@lovable.dev/mcp-js 0.10.1 → 0.12.0

package/README.internal.md

@@ -145,7 +145,7 @@ src/
       index.ts                   # barrel
     supabase/
       handler.ts                 # createSupabaseHandler (URL-suffix dispatcher to protocols/*)
-      emit.ts                    # syncSupabaseFunction (emits supabase/functions/<name>/{index.ts,deno.json})
+      emit.ts                    # syncSupabaseFunction (esbuild-bundles supabase/functions/<name>/index.ts)
       vite.ts                    # mcpPlugin (Vite-lifecycle trigger; exposes McpPluginApi with urlPath=/functions/v1/<functionName>)
       index.ts                   # barrel
 tests/

package/README.md

@@ -217,7 +217,7 @@ A `500` on an OAuth-protected route is always one of two causes, logged at `erro
 
 ## Supabase Edge Functions
 
-Ship the same `defineMcp` server as a single Supabase Edge Function. Authoring is identical to the TanStack flow; only the build-time step differs — a different Vite plugin emits a single Deno function entry (plus a `deno.json` import map) instead of a tree of file-router routes.
+Ship the same `defineMcp` server as a single Supabase Edge Function. Authoring is identical to the TanStack flow; only the build-time step differs — a different Vite plugin bundles your MCP entry and its local imports into one self-contained Deno function (with esbuild) instead of emitting a tree of file-router routes. Third-party dependencies are left as `npm:` specifiers that Deno resolves at runtime, so no import map / `deno.json` is needed.
 
 ```ts
 // src/lib/mcp/index.ts — same as the TanStack flow
@@ -249,7 +249,7 @@ import { mcpPlugin } from "@lovable.dev/mcp-js/stacks/supabase/vite";
 export default defineConfig({ plugins: [mcpPlugin()] });
 ```
 
-The plugin emits `supabase/functions/mcp/index.ts` and `supabase/functions/mcp/deno.json` on `configResolved`, re-emits on `buildStart`, and watches `src/lib/mcp/index.ts` for changes during `vite dev`. The emitted function calls `Deno.serve(createSupabaseHandler(mcp, { functionName: "mcp" }))`. The handler is one Web-Standard `Request → Response` that dispatches by URL suffix to the same protocol handlers the TanStack stack uses:
+The plugin bundles `src/lib/mcp/index.ts` (and the tool files it imports) into `supabase/functions/mcp/index.ts` on `configResolved`, re-emits on `buildStart`, and watches the bundled source files for changes during `vite dev`. The emitted function calls `Deno.serve(createSupabaseHandler(mcp, { functionName: "mcp" }))`. The handler is one Web-Standard `Request → Response` that dispatches by URL suffix to the same protocol handlers the TanStack stack uses:
 
 | URL suffix | Target |
 | --- | --- |
@@ -260,7 +260,7 @@ The plugin emits `supabase/functions/mcp/index.ts` and `supabase/functions/mcp/d
 
 In production the function is mounted at `https://<project-ref>.supabase.co/functions/v1/mcp` and the dispatcher binds the OAuth `resource` to that URL via `functionName`. Locally, run `supabase functions serve mcp --no-verify-jwt` so Supabase's edge-runtime doesn't 401 before the SDK's OAuth verifier sees the bearer.
 
-Ownership: every emitted file carries a `// AUTO-GENERATED by @lovable.dev/mcp-js` banner. The plugin rewrites banner-tagged files in place and cleans up orphans; banner-less files (yours) are never touched. Delete the banner line to take ownership of a file. Deleting the `defineMcp` entry and re-running removes the SDK-owned function files.
+Ownership: the emitted `index.ts` carries a `// AUTO-GENERATED by @lovable.dev/mcp-js` banner. The plugin rewrites the banner-tagged file in place and cleans up orphans (including a `deno.json` left by a pre-bundling SDK version); banner-less files (yours) are never touched. Delete the banner line to take ownership. Deleting the `defineMcp` entry and re-running removes the SDK-owned function file.
 
 ## Subpath exports
 

package/dist/{chunk-LAFJDJRY.js → chunk-G4XA7IJM.js}

@@ -190,6 +190,7 @@ function stringClaim(claims, name) {
 // src/auth/verifier.ts
 var DEFAULT_JWT_ALGORITHMS = ["RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "EdDSA"];
 var DEFAULT_CLOCK_TOLERANCE_SECONDS = 30;
+var DEFAULT_ACCESS_TOKEN_TYPS = ["at+jwt", "JWT"];
 var JWKS_FETCH_TIMEOUT_MS = 5e3;
 var OAuthTokenError = class extends Error {
   constructor(status, oauthError, message) {
@@ -222,10 +223,23 @@ async function fetchVerificationKeySet(jwksUri) {
     throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
+function assertAccessTokenTyp(token, allowed) {
+  let header;
+  try {
+    header = decodeProtectedHeader(token);
+  } catch (err) {
+    log.debug("oauth.verify.bad_header", { ...describeError(err), outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Malformed JWT header");
+  }
+  const typ = header.typ;
+  if (typeof typ !== "string" || !allowed.includes(typ)) {
+    log.debug("oauth.verify.bad_typ", { jwtTyp: typ, allowed, outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Access token typ header is not accepted");
+  }
+}
 async function verifyJwtClaims(token, keySet, issuer, audience, auth) {
   try {
     const { payload } = await jwtVerify(token, keySet, {
-      typ: "at+jwt",
       // `issuer` is trimmed of any trailing slash; accept both forms so a token whose
       // `iss` carries the slash the AS publishes still verifies.
       issuer: [issuer, `${issuer}/`],
@@ -274,6 +288,7 @@ function buildMcpAuthContext(args) {
   };
 }
 function createOAuthTokenVerifier(auth, discovery) {
+  const allowedTyps = auth.accessTokenTyp ?? DEFAULT_ACCESS_TOKEN_TYPS;
   return async (token, request, options) => {
     const resource = resolveProtectedResource(auth, request, options);
     const issuer = await discovery.resolveIssuer();
@@ -282,6 +297,7 @@ function createOAuthTokenVerifier(auth, discovery) {
     const jwksUri = await discovery.resolveJwksUri();
     log.debug("oauth.jwks.fetch", { jwksUri });
     const keySet = await fetchVerificationKeySet(jwksUri);
+    assertAccessTokenTyp(token, allowedTyps);
     const claims = await verifyJwtClaims(token, keySet, issuer, acceptedAudiences, auth);
     assertNonEmptySubject(claims);
     const context = buildMcpAuthContext({ token, claims, issuer, resource, acceptedAudiences });

package/dist/{chunk-X7V2CL7C.js → chunk-QDKOF4UF.js}

@@ -7,7 +7,7 @@ import {
   oauthConfigurationErrorResponse,
   resolveProtectedResource,
   withCors
-} from "./chunk-LAFJDJRY.js";
+} from "./chunk-G4XA7IJM.js";
 import {
   describeError,
   log

package/dist/{chunk-D6KB4Q7R.js → chunk-S3YHTZKJ.js}

@@ -1,5 +1,5 @@
 // package.json
-var version = "0.10.1";
+var version = "0.12.0";
 
 export {
   version

package/dist/{chunk-PJXKJNSZ.js → chunk-VNRQPA4K.js}

@@ -5,7 +5,7 @@ import {
   headResponse,
   methodNotAllowed,
   withCors
-} from "./chunk-LAFJDJRY.js";
+} from "./chunk-G4XA7IJM.js";
 
