@lovable.dev/mcp-js 0.21.0-rc.0 → 0.21.0-rc.2

package/dist/{base-RSqYamjy.d.ts → base-DTtaX5Rf.d.ts}

@@ -1,4 +1,4 @@
-type InvocationOutcome = "ok" | "tool_error" | "handler_error" | "transport_error" | "auth_config_error" | "auth_upstream_unreachable";
+type InvocationOutcome = "ok" | "tool_error" | "handler_error" | "transport_error" | "auth_discovery_config_error" | "auth_discovery_unreachable" | "auth_jwks_config_error" | "auth_jwks_unreachable";
 /** One recorded MCP call. Carries no arguments or response payloads — only the
  *  tool name, the JSON-RPC method, the result class, timing, and byte sizes. */
 interface InvocationRecord {

package/dist/{chunk-2LLCWLQL.js → chunk-4H3Y2KYT.js}

@@ -7,7 +7,7 @@ import {
   createRequestAuthorizer,
   nowMs,
   withCors
-} from "./chunk-VTIP6LMI.js";
+} from "./chunk-IRCVDFWG.js";
 import {
   describeError,
   log

package/dist/{chunk-NQZGVZ24.js → chunk-7TVARTF4.js}

@@ -7,7 +7,7 @@ import {
   oauthConfigurationErrorResponse,
   resolveProtectedResource,
   withCors
-} from "./chunk-VTIP6LMI.js";
+} from "./chunk-IRCVDFWG.js";
 import {
   describeError,
   log

package/dist/{chunk-VTIP6LMI.js → chunk-IRCVDFWG.js}

@@ -13,7 +13,7 @@ import {
 } from "./chunk-6DXGZZA4.js";
 import {
   version
-} from "./chunk-XOCASA3L.js";
+} from "./chunk-OIRVEGPQ.js";
 
 // src/core/http.ts
 var JSON_HEADERS = { "Content-Type": "application/json" };
@@ -284,14 +284,16 @@ function cachedPromise(load, label) {
 
 // src/auth/discovery.ts
 var OAuthConfigurationError = class extends Error {
-  constructor(message) {
+  constructor(message, stage) {
     super(message);
+    this.stage = stage;
     this.name = "OAuthConfigurationError";
   }
 };
 var OAuthUpstreamUnreachableError = class extends Error {
-  constructor(message) {
+  constructor(message, stage) {
     super(message);
+    this.stage = stage;
     this.name = "OAuthUpstreamUnreachableError";
   }
 };
@@ -325,32 +327,28 @@ function oauthMetadataUrlsForIssuer(issuer) {
   return [...pathInsertedOAuthMetadataUrls(url, path), `${normalizedIssuer}/.well-known/openid-configuration`];
 }
 async function fetchFirstValidOAuthServerMetadata(metadataUrls, expectedIssuer) {
-  const controller = new AbortController();
-  const attempts = metadataUrls.map(
-    (url) => fetchOAuthServerMetadata(url, expectedIssuer, controller.signal).catch((err) => {
-      log.debug("oauth.discovery.attempt_failed", { url, ...describeError(err) });
-      throw err instanceof Error ? err : new Error(String(err));
-    })
-  );
-  try {
-    const metadata = await Promise.any(attempts);
-    controller.abort();
-    return metadata;
-  } catch (aggregate) {
-    const causes = aggregate instanceof AggregateError ? aggregate.errors : [aggregate];
-    const unreachable = causes.some((c) => c instanceof MetadataUnreachableError);
-    const detail = causes.map((c) => c instanceof Error ? c.message : String(c)).join("; ");
-    log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
-    const message = `failed to discover OAuth server metadata (${detail})`;
-    throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
-  }
-}
-async function fetchOAuthServerMetadata(url, expectedIssuer, signal) {
+  const errors = [];
+  for (const url of metadataUrls) {
+    try {
+      return await fetchOAuthServerMetadata(url, expectedIssuer);
+    } catch (err) {
+      const error = err instanceof Error ? err : new Error(String(err));
+      log.debug("oauth.discovery.attempt_failed", { url, ...describeError(error) });
+      errors.push(error);
+    }
+  }
+  const unreachable = errors.some((e) => e instanceof MetadataUnreachableError);
+  const detail = errors.map((e) => e.message).join("; ");
+  log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
+  const message = `failed to discover OAuth server metadata (${detail})`;
+  throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
+}
+async function fetchOAuthServerMetadata(url, expectedIssuer) {
   log.debug("oauth.discovery.fetch", { url });
   let response;
   try {
     response = await fetch(url, {
-      signal: AbortSignal.any([signal, AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS)]),
+      signal: AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS),
       redirect: "manual"
     });
   } catch (err) {
@@ -385,14 +383,14 @@ async function fetchIssuerOAuthServerMetadata(issuer) {
         ...describeError(err),
         outcome: "503 authorization server unreachable"
       });
-      throw new OAuthUpstreamUnreachableError(message);
+      throw new OAuthUpstreamUnreachableError(message, "discovery");
     }
     log.error("oauth.discovery.config_error", {
       issuer,
       ...describeError(err),
       outcome: "500 oauth configuration error"
     });
-    throw new OAuthConfigurationError(message);
+    throw new OAuthConfigurationError(message, "discovery");
   }
 }
 function createOAuthDiscoveryResolver(auth) {
@@ -463,7 +461,10 @@ async function fetchVerificationKeySet(jwksUri) {
     response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
   } catch (err) {
     log.error("oauth.jwks.unreachable", { ...describeError(err), outcome: "503 authorization server unreachable" });
-    throw new OAuthUpstreamUnreachableError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
+    throw new OAuthUpstreamUnreachableError(
+      `JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`,
+      "jwks"
+    );
   }
   try {
     if (!response.ok)
@@ -472,7 +473,7 @@ async function fetchVerificationKeySet(jwksUri) {
     return createLocalJWKSet(json);
   } catch (err) {
     log.error("oauth.jwks.fetch_failed", { ...describeError(err), outcome: "500 oauth configuration error" });
-    throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
+    throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`, "jwks");
   }
 }
 function assertAccessTokenTyp(token, allowed) {
@@ -685,21 +686,21 @@ function createRequestAuthorizer(mcp, options = {}) {
         return { ok: true, auth };
       } catch (err) {
         if (err instanceof OAuthUpstreamUnreachableError) {
-          log.error("auth.upstream_unreachable", { ...describeError(err), outcome: "503" });
+          log.error("auth.upstream_unreachable", { ...describeError(err), stage: err.stage, outcome: "503" });
           await recorder?.emit({
             tool: null,
             method: "authorize",
-            outcome: "auth_upstream_unreachable",
+            outcome: err.stage === "jwks" ? "auth_jwks_unreachable" : "auth_discovery_unreachable",
             durationMs: nowMs() - startedAt
           });
           return { ok: false, response: oauthUpstreamUnreachableResponse() };
         }
         if (err instanceof OAuthConfigurationError) {
-          log.error("auth.config_error", { ...describeError(err), outcome: "500" });
+          log.error("auth.config_error", { ...describeError(err), stage: err.stage, outcome: "500" });
           await recorder?.emit({
             tool: null,
             method: "authorize",
-            outcome: "auth_config_error",
+            outcome: err.stage === "jwks" ? "auth_jwks_config_error" : "auth_discovery_config_error",
             durationMs: nowMs() - startedAt
           });
           return { ok: false, response: oauthConfigurationErrorResponse() };

