@modelcontextprotocol/inspector 0.16.5 → 0.16.7

package/client/dist/assets/{index-BIvDs4Sc.js → index-Dg7mXHRE.js}

@@ -15121,6 +15121,7 @@ const enumType = ZodEnum.create;
 ZodPromise.create;
 const optionalType = ZodOptional.create;
 ZodNullable.create;
+const NEVER = INVALID;
 const LATEST_PROTOCOL_VERSION = "2025-06-18";
 const SUPPORTED_PROTOCOL_VERSIONS = [
   LATEST_PROTOCOL_VERSION,
@@ -15229,6 +15230,20 @@ const CancelledNotificationSchema = NotificationSchema.extend({
     reason: stringType().optional()
   })
 });
+const IconSchema = objectType({
+  /**
+   * URL or data URI for the icon.
+   */
+  src: stringType(),
+  /**
+   * Optional MIME type for the icon.
+   */
+  mimeType: optionalType(stringType()),
+  /**
+   * Optional string specifying icon dimensions (e.g., "48x48 96x96").
+   */
+  sizes: optionalType(stringType())
+}).passthrough();
 const BaseMetadataSchema = objectType({
   /** Intended for programmatic or logical use, but used as a display name in past specs or fallback */
   name: stringType(),
@@ -15243,7 +15258,20 @@ const BaseMetadataSchema = objectType({
   title: optionalType(stringType())
 }).passthrough();
 const ImplementationSchema = BaseMetadataSchema.extend({
-  version: stringType()
+  version: stringType(),
+  /**
+   * An optional URL of the website for this implementation.
+   */
+  websiteUrl: optionalType(stringType()),
+  /**
+   * An optional list of icons for this implementation.
+   * This can be used by clients to display the implementation in a user interface.
+   * Each icon should have a `kind` property that specifies whether it is a data representation or a URL source, a `src` property that points to the icon file or data representation, and may also include a `mimeType` and `sizes` property.
+   * The `mimeType` property should be a valid MIME type for the icon file, such as "image/png" or "image/svg+xml".
+   * The `sizes` property should be a string that specifies one or more sizes at which the icon file can be used, such as "48x48" or "any" for scalable formats like SVG.
+   * The `sizes` property is optional, and if not provided, the client should assume that the icon can be used at any size.
+   */
+  icons: optionalType(arrayType(IconSchema))
 });
 const ClientCapabilitiesSchema = objectType({
   /**
@@ -15434,6 +15462,10 @@ const ResourceSchema = BaseMetadataSchema.extend({
    * The MIME type of this resource, if known.
    */
   mimeType: optionalType(stringType()),
+  /**
+   * An optional list of icons for this resource.
+   */
+  icons: optionalType(arrayType(IconSchema)),
   /**
    * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
    * for notes on _meta usage.
@@ -15538,6 +15570,10 @@ const PromptSchema = BaseMetadataSchema.extend({
    * A list of arguments to use for templating the prompt.
    */
   arguments: optionalType(arrayType(PromptArgumentSchema)),
+  /**
+   * An optional list of icons for this prompt.
+   */
+  icons: optionalType(arrayType(IconSchema)),
   /**
    * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
    * for notes on _meta usage.
@@ -15705,6 +15741,10 @@ const ToolSchema = BaseMetadataSchema.extend({
    * Optional additional tool information.
    */
   annotations: optionalType(ToolAnnotationsSchema),
+  /**
+   * An optional list of icons for this tool.
+   */
+  icons: optionalType(arrayType(IconSchema)),
   /**
    * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
    * for notes on _meta usage.
