PJNKFX2R.js +0 -2351
  598. package/dist/server/chunk-QQ37LGLJ.js +0 -127
  599. package/dist/server/chunk-R4ISUE7T.js +0 -164
  600. package/dist/server/chunk-UTW44YSH.js +0 -322
  601. package/dist/server/file-utils.d.ts +0 -11
  602. package/dist/server/file-utils.d.ts.map +0 -1
  603. package/dist/server/file-utils.js +0 -11
  604. package/dist/server/routes/mcp-apps.d.ts +0 -12
  605. package/dist/server/routes/mcp-apps.d.ts.map +0 -1
  606. package/dist/server/shared-routes.d.ts +0 -11
  607. package/dist/server/shared-routes.d.ts.map +0 -1
  608. package/dist/server/shared-routes.js +0 -11
  609. package/dist/server/shared-static.d.ts +0 -57
  610. package/dist/server/shared-static.d.ts.map +0 -1
  611. package/dist/server/shared-static.js +0 -11
  612. package/dist/server/shared-utils.d.ts +0 -175
  613. package/dist/server/shared-utils.d.ts.map +0 -1
  614. package/dist/server/shared-utils.js +0 -21
  615. package/dist/server/transport-wrapper.d.ts +0 -6
  616. package/dist/server/transport-wrapper.d.ts.map +0 -1
  617. package/dist/server/transport-wrapper.js +0 -68
  618. package/dist/server/tunnel.d.ts +0 -11
  619. package/dist/server/tunnel.d.ts.map +0 -1
  620. package/dist/server/tunnel.js +0 -13
  621. package/dist/web/assets/1c-D19GPo3L.js +0 -1
  622. package/dist/web/assets/abnf-BR1TaWs-.js +0 -1
  623. package/dist/web/assets/accesslog-CZxiyYuK.js +0 -1
  624. package/dist/web/assets/actionscript-BS1fMZ9M.js +0 -1
  625. package/dist/web/assets/ada-Dhy1EabM.js +0 -1
  626. package/dist/web/assets/angelscript-Gjldi7xi.js +0 -1
  627. package/dist/web/assets/apache-Cx8TUABI.js +0 -1
  628. package/dist/web/assets/applescript-JfBNOabq.js +0 -1
  629. package/dist/web/assets/arcade-E6zGzFSx.js +0 -1
  630. package/dist/web/assets/arduino-D7Y37T_-.js +0 -1
  631. package/dist/web/assets/armasm-vpTNgAzt.js +0 -1
  632. package/dist/web/assets/asciidoc-DaVECsQY.js +0 -1
  633. package/dist/web/assets/aspectj-CdRAuqVM.js +0 -1
  634. package/dist/web/assets/autohotkey-DvZQekH9.js +0 -1
  635. package/dist/web/assets/autoit-oLytjhLA.js +0 -1
  636. package/dist/web/assets/avrasm-5Cf9yIw9.js +0 -1
  637. package/dist/web/assets/awk-Bf_S2P0n.js +0 -1
  638. package/dist/web/assets/axapta-DrOS6bUw.js +0 -1
  639. package/dist/web/assets/bash-DCVWALRV.js +0 -1
  640. package/dist/web/assets/basic-D0GZ3REU.js +0 -1
  641. package/dist/web/assets/bnf-D74FvP-b.js +0 -1
  642. package/dist/web/assets/brainfuck-DwUXsIlY.js +0 -3
  643. package/dist/web/assets/c-CPGbDsng.js +0 -1
  644. package/dist/web/assets/c-like-DLj4FsHF.js +0 -1
  645. package/dist/web/assets/cal-Czm5e2Qe.js +0 -1
  646. package/dist/web/assets/capnproto-CVJ2fID7.js +0 -1
  647. package/dist/web/assets/ceylon-DR5D2yFU.js +0 -1
  648. package/dist/web/assets/clean-CkIuagdM.js +0 -1
  649. package/dist/web/assets/clojure-VwyIEQaz.js +0 -1
  650. package/dist/web/assets/clojure-repl-jCSr2ntH.js +0 -1
  651. package/dist/web/assets/cmake-D2Zl_q65.js +0 -1
  652. package/dist/web/assets/coffeescript-C7Hfrw9O.js +0 -1
  653. package/dist/web/assets/coq-DAxtVI93.js +0 -1
  654. package/dist/web/assets/core-ICctFm9I.js +0 -4
  655. package/dist/web/assets/cos-0GHB8yn1.js +0 -1
  656. package/dist/web/assets/cpp-DdlDGc99.js +0 -1
  657. package/dist/web/assets/crmsh-C0vbH3xd.js +0 -1
  658. package/dist/web/assets/crystal-BloCCkus.js +0 -1
  659. package/dist/web/assets/csharp-YhN72Cls.js +0 -1
  660. package/dist/web/assets/csp-OAeIWScz.js +0 -1
  661. package/dist/web/assets/css-D1ih01yA.js +0 -1
  662. package/dist/web/assets/d-yGrz2xEC.js +0 -1
  663. package/dist/web/assets/dart-C3qG0xpq.js +0 -1
  664. package/dist/web/assets/delphi-CvoiTamH.js +0 -1
  665. package/dist/web/assets/diff-zDaBDf86.js +0 -1
  666. package/dist/web/assets/django-DBYOwnaY.js +0 -1
  667. package/dist/web/assets/dns-BWy_Oa_w.js +0 -1
  668. package/dist/web/assets/dockerfile-Cj5YqQiP.js +0 -1
  669. package/dist/web/assets/dos-AaJBzvG4.js +0 -1
  670. package/dist/web/assets/dsconfig-BgEbyf_A.js +0 -1
  671. package/dist/web/assets/dts-z64kku76.js +0 -1
  672. package/dist/web/assets/dust-C-6seNMG.js +0 -1
  673. package/dist/web/assets/ebnf-DC6yB_8o.js +0 -1
  674. package/dist/web/assets/elixir-DVZgqY4T.js +0 -1
  675. package/dist/web/assets/elm-Css3uC5x.js +0 -1
  676. package/dist/web/assets/erb-C538Iixw.js +0 -1
  677. package/dist/web/assets/erlang-DyDPiXgX.js +0 -1
  678. package/dist/web/assets/erlang-repl-CVIWmQKC.js +0 -1
  679. package/dist/web/assets/excel-BLHu7SPw.js +0 -1
  680. package/dist/web/assets/fix-JPCm4C-u.js +0 -1
  681. package/dist/web/assets/flix-DejUTEwL.js +0 -1