package/dist/{chunk-XOCASA3L.js → chunk-OIRVEGPQ.js}

@@ -1,5 +1,5 @@
 // package.json
-var version = "0.21.0-rc.0";
+var version = "0.21.0-rc.2";
 
 export {
   version

package/dist/{chunk-M2TRF6OJ.js → chunk-WOKM6B6H.js}

@@ -10,7 +10,7 @@ import {
   methodNotAllowed,
   nowMs,
   withCors
-} from "./chunk-VTIP6LMI.js";
+} from "./chunk-IRCVDFWG.js";
 
 // src/protocols/rest/invoke-tool.ts
 import { getParseErrorMessage, objectFromShape, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";

package/dist/{chunk-KYKL5ECH.js → chunk-YE6N7XLA.js}

@@ -6,7 +6,7 @@ import {
   headResponse,
   methodNotAllowed,
   withCors
-} from "./chunk-VTIP6LMI.js";
+} from "./chunk-IRCVDFWG.js";
 
 // src/protocols/rest/list-tools.ts
 import { objectFromShape } from "@modelcontextprotocol/sdk/server/zod-compat.js";

package/dist/cli/extract-manifest.cjs

@@ -13,7 +13,7 @@ function isFileMissing(err) {
 }
 
 // package.json
-var version = "0.21.0-rc.0";
+var version = "0.21.0-rc.2";
 
 // src/protocols/rest/list-tools.ts
 var import_zod_compat = require("@modelcontextprotocol/sdk/server/zod-compat.js");

package/dist/cli/extract-manifest.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   buildMcpListing
-} from "../chunk-KYKL5ECH.js";
-import "../chunk-VTIP6LMI.js";
+} from "../chunk-YE6N7XLA.js";
+import "../chunk-IRCVDFWG.js";
 import "../chunk-H37EB22A.js";
 import "../chunk-6DXGZZA4.js";
 import {
@@ -10,7 +10,7 @@ import {
 } from "../chunk-Y3ZFPEQH.js";
 import {
   version
-} from "../chunk-XOCASA3L.js";
+} from "../chunk-OIRVEGPQ.js";
 
 // src/manifest/io.ts
 import { randomUUID } from "crypto";