@@ -16023,7 +16063,7 @@ unionType([
   CallToolRequestSchema,
   ListToolsRequestSchema
 ]);
-const ClientNotificationSchema = unionType([
+unionType([
   CancelledNotificationSchema,
   ProgressNotificationSchema,
   InitializedNotificationSchema,
@@ -16041,7 +16081,7 @@ unionType([
   ElicitRequestSchema,
   ListRootsRequestSchema
 ]);
-const ServerNotificationSchema = unionType([
+unionType([
   CancelledNotificationSchema,
   ProgressNotificationSchema,
   LoggingMessageNotificationSchema,
@@ -16070,9 +16110,22 @@ class McpError extends Error {
     this.name = "McpError";
   }
 }
+const SafeUrlSchema = stringType().url().superRefine((val, ctx) => {
+  if (!URL.canParse(val)) {
+    ctx.addIssue({
+      code: ZodIssueCode.custom,
+      message: "URL must be parseable",
+      fatal: true
+    });
+    return NEVER;
+  }
+}).refine((url) => {
+  const u2 = new URL(url);
+  return u2.protocol !== "javascript:" && u2.protocol !== "data:" && u2.protocol !== "vbscript:";
+}, { message: "URL cannot use javascript:, data:, or vbscript: scheme" });
 const OAuthProtectedResourceMetadataSchema = objectType({
   resource: stringType().url(),
-  authorization_servers: arrayType(stringType().url()).optional(),
+  authorization_servers: arrayType(SafeUrlSchema).optional(),
   jwks_uri: stringType().url().optional(),
   scopes_supported: arrayType(stringType()).optional(),
   bearer_methods_supported: arrayType(stringType()).optional(),
@@ -16088,17 +16141,17 @@ const OAuthProtectedResourceMetadataSchema = objectType({
 }).passthrough();
 const OAuthMetadataSchema = objectType({
   issuer: stringType(),
-  authorization_endpoint: stringType(),
-  token_endpoint: stringType(),
-  registration_endpoint: stringType().optional(),
+  authorization_endpoint: SafeUrlSchema,
+  token_endpoint: SafeUrlSchema,
+  registration_endpoint: SafeUrlSchema.optional(),
   scopes_supported: arrayType(stringType()).optional(),
   response_types_supported: arrayType(stringType()),
   response_modes_supported: arrayType(stringType()).optional(),
   grant_types_supported: arrayType(stringType()).optional(),
   token_endpoint_auth_methods_supported: arrayType(stringType()).optional(),
   token_endpoint_auth_signing_alg_values_supported: arrayType(stringType()).optional(),
-  service_documentation: stringType().optional(),
-  revocation_endpoint: stringType().optional(),
+  service_documentation: SafeUrlSchema.optional(),
+  revocation_endpoint: SafeUrlSchema.optional(),
   revocation_endpoint_auth_methods_supported: arrayType(stringType()).optional(),
   revocation_endpoint_auth_signing_alg_values_supported: arrayType(stringType()).optional(),
   introspection_endpoint: stringType().optional(),
@@ -16108,11 +16161,11 @@ const OAuthMetadataSchema = objectType({
 }).passthrough();
 const OpenIdProviderMetadataSchema = objectType({
   issuer: stringType(),
-  authorization_endpoint: stringType(),
-  token_endpoint: stringType(),
-  userinfo_endpoint: stringType().optional(),
-  jwks_uri: stringType(),
-  registration_endpoint: stringType().optional(),
+  authorization_endpoint: SafeUrlSchema,
+  token_endpoint: SafeUrlSchema,
+  userinfo_endpoint: SafeUrlSchema.optional(),
+  jwks_uri: SafeUrlSchema,
+  registration_endpoint: SafeUrlSchema.optional(),
   scopes_supported: arrayType(stringType()).optional(),
   response_types_supported: arrayType(stringType()),
   response_modes_supported: arrayType(stringType()).optional(),
@@ -16140,8 +16193,8 @@ const OpenIdProviderMetadataSchema = objectType({
   request_parameter_supported: booleanType().optional(),
   request_uri_parameter_supported: booleanType().optional(),
   require_request_uri_registration: booleanType().optional(),
-  op_policy_uri: stringType().optional(),
-  op_tos_uri: stringType().optional()
+  op_policy_uri: SafeUrlSchema.optional(),
+  op_tos_uri: SafeUrlSchema.optional()
 }).passthrough();
 const OpenIdProviderDiscoveryMetadataSchema = OpenIdProviderMetadataSchema.merge(OAuthMetadataSchema.pick({
   code_challenge_methods_supported: true
