@lovable.dev/mcp-js 0.14.0 → 0.15.1

package/dist/protocols/rest/index.d.ts

@@ -1,11 +1,12 @@
 import { M as McpRuntimeOptions } from '../../authorize-BMeXd_Sh.js';
-import { d as McpDefinition } from '../../types-BanzncFh.js';
+import { d as McpDefinition } from '../../types-COY42xux.js';
+import { M as MetricsRecorder } from '../../recorder-qlzUKFxG.js';
 import 'zod';
 
 type RestListToolsHandler = (request: Request) => Promise<Response>;
-declare function createListToolsHandler(mcp: McpDefinition, options?: McpRuntimeOptions): RestListToolsHandler;
+declare function createListToolsHandler(mcp: McpDefinition, options?: McpRuntimeOptions, recorder?: MetricsRecorder): RestListToolsHandler;
 
 type RestInvokeToolHandler = (request: Request, toolName: string) => Promise<Response>;
-declare function createInvokeToolHandler(mcp: McpDefinition, options?: McpRuntimeOptions): RestInvokeToolHandler;
+declare function createInvokeToolHandler(mcp: McpDefinition, options?: McpRuntimeOptions, recorder?: MetricsRecorder): RestInvokeToolHandler;
 
 export { type RestInvokeToolHandler, type RestListToolsHandler, createInvokeToolHandler, createListToolsHandler };

package/dist/protocols/rest/index.js

@@ -1,13 +1,14 @@
 import {
   createInvokeToolHandler
-} from "../../chunk-YWLMMDET.js";
+} from "../../chunk-CEDD57G2.js";
 import {
   createListToolsHandler
-} from "../../chunk-VNRQPA4K.js";
+} from "../../chunk-QT5L4CS3.js";
 import "../../chunk-MA5H6PSF.js";
-import "../../chunk-G4XA7IJM.js";
-import "../../chunk-QC3DXQTH.js";
+import "../../chunk-YTOMGJV5.js";
+import "../../chunk-DCWYK4CA.js";
 import "../../chunk-6DXGZZA4.js";
+import "../../chunk-GIHCQT6L.js";
 export {
   createInvokeToolHandler,
   createListToolsHandler

package/dist/recorder-qlzUKFxG.d.ts

@@ -0,0 +1,21 @@
+type InvocationOutcome = "ok" | "tool_error" | "handler_error" | "transport_error" | "auth_config_error";
+/** One recorded MCP call. Carries no arguments or response payloads — only the
+ *  tool name, the JSON-RPC method, the result class, timing, and byte sizes. */
+interface InvocationRecord {
+    /** Tool name for `tools/call`; `null` for list/initialize, transport faults, and auth-config failures. */
+    tool: string | null;
+    /** JSON-RPC method, e.g. `tools/call`; `authorize` for auth-config failures. */
+    method: string;
+    outcome: InvocationOutcome;
+    durationMs: number;
+    reqBytes?: number;
+    resBytes?: number;
+}
+interface MetricsRecorder {
+    /** Buffer one invocation. Synchronous, sampled, and never throws. */
+    record(ev: InvocationRecord): void;
+    /** Best-effort POST of the current buffer. Resolves even on network failure. */
+    flush(): Promise<void>;
+}
+
+export type { MetricsRecorder as M };

package/dist/stacks/supabase/index.cjs

@@ -95,22 +95,6 @@ function firstForwardedValue(request, header) {
   return value ? value : void 0;
 }
 
-// src/protocols/mcp/protocol.ts
-var import_mcp = require("@modelcontextprotocol/sdk/server/mcp.js");
-var import_webStandardStreamableHttp = require("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js");
-
-// src/core/http.ts
-var JSON_HEADERS = { "Content-Type": "application/json" };
-function headResponse(response) {
-  return new Response(null, { status: response.status, statusText: response.statusText, headers: response.headers });
-}
-function methodNotAllowed(allow) {
-  return new Response(JSON.stringify({ error: "method not allowed" }), {
-    status: 405,
-    headers: { ...JSON_HEADERS, Allow: allow }
-  });
-}
-
 // src/core/logger.ts
 var LEVEL_RANK = { silent: 0, error: 1, warn: 2, info: 3, debug: 4 };
 function isLogLevel(value) {
@@ -152,6 +136,230 @@ function describeError(err) {
   return { value: String(err) };
 }
 
