@lovable.dev/mcp-js 0.29.0-rc.2 → 0.29.0-rc.3

package/dist/{authorize-Cqr7Jps0.d.cts → authorize-9hTTG-qJ.d.cts}

@@ -1,4 +1,4 @@
-import "./types-DnGEKnvI.cjs";
+import "./types-3CZPz364.cjs";
 //#region src/auth/authorize.d.ts
 interface McpRuntimeOptions {
   /** Public MCP path OAuth resource/audience checks bind to when it differs from the request path. */

package/dist/{authorize-Bpz8oxjF.d.ts → authorize-DNUlPT7k.d.ts}

@@ -1,4 +1,4 @@
-import "./types-DnGEKnvI.js";
+import "./types-3CZPz364.js";
 //#region src/auth/authorize.d.ts
 interface McpRuntimeOptions {
   /** Public MCP path OAuth resource/audience checks bind to when it differs from the request path. */

package/dist/base-7cq6HCPO.d.ts

@@ -0,0 +1,36 @@
+import { E as McpProtocolEra } from "./types-3CZPz364.js";
+//#region src/metrics/impl/base.d.ts
+type InvocationOutcome = "ok" | "tool_error" | "handler_error" | "transport_error" | "auth_challenge" | "origin_rejected" | "auth_discovery_config_error" | "auth_discovery_unreachable" | "auth_jwks_config_error" | "auth_jwks_unreachable";
+/** One recorded MCP call. Carries no arguments or response payloads — only the
+ *  tool name, the JSON-RPC method, the result class, timing, and byte sizes.
+ *  `errorText` is the sole exception: it is logged locally for debugging and
+ *  deliberately never included in the OTLP payload (see `emit` / `buildLogsPayload`). */
+interface InvocationRecord {
+  /** Tool name for `tools/call`; `null` for list/initialize, transport faults, and `authorize` records. */
+  tool: string | null;
+  /** JSON-RPC method, e.g. `tools/call`; `authorize` for records from the authorization gate. */
+  method: string;
+  outcome: InvocationOutcome;
+  durationMs: number;
+  reqBytes?: number;
+  resBytes?: number;
+  /** HTTP request method. Set on `auth_challenge` so probe traffic (GET vs
+   *  POST discovery) is distinguishable; absent on tool-call records. */
+  httpMethod?: string;
+  /** Wire surface that served the call; absent on records emitted before
+   *  protocol classification (auth gate, transport faults). */
+  protocol?: McpProtocolEra;
+  /** The app end-user that made the call (the access token `sub`), or
+   *  `undefined` when the request is unauthenticated. Not a Lovable identity. */
+  endUserId?: string;
+  /** Caller-visible `isError` text (`tool_error`) or a bounded internal-exception
+   *  summary (`handler_error`). Local log only — never sent to the collector. */
+  errorText?: string;
+}
+/** A per-request telemetry recorder. `emit` logs the invocation and sends it as a
+ *  single OTLP POST, awaited so it lands before the request ends. */
+interface MetricsRecorder {
+  emit(ev: InvocationRecord): Promise<void>;
+}
+//#endregion
+export { MetricsRecorder as t };

package/dist/base-CHNFFrMG.d.cts

@@ -0,0 +1,36 @@
+import { E as McpProtocolEra } from "./types-3CZPz364.cjs";
+//#region src/metrics/impl/base.d.ts
+type InvocationOutcome = "ok" | "tool_error" | "handler_error" | "transport_error" | "auth_challenge" | "origin_rejected" | "auth_discovery_config_error" | "auth_discovery_unreachable" | "auth_jwks_config_error" | "auth_jwks_unreachable";
+/** One recorded MCP call. Carries no arguments or response payloads — only the
+ *  tool name, the JSON-RPC method, the result class, timing, and byte sizes.
+ *  `errorText` is the sole exception: it is logged locally for debugging and
+ *  deliberately never included in the OTLP payload (see `emit` / `buildLogsPayload`). */
+interface InvocationRecord {
+  /** Tool name for `tools/call`; `null` for list/initialize, transport faults, and `authorize` records. */
+  tool: string | null;
+  /** JSON-RPC method, e.g. `tools/call`; `authorize` for records from the authorization gate. */
+  method: string;
+  outcome: InvocationOutcome;
+  durationMs: number;
+  reqBytes?: number;
+  resBytes?: number;
+  /** HTTP request method. Set on `auth_challenge` so probe traffic (GET vs
+   *  POST discovery) is distinguishable; absent on tool-call records. */
+  httpMethod?: string;
+  /** Wire surface that served the call; absent on records emitted before
+   *  protocol classification (auth gate, transport faults). */
+  protocol?: McpProtocolEra;
+  /** The app end-user that made the call (the access token `sub`), or
+   *  `undefined` when the request is unauthenticated. Not a Lovable identity. */
+  endUserId?: string;
+  /** Caller-visible `isError` text (`tool_error`) or a bounded internal-exception
+   *  summary (`handler_error`). Local log only — never sent to the collector. */
+  errorText?: string;
+}
+/** A per-request telemetry recorder. `emit` logs the invocation and sends it as a
+ *  single OTLP POST, awaited so it lands before the request ends. */
+interface MetricsRecorder {
+  emit(ev: InvocationRecord): Promise<void>;
+}
+//#endregion
+export { MetricsRecorder as t };

package/dist/cli/extract-manifest.cjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 const require_schema = require("../schema-D3vClxb7.cjs");
-const require_package = require("../package-DNSwCau1.cjs");
+const require_package = require("../package-DAQNwT8T.cjs");
 const require_fs_errors = require("../fs-errors-CWNzOV75.cjs");
 let node_fs = require("node:fs");
 let node_path = require("node:path");

package/dist/cli/extract-manifest.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { t as jsonSchemaFromDefinition } from "../schema-CW1jKvio.js";
-import { t as version } from "../package-CYA-5C24.js";
+import { t as version } from "../package-2ZppkCKf.js";
 import { t as isFileMissing } from "../fs-errors-PA2t1TIp.js";
 import { lstatSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname, resolve } from "node:path";

package/dist/{cors-DNzLB6qa.cjs → cors-BDv7pyfD.cjs}

@@ -1,5 +1,5 @@
 const require_logger = require("./logger-CN1q-KNn.cjs");
-const require_package = require("./package-DNSwCau1.cjs");
+const require_package = require("./package-DAQNwT8T.cjs");
 require("./metadata-path-zd7NSNoa.cjs");
 let jose = require("jose");
 //#region src/core/http.ts
@@ -28,7 +28,8 @@ function methodNotAllowed(allow) {
 //#endregion
 //#region src/metrics/otlp.ts
 const SCOPE_NAME = "@lovable.dev/mcp-js";
-const EVENT_NAME = "mcp.tool.invocation";
+const TOOL_EVENT_NAME = "mcp.tool.invocation";
+const GATE_EVENT_NAME = "mcp.gate.rejection";
 const SEVERITY_INFO = 9;
 function strAttr(key, value) {
 	return {
@@ -43,8 +44,9 @@ function intAttr(key, value) {
 	};
 }
 function toLogRecord(rec) {
+	const eventName = rec.method === "authorize" ? GATE_EVENT_NAME : TOOL_EVENT_NAME;
 	const attributes = [
-		strAttr("event.name", EVENT_NAME),
+		strAttr("event.name", eventName),
 		strAttr("mcp.method", rec.method),
 		strAttr("mcp.outcome", rec.outcome),
 		intAttr("mcp.duration_ms", rec.durationMs)
@@ -61,7 +63,7 @@ function toLogRecord(rec) {
 		observedTimeUnixNano: rec.timeUnixNano,
 		severityNumber: SEVERITY_INFO,
 		severityText: "INFO",
-		body: { stringValue: EVENT_NAME },
+		body: { stringValue: eventName },
 		attributes
 	};
 }
@@ -151,7 +153,7 @@ var BaseMetricRecorder = class {
 	}
 	async emit(ev) {
 		await this.applyLazyLogLevel();
-		if (ev.outcome !== "auth_challenge") require_logger.log.info("tool.invoked", {
+		if (ev.outcome !== "auth_challenge") require_logger.log.info(ev.method === "authorize" ? "gate.rejected" : "tool.invoked", {
 			tool: ev.tool,
 			method: ev.method,
 			outcome: ev.outcome,
@@ -1051,6 +1053,12 @@ Object.defineProperty(exports, "methodNotAllowed", {
 		return methodNotAllowed;
 	}
 });
+Object.defineProperty(exports, "normalizeHttpMethod", {
+	enumerable: true,
+	get: function() {
+		return normalizeHttpMethod;
+	}
+});
 Object.defineProperty(exports, "nowMs", {
 	enumerable: true,
 	get: function() {

