@lovable.dev/mcp-js 0.15.0 → 0.15.1

package/dist/{chunk-T2RED2TG.js → chunk-CEDD57G2.js}

@@ -1,18 +1,16 @@
-import {
-  createRecorderForRuntime,
-  nowMs
-} from "./chunk-XQSTN54Y.js";
 import {
   ToolContext
-} from "./chunk-P3F324UC.js";
+} from "./chunk-MA5H6PSF.js";
 import {
   JSON_HEADERS,
   assertRestResourceBinding,
   corsPreflightResponse,
+  createRecorderForRuntime,
   createRequestAuthorizer,
   methodNotAllowed,
+  nowMs,
   withCors
-} from "./chunk-G4XA7IJM.js";
+} from "./chunk-YTOMGJV5.js";
 
 // src/protocols/rest/invoke-tool.ts
 import { getParseErrorMessage, objectFromShape, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";
@@ -30,7 +28,7 @@ function isEmptyArgs(value) {
 }
 function createInvokeToolHandler(mcp, options = {}, recorder = createRecorderForRuntime(mcp)) {
   assertRestResourceBinding(mcp, options);
-  const authorizer = createRequestAuthorizer(mcp, options);
+  const authorizer = createRequestAuthorizer(mcp, options, recorder);
   const handle = async (request, toolName) => {
     const authResult = await authorizer.authorize(request);
     if (!authResult.ok)

package/dist/{chunk-QC3DXQTH.js → chunk-DCWYK4CA.js}

@@ -42,6 +42,38 @@ function describeError(err) {
   return { value: String(err) };
 }
 
+// src/metrics/config.ts
+var DEFAULT_METRICS_ENDPOINT = "https://api.lovable.dev/v1/app-mcp-usage";
+var METRICS_API_KEY_ENV_VAR = "LOVABLE_API_KEY";
+var METRICS_SAMPLE_RATE = 1;
+var METRICS_FLUSH_INTERVAL_MS = 5e3;
+var METRICS_MAX_BATCH_SIZE = 50;
+function assertMetricsEndpoint(endpoint) {
+  let url;
+  try {
+    url = new URL(endpoint);
+  } catch {
+    throw new Error(`@lovable.dev/mcp-js: metrics.endpoint must be an absolute URL, got ${JSON.stringify(endpoint)}`);
+  }
+  if (url.protocol !== "https:" && url.protocol !== "http:") {
+    throw new Error(`@lovable.dev/mcp-js: metrics.endpoint must be http(s), got ${JSON.stringify(endpoint)}`);
+  }
+}
+function resolveMetricsConfig(config = true) {
+  const options = typeof config === "boolean" ? { enabled: config } : config;
+  const endpoint = options.endpoint ?? DEFAULT_METRICS_ENDPOINT;
+  assertMetricsEndpoint(endpoint);
+  return Object.freeze({
+    enabled: options.enabled ?? true,
+    endpoint,
+    headers: options.headers ?? {},
+    apiKeyEnvVar: METRICS_API_KEY_ENV_VAR,
+    sampleRate: METRICS_SAMPLE_RATE,
+    flushIntervalMs: METRICS_FLUSH_INTERVAL_MS,
+    maxBatchSize: METRICS_MAX_BATCH_SIZE
+  });
+}
+
 // src/core/url.ts
 function trimTrailingSlash(value) {
   return value.replace(/\/+$/, "");
@@ -79,6 +111,8 @@ function parseSafeUrl(subject, raw, ErrorClass = Error) {
 }
 
 export {
+  DEFAULT_METRICS_ENDPOINT,
+  resolveMetricsConfig,
   trimTrailingSlash,
   parseSafeUrl,
   setLogLevel,

package/dist/{chunk-LWHVXXKQ.js → chunk-GIHCQT6L.js}

@@ -1,5 +1,5 @@
 // package.json
-var version = "0.15.0";
+var version = "0.15.1";
 
 export {
   version

package/dist/{chunk-QDKOF4UF.js → chunk-ILYTJXDR.js}

@@ -7,11 +7,11 @@ import {
   oauthConfigurationErrorResponse,
   resolveProtectedResource,
   withCors
-} from "./chunk-G4XA7IJM.js";
+} from "./chunk-YTOMGJV5.js";
 import {
   describeError,
   log
-} from "./chunk-QC3DXQTH.js";
+} from "./chunk-DCWYK4CA.js";
 
 // src/protocols/oauth-metadata.ts
 function notFound() {

package/dist/{chunk-P3F324UC.js → chunk-MA5H6PSF.js}

@@ -41,40 +41,6 @@ var ToolContext = class {
   }
 };
 
