@lovable.dev/mcp-js 0.29.0-rc.2 → 0.29.0-rc.4

package/README.internal.md

@@ -4,7 +4,7 @@ Architecture rationale, source layout, and dev scripts for contributors. The use
 
 ## Folder meaning
 
-- **`protocols/`** is the wire layer — one folder per externally observable HTTP surface. `protocols/mcp` is the public MCP-over-HTTP surface; `protocols/oauth-metadata` serves the RFC 9728 protected-resource metadata required to bootstrap protected MCP clients. `protocols/gate.ts` is the shared CORS → auth → method gate both surfaces run behind.
+- **`protocols/`** is the wire layer — one folder per externally observable HTTP surface. `protocols/mcp` is the public MCP-over-HTTP surface; `protocols/oauth-metadata` serves the RFC 9728 protected-resource metadata required to bootstrap protected MCP clients. `protocols/gate.ts` is the CORS → auth → method gate the MCP surface runs behind.
 - **`auth/`** (unpublished) is the cross-cutting OAuth middleware — bearer verification, issuer/JWKS discovery, the `auth.oauth.*` config namespace. It depends only on `core/`; `protocols/mcp` depends on it for the bearer gate, so it isn't a wire-format peer of `mcp` and doesn't live under `protocols/`.
 - **`stacks/`** is the framework integration. Two are published: `stacks/tanstack/` (file-router routes emitted by a Vite plugin) and `stacks/supabase/` (a single Deno-served function with URL-suffix dispatch, emitted by the Supabase Vite plugin). Future entries (classic Vite, Cloudflare Workers, …) live alongside them. Each stack forwards to `protocols/{mcp,oauth-metadata}` directly — protocol logic stays shared, only ctx unwrapping and route emission differ.
 - **`manifest/`** is the stack-agnostic snapshot writer. `lovable-mcp-extract-manifest` is one CLI for every stack: it asks Vite for the resolved config, finds any plugin whose name matches `@lovable.dev/mcp-js*`, and reads `mcpEntry` + `urlPath` off its `api`. TanStack publishes its configured route path (`/mcp`); Supabase publishes `/functions/v1/<functionName>`. The projection (`extract.ts` + `listing.ts`) is pure and derives from the same `defineMcp` definition the live `tools/list` serves, so the committed manifest and the served catalog can't drift.
@@ -79,7 +79,7 @@ The published `.d.ts` files import only from `zod` and `vite`. Three SDK concern
 - **`ZodRawShape`, `ZodType`, `infer`** — sourced directly from `zod` (a peer dep). zod v3 and v4 both export all three at the top level; `ZodType` is non-deprecated in both versions with safe generic defaults. We re-export them from `core/types.ts` as `ZodRawShape` / `ZodSchema` / `ShapeOutput` (`ZodSchema` is a no-generic alias for `ZodType`). No dependency on `@modelcontextprotocol/sdk/server/zod-compat.js` types.
 - **`ContentBlock` union** — `TextContent | ImageContent | AudioContent | EmbeddedResource | ResourceLink`, structurally matching MCP's wire format. Consumers can type custom content (`return { content: [<ImageContent>, <TextContent>] }`) without referencing the SDK.
 
-The **runtime** still hands off to the MCP SDKs — `createMcpHandler` + `McpServer` come from `@modelcontextprotocol/server` (v2), and `objectFromShape` + `safeParseAsync` + `toJsonSchemaCompat` come from `@modelcontextprotocol/sdk`'s zod-compat modules for input validation and JSON-Schema serialization. Those are runtime dependencies, not type-surface dependencies.
+The **runtime** still hands off to the MCP SDK — we still `import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js"` and call `registerTool`, and we still use `objectFromShape` + `toJsonSchemaCompat` from the SDK's zod-compat modules to serialize the tool catalog to JSON Schema. That's a runtime dependency, not a type-surface dependency.
 
