@lovable.dev/mcp-js 0.22.1 → 0.22.2-rc.1

package/dist/protocols/rest/index.d.cts

@@ -1,12 +1,9 @@
-import { M as McpRuntimeOptions } from '../../authorize-BMeXd_Sh.js';
-import { d as McpDefinition } from '../../types-qqrmJ736.js';
-import { M as MetricsRecorder } from '../../base-CM-KCpp6.js';
-import 'zod';
-
-type RestListToolsHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;
-declare function createListToolsHandler(mcp: McpDefinition, options?: McpRuntimeOptions): RestListToolsHandler;
-
+import { c as McpDefinition } from "../../types-BYdYYTjk.cjs";
+import { t as MetricsRecorder } from "../../base-DCe0kP79.cjs";
+import { t as McpRuntimeOptions } from "../../authorize-CumVyk7p.cjs";
+import { n as createListToolsHandler, t as RestListToolsHandler } from "../../list-tools-B4TTPEl1.cjs";
+//#region src/protocols/rest/invoke-tool.d.ts
 type RestInvokeToolHandler = (request: Request, toolName: string, recorder?: MetricsRecorder) => Promise<Response>;
 declare function createInvokeToolHandler(mcp: McpDefinition, options?: McpRuntimeOptions): RestInvokeToolHandler;
-
-export { type RestInvokeToolHandler, type RestListToolsHandler, createInvokeToolHandler, createListToolsHandler };
+//#endregion
+export { type RestInvokeToolHandler, type RestListToolsHandler, createInvokeToolHandler, createListToolsHandler };

package/dist/protocols/rest/index.d.ts

@@ -1,12 +1,9 @@
-import { M as McpRuntimeOptions } from '../../authorize-BMeXd_Sh.js';
-import { d as McpDefinition } from '../../types-qqrmJ736.js';
-import { M as MetricsRecorder } from '../../base-CM-KCpp6.js';
-import 'zod';
-
-type RestListToolsHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;
-declare function createListToolsHandler(mcp: McpDefinition, options?: McpRuntimeOptions): RestListToolsHandler;
-
+import { c as McpDefinition } from "../../types-BYdYYTjk.js";
+import { t as MetricsRecorder } from "../../base-DCe0kP79.js";
+import { t as McpRuntimeOptions } from "../../authorize-D6p4-9_D.js";
+import { n as createListToolsHandler, t as RestListToolsHandler } from "../../list-tools-bh6-eqZM.js";
+//#region src/protocols/rest/invoke-tool.d.ts
 type RestInvokeToolHandler = (request: Request, toolName: string, recorder?: MetricsRecorder) => Promise<Response>;
 declare function createInvokeToolHandler(mcp: McpDefinition, options?: McpRuntimeOptions): RestInvokeToolHandler;
-
-export { type RestInvokeToolHandler, type RestListToolsHandler, createInvokeToolHandler, createListToolsHandler };
+//#endregion
+export { type RestInvokeToolHandler, type RestListToolsHandler, createInvokeToolHandler, createListToolsHandler };

package/dist/protocols/rest/index.js

@@ -1,16 +1,3 @@
-import {
-  createInvokeToolHandler
-} from "../../chunk-TJN33K5U.js";
-import {
-  createListToolsHandler
-} from "../../chunk-6SZOFKGH.js";
-import "../../chunk-6QFZYYUV.js";
-import "../../chunk-MA5H6PSF.js";
-import "../../chunk-IFDWUM7L.js";
-import "../../chunk-H37EB22A.js";
-import "../../chunk-6DXGZZA4.js";
-import "../../chunk-ZQXSWTPU.js";
-export {
-  createInvokeToolHandler,
-  createListToolsHandler
-};
+import { n as createListToolsHandler } from "../../list-tools-I8Hvub9P.js";
+import { t as createInvokeToolHandler } from "../../rest-CggWx00c.js";
+export { createInvokeToolHandler, createListToolsHandler };