 // src/protocols/rest/list-tools.ts
 import { objectFromShape } from "@modelcontextprotocol/sdk/server/zod-compat.js";

package/dist/{chunk-DF3DD3KD.js → chunk-WLNT2FX7.js}

@@ -5,7 +5,7 @@ import {
   corsPreflightResponse,
   createRequestAuthorizer,
   withCors
-} from "./chunk-LAFJDJRY.js";
+} from "./chunk-G4XA7IJM.js";
 import {
   describeError,
   log

package/dist/{chunk-SZLSAGDF.js → chunk-YWLMMDET.js}

@@ -8,7 +8,7 @@ import {
   createRequestAuthorizer,
   methodNotAllowed,
   withCors
-} from "./chunk-LAFJDJRY.js";
+} from "./chunk-G4XA7IJM.js";
 
 // src/protocols/rest/invoke-tool.ts
 import { getParseErrorMessage, objectFromShape, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";

package/dist/cli/extract-manifest.cjs

@@ -13,7 +13,7 @@ function isFileMissing(err) {
 }
 
 // package.json
-var version = "0.10.1";
+var version = "0.12.0";
 
 // src/protocols/rest/list-tools.ts
 var import_zod_compat = require("@modelcontextprotocol/sdk/server/zod-compat.js");

package/dist/cli/extract-manifest.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   buildMcpListing
-} from "../chunk-PJXKJNSZ.js";
-import "../chunk-LAFJDJRY.js";
+} from "../chunk-VNRQPA4K.js";
+import "../chunk-G4XA7IJM.js";
 import "../chunk-QC3DXQTH.js";
 import "../chunk-6DXGZZA4.js";
 import {
   version
-} from "../chunk-D6KB4Q7R.js";
+} from "../chunk-S3YHTZKJ.js";
 import {
   isFileMissing
 } from "../chunk-Y3ZFPEQH.js";

package/dist/index.cjs

@@ -159,6 +159,20 @@ function assertOAuthConfig(auth2) {
     for (const algorithm of auth2.algorithms)
       assertJwtAlgorithm(algorithm);
   }
+  if (auth2.accessTokenTyp !== void 0) {
+    if (!Array.isArray(auth2.accessTokenTyp)) {
+      throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must be an array`);
+    }
+    if (auth2.accessTokenTyp.length === 0) {
+      throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must not be empty`);
+    }
+    for (const typ of auth2.accessTokenTyp) {
+      if (typeof typ !== "string") {
+        throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must contain strings`);
+      }
+      assertNonEmptyString("auth.accessTokenTyp", typ);
+    }
+  }
   if (auth2.clockToleranceSeconds !== void 0)
     assertClockToleranceSeconds(auth2.clockToleranceSeconds);
   if (auth2.resource === void 0 && auth2.acceptedAudiences === void 0) {
@@ -174,6 +188,8 @@ function freezeAuth(auth2) {
     Object.freeze(auth2.requiredScopes);
   if (auth2.algorithms)
     Object.freeze(auth2.algorithms);
+  if (auth2.accessTokenTyp)
+    Object.freeze(auth2.accessTokenTyp);
   Object.freeze(auth2);
 }
 function defineTool(def) {
@@ -214,7 +230,8 @@ function issuer(options) {
       ...options,
       acceptedAudiences: frozenAudiences(options.acceptedAudiences),
       requiredScopes: frozenArray(options.requiredScopes),
-      algorithms: frozenArray(options.algorithms)
+      algorithms: frozenArray(options.algorithms),
+      accessTokenTyp: frozenArray(options.accessTokenTyp)
     })
   );
 }

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { e as McpDefinitionInput, d as McpDefinition, Z as ZodRawShape, j as ToolDefinition, M as McpAuthConfig } from './types-C5SSORxe.js';
-export { A as AudioContent, C as ContentAnnotations, a as ContentBlock, E as EmbeddedBlobResource, b as EmbeddedResource, c as EmbeddedTextResource, I as ImageContent, J as JwtClaims, R as ResourceLink, f as ResourceLinkIcon, T as TextContent, g as ToolAnnotations, h as ToolContent, i as ToolContext, k as ToolHandlerResult, l as ZodSchema } from './types-C5SSORxe.js';
+import { e as McpDefinitionInput, d as McpDefinition, Z as ZodRawShape, j as ToolDefinition, M as McpAuthConfig } from './types-BanzncFh.js';
+export { A as AudioContent, C as ContentAnnotations, a as ContentBlock, E as EmbeddedBlobResource, b as EmbeddedResource, c as EmbeddedTextResource, I as ImageContent, J as JwtClaims, R as ResourceLink, f as ResourceLinkIcon, T as TextContent, g as ToolAnnotations, h as ToolContent, i as ToolContext, k as ToolHandlerResult, l as ZodSchema } from './types-BanzncFh.js';
 import 'zod';
 
 /**
@@ -29,6 +29,7 @@ interface IssuerOAuthOptionsBase {
     readonly jwksUri?: string;
     readonly algorithms?: readonly string[];
     readonly clockToleranceSeconds?: number;
+    readonly accessTokenTyp?: readonly string[];
 }
 type IssuerOAuthOptions = IssuerOAuthOptionsBase & ({
     readonly resource: string;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { e as McpDefinitionInput, d as McpDefinition, Z as ZodRawShape, j as ToolDefinition, M as McpAuthConfig } from './types-C5SSORxe.js';
-export { A as AudioContent, C as ContentAnnotations, a as ContentBlock, E as EmbeddedBlobResource, b as EmbeddedResource, c as EmbeddedTextResource, I as ImageContent, J as JwtClaims, R as ResourceLink, f as ResourceLinkIcon, T as TextContent, g as ToolAnnotations, h as ToolContent, i as ToolContext, k as ToolHandlerResult, l as ZodSchema } from './types-C5SSORxe.js';
+import { e as McpDefinitionInput, d as McpDefinition, Z as ZodRawShape, j as ToolDefinition, M as McpAuthConfig } from './types-BanzncFh.js';
+export { A as AudioContent, C as ContentAnnotations, a as ContentBlock, E as EmbeddedBlobResource, b as EmbeddedResource, c as EmbeddedTextResource, I as ImageContent, J as JwtClaims, R as ResourceLink, f as ResourceLinkIcon, T as TextContent, g as ToolAnnotations, h as ToolContent, i as ToolContext, k as ToolHandlerResult, l as ZodSchema } from './types-BanzncFh.js';
 import 'zod';
 
