@lovable.dev/mcp-js 0.21.1-rc.1 → 0.22.0

package/dist/chunk-RLE4UE63.js

@@ -0,0 +1,58 @@
+import {
+  assertRestResourceBinding,
+  corsPreflightResponse,
+  createNoopRecorder,
+  createRequestAuthorizer,
+  headResponse,
+  methodNotAllowed,
+  withCors
+} from "./chunk-RK62EMPY.js";
+
+// src/protocols/rest/list-tools.ts
+import { objectFromShape } from "@modelcontextprotocol/sdk/server/zod-compat.js";
+import { toJsonSchemaCompat } from "@modelcontextprotocol/sdk/server/zod-json-schema-compat.js";
+function shapeToJsonSchema(shape) {
+  if (!shape)
+    return null;
+  try {
+    return toJsonSchemaCompat(objectFromShape(shape));
+  } catch {
+    return null;
+  }
+}
+function buildMcpListing(mcp) {
+  return {
+    server: { name: mcp.name, version: mcp.version, title: mcp.title },
+    tools: mcp.tools.map((tool) => ({
+      name: tool.name,
+      title: tool.title,
+      description: tool.description,
+      annotations: tool.annotations,
+      inputSchema: shapeToJsonSchema(tool.inputSchema),
+      outputSchema: shapeToJsonSchema(tool.outputSchema)
+    }))
+  };
+}
+function createListToolsHandler(mcp, options = {}) {
+  assertRestResourceBinding(mcp, options);
+  const authorizer = createRequestAuthorizer(mcp, options);
+  const handle = async (request, recorder) => {
+    const authResult = await authorizer.authorize(request, recorder);
+    if (!authResult.ok)
+      return authResult.response;
+    if (request.method !== "GET" && request.method !== "HEAD")
+      return methodNotAllowed("GET, HEAD, OPTIONS");
+    const response = Response.json(buildMcpListing(mcp));
+    return request.method === "HEAD" ? headResponse(response) : response;
+  };
+  return async (request, recorder = createNoopRecorder()) => {
+    if (request.method === "OPTIONS")
+      return corsPreflightResponse("GET, HEAD, OPTIONS");
+    return withCors(await handle(request, recorder));
+  };
+}
+
+export {
+  buildMcpListing,
+  createListToolsHandler
+};

package/dist/chunk-UQK5UO6C.js

@@ -0,0 +1,26 @@
+// src/core/forwarded.ts
+function applyForwardedOrigin(request, options) {
+  const proto = options.trustForwardedProto ? firstForwardedValue(request, "x-forwarded-proto") : void 0;
+  const host = options.trustForwardedHost ? firstForwardedValue(request, "x-forwarded-host") : void 0;
+  if (proto === void 0 && host === void 0)
+    return request;
+  const url = new URL(request.url);
+  let changed = false;
+  if (proto !== void 0 && `${proto}:` !== url.protocol) {
+    url.protocol = `${proto}:`;
+    changed = true;
+  }
+  if (host !== void 0 && host !== url.host) {
+    url.host = host;
+    changed = true;
+  }
+  return changed ? new Request(url.href, request) : request;
+}
+function firstForwardedValue(request, header) {
+  const value = request.headers.get(header)?.split(",")[0]?.trim();
+  return value ? value : void 0;
+}
+
+export {
+  applyForwardedOrigin
+};

package/dist/chunk-XQWJN6DC.js

@@ -0,0 +1,14 @@
+// src/stacks/supabase/paths.ts
+var FUNCTIONS_MOUNT_PREFIX = "/functions/v1/";
+function assertFunctionName(value, label = "functionName") {
+  if (!/^[a-zA-Z0-9_-]+$/.test(value)) {
+    throw new Error(
+      `@lovable.dev/mcp-js: ${label} must be a single path segment matching [A-Za-z0-9_-], got ${JSON.stringify(value)}`
+    );
+  }
+}
+
+export {
+  FUNCTIONS_MOUNT_PREFIX,
+  assertFunctionName
+};

