@lovable.dev/mcp-js 0.26.2 → 0.26.3

package/dist/cli/extract-manifest.cjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-const require_package = require("../package-CBvVzH3w.cjs");
-const require_list_tools = require("../list-tools-ka32VIXt.cjs");
+const require_package = require("../package-oSicfX7m.cjs");
+const require_list_tools = require("../list-tools-wQ13O3WE.cjs");
 const require_fs_errors = require("../fs-errors-CWNzOV75.cjs");
 let node_fs = require("node:fs");
 let node_path = require("node:path");

package/dist/cli/extract-manifest.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { t as version } from "../package-Bbg8XwRW.js";
-import { t as buildMcpListing } from "../list-tools-DCs034XG.js";
+import { t as version } from "../package-Cr1oDeFn.js";
+import { t as buildMcpListing } from "../list-tools-CTtFfDLi.js";
 import { t as isFileMissing } from "../fs-errors-PA2t1TIp.js";
 import { lstatSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname, resolve } from "node:path";

package/dist/{cors-DPRJFY-U.cjs → cors-CzTj3-nh.cjs}

@@ -1,5 +1,5 @@
 const require_logger = require("./logger-BSKbuM66.cjs");
-const require_package = require("./package-CBvVzH3w.cjs");
+const require_package = require("./package-oSicfX7m.cjs");
 require("./metadata-path-zd7NSNoa.cjs");
 let jose = require("jose");
 //#region src/core/http.ts
@@ -17,7 +17,8 @@ function methodNotAllowed(allow) {
 		status: 405,
 		headers: {
 			...JSON_HEADERS,
-			Allow: allow
+			Allow: allow,
+			"Cache-Control": "no-store"
 		}
 	});
 }

package/dist/{cors-DnU41czH.js → cors-D1m2Ud44.js}

@@ -1,5 +1,5 @@
 import { i as log, n as applyLogLevelFromEnv, o as parseSafeUrl, r as describeError, s as trimTrailingSlash, t as LOG_LEVEL_ENV_VAR, u as resolveMetricsConfig } from "./logger-3-kwsF-5.js";
-import { t as version } from "./package-Bbg8XwRW.js";
+import { t as version } from "./package-Cr1oDeFn.js";
 import "./metadata-path-CAkNcfyY.js";
 import { createLocalJWKSet, decodeProtectedHeader, jwtVerify } from "jose";
 //#region src/core/http.ts
@@ -17,7 +17,8 @@ function methodNotAllowed(allow) {
 		status: 405,
 		headers: {
 			...JSON_HEADERS,
-			Allow: allow
+			Allow: allow,
+			"Cache-Control": "no-store"
 		}
 	});
 }

package/dist/{list-tools-DCs034XG.js → list-tools-CTtFfDLi.js}

@@ -1,4 +1,4 @@
-import { i as createRequestAuthorizer, m as methodNotAllowed, n as withCors, p as headResponse, r as assertRestResourceBinding, t as corsPreflightResponse, u as createNoopRecorder } from "./cors-DnU41czH.js";
+import { i as createRequestAuthorizer, m as methodNotAllowed, n as withCors, p as headResponse, r as assertRestResourceBinding, t as corsPreflightResponse, u as createNoopRecorder } from "./cors-D1m2Ud44.js";
 import { objectFromShape } from "@modelcontextprotocol/sdk/server/zod-compat.js";
 import { toJsonSchemaCompat } from "@modelcontextprotocol/sdk/server/zod-json-schema-compat.js";
 //#region src/protocols/rest/list-tools.ts

package/dist/{list-tools-ka32VIXt.cjs → list-tools-wQ13O3WE.cjs}

@@ -1,4 +1,4 @@
-const require_cors = require("./cors-DPRJFY-U.cjs");
+const require_cors = require("./cors-CzTj3-nh.cjs");
 let _modelcontextprotocol_sdk_server_zod_compat_js = require("@modelcontextprotocol/sdk/server/zod-compat.js");
 let _modelcontextprotocol_sdk_server_zod_json_schema_compat_js = require("@modelcontextprotocol/sdk/server/zod-json-schema-compat.js");
 //#region src/protocols/rest/list-tools.ts

