@lovable.dev/mcp-js 0.29.0-rc.1 → 0.29.0-rc.2

package/dist/stacks/supabase/index.js

@@ -1,10 +1,8 @@
 import { s as trimTrailingSlash } from "../../logger-Ctv5xUSD.js";
-import { c as createRecorderForRuntime, o as assertResourcePathShape } from "../../cors-BDTQQJE2.js";
+import { a as assertResourcePathShape, s as createRecorderForRuntime } from "../../cors-C_VffY86.js";
 import { t as OAUTH_PROTECTED_RESOURCE_METADATA_PATH } from "../../metadata-path-CAkNcfyY.js";
-import { t as createMcpProtocolHandler } from "../../mcp-HDkUr85V.js";
+import { t as createMcpProtocolHandler } from "../../mcp-Bl7pQYdv.js";
 import { createOAuthProtectedResourceMetadataHandler } from "../../protocols/oauth-metadata.js";
-import { n as createListToolsHandler } from "../../list-tools-C1OiTDR9.js";
-import { t as createInvokeToolHandler } from "../../rest-Cr7NhxL3.js";
 import { t as applyForwardedOrigin } from "../../forwarded-B3EBjHnA.js";
 import { n as assertFunctionName, t as FUNCTIONS_MOUNT_PREFIX } from "../../paths-IS65L6TA.js";
 //#region src/stacks/supabase/handler.ts
@@ -14,24 +12,8 @@ function deriveResourcePath(options) {
 	assertFunctionName(options.functionName);
 	return `${FUNCTIONS_MOUNT_PREFIX}${options.functionName}`;
 }
-function dispatchFor(pathname) {
-	const path = pathname.length > 1 ? pathname.replace(/\/+$/, "") : pathname;
-	if (path.endsWith("/.well-known/oauth-protected-resource")) return { kind: "metadata" };
-	if (path.endsWith("/.mcp/list-tools")) return { kind: "list-tools" };
-	const invokeMatch = /\/\.mcp\/invoke-tool\/([^/]+)$/.exec(path);
-	if (invokeMatch) {
-		let toolName;
-		try {
-			toolName = decodeURIComponent(invokeMatch[1]);
-		} catch {
-			return { kind: "mcp" };
-		}
-		return {
-			kind: "invoke-tool",
-			toolName
-		};
-	}
-	return { kind: "mcp" };
+function isMetadataPath(pathname) {
+	return (pathname.length > 1 ? pathname.replace(/\/+$/, "") : pathname).endsWith(OAUTH_PROTECTED_RESOURCE_METADATA_PATH);
 }
 /**
 * Build a single Web-Standard handler that serves the full MCP surface from
@@ -40,12 +22,9 @@ function dispatchFor(pathname) {
 * | Suffix | Target |
 * | --- | --- |
 * | `/.well-known/oauth-protected-resource` | RFC 9728 metadata |
-* | `/.mcp/list-tools` | REST tool catalog |
-* | `/.mcp/invoke-tool/<tool>` | REST tool dispatcher |
 * | (anything else) | MCP streamable-HTTP protocol |
 *
 * Pass the handler to `Deno.serve(...)` in the emitted function entry.
-* The same OAuth bearer gate protects every dispatch target.
 */
 function createSupabaseHandler(mcp, options = {}) {
 	const resourcePath = deriveResourcePath(options);
@@ -61,19 +40,11 @@ function createSupabaseHandler(mcp, options = {}) {
 		trustForwardedProto: true
 	};
 	const mcpHandler = createMcpProtocolHandler(mcp, runtimeOptions);
-	const listToolsHandler = createListToolsHandler(mcp, runtimeOptions);
-	const invokeToolHandler = createInvokeToolHandler(mcp, runtimeOptions);
 	const metadataHandler = createOAuthProtectedResourceMetadataHandler(mcp, runtimeOptions);
 	return async (request) => {
 		const req = applyForwardedOrigin(request, runtimeOptions);
-		const recorder = createRecorderForRuntime(mcp, { stack: "supabase" });
-		const target = dispatchFor(new URL(req.url).pathname);
-		switch (target.kind) {
-			case "metadata": return metadataHandler(req);
-			case "list-tools": return listToolsHandler(req, recorder);
-			case "invoke-tool": return invokeToolHandler(req, target.toolName, recorder);
-			case "mcp": return mcpHandler(req, recorder);
-		}
+		if (isMetadataPath(new URL(req.url).pathname)) return metadataHandler(req);
+		return mcpHandler(req, createRecorderForRuntime(mcp, { stack: "supabase" }));
 	};
 }
 //#endregion