@@ -16161,18 +16214,18 @@ const OAuthErrorResponseSchema = objectType({
   error_uri: stringType().optional()
 });
 const OAuthClientMetadataSchema = objectType({
-  redirect_uris: arrayType(stringType()).refine((uris) => uris.every((uri) => URL.canParse(uri)), { message: "redirect_uris must contain valid URLs" }),
+  redirect_uris: arrayType(SafeUrlSchema),
   token_endpoint_auth_method: stringType().optional(),
   grant_types: arrayType(stringType()).optional(),
   response_types: arrayType(stringType()).optional(),
   client_name: stringType().optional(),
-  client_uri: stringType().optional(),
-  logo_uri: stringType().optional(),
+  client_uri: SafeUrlSchema.optional(),
+  logo_uri: SafeUrlSchema.optional(),
   scope: stringType().optional(),
   contacts: arrayType(stringType()).optional(),
-  tos_uri: stringType().optional(),
+  tos_uri: SafeUrlSchema.optional(),
   policy_uri: stringType().optional(),
-  jwks_uri: stringType().optional(),
+  jwks_uri: SafeUrlSchema.optional(),
   jwks: anyType().optional(),
   software_id: stringType().optional(),
   software_version: stringType().optional(),
@@ -16632,7 +16685,7 @@ async function tryMetadataDiscovery(url, protocolVersion, fetchFn = fetch) {
   return await fetchWithCorsRetry(url, headers, fetchFn);
 }
 function shouldAttemptFallback(response, pathname) {
-  return !response || response.status === 404 && pathname !== "/";
+  return !response || response.status >= 400 && response.status < 500 && pathname !== "/";
 }
 async function discoverMetadataWithFallback(serverUrl, wellKnownType, fetchFn, opts) {
   var _a, _b;
@@ -16888,6 +16941,19 @@ const generateOAuthErrorDescription = (params) => {
     errorUri ? `More info: ${errorUri}.` : ""
   ].filter(Boolean).join("\n");
 };
+function validateRedirectUrl(url) {
+  try {
+    const parsedUrl = new URL(url);
+    if (parsedUrl.protocol !== "http:" && parsedUrl.protocol !== "https:") {
+      throw new Error("Authorization URL must be HTTP or HTTPS");
+    }
+  } catch (error) {
+    if (error instanceof Error && error.message === "Authorization URL must be HTTP or HTTPS") {
+      throw error;
+    }
+    throw new Error(`Invalid URL: ${url}`);
+  }
+}
 const discoverScopes = async (serverUrl, resourceMetadata) => {
   try {
     const metadata = await discoverAuthorizationServerMetadata(
@@ -16996,9 +17062,7 @@ class InspectorOAuthClientProvider {
     sessionStorage.setItem(key, JSON.stringify(tokens));
   }
   redirectToAuthorization(authorizationUrl) {
-    if (authorizationUrl.protocol !== "http:" && authorizationUrl.protocol !== "https:") {
-      throw new Error("Authorization URL must be HTTP or HTTPS");
-    }
+    validateRedirectUrl(authorizationUrl.href);
     window.location.href = authorizationUrl.href;
   }
   saveCodeVerifier(codeVerifier) {
@@ -17151,7 +17215,7 @@ const oauthTransitions = {
       );
       context.provider.saveCodeVerifier(codeVerifier);
       context.updateState({
-        authorizationUrl: authorizationUrl.toString(),
+        authorizationUrl,
         oauthStep: "authorization_code"
       });
     }
@@ -24053,7 +24117,7 @@ function splitLines(chunk) {
     const crIndex = chunk.indexOf("\r", searchIndex), lfIndex = chunk.indexOf(`
 `, searchIndex);
     let lineEnd = -1;
-    if (crIndex !== -1 && lfIndex !== -1 ? lineEnd = Math.min(crIndex, lfIndex) : crIndex !== -1 ? lineEnd = crIndex : lfIndex !== -1 && (lineEnd = lfIndex), lineEnd === -1) {
+    if (crIndex !== -1 && lfIndex !== -1 ? lineEnd = Math.min(crIndex, lfIndex) : crIndex !== -1 ? crIndex === chunk.length - 1 ? lineEnd = -1 : lineEnd = crIndex : lfIndex !== -1 && (lineEnd = lfIndex), lineEnd === -1) {
       incompleteLine = chunk.slice(searchIndex);
       break;
     } else {
@@ -24841,16 +24905,7 @@ class StreamableHTTPClientTransport {
     return this._protocolVersion;
   }
 }
-const StdErrNotificationSchema = NotificationSchema.extend({
-  method: literalType("notifications/stderr"),
-  params: objectType({
-    content: stringType()
-  })
-});
-ClientNotificationSchema.or(
