@lovable.dev/mcp-js 0.29.0-rc.0 → 0.29.0-rc.1

package/dist/{base-DSH8NnPj.d.cts → base-C8osWdMU.d.cts}

@@ -16,9 +16,8 @@ interface InvocationRecord {
   /** HTTP request method. Set on `auth_challenge` so probe traffic (GET vs
    *  POST discovery) is distinguishable; absent on tool-call records. */
   httpMethod?: string;
-  /** Wire surface that served the call: the modern stateless revision, the
-   *  initialization-era path, or the REST companion. Absent on records emitted
-   *  before protocol classification (auth gate, transport faults). */
+  /** Wire surface that served the call; absent on records emitted before
+   *  protocol classification (auth gate, transport faults). */
   protocol?: "2026-07-28" | "legacy" | "rest";
   /** The app end-user that made the call (the access token `sub`), or
    *  `undefined` when the request is unauthenticated. Not a Lovable identity. */

package/dist/{base-DSH8NnPj.d.ts → base-C8osWdMU.d.ts}

@@ -16,9 +16,8 @@ interface InvocationRecord {
   /** HTTP request method. Set on `auth_challenge` so probe traffic (GET vs
    *  POST discovery) is distinguishable; absent on tool-call records. */
   httpMethod?: string;
-  /** Wire surface that served the call: the modern stateless revision, the
-   *  initialization-era path, or the REST companion. Absent on records emitted
-   *  before protocol classification (auth gate, transport faults). */
+  /** Wire surface that served the call; absent on records emitted before
+   *  protocol classification (auth gate, transport faults). */
   protocol?: "2026-07-28" | "legacy" | "rest";
   /** The app end-user that made the call (the access token `sub`), or
    *  `undefined` when the request is unauthenticated. Not a Lovable identity. */

package/dist/cli/extract-manifest.cjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-const require_package = require("../package-C3YVYgxp.cjs");
-const require_list_tools = require("../list-tools-Dkyyje7j.cjs");
+const require_package = require("../package-ClCIqol1.cjs");
+const require_list_tools = require("../list-tools-DES10avA.cjs");
 const require_fs_errors = require("../fs-errors-CWNzOV75.cjs");
 let node_fs = require("node:fs");
 let node_path = require("node:path");

package/dist/cli/extract-manifest.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { t as version } from "../package-DzB_5Hur.js";
-import { t as buildMcpListing } from "../list-tools-ePP9tXND.js";
+import { t as version } from "../package-BI5r4uGM.js";
+import { t as buildMcpListing } from "../list-tools-C1OiTDR9.js";
 import { t as isFileMissing } from "../fs-errors-PA2t1TIp.js";
 import { lstatSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname, resolve } from "node:path";

package/dist/{cors-D4YbODs-.js → cors-BDTQQJE2.js}

@@ -1,5 +1,5 @@
 import { i as log, n as applyLogLevelFromEnv, o as parseSafeUrl, r as describeError, s as trimTrailingSlash, t as LOG_LEVEL_ENV_VAR, u as resolveMetricsConfig } from "./logger-Ctv5xUSD.js";
-import { t as version } from "./package-DzB_5Hur.js";
+import { t as version } from "./package-BI5r4uGM.js";
 import "./metadata-path-CAkNcfyY.js";
 import { createLocalJWKSet, decodeProtectedHeader, errors, jwtVerify } from "jose";
 //#region src/core/http.ts

package/dist/{cors-CmKzDN7k.cjs → cors-BRv5KXKQ.cjs}

@@ -1,5 +1,5 @@
 const require_logger = require("./logger-CN1q-KNn.cjs");
-const require_package = require("./package-C3YVYgxp.cjs");
+const require_package = require("./package-ClCIqol1.cjs");
 require("./metadata-path-zd7NSNoa.cjs");
 let jose = require("jose");
 //#region src/core/http.ts

package/dist/{gate-n_HX6eQ5.cjs → gate-CAJSRt_t.cjs}

@@ -1,4 +1,4 @@
-const require_cors = require("./cors-CmKzDN7k.cjs");
+const require_cors = require("./cors-BRv5KXKQ.cjs");
 //#region src/protocols/gate.ts
 function createGatedHandler(gate) {
 	const allow = [...gate.methods, "OPTIONS"].join(", ");