package/dist/stacks/supabase/vite.cjs

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_package = require("../../package-ClCIqol1.cjs");
+const require_package = require("../../package-DNSwCau1.cjs");
 const require_fs_errors = require("../../fs-errors-CWNzOV75.cjs");
 const require_supabase_config = require("../../supabase-config-Dz7dnUv0.cjs");
 const require_paths = require("../../paths-OP318a6c.cjs");

package/dist/stacks/supabase/vite.d.cts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-B_YLNWDL.cjs";
+import { t as McpPluginApi } from "../../io-Bh_WpbxU.cjs";
 import { Plugin } from "vite";
 //#region src/stacks/supabase/vite.d.ts
 interface McpPluginOptions {

package/dist/stacks/supabase/vite.d.ts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-BYUyNFdn.js";
+import { t as McpPluginApi } from "../../io-DrHivYt0.js";
 import { Plugin } from "vite";
 //#region src/stacks/supabase/vite.d.ts
 interface McpPluginOptions {

package/dist/stacks/supabase/vite.js

@@ -1,4 +1,4 @@
-import { t as version } from "../../package-BI5r4uGM.js";
+import { t as version } from "../../package-CYA-5C24.js";
 import { t as isFileMissing } from "../../fs-errors-PA2t1TIp.js";
 import { t as readSupabaseProjectRef } from "../../supabase-config-CakTU8YF.js";
 import { n as assertFunctionName, t as FUNCTIONS_MOUNT_PREFIX } from "../../paths-IS65L6TA.js";

package/dist/stacks/tanstack/index.cjs

@@ -1,9 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_cors = require("../../cors-BRv5KXKQ.cjs");
-const require_mcp = require("../../mcp-C9B7o75m.cjs");
+const require_cors = require("../../cors-DNzLB6qa.cjs");
+const require_mcp = require("../../mcp-CRdT2Fai.cjs");
 const require_protocols_oauth_metadata = require("../../protocols/oauth-metadata.cjs");
-const require_list_tools = require("../../list-tools-DES10avA.cjs");
-const require_rest = require("../../rest-BBdfHMGh.cjs");
 const require_forwarded = require("../../forwarded-BC_RHnn5.cjs");
 //#region src/stacks/tanstack/handlers.ts
 const STACK = "tanstack";
@@ -16,23 +14,6 @@ function createTanStackMcpHandler(mcp, options = {}) {
 	return ({ request }) => handler(require_forwarded.applyForwardedOrigin(request, options), require_cors.createRecorderForRuntime(mcp, { stack: STACK }));
 }
 /**
-* Build a TanStack Start handler for `GET /.mcp/list-tools`. Returns the
-* tool catalog (name, description, annotations, JSON Schemas) as JSON.
-*/
-function createTanStackListToolsHandler(mcp, options = {}) {
-	const handler = require_list_tools.createListToolsHandler(mcp, options);
-	return ({ request }) => handler(require_forwarded.applyForwardedOrigin(request, options), require_cors.createRecorderForRuntime(mcp, { stack: STACK }));
-}
-/**
-* Build a TanStack Start handler for `POST /.mcp/invoke-tool/$tool`.
-* Reads the tool name from `params.tool`, validates the JSON body, and
-* dispatches to the matching `defineTool` handler.
-*/
-function createTanStackInvokeToolHandler(mcp, options = {}) {
-	const handler = require_rest.createInvokeToolHandler(mcp, options);
-	return ({ request, params }) => handler(require_forwarded.applyForwardedOrigin(request, options), params.tool, require_cors.createRecorderForRuntime(mcp, { stack: STACK }));
-}
-/**
 * Build a TanStack Start handler for `GET /.well-known/oauth-protected-resource`.
 * When the MCP definition has no OAuth auth config the handler returns 404.
 */
@@ -41,7 +22,5 @@ function createTanStackOAuthProtectedResourceMetadataHandler(mcp, options = {})
 	return ({ request }) => handler(require_forwarded.applyForwardedOrigin(request, options));
 }
 //#endregion
-exports.createTanStackInvokeToolHandler = createTanStackInvokeToolHandler;
-exports.createTanStackListToolsHandler = createTanStackListToolsHandler;
 exports.createTanStackMcpHandler = createTanStackMcpHandler;
 exports.createTanStackOAuthProtectedResourceMetadataHandler = createTanStackOAuthProtectedResourceMetadataHandler;

