@lovable.dev/mcp-js 0.29.0-rc.0 → 0.29.0-rc.2

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { C as MetricsOptions, E as McpAuthConfig, S as MetricsConfig, T as JwtClaims, _ as ToolDefinition, a as EmbeddedResource, b as ZodRawShape, c as JsonValue, d as McpDefinitionInput, f as ResourceLink, g as ToolContent, h as ToolAnnotations, i as EmbeddedBlobResource, l as McpAllowedOrigins, m as TextContent, n as ContentAnnotations, o as EmbeddedTextResource, p as ResourceLinkIcon, r as ContentBlock, s as ImageContent, t as AudioContent, u as McpDefinition, v as ToolHandlerResult, w as ToolContext, x as ZodSchema, y as ZodOutputSchema } from "./types-D1cgsnPu.cjs";
+import { C as MetricsOptions, D as JwtClaims, E as ToolContext, O as McpAuthConfig, S as MetricsConfig, T as ProgressUpdate, _ as ToolDefinition, a as EmbeddedResource, b as ZodRawShape, c as JsonValue, d as McpDefinitionInput, f as ResourceLink, g as ToolContent, h as ToolAnnotations, i as EmbeddedBlobResource, l as McpAllowedOrigins, m as TextContent, n as ContentAnnotations, o as EmbeddedTextResource, p as ResourceLinkIcon, r as ContentBlock, s as ImageContent, t as AudioContent, u as McpDefinition, v as ToolHandlerResult, w as McpClientInfo, x as ZodSchema, y as ZodOutputSchema } from "./types-DnGEKnvI.cjs";
 //#region src/core/define.d.ts
 /**
  * Declare a single MCP tool. Import the result into your MCP definition's
@@ -71,4 +71,4 @@ type LogLevel = "silent" | "error" | "warn" | "info" | "debug";
  */
 declare function setLogLevel(level: LogLevel): LogLevel;
 //#endregion
-export { type AudioContent, type ContentAnnotations, type ContentBlock, type EmbeddedBlobResource, type EmbeddedResource, type EmbeddedTextResource, type ImageContent, type IssuerOAuthOptions, type JsonValue, type JwtClaims, type LogLevel, type McpAllowedOrigins, type McpDefinitionInput, type MetricsConfig, type MetricsOptions, type ResourceLink, type ResourceLinkIcon, type TextContent, type ToolAnnotations, type ToolContent, ToolContext, type ToolDefinition, ToolError, type ToolHandlerResult, type ZodOutputSchema, type ZodRawShape, type ZodSchema, auth, defineMcp, defineTool, setLogLevel };
+export { type AudioContent, type ContentAnnotations, type ContentBlock, type EmbeddedBlobResource, type EmbeddedResource, type EmbeddedTextResource, type ImageContent, type IssuerOAuthOptions, type JsonValue, type JwtClaims, type LogLevel, type McpAllowedOrigins, type McpClientInfo, type McpDefinitionInput, type MetricsConfig, type MetricsOptions, type ProgressUpdate, type ResourceLink, type ResourceLinkIcon, type TextContent, type ToolAnnotations, type ToolContent, ToolContext, type ToolDefinition, ToolError, type ToolHandlerResult, type ZodOutputSchema, type ZodRawShape, type ZodSchema, auth, defineMcp, defineTool, setLogLevel };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { C as MetricsOptions, E as McpAuthConfig, S as MetricsConfig, T as JwtClaims, _ as ToolDefinition, a as EmbeddedResource, b as ZodRawShape, c as JsonValue, d as McpDefinitionInput, f as ResourceLink, g as ToolContent, h as ToolAnnotations, i as EmbeddedBlobResource, l as McpAllowedOrigins, m as TextContent, n as ContentAnnotations, o as EmbeddedTextResource, p as ResourceLinkIcon, r as ContentBlock, s as ImageContent, t as AudioContent, u as McpDefinition, v as ToolHandlerResult, w as ToolContext, x as ZodSchema, y as ZodOutputSchema } from "./types-D1cgsnPu.js";
+import { C as MetricsOptions, D as JwtClaims, E as ToolContext, O as McpAuthConfig, S as MetricsConfig, T as ProgressUpdate, _ as ToolDefinition, a as EmbeddedResource, b as ZodRawShape, c as JsonValue, d as McpDefinitionInput, f as ResourceLink, g as ToolContent, h as ToolAnnotations, i as EmbeddedBlobResource, l as McpAllowedOrigins, m as TextContent, n as ContentAnnotations, o as EmbeddedTextResource, p as ResourceLinkIcon, r as ContentBlock, s as ImageContent, t as AudioContent, u as McpDefinition, v as ToolHandlerResult, w as McpClientInfo, x as ZodSchema, y as ZodOutputSchema } from "./types-DnGEKnvI.js";
 //#region src/core/define.d.ts
 /**
  * Declare a single MCP tool. Import the result into your MCP definition's
@@ -71,4 +71,4 @@ type LogLevel = "silent" | "error" | "warn" | "info" | "debug";
  */
 declare function setLogLevel(level: LogLevel): LogLevel;
 //#endregion
-export { type AudioContent, type ContentAnnotations, type ContentBlock, type EmbeddedBlobResource, type EmbeddedResource, type EmbeddedTextResource, type ImageContent, type IssuerOAuthOptions, type JsonValue, type JwtClaims, type LogLevel, type McpAllowedOrigins, type McpDefinitionInput, type MetricsConfig, type MetricsOptions, type ResourceLink, type ResourceLinkIcon, type TextContent, type ToolAnnotations, type ToolContent, ToolContext, type ToolDefinition, ToolError, type ToolHandlerResult, type ZodOutputSchema, type ZodRawShape, type ZodSchema, auth, defineMcp, defineTool, setLogLevel };
+export { type AudioContent, type ContentAnnotations, type ContentBlock, type EmbeddedBlobResource, type EmbeddedResource, type EmbeddedTextResource, type ImageContent, type IssuerOAuthOptions, type JsonValue, type JwtClaims, type LogLevel, type McpAllowedOrigins, type McpClientInfo, type McpDefinitionInput, type MetricsConfig, type MetricsOptions, type ProgressUpdate, type ResourceLink, type ResourceLinkIcon, type TextContent, type ToolAnnotations, type ToolContent, ToolContext, type ToolDefinition, ToolError, type ToolHandlerResult, type ZodOutputSchema, type ZodRawShape, type ZodSchema, auth, defineMcp, defineTool, setLogLevel };