+// src/metrics/config.ts
+var DEFAULT_METRICS_ENDPOINT = "https://api.lovable.dev/v1/app-mcp-usage";
+var METRICS_API_KEY_ENV_VAR = "LOVABLE_API_KEY";
+var METRICS_SAMPLE_RATE = 1;
+var METRICS_FLUSH_INTERVAL_MS = 5e3;
+var METRICS_MAX_BATCH_SIZE = 50;
+function assertMetricsEndpoint(endpoint) {
+  let url;
+  try {
+    url = new URL(endpoint);
+  } catch {
+    throw new Error(`@lovable.dev/mcp-js: metrics.endpoint must be an absolute URL, got ${JSON.stringify(endpoint)}`);
+  }
+  if (url.protocol !== "https:" && url.protocol !== "http:") {
+    throw new Error(`@lovable.dev/mcp-js: metrics.endpoint must be http(s), got ${JSON.stringify(endpoint)}`);
+  }
+}
+function resolveMetricsConfig(config = true) {
+  const options = typeof config === "boolean" ? { enabled: config } : config;
+  const endpoint = options.endpoint ?? DEFAULT_METRICS_ENDPOINT;
+  assertMetricsEndpoint(endpoint);
+  return Object.freeze({
+    enabled: options.enabled ?? true,
+    endpoint,
+    headers: options.headers ?? {},
+    apiKeyEnvVar: METRICS_API_KEY_ENV_VAR,
+    sampleRate: METRICS_SAMPLE_RATE,
+    flushIntervalMs: METRICS_FLUSH_INTERVAL_MS,
+    maxBatchSize: METRICS_MAX_BATCH_SIZE
+  });
+}
+
+// package.json
+var version = "0.15.1";
+
+// src/metrics/otlp.ts
+var SCOPE_NAME = "@lovable.dev/mcp-js";
+var EVENT_NAME = "mcp.tool.invocation";
+var SEVERITY_INFO = 9;
+function strAttr(key, value) {
+  return { key, value: { stringValue: value } };
+}
+function intAttr(key, value) {
+  return { key, value: { intValue: String(Math.round(value)) } };
+}
+function toLogRecord(rec) {
+  const attributes = [
+    strAttr("event.name", EVENT_NAME),
+    strAttr("mcp.method", rec.method),
+    strAttr("mcp.outcome", rec.outcome),
+    intAttr("mcp.duration_ms", rec.durationMs)
+  ];
+  if (rec.tool !== null)
+    attributes.push(strAttr("mcp.tool", rec.tool));
+  if (rec.reqBytes !== void 0)
+    attributes.push(intAttr("mcp.request_size_bytes", rec.reqBytes));
+  if (rec.resBytes !== void 0)
+    attributes.push(intAttr("mcp.response_size_bytes", rec.resBytes));
+  return {
+    timeUnixNano: rec.timeUnixNano,
+    observedTimeUnixNano: rec.timeUnixNano,
+    severityNumber: SEVERITY_INFO,
+    severityText: "INFO",
+    body: { stringValue: EVENT_NAME },
+    attributes
+  };
+}
+function buildLogsPayload(records, server) {
+  return JSON.stringify({
+    resourceLogs: [
+      {
+        resource: {
+          attributes: [
+            strAttr("service.name", server.name),
+            strAttr("service.version", server.version),
+            strAttr("telemetry.sdk.name", SCOPE_NAME),
+            strAttr("telemetry.sdk.version", version),
+            strAttr("telemetry.sdk.language", "webjs")
+          ]
+        },
+        scopeLogs: [
+          {
+            scope: { name: SCOPE_NAME, version },
+            logRecords: records.map(toLogRecord)
+          }
+        ]
+      }
+    ]
+  });
+}
+function nowUnixNano() {
+  return `${Date.now()}000000`;
+}
+
+// src/metrics/recorder.ts
+function nowMs() {
+  return typeof performance !== "undefined" && typeof performance.now === "function" ? performance.now() : Date.now();
+}
+var NOOP_RECORDER = {
+  record() {
+  },
+  async flush() {
+  }
+};
+function createNoopRecorder() {
+  return NOOP_RECORDER;
+}
+function readRuntimeEnv(name) {
+  try {
+    const denoEnv = globalThis.Deno?.env;
+    const value = denoEnv?.get?.(name);
+    if (value)
+      return value;
+  } catch {
+  }
+  try {
+    if (typeof process !== "undefined") {
+      const value = process.env?.[name];
+      if (value)
+        return value;
+    }
+  } catch {
+  }
+  return void 0;
+}
+function probeWaitUntil() {
+  const fn = globalThis.EdgeRuntime?.waitUntil;
+  return typeof fn === "function" ? fn.bind(globalThis.EdgeRuntime) : void 0;
+}
+function createMetricsRecorder(ctx, deps = {}) {
+  const { config, server } = ctx;
+  if (!config.enabled)
+    return NOOP_RECORDER;
+  const doFetch = deps.fetch ?? globalThis.fetch;
+  if (!doFetch)
+    return NOOP_RECORDER;
+  const usesLovableEndpoint = config.endpoint === DEFAULT_METRICS_ENDPOINT;
