@modelcontextprotocol/inspector 0.15.0 → 0.16.1

package/client/dist/assets/{index-BNqYF5Na.js → index-CPgI0-gs.js}

@@ -1,4 +1,4 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/OAuthCallback-CaW3Hcqw.js","assets/oauthUtils-DTcoXpSP.js","assets/OAuthDebugCallback-DiBt_oxh.js"])))=>i.map(i=>d[i]);
+const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/OAuthCallback-CaDIOg8Q.js","assets/oauthUtils-DTcoXpSP.js","assets/OAuthDebugCallback-Ccjj44Wa.js"])))=>i.map(i=>d[i]);
 function _mergeNamespaces(n, m2) {
   for (var i = 0; i < m2.length; i++) {
     const e = m2[i];
@@ -11612,8 +11612,9 @@ class ZodError extends Error {
     const formErrors = [];
     for (const sub of this.issues) {
       if (sub.path.length > 0) {
-        fieldErrors[sub.path[0]] = fieldErrors[sub.path[0]] || [];
-        fieldErrors[sub.path[0]].push(mapper(sub));
+        const firstEl = sub.path[0];
+        fieldErrors[firstEl] = fieldErrors[firstEl] || [];
+        fieldErrors[firstEl].push(mapper(sub));
       } else {
         formErrors.push(mapper(sub));
       }
@@ -11689,6 +11690,8 @@ const errorMap = (issue, _ctx) => {
         message = `String must contain ${issue.exact ? "exactly" : issue.inclusive ? `at least` : `over`} ${issue.minimum} character(s)`;
       else if (issue.type === "number")
         message = `Number must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${issue.minimum}`;
+      else if (issue.type === "bigint")
+        message = `Number must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${issue.minimum}`;
       else if (issue.type === "date")
         message = `Date must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${new Date(Number(issue.minimum))}`;
       else
@@ -12241,6 +12244,8 @@ function isValidJWT(jwt, alg) {
     return false;
   try {
     const [header] = jwt.split(".");
+    if (!header)
+      return false;
     const base64 = header.replace(/-/g, "+").replace(/_/g, "/").padEnd(header.length + (4 - header.length % 4) % 4, "=");
     const decoded = JSON.parse(atob(base64));
     if (typeof decoded !== "object" || decoded === null)
@@ -15913,7 +15918,7 @@ const ElicitResultSchema = ResultSchema.extend({
   /**
    * The user's response action.
    */
-  action: enumType(["accept", "reject", "cancel"]),
+  action: enumType(["accept", "decline", "cancel"]),
   /**
    * The collected user input content (only present if action is "accept").
    */
@@ -16370,6 +16375,54 @@ class UnauthorizedError extends Error {
     super(message !== null && message !== void 0 ? message : "Unauthorized");
   }
 }
+function selectClientAuthMethod(clientInformation, supportedMethods) {
+  const hasClientSecret = clientInformation.client_secret !== void 0;
+  if (supportedMethods.length === 0) {
+    return hasClientSecret ? "client_secret_post" : "none";
+  }
+  if (hasClientSecret && supportedMethods.includes("client_secret_basic")) {
+    return "client_secret_basic";
+  }
+  if (hasClientSecret && supportedMethods.includes("client_secret_post")) {
+    return "client_secret_post";
+  }
+  if (supportedMethods.includes("none")) {
+    return "none";
+  }
+  return hasClientSecret ? "client_secret_post" : "none";
+}
+function applyClientAuthentication(method, clientInformation, headers, params) {
+  const { client_id, client_secret } = clientInformation;
+  switch (method) {
+    case "client_secret_basic":
+      applyBasicAuth(client_id, client_secret, headers);
+      return;
+    case "client_secret_post":
+      applyPostAuth(client_id, client_secret, params);
+      return;
+    case "none":
+      applyPublicAuth(client_id, params);
+      return;
+    default:
+      throw new Error(`Unsupported client authentication method: ${method}`);
+  }
+}
+function applyBasicAuth(clientId, clientSecret, headers) {
+  if (!clientSecret) {
+    throw new Error("client_secret_basic authentication requires a client_secret");
+  }
+  const credentials = btoa(`${clientId}:${clientSecret}`);
+  headers.set("Authorization", `Basic ${credentials}`);
+}
+function applyPostAuth(clientId, clientSecret, params) {
+  params.set("client_id", clientId);
+  if (clientSecret) {
+    params.set("client_secret", clientSecret);
+  }
+}
+function applyPublicAuth(clientId, params) {
+  params.set("client_id", clientId);
+}
 async function auth(provider, { serverUrl, authorizationCode, scope, resourceMetadataUrl }) {
   let resourceMetadata;
   let authorizationServerUrl = serverUrl;
@@ -16381,7 +16434,9 @@ async function auth(provider, { serverUrl, authorizationCode, scope, resourceMet
   } catch (_a) {
   }
   const resource = await selectResourceURL(serverUrl, provider, resourceMetadata);
-  const metadata = await discoverOAuthMetadata(authorizationServerUrl);
+  const metadata = await discoverOAuthMetadata(serverUrl, {
+    authorizationServerUrl
+  });
   let clientInformation = await Promise.resolve(provider.clientInformation());
   if (!clientInformation) {
     if (authorizationCode !== void 0) {
@@ -16405,7 +16460,8 @@ async function auth(provider, { serverUrl, authorizationCode, scope, resourceMet
       authorizationCode,
       codeVerifier: codeVerifier2,
       redirectUri: provider.redirectUrl,
-      resource
+      resource,
+      addClientAuthentication: provider.addClientAuthentication
     });
     await provider.saveTokens(tokens2);
     return "AUTHORIZED";
@@ -16417,7 +16473,8 @@ async function auth(provider, { serverUrl, authorizationCode, scope, resourceMet
         metadata,
         clientInformation,
         refreshToken: tokens.refresh_token,
-        resource
+        resource,
+        addClientAuthentication: provider.addClientAuthentication
       });
       await provider.saveTokens(newTokens);
       return "AUTHORIZED";
@@ -16471,28 +16528,11 @@ function extractResourceMetadataUrl(res) {
   }
 }
