@lovable.dev/mcp-js 0.22.1-rc.1 → 0.22.1-rc.2

package/dist/mcp--iewDKrV.cjs

@@ -1,128 +0,0 @@
-const require_logger = require("./logger-BqPOa_E1.cjs");
-const require_context = require("./context-BweeEcoA.cjs");
-const require_cors = require("./cors-BxwVxCm3.cjs");
-const require_content = require("./content-NCYIGgOb.cjs");
-let _modelcontextprotocol_sdk_server_mcp_js = require("@modelcontextprotocol/sdk/server/mcp.js");
-let _modelcontextprotocol_sdk_server_webStandardStreamableHttp_js = require("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js");
-//#region src/protocols/mcp/protocol.ts
-/**
-* Adapt a Lovable tool to the SDK's tool callback. The boundary cast bridges
-* our SDK-decoupled content-block types to the SDK's; they match structurally.
-*/
-function adaptToolToSdkCallback(tool, auth, recorder) {
-	const endUserId = auth?.principal.sub;
-	return (async (first) => {
-		const args = tool.inputSchema ? first ?? {} : {};
-		const start = require_cors.nowMs();
-		let result;
-		try {
-			result = await tool.handler(args, new require_context.ToolContext(auth));
-		} catch {
-			await recorder.emit({
-				tool: tool.name,
-				method: "tools/call",
-				outcome: "handler_error",
-				durationMs: require_cors.nowMs() - start,
-				endUserId
-			});
-			return {
-				content: [{
-					type: "text",
-					text: "tool execution failed"
-				}],
-				isError: true
-			};
-		}
-		if (result == null) {
-			await recorder.emit({
-				tool: tool.name,
-				method: "tools/call",
-				outcome: "handler_error",
-				durationMs: require_cors.nowMs() - start,
-				endUserId
-			});
-			return {
-				content: [{
-					type: "text",
-					text: `tool "${tool.name}" returned no result`
-				}],
-				isError: true
-			};
-		}
-		await recorder.emit({
-			tool: tool.name,
-			method: "tools/call",
-			outcome: result.isError ? "tool_error" : "ok",
-			durationMs: require_cors.nowMs() - start,
-			errorText: result.isError ? require_content.extractTextContent(result.content) : void 0,
-			endUserId
-		});
-		return {
-			content: result.content ?? [],
-			structuredContent: result.structuredContent,
-			isError: result.isError
-		};
-	});
-}
-/**
-* Build a Web-Standard request handler that serves the MCP protocol over
-* streamable HTTP. A fresh `McpServer` + transport is constructed per
-* request — the transport is stateless, so this is cheap and there is no
-* cross-request state to leak. The per-request `recorder` is supplied by the
-* caller (the stack handler) so telemetry reads the runtime env in-flight.
-*/
-function createMcpProtocolHandler(mcp, options = {}) {
-	const authorizer = require_cors.createRequestAuthorizer(mcp, options);
-	const handle = async (request, recorder) => {
-		const authResult = await authorizer.authorize(request, recorder);
-		if (!authResult.ok) return authResult.response;
-		try {
-			const server = new _modelcontextprotocol_sdk_server_mcp_js.McpServer({
-				name: mcp.name,
-				version: mcp.version,
-				title: mcp.title
-			}, { instructions: mcp.instructions });
-			for (const tool of mcp.tools) server.registerTool(tool.name, {
-				title: tool.title,
-				description: tool.description,
-				inputSchema: tool.inputSchema,
-				outputSchema: tool.outputSchema,
-				annotations: tool.annotations
-			}, adaptToolToSdkCallback(tool, authResult.auth, recorder));
-			const transport = new _modelcontextprotocol_sdk_server_webStandardStreamableHttp_js.WebStandardStreamableHTTPServerTransport({ sessionIdGenerator: void 0 });
-			await server.connect(transport);
-			return await transport.handleRequest(request);
-		} catch (err) {
-			await recorder.emit({
-				tool: null,
-				method: "transport",
-				outcome: "transport_error",
-				durationMs: 0,
-				endUserId: authResult.auth?.principal.sub
-			});
-			require_logger.log.error("mcp.transport_error", {
-				...require_logger.describeError(err),
-				outcome: "500 internal error"
-			});
-			return Response.json({
-				jsonrpc: "2.0",
-				id: null,
-				error: {
-					code: -32603,
-					message: "internal error"
-				}
-			}, { status: 500 });
-		}
-	};
-	return async (request, recorder = require_cors.createNoopRecorder()) => {
-		if (request.method === "OPTIONS") return require_cors.corsPreflightResponse("GET, POST, DELETE, OPTIONS");
-		return require_cors.withCors(await handle(request, recorder));
-	};
-}
-//#endregion
-Object.defineProperty(exports, "createMcpProtocolHandler", {
-	enumerable: true,
-	get: function() {
-		return createMcpProtocolHandler;
-	}
-});