+  const apiKey = usesLovableEndpoint ? (deps.getApiKey ?? (() => readRuntimeEnv(config.apiKeyEnvVar)))() : void 0;
+  if (usesLovableEndpoint && !apiKey) {
+    log.debug("metrics.disabled_no_api_key", { envVar: config.apiKeyEnvVar });
+    return NOOP_RECORDER;
+  }
+  const waitUntil = deps.waitUntil ?? probeWaitUntil();
+  const buffer = [];
+  let timer;
+  const schedule = (p) => {
+    if (waitUntil) {
+      try {
+        waitUntil(p);
+        return;
+      } catch {
+      }
+    }
+    void p.catch(() => {
+    });
+  };
+  const headers = {};
+  if (!usesLovableEndpoint) {
+    for (const [key, value] of Object.entries(config.headers)) {
+      if (key.toLowerCase() !== "content-type")
+        headers[key] = value;
+    }
+  }
+  headers["content-type"] = "application/json";
+  if (apiKey)
+    headers.authorization = `Bearer ${apiKey}`;
+  const flush = async () => {
+    if (buffer.length === 0)
+      return;
+    const records = buffer.splice(0, buffer.length);
+    try {
+      const res = await doFetch(config.endpoint, {
+        method: "POST",
+        headers,
+        body: buildLogsPayload(records, server),
+        keepalive: true
+      });
+      if (!res.ok)
+        log.debug("metrics.flush_rejected", { status: res.status });
+    } catch (err) {
+      log.debug("metrics.flush_failed", describeError(err));
+    }
+  };
+  const ensureTimer = () => {
+    if (timer !== void 0)
+      return;
+    timer = setInterval(() => schedule(flush()), config.flushIntervalMs);
+    timer.unref?.();
+  };
+  return {
+    record(ev) {
+      if (config.sampleRate < 1 && Math.random() >= config.sampleRate)
+        return;
+      buffer.push({ ...ev, timeUnixNano: nowUnixNano() });
+      ensureTimer();
+      if (buffer.length >= config.maxBatchSize)
+        schedule(flush());
+    },
+    flush
+  };
+}
+function createRecorderForRuntime(mcp) {
+  const config = resolveMetricsConfig(mcp.metrics);
+  if (!config.enabled)
+    return createNoopRecorder();
+  return createMetricsRecorder({ config, server: { name: mcp.name, version: mcp.version } });
+}
+
+// src/protocols/mcp/protocol.ts
+var import_mcp = require("@modelcontextprotocol/sdk/server/mcp.js");
+var import_webStandardStreamableHttp = require("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js");
+
+// src/core/http.ts
+var JSON_HEADERS = { "Content-Type": "application/json" };
+function headResponse(response) {
+  return new Response(null, { status: response.status, statusText: response.statusText, headers: response.headers });
+}
+function methodNotAllowed(allow) {
+  return new Response(JSON.stringify({ error: "method not allowed" }), {
+    status: 405,
+    headers: { ...JSON_HEADERS, Allow: allow }
+  });
+}
+
 // src/core/promise.ts
 function cachedPromise(load, label) {
   let settled = false;
@@ -532,12 +740,13 @@ function assertRequiredScopes(auth, context) {
     throw new OAuthTokenError(403, "insufficient_scope", "Additional OAuth scope is required");
   }
 }
-function createRequestAuthorizer(mcp, options = {}) {
+function createRequestAuthorizer(mcp, options = {}, recorder) {
   const runtime = getOAuthRuntime(mcp, options);
   return {
     async authorize(request) {
       if (runtime.kind === "unconfigured")
         return { ok: true };
+      const startedAt = nowMs();
       const token = parseBearerToken(request);
       if (!token) {
         log.info("auth.no_bearer_token", { outcome: "401" });
@@ -550,6 +759,12 @@ function createRequestAuthorizer(mcp, options = {}) {
       } catch (err) {
         if (err instanceof OAuthConfigurationError) {
           log.error("auth.config_error", { ...describeError(err), outcome: "500" });
+          recorder?.record({
+            tool: null,
+            method: "authorize",
+            outcome: "auth_config_error",
+            durationMs: nowMs() - startedAt
+          });
           return { ok: false, response: oauthConfigurationErrorResponse() };
         }
         if (err instanceof OAuthTokenError) {
@@ -647,23 +862,32 @@ function corsPreflightResponse(allowMethods) {
 }
 