package/dist/chunk-Y3ZFPEQH.js

@@ -0,0 +1,8 @@
+// src/core/fs-errors.ts
+function isFileMissing(err) {
+  return typeof err === "object" && err !== null && "code" in err && err.code === "ENOENT";
+}
+
+export {
+  isFileMissing
+};

package/dist/cli/extract-manifest.cjs

@@ -1,134 +1,219 @@
 #!/usr/bin/env node
-const require_package = require("../package-BwCGVRcB.cjs");
-const require_list_tools = require("../list-tools-CBCuS1Tv.cjs");
-const require_fs_errors = require("../fs-errors-CWNzOV75.cjs");
-let node_fs = require("node:fs");
-let node_path = require("node:path");
-let vite = require("vite");
-let node_crypto = require("node:crypto");
-const MANIFEST_RELATIVE_PATH = ".lovable/mcp/manifest.json";
+"use strict";
+
+// src/manifest/io.ts
+var import_node_crypto = require("crypto");
+var import_node_fs = require("fs");
+var import_node_path = require("path");
+var import_vite2 = require("vite");
+
+// src/core/fs-errors.ts
+function isFileMissing(err) {
+  return typeof err === "object" && err !== null && "code" in err && err.code === "ENOENT";
+}
+
+// package.json
+var version = "0.22.0";
+
+// src/protocols/rest/list-tools.ts
+var import_zod_compat = require("@modelcontextprotocol/sdk/server/zod-compat.js");
+var import_zod_json_schema_compat = require("@modelcontextprotocol/sdk/server/zod-json-schema-compat.js");
+
+// src/core/logger.ts
+var LEVEL_RANK = { silent: 0, error: 1, warn: 2, info: 3, debug: 4 };
+function isLogLevel(value) {
+  return typeof value === "string" && value in LEVEL_RANK;
+}
+var LOG_LEVEL_ENV_VAR = "LOVABLE_MCP_LOG_LEVEL";
+function readEnvLevel() {
+  try {
+    const raw = typeof process !== "undefined" ? process.env?.[LOG_LEVEL_ENV_VAR] : void 0;
+    const normalized = raw?.trim().toLowerCase();
+    return isLogLevel(normalized) ? normalized : void 0;
+  } catch {
+    return void 0;
+  }
+}
+var currentLevel = readEnvLevel() ?? "debug";
+
+// src/auth/verifier.ts
+var import_jose = require("jose");
+
+// src/protocols/rest/list-tools.ts
+function shapeToJsonSchema(shape) {
+  if (!shape)
+    return null;
+  try {
+    return (0, import_zod_json_schema_compat.toJsonSchemaCompat)((0, import_zod_compat.objectFromShape)(shape));
+  } catch {
+    return null;
+  }
+}
+function buildMcpListing(mcp) {
+  return {
+    server: { name: mcp.name, version: mcp.version, title: mcp.title },
+    tools: mcp.tools.map((tool) => ({
+      name: tool.name,
+      title: tool.title,
+      description: tool.description,
+      annotations: tool.annotations,
+      inputSchema: shapeToJsonSchema(tool.inputSchema),
+      outputSchema: shapeToJsonSchema(tool.outputSchema)
+    }))
+  };
+}
+
+// src/manifest/extract.ts
+var MANIFEST_VERSION = 1;
+var MANIFEST_RELATIVE_PATH = ".lovable/mcp/manifest.json";
 function manifestAuth(auth) {
-	if (!auth) return { type: "none" };
-	const oauth = {
-		type: "oauth",
-		issuer: auth.issuer
-	};
-	if (auth.resource !== void 0) oauth.resource = auth.resource;
-	if (auth.resourceName !== void 0) oauth.resource_name = auth.resourceName;
-	if (auth.resourceDocumentation !== void 0) oauth.resource_documentation = auth.resourceDocumentation;
-	if (auth.protectedResourceMetadataUrl !== void 0) oauth.protected_resource_metadata_url = auth.protectedResourceMetadataUrl;
