@lovable.dev/mcp-js 0.10.0 → 0.11.0

package/dist/{chunk-4XJ2R3DD.js → chunk-ENWRS6AT.js}

@@ -1,5 +1,5 @@
 // package.json
-var version = "0.10.0";
+var version = "0.11.0";
 
 export {
   version

package/dist/{chunk-LAFJDJRY.js → chunk-G4XA7IJM.js}

@@ -190,6 +190,7 @@ function stringClaim(claims, name) {
 // src/auth/verifier.ts
 var DEFAULT_JWT_ALGORITHMS = ["RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "EdDSA"];
 var DEFAULT_CLOCK_TOLERANCE_SECONDS = 30;
+var DEFAULT_ACCESS_TOKEN_TYPS = ["at+jwt", "JWT"];
 var JWKS_FETCH_TIMEOUT_MS = 5e3;
 var OAuthTokenError = class extends Error {
   constructor(status, oauthError, message) {
@@ -222,10 +223,23 @@ async function fetchVerificationKeySet(jwksUri) {
     throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
+function assertAccessTokenTyp(token, allowed) {
+  let header;
+  try {
+    header = decodeProtectedHeader(token);
+  } catch (err) {
+    log.debug("oauth.verify.bad_header", { ...describeError(err), outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Malformed JWT header");
+  }
+  const typ = header.typ;
+  if (typeof typ !== "string" || !allowed.includes(typ)) {
+    log.debug("oauth.verify.bad_typ", { jwtTyp: typ, allowed, outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Access token typ header is not accepted");
+  }
+}
 async function verifyJwtClaims(token, keySet, issuer, audience, auth) {
   try {
     const { payload } = await jwtVerify(token, keySet, {
-      typ: "at+jwt",
       // `issuer` is trimmed of any trailing slash; accept both forms so a token whose
       // `iss` carries the slash the AS publishes still verifies.
       issuer: [issuer, `${issuer}/`],
@@ -274,6 +288,7 @@ function buildMcpAuthContext(args) {
   };
 }
 function createOAuthTokenVerifier(auth, discovery) {
+  const allowedTyps = auth.accessTokenTyp ?? DEFAULT_ACCESS_TOKEN_TYPS;
   return async (token, request, options) => {
     const resource = resolveProtectedResource(auth, request, options);
     const issuer = await discovery.resolveIssuer();
@@ -282,6 +297,7 @@ function createOAuthTokenVerifier(auth, discovery) {
     const jwksUri = await discovery.resolveJwksUri();
     log.debug("oauth.jwks.fetch", { jwksUri });
     const keySet = await fetchVerificationKeySet(jwksUri);
+    assertAccessTokenTyp(token, allowedTyps);
     const claims = await verifyJwtClaims(token, keySet, issuer, acceptedAudiences, auth);
     assertNonEmptySubject(claims);
     const context = buildMcpAuthContext({ token, claims, issuer, resource, acceptedAudiences });

package/dist/{chunk-X7V2CL7C.js → chunk-QDKOF4UF.js}

@@ -7,7 +7,7 @@ import {
   oauthConfigurationErrorResponse,
   resolveProtectedResource,
   withCors
-} from "./chunk-LAFJDJRY.js";
+} from "./chunk-G4XA7IJM.js";
 import {
   describeError,
   log

package/dist/{chunk-PJXKJNSZ.js → chunk-VNRQPA4K.js}

@@ -5,7 +5,7 @@ import {
   headResponse,
   methodNotAllowed,
   withCors
-} from "./chunk-LAFJDJRY.js";
+} from "./chunk-G4XA7IJM.js";
 
 // src/protocols/rest/list-tools.ts
 import { objectFromShape } from "@modelcontextprotocol/sdk/server/zod-compat.js";

package/dist/{chunk-DF3DD3KD.js → chunk-WLNT2FX7.js}

@@ -5,7 +5,7 @@ import {
   corsPreflightResponse,
   createRequestAuthorizer,
   withCors
-} from "./chunk-LAFJDJRY.js";
+} from "./chunk-G4XA7IJM.js";
 import {
   describeError,
   log

package/dist/{chunk-SZLSAGDF.js → chunk-YWLMMDET.js}

@@ -8,7 +8,7 @@ import {
   createRequestAuthorizer,
   methodNotAllowed,
   withCors
-} from "./chunk-LAFJDJRY.js";
+} from "./chunk-G4XA7IJM.js";
 