-  StdErrNotificationSchema
-).or(ServerNotificationSchema).or(NotificationSchema);
-const version$1 = "0.16.5";
+const version$1 = "0.16.7";
 const packageJson = {
   version: version$1
 };
@@ -24982,7 +25037,6 @@ function useConnection({
   oauthScope,
   config,
   onNotification,
-  onStdErrNotification,
   onPendingRequest,
   onElicitationRequest,
   getRoots,
@@ -25036,7 +25090,7 @@ function useConnection({
         mcpRequestOptions.onprogress = (params) => {
           if (onNotification) {
             onNotification({
-              method: "notification/progress",
+              method: "notifications/progress",
               params
             });
           }
@@ -25221,11 +25275,18 @@ function useConnection({
       let transportOptions;
       let mcpProxyServerUrl;
       switch (transportType) {
-        case "stdio":
+        case "stdio": {
           mcpProxyServerUrl = new URL(`${getMCPProxyAddress(config)}/stdio`);
           mcpProxyServerUrl.searchParams.append("command", command);
           mcpProxyServerUrl.searchParams.append("args", args);
           mcpProxyServerUrl.searchParams.append("env", JSON.stringify(env));
+          const proxyFullAddress = config.MCP_PROXY_FULL_ADDRESS.value;
+          if (proxyFullAddress) {
+            mcpProxyServerUrl.searchParams.append(
+              "proxyFullAddress",
+              proxyFullAddress
+            );
+          }
           transportOptions = {
             authProvider: serverAuthProvider,
             eventSourceInit: {
@@ -25239,9 +25300,17 @@ function useConnection({
             }
           };
           break;
-        case "sse":
+        }
+        case "sse": {
           mcpProxyServerUrl = new URL(`${getMCPProxyAddress(config)}/sse`);
           mcpProxyServerUrl.searchParams.append("url", sseUrl);
+          const proxyFullAddressSSE = config.MCP_PROXY_FULL_ADDRESS.value;
+          if (proxyFullAddressSSE) {
+            mcpProxyServerUrl.searchParams.append(
+              "proxyFullAddress",
+              proxyFullAddressSSE
+            );
+          }
           transportOptions = {
             eventSourceInit: {
               fetch: (url, init) => fetch(url, {
@@ -25254,6 +25323,7 @@ function useConnection({
             }
           };
           break;
+        }
         case "streamable-http":
           mcpProxyServerUrl = new URL(`${getMCPProxyAddress(config)}/mcp`);
           mcpProxyServerUrl.searchParams.append("url", sseUrl);
@@ -25297,12 +25367,6 @@ function useConnection({
           return Promise.resolve();
         };
       }
-      if (onStdErrNotification) {
-        client2.setNotificationHandler(
-          StdErrNotificationSchema,
-          onStdErrNotification
-        );
-      }
       let capabilities;
       try {
         const transport = transportType === "streamable-http" ? new StreamableHTTPClientTransport(mcpProxyServerUrl, {
@@ -25363,6 +25427,15 @@ function useConnection({
       if ((capabilities == null ? void 0 : capabilities.logging) && defaultLoggingLevel) {
         lastRequest = "logging/setLevel";
         await client2.setLoggingLevel(defaultLoggingLevel);
+        pushHistory(
+          {
+            method: "logging/setLevel",
+            params: {
+              level: defaultLoggingLevel
+            }
+          },
+          {}
+        );
         lastRequest = "";
       }
       if (onElicitationRequest) {
@@ -25398,11 +25471,15 @@ function useConnection({
     setCompletionsSupported(false);
     setServerCapabilities(null);
   };
+  const clearRequestHistory = () => {
+    setRequestHistory([]);
+  };
   return {
     connectionStatus,
     serverCapabilities,
     mcpClient,
     requestHistory,
+    clearRequestHistory,
     makeRequest,
     sendNotification,
     handleCompletion,
@@ -26567,6 +26644,7 @@ const OAuthFlowProgress = ({
   updateAuthState,
   proceedToNextStep
 }) => {
+  const { toast: toast2 } = useToast();
   const provider = reactExports.useMemo(
     () => new DebugInspectorOAuthClientProvider(serverUrl),