 // src/protocols/mcp/protocol.ts
-function adaptToolToSdkCallback(tool, auth) {
+function adaptToolToSdkCallback(tool, auth, recorder) {
   return async (first) => {
     const args = tool.inputSchema ? first ?? {} : {};
+    const start = nowMs();
     let result;
     try {
       result = await tool.handler(args, new ToolContext(auth));
     } catch {
+      recorder.record({ tool: tool.name, method: "tools/call", outcome: "handler_error", durationMs: nowMs() - start });
       return { content: [{ type: "text", text: "tool execution failed" }], isError: true };
     }
     if (result == null) {
+      recorder.record({ tool: tool.name, method: "tools/call", outcome: "handler_error", durationMs: nowMs() - start });
       return { content: [{ type: "text", text: `tool "${tool.name}" returned no result` }], isError: true };
     }
+    recorder.record({
+      tool: tool.name,
+      method: "tools/call",
+      outcome: result.isError ? "tool_error" : "ok",
+      durationMs: nowMs() - start
+    });
     return { content: result.content ?? [], structuredContent: result.structuredContent, isError: result.isError };
   };
 }
-function createMcpProtocolHandler(mcp, options = {}) {
-  const authorizer = createRequestAuthorizer(mcp, options);
+function createMcpProtocolHandler(mcp, options = {}, recorder = createRecorderForRuntime(mcp)) {
+  const authorizer = createRequestAuthorizer(mcp, options, recorder);
   const handle = async (request) => {
     const authResult = await authorizer.authorize(request);
     if (!authResult.ok)
@@ -683,7 +907,7 @@ function createMcpProtocolHandler(mcp, options = {}) {
             outputSchema: tool.outputSchema,
             annotations: tool.annotations
           },
-          adaptToolToSdkCallback(tool, authResult.auth)
+          adaptToolToSdkCallback(tool, authResult.auth, recorder)
         );
       }
       const transport = new import_webStandardStreamableHttp.WebStandardStreamableHTTPServerTransport({
@@ -692,6 +916,7 @@ function createMcpProtocolHandler(mcp, options = {}) {
       await server.connect(transport);
       return await transport.handleRequest(request);
     } catch (err) {
+      recorder.record({ tool: null, method: "transport", outcome: "transport_error", durationMs: 0 });
       log.error("mcp.transport_error", { ...describeError(err), outcome: "500 internal error" });
       return Response.json(
         { jsonrpc: "2.0", id: null, error: { code: -32603, message: "internal error" } },
@@ -792,9 +1017,9 @@ function buildMcpListing(mcp) {
     }))
   };
 }
-function createListToolsHandler(mcp, options = {}) {
+function createListToolsHandler(mcp, options = {}, recorder = createRecorderForRuntime(mcp)) {
   assertRestResourceBinding(mcp, options);
-  const authorizer = createRequestAuthorizer(mcp, options);
+  const authorizer = createRequestAuthorizer(mcp, options, recorder);
   const handle = async (request) => {