 // src/protocols/rest/invoke-tool.ts
 import { getParseErrorMessage, objectFromShape, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";

package/dist/cli/extract-manifest.cjs

@@ -13,7 +13,7 @@ function isFileMissing(err) {
 }
 
 // package.json
-var version = "0.10.0";
+var version = "0.11.0";
 
 // src/protocols/rest/list-tools.ts
 var import_zod_compat = require("@modelcontextprotocol/sdk/server/zod-compat.js");

package/dist/cli/extract-manifest.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   buildMcpListing
-} from "../chunk-PJXKJNSZ.js";
-import "../chunk-LAFJDJRY.js";
+} from "../chunk-VNRQPA4K.js";
+import "../chunk-G4XA7IJM.js";
 import "../chunk-QC3DXQTH.js";
 import "../chunk-6DXGZZA4.js";
 import {
   version
-} from "../chunk-4XJ2R3DD.js";
+} from "../chunk-ENWRS6AT.js";
 import {
   isFileMissing
 } from "../chunk-Y3ZFPEQH.js";

package/dist/index.cjs

@@ -159,6 +159,20 @@ function assertOAuthConfig(auth2) {
     for (const algorithm of auth2.algorithms)
       assertJwtAlgorithm(algorithm);
   }
+  if (auth2.accessTokenTyp !== void 0) {
+    if (!Array.isArray(auth2.accessTokenTyp)) {
+      throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must be an array`);
+    }
+    if (auth2.accessTokenTyp.length === 0) {
+      throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must not be empty`);
+    }
+    for (const typ of auth2.accessTokenTyp) {
+      if (typeof typ !== "string") {
+        throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must contain strings`);
+      }
+      assertNonEmptyString("auth.accessTokenTyp", typ);
+    }
+  }
   if (auth2.clockToleranceSeconds !== void 0)
     assertClockToleranceSeconds(auth2.clockToleranceSeconds);
   if (auth2.resource === void 0 && auth2.acceptedAudiences === void 0) {
@@ -174,6 +188,8 @@ function freezeAuth(auth2) {
     Object.freeze(auth2.requiredScopes);
   if (auth2.algorithms)
     Object.freeze(auth2.algorithms);
+  if (auth2.accessTokenTyp)
+    Object.freeze(auth2.accessTokenTyp);
   Object.freeze(auth2);
 }
 function defineTool(def) {
@@ -214,7 +230,8 @@ function issuer(options) {
       ...options,
       acceptedAudiences: frozenAudiences(options.acceptedAudiences),
       requiredScopes: frozenArray(options.requiredScopes),
-      algorithms: frozenArray(options.algorithms)
+      algorithms: frozenArray(options.algorithms),
+      accessTokenTyp: frozenArray(options.accessTokenTyp)
     })
   );
 }

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { e as McpDefinitionInput, d as McpDefinition, Z as ZodRawShape, j as ToolDefinition, M as McpAuthConfig } from './types-C5SSORxe.js';
-export { A as AudioContent, C as ContentAnnotations, a as ContentBlock, E as EmbeddedBlobResource, b as EmbeddedResource, c as EmbeddedTextResource, I as ImageContent, J as JwtClaims, R as ResourceLink, f as ResourceLinkIcon, T as TextContent, g as ToolAnnotations, h as ToolContent, i as ToolContext, k as ToolHandlerResult, l as ZodSchema } from './types-C5SSORxe.js';
+import { e as McpDefinitionInput, d as McpDefinition, Z as ZodRawShape, j as ToolDefinition, M as McpAuthConfig } from './types-BanzncFh.js';
+export { A as AudioContent, C as ContentAnnotations, a as ContentBlock, E as EmbeddedBlobResource, b as EmbeddedResource, c as EmbeddedTextResource, I as ImageContent, J as JwtClaims, R as ResourceLink, f as ResourceLinkIcon, T as TextContent, g as ToolAnnotations, h as ToolContent, i as ToolContext, k as ToolHandlerResult, l as ZodSchema } from './types-BanzncFh.js';
 import 'zod';
 
