@lovable.dev/mcp-js 0.24.0 → 0.25.1

package/README.internal.md

@@ -1,6 +1,6 @@
 # @lovable.dev/mcp-js — internal notes
 
-Architecture rationale, source layout, and dev scripts for contributors. The user-facing docs are in [`README.md`](README.md); release rules and build-system constraints are in [`AGENTS.md`](AGENTS.md). Nothing in this file ships to npm — only `dist`, `package.json`, `README.md`, `LICENSE`, and `CHANGELOG.md` end up in the tarball.
+Architecture rationale, source layout, and dev scripts for contributors. The user-facing docs are in [`README.md`](README.md); release rules and build-system constraints are in [`AGENTS.md`](AGENTS.md). The tarball carries `dist`, `package.json`, `LICENSE`, `CHANGELOG.md`, and every root `README*` (npm force-includes them, this file included) — no source, tests, or examples.
 
 ## Folder meaning
 
@@ -159,6 +159,7 @@ tests/
   stacks/
     tanstack/{handlers,vite}.test.ts
     supabase/{handler,emit,vite}.test.ts
+    supabase/authoring-template.test.ts  # executes the App MCP authoring guides' factory (reads go/api/**, needs a monorepo checkout)
   integration/                       # boots an example app, hits live HTTP
     global-setup.ts                  # spawns example/tanstack on :8080
     tools.test.ts                    # non-OAuth example
@@ -173,7 +174,7 @@ pnpm format:check      # oxfmt --check src/ tests/
 pnpm lint              # format:check + oxlint (one command, both surfaces)
 pnpm lint:fix          # format + oxlint --fix
 pnpm typecheck         # tsgo --noEmit
-pnpm test              # vitest run --project unit  (fast, hermetic)
+pnpm test              # vitest run --project unit  (fast; needs the monorepo checkout — authoring-template.test.ts reads go/api/**)
 pnpm test:watch        # vitest --project unit
 pnpm test:integration:tanstack       # build + install tanstack example + vitest --project integration
 pnpm test:integration:tanstack:oauth # build + install OAuth example + vitest --project integration-oauth

package/dist/{authorize-CumVyk7p.d.cts → authorize-D3zzoTAG.d.cts}

@@ -1,4 +1,4 @@
-import "./types-BYdYYTjk.cjs";
+import "./types-C0Wgm9zp.cjs";
 //#region src/auth/authorize.d.ts
 interface McpRuntimeOptions {
   /**

package/dist/{authorize-D6p4-9_D.d.ts → authorize-Y6Jm8GhR.d.ts}

@@ -1,4 +1,4 @@
-import "./types-BYdYYTjk.js";
+import "./types-C0Wgm9zp.js";
 //#region src/auth/authorize.d.ts
 interface McpRuntimeOptions {
   /**

package/dist/cli/extract-manifest.cjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-const require_package = require("../package-DtnkW7Jc.cjs");
-const require_list_tools = require("../list-tools-BeVzrTT-.cjs");
+const require_package = require("../package-BNwfs02J.cjs");
+const require_list_tools = require("../list-tools-BjmymWv7.cjs");
 const require_fs_errors = require("../fs-errors-CWNzOV75.cjs");
 let node_fs = require("node:fs");
 let node_path = require("node:path");

package/dist/cli/extract-manifest.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { t as version } from "../package-DudvPdrW.js";
-import { t as buildMcpListing } from "../list-tools-BrSIMpBi.js";
+import { t as version } from "../package-RfsGR4Ar.js";
+import { t as buildMcpListing } from "../list-tools-CdgXFtgF.js";
 import { t as isFileMissing } from "../fs-errors-PA2t1TIp.js";
 import { lstatSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname, resolve } from "node:path";

package/dist/{cors-Ftb-tw1d.js → cors-CkVAbFZD.js}

@@ -1,5 +1,5 @@
-import { c as DEFAULT_METRICS_ENDPOINT, i as log, l as resolveMetricsConfig, n as applyLogLevelFromEnv, o as parseSafeUrl, r as describeError, s as trimTrailingSlash, t as LOG_LEVEL_ENV_VAR } from "./logger-2OXtfiIW.js";
-import { t as version } from "./package-DudvPdrW.js";
+import { i as log, n as applyLogLevelFromEnv, o as parseSafeUrl, r as describeError, s as trimTrailingSlash, t as LOG_LEVEL_ENV_VAR, u as resolveMetricsConfig } from "./logger-3-kwsF-5.js";
+import { t as version } from "./package-RfsGR4Ar.js";
 import "./metadata-path-CAkNcfyY.js";
 import { createLocalJWKSet, decodeProtectedHeader, jwtVerify } from "jose";
 //#region src/core/http.ts
@@ -133,7 +133,7 @@ var BaseMetricRecorder = class {
 		this.server = server;
 		this.deps = deps;
 		this.doFetch = deps.fetch ?? (typeof globalThis.fetch === "function" ? globalThis.fetch.bind(globalThis) : void 0);
-		this.usesLovableEndpoint = config.endpoint === DEFAULT_METRICS_ENDPOINT;
+		this.usesLovableEndpoint = config.endpoint === "https://api.lovable.dev/internal/v1/app-mcp-usage" || config.endpoint === "https://api.lovable.dev/v1/app-mcp-usage";
 		const headers = {};
 		if (!this.usesLovableEndpoint) {
 			for (const [key, value] of Object.entries(config.headers)) if (key.toLowerCase() !== "content-type") headers[key] = value;

