@lovable.dev/mcp-js 0.28.0 → 0.29.0-rc.0

package/dist/tool-result-CK6hXO43.cjs

@@ -0,0 +1,89 @@
+const require_schema = require("./schema-D3vClxb7.cjs");
+let _modelcontextprotocol_sdk_server_zod_compat_js = require("@modelcontextprotocol/sdk/server/zod-compat.js");
+//#region src/core/content.ts
+/** Join the text of a result's `type: "text"` blocks into one string, dropping
+*  binary/resource blocks. Used to surface a `tool_error` message in the local
+*  log; never sent over the telemetry wire. Returns undefined when there is no
+*  text to show. */
+function extractTextContent(content) {
+	if (!content) return void 0;
+	const text = content.filter((block) => block.type === "text").map((block) => block.text).join("\n").trim();
+	return text.length > 0 ? text : void 0;
+}
+//#endregion
+//#region src/core/tool-result.ts
+function normalizeResourceLinkIcon(icon) {
+	if (typeof icon.sizes !== "string") return icon;
+	const { sizes, ...rest } = icon;
+	const normalized = sizes.trim();
+	return normalized === "" ? rest : {
+		...rest,
+		sizes: normalized.split(/\s+/)
+	};
+}
+function normalizeToolContent(content) {
+	return (content ?? []).map((block) => {
+		if (block.type !== "resource_link" || block.icons === void 0) return block;
+		return {
+			...block,
+			icons: block.icons.map(normalizeResourceLinkIcon)
+		};
+	});
+}
+function outputValidationError(text) {
+	return {
+		content: [{
+			type: "text",
+			text
+		}],
+		isError: true
+	};
+}
+function isJsonValue(value, ancestors = /* @__PURE__ */ new Set()) {
+	if (value === null || typeof value === "boolean" || typeof value === "string") return true;
+	if (typeof value === "number") return Number.isFinite(value);
+	if (typeof value !== "object" || ancestors.has(value)) return false;
+	const prototype = Object.getPrototypeOf(value);
+	if (!Array.isArray(value) && prototype !== Object.prototype && prototype !== null) return false;
+	ancestors.add(value);
+	const valid = Object.values(value).every((entry) => isJsonValue(entry, ancestors));
+	ancestors.delete(value);
+	return valid;
+}
+async function finalizeToolResult(tool, result) {
+	const content = normalizeToolContent(result.content);
+	let structuredContent = result.structuredContent;
+	if (tool.outputSchema && !result.isError) {
+		if (structuredContent === void 0) return outputValidationError(`Output validation error: Tool ${tool.name} has an output schema but no structured content was provided`);
+		try {
+			const parsed = await (0, _modelcontextprotocol_sdk_server_zod_compat_js.safeParseAsync)(require_schema.schemaFromDefinition(tool.outputSchema), structuredContent);
+			if (!parsed.success) return outputValidationError(`Output validation error: Invalid structured content for tool ${tool.name}: ${(0, _modelcontextprotocol_sdk_server_zod_compat_js.getParseErrorMessage)(parsed.error)}`);
+			structuredContent = parsed.data;
+		} catch {
+			return outputValidationError(`Output validation error: Could not validate structured content for tool ${tool.name}`);
+		}
+	}
+	if (structuredContent !== void 0 && !isJsonValue(structuredContent)) return outputValidationError(`Output validation error: Tool ${tool.name} returned a non-JSON structured value`);
+	if (structuredContent !== void 0 && (structuredContent === null || typeof structuredContent !== "object" || Array.isArray(structuredContent)) && !content.some((block) => block.type === "text")) content.push({
+		type: "text",
+		text: JSON.stringify(structuredContent)
+	});
+	return {
+		content,
+		structuredContent,
+		isError: result.isError
+	};
+}
+//#endregion
+Object.defineProperty(exports, "extractTextContent", {
+	enumerable: true,
+	get: function() {
+		return extractTextContent;
+	}
+});
+Object.defineProperty(exports, "finalizeToolResult", {
+	enumerable: true,
+	get: function() {
+		return finalizeToolResult;
+	}
+});