 /**
@@ -29,6 +29,7 @@ interface IssuerOAuthOptionsBase {
     readonly jwksUri?: string;
     readonly algorithms?: readonly string[];
     readonly clockToleranceSeconds?: number;
+    readonly accessTokenTyp?: readonly string[];
 }
 type IssuerOAuthOptions = IssuerOAuthOptionsBase & ({
     readonly resource: string;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { e as McpDefinitionInput, d as McpDefinition, Z as ZodRawShape, j as ToolDefinition, M as McpAuthConfig } from './types-C5SSORxe.js';
-export { A as AudioContent, C as ContentAnnotations, a as ContentBlock, E as EmbeddedBlobResource, b as EmbeddedResource, c as EmbeddedTextResource, I as ImageContent, J as JwtClaims, R as ResourceLink, f as ResourceLinkIcon, T as TextContent, g as ToolAnnotations, h as ToolContent, i as ToolContext, k as ToolHandlerResult, l as ZodSchema } from './types-C5SSORxe.js';
+import { e as McpDefinitionInput, d as McpDefinition, Z as ZodRawShape, j as ToolDefinition, M as McpAuthConfig } from './types-BanzncFh.js';
+export { A as AudioContent, C as ContentAnnotations, a as ContentBlock, E as EmbeddedBlobResource, b as EmbeddedResource, c as EmbeddedTextResource, I as ImageContent, J as JwtClaims, R as ResourceLink, f as ResourceLinkIcon, T as TextContent, g as ToolAnnotations, h as ToolContent, i as ToolContext, k as ToolHandlerResult, l as ZodSchema } from './types-BanzncFh.js';
 import 'zod';
 
 /**
@@ -29,6 +29,7 @@ interface IssuerOAuthOptionsBase {
     readonly jwksUri?: string;
     readonly algorithms?: readonly string[];
     readonly clockToleranceSeconds?: number;
+    readonly accessTokenTyp?: readonly string[];
 }
 type IssuerOAuthOptions = IssuerOAuthOptionsBase & ({
     readonly resource: string;

package/dist/index.js

@@ -104,6 +104,20 @@ function assertOAuthConfig(auth2) {
     for (const algorithm of auth2.algorithms)
       assertJwtAlgorithm(algorithm);
   }
+  if (auth2.accessTokenTyp !== void 0) {
+    if (!Array.isArray(auth2.accessTokenTyp)) {
+      throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must be an array`);
+    }
+    if (auth2.accessTokenTyp.length === 0) {
+      throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must not be empty`);
+    }
+    for (const typ of auth2.accessTokenTyp) {
+      if (typeof typ !== "string") {
+        throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must contain strings`);
+      }
+      assertNonEmptyString("auth.accessTokenTyp", typ);
+    }
+  }
   if (auth2.clockToleranceSeconds !== void 0)
     assertClockToleranceSeconds(auth2.clockToleranceSeconds);
   if (auth2.resource === void 0 && auth2.acceptedAudiences === void 0) {
@@ -119,6 +133,8 @@ function freezeAuth(auth2) {
     Object.freeze(auth2.requiredScopes);
   if (auth2.algorithms)
     Object.freeze(auth2.algorithms);
+  if (auth2.accessTokenTyp)
+    Object.freeze(auth2.accessTokenTyp);
   Object.freeze(auth2);
 }
 function defineTool(def) {
@@ -159,7 +175,8 @@ function issuer(options) {
       ...options,
       acceptedAudiences: frozenAudiences(options.acceptedAudiences),
       requiredScopes: frozenArray(options.requiredScopes),
-      algorithms: frozenArray(options.algorithms)
+      algorithms: frozenArray(options.algorithms),
+      accessTokenTyp: frozenArray(options.accessTokenTyp)
     })
   );
 }