package/dist/{cors-Y_FmMkXK.cjs → cors-odDrgCEY.cjs}

@@ -1,5 +1,5 @@
-const require_logger = require("./logger-BqPOa_E1.cjs");
-const require_package = require("./package-DtnkW7Jc.cjs");
+const require_logger = require("./logger-BSKbuM66.cjs");
+const require_package = require("./package-BNwfs02J.cjs");
 require("./metadata-path-zd7NSNoa.cjs");
 let jose = require("jose");
 //#region src/core/http.ts
@@ -133,7 +133,7 @@ var BaseMetricRecorder = class {
 		this.server = server;
 		this.deps = deps;
 		this.doFetch = deps.fetch ?? (typeof globalThis.fetch === "function" ? globalThis.fetch.bind(globalThis) : void 0);
-		this.usesLovableEndpoint = config.endpoint === require_logger.DEFAULT_METRICS_ENDPOINT;
+		this.usesLovableEndpoint = config.endpoint === "https://api.lovable.dev/internal/v1/app-mcp-usage" || config.endpoint === "https://api.lovable.dev/v1/app-mcp-usage";
 		const headers = {};
 		if (!this.usesLovableEndpoint) {
 			for (const [key, value] of Object.entries(config.headers)) if (key.toLowerCase() !== "content-type") headers[key] = value;

package/dist/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_logger = require("./logger-BqPOa_E1.cjs");
+const require_logger = require("./logger-BSKbuM66.cjs");
 const require_context = require("./context-BweeEcoA.cjs");
 //#region src/core/define.ts
 function assertUniqueNames(mcp) {

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { C as McpAuthConfig, S as JwtClaims, _ as ZodRawShape, a as EmbeddedResource, b as MetricsOptions, c as McpDefinition, d as ResourceLinkIcon, f as TextContent, g as ToolHandlerResult, h as ToolDefinition, i as EmbeddedBlobResource, l as McpDefinitionInput, m as ToolContent, n as ContentAnnotations, o as EmbeddedTextResource, p as ToolAnnotations, r as ContentBlock, s as ImageContent, t as AudioContent, u as ResourceLink, v as ZodSchema, x as ToolContext, y as MetricsConfig } from "./types-BYdYYTjk.cjs";
+import { C as McpAuthConfig, S as JwtClaims, _ as ZodRawShape, a as EmbeddedResource, b as MetricsOptions, c as McpDefinition, d as ResourceLinkIcon, f as TextContent, g as ToolHandlerResult, h as ToolDefinition, i as EmbeddedBlobResource, l as McpDefinitionInput, m as ToolContent, n as ContentAnnotations, o as EmbeddedTextResource, p as ToolAnnotations, r as ContentBlock, s as ImageContent, t as AudioContent, u as ResourceLink, v as ZodSchema, x as ToolContext, y as MetricsConfig } from "./types-C0Wgm9zp.cjs";
 //#region src/core/define.d.ts
 /**
  * Declare a single MCP tool. Import the result into your MCP definition's

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { C as McpAuthConfig, S as JwtClaims, _ as ZodRawShape, a as EmbeddedResource, b as MetricsOptions, c as McpDefinition, d as ResourceLinkIcon, f as TextContent, g as ToolHandlerResult, h as ToolDefinition, i as EmbeddedBlobResource, l as McpDefinitionInput, m as ToolContent, n as ContentAnnotations, o as EmbeddedTextResource, p as ToolAnnotations, r as ContentBlock, s as ImageContent, t as AudioContent, u as ResourceLink, v as ZodSchema, x as ToolContext, y as MetricsConfig } from "./types-BYdYYTjk.js";
+import { C as McpAuthConfig, S as JwtClaims, _ as ZodRawShape, a as EmbeddedResource, b as MetricsOptions, c as McpDefinition, d as ResourceLinkIcon, f as TextContent, g as ToolHandlerResult, h as ToolDefinition, i as EmbeddedBlobResource, l as McpDefinitionInput, m as ToolContent, n as ContentAnnotations, o as EmbeddedTextResource, p as ToolAnnotations, r as ContentBlock, s as ImageContent, t as AudioContent, u as ResourceLink, v as ZodSchema, x as ToolContext, y as MetricsConfig } from "./types-C0Wgm9zp.js";
 //#region src/core/define.d.ts
 /**
  * Declare a single MCP tool. Import the result into your MCP definition's