 async function discoverOAuthProtectedResourceMetadata(serverUrl, opts) {
-  var _a;
-  let url;
-  if (opts === null || opts === void 0 ? void 0 : opts.resourceMetadataUrl) {
-    url = new URL(opts === null || opts === void 0 ? void 0 : opts.resourceMetadataUrl);
-  } else {
-    url = new URL("/.well-known/oauth-protected-resource", serverUrl);
-  }
-  let response;
-  try {
-    response = await fetch(url, {
-      headers: {
-        "MCP-Protocol-Version": (_a = opts === null || opts === void 0 ? void 0 : opts.protocolVersion) !== null && _a !== void 0 ? _a : LATEST_PROTOCOL_VERSION
-      }
-    });
-  } catch (error) {
-    if (error instanceof TypeError) {
-      response = await fetch(url);
-    } else {
-      throw error;
-    }
-  }
-  if (response.status === 404) {
+  const response = await discoverMetadataWithFallback(serverUrl, "oauth-protected-resource", {
+    protocolVersion: opts === null || opts === void 0 ? void 0 : opts.protocolVersion,
+    metadataUrl: opts === null || opts === void 0 ? void 0 : opts.resourceMetadataUrl
+  });
+  if (!response || response.status === 404) {
     throw new Error(`Resource server does not implement OAuth 2.0 Protected Resource Metadata.`);
   }
   if (!response.ok) {
@@ -16505,13 +16545,17 @@ async function fetchWithCorsRetry(url, headers) {
     return await fetch(url, { headers });
   } catch (error) {
     if (error instanceof TypeError) {
-      return await fetch(url);
+      if (headers) {
+        return fetchWithCorsRetry(url);
+      } else {
+        return void 0;
+      }
     }
     throw error;
   }
 }
-function buildWellKnownPath(pathname) {
-  let wellKnownPath = `/.well-known/oauth-authorization-server${pathname}`;
+function buildWellKnownPath(wellKnownPrefix, pathname) {
+  let wellKnownPath = `/.well-known/${wellKnownPrefix}${pathname}`;
   if (pathname.endsWith("/")) {
     wellKnownPath = wellKnownPath.slice(0, -1);
   }
@@ -16524,26 +16568,43 @@ async function tryMetadataDiscovery(url, protocolVersion) {
   return await fetchWithCorsRetry(url, headers);
 }
 function shouldAttemptFallback(response, pathname) {
-  return response.status === 404 && pathname !== "/";
+  return !response || response.status === 404 && pathname !== "/";
 }
-async function discoverOAuthMetadata(authorizationServerUrl, opts) {
-  var _a;
-  const issuer = new URL(authorizationServerUrl);
-  const protocolVersion = (_a = void 0) !== null && _a !== void 0 ? _a : LATEST_PROTOCOL_VERSION;
-  const wellKnownPath = buildWellKnownPath(issuer.pathname);
-  const pathAwareUrl = new URL(wellKnownPath, issuer);
-  let response = await tryMetadataDiscovery(pathAwareUrl, protocolVersion);
-  if (shouldAttemptFallback(response, issuer.pathname)) {
-    try {
-      const rootUrl = new URL("/.well-known/oauth-authorization-server", issuer);
-      response = await tryMetadataDiscovery(rootUrl, protocolVersion);
-      if (response.status === 404) {
-        return void 0;
-      }
-    } catch (_b) {
-      return void 0;
-    }
-  } else if (response.status === 404) {
+async function discoverMetadataWithFallback(serverUrl, wellKnownType, opts) {
+  var _a, _b;
+  const issuer = new URL(serverUrl);
+  const protocolVersion = (_a = opts === null || opts === void 0 ? void 0 : opts.protocolVersion) !== null && _a !== void 0 ? _a : LATEST_PROTOCOL_VERSION;
+  let url;
+  if (opts === null || opts === void 0 ? void 0 : opts.metadataUrl) {
+    url = new URL(opts.metadataUrl);
+  } else {
+    const wellKnownPath = buildWellKnownPath(wellKnownType, issuer.pathname);
+    url = new URL(wellKnownPath, (_b = opts === null || opts === void 0 ? void 0 : opts.metadataServerUrl) !== null && _b !== void 0 ? _b : issuer);
+    url.search = issuer.search;
+  }
+  let response = await tryMetadataDiscovery(url, protocolVersion);
+  if (!(opts === null || opts === void 0 ? void 0 : opts.metadataUrl) && shouldAttemptFallback(response, issuer.pathname)) {
+    const rootUrl = new URL(`/.well-known/${wellKnownType}`, issuer);
+    response = await tryMetadataDiscovery(rootUrl, protocolVersion);
+  }
+  return response;
+}
+async function discoverOAuthMetadata(issuer, { authorizationServerUrl, protocolVersion } = {}) {
+  if (typeof issuer === "string") {
+    issuer = new URL(issuer);
+  }
+  if (!authorizationServerUrl) {
+    authorizationServerUrl = issuer;
+  }
+  if (typeof authorizationServerUrl === "string") {
+    authorizationServerUrl = new URL(authorizationServerUrl);
+  }
+  protocolVersion !== null && protocolVersion !== void 0 ? protocolVersion : protocolVersion = LATEST_PROTOCOL_VERSION;
+  const response = await discoverMetadataWithFallback(issuer, "oauth-authorization-server", {
+    protocolVersion,
+    metadataServerUrl: authorizationServerUrl
+  });
+  if (!response || response.status === 404) {
     return void 0;
   }
   if (!response.ok) {
@@ -16585,35 +16646,35 @@ async function startAuthorization(authorizationServerUrl, { metadata, clientInfo
   }
   return { authorizationUrl, codeVerifier };
 }
-async function exchangeAuthorization(authorizationServerUrl, { metadata, clientInformation, authorizationCode, codeVerifier, redirectUri, resource }) {
+async function exchangeAuthorization(authorizationServerUrl, { metadata, clientInformation, authorizationCode, codeVerifier, redirectUri, resource, addClientAuthentication }) {
+  var _a;
   const grantType = "authorization_code";
-  let tokenUrl;
-  if (metadata) {
-    tokenUrl = new URL(metadata.token_endpoint);
-    if (metadata.grant_types_supported && !metadata.grant_types_supported.includes(grantType)) {
-      throw new Error(`Incompatible auth server: does not support grant type ${grantType}`);
-    }
-  } else {
-    tokenUrl = new URL("/token", authorizationServerUrl);
+  const tokenUrl = (metadata === null || metadata === void 0 ? void 0 : metadata.token_endpoint) ? new URL(metadata.token_endpoint) : new URL("/token", authorizationServerUrl);