package/dist/protocols/mcp/index.cjs

@@ -281,6 +281,7 @@ function stringClaim(claims, name) {
 // src/auth/verifier.ts
 var DEFAULT_JWT_ALGORITHMS = ["RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "EdDSA"];
 var DEFAULT_CLOCK_TOLERANCE_SECONDS = 30;
+var DEFAULT_ACCESS_TOKEN_TYPS = ["at+jwt", "JWT"];
 var JWKS_FETCH_TIMEOUT_MS = 5e3;
 var OAuthTokenError = class extends Error {
   constructor(status, oauthError, message) {
@@ -313,10 +314,23 @@ async function fetchVerificationKeySet(jwksUri) {
     throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
+function assertAccessTokenTyp(token, allowed) {
+  let header;
+  try {
+    header = (0, import_jose.decodeProtectedHeader)(token);
+  } catch (err) {
+    log.debug("oauth.verify.bad_header", { ...describeError(err), outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Malformed JWT header");
+  }
+  const typ = header.typ;
+  if (typeof typ !== "string" || !allowed.includes(typ)) {
+    log.debug("oauth.verify.bad_typ", { jwtTyp: typ, allowed, outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Access token typ header is not accepted");
+  }
+}
 async function verifyJwtClaims(token, keySet, issuer, audience, auth) {
   try {
     const { payload } = await (0, import_jose.jwtVerify)(token, keySet, {
-      typ: "at+jwt",
       // `issuer` is trimmed of any trailing slash; accept both forms so a token whose
       // `iss` carries the slash the AS publishes still verifies.
       issuer: [issuer, `${issuer}/`],
@@ -365,6 +379,7 @@ function buildMcpAuthContext(args) {
   };
 }
 function createOAuthTokenVerifier(auth, discovery) {
+  const allowedTyps = auth.accessTokenTyp ?? DEFAULT_ACCESS_TOKEN_TYPS;
   return async (token, request, options) => {
     const resource = resolveProtectedResource(auth, request, options);
     const issuer = await discovery.resolveIssuer();
@@ -373,6 +388,7 @@ function createOAuthTokenVerifier(auth, discovery) {
     const jwksUri = await discovery.resolveJwksUri();
     log.debug("oauth.jwks.fetch", { jwksUri });
     const keySet = await fetchVerificationKeySet(jwksUri);
+    assertAccessTokenTyp(token, allowedTyps);
     const claims = await verifyJwtClaims(token, keySet, issuer, acceptedAudiences, auth);
     assertNonEmptySubject(claims);
     const context = buildMcpAuthContext({ token, claims, issuer, resource, acceptedAudiences });

package/dist/protocols/mcp/index.d.cts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 type McpProtocolHandler = (request: Request) => Promise<Response>;

package/dist/protocols/mcp/index.d.ts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 type McpProtocolHandler = (request: Request) => Promise<Response>;

package/dist/protocols/mcp/index.js

@@ -1,8 +1,8 @@
 import {
   createMcpProtocolHandler
-} from "../../chunk-DF3DD3KD.js";
+} from "../../chunk-WLNT2FX7.js";
 import "../../chunk-MA5H6PSF.js";
-import "../../chunk-LAFJDJRY.js";
+import "../../chunk-G4XA7IJM.js";
 import "../../chunk-QC3DXQTH.js";
 import "../../chunk-6DXGZZA4.js";
 export {

package/dist/protocols/oauth-metadata.cjs

@@ -283,6 +283,7 @@ function stringClaim(claims, name) {
 // src/auth/verifier.ts
 var DEFAULT_JWT_ALGORITHMS = ["RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "EdDSA"];
 var DEFAULT_CLOCK_TOLERANCE_SECONDS = 30;
+var DEFAULT_ACCESS_TOKEN_TYPS = ["at+jwt", "JWT"];
 var JWKS_FETCH_TIMEOUT_MS = 5e3;
 var OAuthTokenError = class extends Error {
   constructor(status, oauthError, message) {
@@ -315,10 +316,23 @@ async function fetchVerificationKeySet(jwksUri) {
     throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
+function assertAccessTokenTyp(token, allowed) {
+  let header;
+  try {
+    header = (0, import_jose.decodeProtectedHeader)(token);
+  } catch (err) {
+    log.debug("oauth.verify.bad_header", { ...describeError(err), outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Malformed JWT header");
+  }
+  const typ = header.typ;
+  if (typeof typ !== "string" || !allowed.includes(typ)) {
+    log.debug("oauth.verify.bad_typ", { jwtTyp: typ, allowed, outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Access token typ header is not accepted");
+  }
+}
 async function verifyJwtClaims(token, keySet, issuer, audience, auth) {
   try {
     const { payload } = await (0, import_jose.jwtVerify)(token, keySet, {
-      typ: "at+jwt",
       // `issuer` is trimmed of any trailing slash; accept both forms so a token whose
       // `iss` carries the slash the AS publishes still verifies.
       issuer: [issuer, `${issuer}/`],
@@ -367,6 +381,7 @@ function buildMcpAuthContext(args) {
   };
 }
 function createOAuthTokenVerifier(auth, discovery) {
+  const allowedTyps = auth.accessTokenTyp ?? DEFAULT_ACCESS_TOKEN_TYPS;
   return async (token, request, options) => {
     const resource = resolveProtectedResource(auth, request, options);
     const issuer = await discovery.resolveIssuer();
@@ -375,6 +390,7 @@ function createOAuthTokenVerifier(auth, discovery) {
     const jwksUri = await discovery.resolveJwksUri();
     log.debug("oauth.jwks.fetch", { jwksUri });
     const keySet = await fetchVerificationKeySet(jwksUri);
+    assertAccessTokenTyp(token, allowedTyps);
     const claims = await verifyJwtClaims(token, keySet, issuer, acceptedAudiences, auth);
     assertNonEmptySubject(claims);
     const context = buildMcpAuthContext({ token, claims, issuer, resource, acceptedAudiences });