-// src/metrics/config.ts
-var DEFAULT_METRICS_ENDPOINT = "https://api.lovable.dev/v1/app-mcp-usage";
-var METRICS_API_KEY_ENV_VAR = "LOVABLE_API_KEY";
-var METRICS_SAMPLE_RATE = 1;
-var METRICS_FLUSH_INTERVAL_MS = 5e3;
-var METRICS_MAX_BATCH_SIZE = 50;
-function assertMetricsEndpoint(endpoint) {
-  let url;
-  try {
-    url = new URL(endpoint);
-  } catch {
-    throw new Error(`@lovable.dev/mcp-js: metrics.endpoint must be an absolute URL, got ${JSON.stringify(endpoint)}`);
-  }
-  if (url.protocol !== "https:" && url.protocol !== "http:") {
-    throw new Error(`@lovable.dev/mcp-js: metrics.endpoint must be http(s), got ${JSON.stringify(endpoint)}`);
-  }
-}
-function resolveMetricsConfig(config = true) {
-  const options = typeof config === "boolean" ? { enabled: config } : config;
-  const endpoint = options.endpoint ?? DEFAULT_METRICS_ENDPOINT;
-  assertMetricsEndpoint(endpoint);
-  return Object.freeze({
-    enabled: options.enabled ?? true,
-    endpoint,
-    headers: options.headers ?? {},
-    apiKeyEnvVar: METRICS_API_KEY_ENV_VAR,
-    sampleRate: METRICS_SAMPLE_RATE,
-    flushIntervalMs: METRICS_FLUSH_INTERVAL_MS,
-    maxBatchSize: METRICS_MAX_BATCH_SIZE
-  });
-}
-
 export {
-  DEFAULT_METRICS_ENDPOINT,
-  resolveMetricsConfig,
   ToolContext
 };

package/dist/{chunk-VNRQPA4K.js → chunk-QT5L4CS3.js}

@@ -1,11 +1,12 @@
 import {
   assertRestResourceBinding,
   corsPreflightResponse,
+  createRecorderForRuntime,
   createRequestAuthorizer,
   headResponse,
   methodNotAllowed,
   withCors
-} from "./chunk-G4XA7IJM.js";
+} from "./chunk-YTOMGJV5.js";
 
 // src/protocols/rest/list-tools.ts
 import { objectFromShape } from "@modelcontextprotocol/sdk/server/zod-compat.js";
@@ -32,9 +33,9 @@ function buildMcpListing(mcp) {
     }))
   };
 }
-function createListToolsHandler(mcp, options = {}) {
+function createListToolsHandler(mcp, options = {}, recorder = createRecorderForRuntime(mcp)) {
   assertRestResourceBinding(mcp, options);
-  const authorizer = createRequestAuthorizer(mcp, options);
+  const authorizer = createRequestAuthorizer(mcp, options, recorder);
   const handle = async (request) => {
     const authResult = await authorizer.authorize(request);
     if (!authResult.ok)

package/dist/{chunk-RHDEW56Y.js → chunk-UCPYLSNN.js}

@@ -1,19 +1,17 @@
-import {
-  createRecorderForRuntime,
-  nowMs
-} from "./chunk-XQSTN54Y.js";
 import {
   ToolContext
-} from "./chunk-P3F324UC.js";
+} from "./chunk-MA5H6PSF.js";
 import {
   corsPreflightResponse,
+  createRecorderForRuntime,
   createRequestAuthorizer,
+  nowMs,
   withCors
-} from "./chunk-G4XA7IJM.js";
+} from "./chunk-YTOMGJV5.js";
 import {
   describeError,
   log
-} from "./chunk-QC3DXQTH.js";
+} from "./chunk-DCWYK4CA.js";
 
 // src/protocols/mcp/protocol.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -43,7 +41,7 @@ function adaptToolToSdkCallback(tool, auth, recorder) {
   };
 }
 function createMcpProtocolHandler(mcp, options = {}, recorder = createRecorderForRuntime(mcp)) {
-  const authorizer = createRequestAuthorizer(mcp, options);
+  const authorizer = createRequestAuthorizer(mcp, options, recorder);
   const handle = async (request) => {
     const authResult = await authorizer.authorize(request);
     if (!authResult.ok)

package/dist/{chunk-G4XA7IJM.js → chunk-YTOMGJV5.js}

@@ -1,12 +1,17 @@
 import {
+  DEFAULT_METRICS_ENDPOINT,
   describeError,
   log,
   parseSafeUrl,
+  resolveMetricsConfig,
   trimTrailingSlash
-} from "./chunk-QC3DXQTH.js";
+} from "./chunk-DCWYK4CA.js";
 import {
   OAUTH_PROTECTED_RESOURCE_METADATA_PATH
 } from "./chunk-6DXGZZA4.js";
+import {
+  version
+} from "./chunk-GIHCQT6L.js";
 
