@lovable.dev/mcp-js 0.20.1-rc.0 → 0.20.1-rc.1

package/dist/{base-RSqYamjy.d.ts → base-CFy5vZ5Z.d.ts}

@@ -1,6 +1,8 @@
-type InvocationOutcome = "ok" | "tool_error" | "handler_error" | "transport_error" | "auth_config_error" | "auth_upstream_unreachable";
+type InvocationOutcome = "ok" | "tool_error" | "handler_error" | "transport_error" | "auth_config_error";
 /** One recorded MCP call. Carries no arguments or response payloads — only the
- *  tool name, the JSON-RPC method, the result class, timing, and byte sizes. */
+ *  tool name, the JSON-RPC method, the result class, timing, and byte sizes.
+ *  `errorText` is the sole exception: it is logged locally for debugging and
+ *  deliberately never included in the OTLP payload (see `emit` / `buildLogsPayload`). */
 interface InvocationRecord {
     /** Tool name for `tools/call`; `null` for list/initialize, transport faults, and auth-config failures. */
     tool: string | null;
@@ -10,6 +12,9 @@ interface InvocationRecord {
     durationMs: number;
     reqBytes?: number;
     resBytes?: number;
+    /** The `tool_error` message (text content of an `isError` result). Local log
+     *  only — never sent to the collector, so it stays on-box for the operator. */
+    errorText?: string;
 }
 /** A per-request telemetry recorder. `emit` logs the invocation and sends it as a
  *  single OTLP POST, awaited so it lands before the request ends. */

package/dist/chunk-6QFZYYUV.js

@@ -0,0 +1,11 @@
+// src/core/content.ts
+function extractTextContent(content) {
+  if (!content)
+    return void 0;
+  const text = content.filter((block) => block.type === "text").map((block) => block.text).join("\n").trim();
+  return text.length > 0 ? text : void 0;
+}
+
+export {
+  extractTextContent
+};

package/dist/{chunk-YAXKWTJK.js → chunk-ICCGSB2E.js}

@@ -6,7 +6,7 @@ import {
   headResponse,
   methodNotAllowed,
   withCors
-} from "./chunk-E7CPOJN6.js";
+} from "./chunk-XIGO7RW6.js";
 
 // src/protocols/rest/list-tools.ts
 import { objectFromShape } from "@modelcontextprotocol/sdk/server/zod-compat.js";

package/dist/{chunk-A2GUTEAK.js → chunk-PKYNTB7X.js}

@@ -7,7 +7,7 @@ import {
   oauthConfigurationErrorResponse,
   resolveProtectedResource,
   withCors
-} from "./chunk-E7CPOJN6.js";
+} from "./chunk-XIGO7RW6.js";
 import {
   describeError,
   log

package/dist/{chunk-OMEL6F6I.js → chunk-QWVSMQJF.js}

@@ -1,5 +1,5 @@
 // package.json
-var version = "0.20.1-rc.0";
+var version = "0.20.1-rc.1";
 
 export {
   version

package/dist/{chunk-E7CPOJN6.js → chunk-XIGO7RW6.js}

@@ -13,7 +13,7 @@ import {
 } from "./chunk-6DXGZZA4.js";
 import {
   version
-} from "./chunk-OMEL6F6I.js";
+} from "./chunk-QWVSMQJF.js";
 
 // src/core/http.ts
 var JSON_HEADERS = { "Content-Type": "application/json" };
@@ -156,7 +156,8 @@ var BaseMetricRecorder = class {
       method: ev.method,
       outcome: ev.outcome,
       durationMs: ev.durationMs,
-      stack: this.stack
+      stack: this.stack,
+      ...ev.errorText !== void 0 && { errorText: ev.errorText }
     });
     if (!this.config.enabled)
       return;
@@ -289,18 +290,6 @@ var OAuthConfigurationError = class extends Error {
     this.name = "OAuthConfigurationError";
   }
 };
-var OAuthUpstreamUnreachableError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "OAuthUpstreamUnreachableError";
-  }
-};
-var MetadataUnreachableError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "MetadataUnreachableError";
-  }
-};
 var METADATA_FETCH_TIMEOUT_MS = 5e3;
 function issuerPath(url) {
   const path = trimTrailingSlash(url.pathname);
@@ -325,37 +314,21 @@ function oauthMetadataUrlsForIssuer(issuer) {
   return [...pathInsertedOAuthMetadataUrls(url, path), `${normalizedIssuer}/.well-known/openid-configuration`];
 }
 async function fetchFirstValidOAuthServerMetadata(metadataUrls, expectedIssuer) {
-  const controller = new AbortController();
-  const attempts = metadataUrls.map(
-    (url) => fetchOAuthServerMetadata(url, expectedIssuer, controller.signal).catch((err) => {
+  const errors = [];
+  for (const url of metadataUrls) {
+    try {
+      return await fetchOAuthServerMetadata(url, expectedIssuer);
+    } catch (err) {
       log.debug("oauth.discovery.attempt_failed", { url, ...describeError(err) });
-      throw err instanceof Error ? err : new Error(String(err));
-    })
-  );
-  try {
-    const metadata = await Promise.any(attempts);
-    controller.abort();
-    return metadata;
-  } catch (aggregate) {
-    const causes = aggregate instanceof AggregateError ? aggregate.errors : [aggregate];
-    const unreachable = causes.some((c) => c instanceof MetadataUnreachableError);
-    const detail = causes.map((c) => c instanceof Error ? c.message : String(c)).join("; ");
-    log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
-    const message = `failed to discover OAuth server metadata (${detail})`;
-    throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
+      errors.push(`${url}: ${err instanceof Error ? err.message : String(err)}`);
+    }
   }
+  log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors });
+  throw new Error(`failed to discover OAuth server metadata (${errors.join("; ")})`);
 }
-async function fetchOAuthServerMetadata(url, expectedIssuer, signal) {
+async function fetchOAuthServerMetadata(url, expectedIssuer) {
   log.debug("oauth.discovery.fetch", { url });
-  let response;
-  try {
-    response = await fetch(url, {
-      signal: AbortSignal.any([signal, AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS)]),
-      redirect: "manual"
-    });
-  } catch (err) {
-    throw new MetadataUnreachableError(err instanceof Error ? err.message : String(err));
-  }
+  const response = await fetch(url, { signal: AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS), redirect: "manual" });
   if (!response.ok) {
     throw new Error(String(response.status));
   }
@@ -378,21 +351,14 @@ async function fetchIssuerOAuthServerMetadata(issuer) {
   try {
     return await fetchFirstValidOAuthServerMetadata(oauthMetadataUrlsForIssuer(issuer), issuer);
   } catch (err) {
-    const message = `OAuth issuer discovery failed: ${err instanceof Error ? err.message : String(err)}`;
-    if (err instanceof MetadataUnreachableError) {
-      log.error("oauth.discovery.unreachable", {
-        issuer,
-        ...describeError(err),
-        outcome: "503 authorization server unreachable"
-      });
-      throw new OAuthUpstreamUnreachableError(message);
-    }
     log.error("oauth.discovery.config_error", {
       issuer,
       ...describeError(err),
       outcome: "500 oauth configuration error"
     });
-    throw new OAuthConfigurationError(message);
+    throw new OAuthConfigurationError(
+      `OAuth issuer discovery failed: ${err instanceof Error ? err.message : String(err)}`
+    );
   }
 }
 function createOAuthDiscoveryResolver(auth) {
@@ -458,14 +424,8 @@ function tokenHeaderFields(token) {
   }
 }
 async function fetchVerificationKeySet(jwksUri) {
-  let response;
-  try {
-    response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
-  } catch (err) {
-    log.error("oauth.jwks.unreachable", { ...describeError(err), outcome: "503 authorization server unreachable" });
-    throw new OAuthUpstreamUnreachableError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
-  }
   try {
+    const response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
     if (!response.ok)
       throw new Error(`JWKS endpoint returned ${response.status}`);
     const json = await response.json();
@@ -606,12 +566,6 @@ function oauthConfigurationErrorResponse() {
     headers: { ...JSON_HEADERS, "Cache-Control": "no-store" }
   });
 }
-function oauthUpstreamUnreachableResponse() {
-  return new Response(JSON.stringify({ error: "authorization server unreachable" }), {
-    status: 503,
-    headers: { ...JSON_HEADERS, "Cache-Control": "no-store", "Retry-After": "30" }
-  });
-}
 function parseBearerToken(request) {
   const header = request.headers.get("Authorization");
   if (!header)
@@ -684,16 +638,6 @@ function createRequestAuthorizer(mcp, options = {}) {
         assertRequiredScopes(runtime.auth, auth);
         return { ok: true, auth };
       } catch (err) {
-        if (err instanceof OAuthUpstreamUnreachableError) {
-          log.error("auth.upstream_unreachable", { ...describeError(err), outcome: "503" });
-          await recorder?.emit({
-            tool: null,
-            method: "authorize",
-            outcome: "auth_upstream_unreachable",
-            durationMs: nowMs() - startedAt
-          });
-          return { ok: false, response: oauthUpstreamUnreachableResponse() };
-        }
         if (err instanceof OAuthConfigurationError) {
           log.error("auth.config_error", { ...describeError(err), outcome: "500" });
           await recorder?.emit({