package/dist/index.js

@@ -1,6 +1,6 @@
 import { a as setLogLevel, o as parseSafeUrl, s as trimTrailingSlash, u as resolveMetricsConfig } from "./logger-Ctv5xUSD.js";
 import { t as jsonSchemaFromDefinition } from "./schema-CW1jKvio.js";
-import { i as ToolContext, t as ToolError } from "./errors-DSe96Ffd.js";
+import { i as ToolContext, t as ToolError } from "./errors-Bwd1L0Rf.js";
 //#region src/core/define.ts
 function assertUniqueNames(mcp) {
 	const seen = /* @__PURE__ */ new Set();

package/dist/{io-CvALf9NE.d.ts → io-Bh_WpbxU.d.cts}

@@ -1,4 +1,4 @@
-import "./list-tools-qIvVJeWZ.js";
+import "./types-DnGEKnvI.cjs";
 //#region src/manifest/io.d.ts
 /**
  * Shape every MCP Vite plugin exposes on its `api` so `runExtract` can read

package/dist/{io-BEwvgN8s.d.cts → io-DrHivYt0.d.ts}

@@ -1,4 +1,4 @@
-import "./list-tools-zagoI477.cjs";
+import "./types-DnGEKnvI.js";
 //#region src/manifest/io.d.ts
 /**
  * Shape every MCP Vite plugin exposes on its `api` so `runExtract` can read