  682. package/dist/web/assets/fortran-CK7Rlzc4.js +0 -1
  683. package/dist/web/assets/fsharp-ZgHvh-ZT.js +0 -1
  684. package/dist/web/assets/gams-BIBfDr3x.js +0 -1
  685. package/dist/web/assets/gauss-DttPF6Qr.js +0 -1
  686. package/dist/web/assets/gcode-BXL931mb.js +0 -1
  687. package/dist/web/assets/gherkin-B7qFZ0rb.js +0 -1
  688. package/dist/web/assets/glsl-BSKhKy8T.js +0 -1
  689. package/dist/web/assets/gml-BcbsDsfr.js +0 -1
  690. package/dist/web/assets/go-BksciLaM.js +0 -1
  691. package/dist/web/assets/golo-D2QFLiUq.js +0 -1
  692. package/dist/web/assets/gradle-BH3VzvYn.js +0 -1
  693. package/dist/web/assets/groovy-Bv9ooqes.js +0 -1
  694. package/dist/web/assets/haml-CacWyVgj.js +0 -1
  695. package/dist/web/assets/handlebars-Cpp3MUlG.js +0 -1
  696. package/dist/web/assets/haskell-BQM3-EaA.js +0 -1
  697. package/dist/web/assets/haxe-Df4nG9sq.js +0 -1
  698. package/dist/web/assets/hsp-sHEckFHE.js +0 -1
  699. package/dist/web/assets/htmlbars-shnKLbrr.js +0 -1
  700. package/dist/web/assets/http-CNJ01fsj.js +0 -1
  701. package/dist/web/assets/hy-B3oY6sFO.js +0 -1
  702. package/dist/web/assets/index-C4BqUITd.css +0 -2
  703. package/dist/web/assets/index-DB2yAAMO.js +0 -848
  704. package/dist/web/assets/inform7-CNEOVpOE.js +0 -1
  705. package/dist/web/assets/ini-q6ZmK_Ll.js +0 -1
  706. package/dist/web/assets/irpf90-CHcNzzFG.js +0 -1
  707. package/dist/web/assets/isbl-ClZ-43Pe.js +0 -1
  708. package/dist/web/assets/java-C63Whuw3.js +0 -1
  709. package/dist/web/assets/javascript-BAgDYvOy.js +0 -1
  710. package/dist/web/assets/jboss-cli-qjpm-ZOy.js +0 -1
  711. package/dist/web/assets/json-DT8at3fD.js +0 -1
  712. package/dist/web/assets/julia-B3hjMqCS.js +0 -1
  713. package/dist/web/assets/julia-repl-BWC_EUt4.js +0 -1
  714. package/dist/web/assets/kotlin-DnDhVR1g.js +0 -2
  715. package/dist/web/assets/lasso-7_9jkuWm.js +0 -1
  716. package/dist/web/assets/latex-7NcBU-sp.js +0 -1
  717. package/dist/web/assets/ldif-BKsNETfE.js +0 -1
  718. package/dist/web/assets/leaf-Dr24XSMP.js +0 -1
  719. package/dist/web/assets/less-Da52wdLB.js +0 -1
  720. package/dist/web/assets/lisp-CxEhJv_S.js +0 -1
  721. package/dist/web/assets/livecodeserver-DyLLEQa3.js +0 -1
  722. package/dist/web/assets/livescript-DuMxIrKU.js +0 -1
  723. package/dist/web/assets/llvm-M9yuLNva.js +0 -1
  724. package/dist/web/assets/lsl-BP2wVZAx.js +0 -1
  725. package/dist/web/assets/lua-B0U8rByV.js +0 -1
  726. package/dist/web/assets/makefile-DL3DBvu0.js +0 -1
  727. package/dist/web/assets/markdown-jLDab-Ns.js +0 -1
  728. package/dist/web/assets/mathematica-2lChxOtk.js +0 -1
  729. package/dist/web/assets/matlab-BbPZe1tR.js +0 -1
  730. package/dist/web/assets/maxima-BdT1lNyu.js +0 -1
  731. package/dist/web/assets/mel-CxSMh57a.js +0 -1
  732. package/dist/web/assets/mercury-e3yoICSq.js +0 -1
  733. package/dist/web/assets/mipsasm--tpOiQ5I.js +0 -1
  734. package/dist/web/assets/mizar-DN4-ri-A.js +0 -1
  735. package/dist/web/assets/module-3nkmv-tD.js +0 -4
  736. package/dist/web/assets/mojolicious-lKYGBrCw.js +0 -1
  737. package/dist/web/assets/monkey-CvEgDQbs.js +0 -1
  738. package/dist/web/assets/moonscript-BgjEcnsm.js +0 -1
  739. package/dist/web/assets/n1ql-CtsXVmUQ.js +0 -1
  740. package/dist/web/assets/nginx-C6tprI2e.js +0 -1
  741. package/dist/web/assets/nim-B3y0lYop.js +0 -1
  742. package/dist/web/assets/nix-BczA7CjW.js +0 -1
  743. package/dist/web/assets/node-repl-DGgD94SZ.js +0 -1
  744. package/dist/web/assets/nsis-C_SmguFH.js +0 -1
  745. package/dist/web/assets/objectivec-2mUTCw1f.js +0 -1
  746. package/dist/web/assets/ocaml-Cn7F37_9.js +0 -1
  747. package/dist/web/assets/openscad-CkenTSp3.js +0 -1
  748. package/dist/web/assets/oxygene-D7pQi21T.js +0 -1
  749. package/dist/web/assets/parser3--pt_dbbu.js +0 -1
  750. package/dist/web/assets/perl-C0job7Qz.js +0 -1
  751. package/dist/web/assets/pf-CfWQAyKz.js +0 -1
  752. package/dist/web/assets/pgsql-CKshFhGu.js +0 -1
  753. package/dist/web/assets/php-CNUWaUh2.js +0 -1
  754. package/dist/web/assets/php-template-BCrABFi4.js +0 -1
  755. package/dist/web/assets/plaintext-ChYroSk0.js +0 -1
  756. package/dist/web/assets/pony-Bh4zwDWt.js +0 -1
  757. package/dist/web/assets/powershell-BuAlXUWx.js +0 -1
  758. package/dist/web/assets/processing-Bb5btTkH.js +0 -1
  759. package/dist/web/assets/profile-BOk16iWu.js +0 -1
  760. package/dist/web/assets/prolog-MHE4b3nq.js +0 -1
  761. package/dist/web/assets/properties-CZfxER-Q.js +0 -1
  762. package/dist/web/assets/protobuf-C_54DU4K.js +0 -1
  763. package/dist/web/assets/puppet-Z-t3L629.js +0 -1
  764. package/dist/web/assets/purebasic-CZKfEDHv.js +0 -1