package/dist/{chunk-ID3YWZBR.js → chunk-YQFF4OCL.js}

@@ -1,3 +1,6 @@
+import {
+  extractTextContent
+} from "./chunk-6QFZYYUV.js";
 import {
   ToolContext
 } from "./chunk-MA5H6PSF.js";
@@ -7,7 +10,7 @@ import {
   createRequestAuthorizer,
   nowMs,
   withCors
-} from "./chunk-E7CPOJN6.js";
+} from "./chunk-XIGO7RW6.js";
 import {
   describeError,
   log
@@ -45,7 +48,8 @@ function adaptToolToSdkCallback(tool, auth, recorder) {
       tool: tool.name,
       method: "tools/call",
       outcome: result.isError ? "tool_error" : "ok",
-      durationMs: nowMs() - start
+      durationMs: nowMs() - start,
+      errorText: result.isError ? extractTextContent(result.content) : void 0
     });
     return { content: result.content ?? [], structuredContent: result.structuredContent, isError: result.isError };
   };

package/dist/{chunk-RT2I26ZN.js → chunk-YQMS7A7Z.js}

@@ -1,3 +1,6 @@
+import {
+  extractTextContent
+} from "./chunk-6QFZYYUV.js";
 import {
   ToolContext
 } from "./chunk-MA5H6PSF.js";
@@ -10,7 +13,7 @@ import {
   methodNotAllowed,
   nowMs,
   withCors
-} from "./chunk-E7CPOJN6.js";
+} from "./chunk-XIGO7RW6.js";
 
 // src/protocols/rest/invoke-tool.ts
 import { getParseErrorMessage, objectFromShape, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";
@@ -113,7 +116,8 @@ function createInvokeToolHandler(mcp, options = {}) {
       tool: tool.name,
       method: "tools/call",
       outcome: result.isError ? "tool_error" : "ok",
-      durationMs: nowMs() - start
+      durationMs: nowMs() - start,
+      errorText: result.isError ? extractTextContent(result.content) : void 0
     });
     return Response.json({
       content: result.content ?? [],

package/dist/cli/extract-manifest.cjs

@@ -13,7 +13,7 @@ function isFileMissing(err) {
 }
 
 // package.json
-var version = "0.20.1-rc.0";
+var version = "0.20.1-rc.1";
 
 // src/protocols/rest/list-tools.ts
 var import_zod_compat = require("@modelcontextprotocol/sdk/server/zod-compat.js");

package/dist/cli/extract-manifest.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   buildMcpListing
-} from "../chunk-YAXKWTJK.js";
-import "../chunk-E7CPOJN6.js";
+} from "../chunk-ICCGSB2E.js";
+import "../chunk-XIGO7RW6.js";
 import "../chunk-H37EB22A.js";
 import "../chunk-6DXGZZA4.js";
 import {
@@ -10,7 +10,7 @@ import {
 } from "../chunk-Y3ZFPEQH.js";
 import {
   version
-} from "../chunk-OMEL6F6I.js";
+} from "../chunk-QWVSMQJF.js";
 
 // src/manifest/io.ts
 import { randomUUID } from "crypto";

