@mcp-use/inspector 20.0.0-beta.17 → 20.0.0-beta.19

package/dist/server/chunk-WFT4JHYI.js

@@ -1,24 +0,0 @@
-// src/server/favicon-links.ts
-var FAVICON_CACHE_VERSION = "4";
-var INSPECTOR_FAVICON_ASSETS = [
-  "favicon.svg",
-  "favicon-96x96.png",
-  "favicon.ico",
-  "apple-touch-icon.png",
-  "site.webmanifest",
-  "web-app-manifest-192x192.png",
-  "web-app-manifest-512x512.png",
-  "favicon-black.svg",
-  "favicon-white.svg"
-];
-function renderInspectorFaviconLinks(basePath = "") {
-  const prefix = basePath.replace(/\/$/, "");
-  const href = `${prefix}/favicon-black.svg?v=${FAVICON_CACHE_VERSION}`;
-  return `<link rel="icon" type="image/svg+xml" href="${href}" />`;
-}
-
-export {
-  FAVICON_CACHE_VERSION,
-  INSPECTOR_FAVICON_ASSETS,
-  renderInspectorFaviconLinks
-};

package/dist/server/cli.d.ts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-export {};
-//# sourceMappingURL=cli.d.ts.map

package/dist/server/cli.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/server/cli.ts"],"names":[],"mappings":""}

package/dist/server/cli.js

@@ -1,136 +0,0 @@
-#!/usr/bin/env node
-import {
-  findAvailablePort,
-  isValidUrl
-} from "./chunk-KD7K27XK.js";
-import {
-  registerInspectorShell
-} from "./chunk-EPPZCSJQ.js";
-import "./chunk-PZF2PUDE.js";
-import {
-  getInspectorVersion
-} from "./chunk-RFJAZOK7.js";
-import "./chunk-WFT4JHYI.js";
-import {
-  registerInspectorProxyRoutes
-} from "./chunk-EKD2XITW.js";
-import "./chunk-IKTZUWSX.js";
-import "./chunk-2K7OKCVV.js";
-import "./chunk-V5A5XLFJ.js";
-import "./chunk-PKBMQBKP.js";
-
-// src/server/cli.ts
-import { serve } from "@hono/node-server";
-import { Hono } from "hono";
-import { cors } from "hono/cors";
-import open from "open";
-var args = process.argv.slice(2);
-var mcpUrl;
-var startPort = 8080;
-var noOpen = false;
-for (let i = 0; i < args.length; i++) {
-  if (args[i] === "--url") {
-    if (i + 1 >= args.length || args[i + 1].startsWith("-")) {
-      console.error("Error: --url requires a value");
-      process.exit(1);
-    }
-    const url = args[i + 1];
-    if (!isValidUrl(url)) {
-      console.error(`Error: Invalid URL format: ${url}`);
-      console.error("URL must start with http://, https://, ws://, or wss://");
-      process.exit(1);
-    }
-    mcpUrl = url;
-    i++;
-  } else if (args[i] === "--port") {
-    if (i + 1 >= args.length || args[i + 1].startsWith("-")) {
-      console.error("Error: --port requires a value");
-      process.exit(1);
-    }
-    const parsedPort = Number.parseInt(args[i + 1], 10);
-    if (Number.isNaN(parsedPort) || parsedPort < 1 || parsedPort > 65535) {
-      console.error(
-        `Error: Port must be a number between 1 and 65535, got: ${args[i + 1]}`
-      );
-      process.exit(1);
-    }
-    startPort = parsedPort;
-    i++;
-  } else if (args[i] === "--no-open") {
-    noOpen = true;
-  } else if (args[i] === "--version" || args[i] === "-v") {
-    console.log(getInspectorVersion());
-    process.exit(0);
-  } else if (args[i] === "--help" || args[i] === "-h") {
-    console.log(`
-MCP Inspector - Inspect and debug MCP servers
-
-Usage:
-  npx @mcp-use/inspector [options]
-
-Options:
-  --url <url>    MCP server URL to auto-connect to (e.g., http://localhost:3000/mcp)
-  --port <port>  Starting port to try (default: 8080, will find next available)
-  --no-open      Do not auto-open inspector in browser
-  --version, -v  Show the inspector version
-  --help, -h     Show this help message
-
-Examples:
-  npx @mcp-use/inspector --url http://localhost:3000/mcp
-  npx @mcp-use/inspector --url http://localhost:3000/mcp --port 9000
-  npx @mcp-use/inspector
-`);
-    process.exit(0);
-  } else {
-    console.error(`Error: Unknown option: ${args[i]}`);
-    console.error("Run with --help to see available options.");
-    process.exit(1);
-  }
-}
-var app = new Hono();
-app.use(
-  "*",
-  cors({
-    origin: "*",
-    exposeHeaders: ["*"]
-  })
-);
-registerInspectorProxyRoutes(app, {
-  autoConnectUrl: mcpUrl,
-  oauthProxyAllowedOrigins: [],
-  oauthProxyAllowLoopback: true
-});
-registerInspectorShell(app, {
-  inspectorMode: "standalone",
-  manufactChatUrl: process.env.MANUFACT_CHAT_URL
-});
-async function startServer() {
-  try {
-    const port = await findAvailablePort(startPort);
-    serve({
-      fetch: app.fetch,
-      port
-    });
-    console.log(`\u{1F680} MCP Inspector running on http://localhost:${port}`);
-    if (mcpUrl) {
-      console.log(`\u{1F4E1} Auto-connecting to: ${mcpUrl}`);
-    }
-    if (!noOpen) {
-      const openUrl = new URL(`http://localhost:${port}/inspector`);
-      if (mcpUrl) {
-        openUrl.searchParams.set("autoConnect", mcpUrl);
-      }
-      try {
-        await open(openUrl.toString());
-        console.log(`\u{1F310} Browser opened`);
-      } catch {
-        console.log(`\u{1F310} Please open ${openUrl} in your browser`);
-      }
-    }
-    return { port, fetch: app.fetch };
-  } catch (error) {
-    console.error("Failed to start server:", error);
-    process.exit(1);
-  }
-}
-startServer();

