@modelcontextprotocol/inspector 0.16.2 → 0.16.4

package/client/dist/assets/{index-DLtnCiTW.js → index-MFoeZZBS.js}

@@ -1,4 +1,3 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/OAuthCallback-CC1cu0Zx.js","assets/oauthUtils-DTcoXpSP.js","assets/OAuthDebugCallback-_4BLxVDe.js"])))=>i.map(i=>d[i]);
 function _mergeNamespaces(n, m2) {
   for (var i = 0; i < m2.length; i++) {
     const e = m2[i];
@@ -1123,13 +1122,13 @@ function requireReactDom_production_min() {
   function lb(a, b) {
     return null == a || "http://www.w3.org/1999/xhtml" === a ? kb(b) : "http://www.w3.org/2000/svg" === a && "foreignObject" === b ? "http://www.w3.org/1999/xhtml" : a;
   }
-  var mb, nb = function(a) {
+  var mb, nb = (function(a) {
     return "undefined" !== typeof MSApp && MSApp.execUnsafeLocalFunction ? function(b, c, d, e) {
       MSApp.execUnsafeLocalFunction(function() {
         return a(b, c, d, e);
       });
     } : a;
-  }(function(a, b) {
+  })(function(a, b) {
     if ("http://www.w3.org/2000/svg" !== a.namespaceURI || "innerHTML" in a) a.innerHTML = b;
     else {
       mb = mb || document.createElement("div");
@@ -7809,7 +7808,7 @@ function usePresence(present) {
       const ownerWindow = node.ownerDocument.defaultView ?? window;
       const handleAnimationEnd = (event) => {
         const currentAnimationName = getAnimationName(stylesRef.current);
-        const isCurrentAnimation = currentAnimationName.includes(event.animationName);
+        const isCurrentAnimation = currentAnimationName.includes(CSS.escape(event.animationName));
         if (event.target === node && isCurrentAnimation) {
           send("ANIMATION_END");
           if (!prevPresentRef.current) {
@@ -8163,7 +8162,6 @@ var FocusProxy = reactExports.forwardRef(
     return /* @__PURE__ */ jsxRuntimeExports.jsx(
       VisuallyHidden,
       {
-        "aria-hidden": true,
         tabIndex: 0,
         ...proxyProps,
         ref: forwardedRef,
@@ -8317,7 +8315,6 @@ var ToastImpl = reactExports.forwardRef(
           __scopeToast,
           role: "status",
           "aria-live": type2 === "foreground" ? "assertive" : "polite",
-          "aria-atomic": true,
           children: announceTextContent
         }
       ),
@@ -8333,9 +8330,6 @@ var ToastImpl = reactExports.forwardRef(
             children: /* @__PURE__ */ jsxRuntimeExports.jsx(
               Primitive.li,
               {
-                role: "status",
-                "aria-live": "off",
-                "aria-atomic": true,
                 tabIndex: 0,
                 "data-state": open ? "open" : "closed",
                 "data-swipe-direction": context.swipeDirection,
@@ -16258,155 +16252,10 @@ const EMPTY_DEBUGGER_STATE = {
   statusMessage: null,
   validationError: null
 };
-const getClientInformationFromSessionStorage = async ({
-  serverUrl,
-  isPreregistered
-}) => {
-  const key = getServerSpecificKey(
-    isPreregistered ? SESSION_KEYS.PREREGISTERED_CLIENT_INFORMATION : SESSION_KEYS.CLIENT_INFORMATION,
-    serverUrl
-  );
-  const value = sessionStorage.getItem(key);
-  if (!value) {
-    return void 0;
-  }
-  return await OAuthClientInformationSchema.parseAsync(JSON.parse(value));
-};
-const saveClientInformationToSessionStorage = ({
-  serverUrl,
-  clientInformation,
-  isPreregistered
-}) => {
-  const key = getServerSpecificKey(
-    isPreregistered ? SESSION_KEYS.PREREGISTERED_CLIENT_INFORMATION : SESSION_KEYS.CLIENT_INFORMATION,
-    serverUrl
-  );
-  sessionStorage.setItem(key, JSON.stringify(clientInformation));
-};
-const clearClientInformationFromSessionStorage = ({
-  serverUrl,
-  isPreregistered
-}) => {
-  const key = getServerSpecificKey(
-    isPreregistered ? SESSION_KEYS.PREREGISTERED_CLIENT_INFORMATION : SESSION_KEYS.CLIENT_INFORMATION,
-    serverUrl
-  );
-  sessionStorage.removeItem(key);
-};
-class InspectorOAuthClientProvider {
-  constructor(serverUrl) {
-    this.serverUrl = serverUrl;
-    sessionStorage.setItem(SESSION_KEYS.SERVER_URL, serverUrl);
-  }
-  get redirectUrl() {
-    return window.location.origin + "/oauth/callback";
-  }
-  get clientMetadata() {
-    return {
-      redirect_uris: [this.redirectUrl],
-      token_endpoint_auth_method: "none",
-      grant_types: ["authorization_code", "refresh_token"],
-      response_types: ["code"],
-      client_name: "MCP Inspector",
-      client_uri: "https://github.com/modelcontextprotocol/inspector"
-    };
-  }
-  async clientInformation() {
-    const preregisteredClientInformation = await getClientInformationFromSessionStorage({
-      serverUrl: this.serverUrl,
-      isPreregistered: true
-    });
-    return preregisteredClientInformation ?? await getClientInformationFromSessionStorage({
-      serverUrl: this.serverUrl,
-      isPreregistered: false
-    });
-  }
-  saveClientInformation(clientInformation) {
-    saveClientInformationToSessionStorage({
-      serverUrl: this.serverUrl,
-      clientInformation,
-      isPreregistered: false
-    });
-  }
-  async tokens() {
-    const key = getServerSpecificKey(SESSION_KEYS.TOKENS, this.serverUrl);
-    const tokens = sessionStorage.getItem(key);
-    if (!tokens) {
-      return void 0;
-    }
-    return await OAuthTokensSchema.parseAsync(JSON.parse(tokens));
-  }
-  saveTokens(tokens) {
-    const key = getServerSpecificKey(SESSION_KEYS.TOKENS, this.serverUrl);
-    sessionStorage.setItem(key, JSON.stringify(tokens));
-  }
-  redirectToAuthorization(authorizationUrl) {
-    window.location.href = authorizationUrl.href;
-  }