package/dist/mcp-Bl7pQYdv.js

@@ -0,0 +1,346 @@
+import { i as log, r as describeError } from "./logger-Ctv5xUSD.js";
+import { n as schemaFromDefinition, t as jsonSchemaFromDefinition } from "./schema-CW1jKvio.js";
+import { i as ToolContext, n as errorSummary, r as resolveToolErrorMessage } from "./errors-Bwd1L0Rf.js";
+import { c as createNoopRecorder, d as finalizeWireResponse, l as nowMs, n as createRequestAuthorizer, t as evaluateCors } from "./cors-C_VffY86.js";
+import { getParseErrorMessage, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";
+import { CLIENT_CAPABILITIES_META_KEY, CLIENT_INFO_META_KEY, McpServer, createMcpHandler } from "@modelcontextprotocol/server";
+//#region src/core/content.ts
+/** Join the text of a result's `type: "text"` blocks into one string, dropping
+*  binary/resource blocks. Used to surface a `tool_error` message in the local
+*  log; never sent over the telemetry wire. Returns undefined when there is no
+*  text to show. */
+function extractTextContent(content) {
+	if (!content) return void 0;
+	const text = content.filter((block) => block.type === "text").map((block) => block.text).join("\n").trim();
+	return text.length > 0 ? text : void 0;
+}
+//#endregion
+//#region src/core/tool-result.ts
+function normalizeResourceLinkIcon(icon) {
+	if (typeof icon.sizes !== "string") return icon;
+	const { sizes, ...rest } = icon;
+	const normalized = sizes.trim();
+	return normalized === "" ? rest : {
+		...rest,
+		sizes: normalized.split(/\s+/)
+	};
+}
+function normalizeToolContent(content) {
+	return (content ?? []).map((block) => {
+		if (block.type !== "resource_link" || block.icons === void 0) return block;
+		return {
+			...block,
+			icons: block.icons.map(normalizeResourceLinkIcon)
+		};
+	});
+}
+function outputValidationError(text) {
+	return {
+		content: [{
+			type: "text",
+			text
+		}],
+		isError: true
+	};
+}
+function isJsonValue(value, ancestors = /* @__PURE__ */ new Set()) {
+	if (value === null || typeof value === "boolean" || typeof value === "string") return true;
+	if (typeof value === "number") return Number.isFinite(value);
+	if (typeof value !== "object" || ancestors.has(value)) return false;
+	const prototype = Object.getPrototypeOf(value);
+	if (!Array.isArray(value) && prototype !== Object.prototype && prototype !== null) return false;
+	ancestors.add(value);
+	const valid = (Array.isArray(value) ? value : Object.values(value).filter((entry) => entry !== void 0)).every((entry) => isJsonValue(entry, ancestors));
+	ancestors.delete(value);
+	return valid;
+}
+async function finalizeToolResult(tool, result) {
+	const content = normalizeToolContent(result.content);
+	let structuredContent = result.structuredContent;
+	if (tool.outputSchema && !result.isError) {
+		if (structuredContent === void 0) return outputValidationError(`Output validation error: Tool ${tool.name} has an output schema but no structured content was provided`);
+		try {
+			const parsed = await safeParseAsync(schemaFromDefinition(tool.outputSchema), structuredContent);
+			if (!parsed.success) return outputValidationError(`Output validation error: Invalid structured content for tool ${tool.name}: ${getParseErrorMessage(parsed.error)}`);
+			structuredContent = parsed.data;
+		} catch {
+			return outputValidationError(`Output validation error: Could not validate structured content for tool ${tool.name}`);
+		}
+	}
+	if (structuredContent !== void 0 && !isJsonValue(structuredContent)) {
+		if (!result.isError) return outputValidationError(`Output validation error: Tool ${tool.name} returned a non-JSON structured value`);
+		structuredContent = void 0;
+	}
+	if (structuredContent !== void 0 && (structuredContent === null || typeof structuredContent !== "object" || Array.isArray(structuredContent)) && !content.some((block) => block.type === "text")) content.push({
+		type: "text",
+		text: JSON.stringify(structuredContent)
+	});
+	return {
+		content,
+		structuredContent,
+		isError: result.isError
+	};
+}
+//#endregion
+//#region src/protocols/gate.ts