package/dist/{gate-pGsVlY_4.js → gate-uCVrbDBb.js}

@@ -1,4 +1,4 @@
-import { f as finalizeWireResponse, l as createNoopRecorder, t as evaluateCors } from "./cors-D4YbODs-.js";
+import { f as finalizeWireResponse, l as createNoopRecorder, t as evaluateCors } from "./cors-BDTQQJE2.js";
 //#region src/protocols/gate.ts
 function createGatedHandler(gate) {
 	const allow = [...gate.methods, "OPTIONS"].join(", ");

package/dist/{io-CvALf9NE.d.ts → io-BYUyNFdn.d.ts}

@@ -1,4 +1,4 @@
-import "./list-tools-qIvVJeWZ.js";
+import "./list-tools-DXqSPvNY.js";
 //#region src/manifest/io.d.ts
 /**
  * Shape every MCP Vite plugin exposes on its `api` so `runExtract` can read

package/dist/{io-BEwvgN8s.d.cts → io-B_YLNWDL.d.cts}

@@ -1,4 +1,4 @@
-import "./list-tools-zagoI477.cjs";
+import "./list-tools-C3AoI2Zw.cjs";
 //#region src/manifest/io.d.ts
 /**
  * Shape every MCP Vite plugin exposes on its `api` so `runExtract` can read

package/dist/{list-tools-ePP9tXND.js → list-tools-C1OiTDR9.js}

@@ -1,6 +1,6 @@
 import { t as jsonSchemaFromDefinition } from "./schema-CW1jKvio.js";
-import { n as assertRestResourceBinding, p as methodNotAllowed, r as createRequestAuthorizer } from "./cors-D4YbODs-.js";
-import { t as createGatedHandler } from "./gate-pGsVlY_4.js";
+import { n as assertRestResourceBinding, p as methodNotAllowed, r as createRequestAuthorizer } from "./cors-BDTQQJE2.js";
+import { t as createGatedHandler } from "./gate-uCVrbDBb.js";
 //#region src/protocols/rest/list-tools.ts
 function schemaToJsonSchema(definition, pipeStrategy) {
 	if (!definition) return null;

package/dist/{list-tools-zagoI477.d.cts → list-tools-C3AoI2Zw.d.cts}

@@ -1,5 +1,5 @@
 import { u as McpDefinition } from "./types-D1cgsnPu.cjs";
-import { t as MetricsRecorder } from "./base-DSH8NnPj.cjs";
+import { t as MetricsRecorder } from "./base-C8osWdMU.cjs";
 import { t as McpRuntimeOptions } from "./authorize-BzZFS0zi.cjs";
 //#region src/protocols/rest/list-tools.d.ts
 type RestListToolsHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;

package/dist/{list-tools-Dkyyje7j.cjs → list-tools-DES10avA.cjs}

@@ -1,6 +1,6 @@
 const require_schema = require("./schema-D3vClxb7.cjs");
-const require_cors = require("./cors-CmKzDN7k.cjs");
-const require_gate = require("./gate-n_HX6eQ5.cjs");
+const require_cors = require("./cors-BRv5KXKQ.cjs");
+const require_gate = require("./gate-CAJSRt_t.cjs");
 //#region src/protocols/rest/list-tools.ts
 function schemaToJsonSchema(definition, pipeStrategy) {
 	if (!definition) return null;

package/dist/{list-tools-qIvVJeWZ.d.ts → list-tools-DXqSPvNY.d.ts}

@@ -1,5 +1,5 @@
 import { u as McpDefinition } from "./types-D1cgsnPu.js";
-import { t as MetricsRecorder } from "./base-DSH8NnPj.js";
+import { t as MetricsRecorder } from "./base-C8osWdMU.js";
 import { t as McpRuntimeOptions } from "./authorize-BjNE3LPr.js";
 //#region src/protocols/rest/list-tools.d.ts
 type RestListToolsHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;