package/dist/{cors-C_VffY86.js → cors-kKiIJSyL.js}

@@ -1,5 +1,5 @@
 import { i as log, n as applyLogLevelFromEnv, o as parseSafeUrl, r as describeError, s as trimTrailingSlash, t as LOG_LEVEL_ENV_VAR, u as resolveMetricsConfig } from "./logger-Ctv5xUSD.js";
-import { t as version } from "./package-CYA-5C24.js";
+import { t as version } from "./package-2ZppkCKf.js";
 import "./metadata-path-CAkNcfyY.js";
 import { createLocalJWKSet, decodeProtectedHeader, errors, jwtVerify } from "jose";
 //#region src/core/http.ts
@@ -28,7 +28,8 @@ function methodNotAllowed(allow) {
 //#endregion
 //#region src/metrics/otlp.ts
 const SCOPE_NAME = "@lovable.dev/mcp-js";
-const EVENT_NAME = "mcp.tool.invocation";
+const TOOL_EVENT_NAME = "mcp.tool.invocation";
+const GATE_EVENT_NAME = "mcp.gate.rejection";
 const SEVERITY_INFO = 9;
 function strAttr(key, value) {
 	return {
@@ -43,8 +44,9 @@ function intAttr(key, value) {
 	};
 }
 function toLogRecord(rec) {
+	const eventName = rec.method === "authorize" ? GATE_EVENT_NAME : TOOL_EVENT_NAME;
 	const attributes = [
-		strAttr("event.name", EVENT_NAME),
+		strAttr("event.name", eventName),
 		strAttr("mcp.method", rec.method),
 		strAttr("mcp.outcome", rec.outcome),
 		intAttr("mcp.duration_ms", rec.durationMs)
@@ -61,7 +63,7 @@ function toLogRecord(rec) {
 		observedTimeUnixNano: rec.timeUnixNano,
 		severityNumber: SEVERITY_INFO,
 		severityText: "INFO",
-		body: { stringValue: EVENT_NAME },
+		body: { stringValue: eventName },
 		attributes
 	};
 }
@@ -151,7 +153,7 @@ var BaseMetricRecorder = class {
 	}
 	async emit(ev) {
 		await this.applyLazyLogLevel();
-		if (ev.outcome !== "auth_challenge") log.info("tool.invoked", {
+		if (ev.outcome !== "auth_challenge") log.info(ev.method === "authorize" ? "gate.rejected" : "tool.invoked", {
 			tool: ev.tool,
 			method: ev.method,
 			outcome: ev.outcome,
@@ -997,4 +999,4 @@ function evaluateCors(request, allowedOrigins) {
 	};
 }
 //#endregion
-export { assertResourcePathShape as a, createNoopRecorder as c, finalizeWireResponse as d, methodNotAllowed as f, oauthConfigurationErrorResponse as i, nowMs as l, createRequestAuthorizer as n, resolveProtectedResource as o, getOAuthRuntime as r, createRecorderForRuntime as s, evaluateCors as t, JSON_HEADERS as u };
+export { oauthConfigurationErrorResponse as a, createRecorderForRuntime as c, JSON_HEADERS as d, finalizeWireResponse as f, normalizeHttpMethod as i, createNoopRecorder as l, createRequestAuthorizer as n, assertResourcePathShape as o, methodNotAllowed as p, getOAuthRuntime as r, resolveProtectedResource as s, evaluateCors as t, nowMs as u };

package/dist/forwarded-Bnrwxbuj.js

@@ -0,0 +1,25 @@
+//#region src/core/forwarded.ts
+/** Rewrites the request URL to the proxy-forwarded public origin so derived OAuth
+*  URLs name the client-facing host. Trust model: AGENTS.md § Forwarded-header trust model. */
+function applyForwardedOrigin(request, options) {
+	const proto = options.trustForwardedProto ? firstForwardedValue(request, "x-forwarded-proto") : void 0;
+	const host = options.trustForwardedHost ? firstForwardedValue(request, "x-forwarded-host") : void 0;
+	if (proto === void 0 && host === void 0) return request;
+	const url = new URL(request.url);
+	let changed = false;
+	if (proto !== void 0 && `${proto}:` !== url.protocol) {
+		url.protocol = `${proto}:`;
+		changed = true;
+	}
+	if (host !== void 0 && host !== url.host) {
+		url.host = host;
+		changed = true;
+	}
+	return changed ? new Request(url.href, request) : request;
+}
+function firstForwardedValue(request, header) {
+	const value = request.headers.get(header)?.split(",")[0]?.trim();
+	return value ? value : void 0;
+}
+//#endregion
+export { applyForwardedOrigin as t };

package/dist/forwarded-OdBzzCMF.cjs

@@ -0,0 +1,30 @@
+//#region src/core/forwarded.ts
+/** Rewrites the request URL to the proxy-forwarded public origin so derived OAuth
+*  URLs name the client-facing host. Trust model: AGENTS.md § Forwarded-header trust model. */
+function applyForwardedOrigin(request, options) {
+	const proto = options.trustForwardedProto ? firstForwardedValue(request, "x-forwarded-proto") : void 0;
+	const host = options.trustForwardedHost ? firstForwardedValue(request, "x-forwarded-host") : void 0;
+	if (proto === void 0 && host === void 0) return request;
+	const url = new URL(request.url);
+	let changed = false;
+	if (proto !== void 0 && `${proto}:` !== url.protocol) {
+		url.protocol = `${proto}:`;
+		changed = true;
+	}
+	if (host !== void 0 && host !== url.host) {
+		url.host = host;
+		changed = true;
+	}
+	return changed ? new Request(url.href, request) : request;
+}
+function firstForwardedValue(request, header) {
+	const value = request.headers.get(header)?.split(",")[0]?.trim();
+	return value ? value : void 0;
+}
+//#endregion
+Object.defineProperty(exports, "applyForwardedOrigin", {
+	enumerable: true,
+	get: function() {
+		return applyForwardedOrigin;
+	}
+});