     const authResult = await authorizer.authorize(request);
     if (!authResult.ok)
@@ -825,9 +1050,9 @@ function isEmptyArgs(value) {
     return false;
   return Object.keys(value).length === 0;
 }
-function createInvokeToolHandler(mcp, options = {}) {
+function createInvokeToolHandler(mcp, options = {}, recorder = createRecorderForRuntime(mcp)) {
   assertRestResourceBinding(mcp, options);
-  const authorizer = createRequestAuthorizer(mcp, options);
+  const authorizer = createRequestAuthorizer(mcp, options, recorder);
   const handle = async (request, toolName) => {
     const authResult = await authorizer.authorize(request);
     if (!authResult.ok)
@@ -881,20 +1106,29 @@ function createInvokeToolHandler(mcp, options = {}) {
       });
     }
     let result;
+    const start = nowMs();
     try {
       result = await tool.handler(args, new ToolContext(authResult.auth));
     } catch {
+      recorder.record({ tool: tool.name, method: "tools/call", outcome: "handler_error", durationMs: nowMs() - start });
       return new Response(JSON.stringify({ error: "handler threw", tool: toolName }), {
         status: 500,
         headers: JSON_HEADERS
       });
     }
     if (result == null) {
+      recorder.record({ tool: tool.name, method: "tools/call", outcome: "handler_error", durationMs: nowMs() - start });
       return new Response(JSON.stringify({ error: `tool "${toolName}" returned no result` }), {
         status: 500,
         headers: JSON_HEADERS
       });
     }
+    recorder.record({
+      tool: tool.name,
+      method: "tools/call",
+      outcome: result.isError ? "tool_error" : "ok",
+      durationMs: nowMs() - start
+    });
     return Response.json({
       content: result.content ?? [],
       structuredContent: result.structuredContent,
@@ -954,9 +1188,10 @@ function createSupabaseHandler(mcp, options = {}) {
   const servesOwnPrm = !(mcp.auth?.type === "oauth" && mcp.auth.protectedResourceMetadataUrl !== void 0);
   const metadataPath = resourcePath === void 0 || !servesOwnPrm ? void 0 : `${trimTrailingSlash(resourcePath)}${OAUTH_PROTECTED_RESOURCE_METADATA_PATH}`;
   const runtimeOptions = resourcePath === void 0 ? {} : { resourcePath, ...metadataPath ? { metadataPath } : {} };
-  const mcpHandler = createMcpProtocolHandler(mcp, runtimeOptions);
-  const listToolsHandler = createListToolsHandler(mcp, runtimeOptions);
-  const invokeToolHandler = createInvokeToolHandler(mcp, runtimeOptions);
+  const recorder = createRecorderForRuntime(mcp);
+  const mcpHandler = createMcpProtocolHandler(mcp, runtimeOptions, recorder);
+  const listToolsHandler = createListToolsHandler(mcp, runtimeOptions, recorder);
+  const invokeToolHandler = createInvokeToolHandler(mcp, runtimeOptions, recorder);
   const metadataHandler = createOAuthProtectedResourceMetadataHandler(mcp, runtimeOptions);
   return async (request) => {
     const req = applyForwardedOrigin(request, {