package/dist/{mcp-DQ1Vdv4v.cjs → mcp-C9B7o75m.cjs}

@@ -1,9 +1,9 @@
 const require_logger = require("./logger-CN1q-KNn.cjs");
 const require_schema = require("./schema-D3vClxb7.cjs");
 const require_errors = require("./errors-CN6Da8iz.cjs");
-const require_cors = require("./cors-CmKzDN7k.cjs");
+const require_cors = require("./cors-BRv5KXKQ.cjs");
 const require_tool_result = require("./tool-result-CK6hXO43.cjs");
-const require_gate = require("./gate-n_HX6eQ5.cjs");
+const require_gate = require("./gate-CAJSRt_t.cjs");
 let _modelcontextprotocol_sdk_server_zod_compat_js = require("@modelcontextprotocol/sdk/server/zod-compat.js");
 let _modelcontextprotocol_sdk_server_mcp_js = require("@modelcontextprotocol/sdk/server/mcp.js");
 let _modelcontextprotocol_sdk_server_webStandardStreamableHttp_js = require("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js");
@@ -168,7 +168,10 @@ function buildServer(mcp, auth, recorder) {
 		name: mcp.name,
 		version: mcp.version,
 		title: mcp.title
-	}, { instructions: mcp.instructions });
+	}, {
+		instructions: mcp.instructions,
+		capabilities: { tools: { listChanged: false } }
+	});
 	for (const tool of mcp.tools) {
 		const config = {
 			title: tool.title,
@@ -202,6 +205,7 @@ function buildLegacyServer(mcp, auth, recorder) {
 			annotations: tool.annotations
 		}, adaptToolCallback(tool, auth, recorder, true, legacyOutputSchemaWrapped));
 	}
+	server.server.registerCapabilities({ tools: { listChanged: false } });
 	return server;
 }
 async function serveLegacy(request, parsedBody, mcp, auth, recorder) {

package/dist/{mcp-Cs4zfvSi.js → mcp-HDkUr85V.js}

@@ -1,9 +1,9 @@
 import { i as log, r as describeError } from "./logger-Ctv5xUSD.js";
 import { n as schemaFromDefinition, t as jsonSchemaFromDefinition } from "./schema-CW1jKvio.js";
 import { i as ToolContext, n as errorSummary, r as resolveToolErrorMessage } from "./errors-DSe96Ffd.js";
-import { r as createRequestAuthorizer, u as nowMs } from "./cors-D4YbODs-.js";
+import { r as createRequestAuthorizer, u as nowMs } from "./cors-BDTQQJE2.js";
 import { n as extractTextContent, t as finalizeToolResult } from "./tool-result-DfCk445b.js";
-import { t as createGatedHandler } from "./gate-pGsVlY_4.js";
+import { t as createGatedHandler } from "./gate-uCVrbDBb.js";
 import { normalizeObjectSchema, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
@@ -168,7 +168,10 @@ function buildServer(mcp, auth, recorder) {
 		name: mcp.name,
 		version: mcp.version,
 		title: mcp.title
-	}, { instructions: mcp.instructions });
+	}, {
+		instructions: mcp.instructions,
+		capabilities: { tools: { listChanged: false } }
+	});
 	for (const tool of mcp.tools) {
 		const config = {
 			title: tool.title,
@@ -202,6 +205,7 @@ function buildLegacyServer(mcp, auth, recorder) {
 			annotations: tool.annotations
 		}, adaptToolCallback(tool, auth, recorder, true, legacyOutputSchemaWrapped));
 	}
+	server.server.registerCapabilities({ tools: { listChanged: false } });
 	return server;
 }
 async function serveLegacy(request, parsedBody, mcp, auth, recorder) {

package/dist/{package-DzB_5Hur.js → package-BI5r4uGM.js}

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.29.0-rc.0";
+var version = "0.29.0-rc.1";
 //#endregion
 export { version as t };

package/dist/{package-C3YVYgxp.cjs → package-ClCIqol1.cjs}

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.29.0-rc.0";
+var version = "0.29.0-rc.1";
 //#endregion
 Object.defineProperty(exports, "version", {
 	enumerable: true,