+function createGatedHandler(gate) {
+	const allow = [...gate.methods, "OPTIONS"].join(", ");
+	const respond = async (request, recorder) => {
+		const authResult = await gate.authorizer.authorize(request, recorder);
+		if (!authResult.ok) return authResult.response;
+		if (!gate.methods.includes(request.method)) return gate.methodNotAllowed(allow);
+		return gate.handle(request, authResult, recorder);
+	};
+	return async (request, recorder = createNoopRecorder()) => {
+		const cors = evaluateCors(request, gate.allowedOrigins);
+		if (!cors.ok) {
+			log.info("cors.origin_rejected", {
+				origin: request.headers.get("Origin"),
+				httpMethod: request.method
+			});
+			await recorder.emit({
+				tool: null,
+				method: "authorize",
+				outcome: "origin_rejected",
+				httpMethod: request.method,
+				durationMs: 0
+			});
+			return finalizeWireResponse(request, cors.response);
+		}
+		if (request.method === "OPTIONS") return cors.preflight(allow);
+		const final = finalizeWireResponse(request, cors.withHeaders(await respond(request, recorder)));
+		if (!final.headers.has("Cache-Control")) final.headers.set("Cache-Control", "no-store");
+		return final;
+	};
+}
+//#endregion
+//#region src/protocols/mcp/protocol.ts
+const MODERN_PROTOCOL_VERSION = "2026-07-28";
+function statelessMethodNotAllowed(allow) {
+	return Response.json({
+		jsonrpc: "2.0",
+		id: null,
+		error: {
+			code: -32e3,
+			message: "Method not allowed: stateless server offers no standalone SSE stream (GET) or session (DELETE)."
+		}
+	}, {
+		status: 405,
+		headers: { Allow: allow }
+	});
+}
+function zodIssues(error) {
+	const issues = error?.issues;
+	if (!Array.isArray(issues)) return [{ message: String(error) }];
+	return issues.map((issue) => {
+		const value = issue;
+		return {
+			message: typeof value.message === "string" ? value.message : String(value.message),
+			...Array.isArray(value.path) ? { path: value.path } : {}
+		};
+	});
+}
+function standardSchemaFromDefinition(definition) {
+	const schema = schemaFromDefinition(definition);
+	return { "~standard": {
+		version: 1,
+		vendor: "zod",
+		validate: async (value) => {
+			const parsed = await safeParseAsync(schema, value);
+			return parsed.success ? { value: parsed.data } : { issues: zodIssues(parsed.error) };
+		},
+		jsonSchema: {
+			input: () => jsonSchemaFromDefinition(definition, "input"),
+			output: () => jsonSchemaFromDefinition(definition, "output")
+		}
+	} };
+}
+function isPlainObject(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function toolRequestContext(sdkCtx, protocol) {
+	const mcpReq = sdkCtx?.mcpReq;
+	const client = { protocol };
+	const envelope = mcpReq?.envelope;
+	const info = envelope?.[CLIENT_INFO_META_KEY];
+	if (isPlainObject(info) && typeof info.name === "string" && typeof info.version === "string") client.info = info;
+	const capabilities = envelope?.[CLIENT_CAPABILITIES_META_KEY];
+	if (isPlainObject(capabilities)) {
+		client.capabilities = capabilities;
+		if (isPlainObject(capabilities.extensions)) client.extensions = capabilities.extensions;
+	}
+	const progressToken = (mcpReq?._meta)?.progressToken;
+	const notify = mcpReq?.notify;
+	const sendProgress = progressToken !== void 0 && notify ? async (update) => {
+		try {
+			await notify({
+				method: "notifications/progress",
+				params: {
+					progressToken,
+					...update
+				}
+			});
+		} catch (err) {
+			log.debug("mcp.progress_notify_failed", describeError(err));
+		}
+	} : void 0;
+	return {
+		signal: mcpReq?.signal,
+		client,
+		sendProgress
+	};
+}
+async function invokeTool(tool, auth, recorder, args, protocol, sdkCtx) {
+	const endUserId = auth?.principal.sub;
+	const start = nowMs();
+	let result;
+	try {
+		result = await tool.handler(args, new ToolContext(auth, toolRequestContext(sdkCtx, protocol)));
+	} catch (err) {
+		const callerMessage = resolveToolErrorMessage(err);
+		if (callerMessage === void 0) {
+			await recorder.emit({
+				tool: tool.name,
+				method: "tools/call",
+				outcome: "handler_error",