package/dist/protocols/oauth-metadata.d.cts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../types-C5SSORxe.js';
+import { d as McpDefinition } from '../types-BanzncFh.js';
 import 'zod';
 
 type OAuthProtectedResourceMetadataHandler = (request: Request) => Promise<Response>;

package/dist/protocols/oauth-metadata.d.ts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../types-C5SSORxe.js';
+import { d as McpDefinition } from '../types-BanzncFh.js';
 import 'zod';
 
 type OAuthProtectedResourceMetadataHandler = (request: Request) => Promise<Response>;

package/dist/protocols/oauth-metadata.js

@@ -1,7 +1,7 @@
 import {
   createOAuthProtectedResourceMetadataHandler
-} from "../chunk-X7V2CL7C.js";
-import "../chunk-LAFJDJRY.js";
+} from "../chunk-QDKOF4UF.js";
+import "../chunk-G4XA7IJM.js";
 import "../chunk-QC3DXQTH.js";
 import "../chunk-6DXGZZA4.js";
 export {

package/dist/protocols/rest/index.cjs

@@ -291,6 +291,7 @@ function stringClaim(claims, name) {
 // src/auth/verifier.ts
 var DEFAULT_JWT_ALGORITHMS = ["RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "EdDSA"];
 var DEFAULT_CLOCK_TOLERANCE_SECONDS = 30;
+var DEFAULT_ACCESS_TOKEN_TYPS = ["at+jwt", "JWT"];
 var JWKS_FETCH_TIMEOUT_MS = 5e3;
 var OAuthTokenError = class extends Error {
   constructor(status, oauthError, message) {
@@ -323,10 +324,23 @@ async function fetchVerificationKeySet(jwksUri) {
     throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
+function assertAccessTokenTyp(token, allowed) {
+  let header;
+  try {
+    header = (0, import_jose.decodeProtectedHeader)(token);
+  } catch (err) {
+    log.debug("oauth.verify.bad_header", { ...describeError(err), outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Malformed JWT header");
+  }
+  const typ = header.typ;
+  if (typeof typ !== "string" || !allowed.includes(typ)) {
+    log.debug("oauth.verify.bad_typ", { jwtTyp: typ, allowed, outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Access token typ header is not accepted");
+  }
+}
 async function verifyJwtClaims(token, keySet, issuer, audience, auth) {
   try {
     const { payload } = await (0, import_jose.jwtVerify)(token, keySet, {
-      typ: "at+jwt",
       // `issuer` is trimmed of any trailing slash; accept both forms so a token whose
       // `iss` carries the slash the AS publishes still verifies.
       issuer: [issuer, `${issuer}/`],
@@ -375,6 +389,7 @@ function buildMcpAuthContext(args) {
   };
 }
 function createOAuthTokenVerifier(auth, discovery) {
+  const allowedTyps = auth.accessTokenTyp ?? DEFAULT_ACCESS_TOKEN_TYPS;
   return async (token, request, options) => {
     const resource = resolveProtectedResource(auth, request, options);
     const issuer = await discovery.resolveIssuer();
@@ -383,6 +398,7 @@ function createOAuthTokenVerifier(auth, discovery) {
     const jwksUri = await discovery.resolveJwksUri();
     log.debug("oauth.jwks.fetch", { jwksUri });
     const keySet = await fetchVerificationKeySet(jwksUri);
+    assertAccessTokenTyp(token, allowedTyps);
     const claims = await verifyJwtClaims(token, keySet, issuer, acceptedAudiences, auth);
     assertNonEmptySubject(claims);
     const context = buildMcpAuthContext({ token, claims, issuer, resource, acceptedAudiences });

package/dist/protocols/rest/index.d.cts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 type RestListToolsHandler = (request: Request) => Promise<Response>;