package/dist/protocols/mcp/index.cjs

@@ -153,18 +153,6 @@ var OAuthConfigurationError = class extends Error {
     this.name = "OAuthConfigurationError";
   }
 };
-var OAuthUpstreamUnreachableError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "OAuthUpstreamUnreachableError";
-  }
-};
-var MetadataUnreachableError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "MetadataUnreachableError";
-  }
-};
 var METADATA_FETCH_TIMEOUT_MS = 5e3;
 function issuerPath(url) {
   const path = trimTrailingSlash(url.pathname);
@@ -189,37 +177,21 @@ function oauthMetadataUrlsForIssuer(issuer) {
   return [...pathInsertedOAuthMetadataUrls(url, path), `${normalizedIssuer}/.well-known/openid-configuration`];
 }
 async function fetchFirstValidOAuthServerMetadata(metadataUrls, expectedIssuer) {
-  const controller = new AbortController();
-  const attempts = metadataUrls.map(
-    (url) => fetchOAuthServerMetadata(url, expectedIssuer, controller.signal).catch((err) => {
+  const errors = [];
+  for (const url of metadataUrls) {
+    try {
+      return await fetchOAuthServerMetadata(url, expectedIssuer);
+    } catch (err) {
       log.debug("oauth.discovery.attempt_failed", { url, ...describeError(err) });
-      throw err instanceof Error ? err : new Error(String(err));
-    })
-  );
-  try {
-    const metadata = await Promise.any(attempts);
-    controller.abort();
-    return metadata;
-  } catch (aggregate) {
-    const causes = aggregate instanceof AggregateError ? aggregate.errors : [aggregate];
-    const unreachable = causes.some((c) => c instanceof MetadataUnreachableError);
-    const detail = causes.map((c) => c instanceof Error ? c.message : String(c)).join("; ");
-    log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
-    const message = `failed to discover OAuth server metadata (${detail})`;
-    throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
-  }
-}
-async function fetchOAuthServerMetadata(url, expectedIssuer, signal) {
-  log.debug("oauth.discovery.fetch", { url });
-  let response;
-  try {
-    response = await fetch(url, {
-      signal: AbortSignal.any([signal, AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS)]),
-      redirect: "manual"
-    });
-  } catch (err) {
-    throw new MetadataUnreachableError(err instanceof Error ? err.message : String(err));
+      errors.push(`${url}: ${err instanceof Error ? err.message : String(err)}`);
+    }
   }
+  log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors });
+  throw new Error(`failed to discover OAuth server metadata (${errors.join("; ")})`);
+}
+async function fetchOAuthServerMetadata(url, expectedIssuer) {
+  log.debug("oauth.discovery.fetch", { url });
+  const response = await fetch(url, { signal: AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS), redirect: "manual" });
   if (!response.ok) {
     throw new Error(String(response.status));
   }
@@ -242,21 +214,14 @@ async function fetchIssuerOAuthServerMetadata(issuer) {
   try {
     return await fetchFirstValidOAuthServerMetadata(oauthMetadataUrlsForIssuer(issuer), issuer);
   } catch (err) {
-    const message = `OAuth issuer discovery failed: ${err instanceof Error ? err.message : String(err)}`;
-    if (err instanceof MetadataUnreachableError) {
-      log.error("oauth.discovery.unreachable", {
-        issuer,
-        ...describeError(err),
-        outcome: "503 authorization server unreachable"
-      });
-      throw new OAuthUpstreamUnreachableError(message);
-    }
     log.error("oauth.discovery.config_error", {
       issuer,
       ...describeError(err),
       outcome: "500 oauth configuration error"
     });
-    throw new OAuthConfigurationError(message);
+    throw new OAuthConfigurationError(
+      `OAuth issuer discovery failed: ${err instanceof Error ? err.message : String(err)}`
+    );
   }
 }
 function createOAuthDiscoveryResolver(auth) {
@@ -349,14 +314,8 @@ function tokenHeaderFields(token) {
   }
 }
 async function fetchVerificationKeySet(jwksUri) {
-  let response;
-  try {
-    response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
-  } catch (err) {
-    log.error("oauth.jwks.unreachable", { ...describeError(err), outcome: "503 authorization server unreachable" });
-    throw new OAuthUpstreamUnreachableError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
-  }
   try {
+    const response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
     if (!response.ok)
       throw new Error(`JWKS endpoint returned ${response.status}`);
     const json = await response.json();
@@ -497,12 +456,6 @@ function oauthConfigurationErrorResponse() {
     headers: { ...JSON_HEADERS, "Cache-Control": "no-store" }
   });
 }
-function oauthUpstreamUnreachableResponse() {
-  return new Response(JSON.stringify({ error: "authorization server unreachable" }), {
-    status: 503,
-    headers: { ...JSON_HEADERS, "Cache-Control": "no-store", "Retry-After": "30" }
-  });
-}
 function parseBearerToken(request) {
   const header = request.headers.get("Authorization");
   if (!header)
@@ -567,16 +520,6 @@ function createRequestAuthorizer(mcp, options = {}) {
         assertRequiredScopes(runtime.auth, auth);
         return { ok: true, auth };
       } catch (err) {
-        if (err instanceof OAuthUpstreamUnreachableError) {
-          log.error("auth.upstream_unreachable", { ...describeError(err), outcome: "503" });
-          await recorder?.emit({
-            tool: null,
-            method: "authorize",
-            outcome: "auth_upstream_unreachable",
-            durationMs: nowMs() - startedAt
-          });
-          return { ok: false, response: oauthUpstreamUnreachableResponse() };
-        }
         if (err instanceof OAuthConfigurationError) {
           log.error("auth.config_error", { ...describeError(err), outcome: "500" });
           await recorder?.emit({
@@ -661,6 +604,14 @@ var ToolContext = class {
   }
 };
 
+// src/core/content.ts
+function extractTextContent(content) {
+  if (!content)
+    return void 0;
+  const text = content.filter((block) => block.type === "text").map((block) => block.text).join("\n").trim();
+  return text.length > 0 ? text : void 0;
+}
+
 // src/core/cors.ts
 var EXPOSE_HEADERS = "WWW-Authenticate, Mcp-Session-Id, Mcp-Protocol-Version";
 var ALLOW_HEADERS = "Authorization, Content-Type, Mcp-Session-Id, Mcp-Protocol-Version, Last-Event-ID";
@@ -711,7 +662,8 @@ function adaptToolToSdkCallback(tool, auth, recorder) {
       tool: tool.name,
       method: "tools/call",
       outcome: result.isError ? "tool_error" : "ok",
-      durationMs: nowMs() - start
+      durationMs: nowMs() - start,
+      errorText: result.isError ? extractTextContent(result.content) : void 0
     });
     return { content: result.content ?? [], structuredContent: result.structuredContent, isError: result.isError };
   };

package/dist/protocols/mcp/index.d.cts

@@ -1,6 +1,6 @@
 import { M as McpRuntimeOptions } from '../../authorize-BMeXd_Sh.js';
 import { d as McpDefinition } from '../../types-CPkhCRxc.js';
-import { M as MetricsRecorder } from '../../base-RSqYamjy.js';
+import { M as MetricsRecorder } from '../../base-CFy5vZ5Z.js';
 import 'zod';
 
 type McpProtocolHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;

package/dist/protocols/mcp/index.d.ts

@@ -1,6 +1,6 @@
 import { M as McpRuntimeOptions } from '../../authorize-BMeXd_Sh.js';
 import { d as McpDefinition } from '../../types-CPkhCRxc.js';
-import { M as MetricsRecorder } from '../../base-RSqYamjy.js';
+import { M as MetricsRecorder } from '../../base-CFy5vZ5Z.js';
 import 'zod';
 