 ### 8. Stale-route cleanup on every regen
 
@@ -141,7 +141,7 @@ src/
       vite.ts                    # mcpPlugin (Vite-lifecycle trigger; exposes McpPluginApi with urlPath=/functions/v1/<functionName>)
       index.ts                   # barrel
 tests/
-  core/{content,cors,define,errors,forwarded,logger,promise,supabase-config,url}.test.ts
+  core/{content,define,errors,forwarded,logger,promise,supabase-config,url}.test.ts
   auth/{claims,config,context,oauth,oauth-fallback,oauth-logging,oauth-metrics}.test.ts  # OAuth config + bearer verification
   metrics/{config,dispatch,otlp,recorder}.test.ts
   protocols/

package/README.md

@@ -49,13 +49,7 @@ That's the whole authoring surface. No imperative server construction, no route
 
 The table shows the default `path: "/mcp"`; `mcpPlugin({ path: "/api/public/mcp" })` moves the MCP route accordingly.
 
-MCP (`POST <path>`, `/mcp` by default) is the wire format clients speak directly. All runtime routes import the same `defineMcp` result, so they stay in sync on which tools exist and which auth and browser-origin policies protect them. If `defineMcp({ auth: ... })` is omitted, the handlers stay unauthenticated; if OAuth auth is configured, clients must pass `Authorization: Bearer <token>`. Rate limiting belongs at the app host or edge.
-
-The MCP endpoint supports both protocol eras on one URL. Finalized `2026-07-28` clients send the version, client capabilities, and mirrored HTTP headers on every request; the server returns typed results plus cache metadata on discovery and list responses without initialization or protocol sessions. Initialization-era clients continue through a stateless compatibility path: `initialize`, `tools/list`, and `tools/call` work as independent requests, and the endpoint never mints `Mcp-Session-Id`. `GET` and `DELETE` return `405` because there is no standalone stream or session to manage.
-
-`outputSchema` accepts either the existing object-shape shorthand (`{ value: z.string() }`) or a JSON-Schema-representable Zod schema such as `z.array(z.string())`; `structuredContent` may be any JSON value. The server returns the schema's parsed output, so coercions are reflected in the result; transforms with no truthful JSON Schema are rejected when `defineMcp` runs. Modern clients receive the natural schema and value. The compatibility path wraps non-object schemas and values under `result` for initialization-era clients whose wire format requires an object root.
-
-Browser-origin checks apply to the MCP and OAuth metadata routes before authentication. Omit `allowedOrigins` to allow requests with no `Origin` header (Go, desktop, CLI, and server clients) plus same-origin browser requests. Set `allowedOrigins: ["https://client.example.com"]` for exact additional origins, or `allowedOrigins: "any"` to intentionally restore wildcard CORS. Exact and same origins are reflected with `Vary: Origin`; other browser origins receive `403` without an OAuth challenge. Reverse-proxy adapters compare against the effective public origin after applying only their configured trusted forwarded headers.
+MCP (`POST <path>`, `/mcp` by default) is the wire format clients speak directly. All runtime routes import the same `defineMcp` result, so they stay in sync on which tools exist and which auth policy protects them. If `defineMcp({ auth: ... })` is omitted, the handlers stay unauthenticated; if OAuth auth is configured, clients must pass `Authorization: Bearer <token>`. Rate limiting belongs at the app host or edge.
 
 The OAuth metadata route is emitted by default and returns `404` until OAuth auth is configured. Disable it with `mcpPlugin({ protectedResourceMetadataRoute: false })` only if the app owns `/.well-known/oauth-protected-resource` itself.
 
@@ -166,23 +160,6 @@ and no `node:async_hooks` dependency, so it works on any runtime and is safe
 under concurrency by construction. A handler that hands `ctx` to deferred work (a
 detached timer, an un-awaited promise) keeps full access to it.
 
-Beyond auth, `ToolContext` carries the per-request runtime surface:
-
-| Member | Purpose |
-| --- | --- |
-| `signal` | An `AbortSignal` that aborts when the client cancels the request or disconnects. Pass it to `fetch` and other cancelable APIs, or check `signal.aborted` between steps of long work. |
-| `client` | What the calling client declared about itself (`McpClientInfo`): `protocol` (`"2026-07-28"` or `"legacy"`), and for modern requests the envelope's `info`, `capabilities`, and `extensions`. Unverified client input — use it to adapt output, never to authorize. |
-| `progress(update)` | Sends a `notifications/progress` frame (`{ progress, total?, message? }`) for long-running tools. A no-op unless the client requested progress by sending `_meta.progressToken`; safe to call unconditionally. |
-
-```ts
-handler: async ({ url }, ctx) => {
-  await ctx.progress({ progress: 0, total: 2, message: "fetching" });
-  const res = await fetch(url, { signal: ctx.signal });
-  await ctx.progress({ progress: 1, total: 2, message: "processing" });
-  return { content: [{ type: "text", text: await res.text() }] };
-};
-```
-
 **Security contract for the bearer token.** `getToken()` is the only way to read
 the raw token. `ToolContext` holds the verified context in a private field, so the
 credential can't be read off the instance via `JSON.stringify`, object spread, or
@@ -251,7 +228,7 @@ A `500` on an OAuth-protected route is always one of two causes, logged at `erro
 