+  if ((metadata === null || metadata === void 0 ? void 0 : metadata.grant_types_supported) && !metadata.grant_types_supported.includes(grantType)) {
+    throw new Error(`Incompatible auth server: does not support grant type ${grantType}`);
   }
+  const headers = new Headers({
+    "Content-Type": "application/x-www-form-urlencoded"
+  });
   const params = new URLSearchParams({
     grant_type: grantType,
-    client_id: clientInformation.client_id,
     code: authorizationCode,
     code_verifier: codeVerifier,
     redirect_uri: String(redirectUri)
   });
-  if (clientInformation.client_secret) {
-    params.set("client_secret", clientInformation.client_secret);
+  if (addClientAuthentication) {
+    addClientAuthentication(headers, params, authorizationServerUrl, metadata);
+  } else {
+    const supportedMethods = (_a = metadata === null || metadata === void 0 ? void 0 : metadata.token_endpoint_auth_methods_supported) !== null && _a !== void 0 ? _a : [];
+    const authMethod = selectClientAuthMethod(clientInformation, supportedMethods);
+    applyClientAuthentication(authMethod, clientInformation, headers, params);
   }
   if (resource) {
     params.set("resource", resource.href);
   }
   const response = await fetch(tokenUrl, {
     method: "POST",
-    headers: {
-      "Content-Type": "application/x-www-form-urlencoded"
-    },
+    headers,
     body: params
   });
   if (!response.ok) {
@@ -16621,7 +16682,8 @@ async function exchangeAuthorization(authorizationServerUrl, { metadata, clientI
   }
   return OAuthTokensSchema.parse(await response.json());
 }
-async function refreshAuthorization(authorizationServerUrl, { metadata, clientInformation, refreshToken, resource }) {
+async function refreshAuthorization(authorizationServerUrl, { metadata, clientInformation, refreshToken, resource, addClientAuthentication }) {
+  var _a;
   const grantType = "refresh_token";
   let tokenUrl;
   if (metadata) {
@@ -16632,22 +16694,26 @@ async function refreshAuthorization(authorizationServerUrl, { metadata, clientIn
   } else {
     tokenUrl = new URL("/token", authorizationServerUrl);
   }
+  const headers = new Headers({
+    "Content-Type": "application/x-www-form-urlencoded"
+  });
   const params = new URLSearchParams({
     grant_type: grantType,
-    client_id: clientInformation.client_id,
     refresh_token: refreshToken
   });
-  if (clientInformation.client_secret) {
-    params.set("client_secret", clientInformation.client_secret);
+  if (addClientAuthentication) {
+    addClientAuthentication(headers, params, authorizationServerUrl, metadata);
+  } else {
+    const supportedMethods = (_a = metadata === null || metadata === void 0 ? void 0 : metadata.token_endpoint_auth_methods_supported) !== null && _a !== void 0 ? _a : [];
+    const authMethod = selectClientAuthMethod(clientInformation, supportedMethods);
+    applyClientAuthentication(authMethod, clientInformation, headers, params);
   }
   if (resource) {
     params.set("resource", resource.href);
   }
   const response = await fetch(tokenUrl, {
     method: "POST",
-    headers: {
-      "Content-Type": "application/x-www-form-urlencoded"
-    },
+    headers,
     body: params
   });
   if (!response.ok) {
@@ -22908,38 +22974,44 @@ function validateToolOutput(toolName, structuredContent) {
 function hasOutputSchema(toolName) {
   return toolOutputValidators.has(toolName);
 }
-function generateDefaultValue(schema) {
-  if ("default" in schema) {
+function generateDefaultValue(schema, propertyName, parentSchema) {
+  if ("default" in schema && schema.default !== void 0) {
     return schema.default;
   }
-  if (!schema.required) {
-    if (schema.type === "array") return [];
-    if (schema.type === "object") return {};
-    return void 0;
-  }
+  const isRequired = propertyName && parentSchema ? isPropertyRequired(propertyName, parentSchema) : false;
   switch (schema.type) {
     case "string":
-      return "";
+      return isRequired ? "" : void 0;
     case "number":
     case "integer":
-      return 0;
+      return isRequired ? 0 : void 0;
     case "boolean":
-      return false;
+      return isRequired ? false : void 0;
     case "array":
       return [];
     case "object": {
       if (!schema.properties) return {};
       const obj = {};
-      Object.entries(schema.properties).filter(([, prop]) => prop.required).forEach(([key, prop]) => {
-        const value = generateDefaultValue(prop);
-        obj[key] = value;
+      Object.entries(schema.properties).forEach(([key, prop]) => {
+        if (isPropertyRequired(key, schema)) {
+          const value = generateDefaultValue(prop, key, schema);
+          if (value !== void 0) {
+            obj[key] = value;
+          }
+        }
       });
       return obj;
     }
-    default:
+    case "null":
       return null;
+    default:
+      return void 0;
   }
 }
+function isPropertyRequired(propertyName, schema) {
+  var _a;
+  return ((_a = schema.required) == null ? void 0 : _a.includes(propertyName)) ?? false;
+}
 const DEFAULT_REQUEST_TIMEOUT_MSEC = 6e4;
 class Protocol {
   constructor(_options) {
@@ -23900,6 +23972,7 @@ class SSEClientTransport {
     this._eventSourceInit = opts === null || opts === void 0 ? void 0 : opts.eventSourceInit;
     this._requestInit = opts === null || opts === void 0 ? void 0 : opts.requestInit;
     this._authProvider = opts === null || opts === void 0 ? void 0 : opts.authProvider;
+    this._fetch = opts === null || opts === void 0 ? void 0 : opts.fetch;
   }
   async _authThenStart() {
     var _a;
@@ -23920,9 +23993,7 @@ class SSEClientTransport {
   }
   async _commonHeaders() {
     var _a;
-    const headers = {
-      ...(_a = this._requestInit) === null || _a === void 0 ? void 0 : _a.headers