package/dist/rest-CggWx00c.js

@@ -0,0 +1,117 @@
+import { t as ToolContext } from "./context-CIpPzN7P.js";
+import { d as nowMs, f as JSON_HEADERS, i as createRequestAuthorizer, m as methodNotAllowed, n as withCors, r as assertRestResourceBinding, t as corsPreflightResponse, u as createNoopRecorder } from "./cors-C2n2LxrC.js";
+import { t as extractTextContent } from "./content-D5LJAHyM.js";
+import "./list-tools-I8Hvub9P.js";
+import { getParseErrorMessage, objectFromShape, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";
+//#region src/protocols/rest/invoke-tool.ts
+const MAX_REFLECTED_TOOL_NAME = 256;
+function safeReflectName(name) {
+	const text = String(name);
+	return text.length > MAX_REFLECTED_TOOL_NAME ? `${text.slice(0, MAX_REFLECTED_TOOL_NAME)}…` : text;
+}
+function isEmptyArgs(value) {
+	if (value == null) return true;
+	if (typeof value !== "object" || Array.isArray(value)) return false;
+	return Object.keys(value).length === 0;
+}
+function createInvokeToolHandler(mcp, options = {}) {
+	assertRestResourceBinding(mcp, options);
+	const authorizer = createRequestAuthorizer(mcp, options);
+	const handle = async (request, toolName, recorder) => {
+		const authResult = await authorizer.authorize(request, recorder);
+		if (!authResult.ok) return authResult.response;
+		const endUserId = authResult.auth?.principal.sub;
+		if (request.method !== "POST") return methodNotAllowed("POST, OPTIONS");
+		const tool = mcp.tools.find((t) => t.name === toolName);
+		if (!tool) return new Response(JSON.stringify({ error: `unknown tool: ${safeReflectName(toolName)}` }), {
+			status: 404,
+			headers: JSON_HEADERS
+		});
+		let rawArgs = {};
+		const text = await request.text();
+		if (text) try {
+			rawArgs = JSON.parse(text);
+		} catch {
+			return new Response(JSON.stringify({ error: "invalid JSON body" }), {
+				status: 400,
+				headers: JSON_HEADERS
+			});
+		}
+		let args = rawArgs;
+		if (tool.inputSchema) try {
+			const parsed = await safeParseAsync(objectFromShape(tool.inputSchema), rawArgs);
+			if (!parsed.success) return new Response(JSON.stringify({
+				error: "validation failed",
+				details: getParseErrorMessage(parsed.error)
+			}), {
+				status: 400,
+				headers: JSON_HEADERS
+			});
+			args = parsed.data;
+		} catch {
+			return new Response(JSON.stringify({
+				error: "schema error",
+				tool: toolName
+			}), {
+				status: 500,
+				headers: JSON_HEADERS
+			});
+		}
+		else if (!isEmptyArgs(rawArgs)) return new Response(JSON.stringify({ error: "tool has no inputSchema; expected empty body" }), {
+			status: 400,
+			headers: JSON_HEADERS
+		});
+		let result;
+		const start = nowMs();
+		try {
+			result = await tool.handler(args, new ToolContext(authResult.auth));
+		} catch {
+			await recorder.emit({
+				tool: tool.name,
+				method: "tools/call",
+				outcome: "handler_error",
+				durationMs: nowMs() - start,
+				endUserId
+			});
+			return new Response(JSON.stringify({
+				error: "handler threw",
+				tool: toolName
+			}), {
+				status: 500,
+				headers: JSON_HEADERS
+			});
+		}
+		if (result == null) {
+			await recorder.emit({
+				tool: tool.name,
+				method: "tools/call",
+				outcome: "handler_error",
+				durationMs: nowMs() - start,
+				endUserId
+			});
+			return new Response(JSON.stringify({ error: `tool "${toolName}" returned no result` }), {
+				status: 500,
+				headers: JSON_HEADERS
+			});
+		}
+		await recorder.emit({
+			tool: tool.name,
+			method: "tools/call",
+			outcome: result.isError ? "tool_error" : "ok",
+			durationMs: nowMs() - start,
+			errorText: result.isError ? extractTextContent(result.content) : void 0,
+			endUserId
+		});
+		return Response.json({
+			content: result.content ?? [],
+			structuredContent: result.structuredContent,
+			isError: result.isError
+		});
+	};
+	return async (request, toolName, recorder = createNoopRecorder()) => {
+		if (request.method === "OPTIONS") return corsPreflightResponse("POST, OPTIONS");
+		return withCors(await handle(request, toolName, recorder));
+	};
+}
+//#endregion
+export { createInvokeToolHandler as t };