 ## Usage metrics
 
-Each MCP server records per-invocation telemetry — tool name, JSON-RPC method, outcome, and latency — as **OTLP/HTTP JSON logs**, one awaited POST per record, bounded by a 3-second timeout; a failed or slow POST is logged (`metrics.failed`) and swallowed, never failing the request. Outcomes cover tool results (`ok`, `tool_error`, `handler_error`, `transport_error`), the authorization gate — `auth_challenge` for an unauthenticated request answered with the `401` challenge (so probe traffic produces records), and the `auth_*` discovery/JWKS failure outcomes — and `origin_rejected` for a request refused `403` by the origin policy. Tool-call records also carry the protocol era (`mcp.protocol`: `2026-07-28` or `legacy`); records emitted before protocol classification (auth challenges, transport errors, origin rejections) have no protocol attribute. No tool arguments or response payloads are ever captured. Emission is **on by default** and self-disables at runtime when `LOVABLE_API_KEY` is absent: records are dropped and one `metrics.disabled_no_api_key` warning is logged per process, so a local `vite dev` stays quiet. With `metrics: false` the recorder never runs — on Deno and Cloudflare Workers that also means `LOVABLE_MCP_LOG_LEVEL` is never applied (use `setLogLevel()` instead).
+Each MCP server records per-invocation telemetry — tool name, JSON-RPC method, outcome, and latency — as **OTLP/HTTP JSON logs**, one awaited POST per record, bounded by a 3-second timeout; a failed or slow POST is logged (`metrics.failed`) and swallowed, never failing the request. Outcomes cover tool results (`ok`, `tool_error`, `handler_error`, `transport_error`) and the authorization gate: `auth_challenge` for an unauthenticated request answered with the `401` challenge (so probe traffic produces records), and the `auth_*` discovery/JWKS failure outcomes. No tool arguments or response payloads are ever captured. Emission is **on by default** and self-disables at runtime when `LOVABLE_API_KEY` is absent: records are dropped and one `metrics.disabled_no_api_key` warning is logged per process, so a local `vite dev` stays quiet. With `metrics: false` the recorder never runs — on Deno and Cloudflare Workers that also means `LOVABLE_MCP_LOG_LEVEL` is never applied (use `setLogLevel()` instead).
 
 Configure it on the MCP definition:
 