package/dist/mcp-CALHyhDi.js

@@ -1,123 +0,0 @@
-import { i as log, r as describeError } from "./logger-2OXtfiIW.js";
-import { t as ToolContext } from "./context-CIpPzN7P.js";
-import { d as nowMs, i as createRequestAuthorizer, n as withCors, t as corsPreflightResponse, u as createNoopRecorder } from "./cors-CJRL7tyh.js";
-import { t as extractTextContent } from "./content-D5LJAHyM.js";
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
-//#region src/protocols/mcp/protocol.ts
-/**
-* Adapt a Lovable tool to the SDK's tool callback. The boundary cast bridges
-* our SDK-decoupled content-block types to the SDK's; they match structurally.
-*/
-function adaptToolToSdkCallback(tool, auth, recorder) {
-	const endUserId = auth?.principal.sub;
-	return (async (first) => {
-		const args = tool.inputSchema ? first ?? {} : {};
-		const start = nowMs();
-		let result;
-		try {
-			result = await tool.handler(args, new ToolContext(auth));
-		} catch {
-			await recorder.emit({
-				tool: tool.name,
-				method: "tools/call",
-				outcome: "handler_error",
-				durationMs: nowMs() - start,
-				endUserId
-			});
-			return {
-				content: [{
-					type: "text",
-					text: "tool execution failed"
-				}],
-				isError: true
-			};
-		}
-		if (result == null) {
-			await recorder.emit({
-				tool: tool.name,
-				method: "tools/call",
-				outcome: "handler_error",
-				durationMs: nowMs() - start,
-				endUserId
-			});
-			return {
-				content: [{
-					type: "text",
-					text: `tool "${tool.name}" returned no result`
-				}],
-				isError: true
-			};
-		}
-		await recorder.emit({
-			tool: tool.name,
-			method: "tools/call",
-			outcome: result.isError ? "tool_error" : "ok",
-			durationMs: nowMs() - start,
-			errorText: result.isError ? extractTextContent(result.content) : void 0,
-			endUserId
-		});
-		return {
-			content: result.content ?? [],
-			structuredContent: result.structuredContent,
-			isError: result.isError
-		};
-	});
-}
-/**
-* Build a Web-Standard request handler that serves the MCP protocol over
-* streamable HTTP. A fresh `McpServer` + transport is constructed per
-* request — the transport is stateless, so this is cheap and there is no
-* cross-request state to leak. The per-request `recorder` is supplied by the
-* caller (the stack handler) so telemetry reads the runtime env in-flight.
-*/
-function createMcpProtocolHandler(mcp, options = {}) {
-	const authorizer = createRequestAuthorizer(mcp, options);
-	const handle = async (request, recorder) => {
-		const authResult = await authorizer.authorize(request, recorder);
-		if (!authResult.ok) return authResult.response;
-		try {
-			const server = new McpServer({
-				name: mcp.name,
-				version: mcp.version,
-				title: mcp.title
-			}, { instructions: mcp.instructions });
-			for (const tool of mcp.tools) server.registerTool(tool.name, {
-				title: tool.title,
-				description: tool.description,
-				inputSchema: tool.inputSchema,
-				outputSchema: tool.outputSchema,
-				annotations: tool.annotations
-			}, adaptToolToSdkCallback(tool, authResult.auth, recorder));
-			const transport = new WebStandardStreamableHTTPServerTransport({ sessionIdGenerator: void 0 });
-			await server.connect(transport);
-			return await transport.handleRequest(request);
-		} catch (err) {
-			await recorder.emit({
-				tool: null,
-				method: "transport",
-				outcome: "transport_error",
-				durationMs: 0,
-				endUserId: authResult.auth?.principal.sub
-			});
-			log.error("mcp.transport_error", {
-				...describeError(err),
-				outcome: "500 internal error"
-			});
-			return Response.json({
-				jsonrpc: "2.0",
-				id: null,
-				error: {
-					code: -32603,
-					message: "internal error"
-				}
-			}, { status: 500 });
-		}
-	};
-	return async (request, recorder = createNoopRecorder()) => {
-		if (request.method === "OPTIONS") return corsPreflightResponse("GET, POST, DELETE, OPTIONS");
-		return withCors(await handle(request, recorder));
-	};
-}
-//#endregion
-export { createMcpProtocolHandler as t };