package/dist/{mcp-C9fh9I8u.cjs → mcp-CG_9H8CN.cjs}

@@ -1,6 +1,6 @@
 const require_logger = require("./logger-BSKbuM66.cjs");
 const require_errors = require("./errors-CN6Da8iz.cjs");
-const require_cors = require("./cors-DPRJFY-U.cjs");
+const require_cors = require("./cors-CzTj3-nh.cjs");
 const require_content = require("./content-NCYIGgOb.cjs");
 let _modelcontextprotocol_sdk_server_mcp_js = require("@modelcontextprotocol/sdk/server/mcp.js");
 let _modelcontextprotocol_sdk_server_webStandardStreamableHttp_js = require("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js");
@@ -16,7 +16,10 @@ function statelessMethodNotAllowed() {
 		}
 	}, {
 		status: 405,
-		headers: { Allow: STATELESS_ALLOW_METHODS }
+		headers: {
+			Allow: STATELESS_ALLOW_METHODS,
+			"Cache-Control": "no-store"
+		}
 	});
 }
 /**
@@ -98,9 +101,7 @@ function adaptToolToSdkCallback(tool, auth, recorder) {
 */
 function createMcpProtocolHandler(mcp, options = {}) {
 	const authorizer = require_cors.createRequestAuthorizer(mcp, options);
-	const handle = async (request, recorder) => {
-		const authResult = await authorizer.authorize(request, recorder);
-		if (!authResult.ok) return authResult.response;
+	const handle = async (request, authResult, recorder) => {
 		try {
 			const server = new _modelcontextprotocol_sdk_server_mcp_js.McpServer({
 				name: mcp.name,
@@ -141,8 +142,10 @@ function createMcpProtocolHandler(mcp, options = {}) {
 	};
 	return async (request, recorder = require_cors.createNoopRecorder()) => {
 		if (request.method === "OPTIONS") return require_cors.corsPreflightResponse(STATELESS_ALLOW_METHODS);
+		const authResult = await authorizer.authorize(request, recorder);
+		if (!authResult.ok) return require_cors.withCors(authResult.response);
 		if (request.method !== "POST") return require_cors.withCors(statelessMethodNotAllowed());
-		return require_cors.withCors(await handle(request, recorder));
+		return require_cors.withCors(await handle(request, authResult, recorder));
 	};
 }
 //#endregion

package/dist/{mcp-DlcYgsv9.js → mcp-DlbNiP7o.js}

@@ -1,6 +1,6 @@
 import { i as log, r as describeError } from "./logger-3-kwsF-5.js";
 import { i as ToolContext, n as errorSummary, r as resolveToolErrorMessage } from "./errors-DSe96Ffd.js";
-import { d as nowMs, i as createRequestAuthorizer, n as withCors, t as corsPreflightResponse, u as createNoopRecorder } from "./cors-DnU41czH.js";
+import { d as nowMs, i as createRequestAuthorizer, n as withCors, t as corsPreflightResponse, u as createNoopRecorder } from "./cors-D1m2Ud44.js";
 import { t as extractTextContent } from "./content-D5LJAHyM.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
@@ -16,7 +16,10 @@ function statelessMethodNotAllowed() {
 		}
 	}, {
 		status: 405,
-		headers: { Allow: STATELESS_ALLOW_METHODS }
+		headers: {
+			Allow: STATELESS_ALLOW_METHODS,
+			"Cache-Control": "no-store"
+		}
 	});
 }
 /**
@@ -98,9 +101,7 @@ function adaptToolToSdkCallback(tool, auth, recorder) {
 */
 function createMcpProtocolHandler(mcp, options = {}) {
 	const authorizer = createRequestAuthorizer(mcp, options);
-	const handle = async (request, recorder) => {
-		const authResult = await authorizer.authorize(request, recorder);
-		if (!authResult.ok) return authResult.response;
+	const handle = async (request, authResult, recorder) => {
 		try {
 			const server = new McpServer({
 				name: mcp.name,
@@ -141,8 +142,10 @@ function createMcpProtocolHandler(mcp, options = {}) {
 	};
 	return async (request, recorder = createNoopRecorder()) => {
 		if (request.method === "OPTIONS") return corsPreflightResponse(STATELESS_ALLOW_METHODS);
+		const authResult = await authorizer.authorize(request, recorder);
+		if (!authResult.ok) return withCors(authResult.response);
 		if (request.method !== "POST") return withCors(statelessMethodNotAllowed());
-		return withCors(await handle(request, recorder));
+		return withCors(await handle(request, authResult, recorder));
 	};
 }
 //#endregion