package/dist/{cors-DNzLB6qa.cjs → authorize-CKMlIxm9.cjs}

@@ -1,7 +1,28 @@
 const require_logger = require("./logger-CN1q-KNn.cjs");
-const require_package = require("./package-DNSwCau1.cjs");
+const require_package = require("./package-Xk8p8Q_E.cjs");
 require("./metadata-path-zd7NSNoa.cjs");
 let jose = require("jose");
+//#region src/core/cors.ts
+const EXPOSE_HEADERS = "WWW-Authenticate, Mcp-Session-Id, Mcp-Protocol-Version";
+const ALLOW_HEADERS = "Authorization, Content-Type, Mcp-Session-Id, Mcp-Protocol-Version, Last-Event-ID";
+/** Add permissive CORS to a built response, preserving its other headers. */
+function withCors(response) {
+	response.headers.set("Access-Control-Allow-Origin", "*");
+	response.headers.set("Access-Control-Expose-Headers", EXPOSE_HEADERS);
+	return response;
+}
+function corsPreflightResponse(allowMethods) {
+	return new Response(null, {
+		status: 204,
+		headers: {
+			"Access-Control-Allow-Origin": "*",
+			"Access-Control-Allow-Methods": allowMethods,
+			"Access-Control-Allow-Headers": ALLOW_HEADERS,
+			"Access-Control-Max-Age": "86400"
+		}
+	});
+}
+//#endregion
 //#region src/core/http.ts
 const JSON_HEADERS = { "Content-Type": "application/json" };
 /** Strip the body from a built response, preserving status and headers, for HEAD. */
@@ -13,7 +34,7 @@ function headResponse(response) {
 	});
 }
 function finalizeWireResponse(request, response) {
-	return request.method === "HEAD" ? headResponse(response) : response;
+	return withCors(request.method === "HEAD" ? headResponse(response) : response);
 }
 function methodNotAllowed(allow) {
 	return new Response(JSON.stringify({ error: "method not allowed" }), {
@@ -53,7 +74,6 @@ function toLogRecord(rec) {
 	if (rec.reqBytes !== void 0) attributes.push(intAttr("mcp.request_size_bytes", rec.reqBytes));
 	if (rec.resBytes !== void 0) attributes.push(intAttr("mcp.response_size_bytes", rec.resBytes));
 	if (rec.httpMethod !== void 0) attributes.push(strAttr("http.request.method", rec.httpMethod));
-	if (rec.protocol !== void 0) attributes.push(strAttr("mcp.protocol", rec.protocol));
 	attributes.push(strAttr("mcp.stack", rec.stack));
 	if (rec.endUserId !== void 0) attributes.push(strAttr("mcp.end_user_id", rec.endUserId));
 	return {
@@ -157,7 +177,6 @@ var BaseMetricRecorder = class {
 			outcome: ev.outcome,
 			durationMs: ev.durationMs,
 			stack: this.stack,
-			...ev.protocol !== void 0 && { protocol: ev.protocol },
 			...ev.errorText !== void 0 && { errorText: ev.errorText }
 		});
 		if (!this.config.enabled) return;
@@ -929,74 +948,6 @@ function createRequestAuthorizer(mcp, options = {}) {
 	} };
 }
 //#endregion
-//#region src/core/cors.ts
-const EXPOSE_HEADERS = "WWW-Authenticate, MCP-Protocol-Version, Mcp-Session-Id";
-const ALLOW_HEADERS = [
-	"Authorization",
-	"Content-Type",
-	"MCP-Protocol-Version",
-	"Mcp-Method",
-	"Mcp-Name",
-	"Mcp-Session-Id",
-	"Last-Event-ID"
-];
-const MCP_PARAM_HEADER = /^mcp-param-[!#$%&'*+.^_`|~0-9A-Za-z-]+$/i;
-function appendVary(headers, value) {
-	const values = new Set((headers.get("Vary") ?? "").split(",").map((entry) => entry.trim()).filter(Boolean));
-	values.add(value);
-	headers.set("Vary", [...values].join(", "));
-}
-function addCorsHeaders(response, allowedOrigin, variesByOrigin) {
-	if (allowedOrigin !== void 0) {
-		response.headers.set("Access-Control-Allow-Origin", allowedOrigin);
-		response.headers.set("Access-Control-Expose-Headers", EXPOSE_HEADERS);
-	}
-	if (variesByOrigin) appendVary(response.headers, "Origin");
-	return response;
-}
-function allowedRequestHeaders(request) {
-	const allowed = new Map(ALLOW_HEADERS.map((header) => [header.toLowerCase(), header]));
-	for (const header of (request.headers.get("Access-Control-Request-Headers") ?? "").split(",")) {
-		const normalized = header.trim();
-		if (MCP_PARAM_HEADER.test(normalized)) allowed.set(normalized.toLowerCase(), normalized);
-	}
-	return [...allowed.values()].join(", ");
-}
-function evaluateCors(request, allowedOrigins) {
-	const origin = request.headers.get("Origin");
-	const allowAny = allowedOrigins === "any";
-	const originAllowed = origin === null || origin === new URL(request.url).origin || allowedOrigins?.includes(origin) === true;
-	if (!allowAny && !originAllowed) {
-		const response = Response.json({ error: "origin not allowed" }, {
-			status: 403,
-			headers: { "Cache-Control": "no-store" }
-		});
-		appendVary(response.headers, "Origin");
-		return {
-			ok: false,
-			response
-		};
-	}
-	const allowedOrigin = allowAny ? "*" : origin ?? void 0;
-	return {
-		ok: true,
-		withHeaders: (response) => addCorsHeaders(response, allowedOrigin, !allowAny),
-		preflight: (allowMethods) => {
-			const requestedHeaders = request.headers.get("Access-Control-Request-Headers");
-			const response = new Response(null, {
-				status: 204,
-				headers: {
-					"Access-Control-Allow-Methods": allowMethods,
-					"Access-Control-Allow-Headers": allowedRequestHeaders(request),
-					"Access-Control-Max-Age": "86400"
-				}
-			});
-			if (requestedHeaders) appendVary(response.headers, "Access-Control-Request-Headers");
-			return addCorsHeaders(response, allowedOrigin, !allowAny);
-		}
-	};
-}
-//#endregion
 Object.defineProperty(exports, "JSON_HEADERS", {
 	enumerable: true,
 	get: function() {
@@ -1009,6 +960,12 @@ Object.defineProperty(exports, "assertResourcePathShape", {
 		return assertResourcePathShape;
 	}
 });
+Object.defineProperty(exports, "corsPreflightResponse", {
+	enumerable: true,
+	get: function() {
+		return corsPreflightResponse;
+	}
+});
 Object.defineProperty(exports, "createNoopRecorder", {
 	enumerable: true,
 	get: function() {
@@ -1027,12 +984,6 @@ Object.defineProperty(exports, "createRequestAuthorizer", {
 		return createRequestAuthorizer;
 	}
 });
-Object.defineProperty(exports, "evaluateCors", {
-	enumerable: true,
-	get: function() {
-		return evaluateCors;
-	}
-});
 Object.defineProperty(exports, "finalizeWireResponse", {
 	enumerable: true,
 	get: function() {