-  saveCodeVerifier(codeVerifier) {
-    const key = getServerSpecificKey(
-      SESSION_KEYS.CODE_VERIFIER,
-      this.serverUrl
-    );
-    sessionStorage.setItem(key, codeVerifier);
-  }
-  codeVerifier() {
-    const key = getServerSpecificKey(
-      SESSION_KEYS.CODE_VERIFIER,
-      this.serverUrl
-    );
-    const verifier = sessionStorage.getItem(key);
-    if (!verifier) {
-      throw new Error("No code verifier saved for session");
-    }
-    return verifier;
-  }
-  clear() {
-    clearClientInformationFromSessionStorage({
-      serverUrl: this.serverUrl,
-      isPreregistered: false
-    });
-    sessionStorage.removeItem(
-      getServerSpecificKey(SESSION_KEYS.TOKENS, this.serverUrl)
-    );
-    sessionStorage.removeItem(
-      getServerSpecificKey(SESSION_KEYS.CODE_VERIFIER, this.serverUrl)
-    );
-  }
-}
-class DebugInspectorOAuthClientProvider extends InspectorOAuthClientProvider {
-  get redirectUrl() {
-    return `${window.location.origin}/oauth/callback/debug`;
-  }
-  saveServerMetadata(metadata) {
-    const key = getServerSpecificKey(
-      SESSION_KEYS.SERVER_METADATA,
-      this.serverUrl
-    );
-    sessionStorage.setItem(key, JSON.stringify(metadata));
-  }
-  getServerMetadata() {
-    const key = getServerSpecificKey(
-      SESSION_KEYS.SERVER_METADATA,
-      this.serverUrl
-    );
-    const metadata = sessionStorage.getItem(key);
-    if (!metadata) {
-      return null;
-    }
-    return JSON.parse(metadata);
-  }
-  clear() {
-    super.clear();
-    sessionStorage.removeItem(
-      getServerSpecificKey(SESSION_KEYS.SERVER_METADATA, this.serverUrl)
-    );
-  }
-}
-let crypto;
-crypto = globalThis.crypto;
+let crypto$1;
+crypto$1 = globalThis.crypto;
 async function getRandomValues(size2) {
-  return (await crypto).getRandomValues(new Uint8Array(size2));
+  return (await crypto$1).getRandomValues(new Uint8Array(size2));
 }
 async function random(size2) {
   const mask = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~";
@@ -16422,7 +16271,7 @@ async function generateVerifier(length) {
   return await random(length);
 }
 async function generateChallenge(code_verifier) {
-  const buffer = await (await crypto).subtle.digest("SHA-256", new TextEncoder().encode(code_verifier));
+  const buffer = await (await crypto$1).subtle.digest("SHA-256", new TextEncoder().encode(code_verifier));
   return btoa(String.fromCharCode(...new Uint8Array(buffer))).replace(/\//g, "_").replace(/\+/g, "-").replace(/=/g, "");
 }
 async function pkceChallenge(length) {
@@ -16653,7 +16502,8 @@ async function authInternal(provider, { serverUrl, authorizationCode, scope, res
     }
     const fullInformation = await registerClient(authorizationServerUrl, {
       metadata,
-      clientMetadata: provider.clientMetadata
+      clientMetadata: provider.clientMetadata,
+      fetchFn
     });
     await provider.saveClientInformation(fullInformation);
     clientInformation = fullInformation;
@@ -16681,7 +16531,8 @@ async function authInternal(provider, { serverUrl, authorizationCode, scope, res
         clientInformation,
         refreshToken: tokens.refresh_token,
         resource,
-        addClientAuthentication: provider.addClientAuthentication
+        addClientAuthentication: provider.addClientAuthentication,
+        fetchFn
       });
       await provider.saveTokens(newTokens);
       return "AUTHORIZED";
@@ -16799,29 +16650,6 @@ async function discoverMetadataWithFallback(serverUrl, wellKnownType, fetchFn, o
   }
   return response;
 }
-async function discoverOAuthMetadata(issuer, { authorizationServerUrl, protocolVersion } = {}, fetchFn = fetch) {
-  if (typeof issuer === "string") {
-    issuer = new URL(issuer);
-  }
-  if (!authorizationServerUrl) {
-    authorizationServerUrl = issuer;
-  }
-  if (typeof authorizationServerUrl === "string") {
-    authorizationServerUrl = new URL(authorizationServerUrl);
-  }
-  protocolVersion !== null && protocolVersion !== void 0 ? protocolVersion : protocolVersion = LATEST_PROTOCOL_VERSION;
-  const response = await discoverMetadataWithFallback(authorizationServerUrl, "oauth-authorization-server", fetchFn, {
-    protocolVersion,
-    metadataServerUrl: authorizationServerUrl
-  });
-  if (!response || response.status === 404) {
-    return void 0;
-  }
-  if (!response.ok) {
-    throw new Error(`HTTP ${response.status} trying to load well-known OAuth metadata`);
-  }
-  return OAuthMetadataSchema.parse(await response.json());
-}
 function buildDiscoveryUrls(authorizationServerUrl) {
   const url = typeof authorizationServerUrl === "string" ? new URL(authorizationServerUrl) : authorizationServerUrl;
   const hasPath = url.pathname !== "/";
@@ -16866,7 +16694,7 @@ async function discoverAuthorizationServerMetadata(authorizationServerUrl, { fet
   for (const { url: endpointUrl, type: type2 } of urlsToTry) {
     const response = await fetchWithCorsRetry(endpointUrl, headers, fetchFn);
     if (!response) {
-      throw new Error(`CORS error trying to load ${type2 === "oauth" ? "OAuth" : "OpenID provider"} metadata from ${endpointUrl}`);
+      continue;
     }
     if (!response.ok) {
       if (response.status >= 400 && response.status < 500) {
@@ -17021,6 +16849,212 @@ async function registerClient(authorizationServerUrl, { metadata, clientMetadata
   }
   return OAuthClientInformationFullSchema.parse(await response.json());
 }
+const parseOAuthCallbackParams = (location) => {
+  const params = new URLSearchParams(location);
+  const code = params.get("code");
+  if (code) {