package/dist/{package-Bbg8XwRW.js → package-Cr1oDeFn.js}

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.26.2";
+var version = "0.26.3";
 //#endregion
 export { version as t };

package/dist/{package-CBvVzH3w.cjs → package-oSicfX7m.cjs}

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.26.2";
+var version = "0.26.3";
 //#endregion
 Object.defineProperty(exports, "version", {
 	enumerable: true,

package/dist/protocols/mcp/index.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_mcp = require("../../mcp-C9fh9I8u.cjs");
+const require_mcp = require("../../mcp-CG_9H8CN.cjs");
 exports.createMcpProtocolHandler = require_mcp.createMcpProtocolHandler;

package/dist/protocols/mcp/index.js

@@ -1,2 +1,2 @@
-import { t as createMcpProtocolHandler } from "../../mcp-DlcYgsv9.js";
+import { t as createMcpProtocolHandler } from "../../mcp-DlbNiP7o.js";
 export { createMcpProtocolHandler };

package/dist/protocols/oauth-metadata.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_logger = require("../logger-BSKbuM66.cjs");
-const require_cors = require("../cors-DPRJFY-U.cjs");
+const require_cors = require("../cors-CzTj3-nh.cjs");
 //#region src/protocols/oauth-metadata.ts
 function notFound() {
 	return require_cors.withCors(new Response(JSON.stringify({ error: "not found" }), {

package/dist/protocols/oauth-metadata.js

@@ -1,5 +1,5 @@
 import { i as log, r as describeError } from "../logger-3-kwsF-5.js";
-import { a as getOAuthRuntime, c as resolveProtectedResource, f as JSON_HEADERS, m as methodNotAllowed, n as withCors, o as oauthConfigurationErrorResponse, p as headResponse, t as corsPreflightResponse } from "../cors-DnU41czH.js";
+import { a as getOAuthRuntime, c as resolveProtectedResource, f as JSON_HEADERS, m as methodNotAllowed, n as withCors, o as oauthConfigurationErrorResponse, p as headResponse, t as corsPreflightResponse } from "../cors-D1m2Ud44.js";
 //#region src/protocols/oauth-metadata.ts
 function notFound() {
 	return withCors(new Response(JSON.stringify({ error: "not found" }), {

package/dist/protocols/rest/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_list_tools = require("../../list-tools-ka32VIXt.cjs");
-const require_rest = require("../../rest-BpFG5VRY.cjs");
+const require_list_tools = require("../../list-tools-wQ13O3WE.cjs");
+const require_rest = require("../../rest-B9OtLlIc.cjs");
 exports.createInvokeToolHandler = require_rest.createInvokeToolHandler;
 exports.createListToolsHandler = require_list_tools.createListToolsHandler;

package/dist/protocols/rest/index.js

@@ -1,3 +1,3 @@
-import { n as createListToolsHandler } from "../../list-tools-DCs034XG.js";
-import { t as createInvokeToolHandler } from "../../rest-Di-HJGi6.js";
+import { n as createListToolsHandler } from "../../list-tools-CTtFfDLi.js";
+import { t as createInvokeToolHandler } from "../../rest-BTK8v5-l.js";
 export { createInvokeToolHandler, createListToolsHandler };