package/dist/protocols/mcp/index.cjs

@@ -148,14 +148,16 @@ function parseSafeUrl(subject, raw, ErrorClass = Error) {
 
 // src/auth/discovery.ts
 var OAuthConfigurationError = class extends Error {
-  constructor(message) {
+  constructor(message, stage) {
     super(message);
+    this.stage = stage;
     this.name = "OAuthConfigurationError";
   }
 };
 var OAuthUpstreamUnreachableError = class extends Error {
-  constructor(message) {
+  constructor(message, stage) {
     super(message);
+    this.stage = stage;
     this.name = "OAuthUpstreamUnreachableError";
   }
 };
@@ -189,32 +191,28 @@ function oauthMetadataUrlsForIssuer(issuer) {
   return [...pathInsertedOAuthMetadataUrls(url, path), `${normalizedIssuer}/.well-known/openid-configuration`];
 }
 async function fetchFirstValidOAuthServerMetadata(metadataUrls, expectedIssuer) {
-  const controller = new AbortController();
-  const attempts = metadataUrls.map(
-    (url) => fetchOAuthServerMetadata(url, expectedIssuer, controller.signal).catch((err) => {
-      log.debug("oauth.discovery.attempt_failed", { url, ...describeError(err) });
-      throw err instanceof Error ? err : new Error(String(err));
-    })
-  );
-  try {
-    const metadata = await Promise.any(attempts);
-    controller.abort();
-    return metadata;
-  } catch (aggregate) {
-    const causes = aggregate instanceof AggregateError ? aggregate.errors : [aggregate];
-    const unreachable = causes.some((c) => c instanceof MetadataUnreachableError);
-    const detail = causes.map((c) => c instanceof Error ? c.message : String(c)).join("; ");
-    log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
-    const message = `failed to discover OAuth server metadata (${detail})`;
-    throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
-  }
-}
-async function fetchOAuthServerMetadata(url, expectedIssuer, signal) {
+  const errors = [];
+  for (const url of metadataUrls) {
+    try {
+      return await fetchOAuthServerMetadata(url, expectedIssuer);
+    } catch (err) {
+      const error = err instanceof Error ? err : new Error(String(err));
+      log.debug("oauth.discovery.attempt_failed", { url, ...describeError(error) });
+      errors.push(error);
+    }
+  }
+  const unreachable = errors.some((e) => e instanceof MetadataUnreachableError);
+  const detail = errors.map((e) => e.message).join("; ");
+  log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
+  const message = `failed to discover OAuth server metadata (${detail})`;
+  throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
+}
+async function fetchOAuthServerMetadata(url, expectedIssuer) {
   log.debug("oauth.discovery.fetch", { url });
   let response;
   try {
     response = await fetch(url, {
-      signal: AbortSignal.any([signal, AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS)]),
+      signal: AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS),
       redirect: "manual"
     });
   } catch (err) {
@@ -249,14 +247,14 @@ async function fetchIssuerOAuthServerMetadata(issuer) {
         ...describeError(err),
         outcome: "503 authorization server unreachable"
       });
-      throw new OAuthUpstreamUnreachableError(message);
+      throw new OAuthUpstreamUnreachableError(message, "discovery");
     }
     log.error("oauth.discovery.config_error", {
       issuer,
       ...describeError(err),
       outcome: "500 oauth configuration error"
     });
-    throw new OAuthConfigurationError(message);
+    throw new OAuthConfigurationError(message, "discovery");
   }
 }
 function createOAuthDiscoveryResolver(auth) {
@@ -354,7 +352,10 @@ async function fetchVerificationKeySet(jwksUri) {
     response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
   } catch (err) {
     log.error("oauth.jwks.unreachable", { ...describeError(err), outcome: "503 authorization server unreachable" });
-    throw new OAuthUpstreamUnreachableError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
+    throw new OAuthUpstreamUnreachableError(
+      `JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`,
+      "jwks"
+    );
   }
   try {
     if (!response.ok)
@@ -363,7 +364,7 @@ async function fetchVerificationKeySet(jwksUri) {
     return (0, import_jose.createLocalJWKSet)(json);
   } catch (err) {
     log.error("oauth.jwks.fetch_failed", { ...describeError(err), outcome: "500 oauth configuration error" });
-    throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
+    throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`, "jwks");
   }
 }
 function assertAccessTokenTyp(token, allowed) {
@@ -568,21 +569,21 @@ function createRequestAuthorizer(mcp, options = {}) {
         return { ok: true, auth };
       } catch (err) {
         if (err instanceof OAuthUpstreamUnreachableError) {
-          log.error("auth.upstream_unreachable", { ...describeError(err), outcome: "503" });
+          log.error("auth.upstream_unreachable", { ...describeError(err), stage: err.stage, outcome: "503" });
           await recorder?.emit({
             tool: null,
             method: "authorize",
-            outcome: "auth_upstream_unreachable",
+            outcome: err.stage === "jwks" ? "auth_jwks_unreachable" : "auth_discovery_unreachable",
             durationMs: nowMs() - startedAt
           });
           return { ok: false, response: oauthUpstreamUnreachableResponse() };
         }
         if (err instanceof OAuthConfigurationError) {
-          log.error("auth.config_error", { ...describeError(err), outcome: "500" });
+          log.error("auth.config_error", { ...describeError(err), stage: err.stage, outcome: "500" });
           await recorder?.emit({
             tool: null,
             method: "authorize",
-            outcome: "auth_config_error",
+            outcome: err.stage === "jwks" ? "auth_jwks_config_error" : "auth_discovery_config_error",
             durationMs: nowMs() - startedAt
           });
           return { ok: false, response: oauthConfigurationErrorResponse() };

package/dist/protocols/mcp/index.d.cts

@@ -1,6 +1,6 @@
 import { M as McpRuntimeOptions } from '../../authorize-BMeXd_Sh.js';
 import { d as McpDefinition } from '../../types-CPkhCRxc.js';
-import { M as MetricsRecorder } from '../../base-RSqYamjy.js';
+import { M as MetricsRecorder } from '../../base-DTtaX5Rf.js';
 import 'zod';
 
 type McpProtocolHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;

package/dist/protocols/mcp/index.d.ts

@@ -1,6 +1,6 @@
 import { M as McpRuntimeOptions } from '../../authorize-BMeXd_Sh.js';
 import { d as McpDefinition } from '../../types-CPkhCRxc.js';
-import { M as MetricsRecorder } from '../../base-RSqYamjy.js';
+import { M as MetricsRecorder } from '../../base-DTtaX5Rf.js';
 import 'zod';
 
 type McpProtocolHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;

package/dist/protocols/mcp/index.js

@@ -1,11 +1,11 @@
 import {
   createMcpProtocolHandler
-} from "../../chunk-2LLCWLQL.js";
+} from "../../chunk-4H3Y2KYT.js";
 import "../../chunk-MA5H6PSF.js";
-import "../../chunk-VTIP6LMI.js";
+import "../../chunk-IRCVDFWG.js";
 import "../../chunk-H37EB22A.js";
 import "../../chunk-6DXGZZA4.js";
-import "../../chunk-XOCASA3L.js";
+import "../../chunk-OIRVEGPQ.js";
 export {
   createMcpProtocolHandler
 };