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { C as MetricsOptions, D as JwtClaims, E as ToolContext, O as McpAuthConfig, S as MetricsConfig, T as ProgressUpdate, _ as ToolDefinition, a as EmbeddedResource, b as ZodRawShape, c as JsonValue, d as McpDefinitionInput, f as ResourceLink, g as ToolContent, h as ToolAnnotations, i as EmbeddedBlobResource, l as McpAllowedOrigins, m as TextContent, n as ContentAnnotations, o as EmbeddedTextResource, p as ResourceLinkIcon, r as ContentBlock, s as ImageContent, t as AudioContent, u as McpDefinition, v as ToolHandlerResult, w as McpClientInfo, x as ZodSchema, y as ZodOutputSchema } from "./types-DnGEKnvI.cjs";
+import { A as McpAuthConfig, C as MetricsConfig, D as ProgressUpdate, E as McpProtocolEra, O as ToolContext, S as ZodSchema, T as McpClientInfo, _ as ToolContent, a as EmbeddedResource, b as ZodOutputSchema, c as JsonValue, d as McpDefinition, f as McpDefinitionInput, g as ToolAnnotations, h as TextContent, i as EmbeddedBlobResource, k as JwtClaims, l as JsonValueInput, m as ResourceLinkIcon, n as ContentAnnotations, o as EmbeddedTextResource, p as ResourceLink, r as ContentBlock, s as ImageContent, t as AudioContent, u as McpAllowedOrigins, v as ToolDefinition, w as MetricsOptions, x as ZodRawShape, y as ToolHandlerResult } from "./types-3CZPz364.cjs";
 //#region src/core/define.d.ts
 /**
  * Declare a single MCP tool. Import the result into your MCP definition's
@@ -71,4 +71,4 @@ type LogLevel = "silent" | "error" | "warn" | "info" | "debug";
  */
 declare function setLogLevel(level: LogLevel): LogLevel;
 //#endregion
-export { type AudioContent, type ContentAnnotations, type ContentBlock, type EmbeddedBlobResource, type EmbeddedResource, type EmbeddedTextResource, type ImageContent, type IssuerOAuthOptions, type JsonValue, type JwtClaims, type LogLevel, type McpAllowedOrigins, type McpClientInfo, type McpDefinitionInput, type MetricsConfig, type MetricsOptions, type ProgressUpdate, type ResourceLink, type ResourceLinkIcon, type TextContent, type ToolAnnotations, type ToolContent, ToolContext, type ToolDefinition, ToolError, type ToolHandlerResult, type ZodOutputSchema, type ZodRawShape, type ZodSchema, auth, defineMcp, defineTool, setLogLevel };
+export { type AudioContent, type ContentAnnotations, type ContentBlock, type EmbeddedBlobResource, type EmbeddedResource, type EmbeddedTextResource, type ImageContent, type IssuerOAuthOptions, type JsonValue, type JsonValueInput, type JwtClaims, type LogLevel, type McpAllowedOrigins, type McpClientInfo, type McpDefinitionInput, type McpProtocolEra, type MetricsConfig, type MetricsOptions, type ProgressUpdate, type ResourceLink, type ResourceLinkIcon, type TextContent, type ToolAnnotations, type ToolContent, ToolContext, type ToolDefinition, ToolError, type ToolHandlerResult, type ZodOutputSchema, type ZodRawShape, type ZodSchema, auth, defineMcp, defineTool, setLogLevel };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { C as MetricsOptions, D as JwtClaims, E as ToolContext, O as McpAuthConfig, S as MetricsConfig, T as ProgressUpdate, _ as ToolDefinition, a as EmbeddedResource, b as ZodRawShape, c as JsonValue, d as McpDefinitionInput, f as ResourceLink, g as ToolContent, h as ToolAnnotations, i as EmbeddedBlobResource, l as McpAllowedOrigins, m as TextContent, n as ContentAnnotations, o as EmbeddedTextResource, p as ResourceLinkIcon, r as ContentBlock, s as ImageContent, t as AudioContent, u as McpDefinition, v as ToolHandlerResult, w as McpClientInfo, x as ZodSchema, y as ZodOutputSchema } from "./types-DnGEKnvI.js";
+import { A as McpAuthConfig, C as MetricsConfig, D as ProgressUpdate, E as McpProtocolEra, O as ToolContext, S as ZodSchema, T as McpClientInfo, _ as ToolContent, a as EmbeddedResource, b as ZodOutputSchema, c as JsonValue, d as McpDefinition, f as McpDefinitionInput, g as ToolAnnotations, h as TextContent, i as EmbeddedBlobResource, k as JwtClaims, l as JsonValueInput, m as ResourceLinkIcon, n as ContentAnnotations, o as EmbeddedTextResource, p as ResourceLink, r as ContentBlock, s as ImageContent, t as AudioContent, u as McpAllowedOrigins, v as ToolDefinition, w as MetricsOptions, x as ZodRawShape, y as ToolHandlerResult } from "./types-3CZPz364.js";
 //#region src/core/define.d.ts
 /**
  * Declare a single MCP tool. Import the result into your MCP definition's
@@ -71,4 +71,4 @@ type LogLevel = "silent" | "error" | "warn" | "info" | "debug";
  */
 declare function setLogLevel(level: LogLevel): LogLevel;
 //#endregion
-export { type AudioContent, type ContentAnnotations, type ContentBlock, type EmbeddedBlobResource, type EmbeddedResource, type EmbeddedTextResource, type ImageContent, type IssuerOAuthOptions, type JsonValue, type JwtClaims, type LogLevel, type McpAllowedOrigins, type McpClientInfo, type McpDefinitionInput, type MetricsConfig, type MetricsOptions, type ProgressUpdate, type ResourceLink, type ResourceLinkIcon, type TextContent, type ToolAnnotations, type ToolContent, ToolContext, type ToolDefinition, ToolError, type ToolHandlerResult, type ZodOutputSchema, type ZodRawShape, type ZodSchema, auth, defineMcp, defineTool, setLogLevel };
+export { type AudioContent, type ContentAnnotations, type ContentBlock, type EmbeddedBlobResource, type EmbeddedResource, type EmbeddedTextResource, type ImageContent, type IssuerOAuthOptions, type JsonValue, type JsonValueInput, type JwtClaims, type LogLevel, type McpAllowedOrigins, type McpClientInfo, type McpDefinitionInput, type McpProtocolEra, type MetricsConfig, type MetricsOptions, type ProgressUpdate, type ResourceLink, type ResourceLinkIcon, type TextContent, type ToolAnnotations, type ToolContent, ToolContext, type ToolDefinition, ToolError, type ToolHandlerResult, type ZodOutputSchema, type ZodRawShape, type ZodSchema, auth, defineMcp, defineTool, setLogLevel };

package/dist/{io-Bh_WpbxU.d.cts → io-CDV3mud0.d.cts}

@@ -1,4 +1,4 @@
-import "./types-DnGEKnvI.cjs";
+import "./types-3CZPz364.cjs";
 //#region src/manifest/io.d.ts
 /**
  * Shape every MCP Vite plugin exposes on its `api` so `runExtract` can read

package/dist/{io-DrHivYt0.d.ts → io-D_5cuaEL.d.ts}

@@ -1,4 +1,4 @@
-import "./types-DnGEKnvI.js";
+import "./types-3CZPz364.js";
 //#region src/manifest/io.d.ts
 /**
  * Shape every MCP Vite plugin exposes on its `api` so `runExtract` can read