package/dist/{authorize-Bpz8oxjF.d.ts → authorize-CqYsQYfa.d.ts}

@@ -1,4 +1,4 @@
-import "./types-DnGEKnvI.js";
+import "./types-C0Wgm9zp.js";
 //#region src/auth/authorize.d.ts
 interface McpRuntimeOptions {
   /** Public MCP path OAuth resource/audience checks bind to when it differs from the request path. */

package/dist/{authorize-Cqr7Jps0.d.cts → authorize-DIYS7zBP.d.cts}

@@ -1,4 +1,4 @@
-import "./types-DnGEKnvI.cjs";
+import "./types-C0Wgm9zp.cjs";
 //#region src/auth/authorize.d.ts
 interface McpRuntimeOptions {
   /** Public MCP path OAuth resource/audience checks bind to when it differs from the request path. */

package/dist/{cors-C_VffY86.js → authorize-b3VqTC_7.js}

@@ -1,7 +1,28 @@
 import { i as log, n as applyLogLevelFromEnv, o as parseSafeUrl, r as describeError, s as trimTrailingSlash, t as LOG_LEVEL_ENV_VAR, u as resolveMetricsConfig } from "./logger-Ctv5xUSD.js";
-import { t as version } from "./package-CYA-5C24.js";
+import { t as version } from "./package-DMs4EVwG.js";
 import "./metadata-path-CAkNcfyY.js";
 import { createLocalJWKSet, decodeProtectedHeader, errors, jwtVerify } from "jose";
+//#region src/core/cors.ts
+const EXPOSE_HEADERS = "WWW-Authenticate, Mcp-Session-Id, Mcp-Protocol-Version";
+const ALLOW_HEADERS = "Authorization, Content-Type, Mcp-Session-Id, Mcp-Protocol-Version, Last-Event-ID";
+/** Add permissive CORS to a built response, preserving its other headers. */
+function withCors(response) {
+	response.headers.set("Access-Control-Allow-Origin", "*");
+	response.headers.set("Access-Control-Expose-Headers", EXPOSE_HEADERS);
+	return response;
+}
+function corsPreflightResponse(allowMethods) {
+	return new Response(null, {
+		status: 204,
+		headers: {
+			"Access-Control-Allow-Origin": "*",
+			"Access-Control-Allow-Methods": allowMethods,
+			"Access-Control-Allow-Headers": ALLOW_HEADERS,
+			"Access-Control-Max-Age": "86400"
+		}
+	});
+}
+//#endregion
 //#region src/core/http.ts
 const JSON_HEADERS = { "Content-Type": "application/json" };
 /** Strip the body from a built response, preserving status and headers, for HEAD. */
@@ -13,7 +34,7 @@ function headResponse(response) {
 	});
 }
 function finalizeWireResponse(request, response) {
-	return request.method === "HEAD" ? headResponse(response) : response;
+	return withCors(request.method === "HEAD" ? headResponse(response) : response);
 }
 function methodNotAllowed(allow) {
 	return new Response(JSON.stringify({ error: "method not allowed" }), {
@@ -53,7 +74,6 @@ function toLogRecord(rec) {
 	if (rec.reqBytes !== void 0) attributes.push(intAttr("mcp.request_size_bytes", rec.reqBytes));
 	if (rec.resBytes !== void 0) attributes.push(intAttr("mcp.response_size_bytes", rec.resBytes));
 	if (rec.httpMethod !== void 0) attributes.push(strAttr("http.request.method", rec.httpMethod));
-	if (rec.protocol !== void 0) attributes.push(strAttr("mcp.protocol", rec.protocol));
 	attributes.push(strAttr("mcp.stack", rec.stack));
 	if (rec.endUserId !== void 0) attributes.push(strAttr("mcp.end_user_id", rec.endUserId));
 	return {
@@ -157,7 +177,6 @@ var BaseMetricRecorder = class {
 			outcome: ev.outcome,
 			durationMs: ev.durationMs,
 			stack: this.stack,
-			...ev.protocol !== void 0 && { protocol: ev.protocol },
 			...ev.errorText !== void 0 && { errorText: ev.errorText }
 		});