package/dist/protocols/oauth-metadata.cjs

@@ -143,14 +143,16 @@ function parseSafeUrl(subject, raw, ErrorClass = Error) {
 
 // src/auth/discovery.ts
 var OAuthConfigurationError = class extends Error {
-  constructor(message) {
+  constructor(message, stage) {
     super(message);
+    this.stage = stage;
     this.name = "OAuthConfigurationError";
   }
 };
 var OAuthUpstreamUnreachableError = class extends Error {
-  constructor(message) {
+  constructor(message, stage) {
     super(message);
+    this.stage = stage;
     this.name = "OAuthUpstreamUnreachableError";
   }
 };
@@ -184,32 +186,28 @@ function oauthMetadataUrlsForIssuer(issuer) {
   return [...pathInsertedOAuthMetadataUrls(url, path), `${normalizedIssuer}/.well-known/openid-configuration`];
 }
 async function fetchFirstValidOAuthServerMetadata(metadataUrls, expectedIssuer) {
-  const controller = new AbortController();
-  const attempts = metadataUrls.map(
-    (url) => fetchOAuthServerMetadata(url, expectedIssuer, controller.signal).catch((err) => {
-      log.debug("oauth.discovery.attempt_failed", { url, ...describeError(err) });
-      throw err instanceof Error ? err : new Error(String(err));
-    })
-  );
-  try {
-    const metadata = await Promise.any(attempts);
-    controller.abort();
-    return metadata;
-  } catch (aggregate) {
-    const causes = aggregate instanceof AggregateError ? aggregate.errors : [aggregate];
-    const unreachable = causes.some((c) => c instanceof MetadataUnreachableError);
-    const detail = causes.map((c) => c instanceof Error ? c.message : String(c)).join("; ");
-    log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
-    const message = `failed to discover OAuth server metadata (${detail})`;
-    throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
+  const errors = [];
+  for (const url of metadataUrls) {
+    try {
+      return await fetchOAuthServerMetadata(url, expectedIssuer);
+    } catch (err) {
+      const error = err instanceof Error ? err : new Error(String(err));
+      log.debug("oauth.discovery.attempt_failed", { url, ...describeError(error) });
+      errors.push(error);
+    }
   }
+  const unreachable = errors.some((e) => e instanceof MetadataUnreachableError);
+  const detail = errors.map((e) => e.message).join("; ");
+  log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
+  const message = `failed to discover OAuth server metadata (${detail})`;
+  throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
 }
-async function fetchOAuthServerMetadata(url, expectedIssuer, signal) {
+async function fetchOAuthServerMetadata(url, expectedIssuer) {
   log.debug("oauth.discovery.fetch", { url });
   let response;
   try {
     response = await fetch(url, {
-      signal: AbortSignal.any([signal, AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS)]),
+      signal: AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS),
       redirect: "manual"
     });
   } catch (err) {
@@ -244,14 +242,14 @@ async function fetchIssuerOAuthServerMetadata(issuer) {
         ...describeError(err),
         outcome: "503 authorization server unreachable"
       });
-      throw new OAuthUpstreamUnreachableError(message);
+      throw new OAuthUpstreamUnreachableError(message, "discovery");
     }
     log.error("oauth.discovery.config_error", {
       issuer,
       ...describeError(err),
       outcome: "500 oauth configuration error"
     });
-    throw new OAuthConfigurationError(message);
+    throw new OAuthConfigurationError(message, "discovery");
   }
 }
 function createOAuthDiscoveryResolver(auth) {
@@ -346,7 +344,10 @@ async function fetchVerificationKeySet(jwksUri) {
     response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
   } catch (err) {
     log.error("oauth.jwks.unreachable", { ...describeError(err), outcome: "503 authorization server unreachable" });
-    throw new OAuthUpstreamUnreachableError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
+    throw new OAuthUpstreamUnreachableError(
+      `JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`,
+      "jwks"
+    );
   }
   try {
     if (!response.ok)
@@ -355,7 +356,7 @@ async function fetchVerificationKeySet(jwksUri) {
     return (0, import_jose.createLocalJWKSet)(json);
   } catch (err) {
     log.error("oauth.jwks.fetch_failed", { ...describeError(err), outcome: "500 oauth configuration error" });
-    throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
+    throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`, "jwks");
   }
 }
 function assertAccessTokenTyp(token, allowed) {

package/dist/protocols/oauth-metadata.js

@@ -1,10 +1,10 @@
 import {
   createOAuthProtectedResourceMetadataHandler
-} from "../chunk-NQZGVZ24.js";
-import "../chunk-VTIP6LMI.js";
+} from "../chunk-7TVARTF4.js";
+import "../chunk-IRCVDFWG.js";
 import "../chunk-H37EB22A.js";
 import "../chunk-6DXGZZA4.js";
-import "../chunk-XOCASA3L.js";
+import "../chunk-OIRVEGPQ.js";
 export {
   createOAuthProtectedResourceMetadataHandler
 };