package/dist/{mcp-CRdT2Fai.cjs → mcp-BSNdmnJl.cjs}

@@ -1,7 +1,7 @@
 const require_logger = require("./logger-CN1q-KNn.cjs");
 const require_schema = require("./schema-D3vClxb7.cjs");
 const require_errors = require("./errors-Cr95rSkB.cjs");
-const require_cors = require("./cors-DNzLB6qa.cjs");
+const require_cors = require("./cors-BDv7pyfD.cjs");
 let _modelcontextprotocol_sdk_server_zod_compat_js = require("@modelcontextprotocol/sdk/server/zod-compat.js");
 let _modelcontextprotocol_server = require("@modelcontextprotocol/server");
 //#region src/core/content.ts
@@ -94,15 +94,16 @@ function createGatedHandler(gate) {
 	return async (request, recorder = require_cors.createNoopRecorder()) => {
 		const cors = require_cors.evaluateCors(request, gate.allowedOrigins);
 		if (!cors.ok) {
+			const httpMethod = require_cors.normalizeHttpMethod(request.method);
 			require_logger.log.info("cors.origin_rejected", {
 				origin: request.headers.get("Origin"),
-				httpMethod: request.method
+				httpMethod
 			});
 			await recorder.emit({
 				tool: null,
 				method: "authorize",
 				outcome: "origin_rejected",
-				httpMethod: request.method,
+				httpMethod,
 				durationMs: 0
 			});
 			return require_cors.finalizeWireResponse(request, cors.response);
@@ -316,6 +317,7 @@ function createMcpProtocolHandler(mcp, options = {}) {
 		try {
 			const response = await (0, _modelcontextprotocol_server.createMcpHandler)(({ era }) => buildServer(mcp, authResult.auth, recorder, era), {
 				legacy: "stateless",
+				maxSubscriptions: 0,
 				onerror: (error) => {
 					protocolError = error;
 				}

package/dist/{mcp-Bl7pQYdv.js → mcp-GT9WU7nd.js}

@@ -1,7 +1,7 @@
 import { i as log, r as describeError } from "./logger-Ctv5xUSD.js";
 import { n as schemaFromDefinition, t as jsonSchemaFromDefinition } from "./schema-CW1jKvio.js";
 import { i as ToolContext, n as errorSummary, r as resolveToolErrorMessage } from "./errors-Bwd1L0Rf.js";
-import { c as createNoopRecorder, d as finalizeWireResponse, l as nowMs, n as createRequestAuthorizer, t as evaluateCors } from "./cors-C_VffY86.js";
+import { f as finalizeWireResponse, i as normalizeHttpMethod, l as createNoopRecorder, n as createRequestAuthorizer, t as evaluateCors, u as nowMs } from "./cors-kKiIJSyL.js";
 import { getParseErrorMessage, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";
 import { CLIENT_CAPABILITIES_META_KEY, CLIENT_INFO_META_KEY, McpServer, createMcpHandler } from "@modelcontextprotocol/server";
 //#region src/core/content.ts
@@ -94,15 +94,16 @@ function createGatedHandler(gate) {
 	return async (request, recorder = createNoopRecorder()) => {
 		const cors = evaluateCors(request, gate.allowedOrigins);
 		if (!cors.ok) {
+			const httpMethod = normalizeHttpMethod(request.method);
 			log.info("cors.origin_rejected", {
 				origin: request.headers.get("Origin"),
-				httpMethod: request.method
+				httpMethod
 			});
 			await recorder.emit({
 				tool: null,
 				method: "authorize",
 				outcome: "origin_rejected",
-				httpMethod: request.method,
+				httpMethod,
 				durationMs: 0
 			});
 			return finalizeWireResponse(request, cors.response);
@@ -316,6 +317,7 @@ function createMcpProtocolHandler(mcp, options = {}) {
 		try {
 			const response = await createMcpHandler(({ era }) => buildServer(mcp, authResult.auth, recorder, era), {
 				legacy: "stateless",
+				maxSubscriptions: 0,
 				onerror: (error) => {
 					protocolError = error;
 				}

package/dist/{package-CYA-5C24.js → package-2ZppkCKf.js}

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.29.0-rc.2";
+var version = "0.29.0-rc.3";
 //#endregion
 export { version as t };

package/dist/{package-DNSwCau1.cjs → package-DAQNwT8T.cjs}

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.29.0-rc.2";
+var version = "0.29.0-rc.3";
 //#endregion
 Object.defineProperty(exports, "version", {
 	enumerable: true,

package/dist/protocols/mcp/index.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_mcp = require("../../mcp-CRdT2Fai.cjs");
+const require_mcp = require("../../mcp-BSNdmnJl.cjs");
 exports.createMcpProtocolHandler = require_mcp.createMcpProtocolHandler;

package/dist/protocols/mcp/index.d.cts

@@ -1,39 +1,6 @@
-import { u as McpDefinition } from "../../types-DnGEKnvI.cjs";
-import { t as McpRuntimeOptions } from "../../authorize-Cqr7Jps0.cjs";
-//#region src/metrics/impl/base.d.ts
-type InvocationOutcome = "ok" | "tool_error" | "handler_error" | "transport_error" | "auth_challenge" | "origin_rejected" | "auth_discovery_config_error" | "auth_discovery_unreachable" | "auth_jwks_config_error" | "auth_jwks_unreachable";
-/** One recorded MCP call. Carries no arguments or response payloads — only the
- *  tool name, the JSON-RPC method, the result class, timing, and byte sizes.
- *  `errorText` is the sole exception: it is logged locally for debugging and
- *  deliberately never included in the OTLP payload (see `emit` / `buildLogsPayload`). */
-interface InvocationRecord {
-  /** Tool name for `tools/call`; `null` for list/initialize, transport faults, and `authorize` records. */
-  tool: string | null;
-  /** JSON-RPC method, e.g. `tools/call`; `authorize` for records from the authorization gate. */
-  method: string;
-  outcome: InvocationOutcome;
-  durationMs: number;
-  reqBytes?: number;
-  resBytes?: number;
-  /** HTTP request method. Set on `auth_challenge` so probe traffic (GET vs
-   *  POST discovery) is distinguishable; absent on tool-call records. */
-  httpMethod?: string;
-  /** Wire surface that served the call; absent on records emitted before
-   *  protocol classification (auth gate, transport faults). */
-  protocol?: "2026-07-28" | "legacy";
-  /** The app end-user that made the call (the access token `sub`), or
-   *  `undefined` when the request is unauthenticated. Not a Lovable identity. */
-  endUserId?: string;
-  /** Caller-visible `isError` text (`tool_error`) or a bounded internal-exception
-   *  summary (`handler_error`). Local log only — never sent to the collector. */
-  errorText?: string;
-}
-/** A per-request telemetry recorder. `emit` logs the invocation and sends it as a
- *  single OTLP POST, awaited so it lands before the request ends. */
-interface MetricsRecorder {
-  emit(ev: InvocationRecord): Promise<void>;
-}
-//#endregion
+import { d as McpDefinition } from "../../types-3CZPz364.cjs";
+import { t as MetricsRecorder } from "../../base-CHNFFrMG.cjs";
+import { t as McpRuntimeOptions } from "../../authorize-9hTTG-qJ.cjs";
 //#region src/protocols/mcp/protocol.d.ts
 type McpProtocolHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;
 /**