package/dist/index.js

@@ -1,4 +1,4 @@
-import { a as setLogLevel, l as resolveMetricsConfig, o as parseSafeUrl, s as trimTrailingSlash } from "./logger-2OXtfiIW.js";
+import { a as setLogLevel, o as parseSafeUrl, s as trimTrailingSlash, u as resolveMetricsConfig } from "./logger-3-kwsF-5.js";
 import { t as ToolContext } from "./context-CIpPzN7P.js";
 //#region src/core/define.ts
 function assertUniqueNames(mcp) {

package/dist/{io-BIvFmJK1.d.cts → io-BlJ298VF.d.cts}

@@ -1,4 +1,4 @@
-import "./list-tools--SBVo58Z.cjs";
+import "./list-tools-Dk-QKfqy.cjs";
 //#region src/manifest/io.d.ts
 /**
  * Shape every MCP Vite plugin exposes on its `api` so `runExtract` can read

package/dist/{io-Bi7DYgft.d.ts → io-CSsqm26s.d.ts}

@@ -1,4 +1,4 @@
-import "./list-tools-Go45Ib1W.js";
+import "./list-tools-DKz6nJQ6.js";
 //#region src/manifest/io.d.ts
 /**
  * Shape every MCP Vite plugin exposes on its `api` so `runExtract` can read

package/dist/{list-tools-BeVzrTT-.cjs → list-tools-BjmymWv7.cjs}

@@ -1,4 +1,4 @@
-const require_cors = require("./cors-Y_FmMkXK.cjs");
+const require_cors = require("./cors-odDrgCEY.cjs");
 let _modelcontextprotocol_sdk_server_zod_compat_js = require("@modelcontextprotocol/sdk/server/zod-compat.js");
 let _modelcontextprotocol_sdk_server_zod_json_schema_compat_js = require("@modelcontextprotocol/sdk/server/zod-json-schema-compat.js");
 //#region src/protocols/rest/list-tools.ts

package/dist/{list-tools-BrSIMpBi.js → list-tools-CdgXFtgF.js}

@@ -1,4 +1,4 @@
-import { i as createRequestAuthorizer, m as methodNotAllowed, n as withCors, p as headResponse, r as assertRestResourceBinding, t as corsPreflightResponse, u as createNoopRecorder } from "./cors-Ftb-tw1d.js";
+import { i as createRequestAuthorizer, m as methodNotAllowed, n as withCors, p as headResponse, r as assertRestResourceBinding, t as corsPreflightResponse, u as createNoopRecorder } from "./cors-CkVAbFZD.js";
 import { objectFromShape } from "@modelcontextprotocol/sdk/server/zod-compat.js";
 import { toJsonSchemaCompat } from "@modelcontextprotocol/sdk/server/zod-json-schema-compat.js";
 //#region src/protocols/rest/list-tools.ts

package/dist/{list-tools-Go45Ib1W.d.ts → list-tools-DKz6nJQ6.d.ts}

@@ -1,6 +1,6 @@
-import { c as McpDefinition } from "./types-BYdYYTjk.js";
+import { c as McpDefinition } from "./types-C0Wgm9zp.js";
 import { t as MetricsRecorder } from "./base-D-dYxK8t.js";
-import { t as McpRuntimeOptions } from "./authorize-D6p4-9_D.js";
+import { t as McpRuntimeOptions } from "./authorize-Y6Jm8GhR.js";
 //#region src/protocols/rest/list-tools.d.ts
 type RestListToolsHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;
 declare function createListToolsHandler(mcp: McpDefinition, options?: McpRuntimeOptions): RestListToolsHandler;

package/dist/{list-tools--SBVo58Z.d.cts → list-tools-Dk-QKfqy.d.cts}

@@ -1,6 +1,6 @@
-import { c as McpDefinition } from "./types-BYdYYTjk.cjs";
+import { c as McpDefinition } from "./types-C0Wgm9zp.cjs";
 import { t as MetricsRecorder } from "./base-D-dYxK8t.cjs";
-import { t as McpRuntimeOptions } from "./authorize-CumVyk7p.cjs";
+import { t as McpRuntimeOptions } from "./authorize-D3zzoTAG.cjs";
 //#region src/protocols/rest/list-tools.d.ts
 type RestListToolsHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;
 declare function createListToolsHandler(mcp: McpDefinition, options?: McpRuntimeOptions): RestListToolsHandler;