package/dist/protocols/rest/index.cjs

@@ -158,14 +158,16 @@ function parseSafeUrl(subject, raw, ErrorClass = Error) {
 
 // src/auth/discovery.ts
 var OAuthConfigurationError = class extends Error {
-  constructor(message) {
+  constructor(message, stage) {
     super(message);
+    this.stage = stage;
     this.name = "OAuthConfigurationError";
   }
 };
 var OAuthUpstreamUnreachableError = class extends Error {
-  constructor(message) {
+  constructor(message, stage) {
     super(message);
+    this.stage = stage;
     this.name = "OAuthUpstreamUnreachableError";
   }
 };
@@ -199,32 +201,28 @@ function oauthMetadataUrlsForIssuer(issuer) {
   return [...pathInsertedOAuthMetadataUrls(url, path), `${normalizedIssuer}/.well-known/openid-configuration`];
 }
 async function fetchFirstValidOAuthServerMetadata(metadataUrls, expectedIssuer) {
-  const controller = new AbortController();
-  const attempts = metadataUrls.map(
-    (url) => fetchOAuthServerMetadata(url, expectedIssuer, controller.signal).catch((err) => {
-      log.debug("oauth.discovery.attempt_failed", { url, ...describeError(err) });
-      throw err instanceof Error ? err : new Error(String(err));
-    })
-  );
-  try {
-    const metadata = await Promise.any(attempts);
-    controller.abort();
-    return metadata;
-  } catch (aggregate) {
-    const causes = aggregate instanceof AggregateError ? aggregate.errors : [aggregate];
-    const unreachable = causes.some((c) => c instanceof MetadataUnreachableError);
-    const detail = causes.map((c) => c instanceof Error ? c.message : String(c)).join("; ");
-    log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
-    const message = `failed to discover OAuth server metadata (${detail})`;
-    throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
-  }
-}
-async function fetchOAuthServerMetadata(url, expectedIssuer, signal) {
+  const errors = [];
+  for (const url of metadataUrls) {
+    try {
+      return await fetchOAuthServerMetadata(url, expectedIssuer);
+    } catch (err) {
+      const error = err instanceof Error ? err : new Error(String(err));
+      log.debug("oauth.discovery.attempt_failed", { url, ...describeError(error) });
+      errors.push(error);
+    }
+  }
+  const unreachable = errors.some((e) => e instanceof MetadataUnreachableError);
+  const detail = errors.map((e) => e.message).join("; ");
+  log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
+  const message = `failed to discover OAuth server metadata (${detail})`;
+  throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
+}
+async function fetchOAuthServerMetadata(url, expectedIssuer) {
   log.debug("oauth.discovery.fetch", { url });
   let response;
   try {
     response = await fetch(url, {
-      signal: AbortSignal.any([signal, AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS)]),
+      signal: AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS),
       redirect: "manual"
     });
   } catch (err) {
@@ -259,14 +257,14 @@ async function fetchIssuerOAuthServerMetadata(issuer) {
         ...describeError(err),
         outcome: "503 authorization server unreachable"
       });
-      throw new OAuthUpstreamUnreachableError(message);
+      throw new OAuthUpstreamUnreachableError(message, "discovery");
     }
     log.error("oauth.discovery.config_error", {
       issuer,
       ...describeError(err),
       outcome: "500 oauth configuration error"
     });
-    throw new OAuthConfigurationError(message);
+    throw new OAuthConfigurationError(message, "discovery");
   }
 }
 function createOAuthDiscoveryResolver(auth) {
@@ -364,7 +362,10 @@ async function fetchVerificationKeySet(jwksUri) {
     response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
   } catch (err) {
     log.error("oauth.jwks.unreachable", { ...describeError(err), outcome: "503 authorization server unreachable" });
-    throw new OAuthUpstreamUnreachableError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
+    throw new OAuthUpstreamUnreachableError(
+      `JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`,
+      "jwks"
+    );
   }
   try {
     if (!response.ok)
@@ -373,7 +374,7 @@ async function fetchVerificationKeySet(jwksUri) {
     return (0, import_jose.createLocalJWKSet)(json);
   } catch (err) {
     log.error("oauth.jwks.fetch_failed", { ...describeError(err), outcome: "500 oauth configuration error" });
-    throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
+    throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`, "jwks");
   }
 }
 function assertAccessTokenTyp(token, allowed) {
@@ -586,21 +587,21 @@ function createRequestAuthorizer(mcp, options = {}) {
         return { ok: true, auth };
       } catch (err) {
         if (err instanceof OAuthUpstreamUnreachableError) {
-          log.error("auth.upstream_unreachable", { ...describeError(err), outcome: "503" });
+          log.error("auth.upstream_unreachable", { ...describeError(err), stage: err.stage, outcome: "503" });
           await recorder?.emit({
             tool: null,
             method: "authorize",
-            outcome: "auth_upstream_unreachable",
+            outcome: err.stage === "jwks" ? "auth_jwks_unreachable" : "auth_discovery_unreachable",
             durationMs: nowMs() - startedAt
           });
           return { ok: false, response: oauthUpstreamUnreachableResponse() };
         }
         if (err instanceof OAuthConfigurationError) {
-          log.error("auth.config_error", { ...describeError(err), outcome: "500" });
+          log.error("auth.config_error", { ...describeError(err), stage: err.stage, outcome: "500" });
           await recorder?.emit({
             tool: null,
             method: "authorize",
-            outcome: "auth_config_error",
+            outcome: err.stage === "jwks" ? "auth_jwks_config_error" : "auth_discovery_config_error",
             durationMs: nowMs() - startedAt
           });
           return { ok: false, response: oauthConfigurationErrorResponse() };

package/dist/protocols/rest/index.d.cts

@@ -1,6 +1,6 @@
 import { M as McpRuntimeOptions } from '../../authorize-BMeXd_Sh.js';
 import { d as McpDefinition } from '../../types-CPkhCRxc.js';
-import { M as MetricsRecorder } from '../../base-RSqYamjy.js';
+import { M as MetricsRecorder } from '../../base-DTtaX5Rf.js';
 import 'zod';
 
 type RestListToolsHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;

package/dist/protocols/rest/index.d.ts

@@ -1,6 +1,6 @@
 import { M as McpRuntimeOptions } from '../../authorize-BMeXd_Sh.js';
 import { d as McpDefinition } from '../../types-CPkhCRxc.js';
-import { M as MetricsRecorder } from '../../base-RSqYamjy.js';
+import { M as MetricsRecorder } from '../../base-DTtaX5Rf.js';
 import 'zod';
 