package/dist/server/create-dev-api-app.d.ts

@@ -1,4 +0,0 @@
-import { Hono } from "hono";
-/** Hono app for inspector dev API routes (MCP proxy + OAuth BFF). */
-export declare function createDevApiApp(): Hono;
-//# sourceMappingURL=create-dev-api-app.d.ts.map

package/dist/server/create-dev-api-app.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"create-dev-api-app.d.ts","sourceRoot":"","sources":["../../src/server/create-dev-api-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,qEAAqE;AACrE,wBAAgB,eAAe,IAAI,IAAI,CA6BtC"}

package/dist/server/create-dev-api-app.js

@@ -1,11 +0,0 @@
-import {
-  createDevApiApp
-} from "./chunk-RKFQG67Z.js";
-import "./chunk-EKD2XITW.js";
-import "./chunk-IKTZUWSX.js";
-import "./chunk-2K7OKCVV.js";
-import "./chunk-V5A5XLFJ.js";
-import "./chunk-PKBMQBKP.js";
-export {
-  createDevApiApp
-};

package/dist/server/dev-callback-redirect.d.ts

@@ -1,3 +0,0 @@
-/** Resolve legacy root callback aliases without redirecting canonical inspector routes. */
-export declare function getDevCallbackRedirect(rawUrl: string): string | null;
-//# sourceMappingURL=dev-callback-redirect.d.ts.map

package/dist/server/dev-callback-redirect.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dev-callback-redirect.d.ts","sourceRoot":"","sources":["../../src/server/dev-callback-redirect.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYpE"}