package/dist/{logger-2OXtfiIW.js → logger-3-kwsF-5.js}

@@ -1,5 +1,6 @@
 //#region src/metrics/config.ts
-const DEFAULT_METRICS_ENDPOINT = "https://api.lovable.dev/v1/app-mcp-usage";
+const DEFAULT_METRICS_ENDPOINT = "https://api.lovable.dev/internal/v1/app-mcp-usage";
+const LEGACY_METRICS_ENDPOINT = "https://api.lovable.dev/v1/app-mcp-usage";
 const METRICS_API_KEY_ENV_VAR = "LOVABLE_API_KEY";
 /**
 * Validate the ingest endpoint at plugin-construction time so a malformed URL
@@ -21,7 +22,7 @@ function assertMetricsEndpoint(endpoint) {
 */
 function resolveMetricsConfig(config = true) {
 	const options = typeof config === "boolean" ? { enabled: config } : config;
-	const endpoint = options.endpoint ?? "https://api.lovable.dev/v1/app-mcp-usage";
+	const endpoint = options.endpoint ?? "https://api.lovable.dev/internal/v1/app-mcp-usage";
 	assertMetricsEndpoint(endpoint);
 	return Object.freeze({
 		enabled: options.enabled ?? true,
@@ -138,4 +139,4 @@ function describeError(err) {
 	return { value: String(err) };
 }
 //#endregion
-export { setLogLevel as a, DEFAULT_METRICS_ENDPOINT as c, log as i, resolveMetricsConfig as l, applyLogLevelFromEnv as n, parseSafeUrl as o, describeError as r, trimTrailingSlash as s, LOG_LEVEL_ENV_VAR as t };
+export { setLogLevel as a, DEFAULT_METRICS_ENDPOINT as c, log as i, LEGACY_METRICS_ENDPOINT as l, applyLogLevelFromEnv as n, parseSafeUrl as o, describeError as r, trimTrailingSlash as s, LOG_LEVEL_ENV_VAR as t, resolveMetricsConfig as u };

package/dist/{logger-BqPOa_E1.cjs → logger-BSKbuM66.cjs}

@@ -1,5 +1,6 @@
 //#region src/metrics/config.ts
-const DEFAULT_METRICS_ENDPOINT = "https://api.lovable.dev/v1/app-mcp-usage";
+const DEFAULT_METRICS_ENDPOINT = "https://api.lovable.dev/internal/v1/app-mcp-usage";
+const LEGACY_METRICS_ENDPOINT = "https://api.lovable.dev/v1/app-mcp-usage";
 const METRICS_API_KEY_ENV_VAR = "LOVABLE_API_KEY";
 /**
 * Validate the ingest endpoint at plugin-construction time so a malformed URL
@@ -21,7 +22,7 @@ function assertMetricsEndpoint(endpoint) {
 */
 function resolveMetricsConfig(config = true) {
 	const options = typeof config === "boolean" ? { enabled: config } : config;
-	const endpoint = options.endpoint ?? "https://api.lovable.dev/v1/app-mcp-usage";
+	const endpoint = options.endpoint ?? "https://api.lovable.dev/internal/v1/app-mcp-usage";
 	assertMetricsEndpoint(endpoint);
 	return Object.freeze({
 		enabled: options.enabled ?? true,
@@ -144,6 +145,12 @@ Object.defineProperty(exports, "DEFAULT_METRICS_ENDPOINT", {
 		return DEFAULT_METRICS_ENDPOINT;
 	}
 });
+Object.defineProperty(exports, "LEGACY_METRICS_ENDPOINT", {
+	enumerable: true,
+	get: function() {
+		return LEGACY_METRICS_ENDPOINT;
+	}
+});
 Object.defineProperty(exports, "LOG_LEVEL_ENV_VAR", {
 	enumerable: true,
 	get: function() {

package/dist/{mcp-_a39WlhN.cjs → mcp-23wsFJ2_.cjs}

@@ -1,6 +1,6 @@
-const require_logger = require("./logger-BqPOa_E1.cjs");
+const require_logger = require("./logger-BSKbuM66.cjs");
 const require_context = require("./context-BweeEcoA.cjs");
-const require_cors = require("./cors-Y_FmMkXK.cjs");
+const require_cors = require("./cors-odDrgCEY.cjs");
 const require_content = require("./content-NCYIGgOb.cjs");
 let _modelcontextprotocol_sdk_server_mcp_js = require("@modelcontextprotocol/sdk/server/mcp.js");
 let _modelcontextprotocol_sdk_server_webStandardStreamableHttp_js = require("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js");

package/dist/{mcp-BarAJ9N0.js → mcp-Cul2AMOn.js}

@@ -1,6 +1,6 @@
-import { i as log, r as describeError } from "./logger-2OXtfiIW.js";
+import { i as log, r as describeError } from "./logger-3-kwsF-5.js";
 import { t as ToolContext } from "./context-CIpPzN7P.js";
-import { d as nowMs, i as createRequestAuthorizer, n as withCors, t as corsPreflightResponse, u as createNoopRecorder } from "./cors-Ftb-tw1d.js";
+import { d as nowMs, i as createRequestAuthorizer, n as withCors, t as corsPreflightResponse, u as createNoopRecorder } from "./cors-CkVAbFZD.js";
 import { t as extractTextContent } from "./content-D5LJAHyM.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";

package/dist/{package-DtnkW7Jc.cjs → package-BNwfs02J.cjs}

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.24.0";
+var version = "0.25.1";
 //#endregion
 Object.defineProperty(exports, "version", {
 	enumerable: true,

package/dist/{package-DudvPdrW.js → package-RfsGR4Ar.js}

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.24.0";
+var version = "0.25.1";
 //#endregion
 export { version as t };