-    };
+    const headers = {};
     if (this._authProvider) {
       const tokens = await this._authProvider.tokens();
       if (tokens) {
@@ -23932,22 +24003,20 @@ class SSEClientTransport {
     if (this._protocolVersion) {
       headers["mcp-protocol-version"] = this._protocolVersion;
     }
-    return headers;
+    return new Headers({ ...headers, ...(_a = this._requestInit) === null || _a === void 0 ? void 0 : _a.headers });
   }
   _startOrAuth() {
-    var _a;
-    const fetchImpl = ((_a = this === null || this === void 0 ? void 0 : this._eventSourceInit) === null || _a === void 0 ? void 0 : _a.fetch) || fetch;
+    var _a, _b, _c;
+    const fetchImpl = (_c = (_b = (_a = this === null || this === void 0 ? void 0 : this._eventSourceInit) === null || _a === void 0 ? void 0 : _a.fetch) !== null && _b !== void 0 ? _b : this._fetch) !== null && _c !== void 0 ? _c : fetch;
     return new Promise((resolve, reject) => {
       this._eventSource = new EventSource(this._url.href, {
         ...this._eventSourceInit,
         fetch: async (url, init) => {
           const headers = await this._commonHeaders();
+          headers.set("Accept", "text/event-stream");
           const response = await fetchImpl(url, {
             ...init,
-            headers: new Headers({
-              ...headers,
-              Accept: "text/event-stream"
-            })
+            headers
           });
           if (response.status === 401 && response.headers.has("www-authenticate")) {
             this._resourceMetadataUrl = extractResourceMetadataUrl(response);
@@ -23985,7 +24054,7 @@ class SSEClientTransport {
         resolve();
       });
       this._eventSource.onmessage = (event) => {
-        var _a2, _b;
+        var _a2, _b2;
         const messageEvent = event;
         let message;
         try {
@@ -23994,7 +24063,7 @@ class SSEClientTransport {
           (_a2 = this.onerror) === null || _a2 === void 0 ? void 0 : _a2.call(this, error);
           return;
         }
-        (_b = this.onmessage) === null || _b === void 0 ? void 0 : _b.call(this, message);
+        (_b2 = this.onmessage) === null || _b2 === void 0 ? void 0 : _b2.call(this, message);
       };
     });
   }
@@ -24023,13 +24092,12 @@ class SSEClientTransport {
     (_c = this.onclose) === null || _c === void 0 ? void 0 : _c.call(this);
   }
   async send(message) {
-    var _a, _b;
+    var _a, _b, _c;
     if (!this._endpoint) {
       throw new Error("Not connected");
     }
     try {
-      const commonHeaders = await this._commonHeaders();
-      const headers = new Headers(commonHeaders);
+      const headers = await this._commonHeaders();
       headers.set("content-type", "application/json");
       const init = {
         ...this._requestInit,
@@ -24038,7 +24106,7 @@ class SSEClientTransport {
         body: JSON.stringify(message),
         signal: (_a = this._abortController) === null || _a === void 0 ? void 0 : _a.signal
       };
-      const response = await fetch(this._endpoint, init);
+      const response = await ((_b = this._fetch) !== null && _b !== void 0 ? _b : fetch)(this._endpoint, init);
       if (!response.ok) {
         if (response.status === 401 && this._authProvider) {
           this._resourceMetadataUrl = extractResourceMetadataUrl(response);
@@ -24052,7 +24120,7 @@ class SSEClientTransport {
         throw new Error(`Error POSTing to endpoint (HTTP ${response.status}): ${text}`);
       }
     } catch (error) {
-      (_b = this.onerror) === null || _b === void 0 ? void 0 : _b.call(this, error);
+      (_c = this.onerror) === null || _c === void 0 ? void 0 : _c.call(this, error);
       throw error;
     }
   }
@@ -24101,6 +24169,7 @@ class StreamableHTTPClientTransport {
     this._resourceMetadataUrl = void 0;
     this._requestInit = opts === null || opts === void 0 ? void 0 : opts.requestInit;
     this._authProvider = opts === null || opts === void 0 ? void 0 : opts.authProvider;
+    this._fetch = opts === null || opts === void 0 ? void 0 : opts.fetch;
     this._sessionId = opts === null || opts === void 0 ? void 0 : opts.sessionId;
     this._reconnectionOptions = (_a = opts === null || opts === void 0 ? void 0 : opts.reconnectionOptions) !== null && _a !== void 0 ? _a : DEFAULT_STREAMABLE_HTTP_RECONNECTION_OPTIONS;
   }
@@ -24136,10 +24205,14 @@ class StreamableHTTPClientTransport {
     if (this._protocolVersion) {
       headers["mcp-protocol-version"] = this._protocolVersion;
     }
-    return new Headers({ ...headers, ...(_a = this._requestInit) === null || _a === void 0 ? void 0 : _a.headers });
+    const extraHeaders = this._normalizeHeaders((_a = this._requestInit) === null || _a === void 0 ? void 0 : _a.headers);
+    return new Headers({
+      ...headers,
+      ...extraHeaders
+    });
   }
   async _startOrAuthSse(options) {
-    var _a, _b;
+    var _a, _b, _c;
     const { resumptionToken } = options;
     try {
       const headers = await this._commonHeaders();
@@ -24147,10 +24220,10 @@ class StreamableHTTPClientTransport {
       if (resumptionToken) {
         headers.set("last-event-id", resumptionToken);
       }
-      const response = await fetch(this._url, {
+      const response = await ((_a = this._fetch) !== null && _a !== void 0 ? _a : fetch)(this._url, {
         method: "GET",
         headers,
-        signal: (_a = this._abortController) === null || _a === void 0 ? void 0 : _a.signal
+        signal: (_b = this._abortController) === null || _b === void 0 ? void 0 : _b.signal
       });
       if (!response.ok) {
         if (response.status === 401 && this._authProvider) {
@@ -24163,7 +24236,7 @@ class StreamableHTTPClientTransport {
       }
       this._handleSseStream(response.body, options);
     } catch (error) {
-      (_b = this.onerror) === null || _b === void 0 ? void 0 : _b.call(this, error);