package/dist/stacks/tanstack/index.d.cts

@@ -1,37 +1,20 @@
-import { u as McpDefinition } from "../../types-D1cgsnPu.cjs";
-import { t as McpRuntimeOptions } from "../../authorize-BzZFS0zi.cjs";
+import { u as McpDefinition } from "../../types-DnGEKnvI.cjs";
+import { t as McpRuntimeOptions } from "../../authorize-Cqr7Jps0.cjs";
 //#region src/stacks/tanstack/handlers.d.ts
 interface TanStackRouteCtx {
   request: Request;
 }
-interface TanStackParamRouteCtx<TParam extends string> {
-  request: Request;
-  params: Record<TParam, string>;
-}
 type TanStackMcpHandler = (ctx: TanStackRouteCtx) => Promise<Response>;
-type TanStackListToolsHandler = (ctx: TanStackRouteCtx) => Promise<Response>;
-type TanStackInvokeToolHandler = (ctx: TanStackParamRouteCtx<"tool">) => Promise<Response>;
 type TanStackOAuthProtectedResourceMetadataHandler = (ctx: TanStackRouteCtx) => Promise<Response>;
 /**
  * Build a TanStack Start handler for the MCP protocol endpoint
  * (`POST /mcp`). Assignable directly to a route's `ANY` handler.
  */
 declare function createTanStackMcpHandler(mcp: McpDefinition, options?: McpRuntimeOptions): TanStackMcpHandler;
-/**
- * Build a TanStack Start handler for `GET /.mcp/list-tools`. Returns the
- * tool catalog (name, description, annotations, JSON Schemas) as JSON.
- */
-declare function createTanStackListToolsHandler(mcp: McpDefinition, options?: McpRuntimeOptions): TanStackListToolsHandler;
-/**
- * Build a TanStack Start handler for `POST /.mcp/invoke-tool/$tool`.
- * Reads the tool name from `params.tool`, validates the JSON body, and
- * dispatches to the matching `defineTool` handler.
- */
-declare function createTanStackInvokeToolHandler(mcp: McpDefinition, options?: McpRuntimeOptions): TanStackInvokeToolHandler;
 /**
  * Build a TanStack Start handler for `GET /.well-known/oauth-protected-resource`.
  * When the MCP definition has no OAuth auth config the handler returns 404.
  */
 declare function createTanStackOAuthProtectedResourceMetadataHandler(mcp: McpDefinition, options?: McpRuntimeOptions): TanStackOAuthProtectedResourceMetadataHandler;
 //#endregion
-export { type TanStackInvokeToolHandler, type TanStackListToolsHandler, type TanStackMcpHandler, type TanStackOAuthProtectedResourceMetadataHandler, createTanStackInvokeToolHandler, createTanStackListToolsHandler, createTanStackMcpHandler, createTanStackOAuthProtectedResourceMetadataHandler };
+export { type TanStackMcpHandler, type TanStackOAuthProtectedResourceMetadataHandler, createTanStackMcpHandler, createTanStackOAuthProtectedResourceMetadataHandler };

package/dist/stacks/tanstack/index.d.ts

@@ -1,37 +1,20 @@
-import { u as McpDefinition } from "../../types-D1cgsnPu.js";
-import { t as McpRuntimeOptions } from "../../authorize-BjNE3LPr.js";
+import { u as McpDefinition } from "../../types-DnGEKnvI.js";
+import { t as McpRuntimeOptions } from "../../authorize-Bpz8oxjF.js";
 //#region src/stacks/tanstack/handlers.d.ts
 interface TanStackRouteCtx {
   request: Request;
 }
-interface TanStackParamRouteCtx<TParam extends string> {
-  request: Request;
-  params: Record<TParam, string>;
-}
 type TanStackMcpHandler = (ctx: TanStackRouteCtx) => Promise<Response>;
-type TanStackListToolsHandler = (ctx: TanStackRouteCtx) => Promise<Response>;
-type TanStackInvokeToolHandler = (ctx: TanStackParamRouteCtx<"tool">) => Promise<Response>;
 type TanStackOAuthProtectedResourceMetadataHandler = (ctx: TanStackRouteCtx) => Promise<Response>;
 /**
  * Build a TanStack Start handler for the MCP protocol endpoint
  * (`POST /mcp`). Assignable directly to a route's `ANY` handler.
  */
 declare function createTanStackMcpHandler(mcp: McpDefinition, options?: McpRuntimeOptions): TanStackMcpHandler;
-/**
- * Build a TanStack Start handler for `GET /.mcp/list-tools`. Returns the
- * tool catalog (name, description, annotations, JSON Schemas) as JSON.
- */
-declare function createTanStackListToolsHandler(mcp: McpDefinition, options?: McpRuntimeOptions): TanStackListToolsHandler;
-/**
- * Build a TanStack Start handler for `POST /.mcp/invoke-tool/$tool`.
- * Reads the tool name from `params.tool`, validates the JSON body, and
- * dispatches to the matching `defineTool` handler.
- */
-declare function createTanStackInvokeToolHandler(mcp: McpDefinition, options?: McpRuntimeOptions): TanStackInvokeToolHandler;
 /**
  * Build a TanStack Start handler for `GET /.well-known/oauth-protected-resource`.
  * When the MCP definition has no OAuth auth config the handler returns 404.
  */
 declare function createTanStackOAuthProtectedResourceMetadataHandler(mcp: McpDefinition, options?: McpRuntimeOptions): TanStackOAuthProtectedResourceMetadataHandler;
 //#endregion
-export { type TanStackInvokeToolHandler, type TanStackListToolsHandler, type TanStackMcpHandler, type TanStackOAuthProtectedResourceMetadataHandler, createTanStackInvokeToolHandler, createTanStackListToolsHandler, createTanStackMcpHandler, createTanStackOAuthProtectedResourceMetadataHandler };
+export { type TanStackMcpHandler, type TanStackOAuthProtectedResourceMetadataHandler, createTanStackMcpHandler, createTanStackOAuthProtectedResourceMetadataHandler };