  765. package/dist/web/assets/python-BvGG_JZE.js +0 -1
  766. package/dist/web/assets/python-repl-DaUVEuDx.js +0 -1
  767. package/dist/web/assets/q-CvWis_nQ.js +0 -1
  768. package/dist/web/assets/qml-2XPxalcH.js +0 -1
  769. package/dist/web/assets/r-DTTPbRAt.js +0 -1
  770. package/dist/web/assets/reasonml-CyJw_qBZ.js +0 -1
  771. package/dist/web/assets/rib-GYMKCC1Y.js +0 -1
  772. package/dist/web/assets/roboconf-CV_6N_o7.js +0 -1
  773. package/dist/web/assets/routeros-C11OKG9F.js +0 -1
  774. package/dist/web/assets/rpc-logger-TPNV75J4-CvwEntuM.js +0 -1
  775. package/dist/web/assets/rsl-rez9LEUy.js +0 -1
  776. package/dist/web/assets/ruby-_B4GQ_7D.js +0 -1
  777. package/dist/web/assets/ruleslanguage-jRg89I6w.js +0 -1
  778. package/dist/web/assets/rust-qdkaNniS.js +0 -1
  779. package/dist/web/assets/sas-BNjYSnSg.js +0 -1
  780. package/dist/web/assets/scala-CVLdU51z.js +0 -1
  781. package/dist/web/assets/scheme-Cneig3hI.js +0 -1
  782. package/dist/web/assets/scilab-DxKCNrof.js +0 -1
  783. package/dist/web/assets/scss-DQ23aG9u.js +0 -1
  784. package/dist/web/assets/shell-BgVIEdPP.js +0 -1
  785. package/dist/web/assets/smali-KZ0XB6tA.js +0 -2
  786. package/dist/web/assets/smalltalk-CYsrtMqX.js +0 -1
  787. package/dist/web/assets/sml-CwPjhShZ.js +0 -1
  788. package/dist/web/assets/sqf-Dyh-UyfR.js +0 -1
  789. package/dist/web/assets/sql-BqwecpD_.js +0 -1
  790. package/dist/web/assets/sql_more-CUF5pbmY.js +0 -1
  791. package/dist/web/assets/stan-Ddf5JFRA.js +0 -1
  792. package/dist/web/assets/stata-XlPupwqv.js +0 -3
  793. package/dist/web/assets/step21-CucMyzRd.js +0 -1
  794. package/dist/web/assets/stylus-nj6mAxkC.js +0 -1
  795. package/dist/web/assets/subunit-CiXRLQcz.js +0 -3
  796. package/dist/web/assets/swift-CIdqZMKK.js +0 -1
  797. package/dist/web/assets/taggerscript-m6_DnfoH.js +0 -1
  798. package/dist/web/assets/tap-DbEec7Q2.js +0 -1
  799. package/dist/web/assets/tcl-n8aGQ2H6.js +0 -1
  800. package/dist/web/assets/thrift-J1PtwUUl.js +0 -1
  801. package/dist/web/assets/tp-CnbYKLYQ.js +0 -1
  802. package/dist/web/assets/twig-BEBOjZvM.js +0 -1
  803. package/dist/web/assets/typescript-BwvhN9Dw.js +0 -1
  804. package/dist/web/assets/vala-BSRZa9oU.js +0 -1
  805. package/dist/web/assets/vbnet-BhOhpmOF.js +0 -1
  806. package/dist/web/assets/vbscript-BpRpQGFw.js +0 -1
  807. package/dist/web/assets/vbscript-html-z-0GWV6e.js +0 -1
  808. package/dist/web/assets/verilog-CE-mWkfc.js +0 -1
  809. package/dist/web/assets/vhdl-hkUj0_K7.js +0 -1
  810. package/dist/web/assets/vim-XK7W3JN3.js +0 -1
  811. package/dist/web/assets/x86asm-D0cmZUWd.js +0 -1
  812. package/dist/web/assets/xl-dRKa8VcI.js +0 -1
  813. package/dist/web/assets/xml-BGrFHpDb.js +0 -1
  814. package/dist/web/assets/xquery-B7qeO1Sf.js +0 -1
  815. package/dist/web/assets/yaml-DErfnXTM.js +0 -1
  816. package/dist/web/assets/zephir-O2ApOQbM.js +0 -1
package/dist/server/chunk-A4VH7AIP.js DELETED
@@ -1,738 +0,0 @@
1
- import {
2
- generateWidgetContainerHtml,
3
- generateWidgetContentHtml,
4
- getWidgetData,
5
- getWidgetSecurityHeaders,
6
- handleChatRequest,
7
- handleChatRequestStream,
8
- storeWidgetData
9
- } from "./chunk-PJNKFX2R.js";
10
- import {
11
- getTunnelStatus,
12
- setServerPort,
13
- startTunnel,
14
- stopTunnel
15
- } from "./chunk-QQ37LGLJ.js";
16
- import {
17
- formatErrorResponse
18
- } from "./chunk-KD7K27XK.js";
19
- import {
20
- rpcLogBus
21
- } from "./chunk-CVECQ7BJ.js";
22
-
23
- // src/server/shared-routes.ts
24
- import { telFetch } from "mcp-use/telemetry/tel-fetch";
25
- import { mountMcpProxy, mountOAuthProxy } from "mcp-use/server";
26
-
27
- // src/server/routes/mcp-apps.ts
28
- var RESOURCE_MIME_TYPE = "text/html;profile=mcp-app";
29
- var SANDBOX_PROXY_HTML = `<!doctype html>
30
- <html>
31
- <head>
32
- <meta charset="utf-8" />
33
- <meta
34
- http-equiv="Content-Security-Policy"
35
- content="default-src 'self'; img-src * data: blob: 'unsafe-inline'; media-src * blob: data:; font-src * blob: data:; script-src * 'wasm-unsafe-eval' 'unsafe-inline' 'unsafe-eval' blob: data:; style-src * blob: data: 'unsafe-inline'; connect-src * data: blob: about:; frame-src * blob: data: http://localhost:* https://localhost:* http://127.0.0.1:* https://127.0.0.1:*;"
36
- />
37
- <title>MCP Apps Sandbox Proxy</title>
38
- <style>
39
- html, body { margin: 0; padding: 0; height: 100%; width: 100%; overflow: hidden; }
40
- * { box-sizing: border-box; }
41
- iframe { display: block; background-color: transparent; border: 0px none transparent; padding: 0px; width: 100%; height: 100%; }
42
- </style>
43
- </head>
44
- <body>
45
- <script>
46