package/dist/server/dev-callback-redirect.js

@@ -1,18 +0,0 @@
-import "./chunk-PKBMQBKP.js";
-
-// src/server/dev-callback-redirect.ts
-function getDevCallbackRedirect(rawUrl) {
-  const queryIndex = rawUrl.indexOf("?");
-  const path = queryIndex === -1 ? rawUrl : rawUrl.slice(0, queryIndex);
-  const queryString = queryIndex === -1 ? "" : rawUrl.slice(queryIndex);
-  if (path === "/oauth/callback") {
-    return `/inspector/oauth/callback${queryString}`;
-  }
-  if (path === "/auth/callback") {
-    return `/inspector/auth/callback${queryString}`;
-  }
-  return null;
-}
-export {
-  getDevCallbackRedirect
-};

package/dist/server/favicon-links.d.ts

@@ -1,12 +0,0 @@
-/** Bust Chrome's aggressive favicon cache when the asset changes. */
-export declare const FAVICON_CACHE_VERSION = "4";
-/** Static favicon assets copied alongside the Inspector browser bundle. */
-export declare const INSPECTOR_FAVICON_ASSETS: readonly ["favicon.svg", "favicon-96x96.png", "favicon.ico", "apple-touch-icon.png", "site.webmanifest", "web-app-manifest-192x192.png", "web-app-manifest-512x512.png", "favicon-black.svg", "favicon-white.svg"];
-/**
- * Render `<link>` tags for inspector favicons.
- *
- * Uses same-origin `favicon-black.svg` (light icon in all color schemes).
- * Keep favicon URLs on the same package-local asset route as the application.
- */
-export declare function renderInspectorFaviconLinks(basePath?: string): string;
-//# sourceMappingURL=favicon-links.d.ts.map

package/dist/server/favicon-links.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"favicon-links.d.ts","sourceRoot":"","sources":["../../src/server/favicon-links.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC,2EAA2E;AAC3E,eAAO,MAAM,wBAAwB,oNAU3B,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,SAAK,GAAG,MAAM,CAIjE"}

package/dist/server/favicon-links.js

@@ -1,11 +0,0 @@
-import {
-  FAVICON_CACHE_VERSION,
-  INSPECTOR_FAVICON_ASSETS,
-  renderInspectorFaviconLinks
-} from "./chunk-WFT4JHYI.js";
-import "./chunk-PKBMQBKP.js";
-export {
-  FAVICON_CACHE_VERSION,
-  INSPECTOR_FAVICON_ASSETS,
-  renderInspectorFaviconLinks
-};

package/dist/server/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,cAAc,EACd,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,GAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,4BAA4B,EAC5B,KAAK,0BAA0B,GAChC,MAAM,mBAAmB,CAAC"}

package/dist/server/inspector-shell.d.ts

@@ -1,20 +0,0 @@
-import type { Hono } from "hono";
-type InspectorMode = "standalone" | "embedded" | "cloud";
-type InspectorShellConfig = {
-    basePath?: string;
-    devMode?: boolean;
-    sandboxOrigin?: string | null;
-    /** Relative proxy path, e.g. `/inspector/api/proxy`. `null` disables proxy in the client. */
-    proxyUrl?: string | null;
-    inspectorMode?: InspectorMode;
-    manufactChatUrl?: string | null;
-    disableTelemetry?: boolean;
-    /** Preserve the standalone CLI's `/` to `/inspector` redirect (default true). */
-    rootRedirect?: boolean;
-};
-/**
- * Serve the inspector UI at `${basePath}/inspector`.
- */
-export declare function registerInspectorShell(app: Hono, config?: InspectorShellConfig, basePath?: string): void;
-export {};
-//# sourceMappingURL=inspector-shell.d.ts.map

package/dist/server/inspector-shell.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"inspector-shell.d.ts","sourceRoot":"","sources":["../../src/server/inspector-shell.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,MAAM,CAAC;AAM1C,KAAK,aAAa,GAAG,YAAY,GAAG,UAAU,GAAG,OAAO,CAAC;AAEzD,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,iFAAiF;IACjF,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAkJF;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,IAAI,EACT,MAAM,CAAC,EAAE,oBAAoB,EAC7B,QAAQ,GAAE,MAAW,QAyDtB"}