package/dist/protocols/mcp/index.d.ts

@@ -1,39 +1,6 @@
-import { u as McpDefinition } from "../../types-DnGEKnvI.js";
-import { t as McpRuntimeOptions } from "../../authorize-Bpz8oxjF.js";
-//#region src/metrics/impl/base.d.ts
-type InvocationOutcome = "ok" | "tool_error" | "handler_error" | "transport_error" | "auth_challenge" | "origin_rejected" | "auth_discovery_config_error" | "auth_discovery_unreachable" | "auth_jwks_config_error" | "auth_jwks_unreachable";
-/** One recorded MCP call. Carries no arguments or response payloads — only the
- *  tool name, the JSON-RPC method, the result class, timing, and byte sizes.
- *  `errorText` is the sole exception: it is logged locally for debugging and
- *  deliberately never included in the OTLP payload (see `emit` / `buildLogsPayload`). */
-interface InvocationRecord {
-  /** Tool name for `tools/call`; `null` for list/initialize, transport faults, and `authorize` records. */
-  tool: string | null;
-  /** JSON-RPC method, e.g. `tools/call`; `authorize` for records from the authorization gate. */
-  method: string;
-  outcome: InvocationOutcome;
-  durationMs: number;
-  reqBytes?: number;
-  resBytes?: number;
-  /** HTTP request method. Set on `auth_challenge` so probe traffic (GET vs
-   *  POST discovery) is distinguishable; absent on tool-call records. */
-  httpMethod?: string;
-  /** Wire surface that served the call; absent on records emitted before
-   *  protocol classification (auth gate, transport faults). */
-  protocol?: "2026-07-28" | "legacy";
-  /** The app end-user that made the call (the access token `sub`), or
-   *  `undefined` when the request is unauthenticated. Not a Lovable identity. */
-  endUserId?: string;
-  /** Caller-visible `isError` text (`tool_error`) or a bounded internal-exception
-   *  summary (`handler_error`). Local log only — never sent to the collector. */
-  errorText?: string;
-}
-/** A per-request telemetry recorder. `emit` logs the invocation and sends it as a
- *  single OTLP POST, awaited so it lands before the request ends. */
-interface MetricsRecorder {
-  emit(ev: InvocationRecord): Promise<void>;
-}
-//#endregion
+import { d as McpDefinition } from "../../types-3CZPz364.js";
+import { t as MetricsRecorder } from "../../base-7cq6HCPO.js";
+import { t as McpRuntimeOptions } from "../../authorize-DNUlPT7k.js";
 //#region src/protocols/mcp/protocol.d.ts
 type McpProtocolHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;
 /**

package/dist/protocols/mcp/index.js

@@ -1,2 +1,2 @@
-import { t as createMcpProtocolHandler } from "../../mcp-Bl7pQYdv.js";
+import { t as createMcpProtocolHandler } from "../../mcp-GT9WU7nd.js";
 export { createMcpProtocolHandler };

package/dist/protocols/oauth-metadata.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_logger = require("../logger-CN1q-KNn.cjs");
-const require_cors = require("../cors-DNzLB6qa.cjs");
+const require_cors = require("../cors-BDv7pyfD.cjs");
 //#region src/protocols/oauth-metadata.ts
 function notFound() {
 	return new Response(JSON.stringify({ error: "not found" }), {
@@ -52,9 +52,24 @@ function createOAuthProtectedResourceMetadataHandler(mcp, options = {}) {
 			return require_cors.oauthConfigurationErrorResponse();
 		}
 	};
-	return async (request) => {
+	return async (request, recorder = require_cors.createNoopRecorder()) => {
 		const cors = require_cors.evaluateCors(request, mcp.allowedOrigins);
-		if (!cors.ok) return require_cors.finalizeWireResponse(request, cors.response);
+		if (!cors.ok) {
+			const httpMethod = require_cors.normalizeHttpMethod(request.method);
+			require_logger.log.info("cors.origin_rejected", {
+				origin: request.headers.get("Origin"),
+				httpMethod,
+				route: "oauth-metadata"
+			});
+			await recorder.emit({
+				tool: null,
+				method: "authorize",
+				outcome: "origin_rejected",
+				httpMethod,
+				durationMs: 0
+			});
+			return require_cors.finalizeWireResponse(request, cors.response);
+		}
 		if (request.method === "OPTIONS") return cors.preflight("GET, HEAD, OPTIONS");
 		return require_cors.finalizeWireResponse(request, cors.withHeaders(await respond(request)));
 	};

package/dist/protocols/oauth-metadata.d.cts

@@ -1,7 +1,8 @@
-import { u as McpDefinition } from "../types-DnGEKnvI.cjs";
-import { t as McpRuntimeOptions } from "../authorize-Cqr7Jps0.cjs";
+import { d as McpDefinition } from "../types-3CZPz364.cjs";
+import { t as MetricsRecorder } from "../base-CHNFFrMG.cjs";
+import { t as McpRuntimeOptions } from "../authorize-9hTTG-qJ.cjs";
 //#region src/protocols/oauth-metadata.d.ts
-type OAuthProtectedResourceMetadataHandler = (request: Request) => Promise<Response>;
+type OAuthProtectedResourceMetadataHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;
 declare function createOAuthProtectedResourceMetadataHandler(mcp: McpDefinition, options?: McpRuntimeOptions): OAuthProtectedResourceMetadataHandler;
 //#endregion
 export { OAuthProtectedResourceMetadataHandler, createOAuthProtectedResourceMetadataHandler };

package/dist/protocols/oauth-metadata.d.ts

@@ -1,7 +1,8 @@
-import { u as McpDefinition } from "../types-DnGEKnvI.js";
-import { t as McpRuntimeOptions } from "../authorize-Bpz8oxjF.js";
+import { d as McpDefinition } from "../types-3CZPz364.js";
+import { t as MetricsRecorder } from "../base-7cq6HCPO.js";
+import { t as McpRuntimeOptions } from "../authorize-DNUlPT7k.js";
 //#region src/protocols/oauth-metadata.d.ts
-type OAuthProtectedResourceMetadataHandler = (request: Request) => Promise<Response>;
+type OAuthProtectedResourceMetadataHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;
 declare function createOAuthProtectedResourceMetadataHandler(mcp: McpDefinition, options?: McpRuntimeOptions): OAuthProtectedResourceMetadataHandler;
 //#endregion
 export { OAuthProtectedResourceMetadataHandler, createOAuthProtectedResourceMetadataHandler };

package/dist/protocols/oauth-metadata.js

@@ -1,5 +1,5 @@
 import { i as log, r as describeError } from "../logger-Ctv5xUSD.js";
-import { d as finalizeWireResponse, f as methodNotAllowed, i as oauthConfigurationErrorResponse, o as resolveProtectedResource, r as getOAuthRuntime, t as evaluateCors, u as JSON_HEADERS } from "../cors-C_VffY86.js";
+import { a as oauthConfigurationErrorResponse, d as JSON_HEADERS, f as finalizeWireResponse, i as normalizeHttpMethod, l as createNoopRecorder, p as methodNotAllowed, r as getOAuthRuntime, s as resolveProtectedResource, t as evaluateCors } from "../cors-kKiIJSyL.js";
 //#region src/protocols/oauth-metadata.ts
 function notFound() {
 	return new Response(JSON.stringify({ error: "not found" }), {
@@ -51,9 +51,24 @@ function createOAuthProtectedResourceMetadataHandler(mcp, options = {}) {
 			return oauthConfigurationErrorResponse();
 		}
 	};
-	return async (request) => {
+	return async (request, recorder = createNoopRecorder()) => {
 		const cors = evaluateCors(request, mcp.allowedOrigins);
-		if (!cors.ok) return finalizeWireResponse(request, cors.response);
+		if (!cors.ok) {
+			const httpMethod = normalizeHttpMethod(request.method);
+			log.info("cors.origin_rejected", {
+				origin: request.headers.get("Origin"),
+				httpMethod,
+				route: "oauth-metadata"
+			});
+			await recorder.emit({
+				tool: null,
+				method: "authorize",
+				outcome: "origin_rejected",
+				httpMethod,
+				durationMs: 0
+			});
+			return finalizeWireResponse(request, cors.response);
+		}
 		if (request.method === "OPTIONS") return cors.preflight("GET, HEAD, OPTIONS");
 		return finalizeWireResponse(request, cors.withHeaders(await respond(request)));
 	};