package/dist/metadata-path-CAkNcfyY.js

@@ -1,12 +0,0 @@
-//#region src/auth/metadata-path.ts
-/**
-* Default RFC 9728 protected-resource metadata path. Used by the runtime 401
-* challenge (`authorize.ts`, which advertises this URL via the
-* `WWW-Authenticate: resource_metadata` param) and the Vite plugin (which emits
-* the route that serves it) when no `metadataPath` is configured. A configured
-* `metadataPath` overrides it; the plugin injects that same path into every
-* emitted handler, so the advertised URL and the served route still can't drift.
-*/
-const OAUTH_PROTECTED_RESOURCE_METADATA_PATH = "/.well-known/oauth-protected-resource";
-//#endregion
-export { OAUTH_PROTECTED_RESOURCE_METADATA_PATH as t };

package/dist/metadata-path-zd7NSNoa.cjs

@@ -1,17 +0,0 @@
-//#region src/auth/metadata-path.ts
-/**
-* Default RFC 9728 protected-resource metadata path. Used by the runtime 401
-* challenge (`authorize.ts`, which advertises this URL via the
-* `WWW-Authenticate: resource_metadata` param) and the Vite plugin (which emits
-* the route that serves it) when no `metadataPath` is configured. A configured
-* `metadataPath` overrides it; the plugin injects that same path into every
-* emitted handler, so the advertised URL and the served route still can't drift.
-*/
-const OAUTH_PROTECTED_RESOURCE_METADATA_PATH = "/.well-known/oauth-protected-resource";
-//#endregion
-Object.defineProperty(exports, "OAUTH_PROTECTED_RESOURCE_METADATA_PATH", {
-	enumerable: true,
-	get: function() {
-		return OAUTH_PROTECTED_RESOURCE_METADATA_PATH;
-	}
-});

package/dist/package-CLTXgGyU.cjs

@@ -1,9 +0,0 @@
-//#region package.json
-var version = "0.22.1-rc.1";
-//#endregion
-Object.defineProperty(exports, "version", {
-	enumerable: true,
-	get: function() {
-		return version;
-	}
-});

package/dist/package-g7-GHkOW.js

@@ -1,4 +0,0 @@
-//#region package.json
-var version = "0.22.1-rc.1";
-//#endregion
-export { version as t };

package/dist/paths-IS65L6TA.js

@@ -1,7 +0,0 @@
-//#region src/stacks/supabase/paths.ts
-const FUNCTIONS_MOUNT_PREFIX = "/functions/v1/";
-function assertFunctionName(value, label = "functionName") {
-	if (!/^[a-zA-Z0-9_-]+$/.test(value)) throw new Error(`@lovable.dev/mcp-js: ${label} must be a single path segment matching [A-Za-z0-9_-], got ${JSON.stringify(value)}`);
-}
-//#endregion
-export { assertFunctionName as n, FUNCTIONS_MOUNT_PREFIX as t };

package/dist/paths-OP318a6c.cjs

@@ -1,18 +0,0 @@
-//#region src/stacks/supabase/paths.ts
-const FUNCTIONS_MOUNT_PREFIX = "/functions/v1/";
-function assertFunctionName(value, label = "functionName") {
-	if (!/^[a-zA-Z0-9_-]+$/.test(value)) throw new Error(`@lovable.dev/mcp-js: ${label} must be a single path segment matching [A-Za-z0-9_-], got ${JSON.stringify(value)}`);
-}
-//#endregion
-Object.defineProperty(exports, "FUNCTIONS_MOUNT_PREFIX", {
-	enumerable: true,
-	get: function() {
-		return FUNCTIONS_MOUNT_PREFIX;
-	}
-});
-Object.defineProperty(exports, "assertFunctionName", {
-	enumerable: true,
-	get: function() {
-		return assertFunctionName;
-	}
-});