package/dist/server/inspector-shell.js

@@ -1,10 +0,0 @@
-import {
-  registerInspectorShell
-} from "./chunk-EPPZCSJQ.js";
-import "./chunk-PZF2PUDE.js";
-import "./chunk-RFJAZOK7.js";
-import "./chunk-WFT4JHYI.js";
-import "./chunk-PKBMQBKP.js";
-export {
-  registerInspectorShell
-};

package/dist/server/middleware.d.ts

@@ -1,65 +0,0 @@
-import type { Express } from "express";
-import { Hono } from "hono";
-/** Web-standard handler returned by {@link mountInspector}. */
-export type InspectorFetchHandler = (request: globalThis.Request) => Promise<globalThis.Response>;
-/** Configuration shared by framework-neutral and framework-mounted inspectors. */
-export interface MountInspectorOptions {
-    /**
-     * MCP URL passed to the client for automatic connection. For the returned
-     * Fetch handler, omission derives `${request.origin}${basePath}` so localhost
-     * and public tunnel URLs both target the listener the browser actually used.
-     * Pass `null` to disable auto-connect.
-     */
-    autoConnectUrl?: string | null;
-    manufactChatUrl?: string | null;
-    /** Whether to enable the same-origin development sandbox (default `true`). */
-    devMode?: boolean;
-    /** Override the sandbox origin for MCP Apps widgets. */
-    sandboxOrigin?: string | null;
-    /** Explicit cross-origin callers of the OAuth BFF. Same-origin is implicit. */
-    oauthProxyAllowedOrigins?: readonly string[];
-    /** Allow OAuth and MCP proxy requests to loopback targets (default `true`). */
-    oauthProxyAllowLoopback?: boolean;
-    /**
-     * Server-wide MCP path prefix (default `/mcp`; `""` = root). The Inspector
-     * is served from `${basePath}/inspector` and its API from
-     * `${basePath}/inspector/api/*`.
-     */
-    basePath?: string;
-}
-/**
- * Create or mount the local MCP Inspector.
- *
- * With options (or no arguments), this returns a framework-neutral Fetch
- * handler. A development server can dispatch Inspector requests to this
- * handler on its existing listener without starting a child process or a
- * second port.
- *
- * Passing an Express or Hono app preserves the v1 mounting API. Hono routes
- * are registered directly; Express receives a narrowly scoped adapter.
- *
- * The UI bundle is always served from this installed package. The same Hono
- * route implementation owns the UI, MCP proxy, OAuth BFF, callback, health,
- * and config routes in every integration.
- *
- * @example Framework-neutral, same-listener use
- * ```typescript
- * const inspector = mountInspector({
- *   basePath: "/mcp",
- *   autoConnectUrl: "http://localhost:3000/mcp",
- * });
- *
- * const response = await inspector(request);
- * ```
- *
- * @example Legacy Hono or Express mounting
- * ```typescript
- * mountInspector(app, {
- *   basePath: "/mcp",
- *   autoConnectUrl: "http://localhost:3000/mcp",
- * });
- * ```
- */
-export declare function mountInspector(options?: MountInspectorOptions): InspectorFetchHandler;
-export declare function mountInspector(app: Express | Hono, options?: MountInspectorOptions): void;
-//# sourceMappingURL=middleware.d.ts.map

package/dist/server/middleware.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/server/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAmC,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAQ5B,+DAA+D;AAC/D,MAAM,MAAM,qBAAqB,GAAG,CAClC,OAAO,EAAE,UAAU,CAAC,OAAO,KACxB,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAElC,kFAAkF;AAClF,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,8EAA8E;IAC9E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,+EAA+E;IAC/E,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,+EAA+E;IAC/E,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,cAAc,CAC5B,OAAO,CAAC,EAAE,qBAAqB,GAC9B,qBAAqB,CAAC;AAEzB,wBAAgB,cAAc,CAC5B,GAAG,EAAE,OAAO,GAAG,IAAI,EACnB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CAAC"}