package/dist/protocols/mcp/index.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_mcp = require("../../mcp-_a39WlhN.cjs");
+const require_mcp = require("../../mcp-23wsFJ2_.cjs");
 exports.createMcpProtocolHandler = require_mcp.createMcpProtocolHandler;

package/dist/protocols/mcp/index.d.cts

@@ -1,6 +1,6 @@
-import { c as McpDefinition } from "../../types-BYdYYTjk.cjs";
+import { c as McpDefinition } from "../../types-C0Wgm9zp.cjs";
 import { t as MetricsRecorder } from "../../base-D-dYxK8t.cjs";
-import { t as McpRuntimeOptions } from "../../authorize-CumVyk7p.cjs";
+import { t as McpRuntimeOptions } from "../../authorize-D3zzoTAG.cjs";
 //#region src/protocols/mcp/protocol.d.ts
 type McpProtocolHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;
 /**

package/dist/protocols/mcp/index.d.ts

@@ -1,6 +1,6 @@
-import { c as McpDefinition } from "../../types-BYdYYTjk.js";
+import { c as McpDefinition } from "../../types-C0Wgm9zp.js";
 import { t as MetricsRecorder } from "../../base-D-dYxK8t.js";
-import { t as McpRuntimeOptions } from "../../authorize-D6p4-9_D.js";
+import { t as McpRuntimeOptions } from "../../authorize-Y6Jm8GhR.js";
 //#region src/protocols/mcp/protocol.d.ts
 type McpProtocolHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;
 /**

package/dist/protocols/mcp/index.js

@@ -1,2 +1,2 @@
-import { t as createMcpProtocolHandler } from "../../mcp-BarAJ9N0.js";
+import { t as createMcpProtocolHandler } from "../../mcp-Cul2AMOn.js";
 export { createMcpProtocolHandler };

package/dist/protocols/oauth-metadata.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_logger = require("../logger-BqPOa_E1.cjs");
-const require_cors = require("../cors-Y_FmMkXK.cjs");
+const require_logger = require("../logger-BSKbuM66.cjs");
+const require_cors = require("../cors-odDrgCEY.cjs");
 //#region src/protocols/oauth-metadata.ts
 function notFound() {
 	return require_cors.withCors(new Response(JSON.stringify({ error: "not found" }), {

package/dist/protocols/oauth-metadata.d.cts

@@ -1,5 +1,5 @@
-import { c as McpDefinition } from "../types-BYdYYTjk.cjs";
-import { t as McpRuntimeOptions } from "../authorize-CumVyk7p.cjs";
+import { c as McpDefinition } from "../types-C0Wgm9zp.cjs";
+import { t as McpRuntimeOptions } from "../authorize-D3zzoTAG.cjs";
 //#region src/protocols/oauth-metadata.d.ts
 type OAuthProtectedResourceMetadataHandler = (request: Request) => Promise<Response>;
 declare function createOAuthProtectedResourceMetadataHandler(mcp: McpDefinition, options?: McpRuntimeOptions): OAuthProtectedResourceMetadataHandler;

package/dist/protocols/oauth-metadata.d.ts

@@ -1,5 +1,5 @@
-import { c as McpDefinition } from "../types-BYdYYTjk.js";
-import { t as McpRuntimeOptions } from "../authorize-D6p4-9_D.js";
+import { c as McpDefinition } from "../types-C0Wgm9zp.js";
+import { t as McpRuntimeOptions } from "../authorize-Y6Jm8GhR.js";
 //#region src/protocols/oauth-metadata.d.ts
 type OAuthProtectedResourceMetadataHandler = (request: Request) => Promise<Response>;
 declare function createOAuthProtectedResourceMetadataHandler(mcp: McpDefinition, options?: McpRuntimeOptions): OAuthProtectedResourceMetadataHandler;

package/dist/protocols/oauth-metadata.js

@@ -1,5 +1,5 @@
-import { i as log, r as describeError } from "../logger-2OXtfiIW.js";
-import { a as getOAuthRuntime, c as resolveProtectedResource, f as JSON_HEADERS, m as methodNotAllowed, n as withCors, o as oauthConfigurationErrorResponse, p as headResponse, t as corsPreflightResponse } from "../cors-Ftb-tw1d.js";
+import { i as log, r as describeError } from "../logger-3-kwsF-5.js";
+import { a as getOAuthRuntime, c as resolveProtectedResource, f as JSON_HEADERS, m as methodNotAllowed, n as withCors, o as oauthConfigurationErrorResponse, p as headResponse, t as corsPreflightResponse } from "../cors-CkVAbFZD.js";
 //#region src/protocols/oauth-metadata.ts
 function notFound() {
 	return withCors(new Response(JSON.stringify({ error: "not found" }), {

package/dist/protocols/rest/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_list_tools = require("../../list-tools-BeVzrTT-.cjs");
-const require_rest = require("../../rest-C9kWgxK5.cjs");
+const require_list_tools = require("../../list-tools-BjmymWv7.cjs");
+const require_rest = require("../../rest-BmhntVZo.cjs");
 exports.createInvokeToolHandler = require_rest.createInvokeToolHandler;
 exports.createListToolsHandler = require_list_tools.createListToolsHandler;