package/dist/stacks/supabase/index.cjs

@@ -1,10 +1,10 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_logger = require("../../logger-CN1q-KNn.cjs");
-const require_cors = require("../../cors-DNzLB6qa.cjs");
+const require_cors = require("../../cors-BDv7pyfD.cjs");
 const require_metadata_path = require("../../metadata-path-zd7NSNoa.cjs");
-const require_mcp = require("../../mcp-CRdT2Fai.cjs");
+const require_mcp = require("../../mcp-BSNdmnJl.cjs");
 const require_protocols_oauth_metadata = require("../../protocols/oauth-metadata.cjs");
-const require_forwarded = require("../../forwarded-BC_RHnn5.cjs");
+const require_forwarded = require("../../forwarded-OdBzzCMF.cjs");
 const require_paths = require("../../paths-OP318a6c.cjs");
 //#region src/stacks/supabase/handler.ts
 function deriveResourcePath(options) {
@@ -44,7 +44,7 @@ function createSupabaseHandler(mcp, options = {}) {
 	const metadataHandler = require_protocols_oauth_metadata.createOAuthProtectedResourceMetadataHandler(mcp, runtimeOptions);
 	return async (request) => {
 		const req = require_forwarded.applyForwardedOrigin(request, runtimeOptions);
-		if (isMetadataPath(new URL(req.url).pathname)) return metadataHandler(req);
+		if (isMetadataPath(new URL(req.url).pathname)) return metadataHandler(req, require_cors.createRecorderForRuntime(mcp, { stack: "supabase" }));
 		return mcpHandler(req, require_cors.createRecorderForRuntime(mcp, { stack: "supabase" }));
 	};
 }

package/dist/stacks/supabase/index.d.cts

@@ -1,4 +1,4 @@
-import { u as McpDefinition } from "../../types-DnGEKnvI.cjs";
+import { d as McpDefinition } from "../../types-3CZPz364.cjs";
 //#region src/stacks/supabase/handler.d.ts
 type SupabaseHandler = (request: Request) => Promise<Response>;
 interface SupabaseHandlerOptions {

package/dist/stacks/supabase/index.d.ts

@@ -1,4 +1,4 @@
-import { u as McpDefinition } from "../../types-DnGEKnvI.js";
+import { d as McpDefinition } from "../../types-3CZPz364.js";
 //#region src/stacks/supabase/handler.d.ts
 type SupabaseHandler = (request: Request) => Promise<Response>;
 interface SupabaseHandlerOptions {

package/dist/stacks/supabase/index.js

@@ -1,9 +1,9 @@
 import { s as trimTrailingSlash } from "../../logger-Ctv5xUSD.js";
-import { a as assertResourcePathShape, s as createRecorderForRuntime } from "../../cors-C_VffY86.js";
+import { c as createRecorderForRuntime, o as assertResourcePathShape } from "../../cors-kKiIJSyL.js";
 import { t as OAUTH_PROTECTED_RESOURCE_METADATA_PATH } from "../../metadata-path-CAkNcfyY.js";
-import { t as createMcpProtocolHandler } from "../../mcp-Bl7pQYdv.js";
+import { t as createMcpProtocolHandler } from "../../mcp-GT9WU7nd.js";
 import { createOAuthProtectedResourceMetadataHandler } from "../../protocols/oauth-metadata.js";
-import { t as applyForwardedOrigin } from "../../forwarded-B3EBjHnA.js";
+import { t as applyForwardedOrigin } from "../../forwarded-Bnrwxbuj.js";
 import { n as assertFunctionName, t as FUNCTIONS_MOUNT_PREFIX } from "../../paths-IS65L6TA.js";
 //#region src/stacks/supabase/handler.ts
 function deriveResourcePath(options) {
@@ -43,7 +43,7 @@ function createSupabaseHandler(mcp, options = {}) {
 	const metadataHandler = createOAuthProtectedResourceMetadataHandler(mcp, runtimeOptions);
 	return async (request) => {
 		const req = applyForwardedOrigin(request, runtimeOptions);
-		if (isMetadataPath(new URL(req.url).pathname)) return metadataHandler(req);
+		if (isMetadataPath(new URL(req.url).pathname)) return metadataHandler(req, createRecorderForRuntime(mcp, { stack: "supabase" }));
 		return mcpHandler(req, createRecorderForRuntime(mcp, { stack: "supabase" }));
 	};
 }

package/dist/stacks/supabase/vite.cjs

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_package = require("../../package-DNSwCau1.cjs");
+const require_package = require("../../package-DAQNwT8T.cjs");
 const require_fs_errors = require("../../fs-errors-CWNzOV75.cjs");
 const require_supabase_config = require("../../supabase-config-Dz7dnUv0.cjs");
 const require_paths = require("../../paths-OP318a6c.cjs");

package/dist/stacks/supabase/vite.d.cts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-Bh_WpbxU.cjs";
+import { t as McpPluginApi } from "../../io-CDV3mud0.cjs";
 import { Plugin } from "vite";
 //#region src/stacks/supabase/vite.d.ts
 interface McpPluginOptions {

package/dist/stacks/supabase/vite.d.ts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-DrHivYt0.js";
+import { t as McpPluginApi } from "../../io-D_5cuaEL.js";
 import { Plugin } from "vite";
 //#region src/stacks/supabase/vite.d.ts
 interface McpPluginOptions {

package/dist/stacks/supabase/vite.js

@@ -1,4 +1,4 @@
-import { t as version } from "../../package-CYA-5C24.js";
+import { t as version } from "../../package-2ZppkCKf.js";
 import { t as isFileMissing } from "../../fs-errors-PA2t1TIp.js";
 import { t as readSupabaseProjectRef } from "../../supabase-config-CakTU8YF.js";
 import { n as assertFunctionName, t as FUNCTIONS_MOUNT_PREFIX } from "../../paths-IS65L6TA.js";

package/dist/stacks/tanstack/index.cjs

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_cors = require("../../cors-DNzLB6qa.cjs");
-const require_mcp = require("../../mcp-CRdT2Fai.cjs");
+const require_cors = require("../../cors-BDv7pyfD.cjs");
+const require_mcp = require("../../mcp-BSNdmnJl.cjs");
 const require_protocols_oauth_metadata = require("../../protocols/oauth-metadata.cjs");
-const require_forwarded = require("../../forwarded-BC_RHnn5.cjs");
+const require_forwarded = require("../../forwarded-OdBzzCMF.cjs");
 //#region src/stacks/tanstack/handlers.ts
 const STACK = "tanstack";
 /**
@@ -19,7 +19,7 @@ function createTanStackMcpHandler(mcp, options = {}) {
 */
 function createTanStackOAuthProtectedResourceMetadataHandler(mcp, options = {}) {
 	const handler = require_protocols_oauth_metadata.createOAuthProtectedResourceMetadataHandler(mcp, options);
-	return ({ request }) => handler(require_forwarded.applyForwardedOrigin(request, options));
+	return ({ request }) => handler(require_forwarded.applyForwardedOrigin(request, options), require_cors.createRecorderForRuntime(mcp, { stack: STACK }));
 }
 //#endregion
 exports.createTanStackMcpHandler = createTanStackMcpHandler;

package/dist/stacks/tanstack/index.d.cts

@@ -1,5 +1,5 @@
-import { u as McpDefinition } from "../../types-DnGEKnvI.cjs";
-import { t as McpRuntimeOptions } from "../../authorize-Cqr7Jps0.cjs";
+import { d as McpDefinition } from "../../types-3CZPz364.cjs";
+import { t as McpRuntimeOptions } from "../../authorize-9hTTG-qJ.cjs";
 //#region src/stacks/tanstack/handlers.d.ts
 interface TanStackRouteCtx {
   request: Request;

package/dist/stacks/tanstack/index.d.ts

@@ -1,5 +1,5 @@
-import { u as McpDefinition } from "../../types-DnGEKnvI.js";
-import { t as McpRuntimeOptions } from "../../authorize-Bpz8oxjF.js";
+import { d as McpDefinition } from "../../types-3CZPz364.js";
+import { t as McpRuntimeOptions } from "../../authorize-DNUlPT7k.js";
 //#region src/stacks/tanstack/handlers.d.ts
 interface TanStackRouteCtx {
   request: Request;