package/dist/{rest-BpFG5VRY.cjs → rest-B9OtLlIc.cjs}

@@ -1,7 +1,7 @@
 const require_errors = require("./errors-CN6Da8iz.cjs");
-const require_cors = require("./cors-DPRJFY-U.cjs");
+const require_cors = require("./cors-CzTj3-nh.cjs");
 const require_content = require("./content-NCYIGgOb.cjs");
-require("./list-tools-ka32VIXt.cjs");
+require("./list-tools-wQ13O3WE.cjs");
 let _modelcontextprotocol_sdk_server_zod_compat_js = require("@modelcontextprotocol/sdk/server/zod-compat.js");
 //#region src/protocols/rest/invoke-tool.ts
 const MAX_REFLECTED_TOOL_NAME = 256;

package/dist/{rest-Di-HJGi6.js → rest-BTK8v5-l.js}

@@ -1,7 +1,7 @@
 import { i as ToolContext, n as errorSummary, r as resolveToolErrorMessage } from "./errors-DSe96Ffd.js";
-import { d as nowMs, f as JSON_HEADERS, i as createRequestAuthorizer, m as methodNotAllowed, n as withCors, r as assertRestResourceBinding, t as corsPreflightResponse, u as createNoopRecorder } from "./cors-DnU41czH.js";
+import { d as nowMs, f as JSON_HEADERS, i as createRequestAuthorizer, m as methodNotAllowed, n as withCors, r as assertRestResourceBinding, t as corsPreflightResponse, u as createNoopRecorder } from "./cors-D1m2Ud44.js";
 import { t as extractTextContent } from "./content-D5LJAHyM.js";
-import "./list-tools-DCs034XG.js";
+import "./list-tools-CTtFfDLi.js";
 import { getParseErrorMessage, objectFromShape, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";
 //#region src/protocols/rest/invoke-tool.ts
 const MAX_REFLECTED_TOOL_NAME = 256;

package/dist/stacks/supabase/index.cjs

@@ -1,11 +1,11 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_logger = require("../../logger-BSKbuM66.cjs");
-const require_cors = require("../../cors-DPRJFY-U.cjs");
+const require_cors = require("../../cors-CzTj3-nh.cjs");
 const require_metadata_path = require("../../metadata-path-zd7NSNoa.cjs");
-const require_mcp = require("../../mcp-C9fh9I8u.cjs");
+const require_mcp = require("../../mcp-CG_9H8CN.cjs");
 const require_protocols_oauth_metadata = require("../../protocols/oauth-metadata.cjs");
-const require_list_tools = require("../../list-tools-ka32VIXt.cjs");
-const require_rest = require("../../rest-BpFG5VRY.cjs");
+const require_list_tools = require("../../list-tools-wQ13O3WE.cjs");
+const require_rest = require("../../rest-B9OtLlIc.cjs");
 const require_forwarded = require("../../forwarded-Pi8Hs5Ps.cjs");
 const require_paths = require("../../paths-OP318a6c.cjs");
 //#region src/stacks/supabase/handler.ts

package/dist/stacks/supabase/index.js

@@ -1,10 +1,10 @@
 import { s as trimTrailingSlash } from "../../logger-3-kwsF-5.js";
-import { l as createRecorderForRuntime, s as assertResourcePathShape } from "../../cors-DnU41czH.js";
+import { l as createRecorderForRuntime, s as assertResourcePathShape } from "../../cors-D1m2Ud44.js";
 import { t as OAUTH_PROTECTED_RESOURCE_METADATA_PATH } from "../../metadata-path-CAkNcfyY.js";
-import { t as createMcpProtocolHandler } from "../../mcp-DlcYgsv9.js";
+import { t as createMcpProtocolHandler } from "../../mcp-DlbNiP7o.js";
 import { createOAuthProtectedResourceMetadataHandler } from "../../protocols/oauth-metadata.js";
-import { n as createListToolsHandler } from "../../list-tools-DCs034XG.js";
-import { t as createInvokeToolHandler } from "../../rest-Di-HJGi6.js";
+import { n as createListToolsHandler } from "../../list-tools-CTtFfDLi.js";
+import { t as createInvokeToolHandler } from "../../rest-BTK8v5-l.js";
 import { t as applyForwardedOrigin } from "../../forwarded--h4efJy-.js";
 import { n as assertFunctionName, t as FUNCTIONS_MOUNT_PREFIX } from "../../paths-IS65L6TA.js";
 //#region src/stacks/supabase/handler.ts