 type McpProtocolHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;

package/dist/protocols/mcp/index.js

@@ -1,11 +1,12 @@
 import {
   createMcpProtocolHandler
-} from "../../chunk-ID3YWZBR.js";
+} from "../../chunk-YQFF4OCL.js";
+import "../../chunk-6QFZYYUV.js";
 import "../../chunk-MA5H6PSF.js";
-import "../../chunk-E7CPOJN6.js";
+import "../../chunk-XIGO7RW6.js";
 import "../../chunk-H37EB22A.js";
 import "../../chunk-6DXGZZA4.js";
-import "../../chunk-OMEL6F6I.js";
+import "../../chunk-QWVSMQJF.js";
 export {
   createMcpProtocolHandler
 };

package/dist/protocols/oauth-metadata.cjs

@@ -148,18 +148,6 @@ var OAuthConfigurationError = class extends Error {
     this.name = "OAuthConfigurationError";
   }
 };
-var OAuthUpstreamUnreachableError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "OAuthUpstreamUnreachableError";
-  }
-};
-var MetadataUnreachableError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "MetadataUnreachableError";
-  }
-};
 var METADATA_FETCH_TIMEOUT_MS = 5e3;
 function issuerPath(url) {
   const path = trimTrailingSlash(url.pathname);
@@ -184,37 +172,21 @@ function oauthMetadataUrlsForIssuer(issuer) {
   return [...pathInsertedOAuthMetadataUrls(url, path), `${normalizedIssuer}/.well-known/openid-configuration`];
 }
 async function fetchFirstValidOAuthServerMetadata(metadataUrls, expectedIssuer) {
-  const controller = new AbortController();
-  const attempts = metadataUrls.map(
-    (url) => fetchOAuthServerMetadata(url, expectedIssuer, controller.signal).catch((err) => {
+  const errors = [];
+  for (const url of metadataUrls) {
+    try {
+      return await fetchOAuthServerMetadata(url, expectedIssuer);
+    } catch (err) {
       log.debug("oauth.discovery.attempt_failed", { url, ...describeError(err) });
-      throw err instanceof Error ? err : new Error(String(err));
-    })
-  );
-  try {
-    const metadata = await Promise.any(attempts);
-    controller.abort();
-    return metadata;
-  } catch (aggregate) {
-    const causes = aggregate instanceof AggregateError ? aggregate.errors : [aggregate];
-    const unreachable = causes.some((c) => c instanceof MetadataUnreachableError);
-    const detail = causes.map((c) => c instanceof Error ? c.message : String(c)).join("; ");
-    log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
-    const message = `failed to discover OAuth server metadata (${detail})`;
-    throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
+      errors.push(`${url}: ${err instanceof Error ? err.message : String(err)}`);
+    }
   }
+  log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors });
+  throw new Error(`failed to discover OAuth server metadata (${errors.join("; ")})`);
 }
-async function fetchOAuthServerMetadata(url, expectedIssuer, signal) {
+async function fetchOAuthServerMetadata(url, expectedIssuer) {
   log.debug("oauth.discovery.fetch", { url });
-  let response;
-  try {
-    response = await fetch(url, {
-      signal: AbortSignal.any([signal, AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS)]),
-      redirect: "manual"
-    });
-  } catch (err) {
-    throw new MetadataUnreachableError(err instanceof Error ? err.message : String(err));
-  }
+  const response = await fetch(url, { signal: AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS), redirect: "manual" });
   if (!response.ok) {
     throw new Error(String(response.status));
   }
@@ -237,21 +209,14 @@ async function fetchIssuerOAuthServerMetadata(issuer) {
   try {
     return await fetchFirstValidOAuthServerMetadata(oauthMetadataUrlsForIssuer(issuer), issuer);
   } catch (err) {
-    const message = `OAuth issuer discovery failed: ${err instanceof Error ? err.message : String(err)}`;
-    if (err instanceof MetadataUnreachableError) {
-      log.error("oauth.discovery.unreachable", {
-        issuer,
-        ...describeError(err),
-        outcome: "503 authorization server unreachable"
-      });
-      throw new OAuthUpstreamUnreachableError(message);
-    }
     log.error("oauth.discovery.config_error", {
       issuer,
       ...describeError(err),
       outcome: "500 oauth configuration error"
     });
-    throw new OAuthConfigurationError(message);
+    throw new OAuthConfigurationError(
+      `OAuth issuer discovery failed: ${err instanceof Error ? err.message : String(err)}`
+    );
   }
 }
 function createOAuthDiscoveryResolver(auth) {
@@ -341,14 +306,8 @@ function tokenHeaderFields(token) {
   }
 }
 async function fetchVerificationKeySet(jwksUri) {
-  let response;
-  try {
-    response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
-  } catch (err) {
-    log.error("oauth.jwks.unreachable", { ...describeError(err), outcome: "503 authorization server unreachable" });
-    throw new OAuthUpstreamUnreachableError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
-  }
   try {
+    const response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
     if (!response.ok)
       throw new Error(`JWKS endpoint returned ${response.status}`);
     const json = await response.json();

package/dist/protocols/oauth-metadata.js

@@ -1,10 +1,10 @@
 import {
   createOAuthProtectedResourceMetadataHandler
-} from "../chunk-A2GUTEAK.js";
-import "../chunk-E7CPOJN6.js";
+} from "../chunk-PKYNTB7X.js";
+import "../chunk-XIGO7RW6.js";
 import "../chunk-H37EB22A.js";
 import "../chunk-6DXGZZA4.js";
-import "../chunk-OMEL6F6I.js";
+import "../chunk-QWVSMQJF.js";
 export {
   createOAuthProtectedResourceMetadataHandler
 };