- function sanitizeDomain(domain) {
47
- if (typeof domain !== "string") return "";
48
- return domain.replace(/['"<>;]/g, "").trim();
49
- }
50
-
51
- function buildAllowAttribute(permissions) {
52
- if (!permissions) return "";
53
- const allowList = [];
54
- if (permissions.camera) allowList.push("camera *");
55
- if (permissions.microphone) allowList.push("microphone *");
56
- if (permissions.geolocation) allowList.push("geolocation *");
57
- if (permissions.clipboardWrite) allowList.push("clipboard-write *");
58
- return allowList.join("; ");
59
- }
60
-
61
- function buildCSP(csp) {
62
- if (!csp) {
63
- return [
64
- "default-src 'none'",
65
- "script-src 'unsafe-inline'",
66
- "style-src 'unsafe-inline'",
67
- "img-src data:",
68
- "font-src data:",
69
- "media-src data:",
70
- "connect-src 'none'",
71
- "frame-src 'none'",
72
- "object-src 'none'",
73
- "base-uri 'none'",
74
- ].join("; ");
75
- }
76
-
77
- const connectDomains = (csp.connectDomains || []).map(sanitizeDomain).filter(Boolean);
78
- const resourceDomains = (csp.resourceDomains || []).map(sanitizeDomain).filter(Boolean);
79
- const frameDomains = (csp.frameDomains || []).map(sanitizeDomain).filter(Boolean);
80
- const baseUriDomains = (csp.baseUriDomains || []).map(sanitizeDomain).filter(Boolean);
81
- const scriptDirectives = (csp.scriptDirectives || []).filter(function(d) { return typeof d === "string" && d.length > 0; });
82
-
83
- const connectSrc = connectDomains.length > 0 ? connectDomains.join(" ") : "'none'";
84
- const resourceSrc = resourceDomains.length > 0 ? ["data:", "blob:", ...resourceDomains].join(" ") : "data: blob:";
85
- const frameSrc = frameDomains.length > 0 ? frameDomains.join(" ") : "'none'";
86
- const baseUri = baseUriDomains.length > 0 ? baseUriDomains.join(" ") : "'none'";
87
- const scriptSrcParts = ["'unsafe-inline'", resourceSrc];
88
- if (scriptDirectives.length > 0) scriptSrcParts.push(scriptDirectives.join(" "));
89
-
90
- return [
91
- "default-src 'none'",
92
- "script-src " + scriptSrcParts.join(" "),
93
- "style-src 'unsafe-inline' " + resourceSrc,
94
- "img-src " + resourceSrc,
95
- "font-src " + resourceSrc,
96
- "media-src " + resourceSrc,
97
- "connect-src " + connectSrc,
98
- "frame-src " + frameSrc,
99
- "object-src 'none'",
100
- "base-uri " + baseUri,
101
- ].join("; ");
102
- }
103
-
104
- function buildViolationListenerScript() {
105
- return \`<script>
106
- document.addEventListener('securitypolicyviolation', function(e) {
107
- var violation = {
108
- type: 'mcp-apps:csp-violation',
109
- directive: e.violatedDirective,
110
- blockedUri: e.blockedURI,
111
- sourceFile: e.sourceFile || null,
112
- lineNumber: e.lineNumber || null,
113
- columnNumber: e.columnNumber || null,
114
- effectiveDirective: e.effectiveDirective,
115
- originalPolicy: e.originalPolicy,
116
- disposition: e.disposition,
117
- timestamp: Date.now()
118
- };
119
- console.warn('[MCP Apps CSP Violation]', violation.directive, ':', violation.blockedUri);
120
- window.parent.postMessage(violation, '*');
121
- });
122
-
123
- function serializeConsoleArgs(args) {
124
- try {
125
- return Array.from(args || []).map(function(arg) {
126
- if (arg instanceof Error) {
127
- return {
128
- type: 'Error',
129
- message: arg.message,
130
- stack: arg.stack,
131
- name: arg.name,
132
- };
133
- }
134
- if (typeof arg === 'object' && arg !== null) {
135
- try {
136
- return JSON.parse(JSON.stringify(arg));
137
- } catch (e) {
138
- return String(arg);
139
- }
140
- }
141
- return arg;
142
- });
143
- } catch (e) {
144
- return [String(args)];
145
- }
146
- }
147
-
148
- function sendConsoleToParent(level, args) {
149
- try {
150
- window.parent.postMessage({
151
- type: 'iframe-console-log',
152
- level: level,
153
- args: serializeConsoleArgs(args),
154
- timestamp: new Date().toISOString(),
155
- url: window.location.href,
156
- }, '*');
157
- } catch (e) {}
158
- }
159
-
160
- var originalConsoleError = console.error.bind(console);
161
- console.error = function() {
162
- var args = Array.from(arguments);
163
- originalConsoleError.apply(console, args);
164
- sendConsoleToParent('error', args);
165
- };
166
-
167
- window.addEventListener('error', function(event) {
168
- sendConsoleToParent('error', [{
169
- message: event.message,
170
- filename: event.filename,
171
- lineno: event.lineno,
172
- colno: event.colno,
173
- error: event.error ? {
174
- message: event.error.message,
175
- stack: event.error.stack,
176
- name: event.error.name,
177
- } : null,
178
- }]);
179
- });
180
-
181
- window.addEventListener('unhandledrejection', function(event) {
182