package/dist/protocols/mcp/index.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_mcp = require("../../mcp-DQ1Vdv4v.cjs");
+const require_mcp = require("../../mcp-C9B7o75m.cjs");
 exports.createMcpProtocolHandler = require_mcp.createMcpProtocolHandler;

package/dist/protocols/mcp/index.d.cts

@@ -1,5 +1,5 @@
 import { u as McpDefinition } from "../../types-D1cgsnPu.cjs";
-import { t as MetricsRecorder } from "../../base-DSH8NnPj.cjs";
+import { t as MetricsRecorder } from "../../base-C8osWdMU.cjs";
 import { t as McpRuntimeOptions } from "../../authorize-BzZFS0zi.cjs";
 //#region src/protocols/mcp/protocol.d.ts
 type McpProtocolHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;

package/dist/protocols/mcp/index.d.ts

@@ -1,5 +1,5 @@
 import { u as McpDefinition } from "../../types-D1cgsnPu.js";
-import { t as MetricsRecorder } from "../../base-DSH8NnPj.js";
+import { t as MetricsRecorder } from "../../base-C8osWdMU.js";
 import { t as McpRuntimeOptions } from "../../authorize-BjNE3LPr.js";
 //#region src/protocols/mcp/protocol.d.ts
 type McpProtocolHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;

package/dist/protocols/mcp/index.js

@@ -1,2 +1,2 @@
-import { t as createMcpProtocolHandler } from "../../mcp-Cs4zfvSi.js";
+import { t as createMcpProtocolHandler } from "../../mcp-HDkUr85V.js";
 export { createMcpProtocolHandler };

package/dist/protocols/oauth-metadata.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_logger = require("../logger-CN1q-KNn.cjs");
-const require_cors = require("../cors-CmKzDN7k.cjs");
+const require_cors = require("../cors-BRv5KXKQ.cjs");
 //#region src/protocols/oauth-metadata.ts
 function notFound() {
 	return new Response(JSON.stringify({ error: "not found" }), {

package/dist/protocols/oauth-metadata.js

@@ -1,5 +1,5 @@
 import { i as log, r as describeError } from "../logger-Ctv5xUSD.js";
-import { a as oauthConfigurationErrorResponse, d as JSON_HEADERS, f as finalizeWireResponse, i as getOAuthRuntime, p as methodNotAllowed, s as resolveProtectedResource, t as evaluateCors } from "../cors-D4YbODs-.js";
+import { a as oauthConfigurationErrorResponse, d as JSON_HEADERS, f as finalizeWireResponse, i as getOAuthRuntime, p as methodNotAllowed, s as resolveProtectedResource, t as evaluateCors } from "../cors-BDTQQJE2.js";
 //#region src/protocols/oauth-metadata.ts
 function notFound() {
 	return new Response(JSON.stringify({ error: "not found" }), {

package/dist/protocols/rest/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_list_tools = require("../../list-tools-Dkyyje7j.cjs");
-const require_rest = require("../../rest-P6XZWP42.cjs");
+const require_list_tools = require("../../list-tools-DES10avA.cjs");
+const require_rest = require("../../rest-BBdfHMGh.cjs");
 exports.createInvokeToolHandler = require_rest.createInvokeToolHandler;
 exports.createListToolsHandler = require_list_tools.createListToolsHandler;

package/dist/protocols/rest/index.d.cts

@@ -1,7 +1,7 @@
 import { u as McpDefinition } from "../../types-D1cgsnPu.cjs";
-import { t as MetricsRecorder } from "../../base-DSH8NnPj.cjs";
+import { t as MetricsRecorder } from "../../base-C8osWdMU.cjs";
 import { t as McpRuntimeOptions } from "../../authorize-BzZFS0zi.cjs";
-import { n as createListToolsHandler, t as RestListToolsHandler } from "../../list-tools-zagoI477.cjs";
+import { n as createListToolsHandler, t as RestListToolsHandler } from "../../list-tools-C3AoI2Zw.cjs";
 //#region src/protocols/rest/invoke-tool.d.ts
 type RestInvokeToolHandler = (request: Request, toolName: string, recorder?: MetricsRecorder) => Promise<Response>;
 declare function createInvokeToolHandler(mcp: McpDefinition, options?: McpRuntimeOptions): RestInvokeToolHandler;