package/dist/stacks/supabase/index.d.cts

@@ -1,4 +1,4 @@
-import { d as McpDefinition } from '../../types-BanzncFh.js';
+import { d as McpDefinition } from '../../types-COY42xux.js';
 import 'zod';
 
 type SupabaseHandler = (request: Request) => Promise<Response>;

package/dist/stacks/supabase/index.d.ts

@@ -1,4 +1,4 @@
-import { d as McpDefinition } from '../../types-BanzncFh.js';
+import { d as McpDefinition } from '../../types-COY42xux.js';
 import 'zod';
 
 type SupabaseHandler = (request: Request) => Promise<Response>;

package/dist/stacks/supabase/index.js

@@ -3,23 +3,24 @@ import {
 } from "../../chunk-UQK5UO6C.js";
 import {
   createMcpProtocolHandler
-} from "../../chunk-WLNT2FX7.js";
+} from "../../chunk-UCPYLSNN.js";
 import {
   createOAuthProtectedResourceMetadataHandler
-} from "../../chunk-QDKOF4UF.js";
+} from "../../chunk-ILYTJXDR.js";
 import {
   createInvokeToolHandler
-} from "../../chunk-YWLMMDET.js";
+} from "../../chunk-CEDD57G2.js";
 import {
   createListToolsHandler
-} from "../../chunk-VNRQPA4K.js";
+} from "../../chunk-QT5L4CS3.js";
 import "../../chunk-MA5H6PSF.js";
 import {
-  assertResourcePathShape
-} from "../../chunk-G4XA7IJM.js";
+  assertResourcePathShape,
+  createRecorderForRuntime
+} from "../../chunk-YTOMGJV5.js";
 import {
   trimTrailingSlash
-} from "../../chunk-QC3DXQTH.js";
+} from "../../chunk-DCWYK4CA.js";
 import {
   OAUTH_PROTECTED_RESOURCE_METADATA_PATH
 } from "../../chunk-6DXGZZA4.js";
@@ -27,6 +28,7 @@ import {
   FUNCTIONS_MOUNT_PREFIX,
   assertFunctionName
 } from "../../chunk-XQWJN6DC.js";
+import "../../chunk-GIHCQT6L.js";
 
 // src/stacks/supabase/handler.ts
 function deriveResourcePath(options) {
@@ -64,9 +66,10 @@ function createSupabaseHandler(mcp, options = {}) {
   const servesOwnPrm = !(mcp.auth?.type === "oauth" && mcp.auth.protectedResourceMetadataUrl !== void 0);
   const metadataPath = resourcePath === void 0 || !servesOwnPrm ? void 0 : `${trimTrailingSlash(resourcePath)}${OAUTH_PROTECTED_RESOURCE_METADATA_PATH}`;
   const runtimeOptions = resourcePath === void 0 ? {} : { resourcePath, ...metadataPath ? { metadataPath } : {} };
-  const mcpHandler = createMcpProtocolHandler(mcp, runtimeOptions);
-  const listToolsHandler = createListToolsHandler(mcp, runtimeOptions);
-  const invokeToolHandler = createInvokeToolHandler(mcp, runtimeOptions);
+  const recorder = createRecorderForRuntime(mcp);
+  const mcpHandler = createMcpProtocolHandler(mcp, runtimeOptions, recorder);
+  const listToolsHandler = createListToolsHandler(mcp, runtimeOptions, recorder);
+  const invokeToolHandler = createInvokeToolHandler(mcp, runtimeOptions, recorder);
   const metadataHandler = createOAuthProtectedResourceMetadataHandler(mcp, runtimeOptions);
   return async (request) => {
     const req = applyForwardedOrigin(request, {

package/dist/stacks/supabase/vite.cjs

@@ -25,6 +25,7 @@ __export(vite_exports, {
 });
 module.exports = __toCommonJS(vite_exports);
 var import_node_path2 = require("path");
+var import_vite = require("vite");
 
 // src/stacks/supabase/emit.ts
 var import_esbuild = require("esbuild");
@@ -32,7 +33,7 @@ var import_node_fs = require("fs");
 var import_node_path = require("path");
 