package/dist/protocols/rest/index.cjs

@@ -163,18 +163,6 @@ var OAuthConfigurationError = class extends Error {
     this.name = "OAuthConfigurationError";
   }
 };
-var OAuthUpstreamUnreachableError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "OAuthUpstreamUnreachableError";
-  }
-};
-var MetadataUnreachableError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "MetadataUnreachableError";
-  }
-};
 var METADATA_FETCH_TIMEOUT_MS = 5e3;
 function issuerPath(url) {
   const path = trimTrailingSlash(url.pathname);
@@ -199,37 +187,21 @@ function oauthMetadataUrlsForIssuer(issuer) {
   return [...pathInsertedOAuthMetadataUrls(url, path), `${normalizedIssuer}/.well-known/openid-configuration`];
 }
 async function fetchFirstValidOAuthServerMetadata(metadataUrls, expectedIssuer) {
-  const controller = new AbortController();
-  const attempts = metadataUrls.map(
-    (url) => fetchOAuthServerMetadata(url, expectedIssuer, controller.signal).catch((err) => {
+  const errors = [];
+  for (const url of metadataUrls) {
+    try {
+      return await fetchOAuthServerMetadata(url, expectedIssuer);
+    } catch (err) {
       log.debug("oauth.discovery.attempt_failed", { url, ...describeError(err) });
-      throw err instanceof Error ? err : new Error(String(err));
-    })
-  );
-  try {
-    const metadata = await Promise.any(attempts);
-    controller.abort();
-    return metadata;
-  } catch (aggregate) {
-    const causes = aggregate instanceof AggregateError ? aggregate.errors : [aggregate];
-    const unreachable = causes.some((c) => c instanceof MetadataUnreachableError);
-    const detail = causes.map((c) => c instanceof Error ? c.message : String(c)).join("; ");
-    log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
-    const message = `failed to discover OAuth server metadata (${detail})`;
-    throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
-  }
-}
-async function fetchOAuthServerMetadata(url, expectedIssuer, signal) {
-  log.debug("oauth.discovery.fetch", { url });
-  let response;
-  try {
-    response = await fetch(url, {
-      signal: AbortSignal.any([signal, AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS)]),
-      redirect: "manual"
-    });
-  } catch (err) {
-    throw new MetadataUnreachableError(err instanceof Error ? err.message : String(err));
+      errors.push(`${url}: ${err instanceof Error ? err.message : String(err)}`);
+    }
   }
+  log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors });
+  throw new Error(`failed to discover OAuth server metadata (${errors.join("; ")})`);
+}
+async function fetchOAuthServerMetadata(url, expectedIssuer) {
+  log.debug("oauth.discovery.fetch", { url });
+  const response = await fetch(url, { signal: AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS), redirect: "manual" });
   if (!response.ok) {
     throw new Error(String(response.status));
   }
@@ -252,21 +224,14 @@ async function fetchIssuerOAuthServerMetadata(issuer) {
   try {
     return await fetchFirstValidOAuthServerMetadata(oauthMetadataUrlsForIssuer(issuer), issuer);
   } catch (err) {
-    const message = `OAuth issuer discovery failed: ${err instanceof Error ? err.message : String(err)}`;
-    if (err instanceof MetadataUnreachableError) {
-      log.error("oauth.discovery.unreachable", {
-        issuer,
-        ...describeError(err),
-        outcome: "503 authorization server unreachable"
-      });
-      throw new OAuthUpstreamUnreachableError(message);
-    }
     log.error("oauth.discovery.config_error", {
       issuer,
       ...describeError(err),
       outcome: "500 oauth configuration error"
     });
-    throw new OAuthConfigurationError(message);
+    throw new OAuthConfigurationError(
+      `OAuth issuer discovery failed: ${err instanceof Error ? err.message : String(err)}`
+    );
   }
 }
 function createOAuthDiscoveryResolver(auth) {
@@ -359,14 +324,8 @@ function tokenHeaderFields(token) {
   }
 }
 async function fetchVerificationKeySet(jwksUri) {
-  let response;
-  try {
-    response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
-  } catch (err) {
-    log.error("oauth.jwks.unreachable", { ...describeError(err), outcome: "503 authorization server unreachable" });
-    throw new OAuthUpstreamUnreachableError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
-  }
   try {
+    const response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
     if (!response.ok)
       throw new Error(`JWKS endpoint returned ${response.status}`);
     const json = await response.json();
@@ -507,12 +466,6 @@ function oauthConfigurationErrorResponse() {
     headers: { ...JSON_HEADERS, "Cache-Control": "no-store" }
   });
 }
-function oauthUpstreamUnreachableResponse() {
-  return new Response(JSON.stringify({ error: "authorization server unreachable" }), {
-    status: 503,
-    headers: { ...JSON_HEADERS, "Cache-Control": "no-store", "Retry-After": "30" }
-  });
-}
 function parseBearerToken(request) {
   const header = request.headers.get("Authorization");
   if (!header)
@@ -585,16 +538,6 @@ function createRequestAuthorizer(mcp, options = {}) {
         assertRequiredScopes(runtime.auth, auth);
         return { ok: true, auth };
       } catch (err) {
-        if (err instanceof OAuthUpstreamUnreachableError) {
-          log.error("auth.upstream_unreachable", { ...describeError(err), outcome: "503" });
-          await recorder?.emit({
-            tool: null,
-            method: "authorize",
-            outcome: "auth_upstream_unreachable",
-            durationMs: nowMs() - startedAt
-          });
-          return { ok: false, response: oauthUpstreamUnreachableResponse() };
-        }
         if (err instanceof OAuthConfigurationError) {
           log.error("auth.config_error", { ...describeError(err), outcome: "500" });
           await recorder?.emit({
@@ -744,6 +687,14 @@ var ToolContext = class {
   }
 };
 
+// src/core/content.ts
+function extractTextContent(content) {
+  if (!content)
+    return void 0;
+  const text = content.filter((block) => block.type === "text").map((block) => block.text).join("\n").trim();
+  return text.length > 0 ? text : void 0;
+}
+
 // src/protocols/rest/invoke-tool.ts
 var MAX_REFLECTED_TOOL_NAME = 256;
 function safeReflectName(name) {
@@ -844,7 +795,8 @@ function createInvokeToolHandler(mcp, options = {}) {
       tool: tool.name,
       method: "tools/call",
       outcome: result.isError ? "tool_error" : "ok",
-      durationMs: nowMs() - start
+      durationMs: nowMs() - start,
+      errorText: result.isError ? extractTextContent(result.content) : void 0
     });
     return Response.json({
       content: result.content ?? [],

package/dist/protocols/rest/index.d.cts

@@ -1,6 +1,6 @@
 import { M as McpRuntimeOptions } from '../../authorize-BMeXd_Sh.js';
 import { d as McpDefinition } from '../../types-CPkhCRxc.js';
-import { M as MetricsRecorder } from '../../base-RSqYamjy.js';
+import { M as MetricsRecorder } from '../../base-CFy5vZ5Z.js';
 import 'zod';
 
 type RestListToolsHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;

package/dist/protocols/rest/index.d.ts

@@ -1,6 +1,6 @@
 import { M as McpRuntimeOptions } from '../../authorize-BMeXd_Sh.js';
 import { d as McpDefinition } from '../../types-CPkhCRxc.js';
-import { M as MetricsRecorder } from '../../base-RSqYamjy.js';
+import { M as MetricsRecorder } from '../../base-CFy5vZ5Z.js';
 import 'zod';
 
 type RestListToolsHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;

package/dist/protocols/rest/index.js

@@ -1,14 +1,15 @@
 import {
   createInvokeToolHandler
-} from "../../chunk-RT2I26ZN.js";
+} from "../../chunk-YQMS7A7Z.js";
 import {
   createListToolsHandler
-} from "../../chunk-YAXKWTJK.js";
+} from "../../chunk-ICCGSB2E.js";
+import "../../chunk-6QFZYYUV.js";
 import "../../chunk-MA5H6PSF.js";
-import "../../chunk-E7CPOJN6.js";
+import "../../chunk-XIGO7RW6.js";
 import "../../chunk-H37EB22A.js";
 import "../../chunk-6DXGZZA4.js";
-import "../../chunk-OMEL6F6I.js";
+import "../../chunk-QWVSMQJF.js";
 export {
   createInvokeToolHandler,
   createListToolsHandler

package/dist/stacks/supabase/index.cjs

@@ -174,7 +174,7 @@ function describeError(err) {
 }
 
 // package.json
-var version = "0.20.1-rc.0";
+var version = "0.20.1-rc.1";
 