package/dist/server/middleware.js

@@ -1,15 +0,0 @@
-import {
-  mountInspector
-} from "./chunk-JWDVSQED.js";
-import "./chunk-EPPZCSJQ.js";
-import "./chunk-PZF2PUDE.js";
-import "./chunk-RFJAZOK7.js";
-import "./chunk-WFT4JHYI.js";
-import "./chunk-EKD2XITW.js";
-import "./chunk-IKTZUWSX.js";
-import "./chunk-2K7OKCVV.js";
-import "./chunk-V5A5XLFJ.js";
-import "./chunk-PKBMQBKP.js";
-export {
-  mountInspector
-};

package/dist/server/proxy/index.d.ts

@@ -1,3 +0,0 @@
-export { mountMcpProxy } from "./mcp-proxy.js";
-export { mountOAuthProxy } from "./oauth-proxy.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/server/proxy/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/proxy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/server/proxy/index.js

@@ -1,12 +0,0 @@
-import "../chunk-IKTZUWSX.js";
-import {
-  mountMcpProxy
-} from "../chunk-2K7OKCVV.js";
-import {
-  mountOAuthProxy
-} from "../chunk-V5A5XLFJ.js";
-import "../chunk-PKBMQBKP.js";
-export {
-  mountMcpProxy,
-  mountOAuthProxy
-};

package/dist/server/proxy/mcp-proxy.d.ts

@@ -1,101 +0,0 @@
-/**
- * MCP Proxy Middleware for Hono
- *
- * Provides a CORS proxy for browser-based MCP clients to connect to remote MCP servers
- * that don't support CORS or require server-side forwarding.
- *
- * @module mcp-proxy
- */
-import type { Context, Hono } from "hono";
-/**
- * Options for configuring the MCP proxy middleware
- */
-interface McpProxyOptions {
-    /**
-     * Route path for the proxy endpoint
-     * @default "/mcp/proxy"
-     * @example "/inspector/api/proxy"
-     */
-    path?: string;
-    /**
-     * Optional authentication function to validate requests
-     * Return true to allow the request, false to reject with 401
-     *
-     * @example
-     * ```typescript
-     * authenticate: async (c) => {
-     *   const apiKey = c.req.header("X-API-Key");
-     *   return apiKey === process.env.API_KEY;
-     * }
-     * ```
-     */
-    authenticate?: (c: Context) => Promise<boolean> | boolean;
-    /**
-     * Optional request validator to check if target URL is allowed
-     * Return true to allow, false to reject with 403
-     *
-     * @example
-     * ```typescript
-     * validateRequest: (targetUrl) => {
-     *   // Only allow specific domains
-     *   return targetUrl.startsWith("https://api.example.com");
-     * }
-     * ```
-     */
-    validateRequest?: (targetUrl: string, c: Context) => Promise<boolean> | boolean;
-    /** Permit loopback HTTP targets for explicit local development. */
-    allowLoopback?: boolean;
-    /**
-     * Enable request logging
-     * @default true
-     */
-    enableLogging?: boolean;
-}
-/** Whether an MCP response must remain streaming instead of being buffered. */
-export declare function isOpenEndedSseResponse(contentType: string, contentLength: string | null): boolean;
-/**
- * Mount MCP proxy middleware on a Hono app
- *
- * This middleware proxies MCP requests to target servers based on the X-Target-URL header.
- * It handles CORS, streaming responses (SSE), and provides optional authentication.
- *
- * The proxy:
- * 1. Reads the target URL from the X-Target-URL header
- * 2. Forwards the request to that URL with appropriate headers
- * 3. Streams the response back to the client
- * 4. Handles compression and encoding correctly
- *
- * @param app - Hono application instance
- * @param options - Configuration options for the proxy
- *
- * @example
- * ```typescript
- * import { Hono } from "hono";
- * import { mountMcpProxy } from "mcp-use";
- *
- * const app = new Hono();
- *
- * // Basic usage
- * mountMcpProxy(app);
- *
- * // With authentication
- * mountMcpProxy(app, {
- *   path: "/api/proxy",
- *   authenticate: async (c) => {
- *     const token = c.req.header("Authorization");
- *     return token === `Bearer ${process.env.SECRET_TOKEN}`;
- *   },
- *   validateRequest: (targetUrl) => {
- *     // Only allow specific domains
- *     return targetUrl.startsWith("https://mcp.example.com");
- *   }
- * });
- * ```
- *
- * @remarks
- * WARNING: This proxy does not implement authentication by default.
- * For production use, provide an `authenticate` function or restrict access to localhost only.
- */
-export declare function mountMcpProxy(app: Hono, options?: McpProxyOptions): void;
-export {};
-//# sourceMappingURL=mcp-proxy.d.ts.map