+      (_c = this.onerror) === null || _c === void 0 ? void 0 : _c.call(this, error);
       throw error;
     }
   }
@@ -24179,6 +24252,17 @@ class StreamableHTTPClientTransport {
     const maxDelay = this._reconnectionOptions.maxReconnectionDelay;
     return Math.min(initialDelay * Math.pow(growFactor, attempt), maxDelay);
   }
+  _normalizeHeaders(headers) {
+    if (!headers)
+      return {};
+    if (headers instanceof Headers) {
+      return Object.fromEntries(headers.entries());
+    }
+    if (Array.isArray(headers)) {
+      return Object.fromEntries(headers);
+    }
+    return { ...headers };
+  }
   /**
    * Schedule a reconnection attempt with exponential backoff
    *
@@ -24275,7 +24359,7 @@ class StreamableHTTPClientTransport {
     (_b = this.onclose) === null || _b === void 0 ? void 0 : _b.call(this);
   }
   async send(message, options) {
-    var _a, _b, _c;
+    var _a, _b, _c, _d;
     try {
       const { resumptionToken, onresumptiontoken } = options || {};
       if (resumptionToken) {
@@ -24295,7 +24379,7 @@ class StreamableHTTPClientTransport {
         body: JSON.stringify(message),
         signal: (_a = this._abortController) === null || _a === void 0 ? void 0 : _a.signal
       };
-      const response = await fetch(this._url, init);
+      const response = await ((_b = this._fetch) !== null && _b !== void 0 ? _b : fetch)(this._url, init);
       const sessionId = response.headers.get("mcp-session-id");
       if (sessionId) {
         this._sessionId = sessionId;
@@ -24331,14 +24415,14 @@ class StreamableHTTPClientTransport {
           const data2 = await response.json();
           const responseMessages = Array.isArray(data2) ? data2.map((msg) => JSONRPCMessageSchema.parse(msg)) : [JSONRPCMessageSchema.parse(data2)];
           for (const msg of responseMessages) {
-            (_b = this.onmessage) === null || _b === void 0 ? void 0 : _b.call(this, msg);
+            (_c = this.onmessage) === null || _c === void 0 ? void 0 : _c.call(this, msg);
           }
         } else {
           throw new StreamableHTTPError(-1, `Unexpected content type: ${contentType}`);
         }
       }
     } catch (error) {
-      (_c = this.onerror) === null || _c === void 0 ? void 0 : _c.call(this, error);
+      (_d = this.onerror) === null || _d === void 0 ? void 0 : _d.call(this, error);
       throw error;
     }
   }
@@ -24357,7 +24441,7 @@ class StreamableHTTPClientTransport {
    * the server does not allow clients to terminate sessions.
    */
   async terminateSession() {
-    var _a, _b;
+    var _a, _b, _c;
     if (!this._sessionId) {
       return;
     }
@@ -24369,13 +24453,13 @@ class StreamableHTTPClientTransport {
         headers,
         signal: (_a = this._abortController) === null || _a === void 0 ? void 0 : _a.signal
       };
-      const response = await fetch(this._url, init);
+      const response = await ((_b = this._fetch) !== null && _b !== void 0 ? _b : fetch)(this._url, init);
       if (!response.ok && response.status !== 405) {
         throw new StreamableHTTPError(response.status, `Failed to terminate session: ${response.statusText}`);
       }
       this._sessionId = void 0;
     } catch (error) {
-      (_b = this.onerror) === null || _b === void 0 ? void 0 : _b.call(this, error);
+      (_c = this.onerror) === null || _c === void 0 ? void 0 : _c.call(this, error);
       throw error;
     }
   }
@@ -24395,16 +24479,26 @@ const StdErrNotificationSchema = NotificationSchema.extend({
 ClientNotificationSchema.or(
   StdErrNotificationSchema
 ).or(ServerNotificationSchema).or(NotificationSchema);
-const version$1 = "0.15.0";
+const version$1 = "0.16.1";
 const packageJson = {
   version: version$1
 };
+const getSearchParam = (key) => {
+  try {
+    const url = new URL(window.location.href);
+    return url.searchParams.get(key);
+  } catch {
+    return null;
+  }
+};
 const getMCPProxyAddress = (config) => {
-  const proxyFullAddress = config.MCP_PROXY_FULL_ADDRESS.value;
+  let proxyFullAddress = config.MCP_PROXY_FULL_ADDRESS.value;
   if (proxyFullAddress) {
+    proxyFullAddress = proxyFullAddress.replace(/\/+$/, "");
     return proxyFullAddress;
   }
-  return `${window.location.protocol}//${window.location.hostname}:${DEFAULT_MCP_PROXY_LISTEN_PORT}`;
+  const proxyPort = getSearchParam("MCP_PROXY_PORT") || DEFAULT_MCP_PROXY_LISTEN_PORT;
+  return `${window.location.protocol}//${window.location.hostname}:${proxyPort}`;
 };
 const getMCPServerRequestTimeout = (config) => {
   return config.MCP_SERVER_REQUEST_TIMEOUT.value;
@@ -24421,14 +24515,6 @@ const getMCPProxyAuthToken = (config) => {
     header: "X-MCP-Proxy-Auth"
   };
 };
-const getSearchParam = (key) => {
-  try {
-    const url = new URL(window.location.href);
-    return url.searchParams.get(key);
-  } catch {
-    return null;
-  }
-};
 const getInitialTransportType = () => {
   const param = getSearchParam("transport");
   if (param === "stdio" || param === "sse" || param === "streamable-http") {
@@ -26864,7 +26950,9 @@ const HistoryAndNotifications = ({
               "div",
               {
                 className: "flex justify-between items-center cursor-pointer",
-                onClick: () => toggleNotificationExpansion(index2),
+                onClick: () => toggleNotificationExpansion(
+                  serverNotifications.length - 1 - index2
+                ),
                 children: [
                   /* @__PURE__ */ jsxRuntimeExports.jsxs("span", { className: "font-mono", children: [
                     serverNotifications.length - index2,
@@ -26872,11 +26960,11 @@ const HistoryAndNotifications = ({
                     " ",
                     notification.method
                   ] }),
-                  /* @__PURE__ */ jsxRuntimeExports.jsx("span", { children: expandedNotifications[index2] ? "▼" : "▶" })