+    return { successful: true, code };
+  }
+  const error = params.get("error");
+  const error_description = params.get("error_description");
+  const error_uri = params.get("error_uri");
+  if (error) {
+    return { successful: false, error, error_description, error_uri };
+  }
+  return {
+    successful: false,
+    error: "invalid_request",
+    error_description: "Missing code or error in response",
+    error_uri: null
+  };
+};
+const generateOAuthState = () => {
+  const array = new Uint8Array(32);
+  crypto.getRandomValues(array);
+  return Array.from(array, (byte) => byte.toString(16).padStart(2, "0")).join(
+    ""
+  );
+};
+const generateOAuthErrorDescription = (params) => {
+  const error = params.error;
+  const errorDescription = params.error_description;
+  const errorUri = params.error_uri;
+  return [
+    `Error: ${error}.`,
+    errorDescription ? `Details: ${errorDescription}.` : "",
+    errorUri ? `More info: ${errorUri}.` : ""
+  ].filter(Boolean).join("\n");
+};
+const discoverScopes = async (serverUrl, resourceMetadata) => {
+  try {
+    const metadata = await discoverAuthorizationServerMetadata(
+      new URL("/", serverUrl)
+    );
+    const resourceScopes = resourceMetadata == null ? void 0 : resourceMetadata.scopes_supported;
+    const oauthScopes = metadata == null ? void 0 : metadata.scopes_supported;
+    const scopesSupported = resourceScopes && resourceScopes.length > 0 ? resourceScopes : oauthScopes;
+    return scopesSupported && scopesSupported.length > 0 ? scopesSupported.join(" ") : void 0;
+  } catch (error) {
+    console.debug("OAuth scope discovery failed:", error);
+    return void 0;
+  }
+};
+const getClientInformationFromSessionStorage = async ({
+  serverUrl,
+  isPreregistered
+}) => {
+  const key = getServerSpecificKey(
+    isPreregistered ? SESSION_KEYS.PREREGISTERED_CLIENT_INFORMATION : SESSION_KEYS.CLIENT_INFORMATION,
+    serverUrl
+  );
+  const value = sessionStorage.getItem(key);
+  if (!value) {
+    return void 0;
+  }
+  return await OAuthClientInformationSchema.parseAsync(JSON.parse(value));
+};
+const saveClientInformationToSessionStorage = ({
+  serverUrl,
+  clientInformation,
+  isPreregistered
+}) => {
+  const key = getServerSpecificKey(
+    isPreregistered ? SESSION_KEYS.PREREGISTERED_CLIENT_INFORMATION : SESSION_KEYS.CLIENT_INFORMATION,
+    serverUrl
+  );
+  sessionStorage.setItem(key, JSON.stringify(clientInformation));
+};
+const clearClientInformationFromSessionStorage = ({
+  serverUrl,
+  isPreregistered
+}) => {
+  const key = getServerSpecificKey(
+    isPreregistered ? SESSION_KEYS.PREREGISTERED_CLIENT_INFORMATION : SESSION_KEYS.CLIENT_INFORMATION,
+    serverUrl
+  );
+  sessionStorage.removeItem(key);
+};
+class InspectorOAuthClientProvider {
+  constructor(serverUrl) {
+    this.serverUrl = serverUrl;
+    sessionStorage.setItem(SESSION_KEYS.SERVER_URL, serverUrl);
+  }
+  get redirectUrl() {
+    return window.location.origin + "/oauth/callback";
+  }
+  get clientMetadata() {
+    return {
+      redirect_uris: [this.redirectUrl],
+      token_endpoint_auth_method: "none",
+      grant_types: ["authorization_code", "refresh_token"],
+      response_types: ["code"],
+      client_name: "MCP Inspector",
+      client_uri: "https://github.com/modelcontextprotocol/inspector"
+    };
+  }
+  state() {
+    return generateOAuthState();
+  }
+  async clientInformation() {
+    const preregisteredClientInformation = await getClientInformationFromSessionStorage({
+      serverUrl: this.serverUrl,
+      isPreregistered: true
+    });
+    return preregisteredClientInformation ?? await getClientInformationFromSessionStorage({
+      serverUrl: this.serverUrl,
+      isPreregistered: false
+    });
+  }
+  saveClientInformation(clientInformation) {
+    const safeInfo = Object.fromEntries(
+      Object.entries(clientInformation).filter(
+        ([key]) => key !== "client_secret"
+      )
+    );
+    saveClientInformationToSessionStorage({
+      serverUrl: this.serverUrl,
+      clientInformation: safeInfo,
+      isPreregistered: false
+    });
+  }
+  async tokens() {
+    const key = getServerSpecificKey(SESSION_KEYS.TOKENS, this.serverUrl);
+    const tokens = sessionStorage.getItem(key);
+    if (!tokens) {
+      return void 0;
+    }
+    return await OAuthTokensSchema.parseAsync(JSON.parse(tokens));
+  }
+  saveTokens(tokens) {
+    const key = getServerSpecificKey(SESSION_KEYS.TOKENS, this.serverUrl);
+    sessionStorage.setItem(key, JSON.stringify(tokens));
+  }
+  redirectToAuthorization(authorizationUrl) {
+    if (authorizationUrl.protocol !== "http:" && authorizationUrl.protocol !== "https:") {
+      throw new Error("Authorization URL must be HTTP or HTTPS");
+    }
+    window.location.href = authorizationUrl.href;
+  }
+  saveCodeVerifier(codeVerifier) {
+    const key = getServerSpecificKey(
+      SESSION_KEYS.CODE_VERIFIER,
+      this.serverUrl
+    );
+    sessionStorage.setItem(key, codeVerifier);
+  }
+  codeVerifier() {
+    const key = getServerSpecificKey(
+      SESSION_KEYS.CODE_VERIFIER,
+      this.serverUrl
+    );
+    const verifier = sessionStorage.getItem(key);
+    if (!verifier) {
+      throw new Error("No code verifier saved for session");
+    }
+    return verifier;
+  }
+  clear() {
+    clearClientInformationFromSessionStorage({
+      serverUrl: this.serverUrl,
+      isPreregistered: false
+    });
+    sessionStorage.removeItem(
+      getServerSpecificKey(SESSION_KEYS.TOKENS, this.serverUrl)
+    );