     [serverUrl]
@@ -26695,13 +26773,26 @@ const OAuthFlowProgress = ({
           children: authState.authorizationUrl && /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "mt-2 p-3 border rounded-md bg-muted", children: [
             /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "font-medium mb-2 text-sm", children: "Authorization URL:" }),
             /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center gap-2", children: [
-              /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs break-all", children: authState.authorizationUrl }),
+              /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-xs break-all", children: String(authState.authorizationUrl) }),
               /* @__PURE__ */ jsxRuntimeExports.jsx(
-                "a",
+                "button",
                 {
-                  href: authState.authorizationUrl,
-                  target: "_blank",
-                  rel: "noopener noreferrer",
+                  onClick: () => {
+                    try {
+                      validateRedirectUrl(authState.authorizationUrl);
+                      window.open(
+                        authState.authorizationUrl,
+                        "_blank",
+                        "noopener noreferrer"
+                      );
+                    } catch (error) {
+                      toast2({
+                        title: "Invalid URL",
+                        description: error instanceof Error ? error.message : "The authorization URL is not valid",
+                        variant: "destructive"
+                      });
+                    }
+                  },
                   className: "flex items-center text-blue-500 hover:text-blue-700",
                   "aria-label": "Open authorization URL in new tab",
                   title: "Open authorization URL",
@@ -26787,7 +26878,18 @@ const OAuthFlowProgress = ({
         Button,
         {
           variant: "outline",
-          onClick: () => window.open(authState.authorizationUrl, "_blank"),
+          onClick: () => {
+            try {
+              validateRedirectUrl(authState.authorizationUrl);
+              window.open(authState.authorizationUrl, "_blank");
+            } catch (error) {
+              toast2({
+                title: "Invalid URL",
+                description: error instanceof Error ? error.message : "The authorization URL is not valid",
+                variant: "destructive"
+              });
+            }
+          },
           children: "Open in New Tab"
         }
       )
@@ -26915,11 +27017,25 @@ const AuthDebugger = ({
       while (currentState.oauthStep !== "complete") {
         await oauthMachine.executeStep(currentState);
         if (currentState.oauthStep === "authorization_code" && currentState.authorizationUrl) {
+          try {
+            validateRedirectUrl(currentState.authorizationUrl);
+          } catch (error) {
+            updateAuthState({
+              ...currentState,
+              isInitiatingAuth: false,
+              latestError: error instanceof Error ? error : new Error(String(error)),
+              statusMessage: {
+                type: "error",
+                message: `Invalid authorization URL: ${error instanceof Error ? error.message : String(error)}`
+              }
+            });
+            return;
+          }
           sessionStorage.setItem(
             SESSION_KEYS.AUTH_DEBUGGER_STATE,
             JSON.stringify(currentState)
           );
-          window.location.href = currentState.authorizationUrl;
+          window.location.href = currentState.authorizationUrl.toString();
           break;
         }
       }
@@ -27310,7 +27426,9 @@ const JsonNode = reactExports.memo(
 JsonNode.displayName = "JsonNode";
 const HistoryAndNotifications = ({
   requestHistory,
-  serverNotifications
+  serverNotifications,
+  onClearHistory,
+  onClearNotifications
 }) => {
   const [expandedRequests, setExpandedRequests] = reactExports.useState({});