package/dist/server/proxy/mcp-proxy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-proxy.d.ts","sourceRoot":"","sources":["../../../src/server/proxy/mcp-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAQ1C;;GAEG;AACH,UAAU,eAAe;IACvB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAE1D;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,CAChB,SAAS,EAAE,MAAM,EACjB,CAAC,EAAE,OAAO,KACP,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAEhC,mEAAmE;IACnE,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,+EAA+E;AAC/E,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GAAG,IAAI,GAC3B,OAAO,CAET;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,GAAE,eAAoB,GAAG,IAAI,CAiO5E"}

package/dist/server/proxy/mcp-proxy.js

@@ -1,10 +0,0 @@
-import {
-  isOpenEndedSseResponse,
-  mountMcpProxy
-} from "../chunk-2K7OKCVV.js";
-import "../chunk-V5A5XLFJ.js";
-import "../chunk-PKBMQBKP.js";
-export {
-  isOpenEndedSseResponse,
-  mountMcpProxy
-};

package/dist/server/proxy/oauth-proxy.d.ts

@@ -1,28 +0,0 @@
-import type { Context, Hono } from "hono";
-interface OAuthProxyOptions {
-    /** @default "/oauth" */
-    basePath?: string;
-    /** Cross-origin browser origins allowed to call the BFF. Same-origin calls are always allowed. */
-    allowedOrigins?: readonly string[];
-    /** Permit HTTP(S) loopback MCP/OAuth targets. Intended only for explicit local development. */
-    allowLoopback?: boolean;
-    /** @default 10000 */
-    timeoutMs?: number;
-    /** @default 65536 */
-    maxRequestBodyBytes?: number;
-    /** @default 1048576 */
-    maxResponseBodyBytes?: number;
-    /** Exact browser callback path enforced on dynamic registrations. */
-    callbackPath?: string;
-    /** @default true */
-    enableLogging?: boolean;
-    /** Optional authentication applied before any outbound request. */
-    authenticate?: (c: Context) => Promise<boolean> | boolean;
-    /** Optional deployment policy applied after built-in URL and network checks. */
-    validateServerUrl?: (serverUrl: string, c: Context) => Promise<boolean> | boolean;
-}
-export declare function mountOAuthProxy(app: Hono, options?: OAuthProxyOptions): void;
-/** Validate a proxy target against the BFF's HTTPS and SSRF policy. */
-export declare function isSafeProxyTarget(value: string, allowLoopback?: boolean): Promise<boolean>;
-export {};
-//# sourceMappingURL=oauth-proxy.d.ts.map

package/dist/server/proxy/oauth-proxy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth-proxy.d.ts","sourceRoot":"","sources":["../../../src/server/proxy/oauth-proxy.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA6B1C,UAAU,iBAAiB;IACzB,wBAAwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kGAAkG;IAClG,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,+FAA+F;IAC/F,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,qBAAqB;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qBAAqB;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uBAAuB;IACvB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mEAAmE;IACnE,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAC1D,gFAAgF;IAChF,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,MAAM,EACjB,CAAC,EAAE,OAAO,KACP,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACjC;AA4BD,wBAAgB,eAAe,CAC7B,GAAG,EAAE,IAAI,EACT,OAAO,GAAE,iBAAsB,GAC9B,IAAI,CAmRN;AAkDD,uEAAuE;AACvE,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,MAAM,EACb,aAAa,UAAQ,GACpB,OAAO,CAAC,OAAO,CAAC,CAElB"}