+    sessionStorage.removeItem(
+      getServerSpecificKey(SESSION_KEYS.CODE_VERIFIER, this.serverUrl)
+    );
+  }
+}
+class DebugInspectorOAuthClientProvider extends InspectorOAuthClientProvider {
+  get redirectUrl() {
+    return `${window.location.origin}/oauth/callback/debug`;
+  }
+  saveServerMetadata(metadata) {
+    const key = getServerSpecificKey(
+      SESSION_KEYS.SERVER_METADATA,
+      this.serverUrl
+    );
+    sessionStorage.setItem(key, JSON.stringify(metadata));
+  }
+  getServerMetadata() {
+    const key = getServerSpecificKey(
+      SESSION_KEYS.SERVER_METADATA,
+      this.serverUrl
+    );
+    const metadata = sessionStorage.getItem(key);
+    if (!metadata) {
+      return null;
+    }
+    return JSON.parse(metadata);
+  }
+  clear() {
+    super.clear();
+    sessionStorage.removeItem(
+      getServerSpecificKey(SESSION_KEYS.SERVER_METADATA, this.serverUrl)
+    );
+  }
+}
 const oauthTransitions = {
   metadata_discovery: {
     canTransition: async () => true,
@@ -17049,7 +17083,7 @@ const oauthTransitions = {
         // we default to null, so swap it for undefined if not set
         resourceMetadata ?? void 0
       );
-      const metadata = await discoverOAuthMetadata(authServerUrl);
+      const metadata = await discoverAuthorizationServerMetadata(authServerUrl);
       if (!metadata) {
         throw new Error("Failed to discover OAuth metadata");
       }
@@ -17075,11 +17109,14 @@ const oauthTransitions = {
       if (scopesSupported) {
         clientMetadata.scope = scopesSupported.join(" ");
       }
-      const fullInformation = await registerClient(context.serverUrl, {
-        metadata,
-        clientMetadata
-      });
-      context.provider.saveClientInformation(fullInformation);
+      let fullInformation = await context.provider.clientInformation();
+      if (!fullInformation) {
+        fullInformation = await registerClient(context.serverUrl, {
+          metadata,
+          clientMetadata
+        });
+        context.provider.saveClientInformation(fullInformation);
+      }
       context.updateState({
         oauthClientInfo: fullInformation,
         oauthStep: "authorization_redirect"
@@ -17091,10 +17128,10 @@ const oauthTransitions = {
     execute: async (context) => {
       const metadata = context.state.oauthMetadata;
       const clientInformation = context.state.oauthClientInfo;
-      let scope = void 0;
-      if (metadata.scopes_supported) {
-        scope = metadata.scopes_supported.join(" ");
-      }
+      const scope = await discoverScopes(
+        context.serverUrl,
+        context.state.resourceMetadata ?? void 0
+      );
       const { authorizationUrl, codeVerifier } = await startAuthorization(
         context.serverUrl,
         {
@@ -17102,6 +17139,7 @@ const oauthTransitions = {
           clientInformation,
           redirectUrl: context.provider.redirectUrl,
           scope,
+          state: generateOAuthState(),
           resource: context.state.resource ?? void 0
         }
       );
@@ -17186,7 +17224,7 @@ function requireUri_all() {
   (function(module, exports) {
     (function(global2, factory) {
       factory(exports);
-    })(uri_all, function(exports2) {
+    })(uri_all, (function(exports2) {
       function merge() {
         for (var _len = arguments.length, sets = Array(_len), _key = 0; _key < _len; _key++) {
           sets[_key] = arguments[_key];
@@ -17253,7 +17291,7 @@ function requireUri_all() {
       }
       var URI_PROTOCOL = buildExps(false);
       var IRI_PROTOCOL = buildExps(true);
-      var slicedToArray = /* @__PURE__ */ function() {
+      var slicedToArray = /* @__PURE__ */ (function() {
         function sliceIterator(arr, i) {
           var _arr = [];
           var _n = true;
@@ -17285,7 +17323,7 @@ function requireUri_all() {
             throw new TypeError("Invalid attempt to destructure non-iterable instance");
           }
         };
-      }();
+      })();
       var toConsumableArray = function(arr) {
         if (Array.isArray(arr)) {
           for (var i = 0, arr2 = Array(arr.length); i < arr.length; i++) arr2[i] = arr[i];
@@ -18200,7 +18238,7 @@ function requireUri_all() {
       exports2.escapeComponent = escapeComponent;
       exports2.unescapeComponent = unescapeComponent;
       Object.defineProperty(exports2, "__esModule", { value: true });
-    });
+    }));
   })(uri_all$1, uri_all$1.exports);
   return uri_all$1.exports;
 }
@@ -18794,7 +18832,7 @@ function requireFastJsonStableStringify() {
     if (!opts) opts = {};
     if (typeof opts === "function") opts = { cmp: opts };
     var cycles = typeof opts.cycles === "boolean" ? opts.cycles : false;
-    var cmp = opts.cmp && /* @__PURE__ */ function(f) {
+    var cmp = opts.cmp && /* @__PURE__ */ (function(f) {
       return function(node) {
         return function(a, b) {
           var aobj = { key: a, value: node[a] };
@@ -18802,9 +18840,9 @@ function requireFastJsonStableStringify() {
           return f(aobj, bobj);
         };
       };
-    }(opts.cmp);
+    })(opts.cmp);
     var seen2 = [];
-    return function stringify(node) {
+    return (function stringify(node) {
       if (node && node.toJSON && typeof node.toJSON === "function") {
         node = node.toJSON();
       }
@@ -18837,7 +18875,7 @@ function requireFastJsonStableStringify() {
       }
       seen2.splice(seenIndex, 1);
       return "{" + out + "}";
-    }(data2);
+    })(data2);
   };
   return fastJsonStableStringify;
 }
@@ -23290,6 +23328,33 @@ function isPropertyRequired(propertyName, schema) {