+                  /* @__PURE__ */ jsxRuntimeExports.jsx("span", { children: expandedNotifications[serverNotifications.length - 1 - index2] ? "▼" : "▶" })
                 ]
               }
             ),
-            expandedNotifications[index2] && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "mt-2", children: [
+            expandedNotifications[serverNotifications.length - 1 - index2] && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "mt-2", children: [
               /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex justify-between items-center mb-1", children: /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "font-semibold text-purple-600", children: "Details:" }) }),
               /* @__PURE__ */ jsxRuntimeExports.jsx(
                 JsonView,
@@ -31455,9 +31543,9 @@ const PromptsTab = ({
           setSelectedPrompt(prompt);
           setPromptArgs({});
         },
-        renderItem: (prompt) => /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
+        renderItem: (prompt) => /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex flex-col items-start", children: [
           /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "flex-1", children: prompt.name }),
-          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-sm text-gray-500", children: prompt.description })
+          /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-sm text-gray-500 text-left", children: prompt.description })
         ] }),
         title: "Prompts",
         buttonText: nextCursor ? "List More Prompts" : "List Prompts",
@@ -33916,10 +34004,37 @@ const JsonEditor = ({
 const isSimpleObject = (schema) => {
   const supportedTypes = ["string", "number", "integer", "boolean", "null"];
   if (supportedTypes.includes(schema.type)) return true;
-  if (schema.type !== "object") return false;
-  return Object.values(schema.properties ?? {}).every(
-    (prop) => supportedTypes.includes(prop.type)
-  );
+  if (schema.type === "object") {
+    return Object.values(schema.properties ?? {}).every(
+      (prop) => supportedTypes.includes(prop.type)
+    );
+  }
+  if (schema.type === "array") {
+    return !!schema.items && isSimpleObject(schema.items);
+  }
+  return false;
+};
+const getArrayItemDefault = (schema) => {
+  if ("default" in schema && schema.default !== void 0) {
+    return schema.default;
+  }
+  switch (schema.type) {
+    case "string":
+      return "";
+    case "number":
+    case "integer":
+      return 0;
+    case "boolean":
+      return false;
+    case "array":
+      return [];
+    case "object":
+      return {};
+    case "null":
+      return null;
+    default:
+      return null;
+  }
 };
 const DynamicJsonForm = ({
   schema,
@@ -33930,6 +34045,8 @@ const DynamicJsonForm = ({
   const isOnlyJSON = !isSimpleObject(schema);
   const [isJsonMode, setIsJsonMode] = reactExports.useState(isOnlyJSON);
   const [jsonError, setJsonError] = reactExports.useState();
+  const [copiedJson, setCopiedJson] = reactExports.useState(false);
+  const { toast: toast2 } = useToast();
   const [rawJsonValue, setRawJsonValue] = reactExports.useState(
     JSON.stringify(value ?? generateDefaultValue(schema), null, 2)
   );
@@ -33987,13 +34104,14 @@ const DynamicJsonForm = ({
       setJsonError(err instanceof Error ? err.message : "Invalid JSON");
     }
   };
-  const renderFormFields = (propSchema, currentValue, path = [], depth = 0) => {
+  const renderFormFields = (propSchema, currentValue, path = [], depth = 0, parentSchema, propertyName) => {
+    var _a, _b, _c;
     if (depth >= maxDepth && (propSchema.type === "object" || propSchema.type === "array")) {
       return /* @__PURE__ */ jsxRuntimeExports.jsx(
         JsonEditor,
         {
           value: JSON.stringify(
-            currentValue ?? generateDefaultValue(propSchema),
+            currentValue ?? generateDefaultValue(propSchema, propertyName, parentSchema),
             null,
             2
           ),
@@ -34010,6 +34128,7 @@ const DynamicJsonForm = ({
         }
       );
     }
+    const isRequired = ((_a = parentSchema == null ? void 0 : parentSchema.required) == null ? void 0 : _a.includes(propertyName || "")) ?? false;
     switch (propSchema.type) {
       case "string":
         return /* @__PURE__ */ jsxRuntimeExports.jsx(
@@ -34019,14 +34138,10 @@ const DynamicJsonForm = ({
             value: currentValue ?? "",
             onChange: (e) => {
               const val = e.target.value;
-              if (!val && !propSchema.required) {
-                handleFieldChange(path, void 0);
-              } else {
-                handleFieldChange(path, val);
-              }
+              handleFieldChange(path, val);
             },
             placeholder: propSchema.description,
-            required: propSchema.required
+            required: isRequired
           }
         );
       case "number":
@@ -34037,7 +34152,7 @@ const DynamicJsonForm = ({
             value: (currentValue == null ? void 0 : currentValue.toString()) ?? "",
             onChange: (e) => {
               const val = e.target.value;
-              if (!val && !propSchema.required) {
+              if (!val && !isRequired) {
                 handleFieldChange(path, void 0);
               } else {
                 const num = Number(val);
@@ -34047,7 +34162,7 @@ const DynamicJsonForm = ({
               }
             },
             placeholder: propSchema.description,
-            required: propSchema.required
+            required: isRequired
           }
         );
       case "integer":
@@ -34059,7 +34174,7 @@ const DynamicJsonForm = ({
             value: (currentValue == null ? void 0 : currentValue.toString()) ?? "",
             onChange: (e) => {
               const val = e.target.value;