package/dist/rest-BcS3SYjx.cjs

@@ -1,122 +0,0 @@
-const require_context = require("./context-BweeEcoA.cjs");
-const require_cors = require("./cors-BxwVxCm3.cjs");
-const require_content = require("./content-NCYIGgOb.cjs");
-require("./list-tools-_Hh_o_mD.cjs");
-let _modelcontextprotocol_sdk_server_zod_compat_js = require("@modelcontextprotocol/sdk/server/zod-compat.js");
-//#region src/protocols/rest/invoke-tool.ts
-const MAX_REFLECTED_TOOL_NAME = 256;
-function safeReflectName(name) {
-	const text = String(name);
-	return text.length > MAX_REFLECTED_TOOL_NAME ? `${text.slice(0, MAX_REFLECTED_TOOL_NAME)}…` : text;
-}
-function isEmptyArgs(value) {
-	if (value == null) return true;
-	if (typeof value !== "object" || Array.isArray(value)) return false;
-	return Object.keys(value).length === 0;
-}
-function createInvokeToolHandler(mcp, options = {}) {
-	require_cors.assertRestResourceBinding(mcp, options);
-	const authorizer = require_cors.createRequestAuthorizer(mcp, options);
-	const handle = async (request, toolName, recorder) => {
-		const authResult = await authorizer.authorize(request, recorder);
-		if (!authResult.ok) return authResult.response;
-		const endUserId = authResult.auth?.principal.sub;
-		if (request.method !== "POST") return require_cors.methodNotAllowed("POST, OPTIONS");
-		const tool = mcp.tools.find((t) => t.name === toolName);
-		if (!tool) return new Response(JSON.stringify({ error: `unknown tool: ${safeReflectName(toolName)}` }), {
-			status: 404,
-			headers: require_cors.JSON_HEADERS
-		});
-		let rawArgs = {};
-		const text = await request.text();
-		if (text) try {
-			rawArgs = JSON.parse(text);
-		} catch {
-			return new Response(JSON.stringify({ error: "invalid JSON body" }), {
-				status: 400,
-				headers: require_cors.JSON_HEADERS
-			});
-		}
-		let args = rawArgs;
-		if (tool.inputSchema) try {
-			const parsed = await (0, _modelcontextprotocol_sdk_server_zod_compat_js.safeParseAsync)((0, _modelcontextprotocol_sdk_server_zod_compat_js.objectFromShape)(tool.inputSchema), rawArgs);
-			if (!parsed.success) return new Response(JSON.stringify({
-				error: "validation failed",
-				details: (0, _modelcontextprotocol_sdk_server_zod_compat_js.getParseErrorMessage)(parsed.error)
-			}), {
-				status: 400,
-				headers: require_cors.JSON_HEADERS
-			});
-			args = parsed.data;
-		} catch {
-			return new Response(JSON.stringify({
-				error: "schema error",
-				tool: toolName
-			}), {
-				status: 500,
-				headers: require_cors.JSON_HEADERS
-			});
-		}
-		else if (!isEmptyArgs(rawArgs)) return new Response(JSON.stringify({ error: "tool has no inputSchema; expected empty body" }), {
-			status: 400,
-			headers: require_cors.JSON_HEADERS
-		});
-		let result;
-		const start = require_cors.nowMs();
-		try {
-			result = await tool.handler(args, new require_context.ToolContext(authResult.auth));
-		} catch {
-			await recorder.emit({
-				tool: tool.name,
-				method: "tools/call",
-				outcome: "handler_error",
-				durationMs: require_cors.nowMs() - start,
-				endUserId
-			});
-			return new Response(JSON.stringify({
-				error: "handler threw",
-				tool: toolName
-			}), {
-				status: 500,
-				headers: require_cors.JSON_HEADERS
-			});
-		}
-		if (result == null) {
-			await recorder.emit({
-				tool: tool.name,
-				method: "tools/call",
-				outcome: "handler_error",
-				durationMs: require_cors.nowMs() - start,
-				endUserId
-			});
-			return new Response(JSON.stringify({ error: `tool "${toolName}" returned no result` }), {
-				status: 500,
-				headers: require_cors.JSON_HEADERS
-			});
-		}
-		await recorder.emit({
-			tool: tool.name,
-			method: "tools/call",
-			outcome: result.isError ? "tool_error" : "ok",
-			durationMs: require_cors.nowMs() - start,
-			errorText: result.isError ? require_content.extractTextContent(result.content) : void 0,
-			endUserId
-		});
-		return Response.json({
-			content: result.content ?? [],
-			structuredContent: result.structuredContent,
-			isError: result.isError
-		});
-	};
-	return async (request, toolName, recorder = require_cors.createNoopRecorder()) => {
-		if (request.method === "OPTIONS") return require_cors.corsPreflightResponse("POST, OPTIONS");
-		return require_cors.withCors(await handle(request, toolName, recorder));
-	};
-}
-//#endregion
-Object.defineProperty(exports, "createInvokeToolHandler", {
-	enumerable: true,
-	get: function() {
-		return createInvokeToolHandler;
-	}
-});