   var _a;
   return ((_a = schema.required) == null ? void 0 : _a.includes(propertyName)) ?? false;
 }
+function normalizeUnionType(schema) {
+  if (schema.anyOf && schema.anyOf.length === 2 && schema.anyOf.some((t) => t.type === "string") && schema.anyOf.some((t) => t.type === "null")) {
+    return { ...schema, type: "string", anyOf: void 0 };
+  }
+  if (schema.anyOf && schema.anyOf.length === 2 && schema.anyOf.some((t) => t.type === "boolean") && schema.anyOf.some((t) => t.type === "null")) {
+    return { ...schema, type: "boolean", anyOf: void 0 };
+  }
+  if (schema.anyOf && schema.anyOf.length === 2 && schema.anyOf.some((t) => t.type === "number") && schema.anyOf.some((t) => t.type === "null")) {
+    return { ...schema, type: "number", anyOf: void 0 };
+  }
+  if (schema.anyOf && schema.anyOf.length === 2 && schema.anyOf.some((t) => t.type === "integer") && schema.anyOf.some((t) => t.type === "null")) {
+    return { ...schema, type: "integer", anyOf: void 0 };
+  }
+  if (Array.isArray(schema.type) && schema.type.length === 2 && schema.type.includes("string") && schema.type.includes("null")) {
+    return { ...schema, type: "string" };
+  }
+  if (Array.isArray(schema.type) && schema.type.length === 2 && schema.type.includes("boolean") && schema.type.includes("null")) {
+    return { ...schema, type: "boolean" };
+  }
+  if (Array.isArray(schema.type) && schema.type.length === 2 && schema.type.includes("number") && schema.type.includes("null")) {
+    return { ...schema, type: "number" };
+  }
+  if (Array.isArray(schema.type) && schema.type.length === 2 && schema.type.includes("integer") && schema.type.includes("null")) {
+    return { ...schema, type: "integer" };
+  }
+  return schema;
+}
 const DEFAULT_REQUEST_TIMEOUT_MSEC = 6e4;
 class Protocol {
   constructor(_options) {
@@ -23404,10 +23469,11 @@ class Protocol {
     Promise.resolve().then(() => handler(notification)).catch((error) => this._onerror(new Error(`Uncaught error in notification handler: ${error}`)));
   }
   _onrequest(request, extra) {
-    var _a, _b, _c, _d;
+    var _a, _b;
     const handler = (_a = this._requestHandlers.get(request.method)) !== null && _a !== void 0 ? _a : this.fallbackRequestHandler;
+    const capturedTransport = this._transport;
     if (handler === void 0) {
-      (_b = this._transport) === null || _b === void 0 ? void 0 : _b.send({
+      capturedTransport === null || capturedTransport === void 0 ? void 0 : capturedTransport.send({
         jsonrpc: "2.0",
         id: request.id,
         error: {
@@ -23421,8 +23487,8 @@ class Protocol {
     this._requestHandlerAbortControllers.set(request.id, abortController);
     const fullExtra = {
       signal: abortController.signal,
-      sessionId: (_c = this._transport) === null || _c === void 0 ? void 0 : _c.sessionId,
-      _meta: (_d = request.params) === null || _d === void 0 ? void 0 : _d._meta,
+      sessionId: capturedTransport === null || capturedTransport === void 0 ? void 0 : capturedTransport.sessionId,
+      _meta: (_b = request.params) === null || _b === void 0 ? void 0 : _b._meta,
       sendNotification: (notification) => this.notification(notification, { relatedRequestId: request.id }),
       sendRequest: (r2, resultSchema, options) => this.request(r2, resultSchema, { ...options, relatedRequestId: request.id }),
       authInfo: extra === null || extra === void 0 ? void 0 : extra.authInfo,
@@ -23430,26 +23496,25 @@ class Protocol {
       requestInfo: extra === null || extra === void 0 ? void 0 : extra.requestInfo
     };
     Promise.resolve().then(() => handler(request, fullExtra)).then((result) => {
-      var _a2;
       if (abortController.signal.aborted) {
         return;
       }
-      return (_a2 = this._transport) === null || _a2 === void 0 ? void 0 : _a2.send({
+      return capturedTransport === null || capturedTransport === void 0 ? void 0 : capturedTransport.send({
         result,
         jsonrpc: "2.0",
         id: request.id
       });
     }, (error) => {
-      var _a2, _b2;
+      var _a2;
       if (abortController.signal.aborted) {
         return;
       }
-      return (_a2 = this._transport) === null || _a2 === void 0 ? void 0 : _a2.send({
+      return capturedTransport === null || capturedTransport === void 0 ? void 0 : capturedTransport.send({
         jsonrpc: "2.0",
         id: request.id,
         error: {
           code: Number.isSafeInteger(error["code"]) ? error["code"] : ErrorCode.InternalError,
-          message: (_b2 = error.message) !== null && _b2 !== void 0 ? _b2 : "Internal error"
+          message: (_a2 = error.message) !== null && _a2 !== void 0 ? _a2 : "Internal error"
         }
       });
     }).catch((error) => this._onerror(new Error(`Failed to send response: ${error}`))).finally(() => {
@@ -24779,7 +24844,7 @@ const StdErrNotificationSchema = NotificationSchema.extend({
 ClientNotificationSchema.or(
   StdErrNotificationSchema
 ).or(ServerNotificationSchema).or(NotificationSchema);
-const version$1 = "0.16.2";
+const version$1 = "0.16.4";
 const packageJson = {
   version: version$1
 };
@@ -24914,7 +24979,8 @@ function useConnection({
   onStdErrNotification,
   onPendingRequest,
   onElicitationRequest,
-  getRoots
+  getRoots,
+  defaultLoggingLevel
 }) {
   const [connectionStatus, setConnectionStatus] = reactExports.useState("disconnected");
   const { toast: toast2 } = useToast();
@@ -24992,7 +25058,7 @@ function useConnection({
       throw e;
     }
   };