package/dist/tool-result-DfCk445b.js

@@ -0,0 +1,78 @@
+import { n as schemaFromDefinition } from "./schema-CW1jKvio.js";
+import { getParseErrorMessage, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";
+//#region src/core/content.ts
+/** Join the text of a result's `type: "text"` blocks into one string, dropping
+*  binary/resource blocks. Used to surface a `tool_error` message in the local
+*  log; never sent over the telemetry wire. Returns undefined when there is no
+*  text to show. */
+function extractTextContent(content) {
+	if (!content) return void 0;
+	const text = content.filter((block) => block.type === "text").map((block) => block.text).join("\n").trim();
+	return text.length > 0 ? text : void 0;
+}
+//#endregion
+//#region src/core/tool-result.ts
+function normalizeResourceLinkIcon(icon) {
+	if (typeof icon.sizes !== "string") return icon;
+	const { sizes, ...rest } = icon;
+	const normalized = sizes.trim();
+	return normalized === "" ? rest : {
+		...rest,
+		sizes: normalized.split(/\s+/)
+	};
+}
+function normalizeToolContent(content) {
+	return (content ?? []).map((block) => {
+		if (block.type !== "resource_link" || block.icons === void 0) return block;
+		return {
+			...block,
+			icons: block.icons.map(normalizeResourceLinkIcon)
+		};
+	});
+}
+function outputValidationError(text) {
+	return {
+		content: [{
+			type: "text",
+			text
+		}],
+		isError: true
+	};
+}
+function isJsonValue(value, ancestors = /* @__PURE__ */ new Set()) {
+	if (value === null || typeof value === "boolean" || typeof value === "string") return true;
+	if (typeof value === "number") return Number.isFinite(value);
+	if (typeof value !== "object" || ancestors.has(value)) return false;
+	const prototype = Object.getPrototypeOf(value);
+	if (!Array.isArray(value) && prototype !== Object.prototype && prototype !== null) return false;
+	ancestors.add(value);
+	const valid = Object.values(value).every((entry) => isJsonValue(entry, ancestors));
+	ancestors.delete(value);
+	return valid;
+}
+async function finalizeToolResult(tool, result) {
+	const content = normalizeToolContent(result.content);
+	let structuredContent = result.structuredContent;
+	if (tool.outputSchema && !result.isError) {
+		if (structuredContent === void 0) return outputValidationError(`Output validation error: Tool ${tool.name} has an output schema but no structured content was provided`);
+		try {
+			const parsed = await safeParseAsync(schemaFromDefinition(tool.outputSchema), structuredContent);
+			if (!parsed.success) return outputValidationError(`Output validation error: Invalid structured content for tool ${tool.name}: ${getParseErrorMessage(parsed.error)}`);
+			structuredContent = parsed.data;
+		} catch {
+			return outputValidationError(`Output validation error: Could not validate structured content for tool ${tool.name}`);
+		}
+	}
+	if (structuredContent !== void 0 && !isJsonValue(structuredContent)) return outputValidationError(`Output validation error: Tool ${tool.name} returned a non-JSON structured value`);
+	if (structuredContent !== void 0 && (structuredContent === null || typeof structuredContent !== "object" || Array.isArray(structuredContent)) && !content.some((block) => block.type === "text")) content.push({
+		type: "text",
+		text: JSON.stringify(structuredContent)
+	});
+	return {
+		content,
+		structuredContent,
+		isError: result.isError
+	};
+}
+//#endregion
+export { extractTextContent as n, finalizeToolResult as t };