 		if (!this.config.enabled) return;
@@ -929,72 +948,4 @@ function createRequestAuthorizer(mcp, options = {}) {
 	} };
 }
 //#endregion
-//#region src/core/cors.ts
-const EXPOSE_HEADERS = "WWW-Authenticate, MCP-Protocol-Version, Mcp-Session-Id";
-const ALLOW_HEADERS = [
-	"Authorization",
-	"Content-Type",
-	"MCP-Protocol-Version",
-	"Mcp-Method",
-	"Mcp-Name",
-	"Mcp-Session-Id",
-	"Last-Event-ID"
-];
-const MCP_PARAM_HEADER = /^mcp-param-[!#$%&'*+.^_`|~0-9A-Za-z-]+$/i;
-function appendVary(headers, value) {
-	const values = new Set((headers.get("Vary") ?? "").split(",").map((entry) => entry.trim()).filter(Boolean));
-	values.add(value);
-	headers.set("Vary", [...values].join(", "));
-}
-function addCorsHeaders(response, allowedOrigin, variesByOrigin) {
-	if (allowedOrigin !== void 0) {
-		response.headers.set("Access-Control-Allow-Origin", allowedOrigin);
-		response.headers.set("Access-Control-Expose-Headers", EXPOSE_HEADERS);
-	}
-	if (variesByOrigin) appendVary(response.headers, "Origin");
-	return response;
-}
-function allowedRequestHeaders(request) {
-	const allowed = new Map(ALLOW_HEADERS.map((header) => [header.toLowerCase(), header]));
-	for (const header of (request.headers.get("Access-Control-Request-Headers") ?? "").split(",")) {
-		const normalized = header.trim();
-		if (MCP_PARAM_HEADER.test(normalized)) allowed.set(normalized.toLowerCase(), normalized);
-	}
-	return [...allowed.values()].join(", ");
-}
-function evaluateCors(request, allowedOrigins) {
-	const origin = request.headers.get("Origin");
-	const allowAny = allowedOrigins === "any";
-	const originAllowed = origin === null || origin === new URL(request.url).origin || allowedOrigins?.includes(origin) === true;
-	if (!allowAny && !originAllowed) {
-		const response = Response.json({ error: "origin not allowed" }, {
-			status: 403,
-			headers: { "Cache-Control": "no-store" }
-		});
-		appendVary(response.headers, "Origin");
-		return {
-			ok: false,
-			response
-		};
-	}
-	const allowedOrigin = allowAny ? "*" : origin ?? void 0;
-	return {
-		ok: true,
-		withHeaders: (response) => addCorsHeaders(response, allowedOrigin, !allowAny),
-		preflight: (allowMethods) => {
-			const requestedHeaders = request.headers.get("Access-Control-Request-Headers");
-			const response = new Response(null, {
-				status: 204,
-				headers: {
-					"Access-Control-Allow-Methods": allowMethods,
-					"Access-Control-Allow-Headers": allowedRequestHeaders(request),
-					"Access-Control-Max-Age": "86400"
-				}
-			});
-			if (requestedHeaders) appendVary(response.headers, "Access-Control-Request-Headers");
-			return addCorsHeaders(response, allowedOrigin, !allowAny);
-		}
-	};
-}
-//#endregion
-export { assertResourcePathShape as a, createNoopRecorder as c, finalizeWireResponse as d, methodNotAllowed as f, oauthConfigurationErrorResponse as i, nowMs as l, createRequestAuthorizer as n, resolveProtectedResource as o, getOAuthRuntime as r, createRecorderForRuntime as s, evaluateCors as t, JSON_HEADERS as u };
+export { resolveProtectedResource as a, nowMs as c, methodNotAllowed as d, corsPreflightResponse as f, assertResourcePathShape as i, JSON_HEADERS as l, getOAuthRuntime as n, createRecorderForRuntime as o, oauthConfigurationErrorResponse as r, createNoopRecorder as s, createRequestAuthorizer as t, finalizeWireResponse as u };