-  const handleCompletion = async (ref2, argName, value, signal) => {
+  const handleCompletion = async (ref2, argName, value, context, signal) => {
     if (!mcpClient || !completionsSupported) {
       return [];
     }
@@ -25006,6 +25072,11 @@ function useConnection({
         ref: ref2
       }
     };
+    if (context) {
+      request["params"]["context"] = {
+        arguments: context
+      };
+    }
     try {
       const response = await makeRequest(request, CompleteResultSchema, {
         signal,
@@ -25077,9 +25148,20 @@ function useConnection({
   const handleAuthError = async (error) => {
     if (is401Error(error)) {
       const serverAuthProvider = new InspectorOAuthClientProvider(sseUrl);
+      let scope = oauthScope == null ? void 0 : oauthScope.trim();
+      if (!scope) {
+        let resourceMetadata;
+        try {
+          resourceMetadata = await discoverOAuthProtectedResourceMetadata(
+            new URL("/", sseUrl)
+          );
+        } catch {
+        }
+        scope = await discoverScopes(sseUrl, resourceMetadata);
+      }
       const result = await auth(serverAuthProvider, {
         serverUrl: sseUrl,
-        scope: oauthScope
+        scope
       });
       return result === "AUTHORIZED";
     }
@@ -25108,6 +25190,7 @@ function useConnection({
       setConnectionStatus("error-connecting-to-proxy");
       return;
     }
+    let lastRequest = "";
     try {
       const headers = {};
       const serverAuthProvider = new InspectorOAuthClientProvider(sseUrl);
@@ -25268,6 +25351,11 @@ function useConnection({
           return { roots: getRoots() };
         });
       }
+      if ((capabilities == null ? void 0 : capabilities.logging) && defaultLoggingLevel) {
+        lastRequest = "logging/setLevel";
+        await client2.setLoggingLevel(defaultLoggingLevel);
+        lastRequest = "";
+      }
       if (onElicitationRequest) {
         client2.setRequestHandler(ElicitRequestSchema, async (request) => {
           return new Promise((resolve) => {
@@ -25278,6 +25366,13 @@ function useConnection({
       setMcpClient(client2);
       setConnectionStatus("connected");
     } catch (e) {
+      if (lastRequest === "logging/setLevel" && e instanceof McpError && e.code === ErrorCode.MethodNotFound) {
+        toast2({
+          title: "Error",
+          description: `Server declares logging capability but doesn't implement method: "${lastRequest}"`,
+          variant: "destructive"
+        });
+      }
       console.error(e);
       setConnectionStatus("error");
     }
@@ -29552,7 +29647,7 @@ const flip$2 = function(options) {
           const ignoreCrossAxisOverflow = checkCrossAxis === "alignment" ? initialSideAxis !== getSideAxis(nextPlacement) : false;
           if (!ignoreCrossAxisOverflow || // We leave the current main axis only if every placement on that axis
           // overflows the main axis.
-          overflowsData.every((d) => d.overflows[0] > 0 && getSideAxis(d.placement) === initialSideAxis)) {
+          overflowsData.every((d) => getSideAxis(d.placement) === initialSideAxis ? d.overflows[0] > 0 : true)) {
             return {
               data: {
                 index: nextIndex,
@@ -31042,8 +31137,13 @@ var PopperAnchor = reactExports.forwardRef(
     const context = usePopperContext(ANCHOR_NAME$1, __scopePopper);
     const ref2 = reactExports.useRef(null);
     const composedRefs = useComposedRefs(forwardedRef, ref2);
+    const anchorRef = reactExports.useRef(null);
     reactExports.useEffect(() => {
-      context.onAnchorChange((virtualRef == null ? void 0 : virtualRef.current) || ref2.current);
+      const previousAnchor = anchorRef.current;
+      anchorRef.current = (virtualRef == null ? void 0 : virtualRef.current) || ref2.current;
+      if (previousAnchor !== anchorRef.current) {
+        context.onAnchorChange(anchorRef.current);
+      }
     });
     return virtualRef ? null : /* @__PURE__ */ jsxRuntimeExports.jsx(Primitive.div, { ...anchorProps, ref: composedRefs });
   }
@@ -31767,7 +31867,7 @@ function useCompletionState(handleCompletion, completionsSupported = true, debou
   }, [cleanup]);
   const requestCompletions = reactExports.useMemo(() => {
     return debounce(
-      async (ref2, argName, value) => {
+      async (ref2, argName, value, context) => {
         if (!completionsSupported) {
           return;
         }
@@ -31779,10 +31879,14 @@ function useCompletionState(handleCompletion, completionsSupported = true, debou
           loading: { ...prev.loading, [argName]: true }
         }));
         try {
+          if (context !== void 0) {
+            delete context[argName];
+          }
           const values = await handleCompletion(
             ref2,
             argName,
             value,
+            context,
             abortController.signal
           );
           if (!abortController.signal.aborted) {
@@ -31793,6 +31897,7 @@ function useCompletionState(handleCompletion, completionsSupported = true, debou
             }));
           }
         } catch {
+          console.error("completion failed");
           if (!abortController.signal.aborted) {
             setState((prev) => ({
               ...prev,
@@ -31848,7 +31953,8 @@ const PromptsTab = ({
           name: selectedPrompt.name
         },
         argName,
-        value
+        value,
+        promptArgs
       );
     }
   };
@@ -32174,7 +32280,8 @@ const ResourcesTab = ({
           uri: selectedTemplate.uriTemplate
         },
         key,
-        value
+        value,