package/dist/stacks/tanstack/index.js

@@ -1,8 +1,6 @@
-import { c as createRecorderForRuntime } from "../../cors-BDTQQJE2.js";
-import { t as createMcpProtocolHandler } from "../../mcp-HDkUr85V.js";
+import { s as createRecorderForRuntime } from "../../cors-C_VffY86.js";
+import { t as createMcpProtocolHandler } from "../../mcp-Bl7pQYdv.js";
 import { createOAuthProtectedResourceMetadataHandler } from "../../protocols/oauth-metadata.js";
-import { n as createListToolsHandler } from "../../list-tools-C1OiTDR9.js";
-import { t as createInvokeToolHandler } from "../../rest-Cr7NhxL3.js";
 import { t as applyForwardedOrigin } from "../../forwarded-B3EBjHnA.js";
 //#region src/stacks/tanstack/handlers.ts
 const STACK = "tanstack";
@@ -15,23 +13,6 @@ function createTanStackMcpHandler(mcp, options = {}) {
 	return ({ request }) => handler(applyForwardedOrigin(request, options), createRecorderForRuntime(mcp, { stack: STACK }));
 }
 /**
-* Build a TanStack Start handler for `GET /.mcp/list-tools`. Returns the
-* tool catalog (name, description, annotations, JSON Schemas) as JSON.
-*/
-function createTanStackListToolsHandler(mcp, options = {}) {
-	const handler = createListToolsHandler(mcp, options);
-	return ({ request }) => handler(applyForwardedOrigin(request, options), createRecorderForRuntime(mcp, { stack: STACK }));
-}
-/**
-* Build a TanStack Start handler for `POST /.mcp/invoke-tool/$tool`.
-* Reads the tool name from `params.tool`, validates the JSON body, and
-* dispatches to the matching `defineTool` handler.
-*/
-function createTanStackInvokeToolHandler(mcp, options = {}) {
-	const handler = createInvokeToolHandler(mcp, options);
-	return ({ request, params }) => handler(applyForwardedOrigin(request, options), params.tool, createRecorderForRuntime(mcp, { stack: STACK }));
-}
-/**
 * Build a TanStack Start handler for `GET /.well-known/oauth-protected-resource`.
 * When the MCP definition has no OAuth auth config the handler returns 404.
 */
@@ -40,4 +21,4 @@ function createTanStackOAuthProtectedResourceMetadataHandler(mcp, options = {})
 	return ({ request }) => handler(applyForwardedOrigin(request, options));
 }
 //#endregion
-export { createTanStackInvokeToolHandler, createTanStackListToolsHandler, createTanStackMcpHandler, createTanStackOAuthProtectedResourceMetadataHandler };
+export { createTanStackMcpHandler, createTanStackOAuthProtectedResourceMetadataHandler };