   const [expandedNotifications, setExpandedNotifications] = reactExports.useState({});
@@ -27322,7 +27440,19 @@ const HistoryAndNotifications = ({
   };
   return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "bg-card overflow-hidden flex h-full", children: [
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex-1 overflow-y-auto p-4 border-r", children: [
-      /* @__PURE__ */ jsxRuntimeExports.jsx("h2", { className: "text-lg font-semibold mb-4", children: "History" }),
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center justify-between mb-4", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsx("h2", { className: "text-lg font-semibold", children: "History" }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx(
+          Button,
+          {
+            variant: "outline",
+            size: "sm",
+            onClick: onClearHistory,
+            disabled: requestHistory.length === 0,
+            children: "Clear"
+          }
+        )
+      ] }),
       requestHistory.length === 0 ? /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-sm text-gray-500 dark:text-gray-400 italic", children: "No history yet" }) : /* @__PURE__ */ jsxRuntimeExports.jsx("ul", { className: "space-y-3", children: requestHistory.slice().reverse().map((request, index2) => /* @__PURE__ */ jsxRuntimeExports.jsxs(
         "li",
         {
@@ -27372,7 +27502,19 @@ const HistoryAndNotifications = ({
       )) })
     ] }),
     /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex-1 overflow-y-auto p-4", children: [
-      /* @__PURE__ */ jsxRuntimeExports.jsx("h2", { className: "text-lg font-semibold mb-4", children: "Server Notifications" }),
+      /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center justify-between mb-4", children: [
+        /* @__PURE__ */ jsxRuntimeExports.jsx("h2", { className: "text-lg font-semibold", children: "Server Notifications" }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx(
+          Button,
+          {
+            variant: "outline",
+            size: "sm",
+            onClick: onClearNotifications,
+            disabled: serverNotifications.length === 0,
+            children: "Clear"
+          }
+        )
+      ] }),
       serverNotifications.length === 0 ? /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "text-sm text-gray-500 dark:text-gray-400 italic", children: "No notifications yet" }) : /* @__PURE__ */ jsxRuntimeExports.jsx("ul", { className: "space-y-3", children: serverNotifications.slice().reverse().map((notification, index2) => /* @__PURE__ */ jsxRuntimeExports.jsxs(
         "li",
         {
@@ -30322,15 +30464,9 @@ function getWindowScrollBarX(element, rect) {
   }
   return rect.left + leftScroll;
 }
-function getHTMLOffset(documentElement, scroll, ignoreScrollbarX) {
-  if (ignoreScrollbarX === void 0) {
-    ignoreScrollbarX = false;
-  }
+function getHTMLOffset(documentElement, scroll) {
   const htmlRect = documentElement.getBoundingClientRect();
-  const x = htmlRect.left + scroll.scrollLeft - (ignoreScrollbarX ? 0 : (
-    // RTL <body> scrollbar.
-    getWindowScrollBarX(documentElement, htmlRect)
-  ));
+  const x = htmlRect.left + scroll.scrollLeft - getWindowScrollBarX(documentElement, htmlRect);
   const y = htmlRect.top + scroll.scrollTop;
   return {
     x,
@@ -30368,7 +30504,7 @@ function convertOffsetParentRelativeRectToViewportRelativeRect(_ref) {
       offsets.y = offsetRect.y + offsetParent.clientTop;
     }
   }
-  const htmlOffset = documentElement && !isOffsetParentAnElement && !isFixed ? getHTMLOffset(documentElement, scroll, true) : createCoords(0);
+  const htmlOffset = documentElement && !isOffsetParentAnElement && !isFixed ? getHTMLOffset(documentElement, scroll) : createCoords(0);
   return {
     width: rect.width * scale.x,
     height: rect.height * scale.y,
@@ -30397,6 +30533,7 @@ function getDocumentRect(element) {
     y
   };
 }
+const SCROLLBAR_MAX = 25;
 function getViewportRect(element, strategy) {
   const win = getWindow(element);