+        templateValues
       );
     }
   };
@@ -32412,7 +32519,7 @@ function requireLib() {
     };
     return __assign2.apply(this, arguments);
   };
-  var __createBinding = lib && lib.__createBinding || (Object.create ? function(o, m2, k2, k22) {
+  var __createBinding = lib && lib.__createBinding || (Object.create ? (function(o, m2, k2, k22) {
     if (k22 === void 0) k22 = k2;
     var desc = Object.getOwnPropertyDescriptor(m2, k2);
     if (!desc || ("get" in desc ? !m2.__esModule : desc.writable || desc.configurable)) {
@@ -32421,13 +32528,13 @@ function requireLib() {
       } };
     }
     Object.defineProperty(o, k22, desc);
-  } : function(o, m2, k2, k22) {
+  }) : (function(o, m2, k2, k22) {
     if (k22 === void 0) k22 = k2;
     o[k22] = m2[k2];
-  });
-  var __setModuleDefault = lib && lib.__setModuleDefault || (Object.create ? function(o, v) {
+  }));
+  var __setModuleDefault = lib && lib.__setModuleDefault || (Object.create ? (function(o, v) {
     Object.defineProperty(o, "default", { enumerable: true, value: v });
-  } : function(o, v) {
+  }) : function(o, v) {
     o["default"] = v;
   });
   var __importStar = lib && lib.__importStar || function(mod) {
@@ -32813,7 +32920,7 @@ function requirePrism() {
      * @namespace
      * @public
      */
-    var Prism2 = function(_self2) {
+    var Prism2 = (function(_self2) {
       var lang = /(?:^|\s)lang(?:uage)?-([\w-]+)(?=\s|$)/i;
       var uniqueId = 0;
       var plainTextGrammar = {};
@@ -33698,7 +33805,7 @@ function requirePrism() {
         }
       }
       return _;
-    }(_self);
+    })(_self);
     if (module.exports) {
       module.exports = Prism2;
     }
@@ -34329,12 +34436,18 @@ const JsonEditor = ({
     displayError && /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-sm text-red-500 mt-1", children: displayError })
   ] });
 };
+const isTypeSupported = (type2, supportedTypes) => {
+  if (Array.isArray(type2)) {
+    return type2.every((t) => supportedTypes.includes(t));
+  }
+  return typeof type2 === "string" && supportedTypes.includes(type2);
+};
 const isSimpleObject = (schema) => {
   const supportedTypes = ["string", "number", "integer", "boolean", "null"];
-  if (schema.type && supportedTypes.includes(schema.type)) return true;
+  if (schema.type && isTypeSupported(schema.type, supportedTypes)) return true;
   if (schema.type === "object") {
     return Object.values(schema.properties ?? {}).every(
-      (prop) => prop.type && supportedTypes.includes(prop.type)
+      (prop) => prop.type && isTypeSupported(prop.type, supportedTypes)
     );
   }
   if (schema.type === "array") {
@@ -34457,7 +34570,11 @@ const DynamicJsonForm = ({
       );
     }
     const isRequired = ((_a = parentSchema == null ? void 0 : parentSchema.required) == null ? void 0 : _a.includes(propertyName || "")) ?? false;
-    switch (propSchema.type) {
+    let fieldType = propSchema.type;
+    if (Array.isArray(fieldType)) {
+      fieldType = fieldType.find((t) => t !== "null") ?? fieldType[0];
+    }
+    switch (fieldType) {
       case "string": {
         if (propSchema.oneOf && propSchema.oneOf.every(
           (option) => typeof option.const === "string" && typeof option.title === "string"
@@ -34605,6 +34722,8 @@ const DynamicJsonForm = ({
             required: isRequired
           }
         );
+      case "null":
+        return null;
       case "object":
         if (!propSchema.properties) {
           return /* @__PURE__ */ jsxRuntimeExports.jsx(
@@ -36263,7 +36382,7 @@ const useTheme = () => {
     [theme, setThemeWithSideEffect]
   );
 };
-const version = "0.16.2";
+const version = "0.16.4";
 var [createTooltipContext, createTooltipScope] = createContextScope("Tooltip", [
   createPopperScope
 ]);
@@ -37917,6 +38036,10 @@ const ToolResults = ({
           )
         ] })
       ] }),
+      structuredResult._meta && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "mb-4", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsx("h5", { className: "font-semibold mb-2 text-sm", children: "Meta:" }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "bg-gray-50 dark:bg-gray-900 p-3 rounded-lg", children: /* @__PURE__ */ jsxRuntimeExports.jsx(JsonView, { data: structuredResult._meta }) })
+      ] }),
       !structuredResult.structuredContent && validationResult && !validationResult.isValid && /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "mb-4", children: /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "bg-red-100 dark:bg-red-900 text-red-800 dark:text-red-200 p-2 rounded text-sm", children: [
         "✗ Validation Error: ",
         validationResult.error
@@ -37980,6 +38103,7 @@ const ToolResults = ({
   }
   return null;
 };
+const hasMeta = (tool) => typeof tool._meta !== "undefined";
 const ToolsTab = ({
   tools,
   listTools,
@@ -37995,6 +38119,7 @@ const ToolsTab = ({
   const [params, setParams] = reactExports.useState({});
   const [isToolRunning, setIsToolRunning] = reactExports.useState(false);
   const [isOutputSchemaExpanded, setIsOutputSchemaExpanded] = reactExports.useState(false);
+  const [isMetaExpanded, setIsMetaExpanded] = reactExports.useState(false);
   reactExports.useEffect(() => {
     const params2 = Object.entries(
       (selectedTool == null ? void 0 : selectedTool.inputSchema.properties) ?? []
@@ -38034,7 +38159,7 @@ const ToolsTab = ({
         /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-sm text-gray-600 dark:text-gray-400", children: selectedTool.description }),