 // src/core/http.ts
 var JSON_HEADERS = { "Content-Type": "application/json" };
@@ -44,6 +49,179 @@ function resolveResourcePath(resourcePath, request) {
   return resourcePath;
 }
 
+// src/metrics/otlp.ts
+var SCOPE_NAME = "@lovable.dev/mcp-js";
+var EVENT_NAME = "mcp.tool.invocation";
+var SEVERITY_INFO = 9;
+function strAttr(key, value) {
+  return { key, value: { stringValue: value } };
+}
+function intAttr(key, value) {
+  return { key, value: { intValue: String(Math.round(value)) } };
+}
+function toLogRecord(rec) {
+  const attributes = [
+    strAttr("event.name", EVENT_NAME),
+    strAttr("mcp.method", rec.method),
+    strAttr("mcp.outcome", rec.outcome),
+    intAttr("mcp.duration_ms", rec.durationMs)
+  ];
+  if (rec.tool !== null)
+    attributes.push(strAttr("mcp.tool", rec.tool));
+  if (rec.reqBytes !== void 0)
+    attributes.push(intAttr("mcp.request_size_bytes", rec.reqBytes));
+  if (rec.resBytes !== void 0)
+    attributes.push(intAttr("mcp.response_size_bytes", rec.resBytes));
+  return {
+    timeUnixNano: rec.timeUnixNano,
+    observedTimeUnixNano: rec.timeUnixNano,
+    severityNumber: SEVERITY_INFO,
+    severityText: "INFO",
+    body: { stringValue: EVENT_NAME },
+    attributes
+  };
+}
+function buildLogsPayload(records, server) {
+  return JSON.stringify({
+    resourceLogs: [
+      {
+        resource: {
+          attributes: [
+            strAttr("service.name", server.name),
+            strAttr("service.version", server.version),
+            strAttr("telemetry.sdk.name", SCOPE_NAME),
+            strAttr("telemetry.sdk.version", version),
+            strAttr("telemetry.sdk.language", "webjs")
+          ]
+        },
+        scopeLogs: [
+          {
+            scope: { name: SCOPE_NAME, version },
+            logRecords: records.map(toLogRecord)
+          }
+        ]
+      }
+    ]
+  });
+}
+function nowUnixNano() {
+  return `${Date.now()}000000`;
+}
+
+// src/metrics/recorder.ts
+function nowMs() {
+  return typeof performance !== "undefined" && typeof performance.now === "function" ? performance.now() : Date.now();
+}
+var NOOP_RECORDER = {
+  record() {
+  },
+  async flush() {
+  }
+};
+function createNoopRecorder() {
+  return NOOP_RECORDER;
+}
+function readRuntimeEnv(name) {
+  try {
+    const denoEnv = globalThis.Deno?.env;
+    const value = denoEnv?.get?.(name);
+    if (value)
+      return value;
+  } catch {
+  }
+  try {
+    if (typeof process !== "undefined") {
+      const value = process.env?.[name];
+      if (value)
+        return value;
+    }
+  } catch {
+  }
+  return void 0;
+}
+function probeWaitUntil() {
+  const fn = globalThis.EdgeRuntime?.waitUntil;
+  return typeof fn === "function" ? fn.bind(globalThis.EdgeRuntime) : void 0;
+}
+function createMetricsRecorder(ctx, deps = {}) {
+  const { config, server } = ctx;
+  if (!config.enabled)
+    return NOOP_RECORDER;
+  const doFetch = deps.fetch ?? globalThis.fetch;
+  if (!doFetch)
+    return NOOP_RECORDER;
+  const usesLovableEndpoint = config.endpoint === DEFAULT_METRICS_ENDPOINT;
+  const apiKey = usesLovableEndpoint ? (deps.getApiKey ?? (() => readRuntimeEnv(config.apiKeyEnvVar)))() : void 0;
+  if (usesLovableEndpoint && !apiKey) {
+    log.debug("metrics.disabled_no_api_key", { envVar: config.apiKeyEnvVar });
+    return NOOP_RECORDER;
+  }
+  const waitUntil = deps.waitUntil ?? probeWaitUntil();
+  const buffer = [];
+  let timer;
+  const schedule = (p) => {
+    if (waitUntil) {
+      try {
+        waitUntil(p);
+        return;
+      } catch {
+      }
+    }
+    void p.catch(() => {
+    });
+  };
+  const headers = {};
+  if (!usesLovableEndpoint) {
+    for (const [key, value] of Object.entries(config.headers)) {
+      if (key.toLowerCase() !== "content-type")
+        headers[key] = value;
+    }
+  }
+  headers["content-type"] = "application/json";
+  if (apiKey)
+    headers.authorization = `Bearer ${apiKey}`;
+  const flush = async () => {
+    if (buffer.length === 0)
+      return;
+    const records = buffer.splice(0, buffer.length);
+    try {
+      const res = await doFetch(config.endpoint, {
+        method: "POST",
+        headers,
+        body: buildLogsPayload(records, server),
+        keepalive: true
+      });
+      if (!res.ok)
+        log.debug("metrics.flush_rejected", { status: res.status });
+    } catch (err) {
+      log.debug("metrics.flush_failed", describeError(err));
+    }
+  };
+  const ensureTimer = () => {
+    if (timer !== void 0)
+      return;
+    timer = setInterval(() => schedule(flush()), config.flushIntervalMs);
+    timer.unref?.();
+  };
+  return {
+    record(ev) {
+      if (config.sampleRate < 1 && Math.random() >= config.sampleRate)
+        return;
+      buffer.push({ ...ev, timeUnixNano: nowUnixNano() });
+      ensureTimer();
+      if (buffer.length >= config.maxBatchSize)
+        schedule(flush());
+    },
+    flush
+  };
+}
+function createRecorderForRuntime(mcp) {
+  const config = resolveMetricsConfig(mcp.metrics);
+  if (!config.enabled)
+    return createNoopRecorder();
+  return createMetricsRecorder({ config, server: { name: mcp.name, version: mcp.version } });
+}
+
 // src/core/promise.ts
 function cachedPromise(load, label) {
   let settled = false;
@@ -409,12 +587,13 @@ function assertRequiredScopes(auth, context) {
     throw new OAuthTokenError(403, "insufficient_scope", "Additional OAuth scope is required");
   }
 }
-function createRequestAuthorizer(mcp, options = {}) {
+function createRequestAuthorizer(mcp, options = {}, recorder) {
   const runtime = getOAuthRuntime(mcp, options);
   return {
     async authorize(request) {
       if (runtime.kind === "unconfigured")
         return { ok: true };
+      const startedAt = nowMs();
       const token = parseBearerToken(request);
       if (!token) {
         log.info("auth.no_bearer_token", { outcome: "401" });
@@ -427,6 +606,12 @@ function createRequestAuthorizer(mcp, options = {}) {
       } catch (err) {
         if (err instanceof OAuthConfigurationError) {
           log.error("auth.config_error", { ...describeError(err), outcome: "500" });
+          recorder?.record({
+            tool: null,
+            method: "authorize",
+            outcome: "auth_config_error",
+            durationMs: nowMs() - startedAt
+          });
           return { ok: false, response: oauthConfigurationErrorResponse() };
         }
         if (err instanceof OAuthTokenError) {
@@ -484,6 +669,8 @@ export {
   JSON_HEADERS,
   headResponse,
   methodNotAllowed,
+  nowMs,
+  createRecorderForRuntime,
   resolveProtectedResource,
   assertResourcePathShape,
   oauthConfigurationErrorResponse,