package/dist/protocols/rest/index.d.ts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 type RestListToolsHandler = (request: Request) => Promise<Response>;

package/dist/protocols/rest/index.js

@@ -1,11 +1,11 @@
 import {
   createInvokeToolHandler
-} from "../../chunk-SZLSAGDF.js";
+} from "../../chunk-YWLMMDET.js";
 import {
   createListToolsHandler
-} from "../../chunk-PJXKJNSZ.js";
+} from "../../chunk-VNRQPA4K.js";
 import "../../chunk-MA5H6PSF.js";
-import "../../chunk-LAFJDJRY.js";
+import "../../chunk-G4XA7IJM.js";
 import "../../chunk-QC3DXQTH.js";
 import "../../chunk-6DXGZZA4.js";
 export {

package/dist/stacks/supabase/index.cjs

@@ -290,6 +290,7 @@ function stringClaim(claims, name) {
 // src/auth/verifier.ts
 var DEFAULT_JWT_ALGORITHMS = ["RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "EdDSA"];
 var DEFAULT_CLOCK_TOLERANCE_SECONDS = 30;
+var DEFAULT_ACCESS_TOKEN_TYPS = ["at+jwt", "JWT"];
 var JWKS_FETCH_TIMEOUT_MS = 5e3;
 var OAuthTokenError = class extends Error {
   constructor(status, oauthError, message) {
@@ -322,10 +323,23 @@ async function fetchVerificationKeySet(jwksUri) {
     throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
+function assertAccessTokenTyp(token, allowed) {
+  let header;
+  try {
+    header = (0, import_jose.decodeProtectedHeader)(token);
+  } catch (err) {
+    log.debug("oauth.verify.bad_header", { ...describeError(err), outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Malformed JWT header");
+  }
+  const typ = header.typ;
+  if (typeof typ !== "string" || !allowed.includes(typ)) {
+    log.debug("oauth.verify.bad_typ", { jwtTyp: typ, allowed, outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Access token typ header is not accepted");
+  }
+}
 async function verifyJwtClaims(token, keySet, issuer, audience, auth) {
   try {
     const { payload } = await (0, import_jose.jwtVerify)(token, keySet, {
-      typ: "at+jwt",
       // `issuer` is trimmed of any trailing slash; accept both forms so a token whose
       // `iss` carries the slash the AS publishes still verifies.
       issuer: [issuer, `${issuer}/`],
@@ -374,6 +388,7 @@ function buildMcpAuthContext(args) {
   };
 }
 function createOAuthTokenVerifier(auth, discovery) {
+  const allowedTyps = auth.accessTokenTyp ?? DEFAULT_ACCESS_TOKEN_TYPS;
   return async (token, request, options) => {
     const resource = resolveProtectedResource(auth, request, options);
     const issuer = await discovery.resolveIssuer();
@@ -382,6 +397,7 @@ function createOAuthTokenVerifier(auth, discovery) {
     const jwksUri = await discovery.resolveJwksUri();
     log.debug("oauth.jwks.fetch", { jwksUri });
     const keySet = await fetchVerificationKeySet(jwksUri);
+    assertAccessTokenTyp(token, allowedTyps);
     const claims = await verifyJwtClaims(token, keySet, issuer, acceptedAudiences, auth);
     assertNonEmptySubject(claims);
     const context = buildMcpAuthContext({ token, claims, issuer, resource, acceptedAudiences });
@@ -908,6 +924,16 @@ function dispatchFor(pathname) {
   }
   return { kind: "mcp" };
 }
+function applyForwardedProto(request) {
+  const proto = request.headers.get("x-forwarded-proto")?.split(",")[0]?.trim();
+  if (!proto)
+    return request;
+  const url = new URL(request.url);
+  if (`${proto}:` === url.protocol)
+    return request;
+  url.protocol = `${proto}:`;
+  return new Request(url.href, request);
+}
 function createSupabaseHandler(mcp, options = {}) {
   const resourcePath = deriveResourcePath(options);
   if (resourcePath !== void 0)
@@ -920,16 +946,17 @@ function createSupabaseHandler(mcp, options = {}) {
   const invokeToolHandler = createInvokeToolHandler(mcp, runtimeOptions);
   const metadataHandler = createOAuthProtectedResourceMetadataHandler(mcp, runtimeOptions);
   return async (request) => {
-    const target = dispatchFor(new URL(request.url).pathname);
+    const req = applyForwardedProto(request);
+    const target = dispatchFor(new URL(req.url).pathname);
     switch (target.kind) {
       case "metadata":
-        return metadataHandler(request);
+        return metadataHandler(req);
       case "list-tools":
-        return listToolsHandler(request);
+        return listToolsHandler(req);
       case "invoke-tool":
-        return invokeToolHandler(request, target.toolName);
+        return invokeToolHandler(req, target.toolName);
       case "mcp":
-        return mcpHandler(request);
+        return mcpHandler(req);
     }
   };
 }