-              if (!val && !propSchema.required) {
+              if (!val && !isRequired) {
                 handleFieldChange(path, void 0);
               } else {
                 const num = Number(val);
@@ -34069,7 +34184,7 @@ const DynamicJsonForm = ({
               }
             },
             placeholder: propSchema.description,
-            required: propSchema.required
+            required: isRequired
           }
         );
       case "boolean":
@@ -34080,9 +34195,116 @@ const DynamicJsonForm = ({
             checked: currentValue ?? false,
             onChange: (e) => handleFieldChange(path, e.target.checked),
             className: "w-4 h-4",
-            required: propSchema.required
+            required: isRequired
           }
         );
+      case "object":
+        if (!propSchema.properties) {
+          return /* @__PURE__ */ jsxRuntimeExports.jsx(
+            JsonEditor,
+            {
+              value: JSON.stringify(currentValue ?? {}, null, 2),
+              onChange: (newValue) => {
+                try {
+                  const parsed = JSON.parse(newValue);
+                  handleFieldChange(path, parsed);
+                  setJsonError(void 0);
+                } catch (err) {
+                  setJsonError(
+                    err instanceof Error ? err.message : "Invalid JSON"
+                  );
+                }
+              },
+              error: jsonError
+            }
+          );
+        }
+        return /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "space-y-2 border rounded p-3", children: Object.entries(propSchema.properties).map(([key, subSchema]) => {
+          var _a2;
+          return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { children: [
+            /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "block text-sm font-medium mb-1", children: [
+              key,
+              ((_a2 = propSchema.required) == null ? void 0 : _a2.includes(key)) && /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-red-500 ml-1", children: "*" })
+            ] }),
+            renderFormFields(
+              subSchema,
+              currentValue == null ? void 0 : currentValue[key],
+              [...path, key],
+              depth + 1,
+              propSchema,
+              key
+            )
+          ] }, key);
+        }) });
+      case "array": {
+        const arrayValue = Array.isArray(currentValue) ? currentValue : [];
+        if (!propSchema.items) return null;
+        if (isSimpleObject(propSchema.items)) {
+          return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "space-y-4", children: [
+            propSchema.description && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-sm text-gray-600", children: propSchema.description }),
+            ((_b = propSchema.items) == null ? void 0 : _b.description) && /* @__PURE__ */ jsxRuntimeExports.jsxs("p", { className: "text-sm text-gray-500", children: [
+              "Items: ",
+              propSchema.items.description
+            ] }),
+            /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "space-y-2", children: [
+              arrayValue.map((item, index2) => /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2", children: [
+                renderFormFields(
+                  propSchema.items,
+                  item,
+                  [...path, index2.toString()],
+                  depth + 1
+                ),
+                /* @__PURE__ */ jsxRuntimeExports.jsx(
+                  Button,
+                  {
+                    variant: "outline",
+                    size: "sm",
+                    onClick: () => {
+                      const newArray = [...arrayValue];
+                      newArray.splice(index2, 1);
+                      handleFieldChange(path, newArray);
+                    },
+                    children: "Remove"
+                  }
+                )
+              ] }, index2)),
+              /* @__PURE__ */ jsxRuntimeExports.jsx(
+                Button,
+                {
+                  variant: "outline",
+                  size: "sm",
+                  onClick: () => {
+                    const defaultValue = getArrayItemDefault(
+                      propSchema.items
+                    );
+                    handleFieldChange(path, [...arrayValue, defaultValue]);
+                  },
+                  title: ((_c = propSchema.items) == null ? void 0 : _c.description) ? `Add new ${propSchema.items.description}` : "Add new item",
+                  children: "Add Item"
+                }
+              )
+            ] })
+          ] });
+        }
+        return /* @__PURE__ */ jsxRuntimeExports.jsx(
+          JsonEditor,
+          {
+            value: JSON.stringify(currentValue ?? [], null, 2),
+            onChange: (newValue) => {
+              try {
+                const parsed = JSON.parse(newValue);
+                handleFieldChange(path, parsed);
+                setJsonError(void 0);
+              } catch (err) {
+                setJsonError(
+                  err instanceof Error ? err.message : "Invalid JSON"
+                );
+              }
+            },
+            error: jsonError
+          }
+        );
+      }
       default:
         return null;
     }
@@ -34106,18 +34328,57 @@ const DynamicJsonForm = ({
       setIsJsonMode(true);
     }
   }, [shouldUseJsonMode, isJsonMode]);
+  const handleCopyJson = reactExports.useCallback(() => {
+    const copyToClipboard = async () => {
+      try {
+        await navigator.clipboard.writeText(
+          JSON.stringify(value, null, 2) ?? "[]"
+        );
+        setCopiedJson(true);
+        toast2({
+          title: "JSON copied",
+          description: "The JSON data has been successfully copied to your clipboard."