package/dist/protocols/rest/index.d.cts

@@ -1,7 +1,7 @@
-import { c as McpDefinition } from "../../types-BYdYYTjk.cjs";
+import { c as McpDefinition } from "../../types-C0Wgm9zp.cjs";
 import { t as MetricsRecorder } from "../../base-D-dYxK8t.cjs";
-import { t as McpRuntimeOptions } from "../../authorize-CumVyk7p.cjs";
-import { n as createListToolsHandler, t as RestListToolsHandler } from "../../list-tools--SBVo58Z.cjs";
+import { t as McpRuntimeOptions } from "../../authorize-D3zzoTAG.cjs";
+import { n as createListToolsHandler, t as RestListToolsHandler } from "../../list-tools-Dk-QKfqy.cjs";
 //#region src/protocols/rest/invoke-tool.d.ts
 type RestInvokeToolHandler = (request: Request, toolName: string, recorder?: MetricsRecorder) => Promise<Response>;
 declare function createInvokeToolHandler(mcp: McpDefinition, options?: McpRuntimeOptions): RestInvokeToolHandler;

package/dist/protocols/rest/index.d.ts

@@ -1,7 +1,7 @@
-import { c as McpDefinition } from "../../types-BYdYYTjk.js";
+import { c as McpDefinition } from "../../types-C0Wgm9zp.js";
 import { t as MetricsRecorder } from "../../base-D-dYxK8t.js";
-import { t as McpRuntimeOptions } from "../../authorize-D6p4-9_D.js";
-import { n as createListToolsHandler, t as RestListToolsHandler } from "../../list-tools-Go45Ib1W.js";
+import { t as McpRuntimeOptions } from "../../authorize-Y6Jm8GhR.js";
+import { n as createListToolsHandler, t as RestListToolsHandler } from "../../list-tools-DKz6nJQ6.js";
 //#region src/protocols/rest/invoke-tool.d.ts
 type RestInvokeToolHandler = (request: Request, toolName: string, recorder?: MetricsRecorder) => Promise<Response>;
 declare function createInvokeToolHandler(mcp: McpDefinition, options?: McpRuntimeOptions): RestInvokeToolHandler;

package/dist/protocols/rest/index.js

@@ -1,3 +1,3 @@
-import { n as createListToolsHandler } from "../../list-tools-BrSIMpBi.js";
-import { t as createInvokeToolHandler } from "../../rest-Be8uOb6r.js";
+import { n as createListToolsHandler } from "../../list-tools-CdgXFtgF.js";
+import { t as createInvokeToolHandler } from "../../rest-CuWe1DJb.js";
 export { createInvokeToolHandler, createListToolsHandler };

package/dist/{rest-C9kWgxK5.cjs → rest-BmhntVZo.cjs}

@@ -1,7 +1,7 @@
 const require_context = require("./context-BweeEcoA.cjs");
-const require_cors = require("./cors-Y_FmMkXK.cjs");
+const require_cors = require("./cors-odDrgCEY.cjs");
 const require_content = require("./content-NCYIGgOb.cjs");
-require("./list-tools-BeVzrTT-.cjs");
+require("./list-tools-BjmymWv7.cjs");
 let _modelcontextprotocol_sdk_server_zod_compat_js = require("@modelcontextprotocol/sdk/server/zod-compat.js");
 //#region src/protocols/rest/invoke-tool.ts
 const MAX_REFLECTED_TOOL_NAME = 256;

package/dist/{rest-Be8uOb6r.js → rest-CuWe1DJb.js}

@@ -1,7 +1,7 @@
 import { t as ToolContext } from "./context-CIpPzN7P.js";
-import { d as nowMs, f as JSON_HEADERS, i as createRequestAuthorizer, m as methodNotAllowed, n as withCors, r as assertRestResourceBinding, t as corsPreflightResponse, u as createNoopRecorder } from "./cors-Ftb-tw1d.js";
+import { d as nowMs, f as JSON_HEADERS, i as createRequestAuthorizer, m as methodNotAllowed, n as withCors, r as assertRestResourceBinding, t as corsPreflightResponse, u as createNoopRecorder } from "./cors-CkVAbFZD.js";
 import { t as extractTextContent } from "./content-D5LJAHyM.js";
-import "./list-tools-BrSIMpBi.js";
+import "./list-tools-CdgXFtgF.js";
 import { getParseErrorMessage, objectFromShape, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";
 //#region src/protocols/rest/invoke-tool.ts
 const MAX_REFLECTED_TOOL_NAME = 256;