-	if (auth.requireOAuthClientClaim !== void 0) oauth.require_oauth_client_claim = auth.requireOAuthClientClaim;
-	if (auth.acceptResourceClaim !== void 0) oauth.accept_resource_claim = auth.acceptResourceClaim;
-	if (auth.acceptedAudiences !== void 0) oauth.accepted_audiences = auth.acceptedAudiences;
-	if (auth.requiredScopes !== void 0) oauth.required_scopes = auth.requiredScopes;
-	if (auth.jwksUri !== void 0) oauth.jwks_uri = auth.jwksUri;
-	if (auth.algorithms !== void 0) oauth.algorithms = auth.algorithms;
-	if (auth.clockToleranceSeconds !== void 0) oauth.clock_tolerance_seconds = auth.clockToleranceSeconds;
-	return oauth;
+  if (!auth)
+    return { type: "none" };
+  const oauth = { type: "oauth", issuer: auth.issuer };
+  if (auth.resource !== void 0)
+    oauth.resource = auth.resource;
+  if (auth.resourceName !== void 0)
+    oauth.resource_name = auth.resourceName;
+  if (auth.resourceDocumentation !== void 0)
+    oauth.resource_documentation = auth.resourceDocumentation;
+  if (auth.protectedResourceMetadataUrl !== void 0)
+    oauth.protected_resource_metadata_url = auth.protectedResourceMetadataUrl;
+  if (auth.requireOAuthClientClaim !== void 0)
+    oauth.require_oauth_client_claim = auth.requireOAuthClientClaim;
+  if (auth.acceptResourceClaim !== void 0)
+    oauth.accept_resource_claim = auth.acceptResourceClaim;
+  if (auth.acceptedAudiences !== void 0)
+    oauth.accepted_audiences = auth.acceptedAudiences;
+  if (auth.requiredScopes !== void 0)
+    oauth.required_scopes = auth.requiredScopes;
+  if (auth.jwksUri !== void 0)
+    oauth.jwks_uri = auth.jwksUri;
+  if (auth.algorithms !== void 0)
+    oauth.algorithms = auth.algorithms;
+  if (auth.clockToleranceSeconds !== void 0)
+    oauth.clock_tolerance_seconds = auth.clockToleranceSeconds;
+  return oauth;
 }
 function isToolShape(tool) {
-	if (typeof tool !== "object" || tool === null) return false;
-	const t = tool;
-	return typeof t.name === "string" && typeof t.title === "string" && typeof t.description === "string";
+  if (typeof tool !== "object" || tool === null)
+    return false;
+  const t = tool;
+  return typeof t.name === "string" && typeof t.title === "string" && typeof t.description === "string";
 }
 function isAuthShape(auth) {
-	if (auth === void 0) return true;
-	if (typeof auth !== "object" || auth === null) return false;
-	const a = auth;
-	return a.type === "oauth" && typeof a.issuer === "string" && a.issuer.length > 0;
+  if (auth === void 0)
+    return true;
+  if (typeof auth !== "object" || auth === null)
+    return false;
+  const a = auth;
+  return a.type === "oauth" && typeof a.issuer === "string" && a.issuer.length > 0;
 }
 function manifestFromDefinition(definition, urlPath, source = "the MCP entry") {
-	const def = definition;
-	if (!(!!def && typeof def === "object" && typeof def.name === "string" && typeof def.title === "string" && typeof def.version === "string" && Array.isArray(def.tools) && def.tools.every(isToolShape) && isAuthShape(def.auth))) throw new Error(`@lovable.dev/mcp-js: ${source} must \`export default defineMcp(...)\` (got ${definition == null ? "no default export" : typeof definition}).`);
-	return {
-		version: 1,