package/dist/rest-Dv9Xq9cV.js

@@ -1,117 +0,0 @@
-import { t as ToolContext } from "./context-CIpPzN7P.js";
-import { d as nowMs, f as JSON_HEADERS, i as createRequestAuthorizer, m as methodNotAllowed, n as withCors, r as assertRestResourceBinding, t as corsPreflightResponse, u as createNoopRecorder } from "./cors-CJRL7tyh.js";
-import { t as extractTextContent } from "./content-D5LJAHyM.js";
-import "./list-tools-Duj1zT0T.js";
-import { getParseErrorMessage, objectFromShape, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";
-//#region src/protocols/rest/invoke-tool.ts
-const MAX_REFLECTED_TOOL_NAME = 256;
-function safeReflectName(name) {
-	const text = String(name);
-	return text.length > MAX_REFLECTED_TOOL_NAME ? `${text.slice(0, MAX_REFLECTED_TOOL_NAME)}…` : text;
-}
-function isEmptyArgs(value) {
-	if (value == null) return true;
-	if (typeof value !== "object" || Array.isArray(value)) return false;
-	return Object.keys(value).length === 0;
-}
-function createInvokeToolHandler(mcp, options = {}) {
-	assertRestResourceBinding(mcp, options);
-	const authorizer = createRequestAuthorizer(mcp, options);
-	const handle = async (request, toolName, recorder) => {
-		const authResult = await authorizer.authorize(request, recorder);
-		if (!authResult.ok) return authResult.response;
-		const endUserId = authResult.auth?.principal.sub;
-		if (request.method !== "POST") return methodNotAllowed("POST, OPTIONS");
-		const tool = mcp.tools.find((t) => t.name === toolName);
-		if (!tool) return new Response(JSON.stringify({ error: `unknown tool: ${safeReflectName(toolName)}` }), {
-			status: 404,
-			headers: JSON_HEADERS
-		});
-		let rawArgs = {};
-		const text = await request.text();
-		if (text) try {
-			rawArgs = JSON.parse(text);
-		} catch {
-			return new Response(JSON.stringify({ error: "invalid JSON body" }), {
-				status: 400,
-				headers: JSON_HEADERS
-			});
-		}
-		let args = rawArgs;
-		if (tool.inputSchema) try {
-			const parsed = await safeParseAsync(objectFromShape(tool.inputSchema), rawArgs);
-			if (!parsed.success) return new Response(JSON.stringify({
-				error: "validation failed",
-				details: getParseErrorMessage(parsed.error)
-			}), {
-				status: 400,
-				headers: JSON_HEADERS
-			});
-			args = parsed.data;
-		} catch {
-			return new Response(JSON.stringify({
-				error: "schema error",
-				tool: toolName
-			}), {
-				status: 500,
-				headers: JSON_HEADERS
-			});
-		}
-		else if (!isEmptyArgs(rawArgs)) return new Response(JSON.stringify({ error: "tool has no inputSchema; expected empty body" }), {
-			status: 400,
-			headers: JSON_HEADERS
-		});
-		let result;
-		const start = nowMs();
-		try {
-			result = await tool.handler(args, new ToolContext(authResult.auth));
-		} catch {
-			await recorder.emit({
-				tool: tool.name,
-				method: "tools/call",
-				outcome: "handler_error",
-				durationMs: nowMs() - start,
-				endUserId
-			});
-			return new Response(JSON.stringify({
-				error: "handler threw",
-				tool: toolName
-			}), {
-				status: 500,
-				headers: JSON_HEADERS
-			});
-		}
-		if (result == null) {
-			await recorder.emit({
-				tool: tool.name,
-				method: "tools/call",
-				outcome: "handler_error",
-				durationMs: nowMs() - start,
-				endUserId
-			});
-			return new Response(JSON.stringify({ error: `tool "${toolName}" returned no result` }), {
-				status: 500,
-				headers: JSON_HEADERS
-			});
-		}
-		await recorder.emit({
-			tool: tool.name,
-			method: "tools/call",
-			outcome: result.isError ? "tool_error" : "ok",
-			durationMs: nowMs() - start,
-			errorText: result.isError ? extractTextContent(result.content) : void 0,
-			endUserId
-		});
-		return Response.json({
-			content: result.content ?? [],
-			structuredContent: result.structuredContent,
-			isError: result.isError
-		});
-	};
-	return async (request, toolName, recorder = createNoopRecorder()) => {
-		if (request.method === "OPTIONS") return corsPreflightResponse("POST, OPTIONS");
-		return withCors(await handle(request, toolName, recorder));
-	};
-}
-//#endregion
-export { createInvokeToolHandler as t };