package/dist/{types-C0Wgm9zp.d.cts → types-D1cgsnPu.d.cts}

@@ -150,9 +150,11 @@ type MetricsConfig = boolean | MetricsOptions;
 type ZodSchema = ZodType;
 /**
  * A raw zod shape (`{ text: z.string(), n: z.number() }`) — the format
- * `defineTool`'s `inputSchema`/`outputSchema` expects.
+ * `defineTool`'s `inputSchema` expects and the object shorthand accepted by
+ * `outputSchema`.
  */
 type ZodRawShape$1 = ZodRawShape;
+type ZodOutputSchema = ZodSchema | ZodRawShape$1;
 /**
  * Infer the parsed-output type of a zod raw shape — given
  * `{ text: ZodString, n: ZodNumber }`, produces `{ text: string, n: number }`.
@@ -217,8 +219,8 @@ type EmbeddedResource = EmbeddedTextResource | EmbeddedBlobResource;
 interface ResourceLinkIcon {
   src: string;
   mimeType?: string;
-  /** Space-separated dimension string, HTML `<link sizes>` convention (e.g. `"16x16 32x32"`). */
-  sizes?: string;
+  /** Array per MCP 2026-07-28; legacy space-separated strings remain accepted. */
+  sizes?: string | string[];
   theme?: "light" | "dark";
 }
 interface ResourceLink extends ContentBlockBase {
@@ -241,6 +243,10 @@ type ContentBlock = TextContent | ImageContent | AudioContent | EmbeddedResource
  * the tool returns to the caller.
  */
 type ToolContent = ContentBlock[];
+type JsonValue = null | boolean | number | string | JsonValue[] | {
+  [key: string]: JsonValue;
+};
+type McpAllowedOrigins = "any" | readonly string[];
 /**
  * Per-tool client hints (not enforcement). `annotations.title` is
  * intentionally omitted — use `ToolDefinition.title`, which the MCP
@@ -258,10 +264,10 @@ interface ToolAnnotations {
 }
 interface ToolHandlerResult {
   content?: ToolContent;
-  structuredContent?: Record<string, unknown>;
+  structuredContent?: JsonValue;
   isError?: boolean;
 }
-interface ToolDefinition<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined> {
+interface ToolDefinition<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodOutputSchema | undefined = ZodOutputSchema | undefined> {
   readonly name: string;
   /** Human-readable display name shown to the user in MCP clients. Required. */
   readonly title: string;
@@ -281,7 +287,7 @@ interface AnyToolDefinition {
   readonly title: string;
   readonly description: string;
   readonly inputSchema?: ZodRawShape$1;
-  readonly outputSchema?: ZodRawShape$1;
+  readonly outputSchema?: ZodOutputSchema;
   readonly annotations?: ToolAnnotations;
   readonly handler: (args: any, ctx: ToolContext) => ToolHandlerResult | Promise<ToolHandlerResult>;
 }
@@ -298,6 +304,8 @@ interface McpDefinitionInput {
   readonly title: string;
   readonly version: string;
   readonly auth?: McpAuthConfig;
+  /** Cross-origin browser access. Omit to allow only same-origin and non-browser requests. */
+  readonly allowedOrigins?: McpAllowedOrigins;
   /**
    * Server-level prose the LLM reads as context for all tools on this server.
    * Required for the same reason `ToolDefinition.description` is — optional
@@ -318,4 +326,4 @@ type McpDefinition = McpDefinitionInput & {
   readonly [McpDefinitionBrand]: never;
 };
 //#endregion
-export { McpAuthConfig as C, JwtClaims as S, ZodRawShape$1 as _, EmbeddedResource as a, MetricsOptions as b, McpDefinition as c, ResourceLinkIcon as d, TextContent as f, ToolHandlerResult as g, ToolDefinition as h, EmbeddedBlobResource as i, McpDefinitionInput as l, ToolContent as m, ContentAnnotations as n, EmbeddedTextResource as o, ToolAnnotations as p, ContentBlock as r, ImageContent as s, AudioContent as t, ResourceLink as u, ZodSchema as v, ToolContext as x, MetricsConfig as y };
+export { MetricsOptions as C, McpAuthConfig as E, MetricsConfig as S, JwtClaims as T, ToolDefinition as _, EmbeddedResource as a, ZodRawShape$1 as b, JsonValue as c, McpDefinitionInput as d, ResourceLink as f, ToolContent as g, ToolAnnotations as h, EmbeddedBlobResource as i, McpAllowedOrigins as l, TextContent as m, ContentAnnotations as n, EmbeddedTextResource as o, ResourceLinkIcon as p, ContentBlock as r, ImageContent as s, AudioContent as t, McpDefinition as u, ToolHandlerResult as v, ToolContext as w, ZodSchema as x, ZodOutputSchema as y };