- sendConsoleToParent('error', [{
183
- message: 'Unhandled Promise Rejection',
184
- reason: event.reason ? String(event.reason) : 'Unknown',
185
- error: event.reason instanceof Error ? {
186
- message: event.reason.message,
187
- stack: event.reason.stack,
188
- name: event.reason.name,
189
- } : null,
190
- }]);
191
- });
192
- </\` + \`script>\`;
193
- }
194
-
195
- function injectCSP(html, cspValue) {
196
- const cspMeta = '<meta http-equiv="Content-Security-Policy" content="' + cspValue + '">';
197
- const violationListener = buildViolationListenerScript();
198
- const injection = cspMeta + violationListener;
199
-
200
- if (html.includes("<head>")) {
201
- return html.replace("<head>", "<head>" + injection);
202
- } else if (html.includes("<HEAD>")) {
203
- return html.replace("<HEAD>", "<HEAD>" + injection);
204
- } else if (html.includes("<html>")) {
205
- return html.replace("<html>", "<html><head>" + injection + "</head>");
206
- } else if (html.includes("<HTML>")) {
207
- return html.replace("<HTML>", "<HTML><head>" + injection + "</head>");
208
- } else if (html.includes("<!DOCTYPE") || html.includes("<!doctype")) {
209
- return html.replace(/(<!DOCTYPE[^>]*>|<!doctype[^>]*>)/i, "$1<head>" + injection + "</head>");
210
- } else {
211
- return injection + html;
212
- }
213
- }
214
-
215
- const inner = document.createElement("iframe");
216
- inner.style = "width:100%; height:100%; border:none;";
217
- inner.setAttribute("sandbox", "allow-scripts allow-same-origin allow-forms");
218
- document.body.appendChild(inner);
219
-
220
- window.addEventListener("message", async (event) => {
221
- if (event.source === window.parent) {
222
- if (event.data && event.data.method === "ui/notifications/sandbox-resource-ready") {
223
- const { html, sandbox, csp, permissions, permissive } = event.data.params || {};
224
- if (typeof sandbox === "string") {
225
- inner.setAttribute("sandbox", sandbox);
226
- }
227
- const allowAttribute = buildAllowAttribute(permissions);
228
- if (allowAttribute) {
229
- inner.setAttribute("allow", allowAttribute);
230
- }
231
- if (typeof html === "string") {
232
- if (permissive) {
233
- const permissiveCsp = [
234
- "default-src * 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: about:",
235
- "script-src * 'unsafe-inline' 'unsafe-eval' data: blob:",
236
- "style-src * 'unsafe-inline' data: blob:",
237
- "img-src * data: blob: https: http:",
238
- "media-src * data: blob: https: http:",
239
- "font-src * data: blob: https: http:",
240
- "connect-src * data: blob: https: http: ws: wss: about:",
241
- "frame-src * data: blob: https: http: about:",
242
- "object-src * data: blob:",
243
- "base-uri *",
244
- "form-action *",
245
- ].join("; ");
246
- const processedHtml = injectCSP(html, permissiveCsp);
247
- inner.srcdoc = processedHtml;
248
- } else {
249
- const cspValue = buildCSP(csp);
250
- const processedHtml = injectCSP(html, cspValue);
251
- inner.srcdoc = processedHtml;
252
- }
253
- }
254
- } else {
255
- if (inner && inner.contentWindow) {
256
- inner.contentWindow.postMessage(event.data, "*");
257
- }
258
- }
259
- } else if (event.source === inner.contentWindow) {
260
- window.parent.postMessage(event.data, "*");
261
- }
262
- });
263
-
264
- window.parent.postMessage({
265
- jsonrpc: "2.0",
266
- method: "ui/notifications/sandbox-proxy-ready",
267
- params: {},
268
- }, "*");
269
- </script>
270
- </body>
271
- </html>`;
272
- function registerMcpAppsRoutes(app) {
273
- app.post("/inspector/api/mcp-apps/widget/store", async (c) => {
274
- try {
275
- const body = await c.req.json();
276
- const result = storeWidgetData({
277
- ...body,
278
- protocol: "mcp-apps"
279
- // Tag as MCP Apps protocol
280
- });
281
- if (!result.success) {
282
- return c.json(result, 400);
283
- }
284
- return c.json(result);
285
- } catch (error) {
286
- console.error("[MCP Apps] Error storing widget data:", error);
287
- return c.json(
288
- {
289
- success: false,
290
- error: error instanceof Error ? error.message : "Unknown error"
291
- },
292
- 500
293
- );
294
- }
295
- });
296
- app.get("/inspector/api/mcp-apps/widget-content/:toolId", async (c) => {
297
- try {
298
- const toolId = c.req.param("toolId");
299
- const cspModeParam = c.req.query("csp_mode");
300
- const widgetData = getWidgetData(toolId);
301
- if (!widgetData) {
302
- return c.json({ error: "Widget data not found or expired" }, 404);
303
- }
304
- const { resourceData, mcpAppsCsp, mcpAppsPermissions } = widgetData;
305
- let htmlContent = "";
306
- let mimeType;
307
- const contentsArray = Array.isArray(resourceData?.contents) ? resourceData.contents : [];
308