package/dist/protocols/rest/index.d.ts

@@ -1,7 +1,7 @@
 import { u as McpDefinition } from "../../types-D1cgsnPu.js";
-import { t as MetricsRecorder } from "../../base-DSH8NnPj.js";
+import { t as MetricsRecorder } from "../../base-C8osWdMU.js";
 import { t as McpRuntimeOptions } from "../../authorize-BjNE3LPr.js";
-import { n as createListToolsHandler, t as RestListToolsHandler } from "../../list-tools-qIvVJeWZ.js";
+import { n as createListToolsHandler, t as RestListToolsHandler } from "../../list-tools-DXqSPvNY.js";
 //#region src/protocols/rest/invoke-tool.d.ts
 type RestInvokeToolHandler = (request: Request, toolName: string, recorder?: MetricsRecorder) => Promise<Response>;
 declare function createInvokeToolHandler(mcp: McpDefinition, options?: McpRuntimeOptions): RestInvokeToolHandler;

package/dist/protocols/rest/index.js

@@ -1,3 +1,3 @@
-import { n as createListToolsHandler } from "../../list-tools-ePP9tXND.js";
-import { t as createInvokeToolHandler } from "../../rest-DSclWpIt.js";
+import { n as createListToolsHandler } from "../../list-tools-C1OiTDR9.js";
+import { t as createInvokeToolHandler } from "../../rest-Cr7NhxL3.js";
 export { createInvokeToolHandler, createListToolsHandler };

package/dist/{rest-P6XZWP42.cjs → rest-BBdfHMGh.cjs}

@@ -1,8 +1,8 @@
 const require_errors = require("./errors-CN6Da8iz.cjs");
-const require_cors = require("./cors-CmKzDN7k.cjs");
+const require_cors = require("./cors-BRv5KXKQ.cjs");
 const require_tool_result = require("./tool-result-CK6hXO43.cjs");
-const require_gate = require("./gate-n_HX6eQ5.cjs");
-require("./list-tools-Dkyyje7j.cjs");
+const require_gate = require("./gate-CAJSRt_t.cjs");
+require("./list-tools-DES10avA.cjs");
 let _modelcontextprotocol_sdk_server_zod_compat_js = require("@modelcontextprotocol/sdk/server/zod-compat.js");
 //#region src/protocols/rest/invoke-tool.ts
 const MAX_REFLECTED_TOOL_NAME = 256;

package/dist/{rest-DSclWpIt.js → rest-Cr7NhxL3.js}

@@ -1,8 +1,8 @@
 import { i as ToolContext, n as errorSummary, r as resolveToolErrorMessage } from "./errors-DSe96Ffd.js";
-import { d as JSON_HEADERS, n as assertRestResourceBinding, p as methodNotAllowed, r as createRequestAuthorizer, u as nowMs } from "./cors-D4YbODs-.js";
+import { d as JSON_HEADERS, n as assertRestResourceBinding, p as methodNotAllowed, r as createRequestAuthorizer, u as nowMs } from "./cors-BDTQQJE2.js";
 import { n as extractTextContent, t as finalizeToolResult } from "./tool-result-DfCk445b.js";
-import { t as createGatedHandler } from "./gate-pGsVlY_4.js";
-import "./list-tools-ePP9tXND.js";
+import { t as createGatedHandler } from "./gate-uCVrbDBb.js";
+import "./list-tools-C1OiTDR9.js";
 import { getParseErrorMessage, objectFromShape, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";
 //#region src/protocols/rest/invoke-tool.ts
 const MAX_REFLECTED_TOOL_NAME = 256;