package/dist/stacks/tanstack/vite.cjs

@@ -25,32 +25,17 @@ function wellKnownRouteFile(routesDir, urlPath) {
 		return index === segments.length - 1 ? `${escaped}.ts` : escaped;
 	}));
 }
-function resolveRestRoutes(routesDir, mcpUrlPath) {
-	const parentSegments = mcpUrlPath.replace(/^\/+/, "").replace(/\/+$/, "").split("/").slice(0, -1);
-	const restDir = (0, node_path.resolve)(routesDir, ...parentSegments, "[.mcp]");
-	const restUrlBase = `/${[...parentSegments, ".mcp"].join("/")}`;
-	return {
-		listToolsRouteFile: (0, node_path.resolve)(restDir, "list-tools.ts"),
-		invokeToolRouteFile: (0, node_path.resolve)(restDir, "invoke-tool", "$tool.ts"),
-		listToolsLiteral: `${restUrlBase}/list-tools`,
-		invokeToolLiteral: `${restUrlBase}/invoke-tool/$tool`
-	};
-}
-function resolveAllRoutes(projectRoot, routesDirOption, routeFileName, mcpUrlPath, metadataUrlPath) {
+function resolveAllRoutes(projectRoot, routesDirOption, routeFileName, metadataUrlPath) {
 	const routesDir = (0, node_path.resolve)(projectRoot, routesDirOption);
 	assertContains(projectRoot, routesDir, `routesDir "${routesDirOption}"`);
 	const mcpRouteFile = (0, node_path.resolve)(routesDir, routeFileName);
 	assertContains(routesDir, mcpRouteFile, `routeFileName "${routeFileName}"`);
 	const metadataRouteFile = wellKnownRouteFile(routesDir, metadataUrlPath);
 	assertContains(routesDir, metadataRouteFile, `metadataPath "${metadataUrlPath}"`);
-	const rest = resolveRestRoutes(routesDir, mcpUrlPath);
-	assertContains(routesDir, rest.listToolsRouteFile, `REST routes for path "${mcpUrlPath}"`);
-	assertContains(routesDir, rest.invokeToolRouteFile, `REST routes for path "${mcpUrlPath}"`);
 	return {
 		routesDir,
 		mcpRouteFile,
-		metadataRouteFile,
-		...rest
+		metadataRouteFile
 	};
 }
 function assertUrlPathShape(urlPath) {
@@ -82,7 +67,6 @@ function relativeImportSpecifier(routeFile, target) {
 function buildRouteSource(route, resourcePath, metadataPath, trustForwardedHost, trustForwardedProto, mcpEntry, projectRoot) {
 	const mcpImport = relativeImportSpecifier(route.file, mcpEntry);
 	const routeRel = normalizePath((0, node_path.relative)(projectRoot, route.file));
-	const note = route.spaFallbackNote ? "      // ANY: TanStack returns SPA HTML for methods not in `handlers`; the SDK 405s instead.\n" : "";
 	const optionEntries = [`resourcePath: "${resourcePath}"`];
 	if (metadataPath !== void 0) optionEntries.push(`metadataPath: "${metadataPath}"`);
 	if (trustForwardedHost) if (route.attestsForwardedHost) {
@@ -106,7 +90,7 @@ import mcp from "${mcpImport}";
 ${routeOpen}
   server: {
     handlers: {
-${note}      ANY: ${route.handlerFactory}(mcp, ${optionsObject}),
+      ANY: ${route.handlerFactory}(mcp, ${optionsObject}),
     },
   },
 });
@@ -187,7 +171,6 @@ function mcpPlugin(options = {}) {
 	assertUrlPathShape(rawUrlPath);
 	const routeFileName = options.routeFileName ?? deriveRouteFileName(rawUrlPath);
 	const urlPath = canonicalUrlPath(rawUrlPath);
-	const emitRestRoutes = options.restRoutes !== false;
 	const emitProtectedResourceMetadataRoute = options.protectedResourceMetadataRoute !== false;
 	if (options.metadataPath !== void 0) {
 		if (!emitProtectedResourceMetadataRoute) throw new Error(`@lovable.dev/mcp-js: metadataPath sets where the protected-resource metadata route is served, so it can't be combined with protectedResourceMetadataRoute: false.`);
@@ -199,7 +182,7 @@ function mcpPlugin(options = {}) {
 	const trustForwardedProto = options.trustForwardedProto !== false;
 	let projectRoot = process.cwd();
 	let mcpEntry = (0, node_path.resolve)(projectRoot, mcpEntryOption);
-	let { routesDir, mcpRouteFile, metadataRouteFile, listToolsRouteFile, invokeToolRouteFile, listToolsLiteral, invokeToolLiteral } = resolveAllRoutes(projectRoot, routesDirOption, routeFileName, urlPath, metadataUrlPath);
+	let { routesDir, mcpRouteFile, metadataRouteFile } = resolveAllRoutes(projectRoot, routesDirOption, routeFileName, metadataUrlPath);
 	const regenerate = () => {
 		let mcpEntryExists = true;
 		try {
@@ -221,17 +204,6 @@ function mcpPlugin(options = {}) {
 				handlerFactory: "createTanStackOAuthProtectedResourceMetadataHandler",
 				attestsForwardedHost: true
 			});
-			if (emitRestRoutes) routes.push({
-				file: listToolsRouteFile,
-				routeLiteral: listToolsLiteral,
-				handlerFactory: "createTanStackListToolsHandler",
-				spaFallbackNote: true
-			}, {
-				file: invokeToolRouteFile,
-				routeLiteral: invokeToolLiteral,
-				handlerFactory: "createTanStackInvokeToolHandler",
-				spaFallbackNote: true
-			});
 			for (const route of routes) {
 				expected.add(route.file);
 				writeIfChanged(route.file, buildRouteSource(route, urlPath, injectedMetadataPath, trustForwardedHost, trustForwardedProto, mcpEntry, projectRoot));
@@ -263,7 +235,7 @@ function mcpPlugin(options = {}) {
 		configResolved(config) {
 			projectRoot = config.root;
 			mcpEntry = (0, node_path.resolve)(projectRoot, mcpEntryOption);
-			({routesDir, mcpRouteFile, metadataRouteFile, listToolsRouteFile, invokeToolRouteFile, listToolsLiteral, invokeToolLiteral} = resolveAllRoutes(projectRoot, routesDirOption, routeFileName, urlPath, metadataUrlPath));
+			({routesDir, mcpRouteFile, metadataRouteFile} = resolveAllRoutes(projectRoot, routesDirOption, routeFileName, metadataUrlPath));
 			regenerate();
 		},
 		configureServer(server) {