 type RestListToolsHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;

package/dist/protocols/rest/index.js

@@ -1,14 +1,14 @@
 import {
   createInvokeToolHandler
-} from "../../chunk-M2TRF6OJ.js";
+} from "../../chunk-WOKM6B6H.js";
 import {
   createListToolsHandler
-} from "../../chunk-KYKL5ECH.js";
+} from "../../chunk-YE6N7XLA.js";
 import "../../chunk-MA5H6PSF.js";
-import "../../chunk-VTIP6LMI.js";
+import "../../chunk-IRCVDFWG.js";
 import "../../chunk-H37EB22A.js";
 import "../../chunk-6DXGZZA4.js";
-import "../../chunk-XOCASA3L.js";
+import "../../chunk-OIRVEGPQ.js";
 export {
   createInvokeToolHandler,
   createListToolsHandler

package/dist/stacks/supabase/index.cjs

@@ -174,7 +174,7 @@ function describeError(err) {
 }
 
 // package.json
-var version = "0.21.0-rc.0";
+var version = "0.21.0-rc.2";
 
 // src/metrics/otlp.ts
 var SCOPE_NAME = "@lovable.dev/mcp-js";
@@ -440,14 +440,16 @@ function parseSafeUrl(subject, raw, ErrorClass = Error) {
 
 // src/auth/discovery.ts
 var OAuthConfigurationError = class extends Error {
-  constructor(message) {
+  constructor(message, stage) {
     super(message);
+    this.stage = stage;
     this.name = "OAuthConfigurationError";
   }
 };
 var OAuthUpstreamUnreachableError = class extends Error {
-  constructor(message) {
+  constructor(message, stage) {
     super(message);
+    this.stage = stage;
     this.name = "OAuthUpstreamUnreachableError";
   }
 };
@@ -481,32 +483,28 @@ function oauthMetadataUrlsForIssuer(issuer) {
   return [...pathInsertedOAuthMetadataUrls(url, path), `${normalizedIssuer}/.well-known/openid-configuration`];
 }
 async function fetchFirstValidOAuthServerMetadata(metadataUrls, expectedIssuer) {
-  const controller = new AbortController();
-  const attempts = metadataUrls.map(
-    (url) => fetchOAuthServerMetadata(url, expectedIssuer, controller.signal).catch((err) => {
-      log.debug("oauth.discovery.attempt_failed", { url, ...describeError(err) });
-      throw err instanceof Error ? err : new Error(String(err));
-    })
-  );
-  try {
-    const metadata = await Promise.any(attempts);
-    controller.abort();
-    return metadata;
-  } catch (aggregate) {
-    const causes = aggregate instanceof AggregateError ? aggregate.errors : [aggregate];
-    const unreachable = causes.some((c) => c instanceof MetadataUnreachableError);
-    const detail = causes.map((c) => c instanceof Error ? c.message : String(c)).join("; ");
-    log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
-    const message = `failed to discover OAuth server metadata (${detail})`;
-    throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
+  const errors = [];
+  for (const url of metadataUrls) {
+    try {
+      return await fetchOAuthServerMetadata(url, expectedIssuer);
+    } catch (err) {
+      const error = err instanceof Error ? err : new Error(String(err));
+      log.debug("oauth.discovery.attempt_failed", { url, ...describeError(error) });
+      errors.push(error);
+    }
   }
+  const unreachable = errors.some((e) => e instanceof MetadataUnreachableError);
+  const detail = errors.map((e) => e.message).join("; ");
+  log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
+  const message = `failed to discover OAuth server metadata (${detail})`;
+  throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
 }
-async function fetchOAuthServerMetadata(url, expectedIssuer, signal) {
+async function fetchOAuthServerMetadata(url, expectedIssuer) {
   log.debug("oauth.discovery.fetch", { url });
   let response;
   try {
     response = await fetch(url, {
-      signal: AbortSignal.any([signal, AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS)]),
+      signal: AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS),
       redirect: "manual"
     });
   } catch (err) {
@@ -541,14 +539,14 @@ async function fetchIssuerOAuthServerMetadata(issuer) {
         ...describeError(err),
         outcome: "503 authorization server unreachable"
       });
-      throw new OAuthUpstreamUnreachableError(message);
+      throw new OAuthUpstreamUnreachableError(message, "discovery");
     }
     log.error("oauth.discovery.config_error", {
       issuer,
       ...describeError(err),
       outcome: "500 oauth configuration error"
     });
-    throw new OAuthConfigurationError(message);
+    throw new OAuthConfigurationError(message, "discovery");
   }
 }
 function createOAuthDiscoveryResolver(auth) {
@@ -619,7 +617,10 @@ async function fetchVerificationKeySet(jwksUri) {
     response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
   } catch (err) {
     log.error("oauth.jwks.unreachable", { ...describeError(err), outcome: "503 authorization server unreachable" });
-    throw new OAuthUpstreamUnreachableError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
+    throw new OAuthUpstreamUnreachableError(
+      `JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`,
+      "jwks"
+    );
   }
   try {
     if (!response.ok)
@@ -628,7 +629,7 @@ async function fetchVerificationKeySet(jwksUri) {
     return (0, import_jose.createLocalJWKSet)(json);
   } catch (err) {
     log.error("oauth.jwks.fetch_failed", { ...describeError(err), outcome: "500 oauth configuration error" });
-    throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
+    throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`, "jwks");
   }
 }
 function assertAccessTokenTyp(token, allowed) {
@@ -841,21 +842,21 @@ function createRequestAuthorizer(mcp, options = {}) {
         return { ok: true, auth };
       } catch (err) {
         if (err instanceof OAuthUpstreamUnreachableError) {
-          log.error("auth.upstream_unreachable", { ...describeError(err), outcome: "503" });
+          log.error("auth.upstream_unreachable", { ...describeError(err), stage: err.stage, outcome: "503" });
           await recorder?.emit({
             tool: null,
             method: "authorize",
-            outcome: "auth_upstream_unreachable",
+            outcome: err.stage === "jwks" ? "auth_jwks_unreachable" : "auth_discovery_unreachable",
             durationMs: nowMs() - startedAt
           });
           return { ok: false, response: oauthUpstreamUnreachableResponse() };
         }
         if (err instanceof OAuthConfigurationError) {
-          log.error("auth.config_error", { ...describeError(err), outcome: "500" });
+          log.error("auth.config_error", { ...describeError(err), stage: err.stage, outcome: "500" });
           await recorder?.emit({
             tool: null,
             method: "authorize",
-            outcome: "auth_config_error",
+            outcome: err.stage === "jwks" ? "auth_jwks_config_error" : "auth_discovery_config_error",
             durationMs: nowMs() - startedAt
           });
           return { ok: false, response: oauthConfigurationErrorResponse() };