 // package.json
-var version = "0.14.0";
+var version = "0.15.1";
 
 // src/core/fs-errors.ts
 function isFileMissing(err) {
@@ -129,7 +130,16 @@ function externalizeBareAsNpm(versions) {
     }
   };
 }
-async function bundleFunctionEntry(projectRoot, mcpEntryAbs, functionName) {
+function importMetaEnvDefines(inlineEnv) {
+  const env = inlineEnv ?? {};
+  const defines = { "import.meta.env": JSON.stringify(env) };
+  for (const [key, value] of Object.entries(env)) {
+    if (/^[A-Za-z_$][\w$]*$/.test(key))
+      defines[`import.meta.env.${key}`] = JSON.stringify(value);
+  }
+  return defines;
+}
+async function bundleFunctionEntry(projectRoot, mcpEntryAbs, functionName, inlineEnv) {
   const versions = readProjectDependencyVersions(projectRoot);
   const wrapper = `import mcp from ${JSON.stringify(mcpEntryAbs)};
 import { createSupabaseHandler } from "@lovable.dev/mcp-js/stacks/supabase";
@@ -145,6 +155,7 @@ Deno.serve(createSupabaseHandler(mcp, { functionName: ${JSON.stringify(functionN
     target: "esnext",
     absWorkingDir: projectRoot,
     logLevel: "silent",
+    define: importMetaEnvDefines(inlineEnv),
     plugins: [externalizeBareAsNpm(versions)]
   });
   const out = result.outputFiles[0]?.text ?? "";
@@ -183,7 +194,7 @@ async function syncSupabaseFunction(options) {
     cleanupOrphans(paths.functionDir, /* @__PURE__ */ new Set(), removed);
     return { written, removed, inputs: [] };
   }
-  const { code, inputs } = await bundleFunctionEntry(projectRoot, paths.mcpEntryAbs, functionName);
+  const { code, inputs } = await bundleFunctionEntry(projectRoot, paths.mcpEntryAbs, functionName, options.inlineEnv);
   if (writeIfChanged(paths.functionEntry, code, hasGeneratedBanner)) {
     written.push(paths.functionEntry);
   }
@@ -227,6 +238,16 @@ function cleanupOrphans(functionDir, expected, removed) {
 function normalizePath(p) {
   return p.split(import_node_path2.sep).join("/");
 }
+function productionImportMetaEnv(config) {
+  return {
+    ...(0, import_vite.loadEnv)("production", config.envDir, config.envPrefix),
+    MODE: "production",
+    BASE_URL: config.base ?? "/",
+    DEV: false,
+    PROD: true,
+    SSR: false
+  };
+}
 function mcpPlugin(options = {}) {
   const mcpEntryOption = options.mcpEntry ?? DEFAULT_MCP_ENTRY;
   const functionsDirOption = options.functionsDir ?? DEFAULT_FUNCTIONS_DIR;
@@ -234,13 +255,15 @@ function mcpPlugin(options = {}) {
   const urlPath = `${FUNCTIONS_MOUNT_PREFIX}${functionName}`;
   let projectRoot = process.cwd();
   let mcpEntryAbs = (0, import_node_path2.resolve)(projectRoot, mcpEntryOption);
+  let inlineEnv = {};
   let watchedInputs = /* @__PURE__ */ new Set();
   const regenerate = async () => {
     const { inputs } = await syncSupabaseFunction({
       projectRoot,
       mcpEntry: mcpEntryOption,
       functionsDir: functionsDirOption,
-      functionName
+      functionName,
+      inlineEnv
     });
     watchedInputs = new Set(inputs.map(normalizePath));
   };
@@ -258,6 +281,7 @@ function mcpPlugin(options = {}) {
     async configResolved(config) {
       projectRoot = config.root;
       mcpEntryAbs = (0, import_node_path2.resolve)(projectRoot, mcpEntryOption);
+      inlineEnv = productionImportMetaEnv(config);
       await regenerate();
     },
     configureServer(server) {