 // src/metrics/otlp.ts
 var SCOPE_NAME = "@lovable.dev/mcp-js";
@@ -281,7 +281,8 @@ var BaseMetricRecorder = class {
       method: ev.method,
       outcome: ev.outcome,
       durationMs: ev.durationMs,
-      stack: this.stack
+      stack: this.stack,
+      ...ev.errorText !== void 0 && { errorText: ev.errorText }
     });
     if (!this.config.enabled)
       return;
@@ -445,18 +446,6 @@ var OAuthConfigurationError = class extends Error {
     this.name = "OAuthConfigurationError";
   }
 };
-var OAuthUpstreamUnreachableError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "OAuthUpstreamUnreachableError";
-  }
-};
-var MetadataUnreachableError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "MetadataUnreachableError";
-  }
-};
 var METADATA_FETCH_TIMEOUT_MS = 5e3;
 function issuerPath(url) {
   const path = trimTrailingSlash(url.pathname);
@@ -481,37 +470,21 @@ function oauthMetadataUrlsForIssuer(issuer) {
   return [...pathInsertedOAuthMetadataUrls(url, path), `${normalizedIssuer}/.well-known/openid-configuration`];
 }
 async function fetchFirstValidOAuthServerMetadata(metadataUrls, expectedIssuer) {
-  const controller = new AbortController();
-  const attempts = metadataUrls.map(
-    (url) => fetchOAuthServerMetadata(url, expectedIssuer, controller.signal).catch((err) => {
+  const errors = [];
+  for (const url of metadataUrls) {
+    try {
+      return await fetchOAuthServerMetadata(url, expectedIssuer);
+    } catch (err) {
       log.debug("oauth.discovery.attempt_failed", { url, ...describeError(err) });
-      throw err instanceof Error ? err : new Error(String(err));
-    })
-  );
-  try {
-    const metadata = await Promise.any(attempts);
-    controller.abort();
-    return metadata;
-  } catch (aggregate) {
-    const causes = aggregate instanceof AggregateError ? aggregate.errors : [aggregate];
-    const unreachable = causes.some((c) => c instanceof MetadataUnreachableError);
-    const detail = causes.map((c) => c instanceof Error ? c.message : String(c)).join("; ");
-    log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
-    const message = `failed to discover OAuth server metadata (${detail})`;
-    throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
+      errors.push(`${url}: ${err instanceof Error ? err.message : String(err)}`);
+    }
   }
+  log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors });
+  throw new Error(`failed to discover OAuth server metadata (${errors.join("; ")})`);
 }
-async function fetchOAuthServerMetadata(url, expectedIssuer, signal) {
+async function fetchOAuthServerMetadata(url, expectedIssuer) {
   log.debug("oauth.discovery.fetch", { url });
-  let response;
-  try {
-    response = await fetch(url, {
-      signal: AbortSignal.any([signal, AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS)]),
-      redirect: "manual"
-    });
-  } catch (err) {
-    throw new MetadataUnreachableError(err instanceof Error ? err.message : String(err));
-  }
+  const response = await fetch(url, { signal: AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS), redirect: "manual" });
   if (!response.ok) {
     throw new Error(String(response.status));
   }
@@ -534,21 +507,14 @@ async function fetchIssuerOAuthServerMetadata(issuer) {
   try {
     return await fetchFirstValidOAuthServerMetadata(oauthMetadataUrlsForIssuer(issuer), issuer);
   } catch (err) {
-    const message = `OAuth issuer discovery failed: ${err instanceof Error ? err.message : String(err)}`;
-    if (err instanceof MetadataUnreachableError) {
-      log.error("oauth.discovery.unreachable", {
-        issuer,
-        ...describeError(err),
-        outcome: "503 authorization server unreachable"
-      });
-      throw new OAuthUpstreamUnreachableError(message);
-    }
     log.error("oauth.discovery.config_error", {
       issuer,
       ...describeError(err),
       outcome: "500 oauth configuration error"
     });
-    throw new OAuthConfigurationError(message);
+    throw new OAuthConfigurationError(
+      `OAuth issuer discovery failed: ${err instanceof Error ? err.message : String(err)}`
+    );
   }
 }
 function createOAuthDiscoveryResolver(auth) {
@@ -614,14 +580,8 @@ function tokenHeaderFields(token) {
   }
 }
 async function fetchVerificationKeySet(jwksUri) {
-  let response;
-  try {
-    response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
-  } catch (err) {
-    log.error("oauth.jwks.unreachable", { ...describeError(err), outcome: "503 authorization server unreachable" });
-    throw new OAuthUpstreamUnreachableError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
-  }
   try {
+    const response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
     if (!response.ok)
       throw new Error(`JWKS endpoint returned ${response.status}`);
     const json = await response.json();
@@ -762,12 +722,6 @@ function oauthConfigurationErrorResponse() {
     headers: { ...JSON_HEADERS, "Cache-Control": "no-store" }
   });
 }
-function oauthUpstreamUnreachableResponse() {
-  return new Response(JSON.stringify({ error: "authorization server unreachable" }), {
-    status: 503,
-    headers: { ...JSON_HEADERS, "Cache-Control": "no-store", "Retry-After": "30" }
-  });
-}
 function parseBearerToken(request) {
   const header = request.headers.get("Authorization");
   if (!header)
@@ -840,16 +794,6 @@ function createRequestAuthorizer(mcp, options = {}) {
         assertRequiredScopes(runtime.auth, auth);
         return { ok: true, auth };
       } catch (err) {
-        if (err instanceof OAuthUpstreamUnreachableError) {
-          log.error("auth.upstream_unreachable", { ...describeError(err), outcome: "503" });
-          await recorder?.emit({
-            tool: null,
-            method: "authorize",
-            outcome: "auth_upstream_unreachable",
-            durationMs: nowMs() - startedAt
-          });
-          return { ok: false, response: oauthUpstreamUnreachableResponse() };
-        }
         if (err instanceof OAuthConfigurationError) {
           log.error("auth.config_error", { ...describeError(err), outcome: "500" });
           await recorder?.emit({
@@ -934,6 +878,14 @@ var ToolContext = class {
   }
 };
 