package/dist/stacks/supabase/vite.cjs

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_package = require("../../package-CBvVzH3w.cjs");
+const require_package = require("../../package-oSicfX7m.cjs");
 const require_fs_errors = require("../../fs-errors-CWNzOV75.cjs");
 const require_supabase_config = require("../../supabase-config-Dz7dnUv0.cjs");
 const require_paths = require("../../paths-OP318a6c.cjs");

package/dist/stacks/supabase/vite.js

@@ -1,4 +1,4 @@
-import { t as version } from "../../package-Bbg8XwRW.js";
+import { t as version } from "../../package-Cr1oDeFn.js";
 import { t as isFileMissing } from "../../fs-errors-PA2t1TIp.js";
 import { t as readSupabaseProjectRef } from "../../supabase-config-CakTU8YF.js";
 import { n as assertFunctionName, t as FUNCTIONS_MOUNT_PREFIX } from "../../paths-IS65L6TA.js";

package/dist/stacks/tanstack/index.cjs

@@ -1,9 +1,9 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_cors = require("../../cors-DPRJFY-U.cjs");
-const require_mcp = require("../../mcp-C9fh9I8u.cjs");
+const require_cors = require("../../cors-CzTj3-nh.cjs");
+const require_mcp = require("../../mcp-CG_9H8CN.cjs");
 const require_protocols_oauth_metadata = require("../../protocols/oauth-metadata.cjs");
-const require_list_tools = require("../../list-tools-ka32VIXt.cjs");
-const require_rest = require("../../rest-BpFG5VRY.cjs");
+const require_list_tools = require("../../list-tools-wQ13O3WE.cjs");
+const require_rest = require("../../rest-B9OtLlIc.cjs");
 const require_forwarded = require("../../forwarded-Pi8Hs5Ps.cjs");
 //#region src/stacks/tanstack/handlers.ts
 const STACK = "tanstack";

package/dist/stacks/tanstack/index.js

@@ -1,8 +1,8 @@
-import { l as createRecorderForRuntime } from "../../cors-DnU41czH.js";
-import { t as createMcpProtocolHandler } from "../../mcp-DlcYgsv9.js";
+import { l as createRecorderForRuntime } from "../../cors-D1m2Ud44.js";
+import { t as createMcpProtocolHandler } from "../../mcp-DlbNiP7o.js";
 import { createOAuthProtectedResourceMetadataHandler } from "../../protocols/oauth-metadata.js";
-import { n as createListToolsHandler } from "../../list-tools-DCs034XG.js";
-import { t as createInvokeToolHandler } from "../../rest-Di-HJGi6.js";
+import { n as createListToolsHandler } from "../../list-tools-CTtFfDLi.js";
+import { t as createInvokeToolHandler } from "../../rest-BTK8v5-l.js";
 import { t as applyForwardedOrigin } from "../../forwarded--h4efJy-.js";
 //#region src/stacks/tanstack/handlers.ts
 const STACK = "tanstack";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovable.dev/mcp-js",
-  "version": "0.26.2",
+  "version": "0.26.3",
   "description": "Author MCP servers for Lovable apps. Declare tools with defineTool, register them in defineMcp, and a framework adapter (TanStack or Supabase Edge Functions) emits the route(s) at build time.",
   "type": "module",
   "repository": {