package/dist/stacks/supabase/index.cjs

@@ -1,11 +1,11 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_logger = require("../../logger-CN1q-KNn.cjs");
-const require_cors = require("../../cors-CmKzDN7k.cjs");
+const require_cors = require("../../cors-BRv5KXKQ.cjs");
 const require_metadata_path = require("../../metadata-path-zd7NSNoa.cjs");
-const require_mcp = require("../../mcp-DQ1Vdv4v.cjs");
+const require_mcp = require("../../mcp-C9B7o75m.cjs");
 const require_protocols_oauth_metadata = require("../../protocols/oauth-metadata.cjs");
-const require_list_tools = require("../../list-tools-Dkyyje7j.cjs");
-const require_rest = require("../../rest-P6XZWP42.cjs");
+const require_list_tools = require("../../list-tools-DES10avA.cjs");
+const require_rest = require("../../rest-BBdfHMGh.cjs");
 const require_forwarded = require("../../forwarded-BC_RHnn5.cjs");
 const require_paths = require("../../paths-OP318a6c.cjs");
 //#region src/stacks/supabase/handler.ts

package/dist/stacks/supabase/index.js

@@ -1,10 +1,10 @@
 import { s as trimTrailingSlash } from "../../logger-Ctv5xUSD.js";
-import { c as createRecorderForRuntime, o as assertResourcePathShape } from "../../cors-D4YbODs-.js";
+import { c as createRecorderForRuntime, o as assertResourcePathShape } from "../../cors-BDTQQJE2.js";
 import { t as OAUTH_PROTECTED_RESOURCE_METADATA_PATH } from "../../metadata-path-CAkNcfyY.js";
-import { t as createMcpProtocolHandler } from "../../mcp-Cs4zfvSi.js";
+import { t as createMcpProtocolHandler } from "../../mcp-HDkUr85V.js";
 import { createOAuthProtectedResourceMetadataHandler } from "../../protocols/oauth-metadata.js";
-import { n as createListToolsHandler } from "../../list-tools-ePP9tXND.js";
-import { t as createInvokeToolHandler } from "../../rest-DSclWpIt.js";
+import { n as createListToolsHandler } from "../../list-tools-C1OiTDR9.js";
+import { t as createInvokeToolHandler } from "../../rest-Cr7NhxL3.js";
 import { t as applyForwardedOrigin } from "../../forwarded-B3EBjHnA.js";
 import { n as assertFunctionName, t as FUNCTIONS_MOUNT_PREFIX } from "../../paths-IS65L6TA.js";
 //#region src/stacks/supabase/handler.ts

package/dist/stacks/supabase/vite.cjs

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_package = require("../../package-C3YVYgxp.cjs");
+const require_package = require("../../package-ClCIqol1.cjs");
 const require_fs_errors = require("../../fs-errors-CWNzOV75.cjs");
 const require_supabase_config = require("../../supabase-config-Dz7dnUv0.cjs");
 const require_paths = require("../../paths-OP318a6c.cjs");

package/dist/stacks/supabase/vite.d.cts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-BEwvgN8s.cjs";
+import { t as McpPluginApi } from "../../io-B_YLNWDL.cjs";
 import { Plugin } from "vite";
 //#region src/stacks/supabase/vite.d.ts
 interface McpPluginOptions {

package/dist/stacks/supabase/vite.d.ts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-CvALf9NE.js";
+import { t as McpPluginApi } from "../../io-BYUyNFdn.js";
 import { Plugin } from "vite";
 //#region src/stacks/supabase/vite.d.ts
 interface McpPluginOptions {

package/dist/stacks/supabase/vite.js

@@ -1,4 +1,4 @@
-import { t as version } from "../../package-DzB_5Hur.js";
+import { t as version } from "../../package-BI5r4uGM.js";
 import { t as isFileMissing } from "../../fs-errors-PA2t1TIp.js";
 import { t as readSupabaseProjectRef } from "../../supabase-config-CakTU8YF.js";
 import { n as assertFunctionName, t as FUNCTIONS_MOUNT_PREFIX } from "../../paths-IS65L6TA.js";