package/dist/stacks/supabase/index.js

@@ -3,21 +3,21 @@ import {
 } from "../../chunk-UQK5UO6C.js";
 import {
   createMcpProtocolHandler
-} from "../../chunk-2LLCWLQL.js";
+} from "../../chunk-4H3Y2KYT.js";
 import {
   createOAuthProtectedResourceMetadataHandler
-} from "../../chunk-NQZGVZ24.js";
+} from "../../chunk-7TVARTF4.js";
 import {
   createInvokeToolHandler
-} from "../../chunk-M2TRF6OJ.js";
+} from "../../chunk-WOKM6B6H.js";
 import {
   createListToolsHandler
-} from "../../chunk-KYKL5ECH.js";
+} from "../../chunk-YE6N7XLA.js";
 import "../../chunk-MA5H6PSF.js";
 import {
   assertResourcePathShape,
   createRecorderForRuntime
-} from "../../chunk-VTIP6LMI.js";
+} from "../../chunk-IRCVDFWG.js";
 import {
   trimTrailingSlash
 } from "../../chunk-H37EB22A.js";
@@ -28,7 +28,7 @@ import {
   FUNCTIONS_MOUNT_PREFIX,
   assertFunctionName
 } from "../../chunk-XQWJN6DC.js";
-import "../../chunk-XOCASA3L.js";
+import "../../chunk-OIRVEGPQ.js";
 
 // src/stacks/supabase/handler.ts
 function deriveResourcePath(options) {

package/dist/stacks/supabase/vite.cjs

@@ -33,7 +33,7 @@ var import_node_fs = require("fs");
 var import_node_path = require("path");
 
 // package.json
-var version = "0.21.0-rc.0";
+var version = "0.21.0-rc.2";
 
 // src/core/fs-errors.ts
 function isFileMissing(err) {

package/dist/stacks/supabase/vite.js

@@ -7,7 +7,7 @@ import {
 } from "../../chunk-XQWJN6DC.js";
 import {
   version
-} from "../../chunk-XOCASA3L.js";
+} from "../../chunk-OIRVEGPQ.js";
 
 // src/stacks/supabase/vite.ts
 import { resolve as resolve2, sep as sep2 } from "path";

package/dist/stacks/tanstack/index.cjs

@@ -129,7 +129,7 @@ function describeError(err) {
 }
 
 // package.json
-var version = "0.21.0-rc.0";
+var version = "0.21.0-rc.2";
 
 // src/metrics/otlp.ts
 var SCOPE_NAME = "@lovable.dev/mcp-js";
@@ -416,14 +416,16 @@ function parseSafeUrl(subject, raw, ErrorClass = Error) {
 