 /**
@@ -29,6 +29,7 @@ interface IssuerOAuthOptionsBase {
     readonly jwksUri?: string;
     readonly algorithms?: readonly string[];
     readonly clockToleranceSeconds?: number;
+    readonly accessTokenTyp?: readonly string[];
 }
 type IssuerOAuthOptions = IssuerOAuthOptionsBase & ({
     readonly resource: string;

package/dist/index.js

@@ -104,6 +104,20 @@ function assertOAuthConfig(auth2) {
     for (const algorithm of auth2.algorithms)
       assertJwtAlgorithm(algorithm);
   }
+  if (auth2.accessTokenTyp !== void 0) {
+    if (!Array.isArray(auth2.accessTokenTyp)) {
+      throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must be an array`);
+    }
+    if (auth2.accessTokenTyp.length === 0) {
+      throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must not be empty`);
+    }
+    for (const typ of auth2.accessTokenTyp) {
+      if (typeof typ !== "string") {
+        throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must contain strings`);
+      }
+      assertNonEmptyString("auth.accessTokenTyp", typ);
+    }
+  }
   if (auth2.clockToleranceSeconds !== void 0)
     assertClockToleranceSeconds(auth2.clockToleranceSeconds);
   if (auth2.resource === void 0 && auth2.acceptedAudiences === void 0) {
@@ -119,6 +133,8 @@ function freezeAuth(auth2) {
     Object.freeze(auth2.requiredScopes);
   if (auth2.algorithms)
     Object.freeze(auth2.algorithms);
+  if (auth2.accessTokenTyp)
+    Object.freeze(auth2.accessTokenTyp);
   Object.freeze(auth2);
 }
 function defineTool(def) {
@@ -159,7 +175,8 @@ function issuer(options) {
       ...options,
       acceptedAudiences: frozenAudiences(options.acceptedAudiences),
       requiredScopes: frozenArray(options.requiredScopes),
-      algorithms: frozenArray(options.algorithms)
+      algorithms: frozenArray(options.algorithms),
+      accessTokenTyp: frozenArray(options.accessTokenTyp)
     })
   );
 }

package/dist/protocols/mcp/index.cjs

@@ -281,6 +281,7 @@ function stringClaim(claims, name) {
 // src/auth/verifier.ts
 var DEFAULT_JWT_ALGORITHMS = ["RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "EdDSA"];
 var DEFAULT_CLOCK_TOLERANCE_SECONDS = 30;
+var DEFAULT_ACCESS_TOKEN_TYPS = ["at+jwt", "JWT"];
 var JWKS_FETCH_TIMEOUT_MS = 5e3;
 var OAuthTokenError = class extends Error {
   constructor(status, oauthError, message) {
@@ -313,10 +314,23 @@ async function fetchVerificationKeySet(jwksUri) {
     throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
+function assertAccessTokenTyp(token, allowed) {
+  let header;
+  try {
+    header = (0, import_jose.decodeProtectedHeader)(token);
+  } catch (err) {
+    log.debug("oauth.verify.bad_header", { ...describeError(err), outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Malformed JWT header");
+  }
+  const typ = header.typ;
+  if (typeof typ !== "string" || !allowed.includes(typ)) {
+    log.debug("oauth.verify.bad_typ", { jwtTyp: typ, allowed, outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Access token typ header is not accepted");
+  }
+}
 async function verifyJwtClaims(token, keySet, issuer, audience, auth) {
   try {
     const { payload } = await (0, import_jose.jwtVerify)(token, keySet, {
-      typ: "at+jwt",
       // `issuer` is trimmed of any trailing slash; accept both forms so a token whose
       // `iss` carries the slash the AS publishes still verifies.
       issuer: [issuer, `${issuer}/`],
@@ -365,6 +379,7 @@ function buildMcpAuthContext(args) {
   };
 }
 function createOAuthTokenVerifier(auth, discovery) {
+  const allowedTyps = auth.accessTokenTyp ?? DEFAULT_ACCESS_TOKEN_TYPS;
   return async (token, request, options) => {
     const resource = resolveProtectedResource(auth, request, options);
     const issuer = await discovery.resolveIssuer();
@@ -373,6 +388,7 @@ function createOAuthTokenVerifier(auth, discovery) {
     const jwksUri = await discovery.resolveJwksUri();
     log.debug("oauth.jwks.fetch", { jwksUri });
     const keySet = await fetchVerificationKeySet(jwksUri);
+    assertAccessTokenTyp(token, allowedTyps);
     const claims = await verifyJwtClaims(token, keySet, issuer, acceptedAudiences, auth);
     assertNonEmptySubject(claims);
     const context = buildMcpAuthContext({ token, claims, issuer, resource, acceptedAudiences });

package/dist/protocols/mcp/index.d.cts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 type McpProtocolHandler = (request: Request) => Promise<Response>;

package/dist/protocols/mcp/index.d.ts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 type McpProtocolHandler = (request: Request) => Promise<Response>;

package/dist/protocols/mcp/index.js

@@ -1,8 +1,8 @@
 import {
   createMcpProtocolHandler
-} from "../../chunk-DF3DD3KD.js";
+} from "../../chunk-WLNT2FX7.js";
 import "../../chunk-MA5H6PSF.js";
-import "../../chunk-LAFJDJRY.js";
+import "../../chunk-G4XA7IJM.js";
 import "../../chunk-QC3DXQTH.js";
 import "../../chunk-6DXGZZA4.js";
 export {

package/dist/protocols/oauth-metadata.cjs

@@ -283,6 +283,7 @@ function stringClaim(claims, name) {
 // src/auth/verifier.ts
 var DEFAULT_JWT_ALGORITHMS = ["RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "EdDSA"];
 var DEFAULT_CLOCK_TOLERANCE_SECONDS = 30;
+var DEFAULT_ACCESS_TOKEN_TYPS = ["at+jwt", "JWT"];
 var JWKS_FETCH_TIMEOUT_MS = 5e3;
 var OAuthTokenError = class extends Error {
   constructor(status, oauthError, message) {
@@ -315,10 +316,23 @@ async function fetchVerificationKeySet(jwksUri) {
     throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
+function assertAccessTokenTyp(token, allowed) {
+  let header;
+  try {
+    header = (0, import_jose.decodeProtectedHeader)(token);
+  } catch (err) {
+    log.debug("oauth.verify.bad_header", { ...describeError(err), outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Malformed JWT header");
+  }
+  const typ = header.typ;
+  if (typeof typ !== "string" || !allowed.includes(typ)) {
+    log.debug("oauth.verify.bad_typ", { jwtTyp: typ, allowed, outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Access token typ header is not accepted");
+  }
+}
 async function verifyJwtClaims(token, keySet, issuer, audience, auth) {
   try {
     const { payload } = await (0, import_jose.jwtVerify)(token, keySet, {
-      typ: "at+jwt",
       // `issuer` is trimmed of any trailing slash; accept both forms so a token whose
       // `iss` carries the slash the AS publishes still verifies.
       issuer: [issuer, `${issuer}/`],
@@ -367,6 +381,7 @@ function buildMcpAuthContext(args) {
   };
 }
 function createOAuthTokenVerifier(auth, discovery) {
+  const allowedTyps = auth.accessTokenTyp ?? DEFAULT_ACCESS_TOKEN_TYPS;
   return async (token, request, options) => {
     const resource = resolveProtectedResource(auth, request, options);
     const issuer = await discovery.resolveIssuer();
@@ -375,6 +390,7 @@ function createOAuthTokenVerifier(auth, discovery) {
     const jwksUri = await discovery.resolveJwksUri();
     log.debug("oauth.jwks.fetch", { jwksUri });
     const keySet = await fetchVerificationKeySet(jwksUri);
+    assertAccessTokenTyp(token, allowedTyps);
     const claims = await verifyJwtClaims(token, keySet, issuer, acceptedAudiences, auth);
     assertNonEmptySubject(claims);
     const context = buildMcpAuthContext({ token, claims, issuer, resource, acceptedAudiences });