-		sdk_version: require_package.version,
-		path: urlPath,
-		auth: manifestAuth(def.auth),
-		mcp: require_list_tools.buildMcpListing(def)
-	};
+  const def = definition;
+  const validShape = !!def && typeof def === "object" && typeof def.name === "string" && typeof def.title === "string" && typeof def.version === "string" && Array.isArray(def.tools) && def.tools.every(isToolShape) && isAuthShape(def.auth);
+  if (!validShape) {
+    const got = definition == null ? "no default export" : typeof definition;
+    throw new Error(`@lovable.dev/mcp-js: ${source} must \`export default defineMcp(...)\` (got ${got}).`);
+  }
+  return {
+    version: MANIFEST_VERSION,
+    sdk_version: version,
+    path: urlPath,
+    auth: manifestAuth(def.auth),
+    mcp: buildMcpListing(def)
+  };
 }
-//#endregion
-//#region src/manifest/ssr-loader.ts
-async function produceViaSsr(projectRoot, alias, entryAbs, urlPath) {
-	const server = await (0, vite.createServer)({
-		configFile: false,
-		root: projectRoot,
-		logLevel: "silent",
-		server: {
-			middlewareMode: true,
-			hmr: false,
-			watch: null
-		},
-		optimizeDeps: { noDiscovery: true },
-		resolve: { alias }
-	});
-	try {
-		return manifestFromDefinition((await server.ssrLoadModule(entryAbs)).default, urlPath, entryAbs);
-	} finally {
-		await server.close();
-	}
+
+// src/manifest/ssr-loader.ts
+var import_vite = require("vite");
+async function produceViaSsr(projectRoot2, alias, entryAbs, urlPath) {
+  const server = await (0, import_vite.createServer)({
+    configFile: false,
+    root: projectRoot2,
+    logLevel: "silent",
+    server: { middlewareMode: true, hmr: false, watch: null },
+    optimizeDeps: { noDiscovery: true },
+    resolve: { alias }
+  });
+  try {
+    const mod = await server.ssrLoadModule(entryAbs);
+    return manifestFromDefinition(mod.default, urlPath, entryAbs);
+  } finally {
+    await server.close();
+  }
 }
-//#endregion
-//#region src/manifest/io.ts
-const MCP_PLUGIN_NAME_PREFIX = "@lovable.dev/mcp-js";
+
+// src/manifest/io.ts
+var MCP_PLUGIN_NAME_PREFIX = "@lovable.dev/mcp-js";
+var DEFAULT_MCP_ENTRY = "src/lib/mcp/index.ts";
+var DEFAULT_MCP_PATH = "/mcp";
 function writeManifestIfChanged(file, manifest) {
-	const content = JSON.stringify(manifest, null, 2) + "\n";
-	let existing;
-	try {
-		existing = (0, node_fs.readFileSync)(file, "utf8");
-	} catch (err) {
-		if (!require_fs_errors.isFileMissing(err)) throw err;
-	}
-	if (existing === content) return;
-	(0, node_fs.mkdirSync)((0, node_path.dirname)(file), { recursive: true });
-	const tmp = `${file}.${(0, node_crypto.randomUUID)()}.tmp`;
-	try {
-		(0, node_fs.writeFileSync)(tmp, content, "utf8");
-		(0, node_fs.renameSync)(tmp, file);
-	} catch (err) {
-		try {
-			(0, node_fs.unlinkSync)(tmp);
-		} catch {}
-		throw err;
-	}
+  const content = JSON.stringify(manifest, null, 2) + "\n";
+  let existing;
+  try {
+    existing = (0, import_node_fs.readFileSync)(file, "utf8");
+  } catch (err) {
+    if (!isFileMissing(err))
+      throw err;
+  }
+  if (existing === content)
+    return;
+  (0, import_node_fs.mkdirSync)((0, import_node_path.dirname)(file), { recursive: true });
+  const tmp = `${file}.${(0, import_node_crypto.randomUUID)()}.tmp`;