package/dist/stacks/tanstack/vite.d.cts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-B_YLNWDL.cjs";
+import { t as McpPluginApi } from "../../io-Bh_WpbxU.cjs";
 import { Plugin } from "vite";
 //#region src/stacks/tanstack/vite.d.ts
 interface McpPluginOptions {
@@ -8,24 +8,12 @@ interface McpPluginOptions {
    * @default "src/lib/mcp/index.ts"
    */
   mcpEntry?: string;
-  /**
-   * Where TanStack route files live, relative to the project root.
-   * The plugin emits `<routesDir>/<routeFileName>` plus the REST companion
-   * routes here.
-   * @default "src/routes"
-   */
+  /** Where TanStack route files live; the plugin emits `<routesDir>/<routeFileName>` here.
+   * @default "src/routes" */
   routesDir?: string;
   /**
    * Public URL path for the MCP-protocol route.
    *
-   * The REST companion routes co-locate with this path under a `.mcp`
-   * sub-segment of the same parent prefix: `/mcp` keeps them at
-   * `/.mcp/list-tools` and `/.mcp/invoke-tool/$tool`, while
-   * `/api/public/mcp` moves them to `/api/public/.mcp/*`. The `.mcp`
-   * namespace keeps them from colliding with user-defined URLs without
-   * anchoring them at the root. Set `restRoutes: false` to drop the
-   * companions entirely.
-   *
    * Must start with `/` and use only `/mcp`-style segments; anything more
    * exotic doesn't map cleanly to a TanStack file name.
    * @default "/mcp"
@@ -37,14 +25,6 @@ interface McpPluginOptions {
    * `/api/mcp` → `api/mcp.ts`).
    */
   routeFileName?: string;
-  /**
-   * Set to `false` to skip emitting the REST companion routes at
-   * `<path-parent>/.mcp/list-tools` and `<path-parent>/.mcp/<tool>`. Set
-   * `protectedResourceMetadataRoute: false` as well if you want the MCP
-   * protocol route to be the only emitted surface.
-   * @default true
-   */
-  restRoutes?: boolean;
   /**
    * Set to `false` to skip emitting the OAuth protected-resource metadata
    * route at `/.well-known/oauth-protected-resource`.
@@ -77,11 +57,8 @@ interface McpPluginOptions {
    * @default true
    */
   trustForwardedHost?: boolean;
-  /**
-   * Derive the public scheme for same-origin checks and advertised OAuth URLs
-   * from `X-Forwarded-Proto`. Safe only behind an overwriting proxy.
-   * @default true
-   */
+  /** Derive the public scheme from `X-Forwarded-Proto`; safe only behind an
+   * overwriting proxy. @default true */
   trustForwardedProto?: boolean;
 }
 declare function assertUrlPathShape(urlPath: string): string;