         Object.entries(selectedTool.inputSchema.properties ?? []).map(
           ([key, value]) => {
-            const prop = value;
+            const prop = normalizeUnionType(value);
             const inputSchema = selectedTool.inputSchema;
             const required2 = isPropertyRequired(key, inputSchema);
             return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { children: [
@@ -38079,7 +38204,7 @@ const ToolsTab = ({
                   value: params[key] ?? "",
                   onChange: (e) => setParams({
                     ...params,
-                    [key]: e.target.value
+                    [key]: e.target.value === "" ? void 0 : e.target.value
                   }),
                   className: "mt-1"
                 }
@@ -38166,6 +38291,34 @@ const ToolsTab = ({
             }
           )
         ] }),
+        selectedTool && hasMeta(selectedTool) && selectedTool._meta && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "bg-gray-50 dark:bg-gray-900 p-3 rounded-lg", children: [
+          /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center justify-between mb-2", children: [
+            /* @__PURE__ */ jsxRuntimeExports.jsx("h4", { className: "text-sm font-semibold", children: "Meta:" }),
+            /* @__PURE__ */ jsxRuntimeExports.jsx(
+              Button,
+              {
+                size: "sm",
+                variant: "ghost",
+                onClick: () => setIsMetaExpanded(!isMetaExpanded),
+                className: "h-6 px-2",
+                children: isMetaExpanded ? /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
+                  /* @__PURE__ */ jsxRuntimeExports.jsx(ChevronUp, { className: "h-3 w-3 mr-1" }),
+                  "Collapse"
+                ] }) : /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
+                  /* @__PURE__ */ jsxRuntimeExports.jsx(ChevronDown, { className: "h-3 w-3 mr-1" }),
+                  "Expand"
+                ] })
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx(
+            "div",
+            {
+              className: `transition-all ${isMetaExpanded ? "" : "max-h-[8rem] overflow-y-auto"}`,
+              children: /* @__PURE__ */ jsxRuntimeExports.jsx(JsonView, { data: selectedTool._meta })
+            }
+          )
+        ] }),
         /* @__PURE__ */ jsxRuntimeExports.jsx(
           Button,
           {
@@ -38471,7 +38624,8 @@ const App = () => {
       setActiveTab("elicitations");
       window.location.hash = "elicitations";
     },
-    getRoots: () => rootsRef.current
+    getRoots: () => rootsRef.current,
+    defaultLoggingLevel: logLevel
   });
   reactExports.useEffect(() => {
     if (serverCapabilities) {
@@ -38624,6 +38778,14 @@ const App = () => {
       if (data2.defaultArgs) {
         setArgs(data2.defaultArgs);
       }
+      if (data2.defaultTransport) {
+        setTransportType(
+          data2.defaultTransport
+        );
+      }
+      if (data2.defaultServerUrl) {
+        setSseUrl(data2.defaultServerUrl);
+      }
     }).catch(
       (error) => console.error("Error fetching default environment:", error)
     );
@@ -38632,10 +38794,17 @@ const App = () => {
     rootsRef.current = roots;
   }, [roots]);
   reactExports.useEffect(() => {
-    if (!window.location.hash) {
-      window.location.hash = "resources";
+    if (mcpClient && !window.location.hash) {
+      const defaultTab = (serverCapabilities == null ? void 0 : serverCapabilities.resources) ? "resources" : (serverCapabilities == null ? void 0 : serverCapabilities.prompts) ? "prompts" : (serverCapabilities == null ? void 0 : serverCapabilities.tools) ? "tools" : "ping";
+      window.location.hash = defaultTab;
+    } else if (!mcpClient && window.location.hash) {
+      window.history.replaceState(
+        null,
+        "",
+        window.location.pathname + window.location.search
+      );
     }
-  }, []);
+  }, [mcpClient, serverCapabilities]);
   reactExports.useEffect(() => {
     const handleHashChange = () => {
       const hash = window.location.hash.slice(1);
@@ -38879,13 +39048,13 @@ const App = () => {
   ) });
   if (window.location.pathname === "/oauth/callback") {
     const OAuthCallback = React.lazy(
-      () => __vitePreload(() => import("./OAuthCallback-CC1cu0Zx.js"), true ? __vite__mapDeps([0,1]) : void 0)
+      () => __vitePreload(() => import("./OAuthCallback-DyaAiF-O.js"), true ? [] : void 0)
     );
     return /* @__PURE__ */ jsxRuntimeExports.jsx(reactExports.Suspense, { fallback: /* @__PURE__ */ jsxRuntimeExports.jsx("div", { children: "Loading..." }), children: /* @__PURE__ */ jsxRuntimeExports.jsx(OAuthCallback, { onConnect: onOAuthConnect }) });
   }
   if (window.location.pathname === "/oauth/callback/debug") {
     const OAuthDebugCallback = React.lazy(
-      () => __vitePreload(() => import("./OAuthDebugCallback-_4BLxVDe.js"), true ? __vite__mapDeps([2,1]) : void 0)
+      () => __vitePreload(() => import("./OAuthDebugCallback-BD-zJllm.js"), true ? [] : void 0)
     );
     return /* @__PURE__ */ jsxRuntimeExports.jsx(reactExports.Suspense, { fallback: /* @__PURE__ */ jsxRuntimeExports.jsx("div", { children: "Loading..." }), children: /* @__PURE__ */ jsxRuntimeExports.jsx(OAuthDebugCallback, { onConnect: onOAuthDebugConnect }) });
   }
@@ -39253,7 +39422,9 @@ export {
   InspectorOAuthClientProvider as I,
   SESSION_KEYS as S,
   auth as a,
+  generateOAuthErrorDescription as g,
   jsxRuntimeExports as j,
+  parseOAuthCallbackParams as p,
   reactExports as r,
   useToast as u
 };