package/dist/{types-C0Wgm9zp.d.ts → types-D1cgsnPu.d.ts}

@@ -150,9 +150,11 @@ type MetricsConfig = boolean | MetricsOptions;
 type ZodSchema = ZodType;
 /**
  * A raw zod shape (`{ text: z.string(), n: z.number() }`) — the format
- * `defineTool`'s `inputSchema`/`outputSchema` expects.
+ * `defineTool`'s `inputSchema` expects and the object shorthand accepted by
+ * `outputSchema`.
  */
 type ZodRawShape$1 = ZodRawShape;
+type ZodOutputSchema = ZodSchema | ZodRawShape$1;
 /**
  * Infer the parsed-output type of a zod raw shape — given
  * `{ text: ZodString, n: ZodNumber }`, produces `{ text: string, n: number }`.
@@ -217,8 +219,8 @@ type EmbeddedResource = EmbeddedTextResource | EmbeddedBlobResource;
 interface ResourceLinkIcon {
   src: string;
   mimeType?: string;
-  /** Space-separated dimension string, HTML `<link sizes>` convention (e.g. `"16x16 32x32"`). */
-  sizes?: string;
+  /** Array per MCP 2026-07-28; legacy space-separated strings remain accepted. */
+  sizes?: string | string[];
   theme?: "light" | "dark";
 }
 interface ResourceLink extends ContentBlockBase {
@@ -241,6 +243,10 @@ type ContentBlock = TextContent | ImageContent | AudioContent | EmbeddedResource
  * the tool returns to the caller.
  */
 type ToolContent = ContentBlock[];
+type JsonValue = null | boolean | number | string | JsonValue[] | {
+  [key: string]: JsonValue;
+};
+type McpAllowedOrigins = "any" | readonly string[];
 /**
  * Per-tool client hints (not enforcement). `annotations.title` is
  * intentionally omitted — use `ToolDefinition.title`, which the MCP
@@ -258,10 +264,10 @@ interface ToolAnnotations {
 }
 interface ToolHandlerResult {
   content?: ToolContent;
-  structuredContent?: Record<string, unknown>;
+  structuredContent?: JsonValue;
   isError?: boolean;
 }
-interface ToolDefinition<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined> {
+interface ToolDefinition<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodOutputSchema | undefined = ZodOutputSchema | undefined> {
   readonly name: string;
   /** Human-readable display name shown to the user in MCP clients. Required. */
   readonly title: string;
@@ -281,7 +287,7 @@ interface AnyToolDefinition {
   readonly title: string;
   readonly description: string;
   readonly inputSchema?: ZodRawShape$1;
-  readonly outputSchema?: ZodRawShape$1;
+  readonly outputSchema?: ZodOutputSchema;
   readonly annotations?: ToolAnnotations;
   readonly handler: (args: any, ctx: ToolContext) => ToolHandlerResult | Promise<ToolHandlerResult>;
 }
@@ -298,6 +304,8 @@ interface McpDefinitionInput {
   readonly title: string;
   readonly version: string;
   readonly auth?: McpAuthConfig;
+  /** Cross-origin browser access. Omit to allow only same-origin and non-browser requests. */
+  readonly allowedOrigins?: McpAllowedOrigins;
   /**
    * Server-level prose the LLM reads as context for all tools on this server.
    * Required for the same reason `ToolDefinition.description` is — optional
@@ -318,4 +326,4 @@ type McpDefinition = McpDefinitionInput & {
   readonly [McpDefinitionBrand]: never;
 };
 //#endregion
-export { McpAuthConfig as C, JwtClaims as S, ZodRawShape$1 as _, EmbeddedResource as a, MetricsOptions as b, McpDefinition as c, ResourceLinkIcon as d, TextContent as f, ToolHandlerResult as g, ToolDefinition as h, EmbeddedBlobResource as i, McpDefinitionInput as l, ToolContent as m, ContentAnnotations as n, EmbeddedTextResource as o, ToolAnnotations as p, ContentBlock as r, ImageContent as s, AudioContent as t, ResourceLink as u, ZodSchema as v, ToolContext as x, MetricsConfig as y };
+export { MetricsOptions as C, McpAuthConfig as E, MetricsConfig as S, JwtClaims as T, ToolDefinition as _, EmbeddedResource as a, ZodRawShape$1 as b, JsonValue as c, McpDefinitionInput as d, ResourceLink as f, ToolContent as g, ToolAnnotations as h, EmbeddedBlobResource as i, McpAllowedOrigins as l, TextContent as m, ContentAnnotations as n, EmbeddedTextResource as o, ResourceLinkIcon as p, ContentBlock as r, ImageContent as s, AudioContent as t, McpDefinition as u, ToolHandlerResult as v, ToolContext as w, ZodSchema as x, ZodOutputSchema as y };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovable.dev/mcp-js",
-  "version": "0.28.0",
+  "version": "0.29.0-rc.0",
   "description": "Author MCP servers for Lovable apps. Declare tools with defineTool, register them in defineMcp, and a framework adapter (TanStack or Supabase Edge Functions) emits the route(s) at build time.",
   "type": "module",
   "repository": {
@@ -116,6 +116,7 @@
   "license": "MIT",
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.28.0",
+    "@modelcontextprotocol/server": "2.0.0",
     "esbuild": "^0.27.0",
     "jose": "^6.2.2"
   },