+// src/core/content.ts
+function extractTextContent(content) {
+  if (!content)
+    return void 0;
+  const text = content.filter((block) => block.type === "text").map((block) => block.text).join("\n").trim();
+  return text.length > 0 ? text : void 0;
+}
+
 // src/core/cors.ts
 var EXPOSE_HEADERS = "WWW-Authenticate, Mcp-Session-Id, Mcp-Protocol-Version";
 var ALLOW_HEADERS = "Authorization, Content-Type, Mcp-Session-Id, Mcp-Protocol-Version, Last-Event-ID";
@@ -984,7 +936,8 @@ function adaptToolToSdkCallback(tool, auth, recorder) {
       tool: tool.name,
       method: "tools/call",
       outcome: result.isError ? "tool_error" : "ok",
-      durationMs: nowMs() - start
+      durationMs: nowMs() - start,
+      errorText: result.isError ? extractTextContent(result.content) : void 0
     });
     return { content: result.content ?? [], structuredContent: result.structuredContent, isError: result.isError };
   };
@@ -1240,7 +1193,8 @@ function createInvokeToolHandler(mcp, options = {}) {
       tool: tool.name,
       method: "tools/call",
       outcome: result.isError ? "tool_error" : "ok",
-      durationMs: nowMs() - start
+      durationMs: nowMs() - start,
+      errorText: result.isError ? extractTextContent(result.content) : void 0
     });
     return Response.json({
       content: result.content ?? [],

package/dist/stacks/supabase/index.js

@@ -3,21 +3,22 @@ import {
 } from "../../chunk-UQK5UO6C.js";
 import {
   createMcpProtocolHandler
-} from "../../chunk-ID3YWZBR.js";
+} from "../../chunk-YQFF4OCL.js";
 import {
   createOAuthProtectedResourceMetadataHandler
-} from "../../chunk-A2GUTEAK.js";
+} from "../../chunk-PKYNTB7X.js";
 import {
   createInvokeToolHandler
-} from "../../chunk-RT2I26ZN.js";
+} from "../../chunk-YQMS7A7Z.js";
 import {
   createListToolsHandler
-} from "../../chunk-YAXKWTJK.js";
+} from "../../chunk-ICCGSB2E.js";
+import "../../chunk-6QFZYYUV.js";
 import "../../chunk-MA5H6PSF.js";
 import {
   assertResourcePathShape,
   createRecorderForRuntime
-} from "../../chunk-E7CPOJN6.js";
+} from "../../chunk-XIGO7RW6.js";
 import {
   trimTrailingSlash
 } from "../../chunk-H37EB22A.js";
@@ -28,7 +29,7 @@ import {
   FUNCTIONS_MOUNT_PREFIX,
   assertFunctionName
 } from "../../chunk-XQWJN6DC.js";
-import "../../chunk-OMEL6F6I.js";
+import "../../chunk-QWVSMQJF.js";
 
 // src/stacks/supabase/handler.ts
 function deriveResourcePath(options) {

package/dist/stacks/supabase/vite.cjs

@@ -33,7 +33,7 @@ var import_node_fs = require("fs");
 var import_node_path = require("path");
 
 // package.json
-var version = "0.20.1-rc.0";
+var version = "0.20.1-rc.1";
 
 // src/core/fs-errors.ts
 function isFileMissing(err) {

package/dist/stacks/supabase/vite.js

@@ -7,7 +7,7 @@ import {
 } from "../../chunk-XQWJN6DC.js";
 import {
   version
-} from "../../chunk-OMEL6F6I.js";
+} from "../../chunk-QWVSMQJF.js";
 
 // src/stacks/supabase/vite.ts
 import { resolve as resolve2, sep as sep2 } from "path";

package/dist/stacks/tanstack/index.cjs

@@ -129,7 +129,7 @@ function describeError(err) {
 }
 
 // package.json
-var version = "0.20.1-rc.0";
+var version = "0.20.1-rc.1";
 