package/dist/server/proxy/oauth-proxy.js

@@ -1,9 +0,0 @@
-import {
-  isSafeProxyTarget,
-  mountOAuthProxy
-} from "../chunk-V5A5XLFJ.js";
-import "../chunk-PKBMQBKP.js";
-export {
-  isSafeProxyTarget,
-  mountOAuthProxy
-};

package/dist/server/proxy-routes.d.ts

@@ -1,16 +0,0 @@
-import type { Hono } from "hono";
-export type InspectorProxyRoutesConfig = {
-    /** URL passed to the client via config.json for auto-connect. */
-    autoConnectUrl?: string | null;
-    /** Explicit cross-origin callers of the OAuth BFF. Same-origin is implicit. */
-    oauthProxyAllowedOrigins?: readonly string[];
-    /** Allow the OAuth BFF to reach loopback servers in local development. */
-    oauthProxyAllowLoopback?: boolean;
-    /** Mount OAuth BFF routes (default true). */
-    oauth?: boolean;
-};
-/**
- * Register minimal inspector backend routes: health, MCP CORS proxy, OAuth BFF.
- */
-export declare function registerInspectorProxyRoutes(app: Hono, config?: InspectorProxyRoutesConfig, basePath?: string): void;
-//# sourceMappingURL=proxy-routes.d.ts.map

package/dist/server/proxy-routes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"proxy-routes.d.ts","sourceRoot":"","sources":["../../src/server/proxy-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAGjC,MAAM,MAAM,0BAA0B,GAAG;IACvC,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,+EAA+E;IAC/E,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,0EAA0E;IAC1E,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,6CAA6C;IAC7C,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,IAAI,EACT,MAAM,CAAC,EAAE,0BAA0B,EACnC,QAAQ,GAAE,MAAW,QAoCtB"}

package/dist/server/proxy-routes.js

@@ -1,10 +0,0 @@
-import {
-  registerInspectorProxyRoutes
-} from "./chunk-EKD2XITW.js";
-import "./chunk-IKTZUWSX.js";
-import "./chunk-2K7OKCVV.js";
-import "./chunk-V5A5XLFJ.js";
-import "./chunk-PKBMQBKP.js";
-export {
-  registerInspectorProxyRoutes
-};

package/dist/server/rpc-log-bus.d.ts

@@ -1,17 +0,0 @@
-export type RpcLogEvent = {
-    serverId: string;
-    direction: "send" | "receive";
-    timestamp: string;
-    message: unknown;
-};
-declare class RpcLogBus {
-    private readonly emitter;
-    private readonly bufferByServer;
-    publish(event: RpcLogEvent): void;
-    subscribe(serverIds: string[], listener: (event: RpcLogEvent) => void): () => void;
-    getBuffer(serverIds: string[], limit: number): RpcLogEvent[];
-    clear(serverIds?: string[]): void;
-}
-export declare const rpcLogBus: RpcLogBus;
-export {};
-//# sourceMappingURL=rpc-log-bus.d.ts.map

package/dist/server/rpc-log-bus.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rpc-log-bus.d.ts","sourceRoot":"","sources":["../../src/server/rpc-log-bus.ts"],"names":[],"mappings":"AA0BA,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,cAAM,SAAS;IACb,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IAEnE,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IAWjC,SAAS,CACP,SAAS,EAAE,MAAM,EAAE,EACnB,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,GACrC,MAAM,IAAI;IASb,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE;IAgB5D,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI;CAUlC;AAED,eAAO,MAAM,SAAS,WAAkB,CAAC"}