- const firstContent = contentsArray[0];
309
- if (firstContent) {
310
- mimeType = firstContent.mimeType;
311
- if (typeof firstContent.text === "string") {
312
- htmlContent = firstContent.text;
313
- } else if (typeof firstContent.blob === "string") {
314
- htmlContent = Buffer.from(firstContent.blob, "base64").toString(
315
- "utf-8"
316
- );
317
- }
318
- }
319
- if (!htmlContent) {
320
- return c.json({ error: "No HTML content in resource" }, 404);
321
- }
322
- const mimeTypeValid = mimeType === RESOURCE_MIME_TYPE;
323
- const mimeTypeWarning = !mimeTypeValid ? mimeType ? `Invalid MIME type "${mimeType}" - SEP-1865 requires "${RESOURCE_MIME_TYPE}"` : `Missing MIME type - SEP-1865 requires "${RESOURCE_MIME_TYPE}"` : null;
324
- if (mimeTypeWarning) {
325
- console.warn("[MCP Apps] MIME type validation:", mimeTypeWarning, {
326
- resourceUri: widgetData.uri
327
- });
328
- }
329
- const cspMode = cspModeParam || "permissive";
330
- const isPermissive = cspMode === "permissive";
331
- c.header("Cache-Control", "no-cache, no-store, must-revalidate");
332
- return c.json({
333
- html: htmlContent,
334
- csp: isPermissive ? void 0 : mcpAppsCsp,
335
- permissions: mcpAppsPermissions,
336
- permissive: isPermissive,
337
- cspMode,
338
- mimeType,
339
- mimeTypeValid,
340
- mimeTypeWarning
341
- });
342
- } catch (error) {
343
- console.error("[MCP Apps] Error fetching widget content:", error);
344
- return c.json(
345
- { error: error instanceof Error ? error.message : "Unknown error" },
346
- 500
347
- );
348
- }
349
- });
350
- app.get("/inspector/api/mcp-apps/sandbox-proxy", (c) => {
351
- c.header("Content-Type", "text/html; charset=utf-8");
352
- c.header("Cache-Control", "no-cache, no-store, must-revalidate");
353
- const additionalFrameAncestors = process.env.FRAME_ANCESTORS || "";
354
- const frameAncestors = additionalFrameAncestors ? [
355
- "'self'",
356
- "http://localhost:*",
357
- "http://127.0.0.1:*",
358
- "https://localhost:*",
359
- "https://127.0.0.1:*",
360
- additionalFrameAncestors
361
- ].filter(Boolean).join(" ") : "*";
362
- c.header("Content-Security-Policy", `frame-ancestors ${frameAncestors}`);
363
- c.res.headers.delete("X-Frame-Options");
364
- return c.body(SANDBOX_PROXY_HTML);
365
- });
366
- }
367
-
368
- // src/server/shared-routes.ts
369
- function getFrameAncestorsFromEnv() {
370
- const envValue = process.env.MCP_INSPECTOR_FRAME_ANCESTORS;
371
- if (!envValue) return void 0;
372
- const trimmed = envValue.trim();
373
- if (trimmed === "*") return "*";
374
- return trimmed;
375
- }
376
- function registerInspectorRoutes(app, config) {
377
- if (typeof config?.serverPort === "number") {
378
- setServerPort(config.serverPort);
379
- }
380
- app.get("/inspector/health", (c) => {
381
- return c.json({ status: "ok", timestamp: (/* @__PURE__ */ new Date()).toISOString() });
382
- });
383
- mountMcpProxy(app, {
384
- path: "/inspector/api/proxy"
385
- });
386
- mountOAuthProxy(app, {
387
- basePath: "/inspector/api/oauth",
388
- enableLogging: true
389
- });
390
- registerMcpAppsRoutes(app);
391
- app.post("/inspector/api/chat/stream", async (c) => {
392
- try {
393
- const requestBody = await c.req.json();
394
- const { readable, writable } = new globalThis.TransformStream();
395
- const writer = writable.getWriter();
396
- const encoder = new TextEncoder();
397
- (async () => {
398
- try {
399
- for await (const chunk of handleChatRequestStream(requestBody)) {
400
- await writer.write(encoder.encode(chunk));
401
- }
402
- } catch (error) {
403
- const errorMsg = `${JSON.stringify({
404
- type: "error",
405
- data: {
406
- message: error instanceof Error ? error.message : "Unknown error"
407
- }
408
- })}
409
- `;
410
- await writer.write(encoder.encode(errorMsg));
411
- } finally {
412
- await writer.close();
413
- }
414
- })();
415
- return new Response(readable, {
416
- headers: {
417
- "Content-Type": "text/event-stream",
418
- "Cache-Control": "no-cache",
419
- Connection: "keep-alive"
420
- }
421
- });
422
- } catch (error) {
423
- return c.json(formatErrorResponse(error, "handleChatRequestStream"), 500);
424
- }
425
- });
426
- app.post("/inspector/api/chat", async (c) => {
427
- try {
428
- const requestBody = await c.req.json();
429
- const result = await handleChatRequest(requestBody);
430
- return c.json(result);
431
- } catch (error) {
432
- return c.json(formatErrorResponse(error, "handleChatRequest"), 500);
433
- }
434
- });
435
- app.post("/inspector/api/resources/widget/store", async (c) => {
436
- try {
437
- const body = await c.req.json();
438
- const result = storeWidgetData(body);
439
- if (!result.success) {
440