 // src/metrics/otlp.ts
 var SCOPE_NAME = "@lovable.dev/mcp-js";
@@ -236,7 +236,8 @@ var BaseMetricRecorder = class {
       method: ev.method,
       outcome: ev.outcome,
       durationMs: ev.durationMs,
-      stack: this.stack
+      stack: this.stack,
+      ...ev.errorText !== void 0 && { errorText: ev.errorText }
     });
     if (!this.config.enabled)
       return;
@@ -421,18 +422,6 @@ var OAuthConfigurationError = class extends Error {
     this.name = "OAuthConfigurationError";
   }
 };
-var OAuthUpstreamUnreachableError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "OAuthUpstreamUnreachableError";
-  }
-};
-var MetadataUnreachableError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "MetadataUnreachableError";
-  }
-};
 var METADATA_FETCH_TIMEOUT_MS = 5e3;
 function issuerPath(url) {
   const path = trimTrailingSlash(url.pathname);
@@ -457,37 +446,21 @@ function oauthMetadataUrlsForIssuer(issuer) {
   return [...pathInsertedOAuthMetadataUrls(url, path), `${normalizedIssuer}/.well-known/openid-configuration`];
 }
 async function fetchFirstValidOAuthServerMetadata(metadataUrls, expectedIssuer) {
-  const controller = new AbortController();
-  const attempts = metadataUrls.map(
-    (url) => fetchOAuthServerMetadata(url, expectedIssuer, controller.signal).catch((err) => {
+  const errors = [];
+  for (const url of metadataUrls) {
+    try {
+      return await fetchOAuthServerMetadata(url, expectedIssuer);
+    } catch (err) {
       log.debug("oauth.discovery.attempt_failed", { url, ...describeError(err) });
-      throw err instanceof Error ? err : new Error(String(err));
-    })
-  );
-  try {
-    const metadata = await Promise.any(attempts);
-    controller.abort();
-    return metadata;
-  } catch (aggregate) {
-    const causes = aggregate instanceof AggregateError ? aggregate.errors : [aggregate];
-    const unreachable = causes.some((c) => c instanceof MetadataUnreachableError);
-    const detail = causes.map((c) => c instanceof Error ? c.message : String(c)).join("; ");
-    log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
-    const message = `failed to discover OAuth server metadata (${detail})`;
-    throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
+      errors.push(`${url}: ${err instanceof Error ? err.message : String(err)}`);
+    }
   }
+  log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors });
+  throw new Error(`failed to discover OAuth server metadata (${errors.join("; ")})`);
 }
-async function fetchOAuthServerMetadata(url, expectedIssuer, signal) {
+async function fetchOAuthServerMetadata(url, expectedIssuer) {
   log.debug("oauth.discovery.fetch", { url });
-  let response;
-  try {
-    response = await fetch(url, {
-      signal: AbortSignal.any([signal, AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS)]),
-      redirect: "manual"
-    });
-  } catch (err) {
-    throw new MetadataUnreachableError(err instanceof Error ? err.message : String(err));
-  }
+  const response = await fetch(url, { signal: AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS), redirect: "manual" });
   if (!response.ok) {
     throw new Error(String(response.status));
   }
@@ -510,21 +483,14 @@ async function fetchIssuerOAuthServerMetadata(issuer) {
   try {
     return await fetchFirstValidOAuthServerMetadata(oauthMetadataUrlsForIssuer(issuer), issuer);
   } catch (err) {
-    const message = `OAuth issuer discovery failed: ${err instanceof Error ? err.message : String(err)}`;
-    if (err instanceof MetadataUnreachableError) {
-      log.error("oauth.discovery.unreachable", {
-        issuer,
-        ...describeError(err),
-        outcome: "503 authorization server unreachable"
-      });
-      throw new OAuthUpstreamUnreachableError(message);
-    }
     log.error("oauth.discovery.config_error", {
       issuer,
       ...describeError(err),
       outcome: "500 oauth configuration error"
     });
-    throw new OAuthConfigurationError(message);
+    throw new OAuthConfigurationError(
+      `OAuth issuer discovery failed: ${err instanceof Error ? err.message : String(err)}`
+    );
   }
 }
 function createOAuthDiscoveryResolver(auth) {
@@ -617,14 +583,8 @@ function tokenHeaderFields(token) {
   }
 }
 async function fetchVerificationKeySet(jwksUri) {
-  let response;
-  try {
-    response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
-  } catch (err) {
-    log.error("oauth.jwks.unreachable", { ...describeError(err), outcome: "503 authorization server unreachable" });
-    throw new OAuthUpstreamUnreachableError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
-  }
   try {
+    const response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
     if (!response.ok)
       throw new Error(`JWKS endpoint returned ${response.status}`);
     const json = await response.json();
@@ -765,12 +725,6 @@ function oauthConfigurationErrorResponse() {
     headers: { ...JSON_HEADERS, "Cache-Control": "no-store" }
   });
 }
-function oauthUpstreamUnreachableResponse() {
-  return new Response(JSON.stringify({ error: "authorization server unreachable" }), {
-    status: 503,
-    headers: { ...JSON_HEADERS, "Cache-Control": "no-store", "Retry-After": "30" }
-  });
-}
 function parseBearerToken(request) {
   const header = request.headers.get("Authorization");
   if (!header)
@@ -843,16 +797,6 @@ function createRequestAuthorizer(mcp, options = {}) {
         assertRequiredScopes(runtime.auth, auth);
         return { ok: true, auth };
       } catch (err) {
-        if (err instanceof OAuthUpstreamUnreachableError) {
-          log.error("auth.upstream_unreachable", { ...describeError(err), outcome: "503" });
-          await recorder?.emit({
-            tool: null,
-            method: "authorize",
-            outcome: "auth_upstream_unreachable",
-            durationMs: nowMs() - startedAt
-          });
-          return { ok: false, response: oauthUpstreamUnreachableResponse() };
-        }
         if (err instanceof OAuthConfigurationError) {
           log.error("auth.config_error", { ...describeError(err), outcome: "500" });
           await recorder?.emit({
@@ -937,6 +881,14 @@ var ToolContext = class {
   }
 };
 
+// src/core/content.ts
+function extractTextContent(content) {
+  if (!content)
+    return void 0;
+  const text = content.filter((block) => block.type === "text").map((block) => block.text).join("\n").trim();
+  return text.length > 0 ? text : void 0;
+}
+
 // src/core/cors.ts
 var EXPOSE_HEADERS = "WWW-Authenticate, Mcp-Session-Id, Mcp-Protocol-Version";
 var ALLOW_HEADERS = "Authorization, Content-Type, Mcp-Session-Id, Mcp-Protocol-Version, Last-Event-ID";
@@ -987,7 +939,8 @@ function adaptToolToSdkCallback(tool, auth, recorder) {
       tool: tool.name,
       method: "tools/call",
       outcome: result.isError ? "tool_error" : "ok",
-      durationMs: nowMs() - start
+      durationMs: nowMs() - start,
+      errorText: result.isError ? extractTextContent(result.content) : void 0
     });
     return { content: result.content ?? [], structuredContent: result.structuredContent, isError: result.isError };
   };
@@ -1243,7 +1196,8 @@ function createInvokeToolHandler(mcp, options = {}) {
       tool: tool.name,
       method: "tools/call",
       outcome: result.isError ? "tool_error" : "ok",
-      durationMs: nowMs() - start
+      durationMs: nowMs() - start,
+      errorText: result.isError ? extractTextContent(result.content) : void 0
     });
     return Response.json({
       content: result.content ?? [],

package/dist/stacks/tanstack/index.js

@@ -3,23 +3,24 @@ import {
 } from "../../chunk-UQK5UO6C.js";
 import {
   createMcpProtocolHandler
-} from "../../chunk-ID3YWZBR.js";
+} from "../../chunk-YQFF4OCL.js";
 import {
   createOAuthProtectedResourceMetadataHandler
-} from "../../chunk-A2GUTEAK.js";
+} from "../../chunk-PKYNTB7X.js";
 import {
   createInvokeToolHandler
-} from "../../chunk-RT2I26ZN.js";
+} from "../../chunk-YQMS7A7Z.js";
 import {
   createListToolsHandler
-} from "../../chunk-YAXKWTJK.js";
+} from "../../chunk-ICCGSB2E.js";
+import "../../chunk-6QFZYYUV.js";
 import "../../chunk-MA5H6PSF.js";
 import {
   createRecorderForRuntime
-} from "../../chunk-E7CPOJN6.js";
+} from "../../chunk-XIGO7RW6.js";
 import "../../chunk-H37EB22A.js";
 import "../../chunk-6DXGZZA4.js";
-import "../../chunk-OMEL6F6I.js";
+import "../../chunk-QWVSMQJF.js";
 
 // src/stacks/tanstack/handlers.ts
 var STACK = "tanstack";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovable.dev/mcp-js",
-  "version": "0.20.1-rc.0",
+  "version": "0.20.1-rc.1",
   "description": "Author MCP servers for Lovable apps. Declare tools with defineTool, register them in defineMcp, and a framework adapter (TanStack or Supabase Edge Functions) emits the route(s) at build time.",
   "type": "module",
   "repository": {