package/dist/content-D5LJAHyM.js

@@ -1,12 +0,0 @@
-//#region src/core/content.ts
-/** Join the text of a result's `type: "text"` blocks into one string, dropping
-*  binary/resource blocks. Used to surface a `tool_error` message in the local
-*  log; never sent over the telemetry wire. Returns undefined when there is no
-*  text to show. */
-function extractTextContent(content) {
-	if (!content) return void 0;
-	const text = content.filter((block) => block.type === "text").map((block) => block.text).join("\n").trim();
-	return text.length > 0 ? text : void 0;
-}
-//#endregion
-export { extractTextContent as t };

package/dist/content-NCYIGgOb.cjs

@@ -1,17 +0,0 @@
-//#region src/core/content.ts
-/** Join the text of a result's `type: "text"` blocks into one string, dropping
-*  binary/resource blocks. Used to surface a `tool_error` message in the local
-*  log; never sent over the telemetry wire. Returns undefined when there is no
-*  text to show. */
-function extractTextContent(content) {
-	if (!content) return void 0;
-	const text = content.filter((block) => block.type === "text").map((block) => block.text).join("\n").trim();
-	return text.length > 0 ? text : void 0;
-}
-//#endregion
-Object.defineProperty(exports, "extractTextContent", {
-	enumerable: true,
-	get: function() {
-		return extractTextContent;
-	}
-});

package/dist/list-tools-DCF6G4fn.cjs

@@ -1,52 +0,0 @@
-const require_authorize = require("./authorize-ChY44o_1.cjs");
-const require_gate = require("./gate-CGZl0gjJ.cjs");
-let _modelcontextprotocol_sdk_server_zod_compat_js = require("@modelcontextprotocol/sdk/server/zod-compat.js");
-let _modelcontextprotocol_sdk_server_zod_json_schema_compat_js = require("@modelcontextprotocol/sdk/server/zod-json-schema-compat.js");
-//#region src/protocols/rest/list-tools.ts
-function shapeToJsonSchema(shape) {
-	if (!shape) return null;
-	try {
-		return (0, _modelcontextprotocol_sdk_server_zod_json_schema_compat_js.toJsonSchemaCompat)((0, _modelcontextprotocol_sdk_server_zod_compat_js.objectFromShape)(shape));
-	} catch {
-		return null;
-	}
-}
-function buildMcpListing(mcp) {
-	return {
-		server: {
-			name: mcp.name,
-			version: mcp.version,
-			title: mcp.title
-		},
-		tools: mcp.tools.map((tool) => ({
-			name: tool.name,
-			title: tool.title,
-			description: tool.description,
-			annotations: tool.annotations,
-			inputSchema: shapeToJsonSchema(tool.inputSchema),
-			outputSchema: shapeToJsonSchema(tool.outputSchema)
-		}))
-	};
-}
-function createListToolsHandler(mcp, options = {}) {
-	require_authorize.assertRestResourceBinding(mcp, options);
-	return require_gate.createGatedHandler({
-		authorizer: require_authorize.createRequestAuthorizer(mcp, options),
-		methods: ["GET", "HEAD"],
-		methodNotAllowed: require_authorize.methodNotAllowed,
-		handle: async () => Response.json(buildMcpListing(mcp))
-	});
-}
-//#endregion
-Object.defineProperty(exports, "buildMcpListing", {
-	enumerable: true,
-	get: function() {
-		return buildMcpListing;
-	}
-});
-Object.defineProperty(exports, "createListToolsHandler", {
-	enumerable: true,
-	get: function() {
-		return createListToolsHandler;
-	}
-});