package/dist/stacks/supabase/index.d.cts

@@ -1,4 +1,4 @@
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 type SupabaseHandler = (request: Request) => Promise<Response>;

package/dist/stacks/supabase/index.d.ts

@@ -1,4 +1,4 @@
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 type SupabaseHandler = (request: Request) => Promise<Response>;

package/dist/stacks/supabase/index.js

@@ -1,19 +1,19 @@
 import {
   createMcpProtocolHandler
-} from "../../chunk-DF3DD3KD.js";
+} from "../../chunk-WLNT2FX7.js";
 import {
   createOAuthProtectedResourceMetadataHandler
-} from "../../chunk-X7V2CL7C.js";
+} from "../../chunk-QDKOF4UF.js";
 import {
   createInvokeToolHandler
-} from "../../chunk-SZLSAGDF.js";
+} from "../../chunk-YWLMMDET.js";
 import {
   createListToolsHandler
-} from "../../chunk-PJXKJNSZ.js";
+} from "../../chunk-VNRQPA4K.js";
 import "../../chunk-MA5H6PSF.js";
 import {
   assertResourcePathShape
-} from "../../chunk-LAFJDJRY.js";
+} from "../../chunk-G4XA7IJM.js";
 import {
   trimTrailingSlash
 } from "../../chunk-QC3DXQTH.js";
@@ -54,6 +54,16 @@ function dispatchFor(pathname) {
   }
   return { kind: "mcp" };
 }
+function applyForwardedProto(request) {
+  const proto = request.headers.get("x-forwarded-proto")?.split(",")[0]?.trim();
+  if (!proto)
+    return request;
+  const url = new URL(request.url);
+  if (`${proto}:` === url.protocol)
+    return request;
+  url.protocol = `${proto}:`;
+  return new Request(url.href, request);
+}
 function createSupabaseHandler(mcp, options = {}) {
   const resourcePath = deriveResourcePath(options);
   if (resourcePath !== void 0)
@@ -66,16 +76,17 @@ function createSupabaseHandler(mcp, options = {}) {
   const invokeToolHandler = createInvokeToolHandler(mcp, runtimeOptions);
   const metadataHandler = createOAuthProtectedResourceMetadataHandler(mcp, runtimeOptions);
   return async (request) => {
-    const target = dispatchFor(new URL(request.url).pathname);
+    const req = applyForwardedProto(request);
+    const target = dispatchFor(new URL(req.url).pathname);
     switch (target.kind) {
       case "metadata":
-        return metadataHandler(request);
+        return metadataHandler(req);
       case "list-tools":
-        return listToolsHandler(request);
+        return listToolsHandler(req);
       case "invoke-tool":
-        return invokeToolHandler(request, target.toolName);
+        return invokeToolHandler(req, target.toolName);
       case "mcp":
-        return mcpHandler(request);
+        return mcpHandler(req);
     }
   };
 }

package/dist/stacks/supabase/vite.cjs

@@ -31,7 +31,7 @@ var import_node_fs = require("fs");
 var import_node_path = require("path");
 
 // package.json
-var version = "0.10.0";
+var version = "0.11.0";
 
 // src/core/fs-errors.ts
 function isFileMissing(err) {

package/dist/stacks/supabase/vite.js

@@ -1,6 +1,6 @@
 import {
   version
-} from "../../chunk-4XJ2R3DD.js";
+} from "../../chunk-ENWRS6AT.js";
 import {
   isFileMissing
 } from "../../chunk-Y3ZFPEQH.js";