package/dist/stacks/supabase/index.cjs

@@ -1,11 +1,11 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_logger = require("../../logger-BqPOa_E1.cjs");
-const require_cors = require("../../cors-Y_FmMkXK.cjs");
+const require_logger = require("../../logger-BSKbuM66.cjs");
+const require_cors = require("../../cors-odDrgCEY.cjs");
 const require_metadata_path = require("../../metadata-path-zd7NSNoa.cjs");
-const require_mcp = require("../../mcp-_a39WlhN.cjs");
+const require_mcp = require("../../mcp-23wsFJ2_.cjs");
 const require_protocols_oauth_metadata = require("../../protocols/oauth-metadata.cjs");
-const require_list_tools = require("../../list-tools-BeVzrTT-.cjs");
-const require_rest = require("../../rest-C9kWgxK5.cjs");
+const require_list_tools = require("../../list-tools-BjmymWv7.cjs");
+const require_rest = require("../../rest-BmhntVZo.cjs");
 const require_forwarded = require("../../forwarded-Pi8Hs5Ps.cjs");
 const require_paths = require("../../paths-OP318a6c.cjs");
 //#region src/stacks/supabase/handler.ts

package/dist/stacks/supabase/index.d.cts

@@ -1,4 +1,4 @@
-import { c as McpDefinition } from "../../types-BYdYYTjk.cjs";
+import { c as McpDefinition } from "../../types-C0Wgm9zp.cjs";
 //#region src/stacks/supabase/handler.d.ts
 type SupabaseHandler = (request: Request) => Promise<Response>;
 interface SupabaseHandlerOptions {

package/dist/stacks/supabase/index.d.ts

@@ -1,4 +1,4 @@
-import { c as McpDefinition } from "../../types-BYdYYTjk.js";
+import { c as McpDefinition } from "../../types-C0Wgm9zp.js";
 //#region src/stacks/supabase/handler.d.ts
 type SupabaseHandler = (request: Request) => Promise<Response>;
 interface SupabaseHandlerOptions {

package/dist/stacks/supabase/index.js

@@ -1,10 +1,10 @@
-import { s as trimTrailingSlash } from "../../logger-2OXtfiIW.js";
-import { l as createRecorderForRuntime, s as assertResourcePathShape } from "../../cors-Ftb-tw1d.js";
+import { s as trimTrailingSlash } from "../../logger-3-kwsF-5.js";
+import { l as createRecorderForRuntime, s as assertResourcePathShape } from "../../cors-CkVAbFZD.js";
 import { t as OAUTH_PROTECTED_RESOURCE_METADATA_PATH } from "../../metadata-path-CAkNcfyY.js";
-import { t as createMcpProtocolHandler } from "../../mcp-BarAJ9N0.js";
+import { t as createMcpProtocolHandler } from "../../mcp-Cul2AMOn.js";
 import { createOAuthProtectedResourceMetadataHandler } from "../../protocols/oauth-metadata.js";
-import { n as createListToolsHandler } from "../../list-tools-BrSIMpBi.js";
-import { t as createInvokeToolHandler } from "../../rest-Be8uOb6r.js";
+import { n as createListToolsHandler } from "../../list-tools-CdgXFtgF.js";
+import { t as createInvokeToolHandler } from "../../rest-CuWe1DJb.js";
 import { t as applyForwardedOrigin } from "../../forwarded--h4efJy-.js";
 import { n as assertFunctionName, t as FUNCTIONS_MOUNT_PREFIX } from "../../paths-IS65L6TA.js";
 //#region src/stacks/supabase/handler.ts

package/dist/stacks/supabase/vite.cjs

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_package = require("../../package-DtnkW7Jc.cjs");
+const require_package = require("../../package-BNwfs02J.cjs");
 const require_fs_errors = require("../../fs-errors-CWNzOV75.cjs");
 const require_supabase_config = require("../../supabase-config-Dz7dnUv0.cjs");
 const require_paths = require("../../paths-OP318a6c.cjs");

package/dist/stacks/supabase/vite.d.cts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-BIvFmJK1.cjs";
+import { t as McpPluginApi } from "../../io-BlJ298VF.cjs";
 import { Plugin } from "vite";
 //#region src/stacks/supabase/vite.d.ts
 interface McpPluginOptions {

package/dist/stacks/supabase/vite.d.ts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-Bi7DYgft.js";
+import { t as McpPluginApi } from "../../io-CSsqm26s.js";
 import { Plugin } from "vite";
 //#region src/stacks/supabase/vite.d.ts
 interface McpPluginOptions {

package/dist/stacks/supabase/vite.js

@@ -1,4 +1,4 @@
-import { t as version } from "../../package-DudvPdrW.js";
+import { t as version } from "../../package-RfsGR4Ar.js";
 import { t as isFileMissing } from "../../fs-errors-PA2t1TIp.js";
 import { t as readSupabaseProjectRef } from "../../supabase-config-CakTU8YF.js";
 import { n as assertFunctionName, t as FUNCTIONS_MOUNT_PREFIX } from "../../paths-IS65L6TA.js";