package/dist/cli/extract-manifest.cjs

@@ -1,15 +1,20 @@
 #!/usr/bin/env node
-const require_schema = require("../schema-D3vClxb7.cjs");
-const require_package = require("../package-DNSwCau1.cjs");
+const require_package = require("../package-Xk8p8Q_E.cjs");
 const require_fs_errors = require("../fs-errors-CWNzOV75.cjs");
 let node_fs = require("node:fs");
 let node_path = require("node:path");
 let vite = require("vite");
 let node_crypto = require("node:crypto");
+let _modelcontextprotocol_sdk_server_zod_compat_js = require("@modelcontextprotocol/sdk/server/zod-compat.js");
+let _modelcontextprotocol_sdk_server_zod_json_schema_compat_js = require("@modelcontextprotocol/sdk/server/zod-json-schema-compat.js");
 //#region src/manifest/listing.ts
-function schemaToJsonSchema(definition, pipeStrategy) {
-	if (!definition) return null;
-	return require_schema.jsonSchemaFromDefinition(definition, pipeStrategy);
+function shapeToJsonSchema(shape) {
+	if (!shape) return null;
+	try {
+		return (0, _modelcontextprotocol_sdk_server_zod_json_schema_compat_js.toJsonSchemaCompat)((0, _modelcontextprotocol_sdk_server_zod_compat_js.objectFromShape)(shape));
+	} catch {
+		return null;
+	}
 }
 function buildMcpListing(mcp) {
 	return {
@@ -23,8 +28,8 @@ function buildMcpListing(mcp) {
 			title: tool.title,
 			description: tool.description,
 			annotations: tool.annotations,
-			inputSchema: schemaToJsonSchema(tool.inputSchema, "input"),
-			outputSchema: schemaToJsonSchema(tool.outputSchema, "output")
+			inputSchema: shapeToJsonSchema(tool.inputSchema),
+			outputSchema: shapeToJsonSchema(tool.outputSchema)
 		}))
 	};
 }