package/dist/stacks/tanstack/index.cjs

@@ -1,9 +1,9 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_cors = require("../../cors-CmKzDN7k.cjs");
-const require_mcp = require("../../mcp-DQ1Vdv4v.cjs");
+const require_cors = require("../../cors-BRv5KXKQ.cjs");
+const require_mcp = require("../../mcp-C9B7o75m.cjs");
 const require_protocols_oauth_metadata = require("../../protocols/oauth-metadata.cjs");
-const require_list_tools = require("../../list-tools-Dkyyje7j.cjs");
-const require_rest = require("../../rest-P6XZWP42.cjs");
+const require_list_tools = require("../../list-tools-DES10avA.cjs");
+const require_rest = require("../../rest-BBdfHMGh.cjs");
 const require_forwarded = require("../../forwarded-BC_RHnn5.cjs");
 //#region src/stacks/tanstack/handlers.ts
 const STACK = "tanstack";

package/dist/stacks/tanstack/index.js

@@ -1,8 +1,8 @@
-import { c as createRecorderForRuntime } from "../../cors-D4YbODs-.js";
-import { t as createMcpProtocolHandler } from "../../mcp-Cs4zfvSi.js";
+import { c as createRecorderForRuntime } from "../../cors-BDTQQJE2.js";
+import { t as createMcpProtocolHandler } from "../../mcp-HDkUr85V.js";
 import { createOAuthProtectedResourceMetadataHandler } from "../../protocols/oauth-metadata.js";
-import { n as createListToolsHandler } from "../../list-tools-ePP9tXND.js";
-import { t as createInvokeToolHandler } from "../../rest-DSclWpIt.js";
+import { n as createListToolsHandler } from "../../list-tools-C1OiTDR9.js";
+import { t as createInvokeToolHandler } from "../../rest-Cr7NhxL3.js";
 import { t as applyForwardedOrigin } from "../../forwarded-B3EBjHnA.js";
 //#region src/stacks/tanstack/handlers.ts
 const STACK = "tanstack";

package/dist/stacks/tanstack/vite.d.cts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-BEwvgN8s.cjs";
+import { t as McpPluginApi } from "../../io-B_YLNWDL.cjs";
 import { Plugin } from "vite";
 //#region src/stacks/tanstack/vite.d.ts
 interface McpPluginOptions {
@@ -78,12 +78,8 @@ interface McpPluginOptions {
    */
   trustForwardedHost?: boolean;
   /**
-   * Derive the public scheme of same-origin CORS checks and advertised OAuth
-   * URLs from `X-Forwarded-Proto`. Lovable's preview proxy terminates TLS and
-   * forwards plain http to the dev server while overwriting
-   * `X-Forwarded-Proto`, so the default is `true` to keep same-origin browser
-   * requests and advertised `https` URLs working in previews. Set `false` only
-   * when deploying behind a proxy that does not overwrite the header.
+   * Derive the public scheme for same-origin checks and advertised OAuth URLs
+   * from `X-Forwarded-Proto`. Safe only behind an overwriting proxy.
    * @default true
    */
   trustForwardedProto?: boolean;

package/dist/stacks/tanstack/vite.d.ts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-CvALf9NE.js";
+import { t as McpPluginApi } from "../../io-BYUyNFdn.js";
 import { Plugin } from "vite";
 //#region src/stacks/tanstack/vite.d.ts
 interface McpPluginOptions {
@@ -78,12 +78,8 @@ interface McpPluginOptions {
    */
   trustForwardedHost?: boolean;
   /**
-   * Derive the public scheme of same-origin CORS checks and advertised OAuth
-   * URLs from `X-Forwarded-Proto`. Lovable's preview proxy terminates TLS and
-   * forwards plain http to the dev server while overwriting
-   * `X-Forwarded-Proto`, so the default is `true` to keep same-origin browser
-   * requests and advertised `https` URLs working in previews. Set `false` only
-   * when deploying behind a proxy that does not overwrite the header.
+   * Derive the public scheme for same-origin checks and advertised OAuth URLs
+   * from `X-Forwarded-Proto`. Safe only behind an overwriting proxy.
    * @default true
    */
   trustForwardedProto?: boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovable.dev/mcp-js",
-  "version": "0.29.0-rc.0",
+  "version": "0.29.0-rc.1",
   "description": "Author MCP servers for Lovable apps. Declare tools with defineTool, register them in defineMcp, and a framework adapter (TanStack or Supabase Edge Functions) emits the route(s) at build time.",
   "type": "module",
   "repository": {