package/dist/stacks/tanstack/vite.d.ts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-BYUyNFdn.js";
+import { t as McpPluginApi } from "../../io-DrHivYt0.js";
 import { Plugin } from "vite";
 //#region src/stacks/tanstack/vite.d.ts
 interface McpPluginOptions {
@@ -8,24 +8,12 @@ interface McpPluginOptions {
    * @default "src/lib/mcp/index.ts"
    */
   mcpEntry?: string;
-  /**
-   * Where TanStack route files live, relative to the project root.
-   * The plugin emits `<routesDir>/<routeFileName>` plus the REST companion
-   * routes here.
-   * @default "src/routes"
-   */
+  /** Where TanStack route files live; the plugin emits `<routesDir>/<routeFileName>` here.
+   * @default "src/routes" */
   routesDir?: string;
   /**
    * Public URL path for the MCP-protocol route.
    *
-   * The REST companion routes co-locate with this path under a `.mcp`
-   * sub-segment of the same parent prefix: `/mcp` keeps them at
-   * `/.mcp/list-tools` and `/.mcp/invoke-tool/$tool`, while
-   * `/api/public/mcp` moves them to `/api/public/.mcp/*`. The `.mcp`
-   * namespace keeps them from colliding with user-defined URLs without
-   * anchoring them at the root. Set `restRoutes: false` to drop the
-   * companions entirely.
-   *
    * Must start with `/` and use only `/mcp`-style segments; anything more
    * exotic doesn't map cleanly to a TanStack file name.
    * @default "/mcp"
@@ -37,14 +25,6 @@ interface McpPluginOptions {
    * `/api/mcp` → `api/mcp.ts`).
    */
   routeFileName?: string;
-  /**
-   * Set to `false` to skip emitting the REST companion routes at
-   * `<path-parent>/.mcp/list-tools` and `<path-parent>/.mcp/<tool>`. Set
-   * `protectedResourceMetadataRoute: false` as well if you want the MCP
-   * protocol route to be the only emitted surface.
-   * @default true
-   */
-  restRoutes?: boolean;
   /**
    * Set to `false` to skip emitting the OAuth protected-resource metadata
    * route at `/.well-known/oauth-protected-resource`.
@@ -77,11 +57,8 @@ interface McpPluginOptions {
    * @default true
    */
   trustForwardedHost?: boolean;
-  /**
-   * Derive the public scheme for same-origin checks and advertised OAuth URLs
-   * from `X-Forwarded-Proto`. Safe only behind an overwriting proxy.
-   * @default true
-   */
+  /** Derive the public scheme from `X-Forwarded-Proto`; safe only behind an
+   * overwriting proxy. @default true */
   trustForwardedProto?: boolean;
 }
 declare function assertUrlPathShape(urlPath: string): string;