   const html = getDocumentElement(element);
@@ -30414,6 +30551,19 @@ function getViewportRect(element, strategy) {
       y = visualViewport.offsetTop;
     }
   }
+  const windowScrollbarX = getWindowScrollBarX(html);
+  if (windowScrollbarX <= 0) {
+    const doc = html.ownerDocument;
+    const body = doc.body;
+    const bodyStyles = getComputedStyle(body);
+    const bodyMarginInline = doc.compatMode === "CSS1Compat" ? parseFloat(bodyStyles.marginLeft) + parseFloat(bodyStyles.marginRight) || 0 : 0;
+    const clippingStableScrollbarWidth = Math.abs(html.clientWidth - body.clientWidth - bodyMarginInline);
+    if (clippingStableScrollbarWidth <= SCROLLBAR_MAX) {
+      width -= clippingStableScrollbarWidth;
+    }
+  } else if (windowScrollbarX <= SCROLLBAR_MAX) {
+    width += windowScrollbarX;
+  }
   return {
     width,
     height,
@@ -36391,7 +36541,7 @@ const useTheme = () => {
     [theme, setThemeWithSideEffect]
   );
 };
-const version = "0.16.5";
+const version = "0.16.7";
 var [createTooltipContext, createTooltipScope] = createContextScope("Tooltip", [
   createPopperScope
 ]);
@@ -36896,8 +37046,6 @@ const Sidebar = ({
   setOauthScope,
   onConnect,
   onDisconnect,
-  stdErrNotifications,
-  clearStdErrNotifications,
   logLevel,
   sendLogLevelRequest,
   loggingSupported,
@@ -36967,7 +37115,7 @@ const Sidebar = ({
         setCopiedServerEntry(true);
         toast2({
           title: "Config entry copied",
-          description: transportType === "stdio" ? "Server configuration has been copied to clipboard. Add this to your mcp.json inside the 'mcpServers' object with your preferred server name." : "SSE URL has been copied. Use this URL directly in your MCP Client."
+          description: transportType === "stdio" ? "Server configuration has been copied to clipboard. Add this to your mcp.json inside the 'mcpServers' object with your preferred server name." : transportType === "streamable-http" ? "Streamable HTTP URL has been copied. Use this URL directly in your MCP Client." : "SSE URL has been copied. Use this URL directly in your MCP Client."
         });
         setTimeout(() => {
           setCopiedServerEntry(false);
@@ -37039,6 +37187,7 @@ const Sidebar = ({
               placeholder: "Command",
               value: command,
               onChange: (e) => setCommand(e.target.value),
+              onBlur: (e) => setCommand(e.target.value.trim()),
               className: "font-mono"
             }
           )
@@ -37508,30 +37657,7 @@ const Sidebar = ({
               ]
             }
           )
-        ] }),
-        stdErrNotifications.length > 0 && /* @__PURE__ */ jsxRuntimeExports.jsx(jsxRuntimeExports.Fragment, { children: /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "mt-4 border-t border-gray-200 pt-4", children: [
-          /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex justify-between items-center", children: [
-            /* @__PURE__ */ jsxRuntimeExports.jsx("h3", { className: "text-sm font-medium", children: "Error output from MCP server" }),
-            /* @__PURE__ */ jsxRuntimeExports.jsx(
-              Button,
-              {
-                variant: "outline",
-                size: "sm",
-                onClick: clearStdErrNotifications,
-                className: "h-8 px-2",
-                children: "Clear"
-              }
-            )
-          ] }),
-          /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "mt-2 max-h-80 overflow-y-auto", children: stdErrNotifications.map((notification, index2) => /* @__PURE__ */ jsxRuntimeExports.jsx(
-            "div",
-            {
-              className: "text-sm text-red-500 font-mono py-2 border-b border-gray-200 last:border-b-0",
-              children: notification.params.content
-            },
-            index2
-          )) })
-        ] }) })
+        ] })
       ] })
     ] }) }),
     /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "p-4 border-t", children: /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "flex items-center justify-between", children: [