package/dist/stacks/tanstack/index.cjs

@@ -1,9 +1,9 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_cors = require("../../cors-Y_FmMkXK.cjs");
-const require_mcp = require("../../mcp-_a39WlhN.cjs");
+const require_cors = require("../../cors-odDrgCEY.cjs");
+const require_mcp = require("../../mcp-23wsFJ2_.cjs");
 const require_protocols_oauth_metadata = require("../../protocols/oauth-metadata.cjs");
-const require_list_tools = require("../../list-tools-BeVzrTT-.cjs");
-const require_rest = require("../../rest-C9kWgxK5.cjs");
+const require_list_tools = require("../../list-tools-BjmymWv7.cjs");
+const require_rest = require("../../rest-BmhntVZo.cjs");
 const require_forwarded = require("../../forwarded-Pi8Hs5Ps.cjs");
 //#region src/stacks/tanstack/handlers.ts
 const STACK = "tanstack";

package/dist/stacks/tanstack/index.d.cts

@@ -1,5 +1,5 @@
-import { c as McpDefinition } from "../../types-BYdYYTjk.cjs";
-import { t as McpRuntimeOptions } from "../../authorize-CumVyk7p.cjs";
+import { c as McpDefinition } from "../../types-C0Wgm9zp.cjs";
+import { t as McpRuntimeOptions } from "../../authorize-D3zzoTAG.cjs";
 //#region src/stacks/tanstack/handlers.d.ts
 interface TanStackRouteCtx {
   request: Request;

package/dist/stacks/tanstack/index.d.ts

@@ -1,5 +1,5 @@
-import { c as McpDefinition } from "../../types-BYdYYTjk.js";
-import { t as McpRuntimeOptions } from "../../authorize-D6p4-9_D.js";
+import { c as McpDefinition } from "../../types-C0Wgm9zp.js";
+import { t as McpRuntimeOptions } from "../../authorize-Y6Jm8GhR.js";
 //#region src/stacks/tanstack/handlers.d.ts
 interface TanStackRouteCtx {
   request: Request;

package/dist/stacks/tanstack/index.js

@@ -1,8 +1,8 @@
-import { l as createRecorderForRuntime } from "../../cors-Ftb-tw1d.js";
-import { t as createMcpProtocolHandler } from "../../mcp-BarAJ9N0.js";
+import { l as createRecorderForRuntime } from "../../cors-CkVAbFZD.js";
+import { t as createMcpProtocolHandler } from "../../mcp-Cul2AMOn.js";
 import { createOAuthProtectedResourceMetadataHandler } from "../../protocols/oauth-metadata.js";
-import { n as createListToolsHandler } from "../../list-tools-BrSIMpBi.js";
-import { t as createInvokeToolHandler } from "../../rest-Be8uOb6r.js";
+import { n as createListToolsHandler } from "../../list-tools-CdgXFtgF.js";
+import { t as createInvokeToolHandler } from "../../rest-CuWe1DJb.js";
 import { t as applyForwardedOrigin } from "../../forwarded--h4efJy-.js";
 //#region src/stacks/tanstack/handlers.ts
 const STACK = "tanstack";

package/dist/stacks/tanstack/vite.d.cts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-BIvFmJK1.cjs";
+import { t as McpPluginApi } from "../../io-BlJ298VF.cjs";
 import { Plugin } from "vite";
 //#region src/stacks/tanstack/vite.d.ts
 interface McpPluginOptions {

package/dist/stacks/tanstack/vite.d.ts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-Bi7DYgft.js";
+import { t as McpPluginApi } from "../../io-CSsqm26s.js";
 import { Plugin } from "vite";
 //#region src/stacks/tanstack/vite.d.ts
 interface McpPluginOptions {

package/dist/{types-BYdYYTjk.d.cts → types-C0Wgm9zp.d.cts}

@@ -128,7 +128,7 @@ interface MetricsOptions {
   enabled?: boolean;
   /** OTLP/HTTP (JSON) logs URL to POST each invocation to — the default Lovable
    *  route or any OTLP collector. Must be an absolute http(s) URL.
-   *  @default "https://api.lovable.dev/v1/app-mcp-usage" */
+   *  @default "https://api.lovable.dev/internal/v1/app-mcp-usage" */
   endpoint?: string;
   /** Extra request headers — e.g. the auth token for a private OTLP collector.
    *  Sent verbatim with every request (and baked into the build output, so source

package/dist/{types-BYdYYTjk.d.ts → types-C0Wgm9zp.d.ts}

@@ -128,7 +128,7 @@ interface MetricsOptions {
   enabled?: boolean;
   /** OTLP/HTTP (JSON) logs URL to POST each invocation to — the default Lovable
    *  route or any OTLP collector. Must be an absolute http(s) URL.
-   *  @default "https://api.lovable.dev/v1/app-mcp-usage" */
+   *  @default "https://api.lovable.dev/internal/v1/app-mcp-usage" */
   endpoint?: string;
   /** Extra request headers — e.g. the auth token for a private OTLP collector.
    *  Sent verbatim with every request (and baked into the build output, so source

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovable.dev/mcp-js",
-  "version": "0.24.0",
+  "version": "0.25.1",
   "description": "Author MCP servers for Lovable apps. Declare tools with defineTool, register them in defineMcp, and a framework adapter (TanStack or Supabase Edge Functions) emits the route(s) at build time.",
   "type": "module",
   "repository": {