package/dist/protocols/oauth-metadata.d.cts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../types-C5SSORxe.js';
+import { d as McpDefinition } from '../types-BanzncFh.js';
 import 'zod';
 
 type OAuthProtectedResourceMetadataHandler = (request: Request) => Promise<Response>;

package/dist/protocols/oauth-metadata.d.ts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../types-C5SSORxe.js';
+import { d as McpDefinition } from '../types-BanzncFh.js';
 import 'zod';
 
 type OAuthProtectedResourceMetadataHandler = (request: Request) => Promise<Response>;

package/dist/protocols/oauth-metadata.js

@@ -1,7 +1,7 @@
 import {
   createOAuthProtectedResourceMetadataHandler
-} from "../chunk-X7V2CL7C.js";
-import "../chunk-LAFJDJRY.js";
+} from "../chunk-QDKOF4UF.js";
+import "../chunk-G4XA7IJM.js";
 import "../chunk-QC3DXQTH.js";
 import "../chunk-6DXGZZA4.js";
 export {

package/dist/protocols/rest/index.cjs

@@ -291,6 +291,7 @@ function stringClaim(claims, name) {
 // src/auth/verifier.ts
 var DEFAULT_JWT_ALGORITHMS = ["RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "EdDSA"];
 var DEFAULT_CLOCK_TOLERANCE_SECONDS = 30;
+var DEFAULT_ACCESS_TOKEN_TYPS = ["at+jwt", "JWT"];
 var JWKS_FETCH_TIMEOUT_MS = 5e3;
 var OAuthTokenError = class extends Error {
   constructor(status, oauthError, message) {
@@ -323,10 +324,23 @@ async function fetchVerificationKeySet(jwksUri) {
     throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
+function assertAccessTokenTyp(token, allowed) {
+  let header;
+  try {
+    header = (0, import_jose.decodeProtectedHeader)(token);
+  } catch (err) {
+    log.debug("oauth.verify.bad_header", { ...describeError(err), outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Malformed JWT header");
+  }
+  const typ = header.typ;
+  if (typeof typ !== "string" || !allowed.includes(typ)) {
+    log.debug("oauth.verify.bad_typ", { jwtTyp: typ, allowed, outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Access token typ header is not accepted");
+  }
+}
 async function verifyJwtClaims(token, keySet, issuer, audience, auth) {
   try {
     const { payload } = await (0, import_jose.jwtVerify)(token, keySet, {
-      typ: "at+jwt",
       // `issuer` is trimmed of any trailing slash; accept both forms so a token whose
       // `iss` carries the slash the AS publishes still verifies.
       issuer: [issuer, `${issuer}/`],
@@ -375,6 +389,7 @@ function buildMcpAuthContext(args) {
   };
 }
 function createOAuthTokenVerifier(auth, discovery) {
+  const allowedTyps = auth.accessTokenTyp ?? DEFAULT_ACCESS_TOKEN_TYPS;
   return async (token, request, options) => {
     const resource = resolveProtectedResource(auth, request, options);
     const issuer = await discovery.resolveIssuer();
@@ -383,6 +398,7 @@ function createOAuthTokenVerifier(auth, discovery) {
     const jwksUri = await discovery.resolveJwksUri();
     log.debug("oauth.jwks.fetch", { jwksUri });
     const keySet = await fetchVerificationKeySet(jwksUri);
+    assertAccessTokenTyp(token, allowedTyps);
     const claims = await verifyJwtClaims(token, keySet, issuer, acceptedAudiences, auth);
     assertNonEmptySubject(claims);
     const context = buildMcpAuthContext({ token, claims, issuer, resource, acceptedAudiences });

package/dist/protocols/rest/index.d.cts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 type RestListToolsHandler = (request: Request) => Promise<Response>;

package/dist/protocols/rest/index.d.ts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 type RestListToolsHandler = (request: Request) => Promise<Response>;

package/dist/protocols/rest/index.js

@@ -1,11 +1,11 @@
 import {
   createInvokeToolHandler
-} from "../../chunk-SZLSAGDF.js";
+} from "../../chunk-YWLMMDET.js";
 import {
   createListToolsHandler
-} from "../../chunk-PJXKJNSZ.js";
+} from "../../chunk-VNRQPA4K.js";
 import "../../chunk-MA5H6PSF.js";
-import "../../chunk-LAFJDJRY.js";
+import "../../chunk-G4XA7IJM.js";
 import "../../chunk-QC3DXQTH.js";
 import "../../chunk-6DXGZZA4.js";
 export {

package/dist/stacks/supabase/index.cjs

@@ -290,6 +290,7 @@ function stringClaim(claims, name) {
 // src/auth/verifier.ts
 var DEFAULT_JWT_ALGORITHMS = ["RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "EdDSA"];
 var DEFAULT_CLOCK_TOLERANCE_SECONDS = 30;
+var DEFAULT_ACCESS_TOKEN_TYPS = ["at+jwt", "JWT"];
 var JWKS_FETCH_TIMEOUT_MS = 5e3;
 var OAuthTokenError = class extends Error {
   constructor(status, oauthError, message) {
@@ -322,10 +323,23 @@ async function fetchVerificationKeySet(jwksUri) {
     throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
+function assertAccessTokenTyp(token, allowed) {
+  let header;
+  try {
+    header = (0, import_jose.decodeProtectedHeader)(token);
+  } catch (err) {
+    log.debug("oauth.verify.bad_header", { ...describeError(err), outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Malformed JWT header");
+  }
+  const typ = header.typ;
+  if (typeof typ !== "string" || !allowed.includes(typ)) {
+    log.debug("oauth.verify.bad_typ", { jwtTyp: typ, allowed, outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Access token typ header is not accepted");
+  }
+}
 async function verifyJwtClaims(token, keySet, issuer, audience, auth) {
   try {
     const { payload } = await (0, import_jose.jwtVerify)(token, keySet, {
-      typ: "at+jwt",
       // `issuer` is trimmed of any trailing slash; accept both forms so a token whose
       // `iss` carries the slash the AS publishes still verifies.
       issuer: [issuer, `${issuer}/`],
@@ -374,6 +388,7 @@ function buildMcpAuthContext(args) {
   };
 }
 function createOAuthTokenVerifier(auth, discovery) {
+  const allowedTyps = auth.accessTokenTyp ?? DEFAULT_ACCESS_TOKEN_TYPS;
   return async (token, request, options) => {
     const resource = resolveProtectedResource(auth, request, options);
     const issuer = await discovery.resolveIssuer();
@@ -382,6 +397,7 @@ function createOAuthTokenVerifier(auth, discovery) {
     const jwksUri = await discovery.resolveJwksUri();
     log.debug("oauth.jwks.fetch", { jwksUri });
     const keySet = await fetchVerificationKeySet(jwksUri);
+    assertAccessTokenTyp(token, allowedTyps);
     const claims = await verifyJwtClaims(token, keySet, issuer, acceptedAudiences, auth);
     assertNonEmptySubject(claims);
     const context = buildMcpAuthContext({ token, claims, issuer, resource, acceptedAudiences });

package/dist/stacks/supabase/index.d.cts

@@ -1,4 +1,4 @@
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 type SupabaseHandler = (request: Request) => Promise<Response>;