+  try {
+    (0, import_node_fs.writeFileSync)(tmp, content, "utf8");
+    (0, import_node_fs.renameSync)(tmp, file);
+  } catch (err) {
+    try {
+      (0, import_node_fs.unlinkSync)(tmp);
+    } catch {
+    }
+    throw err;
+  }
 }
 function removeManifest(file) {
-	try {
-		(0, node_fs.unlinkSync)(file);
-	} catch (err) {
-		if (!require_fs_errors.isFileMissing(err)) throw err;
-	}
+  try {
+    (0, import_node_fs.unlinkSync)(file);
+  } catch (err) {
+    if (!isFileMissing(err))
+      throw err;
+  }
 }
 async function syncManifest(manifestFile, entryAbs, urlPath, produce) {
-	let entryExists = true;
-	try {
-		(0, node_fs.lstatSync)(entryAbs);
-	} catch (err) {
-		if (!require_fs_errors.isFileMissing(err)) throw err;
-		entryExists = false;
-	}
-	if (!entryExists) {
-		removeManifest(manifestFile);
-		return;
-	}
-	writeManifestIfChanged(manifestFile, await produce(entryAbs, urlPath));
+  let entryExists = true;
+  try {
+    (0, import_node_fs.lstatSync)(entryAbs);
+  } catch (err) {
+    if (!isFileMissing(err))
+      throw err;
+    entryExists = false;
+  }
+  if (!entryExists) {
+    removeManifest(manifestFile);
+    return;
+  }
+  const manifest = await produce(entryAbs, urlPath);
+  writeManifestIfChanged(manifestFile, manifest);
 }
-async function runExtract(projectRoot) {
-	const resolved = await (0, vite.resolveConfig)({
-		root: projectRoot,
-		logLevel: "silent"
-	}, "serve");
-	const alias = resolved.resolve?.alias ?? [];
-	const pluginApi = resolved.plugins.find((p) => typeof p.name === "string" && p.name.startsWith(MCP_PLUGIN_NAME_PREFIX))?.api;
-	const entryAbs = pluginApi?.mcpEntry ?? (0, node_path.resolve)(projectRoot, "src/lib/mcp/index.ts");
-	const urlPath = pluginApi?.urlPath ?? "/mcp";
-	await syncManifest((0, node_path.resolve)(projectRoot, MANIFEST_RELATIVE_PATH), entryAbs, urlPath, (entry, path) => produceViaSsr(projectRoot, alias, entry, path));
+async function runExtract(projectRoot2) {
+  const resolved = await (0, import_vite2.resolveConfig)({ root: projectRoot2, logLevel: "silent" }, "serve");
+  const alias = resolved.resolve?.alias ?? [];
+  const pluginApi = resolved.plugins.find(
+    (p) => typeof p.name === "string" && p.name.startsWith(MCP_PLUGIN_NAME_PREFIX)
+  )?.api;
+  const entryAbs = pluginApi?.mcpEntry ?? (0, import_node_path.resolve)(projectRoot2, DEFAULT_MCP_ENTRY);
+  const urlPath = pluginApi?.urlPath ?? DEFAULT_MCP_PATH;
+  await syncManifest(
+    (0, import_node_path.resolve)(projectRoot2, MANIFEST_RELATIVE_PATH),
+    entryAbs,
+    urlPath,
+    (entry, path) => produceViaSsr(projectRoot2, alias, entry, path)
+  );
 }
-//#endregion
-//#region src/cli/extract-manifest.ts
-runExtract(process.argv[2] ?? process.cwd()).catch((err) => {
-	console.error(err instanceof Error ? err.message : String(err));
-	process.exit(1);
+
+// src/cli/extract-manifest.ts
+var projectRoot = process.argv[2] ?? process.cwd();
+runExtract(projectRoot).catch((err) => {
+  console.error(err instanceof Error ? err.message : String(err));
+  process.exit(1);
 });
-//#endregion

package/dist/cli/extract-manifest.d.cts

@@ -1 +1 @@
-export { };
+#!/usr/bin/env node

package/dist/cli/extract-manifest.d.ts

@@ -1 +1 @@
-export { };
+#!/usr/bin/env node