+        });
+        setTimeout(() => {
+          setCopiedJson(false);
+        }, 2e3);
+      } catch (error) {
+        toast2({
+          title: "Error",
+          description: `Failed to copy JSON: ${error instanceof Error ? error.message : String(error)}`,
+          variant: "destructive"
+        });
+      }
+    };
+    copyToClipboard();
+  }, [toast2, value]);
   return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "space-y-4", children: [
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex justify-end space-x-2", children: [
-      isJsonMode && /* @__PURE__ */ jsxRuntimeExports.jsx(
-        Button,
-        {
-          type: "button",
-          variant: "outline",
-          size: "sm",
-          onClick: formatJson,
-          children: "Format JSON"
-        }
-      ),
+      isJsonMode && /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsxs(
+          Button,
+          {
+            type: "button",
+            variant: "outline",
+            size: "sm",
+            onClick: handleCopyJson,
+            children: [
+              copiedJson ? /* @__PURE__ */ jsxRuntimeExports.jsx(CheckCheck, { className: "h-4 w-4 mr-2" }) : /* @__PURE__ */ jsxRuntimeExports.jsx(Copy, { className: "h-4 w-4 mr-2" }),
+              "Copy JSON"
+            ]
+          }
+        ),
+        /* @__PURE__ */ jsxRuntimeExports.jsx(
+          Button,
+          {
+            type: "button",
+            variant: "outline",
+            size: "sm",
+            onClick: formatJson,
+            children: "Format JSON"
+          }
+        )
+      ] }),
       !isOnlyJSON && /* @__PURE__ */ jsxRuntimeExports.jsx(Button, { variant: "outline", size: "sm", onClick: handleSwitchToFormMode, children: isJsonMode ? "Switch to Form" : "Switch to JSON" })
     ] }),
     isJsonMode ? /* @__PURE__ */ jsxRuntimeExports.jsx(
@@ -35595,7 +35856,7 @@ const useTheme = () => {
     [theme, setThemeWithSideEffect]
   );
 };
-const version = "0.15.0";
+const version = "0.16.1";
 var [createTooltipContext, createTooltipScope] = createContextScope("Tooltip", [
   createPopperScope
 ]);
@@ -37204,7 +37465,11 @@ const ToolsTab = ({
       (selectedTool == null ? void 0 : selectedTool.inputSchema.properties) ?? []
     ).map(([key, value]) => [
       key,
-      generateDefaultValue(value)
+      generateDefaultValue(
+        value,
+        key,
+        selectedTool == null ? void 0 : selectedTool.inputSchema
+      )
     ]);
     setParams(Object.fromEntries(params2));
   }, [selectedTool]);
@@ -37235,13 +37500,18 @@ const ToolsTab = ({
         Object.entries(selectedTool.inputSchema.properties ?? []).map(
           ([key, value]) => {
             const prop = value;
+            const inputSchema = selectedTool.inputSchema;
+            const required2 = isPropertyRequired(key, inputSchema);
             return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { children: [
-              /* @__PURE__ */ jsxRuntimeExports.jsx(
+              /* @__PURE__ */ jsxRuntimeExports.jsxs(
                 Label$1,
                 {
                   htmlFor: key,
                   className: "block text-sm font-medium text-gray-700 dark:text-gray-300",
-                  children: key
+                  children: [
+                    key,
+                    required2 && /* @__PURE__ */ jsxRuntimeExports.jsx("span", { className: "text-red-500 ml-1", children: "*" })
+                  ]
                 }
               ),
               prop.type === "boolean" ? /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center space-x-2 mt-2", children: [
@@ -37303,10 +37573,13 @@ const ToolsTab = ({
                   name: key,
                   placeholder: prop.description,
                   value: params[key] ?? "",
-                  onChange: (e) => setParams({
-                    ...params,
-                    [key]: Number(e.target.value)
-                  }),
+                  onChange: (e) => {
+                    const value2 = e.target.value;
+                    setParams({
+                      ...params,
+                      [key]: value2 === "" ? "" : Number(value2)
+                    });
+                  },
                   className: "mt-1"
                 }
               ) : /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "mt-1", children: /* @__PURE__ */ jsxRuntimeExports.jsx(
@@ -37816,13 +38089,13 @@ const App = () => {
   ) });
   if (window.location.pathname === "/oauth/callback") {
     const OAuthCallback = React.lazy(
-      () => __vitePreload(() => import("./OAuthCallback-CaW3Hcqw.js"), true ? __vite__mapDeps([0,1]) : void 0)
+      () => __vitePreload(() => import("./OAuthCallback-CaDIOg8Q.js"), true ? __vite__mapDeps([0,1]) : void 0)
     );
     return /* @__PURE__ */ jsxRuntimeExports.jsx(reactExports.Suspense, { fallback: /* @__PURE__ */ jsxRuntimeExports.jsx("div", { children: "Loading..." }), children: /* @__PURE__ */ jsxRuntimeExports.jsx(OAuthCallback, { onConnect: onOAuthConnect }) });
   }
   if (window.location.pathname === "/oauth/callback/debug") {
     const OAuthDebugCallback = React.lazy(
-      () => __vitePreload(() => import("./OAuthDebugCallback-DiBt_oxh.js"), true ? __vite__mapDeps([2,1]) : void 0)
+      () => __vitePreload(() => import("./OAuthDebugCallback-Ccjj44Wa.js"), true ? __vite__mapDeps([2,1]) : void 0)
     );
     return /* @__PURE__ */ jsxRuntimeExports.jsx(reactExports.Suspense, { fallback: /* @__PURE__ */ jsxRuntimeExports.jsx("div", { children: "Loading..." }), children: /* @__PURE__ */ jsxRuntimeExports.jsx(OAuthDebugCallback, { onConnect: onOAuthDebugConnect }) });
   }