@@ -38521,7 +38647,6 @@ const App = () => {
   const [transportType, setTransportType] = reactExports.useState(getInitialTransportType);
   const [logLevel, setLogLevel] = reactExports.useState("debug");
   const [notifications, setNotifications] = reactExports.useState([]);
-  const [stdErrNotifications, setStdErrNotifications] = reactExports.useState([]);
   const [roots, setRoots] = reactExports.useState([]);
   const [env, setEnv] = reactExports.useState({});
   const [config, setConfig] = reactExports.useState(
@@ -38580,6 +38705,7 @@ const App = () => {
     serverCapabilities,
     mcpClient,
     requestHistory,
+    clearRequestHistory,
     makeRequest,
     sendNotification,
     handleCompletion,
@@ -38600,12 +38726,6 @@ const App = () => {
     onNotification: (notification) => {
       setNotifications((prev) => [...prev, notification]);
     },
-    onStdErrNotification: (notification) => {
-      setStdErrNotifications((prev) => [
-        ...prev,
-        notification
-      ]);
-    },
     onPendingRequest: (request, resolve, reject) => {
       setPendingSampleRequests((prev) => [
         ...prev,
@@ -39033,6 +39153,9 @@ const App = () => {
   const handleRootsChange = async () => {
     await sendNotification({ method: "notifications/roots/list_changed" });
   };
+  const handleClearNotifications = () => {
+    setNotifications([]);
+  };
   const sendLogLevelRequest = async (level) => {
     await sendMCPRequest(
       {
@@ -39043,9 +39166,6 @@ const App = () => {
     );
     setLogLevel(level);
   };
-  const clearStdErrNotifications = () => {
-    setStdErrNotifications([]);
-  };
   const AuthDebuggerWrapper = () => /* @__PURE__ */ jsxRuntimeExports.jsx(TabsContent, { value: "auth", children: /* @__PURE__ */ jsxRuntimeExports.jsx(
     AuthDebugger,
     {
@@ -39057,13 +39177,13 @@ const App = () => {
   ) });
   if (window.location.pathname === "/oauth/callback") {
     const OAuthCallback = React.lazy(
-      () => __vitePreload(() => import("./OAuthCallback-BxZPCak0.js"), true ? [] : void 0)
+      () => __vitePreload(() => import("./OAuthCallback-aXDAN43J.js"), true ? [] : void 0)
     );
     return /* @__PURE__ */ jsxRuntimeExports.jsx(reactExports.Suspense, { fallback: /* @__PURE__ */ jsxRuntimeExports.jsx("div", { children: "Loading..." }), children: /* @__PURE__ */ jsxRuntimeExports.jsx(OAuthCallback, { onConnect: onOAuthConnect }) });
   }
   if (window.location.pathname === "/oauth/callback/debug") {
     const OAuthDebugCallback = React.lazy(
-      () => __vitePreload(() => import("./OAuthDebugCallback-CwfxQhTF.js"), true ? [] : void 0)
+      () => __vitePreload(() => import("./OAuthDebugCallback-BanjyQ_V.js"), true ? [] : void 0)
     );
     return /* @__PURE__ */ jsxRuntimeExports.jsx(reactExports.Suspense, { fallback: /* @__PURE__ */ jsxRuntimeExports.jsx("div", { children: "Loading..." }), children: /* @__PURE__ */ jsxRuntimeExports.jsx(OAuthDebugCallback, { onConnect: onOAuthDebugConnect }) });
   }
@@ -39105,11 +39225,9 @@ const App = () => {
               setOauthScope,
               onConnect: connectMcpServer,
               onDisconnect: disconnectMcpServer,
-              stdErrNotifications,
               logLevel,
               sendLogLevelRequest,
-              loggingSupported: !!(serverCapabilities == null ? void 0 : serverCapabilities.logging) || false,
-              clearStdErrNotifications
+              loggingSupported: !!(serverCapabilities == null ? void 0 : serverCapabilities.logging) || false
             }
           ),
           /* @__PURE__ */ jsxRuntimeExports.jsx(
@@ -39412,7 +39530,9 @@ const App = () => {
               HistoryAndNotifications,
               {
                 requestHistory,
-                serverNotifications: notifications
+                serverNotifications: notifications,
+                onClearHistory: clearRequestHistory,
+                onClearNotifications: handleClearNotifications
               }
             ) })
           ]