package/dist/stacks/supabase/index.d.ts

@@ -1,4 +1,4 @@
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 type SupabaseHandler = (request: Request) => Promise<Response>;

package/dist/stacks/supabase/index.js

@@ -1,19 +1,19 @@
 import {
   createMcpProtocolHandler
-} from "../../chunk-DF3DD3KD.js";
+} from "../../chunk-WLNT2FX7.js";
 import {
   createOAuthProtectedResourceMetadataHandler
-} from "../../chunk-X7V2CL7C.js";
+} from "../../chunk-QDKOF4UF.js";
 import {
   createInvokeToolHandler
-} from "../../chunk-SZLSAGDF.js";
+} from "../../chunk-YWLMMDET.js";
 import {
   createListToolsHandler
-} from "../../chunk-PJXKJNSZ.js";
+} from "../../chunk-VNRQPA4K.js";
 import "../../chunk-MA5H6PSF.js";
 import {
   assertResourcePathShape
-} from "../../chunk-LAFJDJRY.js";
+} from "../../chunk-G4XA7IJM.js";
 import {
   trimTrailingSlash
 } from "../../chunk-QC3DXQTH.js";

package/dist/stacks/supabase/vite.cjs

@@ -27,11 +27,12 @@ module.exports = __toCommonJS(vite_exports);
 var import_node_path2 = require("path");
 
 // src/stacks/supabase/emit.ts
+var import_esbuild = require("esbuild");
 var import_node_fs = require("fs");
 var import_node_path = require("path");
 
 // package.json
-var version = "0.10.1";
+var version = "0.12.0";
 
 // src/core/fs-errors.ts
 function isFileMissing(err) {
@@ -54,10 +55,6 @@ var DEFAULT_FUNCTIONS_DIR = "supabase/functions";
 var DEFAULT_FUNCTION_NAME = "mcp";
 var GENERATED_BANNER = "// AUTO-GENERATED by @lovable.dev/mcp-js \u2014 do not edit. Regenerated by the Vite plugin.\n// To take ownership, delete this banner line; the plugin then leaves the file alone.";
 var GENERATED_JSON_MARKER_KEY = "_lovableMcpGenerated";
-var GENERATED_JSON_MARKER_VALUE = "AUTO-GENERATED by @lovable.dev/mcp-js \u2014 do not edit. Regenerated by the Vite plugin. To take ownership, remove this key; the plugin then leaves the file alone.";
-function normalizePath(p) {
-  return p.split(import_node_path.sep).join("/");
-}
 function fileExists(path) {
   try {
     (0, import_node_fs.lstatSync)(path);
@@ -100,32 +97,63 @@ function writeIfChanged(file, content, ownershipCheck) {
   (0, import_node_fs.writeFileSync)(file, content, "utf8");
   return true;
 }
-function relativeTsSpecifier(fromFile, toFile) {
-  const rel = normalizePath((0, import_node_path.relative)((0, import_node_path.dirname)(fromFile), toFile));
-  return rel.startsWith(".") ? rel : `./${rel}`;
+function readProjectDependencyVersions(projectRoot) {
+  try {
+    const pkg = JSON.parse((0, import_node_fs.readFileSync)((0, import_node_path.join)(projectRoot, "package.json"), "utf8"));
+    return { ...pkg.peerDependencies, ...pkg.devDependencies, ...pkg.dependencies };
+  } catch {
+    return {};
+  }
 }
-function buildFunctionEntry(mcpEntryAbs, functionEntryAbs, functionName) {
-  const entryImport = relativeTsSpecifier(functionEntryAbs, mcpEntryAbs);
-  return `${GENERATED_BANNER}
-// supabase function: ${functionName}
-// emitted to: supabase/functions/${functionName}/index.ts
-
-import { createSupabaseHandler } from "npm:@lovable.dev/mcp-js@${version}/stacks/supabase";
-
-import mcp from "${entryImport}";
-
-Deno.serve(createSupabaseHandler(mcp, { functionName: ${JSON.stringify(functionName)} }));
-`;
+function npmSpecifierFor(bare, versions) {
+  const pkg = bare.startsWith("@") ? bare.split("/").slice(0, 2).join("/") : bare.split("/")[0];
+  const subpath = bare.slice(pkg.length);
+  if (pkg === "@lovable.dev/mcp-js")
+    return `npm:${pkg}@${version}${subpath}`;
+  const range = versions[pkg];
+  const version2 = range && /^[\dv^~>=]|^latest$/.test(range) ? range : void 0;
+  return version2 ? `npm:${pkg}@${version2}${subpath}` : `npm:${pkg}${subpath}`;
 }
-function buildDenoJson() {
-  const config = {
-    [GENERATED_JSON_MARKER_KEY]: GENERATED_JSON_MARKER_VALUE,
-    imports: {
-      "@lovable.dev/mcp-js": `npm:@lovable.dev/mcp-js@${version}`
+function externalizeBareAsNpm(versions) {
+  return {
+    name: "lovable-mcp-externalize-bare-as-npm",
+    setup(pluginBuild) {
+      pluginBuild.onResolve({ filter: /.*/ }, (args) => {
+        const p = args.path;
+        if (p.startsWith(".") || p.startsWith("/"))
+          return null;
+        if (/^(npm|node|jsr|https?|data):/.test(p))
+          return { path: p, external: true };
+        return { path: npmSpecifierFor(p, versions), external: true };
+      });
     }
   };
-  return `${JSON.stringify(config, null, 2)}
+}
+async function bundleFunctionEntry(projectRoot, mcpEntryAbs, functionName) {
+  const versions = readProjectDependencyVersions(projectRoot);
+  const wrapper = `import mcp from ${JSON.stringify(mcpEntryAbs)};
+import { createSupabaseHandler } from "@lovable.dev/mcp-js/stacks/supabase";
+Deno.serve(createSupabaseHandler(mcp, { functionName: ${JSON.stringify(functionName)} }));
 `;
+  const result = await (0, import_esbuild.build)({
+    stdin: { contents: wrapper, resolveDir: projectRoot, sourcefile: "lovable-mcp-supabase-entry.ts", loader: "ts" },
+    bundle: true,
+    write: false,
+    metafile: true,
+    format: "esm",
+    platform: "neutral",
+    target: "esnext",
+    absWorkingDir: projectRoot,
+    logLevel: "silent",
+    plugins: [externalizeBareAsNpm(versions)]
+  });
+  const out = result.outputFiles[0]?.text ?? "";
+  const inputs = Object.keys(result.metafile?.inputs ?? {}).filter((p) => !p.startsWith("<") && !p.startsWith("npm:")).map((p) => (0, import_node_path.resolve)(projectRoot, p));
+  const code = `${GENERATED_BANNER}
+// supabase function: ${functionName}
+// Bundled from ${(0, import_node_path.relative)(projectRoot, mcpEntryAbs).split(import_node_path.sep).join("/")} by @lovable.dev/mcp-js.
+` + out;
+  return { code, inputs };
 }
 function resolvePaths(options) {
   const projectRoot = (0, import_node_path.resolve)(options.projectRoot);
@@ -142,31 +170,25 @@ function resolvePaths(options) {
   return {
     functionDir,
     functionEntry: (0, import_node_path.join)(functionDir, "index.ts"),
-    denoJson: (0, import_node_path.join)(functionDir, "deno.json"),
     mcpEntryAbs: (0, import_node_path.resolve)(projectRoot, mcpEntry)
   };
 }
-function syncSupabaseFunction(options) {
+async function syncSupabaseFunction(options) {
+  const projectRoot = (0, import_node_path.resolve)(options.projectRoot);
   const paths = resolvePaths(options);
   const functionName = options.functionName ?? DEFAULT_FUNCTION_NAME;
   const written = [];
   const removed = [];
   if (!fileExists(paths.mcpEntryAbs)) {
     cleanupOrphans(paths.functionDir, /* @__PURE__ */ new Set(), removed);
-    return { written, removed };
+    return { written, removed, inputs: [] };
   }
-  if (writeIfChanged(
-    paths.functionEntry,
-    buildFunctionEntry(paths.mcpEntryAbs, paths.functionEntry, functionName),
-    hasGeneratedBanner
-  )) {
+  const { code, inputs } = await bundleFunctionEntry(projectRoot, paths.mcpEntryAbs, functionName);
+  if (writeIfChanged(paths.functionEntry, code, hasGeneratedBanner)) {
     written.push(paths.functionEntry);
   }
-  if (writeIfChanged(paths.denoJson, buildDenoJson(), hasGeneratedJsonMarker)) {
-    written.push(paths.denoJson);
-  }
-  cleanupOrphans(paths.functionDir, /* @__PURE__ */ new Set([paths.functionEntry, paths.denoJson]), removed);
-  return { written, removed };
+  cleanupOrphans(paths.functionDir, /* @__PURE__ */ new Set([paths.functionEntry]), removed);
+  return { written, removed, inputs };
 }
 function cleanupOrphans(functionDir, expected, removed) {
   let entries;
@@ -202,7 +224,7 @@ function cleanupOrphans(functionDir, expected, removed) {
 }
 