package/dist/stacks/tanstack/index.js

@@ -1,7 +1,7 @@
-import { s as createRecorderForRuntime } from "../../cors-C_VffY86.js";
-import { t as createMcpProtocolHandler } from "../../mcp-Bl7pQYdv.js";
+import { c as createRecorderForRuntime } from "../../cors-kKiIJSyL.js";
+import { t as createMcpProtocolHandler } from "../../mcp-GT9WU7nd.js";
 import { createOAuthProtectedResourceMetadataHandler } from "../../protocols/oauth-metadata.js";
-import { t as applyForwardedOrigin } from "../../forwarded-B3EBjHnA.js";
+import { t as applyForwardedOrigin } from "../../forwarded-Bnrwxbuj.js";
 //#region src/stacks/tanstack/handlers.ts
 const STACK = "tanstack";
 /**
@@ -18,7 +18,7 @@ function createTanStackMcpHandler(mcp, options = {}) {
 */
 function createTanStackOAuthProtectedResourceMetadataHandler(mcp, options = {}) {
 	const handler = createOAuthProtectedResourceMetadataHandler(mcp, options);
-	return ({ request }) => handler(applyForwardedOrigin(request, options));
+	return ({ request }) => handler(applyForwardedOrigin(request, options), createRecorderForRuntime(mcp, { stack: STACK }));
 }
 //#endregion
 export { createTanStackMcpHandler, createTanStackOAuthProtectedResourceMetadataHandler };

package/dist/stacks/tanstack/vite.d.cts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-Bh_WpbxU.cjs";
+import { t as McpPluginApi } from "../../io-CDV3mud0.cjs";
 import { Plugin } from "vite";
 //#region src/stacks/tanstack/vite.d.ts
 interface McpPluginOptions {

package/dist/stacks/tanstack/vite.d.ts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-DrHivYt0.js";
+import { t as McpPluginApi } from "../../io-D_5cuaEL.js";
 import { Plugin } from "vite";
 //#region src/stacks/tanstack/vite.d.ts
 interface McpPluginOptions {

package/dist/{types-DnGEKnvI.d.cts → types-3CZPz364.d.cts}

@@ -85,11 +85,14 @@ interface McpAuthConfig {
 }
 //#endregion
 //#region src/auth/context.d.ts
+/** Protocol era of an in-flight request: self-describing `2026-07-28` or the
+ * initialization-era `legacy` fallback. */
+type McpProtocolEra = "2026-07-28" | "legacy";
 /** What the client declared about itself on the in-flight request. Unverified
  * client input — a hint, never an authorization signal (use the auth accessors). */
 interface McpClientInfo {
   /** Protocol era of the in-flight request. */
-  protocol: "2026-07-28" | "legacy";
+  protocol: McpProtocolEra;
   /** Client name/version from the request envelope (`2026-07-28` era only). */
   info?: {
     name: string;
@@ -178,11 +181,8 @@ type MetricsConfig = boolean | MetricsOptions;
  * `inputSchema`, use `ZodRawShape`.
  */
 type ZodSchema = ZodType;
-/**
- * A raw zod shape (`{ text: z.string(), n: z.number() }`) — the format
- * `defineTool`'s `inputSchema` expects and the object shorthand accepted by
- * `outputSchema`.
- */
+/** A raw zod shape (`{ text: z.string() }`) — the format `defineTool`'s
+ *  `inputSchema` expects and the object shorthand accepted by `outputSchema`. */
 type ZodRawShape$1 = ZodRawShape;
 type ZodOutputSchema = ZodSchema | ZodRawShape$1;
 /**
@@ -276,6 +276,11 @@ type ToolContent = ContentBlock[];
 type JsonValue = null | boolean | number | string | JsonValue[] | {
   [key: string]: JsonValue;
 };
+/** Handler-input relaxation of `JsonValue`: object properties may be `undefined`
+ * (they serialize away, matching `JSON.stringify` semantics). */
+type JsonValueInput = null | boolean | number | string | JsonValueInput[] | {
+  [key: string]: JsonValueInput | undefined;
+};
 type McpAllowedOrigins = "any" | readonly string[];
 /**
  * Per-tool client hints (not enforcement). `annotations.title` is
@@ -294,7 +299,7 @@ interface ToolAnnotations {
 }
 interface ToolHandlerResult {
   content?: ToolContent;
-  structuredContent?: JsonValue;
+  structuredContent?: JsonValueInput;
   isError?: boolean;
 }
 interface ToolDefinition<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodOutputSchema | undefined = ZodOutputSchema | undefined> {
@@ -349,4 +354,4 @@ type McpDefinition = McpDefinitionInput & {
   readonly [McpDefinitionBrand]: never;
 };
 //#endregion
-export { MetricsOptions as C, JwtClaims as D, ToolContext as E, McpAuthConfig as O, MetricsConfig as S, ProgressUpdate as T, ToolDefinition as _, EmbeddedResource as a, ZodRawShape$1 as b, JsonValue as c, McpDefinitionInput as d, ResourceLink as f, ToolContent as g, ToolAnnotations as h, EmbeddedBlobResource as i, McpAllowedOrigins as l, TextContent as m, ContentAnnotations as n, EmbeddedTextResource as o, ResourceLinkIcon as p, ContentBlock as r, ImageContent as s, AudioContent as t, McpDefinition as u, ToolHandlerResult as v, McpClientInfo as w, ZodSchema as x, ZodOutputSchema as y };
+export { McpAuthConfig as A, MetricsConfig as C, ProgressUpdate as D, McpProtocolEra as E, ToolContext as O, ZodSchema as S, McpClientInfo as T, ToolContent as _, EmbeddedResource as a, ZodOutputSchema as b, JsonValue as c, McpDefinition as d, McpDefinitionInput as f, ToolAnnotations as g, TextContent as h, EmbeddedBlobResource as i, JwtClaims as k, JsonValueInput as l, ResourceLinkIcon as m, ContentAnnotations as n, EmbeddedTextResource as o, ResourceLink as p, ContentBlock as r, ImageContent as s, AudioContent as t, McpAllowedOrigins as u, ToolDefinition as v, MetricsOptions as w, ZodRawShape$1 as x, ToolHandlerResult as y };