package/dist/rest-DxhK7-3b.cjs

@@ -0,0 +1,122 @@
+const require_context = require("./context-BweeEcoA.cjs");
+const require_cors = require("./cors-Cga2PWEg.cjs");
+const require_content = require("./content-NCYIGgOb.cjs");
+require("./list-tools-07OV14rK.cjs");
+let _modelcontextprotocol_sdk_server_zod_compat_js = require("@modelcontextprotocol/sdk/server/zod-compat.js");
+//#region src/protocols/rest/invoke-tool.ts
+const MAX_REFLECTED_TOOL_NAME = 256;
+function safeReflectName(name) {
+	const text = String(name);
+	return text.length > MAX_REFLECTED_TOOL_NAME ? `${text.slice(0, MAX_REFLECTED_TOOL_NAME)}…` : text;
+}
+function isEmptyArgs(value) {
+	if (value == null) return true;
+	if (typeof value !== "object" || Array.isArray(value)) return false;
+	return Object.keys(value).length === 0;
+}
+function createInvokeToolHandler(mcp, options = {}) {
+	require_cors.assertRestResourceBinding(mcp, options);
+	const authorizer = require_cors.createRequestAuthorizer(mcp, options);
+	const handle = async (request, toolName, recorder) => {
+		const authResult = await authorizer.authorize(request, recorder);
+		if (!authResult.ok) return authResult.response;
+		const endUserId = authResult.auth?.principal.sub;
+		if (request.method !== "POST") return require_cors.methodNotAllowed("POST, OPTIONS");
+		const tool = mcp.tools.find((t) => t.name === toolName);
+		if (!tool) return new Response(JSON.stringify({ error: `unknown tool: ${safeReflectName(toolName)}` }), {
+			status: 404,
+			headers: require_cors.JSON_HEADERS
+		});
+		let rawArgs = {};
+		const text = await request.text();
+		if (text) try {
+			rawArgs = JSON.parse(text);
+		} catch {
+			return new Response(JSON.stringify({ error: "invalid JSON body" }), {
+				status: 400,
+				headers: require_cors.JSON_HEADERS
+			});
+		}
+		let args = rawArgs;
+		if (tool.inputSchema) try {
+			const parsed = await (0, _modelcontextprotocol_sdk_server_zod_compat_js.safeParseAsync)((0, _modelcontextprotocol_sdk_server_zod_compat_js.objectFromShape)(tool.inputSchema), rawArgs);
+			if (!parsed.success) return new Response(JSON.stringify({
+				error: "validation failed",
+				details: (0, _modelcontextprotocol_sdk_server_zod_compat_js.getParseErrorMessage)(parsed.error)
+			}), {
+				status: 400,
+				headers: require_cors.JSON_HEADERS
+			});
+			args = parsed.data;
+		} catch {
+			return new Response(JSON.stringify({
+				error: "schema error",
+				tool: toolName
+			}), {
+				status: 500,
+				headers: require_cors.JSON_HEADERS
+			});
+		}
+		else if (!isEmptyArgs(rawArgs)) return new Response(JSON.stringify({ error: "tool has no inputSchema; expected empty body" }), {
+			status: 400,
+			headers: require_cors.JSON_HEADERS
+		});
+		let result;
+		const start = require_cors.nowMs();
+		try {
+			result = await tool.handler(args, new require_context.ToolContext(authResult.auth));
+		} catch {
+			await recorder.emit({
+				tool: tool.name,
+				method: "tools/call",
+				outcome: "handler_error",
+				durationMs: require_cors.nowMs() - start,
+				endUserId
+			});
+			return new Response(JSON.stringify({
+				error: "handler threw",
+				tool: toolName
+			}), {
+				status: 500,
+				headers: require_cors.JSON_HEADERS
+			});
+		}
+		if (result == null) {
+			await recorder.emit({
+				tool: tool.name,
+				method: "tools/call",
+				outcome: "handler_error",
+				durationMs: require_cors.nowMs() - start,
+				endUserId
+			});
+			return new Response(JSON.stringify({ error: `tool "${toolName}" returned no result` }), {
+				status: 500,
+				headers: require_cors.JSON_HEADERS
+			});
+		}
+		await recorder.emit({
+			tool: tool.name,
+			method: "tools/call",
+			outcome: result.isError ? "tool_error" : "ok",
+			durationMs: require_cors.nowMs() - start,
+			errorText: result.isError ? require_content.extractTextContent(result.content) : void 0,
+			endUserId
+		});
+		return Response.json({
+			content: result.content ?? [],
+			structuredContent: result.structuredContent,
+			isError: result.isError
+		});
+	};
+	return async (request, toolName, recorder = require_cors.createNoopRecorder()) => {
+		if (request.method === "OPTIONS") return require_cors.corsPreflightResponse("POST, OPTIONS");
+		return require_cors.withCors(await handle(request, toolName, recorder));
+	};
+}
+//#endregion
+Object.defineProperty(exports, "createInvokeToolHandler", {
+	enumerable: true,
+	get: function() {
+		return createInvokeToolHandler;
+	}
+});