 // src/stacks/supabase/vite.ts
-function normalizePath2(p) {
+function normalizePath(p) {
   return p.split(import_node_path2.sep).join("/");
 }
 function mcpPlugin(options = {}) {
@@ -212,13 +234,15 @@ function mcpPlugin(options = {}) {
   const urlPath = `${FUNCTIONS_MOUNT_PREFIX}${functionName}`;
   let projectRoot = process.cwd();
   let mcpEntryAbs = (0, import_node_path2.resolve)(projectRoot, mcpEntryOption);
-  const regenerate = () => {
-    syncSupabaseFunction({
+  let watchedInputs = /* @__PURE__ */ new Set();
+  const regenerate = async () => {
+    const { inputs } = await syncSupabaseFunction({
       projectRoot,
       mcpEntry: mcpEntryOption,
       functionsDir: functionsDirOption,
       functionName
     });
+    watchedInputs = new Set(inputs.map(normalizePath));
   };
   return {
     name: "@lovable.dev/mcp-js/supabase",
@@ -231,16 +255,23 @@ function mcpPlugin(options = {}) {
       },
       urlPath
     },
-    configResolved(config) {
+    async configResolved(config) {
       projectRoot = config.root;
       mcpEntryAbs = (0, import_node_path2.resolve)(projectRoot, mcpEntryOption);
-      regenerate();
+      await regenerate();
     },
     configureServer(server) {
       const onChange = (file) => {
-        if (normalizePath2(file) === normalizePath2(mcpEntryAbs)) {
-          regenerate();
-        }
+        const norm = normalizePath(file);
+        if (norm !== normalizePath(mcpEntryAbs) && !watchedInputs.has(norm))
+          return;
+        regenerate().catch((err) => {
+          const message = `[@lovable.dev/mcp-js] failed to regenerate the Supabase function: ${err instanceof Error ? err.message : String(err)}`;
+          if (server.config?.logger?.error)
+            server.config.logger.error(message);
+          else
+            console.error(message);
+        });
       };
       server.watcher.on("add", onChange);
       server.watcher.on("change", onChange);
@@ -251,8 +282,8 @@ function mcpPlugin(options = {}) {
         server.watcher.off("unlink", onChange);
       });
     },
-    buildStart() {
-      regenerate();
+    async buildStart() {
+      await regenerate();
     }
   };
 }

package/dist/stacks/supabase/vite.d.cts

@@ -34,11 +34,14 @@ interface McpPluginOptions {
  * Lifecycle, mirroring `stacks/tanstack/vite`:
  *  - `configResolved` finalizes the project root and runs the first emit.
  *  - `buildStart` re-runs the emit so a `vite build` always picks up the
- *    latest entry.
- *  - `configureServer` re-emits when the entry file appears, changes, or
- *    is removed during `vite dev`, so a developer editing tools sees the
- *    function regenerate without restarting the server.
+ *    latest source.
+ *  - `configureServer` re-emits when the entry or any bundled source file
+ *    (tools, local helpers) changes during `vite dev`, so editing a tool
+ *    regenerates the function without restarting the server.
  *
+ * The entry and its local import graph are bundled by esbuild into one
+ * self-contained Deno module (deps left as `npm:` specifiers), so the deployed
+ * function carries no cross-project imports the Supabase deploy can't upload.
  * Idempotent: `syncSupabaseFunction` writes only on byte-level change and
  * cleans up SDK-owned files when the entry is deleted.
  */

package/dist/stacks/supabase/vite.d.ts

@@ -34,11 +34,14 @@ interface McpPluginOptions {
  * Lifecycle, mirroring `stacks/tanstack/vite`:
  *  - `configResolved` finalizes the project root and runs the first emit.
  *  - `buildStart` re-runs the emit so a `vite build` always picks up the
- *    latest entry.
- *  - `configureServer` re-emits when the entry file appears, changes, or
- *    is removed during `vite dev`, so a developer editing tools sees the
- *    function regenerate without restarting the server.
+ *    latest source.
+ *  - `configureServer` re-emits when the entry or any bundled source file
+ *    (tools, local helpers) changes during `vite dev`, so editing a tool
+ *    regenerates the function without restarting the server.
  *
+ * The entry and its local import graph are bundled by esbuild into one
+ * self-contained Deno module (deps left as `npm:` specifiers), so the deployed
+ * function carries no cross-project imports the Supabase deploy can't upload.
  * Idempotent: `syncSupabaseFunction` writes only on byte-level change and
  * cleans up SDK-owned files when the entry is deleted.
  */

package/dist/stacks/supabase/vite.js

@@ -1,6 +1,6 @@
 import {
   version
-} from "../../chunk-D6KB4Q7R.js";
+} from "../../chunk-S3YHTZKJ.js";
 import {
   isFileMissing
 } from "../../chunk-Y3ZFPEQH.js";
@@ -13,6 +13,7 @@ import {
 import { resolve as resolve2, sep as sep2 } from "path";
 