package/dist/stacks/tanstack/vite.js

@@ -21,32 +21,17 @@ function wellKnownRouteFile(routesDir, urlPath) {
 		return index === segments.length - 1 ? `${escaped}.ts` : escaped;
 	}));
 }
-function resolveRestRoutes(routesDir, mcpUrlPath) {
-	const parentSegments = mcpUrlPath.replace(/^\/+/, "").replace(/\/+$/, "").split("/").slice(0, -1);
-	const restDir = resolve(routesDir, ...parentSegments, "[.mcp]");
-	const restUrlBase = `/${[...parentSegments, ".mcp"].join("/")}`;
-	return {
-		listToolsRouteFile: resolve(restDir, "list-tools.ts"),
-		invokeToolRouteFile: resolve(restDir, "invoke-tool", "$tool.ts"),
-		listToolsLiteral: `${restUrlBase}/list-tools`,
-		invokeToolLiteral: `${restUrlBase}/invoke-tool/$tool`
-	};
-}
-function resolveAllRoutes(projectRoot, routesDirOption, routeFileName, mcpUrlPath, metadataUrlPath) {
+function resolveAllRoutes(projectRoot, routesDirOption, routeFileName, metadataUrlPath) {
 	const routesDir = resolve(projectRoot, routesDirOption);
 	assertContains(projectRoot, routesDir, `routesDir "${routesDirOption}"`);
 	const mcpRouteFile = resolve(routesDir, routeFileName);
 	assertContains(routesDir, mcpRouteFile, `routeFileName "${routeFileName}"`);
 	const metadataRouteFile = wellKnownRouteFile(routesDir, metadataUrlPath);
 	assertContains(routesDir, metadataRouteFile, `metadataPath "${metadataUrlPath}"`);
-	const rest = resolveRestRoutes(routesDir, mcpUrlPath);
-	assertContains(routesDir, rest.listToolsRouteFile, `REST routes for path "${mcpUrlPath}"`);
-	assertContains(routesDir, rest.invokeToolRouteFile, `REST routes for path "${mcpUrlPath}"`);
 	return {
 		routesDir,
 		mcpRouteFile,
-		metadataRouteFile,
-		...rest
+		metadataRouteFile
 	};
 }
 function assertUrlPathShape(urlPath) {
@@ -78,7 +63,6 @@ function relativeImportSpecifier(routeFile, target) {
 function buildRouteSource(route, resourcePath, metadataPath, trustForwardedHost, trustForwardedProto, mcpEntry, projectRoot) {
 	const mcpImport = relativeImportSpecifier(route.file, mcpEntry);
 	const routeRel = normalizePath(relative(projectRoot, route.file));
-	const note = route.spaFallbackNote ? "      // ANY: TanStack returns SPA HTML for methods not in `handlers`; the SDK 405s instead.\n" : "";
 	const optionEntries = [`resourcePath: "${resourcePath}"`];
 	if (metadataPath !== void 0) optionEntries.push(`metadataPath: "${metadataPath}"`);
 	if (trustForwardedHost) if (route.attestsForwardedHost) {
@@ -102,7 +86,7 @@ import mcp from "${mcpImport}";
 ${routeOpen}
   server: {
     handlers: {
-${note}      ANY: ${route.handlerFactory}(mcp, ${optionsObject}),
+      ANY: ${route.handlerFactory}(mcp, ${optionsObject}),
     },
   },
 });
@@ -183,7 +167,6 @@ function mcpPlugin(options = {}) {
 	assertUrlPathShape(rawUrlPath);
 	const routeFileName = options.routeFileName ?? deriveRouteFileName(rawUrlPath);
 	const urlPath = canonicalUrlPath(rawUrlPath);
-	const emitRestRoutes = options.restRoutes !== false;
 	const emitProtectedResourceMetadataRoute = options.protectedResourceMetadataRoute !== false;
 	if (options.metadataPath !== void 0) {
 		if (!emitProtectedResourceMetadataRoute) throw new Error(`@lovable.dev/mcp-js: metadataPath sets where the protected-resource metadata route is served, so it can't be combined with protectedResourceMetadataRoute: false.`);
@@ -195,7 +178,7 @@ function mcpPlugin(options = {}) {
 	const trustForwardedProto = options.trustForwardedProto !== false;
 	let projectRoot = process.cwd();
 	let mcpEntry = resolve(projectRoot, mcpEntryOption);
-	let { routesDir, mcpRouteFile, metadataRouteFile, listToolsRouteFile, invokeToolRouteFile, listToolsLiteral, invokeToolLiteral } = resolveAllRoutes(projectRoot, routesDirOption, routeFileName, urlPath, metadataUrlPath);
+	let { routesDir, mcpRouteFile, metadataRouteFile } = resolveAllRoutes(projectRoot, routesDirOption, routeFileName, metadataUrlPath);
 	const regenerate = () => {
 		let mcpEntryExists = true;
 		try {
@@ -217,17 +200,6 @@ function mcpPlugin(options = {}) {
 				handlerFactory: "createTanStackOAuthProtectedResourceMetadataHandler",
 				attestsForwardedHost: true
 			});
-			if (emitRestRoutes) routes.push({
-				file: listToolsRouteFile,
-				routeLiteral: listToolsLiteral,
-				handlerFactory: "createTanStackListToolsHandler",
-				spaFallbackNote: true
-			}, {
-				file: invokeToolRouteFile,
-				routeLiteral: invokeToolLiteral,
-				handlerFactory: "createTanStackInvokeToolHandler",
-				spaFallbackNote: true
-			});
 			for (const route of routes) {
 				expected.add(route.file);
 				writeIfChanged(route.file, buildRouteSource(route, urlPath, injectedMetadataPath, trustForwardedHost, trustForwardedProto, mcpEntry, projectRoot));
@@ -259,7 +231,7 @@ function mcpPlugin(options = {}) {
 		configResolved(config) {
 			projectRoot = config.root;
 			mcpEntry = resolve(projectRoot, mcpEntryOption);
-			({routesDir, mcpRouteFile, metadataRouteFile, listToolsRouteFile, invokeToolRouteFile, listToolsLiteral, invokeToolLiteral} = resolveAllRoutes(projectRoot, routesDirOption, routeFileName, urlPath, metadataUrlPath));
+			({routesDir, mcpRouteFile, metadataRouteFile} = resolveAllRoutes(projectRoot, routesDirOption, routeFileName, metadataUrlPath));
 			regenerate();
 		},
 		configureServer(server) {