package/dist/cli/extract-manifest.cjs

@@ -13,7 +13,7 @@ function isFileMissing(err) {
 }
 
 // package.json
-var version = "0.15.0";
+var version = "0.15.1";
 
 // src/protocols/rest/list-tools.ts
 var import_zod_compat = require("@modelcontextprotocol/sdk/server/zod-compat.js");

package/dist/cli/extract-manifest.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   buildMcpListing
-} from "../chunk-VNRQPA4K.js";
-import "../chunk-G4XA7IJM.js";
-import "../chunk-QC3DXQTH.js";
+} from "../chunk-QT5L4CS3.js";
+import "../chunk-YTOMGJV5.js";
+import "../chunk-DCWYK4CA.js";
 import "../chunk-6DXGZZA4.js";
 import {
   isFileMissing
 } from "../chunk-Y3ZFPEQH.js";
 import {
   version
-} from "../chunk-LWHVXXKQ.js";
+} from "../chunk-GIHCQT6L.js";
 
 // src/manifest/io.ts
 import { randomUUID } from "crypto";

package/dist/index.js

@@ -1,11 +1,11 @@
 import {
-  ToolContext,
-  resolveMetricsConfig
-} from "./chunk-P3F324UC.js";
+  ToolContext
+} from "./chunk-MA5H6PSF.js";
 import {
   parseSafeUrl,
+  resolveMetricsConfig,
   setLogLevel
-} from "./chunk-QC3DXQTH.js";
+} from "./chunk-DCWYK4CA.js";
 
 // src/core/define.ts
 function assertUniqueNames(mcp) {