 // src/stacks/supabase/emit.ts
+import { build } from "esbuild";
 import { lstatSync, mkdirSync, readFileSync, readdirSync, unlinkSync, writeFileSync } from "fs";
 import { dirname, join, relative, resolve, sep } from "path";
 var DEFAULT_MCP_ENTRY = "src/lib/mcp/index.ts";
@@ -20,10 +21,6 @@ var DEFAULT_FUNCTIONS_DIR = "supabase/functions";
 var DEFAULT_FUNCTION_NAME = "mcp";
 var GENERATED_BANNER = "// AUTO-GENERATED by @lovable.dev/mcp-js \u2014 do not edit. Regenerated by the Vite plugin.\n// To take ownership, delete this banner line; the plugin then leaves the file alone.";
 var GENERATED_JSON_MARKER_KEY = "_lovableMcpGenerated";
-var GENERATED_JSON_MARKER_VALUE = "AUTO-GENERATED by @lovable.dev/mcp-js \u2014 do not edit. Regenerated by the Vite plugin. To take ownership, remove this key; the plugin then leaves the file alone.";
-function normalizePath(p) {
-  return p.split(sep).join("/");
-}
 function fileExists(path) {
   try {
     lstatSync(path);
@@ -66,32 +63,63 @@ function writeIfChanged(file, content, ownershipCheck) {
   writeFileSync(file, content, "utf8");
   return true;
 }
-function relativeTsSpecifier(fromFile, toFile) {
-  const rel = normalizePath(relative(dirname(fromFile), toFile));
-  return rel.startsWith(".") ? rel : `./${rel}`;
+function readProjectDependencyVersions(projectRoot) {
+  try {
+    const pkg = JSON.parse(readFileSync(join(projectRoot, "package.json"), "utf8"));
+    return { ...pkg.peerDependencies, ...pkg.devDependencies, ...pkg.dependencies };
+  } catch {
+    return {};
+  }
 }
-function buildFunctionEntry(mcpEntryAbs, functionEntryAbs, functionName) {
-  const entryImport = relativeTsSpecifier(functionEntryAbs, mcpEntryAbs);
-  return `${GENERATED_BANNER}
-// supabase function: ${functionName}
-// emitted to: supabase/functions/${functionName}/index.ts
-
-import { createSupabaseHandler } from "npm:@lovable.dev/mcp-js@${version}/stacks/supabase";
-
-import mcp from "${entryImport}";
-
-Deno.serve(createSupabaseHandler(mcp, { functionName: ${JSON.stringify(functionName)} }));
-`;
+function npmSpecifierFor(bare, versions) {
+  const pkg = bare.startsWith("@") ? bare.split("/").slice(0, 2).join("/") : bare.split("/")[0];
+  const subpath = bare.slice(pkg.length);
+  if (pkg === "@lovable.dev/mcp-js")
+    return `npm:${pkg}@${version}${subpath}`;
+  const range = versions[pkg];
+  const version2 = range && /^[\dv^~>=]|^latest$/.test(range) ? range : void 0;
+  return version2 ? `npm:${pkg}@${version2}${subpath}` : `npm:${pkg}${subpath}`;
 }
-function buildDenoJson() {
-  const config = {
-    [GENERATED_JSON_MARKER_KEY]: GENERATED_JSON_MARKER_VALUE,
-    imports: {
-      "@lovable.dev/mcp-js": `npm:@lovable.dev/mcp-js@${version}`
+function externalizeBareAsNpm(versions) {
+  return {
+    name: "lovable-mcp-externalize-bare-as-npm",
+    setup(pluginBuild) {
+      pluginBuild.onResolve({ filter: /.*/ }, (args) => {
+        const p = args.path;
+        if (p.startsWith(".") || p.startsWith("/"))
+          return null;
+        if (/^(npm|node|jsr|https?|data):/.test(p))
+          return { path: p, external: true };
+        return { path: npmSpecifierFor(p, versions), external: true };
+      });
     }
   };
-  return `${JSON.stringify(config, null, 2)}
+}
+async function bundleFunctionEntry(projectRoot, mcpEntryAbs, functionName) {
+  const versions = readProjectDependencyVersions(projectRoot);
+  const wrapper = `import mcp from ${JSON.stringify(mcpEntryAbs)};
+import { createSupabaseHandler } from "@lovable.dev/mcp-js/stacks/supabase";
+Deno.serve(createSupabaseHandler(mcp, { functionName: ${JSON.stringify(functionName)} }));
 `;
+  const result = await build({
+    stdin: { contents: wrapper, resolveDir: projectRoot, sourcefile: "lovable-mcp-supabase-entry.ts", loader: "ts" },
+    bundle: true,
+    write: false,
+    metafile: true,
+    format: "esm",
+    platform: "neutral",
+    target: "esnext",
+    absWorkingDir: projectRoot,
+    logLevel: "silent",
+    plugins: [externalizeBareAsNpm(versions)]
+  });
+  const out = result.outputFiles[0]?.text ?? "";
+  const inputs = Object.keys(result.metafile?.inputs ?? {}).filter((p) => !p.startsWith("<") && !p.startsWith("npm:")).map((p) => resolve(projectRoot, p));
+  const code = `${GENERATED_BANNER}
+// supabase function: ${functionName}
+// Bundled from ${relative(projectRoot, mcpEntryAbs).split(sep).join("/")} by @lovable.dev/mcp-js.
+` + out;
+  return { code, inputs };
 }
 function resolvePaths(options) {
   const projectRoot = resolve(options.projectRoot);
@@ -108,31 +136,25 @@ function resolvePaths(options) {
   return {
     functionDir,
     functionEntry: join(functionDir, "index.ts"),
-    denoJson: join(functionDir, "deno.json"),
     mcpEntryAbs: resolve(projectRoot, mcpEntry)
   };
 }
-function syncSupabaseFunction(options) {
+async function syncSupabaseFunction(options) {
+  const projectRoot = resolve(options.projectRoot);
   const paths = resolvePaths(options);
   const functionName = options.functionName ?? DEFAULT_FUNCTION_NAME;
   const written = [];
   const removed = [];
   if (!fileExists(paths.mcpEntryAbs)) {
     cleanupOrphans(paths.functionDir, /* @__PURE__ */ new Set(), removed);
-    return { written, removed };
+    return { written, removed, inputs: [] };
   }
-  if (writeIfChanged(
-    paths.functionEntry,
-    buildFunctionEntry(paths.mcpEntryAbs, paths.functionEntry, functionName),
-    hasGeneratedBanner
-  )) {
+  const { code, inputs } = await bundleFunctionEntry(projectRoot, paths.mcpEntryAbs, functionName);
+  if (writeIfChanged(paths.functionEntry, code, hasGeneratedBanner)) {
     written.push(paths.functionEntry);
   }
-  if (writeIfChanged(paths.denoJson, buildDenoJson(), hasGeneratedJsonMarker)) {
-    written.push(paths.denoJson);
-  }
-  cleanupOrphans(paths.functionDir, /* @__PURE__ */ new Set([paths.functionEntry, paths.denoJson]), removed);
-  return { written, removed };
+  cleanupOrphans(paths.functionDir, /* @__PURE__ */ new Set([paths.functionEntry]), removed);
+  return { written, removed, inputs };
 }
 function cleanupOrphans(functionDir, expected, removed) {
   let entries;
@@ -168,7 +190,7 @@ function cleanupOrphans(functionDir, expected, removed) {
 }
 