 // src/auth/discovery.ts
 var OAuthConfigurationError = class extends Error {
-  constructor(message) {
+  constructor(message, stage) {
     super(message);
+    this.stage = stage;
     this.name = "OAuthConfigurationError";
   }
 };
 var OAuthUpstreamUnreachableError = class extends Error {
-  constructor(message) {
+  constructor(message, stage) {
     super(message);
+    this.stage = stage;
     this.name = "OAuthUpstreamUnreachableError";
   }
 };
@@ -457,32 +459,28 @@ function oauthMetadataUrlsForIssuer(issuer) {
   return [...pathInsertedOAuthMetadataUrls(url, path), `${normalizedIssuer}/.well-known/openid-configuration`];
 }
 async function fetchFirstValidOAuthServerMetadata(metadataUrls, expectedIssuer) {
-  const controller = new AbortController();
-  const attempts = metadataUrls.map(
-    (url) => fetchOAuthServerMetadata(url, expectedIssuer, controller.signal).catch((err) => {
-      log.debug("oauth.discovery.attempt_failed", { url, ...describeError(err) });
-      throw err instanceof Error ? err : new Error(String(err));
-    })
-  );
-  try {
-    const metadata = await Promise.any(attempts);
-    controller.abort();
-    return metadata;
-  } catch (aggregate) {
-    const causes = aggregate instanceof AggregateError ? aggregate.errors : [aggregate];
-    const unreachable = causes.some((c) => c instanceof MetadataUnreachableError);
-    const detail = causes.map((c) => c instanceof Error ? c.message : String(c)).join("; ");
-    log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
-    const message = `failed to discover OAuth server metadata (${detail})`;
-    throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
+  const errors = [];
+  for (const url of metadataUrls) {
+    try {
+      return await fetchOAuthServerMetadata(url, expectedIssuer);
+    } catch (err) {
+      const error = err instanceof Error ? err : new Error(String(err));
+      log.debug("oauth.discovery.attempt_failed", { url, ...describeError(error) });
+      errors.push(error);
+    }
   }
+  const unreachable = errors.some((e) => e instanceof MetadataUnreachableError);
+  const detail = errors.map((e) => e.message).join("; ");
+  log.error("oauth.discovery.exhausted", { expectedIssuer, urlsTried: metadataUrls, errors: detail, unreachable });
+  const message = `failed to discover OAuth server metadata (${detail})`;
+  throw unreachable ? new MetadataUnreachableError(message) : new Error(message);
 }
-async function fetchOAuthServerMetadata(url, expectedIssuer, signal) {
+async function fetchOAuthServerMetadata(url, expectedIssuer) {
   log.debug("oauth.discovery.fetch", { url });
   let response;
   try {
     response = await fetch(url, {
-      signal: AbortSignal.any([signal, AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS)]),
+      signal: AbortSignal.timeout(METADATA_FETCH_TIMEOUT_MS),
       redirect: "manual"
     });
   } catch (err) {
@@ -517,14 +515,14 @@ async function fetchIssuerOAuthServerMetadata(issuer) {
         ...describeError(err),
         outcome: "503 authorization server unreachable"
       });
-      throw new OAuthUpstreamUnreachableError(message);
+      throw new OAuthUpstreamUnreachableError(message, "discovery");
     }
     log.error("oauth.discovery.config_error", {
       issuer,
       ...describeError(err),
       outcome: "500 oauth configuration error"
     });
-    throw new OAuthConfigurationError(message);
+    throw new OAuthConfigurationError(message, "discovery");
   }
 }
 function createOAuthDiscoveryResolver(auth) {
@@ -622,7 +620,10 @@ async function fetchVerificationKeySet(jwksUri) {
     response = await fetch(jwksUri, { signal: AbortSignal.timeout(JWKS_FETCH_TIMEOUT_MS), redirect: "manual" });
   } catch (err) {
     log.error("oauth.jwks.unreachable", { ...describeError(err), outcome: "503 authorization server unreachable" });
-    throw new OAuthUpstreamUnreachableError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
+    throw new OAuthUpstreamUnreachableError(
+      `JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`,
+      "jwks"
+    );
   }
   try {
     if (!response.ok)
@@ -631,7 +632,7 @@ async function fetchVerificationKeySet(jwksUri) {
     return (0, import_jose.createLocalJWKSet)(json);
   } catch (err) {
     log.error("oauth.jwks.fetch_failed", { ...describeError(err), outcome: "500 oauth configuration error" });
-    throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`);
+    throw new OAuthConfigurationError(`JWKS fetch failed: ${err instanceof Error ? err.message : String(err)}`, "jwks");
   }
 }
 function assertAccessTokenTyp(token, allowed) {
@@ -844,21 +845,21 @@ function createRequestAuthorizer(mcp, options = {}) {
         return { ok: true, auth };
       } catch (err) {
         if (err instanceof OAuthUpstreamUnreachableError) {
-          log.error("auth.upstream_unreachable", { ...describeError(err), outcome: "503" });
+          log.error("auth.upstream_unreachable", { ...describeError(err), stage: err.stage, outcome: "503" });
           await recorder?.emit({
             tool: null,
             method: "authorize",
-            outcome: "auth_upstream_unreachable",
+            outcome: err.stage === "jwks" ? "auth_jwks_unreachable" : "auth_discovery_unreachable",
             durationMs: nowMs() - startedAt
           });
           return { ok: false, response: oauthUpstreamUnreachableResponse() };
         }
         if (err instanceof OAuthConfigurationError) {
-          log.error("auth.config_error", { ...describeError(err), outcome: "500" });
+          log.error("auth.config_error", { ...describeError(err), stage: err.stage, outcome: "500" });
           await recorder?.emit({
             tool: null,
             method: "authorize",
-            outcome: "auth_config_error",
+            outcome: err.stage === "jwks" ? "auth_jwks_config_error" : "auth_discovery_config_error",
             durationMs: nowMs() - startedAt
           });
           return { ok: false, response: oauthConfigurationErrorResponse() };

package/dist/stacks/tanstack/index.js

@@ -3,23 +3,23 @@ import {
 } from "../../chunk-UQK5UO6C.js";
 import {
   createMcpProtocolHandler
-} from "../../chunk-2LLCWLQL.js";
+} from "../../chunk-4H3Y2KYT.js";
 import {
   createOAuthProtectedResourceMetadataHandler
-} from "../../chunk-NQZGVZ24.js";
+} from "../../chunk-7TVARTF4.js";
 import {
   createInvokeToolHandler
-} from "../../chunk-M2TRF6OJ.js";
+} from "../../chunk-WOKM6B6H.js";
 import {
   createListToolsHandler
-} from "../../chunk-KYKL5ECH.js";
+} from "../../chunk-YE6N7XLA.js";
 import "../../chunk-MA5H6PSF.js";
 import {
   createRecorderForRuntime
-} from "../../chunk-VTIP6LMI.js";
+} from "../../chunk-IRCVDFWG.js";
 import "../../chunk-H37EB22A.js";
 import "../../chunk-6DXGZZA4.js";
-import "../../chunk-XOCASA3L.js";
+import "../../chunk-OIRVEGPQ.js";
 
 // src/stacks/tanstack/handlers.ts
 var STACK = "tanstack";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovable.dev/mcp-js",
-  "version": "0.21.0-rc.0",
+  "version": "0.21.0-rc.2",
   "description": "Author MCP servers for Lovable apps. Declare tools with defineTool, register them in defineMcp, and a framework adapter (TanStack or Supabase Edge Functions) emits the route(s) at build time.",
   "type": "module",
   "repository": {