- return c.json(result, 400);
441
- }
442
- return c.json(result);
443
- } catch (error) {
444
- console.error("[Widget Store] Error:", error);
445
- console.error(
446
- "[Widget Store] Stack:",
447
- error instanceof Error ? error.stack : ""
448
- );
449
- return c.json(formatErrorResponse(error, "storeWidgetData"), 500);
450
- }
451
- });
452
- app.get("/inspector/api/resources/widget/:toolId", async (c) => {
453
- const toolId = c.req.param("toolId");
454
- const widgetData = getWidgetData(toolId);
455
- if (!widgetData) {
456
- return c.html(
457
- "<html><body>Error: Widget data not found or expired</body></html>",
458
- 404
459
- );
460
- }
461
- return c.html(generateWidgetContainerHtml("/inspector", toolId));
462
- });
463
- app.get("/inspector/api/resources/widget-content/:toolId", async (c) => {
464
- try {
465
- const toolId = c.req.param("toolId");
466
- const widgetData = getWidgetData(toolId);
467
- if (!widgetData) {
468
- console.error(
469
- "[Widget Content] Widget data not found for toolId:",
470
- toolId
471
- );
472
- return c.html(
473
- "<html><body>Error: Widget data not found or expired</body></html>",
474
- 404
475
- );
476
- }
477
- const result = generateWidgetContentHtml(widgetData);
478
- if (result.error) {
479
- return c.html(`<html><body>Error: ${result.error}</body></html>`, 404);
480
- }
481
- let serverOrigin;
482
- if (widgetData.serverId && /^https?:\/\//.test(widgetData.serverId)) {
483
- try {
484
- serverOrigin = new URL(
485
- widgetData.serverId.replace(/\/mcp$/, "")
486
- ).origin.replace("0.0.0.0", "localhost");
487
- } catch {
488
- }
489
- }
490
- const headers = getWidgetSecurityHeaders(
491
- widgetData.widgetCSP,
492
- serverOrigin,
493
- getFrameAncestorsFromEnv()
494
- );
495
- Object.entries(headers).forEach(([key, value]) => {
496
- c.header(key, value);
497
- });
498
- return c.html(result.html);
499
- } catch (error) {
500
- console.error("[Widget Content] Error:", error);
501
- const errorMessage = error instanceof Error ? error.message : "Unknown error";
502
- const errorStack = error instanceof Error ? error.stack : "";
503
- console.error("[Widget Content] Stack:", errorStack);
504
- return c.html(`<html><body>Error: ${errorMessage}</body></html>`, 500);
505
- }
506
- });
507
- app.get("/inspector/config.json", (c) => {
508
- return c.json({
509
- autoConnectUrl: config?.autoConnectUrl || null
510
- });
511
- });
512
- const isTelemetryDisabled = () => process.env.MCP_USE_ANONYMIZED_TELEMETRY === "false" || process.env.NODE_ENV === "test";
513
- app.post("/inspector/api/tel/posthog", async (c) => {
514
- if (isTelemetryDisabled()) {
515
- return c.json({ success: true });
516
- }
517
- try {
518
- const body = await c.req.json();
519
- const { event, user_id, properties } = body;
520
- if (!event) {
521
- return c.json({ success: false, error: "Missing event name" }, 400);
522
- }
523
- const { PostHog } = await import("posthog-node");
524
- const posthog = new PostHog(
525
- "phc_lyTtbYwvkdSbrcMQNPiKiiRWrrM1seyKIMjycSvItEI",
526
- {
527
- host: "https://eu.i.posthog.com",
528
- fetch: telFetch
529
- }
530
- );
531
- const distinctId = user_id || "anonymous";
532
- posthog.capture({
533
- distinctId,
534
- event,
535
- properties: properties || {}
536
- });
537
- await posthog.shutdown();
538
- return c.json({ success: true });
539
- } catch {
540
- return c.json({ success: false });
541
- }
542
- });
543
- app.post("/inspector/api/tel/scarf", async (c) => {
544
- if (isTelemetryDisabled()) {
545
- return c.json({ success: true });
546
- }
547
- try {
548
- const body = await c.req.json();
549
- const response = await fetch(
550
- "https://mcpuse.gateway.scarf.sh/events-inspector",
551
- {
552
- method: "POST",
553
- headers: {
554
- "Content-Type": "application/json"
555
- },
556
- body: JSON.stringify(body)
557
- }
558
- );
559
- if (!response.ok) {
560
- return c.json({
561
- success: false,
562
- status: response.status,
563
- error: response.statusText
564
- });
565
- }
566
- return c.json({ success: true });
567
- } catch {
568
- return c.json({ success: false });
569
- }
570
- });
571
- app.post("/inspector/api/rpc/log", async (c) => {
572
- try {
573
- const event = await c.req.json();
574
- rpcLogBus.publish(event);
575
- return c.json({ success: true });
576
- } catch (error) {
577
- console.error("[RPC Log] Error receiving RPC event:", error);
578
- return c.json({ success: false });
579
- }
580
- });
581
- app.delete("/inspector/api/rpc/log", async (c) => {
582
- try {
583
- const url = new URL(c.req.url);
584
- const serverIdsParam = url.searchParams.get("serverIds");
585