 // src/stacks/supabase/vite.ts
-function normalizePath2(p) {
+function normalizePath(p) {
   return p.split(sep2).join("/");
 }
 function mcpPlugin(options = {}) {
@@ -178,13 +200,15 @@ function mcpPlugin(options = {}) {
   const urlPath = `${FUNCTIONS_MOUNT_PREFIX}${functionName}`;
   let projectRoot = process.cwd();
   let mcpEntryAbs = resolve2(projectRoot, mcpEntryOption);
-  const regenerate = () => {
-    syncSupabaseFunction({
+  let watchedInputs = /* @__PURE__ */ new Set();
+  const regenerate = async () => {
+    const { inputs } = await syncSupabaseFunction({
       projectRoot,
       mcpEntry: mcpEntryOption,
       functionsDir: functionsDirOption,
       functionName
     });
+    watchedInputs = new Set(inputs.map(normalizePath));
   };
   return {
     name: "@lovable.dev/mcp-js/supabase",
@@ -197,16 +221,23 @@ function mcpPlugin(options = {}) {
       },
       urlPath
     },
-    configResolved(config) {
+    async configResolved(config) {
       projectRoot = config.root;
       mcpEntryAbs = resolve2(projectRoot, mcpEntryOption);
-      regenerate();
+      await regenerate();
     },
     configureServer(server) {
       const onChange = (file) => {
-        if (normalizePath2(file) === normalizePath2(mcpEntryAbs)) {
-          regenerate();
-        }
+        const norm = normalizePath(file);
+        if (norm !== normalizePath(mcpEntryAbs) && !watchedInputs.has(norm))
+          return;
+        regenerate().catch((err) => {
+          const message = `[@lovable.dev/mcp-js] failed to regenerate the Supabase function: ${err instanceof Error ? err.message : String(err)}`;
+          if (server.config?.logger?.error)
+            server.config.logger.error(message);
+          else
+            console.error(message);
+        });
       };
       server.watcher.on("add", onChange);
       server.watcher.on("change", onChange);
@@ -217,8 +248,8 @@ function mcpPlugin(options = {}) {
         server.watcher.off("unlink", onChange);
       });
     },
-    buildStart() {
-      regenerate();
+    async buildStart() {
+      await regenerate();
     }
   };
 }

package/dist/stacks/tanstack/index.cjs

@@ -293,6 +293,7 @@ function stringClaim(claims, name) {
 // src/auth/verifier.ts
 var DEFAULT_JWT_ALGORITHMS = ["RS256", "RS384", "RS512", "ES256", "ES384", "ES512", "EdDSA"];
 var DEFAULT_CLOCK_TOLERANCE_SECONDS = 30;
+var DEFAULT_ACCESS_TOKEN_TYPS = ["at+jwt", "JWT"];
 var JWKS_FETCH_TIMEOUT_MS = 5e3;
 var OAuthTokenError = class extends Error {
   constructor(status, oauthError, message) {
@@ -325,10 +326,23 @@ async function fetchVerificationKeySet(jwksUri) {
     throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
+function assertAccessTokenTyp(token, allowed) {
+  let header;
+  try {
+    header = (0, import_jose.decodeProtectedHeader)(token);
+  } catch (err) {
+    log.debug("oauth.verify.bad_header", { ...describeError(err), outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Malformed JWT header");
+  }
+  const typ = header.typ;
+  if (typeof typ !== "string" || !allowed.includes(typ)) {
+    log.debug("oauth.verify.bad_typ", { jwtTyp: typ, allowed, outcome: "401 invalid_token" });
+    throw new OAuthTokenError(401, "invalid_token", "Access token typ header is not accepted");
+  }
+}
 async function verifyJwtClaims(token, keySet, issuer, audience, auth) {
   try {
     const { payload } = await (0, import_jose.jwtVerify)(token, keySet, {
-      typ: "at+jwt",
       // `issuer` is trimmed of any trailing slash; accept both forms so a token whose
       // `iss` carries the slash the AS publishes still verifies.
       issuer: [issuer, `${issuer}/`],
@@ -377,6 +391,7 @@ function buildMcpAuthContext(args) {
   };
 }
 function createOAuthTokenVerifier(auth, discovery) {
+  const allowedTyps = auth.accessTokenTyp ?? DEFAULT_ACCESS_TOKEN_TYPS;
   return async (token, request, options) => {
     const resource = resolveProtectedResource(auth, request, options);
     const issuer = await discovery.resolveIssuer();
@@ -385,6 +400,7 @@ function createOAuthTokenVerifier(auth, discovery) {
     const jwksUri = await discovery.resolveJwksUri();
     log.debug("oauth.jwks.fetch", { jwksUri });
     const keySet = await fetchVerificationKeySet(jwksUri);
+    assertAccessTokenTyp(token, allowedTyps);
     const claims = await verifyJwtClaims(token, keySet, issuer, acceptedAudiences, auth);
     assertNonEmptySubject(claims);
     const context = buildMcpAuthContext({ token, claims, issuer, resource, acceptedAudiences });

package/dist/stacks/tanstack/index.d.cts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 interface TanStackRouteCtx {

package/dist/stacks/tanstack/index.d.ts

@@ -1,5 +1,5 @@
 import { M as McpRuntimeOptions } from '../../authorize-HTd0GKmB.js';
-import { d as McpDefinition } from '../../types-C5SSORxe.js';
+import { d as McpDefinition } from '../../types-BanzncFh.js';
 import 'zod';
 
 interface TanStackRouteCtx {

package/dist/stacks/tanstack/index.js

@@ -1,17 +1,17 @@
 import {
   createMcpProtocolHandler
-} from "../../chunk-DF3DD3KD.js";
+} from "../../chunk-WLNT2FX7.js";
 import {
   createOAuthProtectedResourceMetadataHandler
-} from "../../chunk-X7V2CL7C.js";
+} from "../../chunk-QDKOF4UF.js";
 import {
   createInvokeToolHandler
-} from "../../chunk-SZLSAGDF.js";
+} from "../../chunk-YWLMMDET.js";
 import {
   createListToolsHandler
-} from "../../chunk-PJXKJNSZ.js";
+} from "../../chunk-VNRQPA4K.js";
 import "../../chunk-MA5H6PSF.js";
-import "../../chunk-LAFJDJRY.js";
+import "../../chunk-G4XA7IJM.js";
 import "../../chunk-QC3DXQTH.js";
 import "../../chunk-6DXGZZA4.js";
 

package/dist/{types-C5SSORxe.d.ts → types-BanzncFh.d.ts}

@@ -64,6 +64,14 @@ interface McpAuthConfig {
     readonly jwksUri?: string;
     readonly algorithms?: readonly string[];
     readonly clockToleranceSeconds?: number;
+    /**
+     * Allowed values for the access token's JOSE `typ` header. Defaults to
+     * `["at+jwt", "JWT"]` so both the RFC 9068 access-token shape and the plain
+     * user-JWT shape (notably Supabase GoTrue's OAuth tokens) are accepted out of
+     * the box. Pin to `["at+jwt"]` to enforce strict RFC 9068. The header `typ`
+     * must be present and string-typed; this option only controls which values pass.
+     */
+    readonly accessTokenTyp?: readonly string[];
 }
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovable.dev/mcp-js",
-  "version": "0.10.1",
+  "version": "0.12.0",
   "description": "Author MCP servers for Lovable apps. Declare tools with defineTool, register them in defineMcp, and a framework adapter (TanStack or Supabase Edge Functions) emits the route(s) at build time.",
   "type": "module",
   "repository": {
@@ -76,6 +76,7 @@
   "license": "MIT",
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.28.0",
+    "esbuild": "^0.27.0",
     "jose": "^6.2.2"
   },
   "peerDependencies": {