package/dist/mcp-CUGwXkxb.cjs

@@ -1,153 +0,0 @@
-const require_logger = require("./logger-CN1q-KNn.cjs");
-const require_errors = require("./errors-CN6Da8iz.cjs");
-const require_authorize = require("./authorize-ChY44o_1.cjs");
-const require_content = require("./content-NCYIGgOb.cjs");
-const require_gate = require("./gate-CGZl0gjJ.cjs");
-let _modelcontextprotocol_sdk_server_mcp_js = require("@modelcontextprotocol/sdk/server/mcp.js");
-let _modelcontextprotocol_sdk_server_webStandardStreamableHttp_js = require("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js");
-//#region src/protocols/mcp/protocol.ts
-function statelessMethodNotAllowed(allow) {
-	return Response.json({
-		jsonrpc: "2.0",
-		id: null,
-		error: {
-			code: -32e3,
-			message: "Method not allowed: stateless server offers no standalone SSE stream (GET) or session (DELETE)."
-		}
-	}, {
-		status: 405,
-		headers: { Allow: allow }
-	});
-}
-/**
-* Adapt a Lovable tool to the SDK's tool callback. The boundary cast bridges
-* our SDK-decoupled content-block types to the SDK's; they match structurally.
-*/
-function adaptToolToSdkCallback(tool, auth, recorder) {
-	const endUserId = auth?.principal.sub;
-	return (async (first) => {
-		const args = tool.inputSchema ? first ?? {} : {};
-		const start = require_authorize.nowMs();
-		let result;
-		try {
-			result = await tool.handler(args, new require_errors.ToolContext(auth));
-		} catch (err) {
-			const callerMessage = require_errors.resolveToolErrorMessage(err);
-			if (callerMessage === void 0) {
-				await recorder.emit({
-					tool: tool.name,
-					method: "tools/call",
-					outcome: "handler_error",
-					durationMs: require_authorize.nowMs() - start,
-					errorText: require_errors.errorSummary(err),
-					endUserId
-				});
-				return {
-					content: [{
-						type: "text",
-						text: "tool execution failed"
-					}],
-					isError: true
-				};
-			}
-			result = {
-				content: [{
-					type: "text",
-					text: callerMessage
-				}],
-				isError: true
-			};
-		}
-		if (result == null) {
-			await recorder.emit({
-				tool: tool.name,
-				method: "tools/call",
-				outcome: "handler_error",
-				durationMs: require_authorize.nowMs() - start,
-				endUserId
-			});
-			return {
-				content: [{
-					type: "text",
-					text: `tool "${tool.name}" returned no result`
-				}],
-				isError: true
-			};
-		}
-		await recorder.emit({
-			tool: tool.name,
-			method: "tools/call",
-			outcome: result.isError ? "tool_error" : "ok",
-			durationMs: require_authorize.nowMs() - start,
-			errorText: result.isError ? require_content.extractTextContent(result.content) : void 0,
-			endUserId
-		});
-		return {
-			content: result.content ?? [],
-			structuredContent: result.structuredContent,
-			isError: result.isError
-		};
-	});
-}
-/**
-* Build a Web-Standard request handler that serves the MCP protocol over
-* streamable HTTP. A fresh `McpServer` + transport is constructed per
-* request — the transport is stateless, so this is cheap and there is no
-* cross-request state to leak. The per-request `recorder` is supplied by the
-* caller (the stack handler) so telemetry reads the runtime env in-flight.
-*/
-function createMcpProtocolHandler(mcp, options = {}) {
-	const authorizer = require_authorize.createRequestAuthorizer(mcp, options);
-	const handle = async (request, authResult, recorder) => {
-		try {
-			const server = new _modelcontextprotocol_sdk_server_mcp_js.McpServer({
-				name: mcp.name,
-				version: mcp.version,
-				title: mcp.title
-			}, { instructions: mcp.instructions });
-			for (const tool of mcp.tools) server.registerTool(tool.name, {
-				title: tool.title,
-				description: tool.description,
-				inputSchema: tool.inputSchema,
-				outputSchema: tool.outputSchema,
-				annotations: tool.annotations
-			}, adaptToolToSdkCallback(tool, authResult.auth, recorder));
-			const transport = new _modelcontextprotocol_sdk_server_webStandardStreamableHttp_js.WebStandardStreamableHTTPServerTransport({ sessionIdGenerator: void 0 });
-			await server.connect(transport);
-			return await transport.handleRequest(request);
-		} catch (err) {
-			await recorder.emit({
-				tool: null,
-				method: "transport",
-				outcome: "transport_error",
-				durationMs: 0,
-				endUserId: authResult.auth?.principal.sub
-			});
-			require_logger.log.error("mcp.transport_error", {
-				...require_logger.describeError(err),
-				outcome: "500 internal error"
-			});
-			return Response.json({
-				jsonrpc: "2.0",
-				id: null,
-				error: {
-					code: -32603,
-					message: "internal error"
-				}
-			}, { status: 500 });
-		}
-	};
-	return require_gate.createGatedHandler({
-		authorizer,
-		methods: ["POST"],
-		methodNotAllowed: statelessMethodNotAllowed,
-		handle
-	});
-}
-//#endregion
-Object.defineProperty(exports, "createMcpProtocolHandler", {
-	enumerable: true,
-	get: function() {
-		return createMcpProtocolHandler;
-	}
-});