- const serverIds = serverIdsParam ? serverIdsParam.split(",").filter(Boolean) : void 0;
586
- rpcLogBus.clear(serverIds);
587
- return c.json({ success: true });
588
- } catch (error) {
589
- console.error("[RPC Log] Error clearing RPC log:", error);
590
- return c.json({ success: false });
591
- }
592
- });
593
- app.get("/inspector/api/rpc/stream", async (c) => {
594
- const url = new URL(c.req.url);
595
- const replay = parseInt(url.searchParams.get("replay") || "3", 10);
596
- const serverIdsParam = url.searchParams.get("serverIds");
597
- const serverIds = serverIdsParam ? serverIdsParam.split(",").filter(Boolean) : [];
598
- const encoder = new TextEncoder();
599
- const stream = new ReadableStream({
600
- start(controller) {
601
- const send = (data) => {
602
- try {
603
- controller.enqueue(
604
- encoder.encode(`data: ${JSON.stringify(data)}
605
-
606
- `)
607
- );
608
- } catch {
609
- }
610
- };
611
- try {
612
- const recent = rpcLogBus.getBuffer(
613
- serverIds,
614
- isNaN(replay) ? 3 : replay
615
- );
616
- for (const evt of recent) {
617
- send({ type: "rpc", ...evt });
618
- }
619
- } catch {
620
- }
621
- const unsubscribe = rpcLogBus.subscribe(
622
- serverIds,
623
- (evt) => {
624
- send({ type: "rpc", ...evt });
625
- }
626
- );
627
- const keepalive = setInterval(() => {
628
- try {
629
- controller.enqueue(encoder.encode(`: keepalive ${Date.now()}
630
-
631
- `));
632
- } catch {
633
- }
634
- }, 15e3);
635
- c.req.raw.signal?.addEventListener("abort", () => {
636
- try {
637
- clearInterval(keepalive);
638
- unsubscribe();
639
- } catch {
640
- }
641
- try {
642
- controller.close();
643
- } catch {
644
- }
645
- });
646
- }
647
- });
648
- return new Response(stream, {
649
- headers: {
650
- "Content-Type": "text/event-stream",
651
- "Cache-Control": "no-cache",
652
- Connection: "keep-alive",
653
- "Access-Control-Allow-Origin": "*",
654
- "Access-Control-Expose-Headers": "*"
655
- }
656
- });
657
- });
658
- app.get("/inspector/api/tunnel/status", (c) => {
659
- const status = getTunnelStatus();
660
- return c.json(status);
661
- });
662
- app.post("/inspector/api/tunnel/start", async (c) => {
663
- try {
664
- const result = await startTunnel();
665
- return c.json(result);
666
- } catch (error) {
667
- const message = error instanceof Error ? error.message : "Failed to start tunnel";
668
- return c.json({ error: message }, 500);
669
- }
670
- });
671
- app.delete("/inspector/api/tunnel/stop", (c) => {
672
- const stopped = stopTunnel();
673
- return c.json({ stopped });
674
- });
675
- app.get("/inspector/api/dev/info", (c) => {
676
- const mcpUrl = process.env.MCP_URL ?? null;
677
- const portEnv = process.env.PORT;
678
- const fromCli = process.env.MCP_USE_CLI_DEV === "1";
679
- const tunnel = getTunnelStatus();
680
- let portNum = null;
681
- if (portEnv !== void 0) {
682
- const n = parseInt(portEnv, 10);
683
- if (!Number.isNaN(n)) portNum = n;
684
- }
685
- let tunnelUrl = tunnel.url ?? null;
686
- if (!tunnelUrl && mcpUrl) {
687
- try {
688
- const u = new URL(mcpUrl);
689
- if (u.protocol === "https:") tunnelUrl = u.origin;
690
- } catch {
691
- }
692
- }
693
- return c.json({
694
- mcpUrl,
695
- port: portNum,
696
- fromCli,
697
- tunnelUrl
698
- });
699
- });
700
- app.post("/inspector/api/dev/start-tunnel", (c) => {
701
- const restart = globalThis.__mcpUseDevRestart;
702
- if (!restart) {
703
- return c.json(
704
- { error: "Dev restart not available (not running via mcp-use dev)" },
705
- 500
706
- );
707
- }
708
- setTimeout(() => restart(true), 200);
709
- return c.json({ ok: true, restarting: true });
710
- });
711
- app.post("/inspector/api/dev/stop-tunnel", (c) => {
712
- const restart = globalThis.__mcpUseDevRestart;
713
- if (!restart) {
714
- return c.json(
715
- { error: "Dev restart not available (not running via mcp-use dev)" },
716
- 500
717
- );
718
- }
719
- setTimeout(() => restart(false), 200);
720
- return c.json({ ok: true, restarting: true });
721
- });
722
- app.post("/inspector/api/dev/restart-with-tunnel", (c) => {
723
- const restart = globalThis.__mcpUseDevRestart;
724
- if (!restart) return c.json({ error: "Not available" }, 500);
725
- setTimeout(() => restart(true), 200);
726
- return c.json({ ok: true, restarting: true });
727
- });
728
- app.post("/inspector/api/dev/restart-without-tunnel", (c) => {
729
- const restart = globalThis.__mcpUseDevRestart;
730
- if (!restart) return c.json({ error: "Not available" }, 500);
731
- setTimeout(() => restart(false), 200);
732
- return c.json({ ok: true, restarting: true });
733
- });
734
- }
735
-
736
- export {
737
- registerInspectorRoutes
738
- };