+				durationMs: nowMs() - start,
+				errorText: errorSummary(err),
+				endUserId,
+				protocol
+			});
+			return finalizeToolResult(tool, {
+				content: [{
+					type: "text",
+					text: "tool execution failed"
+				}],
+				isError: true
+			});
+		}
+		result = {
+			content: [{
+				type: "text",
+				text: callerMessage
+			}],
+			isError: true
+		};
+	}
+	if (result == null) {
+		await recorder.emit({
+			tool: tool.name,
+			method: "tools/call",
+			outcome: "handler_error",
+			durationMs: nowMs() - start,
+			endUserId,
+			protocol
+		});
+		return finalizeToolResult(tool, {
+			content: [{
+				type: "text",
+				text: `tool "${tool.name}" returned no result`
+			}],
+			isError: true
+		});
+	}
+	result = await finalizeToolResult(tool, result);
+	await recorder.emit({
+		tool: tool.name,
+		method: "tools/call",
+		outcome: result.isError ? "tool_error" : "ok",
+		durationMs: nowMs() - start,
+		errorText: result.isError ? extractTextContent(result.content) : void 0,
+		endUserId,
+		protocol
+	});
+	return result;
+}
+function adaptToolCallback(tool, auth, recorder, protocol) {
+	return async (first, second) => {
+		const sdkCtx = tool.inputSchema ? second : first;
+		const result = await invokeTool(tool, auth, recorder, tool.inputSchema ? first ?? {} : {}, protocol, sdkCtx);
+		return {
+			content: result.content ?? [],
+			structuredContent: result.structuredContent,
+			isError: result.isError
+		};
+	};
+}
+function buildServer(mcp, auth, recorder, era) {
+	const server = new McpServer({
+		name: mcp.name,
+		version: mcp.version,
+		title: mcp.title
+	}, {
+		instructions: mcp.instructions,
+		capabilities: { tools: { listChanged: false } }
+	});
+	for (const tool of mcp.tools) {
+		const config = {
+			title: tool.title,
+			description: tool.description,
+			annotations: tool.annotations,
+			...tool.outputSchema ? { outputSchema: standardSchemaFromDefinition(tool.outputSchema) } : {}
+		};
+		const callback = adaptToolCallback(tool, auth, recorder, era === "legacy" ? "legacy" : MODERN_PROTOCOL_VERSION);
+		if (tool.inputSchema) server.registerTool(tool.name, {
+			...config,
+			inputSchema: standardSchemaFromDefinition(tool.inputSchema)
+		}, callback);
+		else server.registerTool(tool.name, config, callback);
+	}
+	return server;
+}
+/**
+* Build a Web-Standard request handler that serves the MCP protocol over
+* streamable HTTP. A fresh `McpServer` + transport is constructed per
+* request — the transport is stateless, so this is cheap and there is no
+* cross-request state to leak. The per-request `recorder` is supplied by the
+* caller (the stack handler) so telemetry reads the runtime env in-flight.
+*/
+function createMcpProtocolHandler(mcp, options = {}) {
+	const authorizer = createRequestAuthorizer(mcp, options);
+	const handle = async (request, authResult, recorder) => {
+		let protocolError;
+		const reportTransportError = async (error) => {
+			await recorder.emit({
+				tool: null,
+				method: "transport",
+				outcome: "transport_error",
+				durationMs: 0,
+				endUserId: authResult.auth?.principal.sub
+			});
+			log.error("mcp.transport_error", {
+				...error === void 0 ? {} : describeError(error),
+				outcome: "500 internal error"
+			});
+		};
+		try {
+			const response = await createMcpHandler(({ era }) => buildServer(mcp, authResult.auth, recorder, era), {
+				legacy: "stateless",
+				onerror: (error) => {
+					protocolError = error;
+				}
+			}).fetch(request);
+			if (response.status >= 500) await reportTransportError(protocolError);
+			return response;
+		} catch (err) {
+			await reportTransportError(err);
+			return Response.json({
+				jsonrpc: "2.0",
+				id: null,
+				error: {
+					code: -32603,
+					message: "internal error"
+				}
+			}, { status: 500 });
+		}
+	};
+	return createGatedHandler({
+		authorizer,
+		allowedOrigins: mcp.allowedOrigins,
+		methods: ["POST"],
+		methodNotAllowed: statelessMethodNotAllowed,
+		handle
+	});
+}
+//#endregion
+export { createMcpProtocolHandler as t };