package/dist/stacks/tanstack/index.cjs

@@ -293,6 +293,7 @@ function stringClaim(claims, name) {
 // src/auth/verifier.ts
 var DEFAULT_JWT_ALGORITHMS = ["RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "EdDSA"];
 var DEFAULT_CLOCK_TOLERANCE_SECONDS = 30;
+var DEFAULT_ACCESS_TOKEN_TYPS = ["at+jwt", "JWT"];
 var JWKS_FETCH_TIMEOUT_MS = 5e3;
 var OAuthTokenError = class extends Error {
   constructor(status, oauthError, message) {
@@ -325,10 +326,23 @@ async function fetchVerificationKeySet(jwksUri) {
     throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
+function assertAccessTokenTyp(token, allowed) {
+  let header;
+  try {
+    header = (0, import_jose.decodeProtectedHeader)(token);
+  } catch (err) {
+    log.debug("oauth.verify.bad_header", { ...describeError(err), outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Malformed JWT header");
+  }
+  const typ = header.typ;
+  if (typeof typ !== "string" || !allowed.includes(typ)) {
+    log.debug("oauth.verify.bad_typ", { jwtTyp: typ, allowed, outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Access token typ header is not accepted");
+  }
+}
 async function verifyJwtClaims(token, keySet, issuer, audience, auth) {
   try {
     const { payload } = await (0, import_jose.jwtVerify)(token, keySet, {
-      typ: "at+jwt",
       // `issuer` is trimmed of any trailing slash; accept both forms so a token whose
       // `iss` carries the slash the AS publishes still verifies.
       issuer: [issuer, `${issuer}/`],
@@ -377,6 +391,7 @@ function buildMcpAuthContext(args) {
   };
 }
 function createOAuthTokenVerifier(auth, discovery) {
+  const allowedTyps = auth.accessTokenTyp ?? DEFAULT_ACCESS_TOKEN_TYPS;
   return async (token, request, options) => {
     const resource = resolveProtectedResource(auth, request, options);
     const issuer = await discovery.resolveIssuer();
@@ -385,6 +400,7 @@ function createOAuthTokenVerifier(auth, discovery) {
     const jwksUri = await discovery.resolveJwksUri();
     log.debug("oauth.jwks.fetch", { jwksUri });
     const keySet = await fetchVerificationKeySet(jwksUri);
+    assertAccessTokenTyp(token, allowedTyps);
     const claims = await verifyJwtClaims(token, keySet, issuer, acceptedAudiences, auth);
     assertNonEmptySubject(claims);
     const context = buildMcpAuthContext({ token, claims, issuer, resource, acceptedAudiences });

package/dist/stacks/tanstack/index.d.cts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 interface TanStackRouteCtx {

package/dist/stacks/tanstack/index.d.ts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 interface TanStackRouteCtx {

package/dist/stacks/tanstack/index.js

@@ -1,17 +1,17 @@
 import {
   createMcpProtocolHandler
-} from "../../chunk-DF3DD3KD.js";
+} from "../../chunk-WLNT2FX7.js";
 import {
   createOAuthProtectedResourceMetadataHandler
-} from "../../chunk-X7V2CL7C.js";
+} from "../../chunk-QDKOF4UF.js";
 import {
   createInvokeToolHandler
-} from "../../chunk-SZLSAGDF.js";
+} from "../../chunk-YWLMMDET.js";
 import {
   createListToolsHandler
-} from "../../chunk-PJXKJNSZ.js";
+} from "../../chunk-VNRQPA4K.js";
 import "../../chunk-MA5H6PSF.js";
-import "../../chunk-LAFJDJRY.js";
+import "../../chunk-G4XA7IJM.js";
 import "../../chunk-QC3DXQTH.js";
 import "../../chunk-6DXGZZA4.js";
 

package/dist/{types-C5SSORxe.d.ts → types-BanzncFh.d.ts}

@@ -64,6 +64,14 @@ interface McpAuthConfig {
     readonly jwksUri?: string;
     readonly algorithms?: readonly string[];
     readonly clockToleranceSeconds?: number;
+    /**
+     * Allowed values for the access token's JOSE `typ` header. Defaults to
+     * `["at+jwt", "JWT"]` so both the RFC 9068 access-token shape and the plain
+     * user-JWT shape (notably Supabase GoTrue's OAuth tokens) are accepted out of
+     * the box. Pin to `["at+jwt"]` to enforce strict RFC 9068. The header `typ`
+     * must be present and string-typed; this option only controls which values pass.
+     */
+    readonly accessTokenTyp?: readonly string[];
 }
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovable.dev/mcp-js",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Author MCP servers for Lovable apps. Declare tools with defineTool, register them in defineMcp, and a framework adapter (TanStack or Supabase Edge Functions) emits the route(s) at build time.",
   "type": "module",
   "repository": {