package/dist/{types-DnGEKnvI.d.ts → types-3CZPz364.d.ts}

@@ -85,11 +85,14 @@ interface McpAuthConfig {
 }
 //#endregion
 //#region src/auth/context.d.ts
+/** Protocol era of an in-flight request: self-describing `2026-07-28` or the
+ * initialization-era `legacy` fallback. */
+type McpProtocolEra = "2026-07-28" | "legacy";
 /** What the client declared about itself on the in-flight request. Unverified
  * client input — a hint, never an authorization signal (use the auth accessors). */
 interface McpClientInfo {
   /** Protocol era of the in-flight request. */
-  protocol: "2026-07-28" | "legacy";
+  protocol: McpProtocolEra;
   /** Client name/version from the request envelope (`2026-07-28` era only). */
   info?: {
     name: string;
@@ -178,11 +181,8 @@ type MetricsConfig = boolean | MetricsOptions;
  * `inputSchema`, use `ZodRawShape`.
  */
 type ZodSchema = ZodType;
-/**
- * A raw zod shape (`{ text: z.string(), n: z.number() }`) — the format
- * `defineTool`'s `inputSchema` expects and the object shorthand accepted by
- * `outputSchema`.
- */
+/** A raw zod shape (`{ text: z.string() }`) — the format `defineTool`'s
+ *  `inputSchema` expects and the object shorthand accepted by `outputSchema`. */
 type ZodRawShape$1 = ZodRawShape;
 type ZodOutputSchema = ZodSchema | ZodRawShape$1;
 /**
@@ -276,6 +276,11 @@ type ToolContent = ContentBlock[];
 type JsonValue = null | boolean | number | string | JsonValue[] | {
   [key: string]: JsonValue;
 };
+/** Handler-input relaxation of `JsonValue`: object properties may be `undefined`
+ * (they serialize away, matching `JSON.stringify` semantics). */
+type JsonValueInput = null | boolean | number | string | JsonValueInput[] | {
+  [key: string]: JsonValueInput | undefined;
+};
 type McpAllowedOrigins = "any" | readonly string[];
 /**
  * Per-tool client hints (not enforcement). `annotations.title` is
@@ -294,7 +299,7 @@ interface ToolAnnotations {
 }
 interface ToolHandlerResult {
   content?: ToolContent;
-  structuredContent?: JsonValue;
+  structuredContent?: JsonValueInput;
   isError?: boolean;
 }
 interface ToolDefinition<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodOutputSchema | undefined = ZodOutputSchema | undefined> {
@@ -349,4 +354,4 @@ type McpDefinition = McpDefinitionInput & {
   readonly [McpDefinitionBrand]: never;
 };
 //#endregion
-export { MetricsOptions as C, JwtClaims as D, ToolContext as E, McpAuthConfig as O, MetricsConfig as S, ProgressUpdate as T, ToolDefinition as _, EmbeddedResource as a, ZodRawShape$1 as b, JsonValue as c, McpDefinitionInput as d, ResourceLink as f, ToolContent as g, ToolAnnotations as h, EmbeddedBlobResource as i, McpAllowedOrigins as l, TextContent as m, ContentAnnotations as n, EmbeddedTextResource as o, ResourceLinkIcon as p, ContentBlock as r, ImageContent as s, AudioContent as t, McpDefinition as u, ToolHandlerResult as v, McpClientInfo as w, ZodSchema as x, ZodOutputSchema as y };
+export { McpAuthConfig as A, MetricsConfig as C, ProgressUpdate as D, McpProtocolEra as E, ToolContext as O, ZodSchema as S, McpClientInfo as T, ToolContent as _, EmbeddedResource as a, ZodOutputSchema as b, JsonValue as c, McpDefinition as d, McpDefinitionInput as f, ToolAnnotations as g, TextContent as h, EmbeddedBlobResource as i, JwtClaims as k, JsonValueInput as l, ResourceLinkIcon as m, ContentAnnotations as n, EmbeddedTextResource as o, ResourceLink as p, ContentBlock as r, ImageContent as s, AudioContent as t, McpAllowedOrigins as u, ToolDefinition as v, MetricsOptions as w, ZodRawShape$1 as x, ToolHandlerResult as y };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovable.dev/mcp-js",
-  "version": "0.29.0-rc.2",
+  "version": "0.29.0-rc.3",
   "engines": {
     "node": ">=20"
   },

package/dist/forwarded-B3EBjHnA.js

@@ -1,43 +0,0 @@
-//#region src/core/forwarded.ts
-/**
-* Rewrites a request's URL to the public origin a reverse proxy forwards via
-* `X-Forwarded-*`, so SDK-derived OAuth `resource`/metadata/`WWW-Authenticate`
-* URLs name the host the client actually connected to — not the internal
-* backend origin the proxy rewrites `Host` to. Without this, an app on a custom
-* domain advertises its internal `*.lovable.dev`/`*.supabase.co` host and every
-* MCP call 401s on an audience the client can't satisfy.
-*
-* Each header is trusted independently, because a forwarded value is only as
-* trustworthy as the proxy that sets it:
-* - `X-Forwarded-Host` can redirect the advertised resource to an attacker
-*   origin (the threat `auth/resource.ts` guards against), so it is honored only
-*   when `trustForwardedHost` is set — enabled on emit paths that sit behind a
-*   proxy which *overwrites* the header (Lovable's web-proxy does), never by a
-*   bare SDK consumer.
-* - `X-Forwarded-Proto` only selects http/https, so it is gated separately:
-*   Supabase's gateway stamps it (that stack always trusts it), and Lovable's
-*   preview proxy overwrites it before the TanStack dev server, so the TanStack
-*   Vite plugin emits the flag by default.
-*/
-function applyForwardedOrigin(request, options) {
-	const proto = options.trustForwardedProto ? firstForwardedValue(request, "x-forwarded-proto") : void 0;
-	const host = options.trustForwardedHost ? firstForwardedValue(request, "x-forwarded-host") : void 0;
-	if (proto === void 0 && host === void 0) return request;
-	const url = new URL(request.url);
-	let changed = false;
-	if (proto !== void 0 && `${proto}:` !== url.protocol) {
-		url.protocol = `${proto}:`;
-		changed = true;
-	}
-	if (host !== void 0 && host !== url.host) {
-		url.host = host;
-		changed = true;
-	}
-	return changed ? new Request(url.href, request) : request;
-}
-function firstForwardedValue(request, header) {
-	const value = request.headers.get(header)?.split(",")[0]?.trim();
-	return value ? value : void 0;
-}
-//#endregion
-export { applyForwardedOrigin as t };

package/dist/forwarded-BC_RHnn5.cjs

@@ -1,48 +0,0 @@
-//#region src/core/forwarded.ts
-/**
-* Rewrites a request's URL to the public origin a reverse proxy forwards via
-* `X-Forwarded-*`, so SDK-derived OAuth `resource`/metadata/`WWW-Authenticate`
-* URLs name the host the client actually connected to — not the internal
-* backend origin the proxy rewrites `Host` to. Without this, an app on a custom
-* domain advertises its internal `*.lovable.dev`/`*.supabase.co` host and every
-* MCP call 401s on an audience the client can't satisfy.
-*
-* Each header is trusted independently, because a forwarded value is only as
-* trustworthy as the proxy that sets it:
-* - `X-Forwarded-Host` can redirect the advertised resource to an attacker
-*   origin (the threat `auth/resource.ts` guards against), so it is honored only
-*   when `trustForwardedHost` is set — enabled on emit paths that sit behind a
-*   proxy which *overwrites* the header (Lovable's web-proxy does), never by a
-*   bare SDK consumer.
-* - `X-Forwarded-Proto` only selects http/https, so it is gated separately:
-*   Supabase's gateway stamps it (that stack always trusts it), and Lovable's
-*   preview proxy overwrites it before the TanStack dev server, so the TanStack
-*   Vite plugin emits the flag by default.
-*/
-function applyForwardedOrigin(request, options) {
-	const proto = options.trustForwardedProto ? firstForwardedValue(request, "x-forwarded-proto") : void 0;
-	const host = options.trustForwardedHost ? firstForwardedValue(request, "x-forwarded-host") : void 0;
-	if (proto === void 0 && host === void 0) return request;
-	const url = new URL(request.url);
-	let changed = false;
-	if (proto !== void 0 && `${proto}:` !== url.protocol) {
-		url.protocol = `${proto}:`;
-		changed = true;
-	}
-	if (host !== void 0 && host !== url.host) {
-		url.host = host;
-		changed = true;
-	}
-	return changed ? new Request(url.href, request) : request;
-}
-function firstForwardedValue(request, header) {
-	const value = request.headers.get(header)?.split(",")[0]?.trim();
-	return value ? value : void 0;
-}
-//#endregion
-Object.defineProperty(exports, "applyForwardedOrigin", {
-	enumerable: true,
-	get: function() {
-		return applyForwardedOrigin;
-	}
-});