package/dist/cli/extract-manifest.js

@@ -1,15 +1,20 @@
 #!/usr/bin/env node
-import { t as jsonSchemaFromDefinition } from "../schema-CW1jKvio.js";
-import { t as version } from "../package-CYA-5C24.js";
+import { t as version } from "../package-DMs4EVwG.js";
 import { t as isFileMissing } from "../fs-errors-PA2t1TIp.js";
 import { lstatSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname, resolve } from "node:path";
 import { createServer, resolveConfig } from "vite";
 import { randomUUID } from "node:crypto";
+import { objectFromShape } from "@modelcontextprotocol/sdk/server/zod-compat.js";
+import { toJsonSchemaCompat } from "@modelcontextprotocol/sdk/server/zod-json-schema-compat.js";
 //#region src/manifest/listing.ts
-function schemaToJsonSchema(definition, pipeStrategy) {
-	if (!definition) return null;
-	return jsonSchemaFromDefinition(definition, pipeStrategy);
+function shapeToJsonSchema(shape) {
+	if (!shape) return null;
+	try {
+		return toJsonSchemaCompat(objectFromShape(shape));
+	} catch {
+		return null;
+	}
 }
 function buildMcpListing(mcp) {
 	return {
@@ -23,8 +28,8 @@ function buildMcpListing(mcp) {
 			title: tool.title,
 			description: tool.description,
 			annotations: tool.annotations,
-			inputSchema: schemaToJsonSchema(tool.inputSchema, "input"),
-			outputSchema: schemaToJsonSchema(tool.outputSchema, "output")
+			inputSchema: shapeToJsonSchema(tool.inputSchema),
+			outputSchema: shapeToJsonSchema(tool.outputSchema)
 		}))
 	};
 }

package/dist/{errors-Cr95rSkB.cjs → errors-CN6Da8iz.cjs}

@@ -1,30 +1,15 @@
 //#region src/auth/context.ts
-const NEVER_ABORTED = new AbortController().signal;
-/** The per-request context passed to every tool handler as its second argument. The
-* auth context lives in a private field so the accessors are the only way out; `getToken()` is the sole bearer escape hatch. */
+/**
+* The auth surface passed to every tool handler as its second argument. It wraps
+* the verified per-request auth context in a private field, so the context — and
+* the bearer token inside it — can't be read, enumerated, spread, or
+* `JSON.stringify`'d off the instance; the accessors below are the only way out.
+* `getToken()` is the single intentional escape hatch for the raw bearer.
+*/
 var ToolContext = class {
 	#auth;
-	#signal;
-	#client;
-	#sendProgress;
-	constructor(auth, request = {}) {
+	constructor(auth) {
 		this.#auth = auth;
-		this.#signal = request.signal ?? NEVER_ABORTED;
-		this.#client = request.client ?? { protocol: "legacy" };
-		this.#sendProgress = request.sendProgress;
-	}
-	/** Aborts when the client cancels the request or disconnects. */
-	get signal() {
-		return this.#signal;
-	}
-	/** What the client declared about itself on this request. Unverified input. */
-	get client() {
-		return this.#client;
-	}
-	/** Send a progress notification for this call. A no-op when the client
-	* didn't request progress (no `progressToken` on the request). */
-	async progress(update) {
-		await this.#sendProgress?.(update);
 	}
 	/** Whether the in-flight tool call carries a verified auth context. */
 	isAuthenticated() {

package/dist/{errors-Bwd1L0Rf.js → errors-DSe96Ffd.js}

@@ -1,30 +1,15 @@
 //#region src/auth/context.ts
-const NEVER_ABORTED = new AbortController().signal;
-/** The per-request context passed to every tool handler as its second argument. The
-* auth context lives in a private field so the accessors are the only way out; `getToken()` is the sole bearer escape hatch. */
+/**
+* The auth surface passed to every tool handler as its second argument. It wraps
+* the verified per-request auth context in a private field, so the context — and
+* the bearer token inside it — can't be read, enumerated, spread, or
+* `JSON.stringify`'d off the instance; the accessors below are the only way out.
+* `getToken()` is the single intentional escape hatch for the raw bearer.
+*/
 var ToolContext = class {
 	#auth;
-	#signal;
-	#client;
-	#sendProgress;
-	constructor(auth, request = {}) {
+	constructor(auth) {
 		this.#auth = auth;
-		this.#signal = request.signal ?? NEVER_ABORTED;
-		this.#client = request.client ?? { protocol: "legacy" };
-		this.#sendProgress = request.sendProgress;
-	}
-	/** Aborts when the client cancels the request or disconnects. */
-	get signal() {
-		return this.#signal;
-	}
-	/** What the client declared about itself on this request. Unverified input. */
-	get client() {
-		return this.#client;
-	}
-	/** Send a progress notification for this call. A no-op when the client
-	* didn't request progress (no `progressToken` on the request). */
-	async progress(update) {
-		await this.#sendProgress?.(update);
 	}
 	/** Whether the in-flight tool call carries a verified auth context. */
 	isAuthenticated() {

package/dist/{forwarded-BC_RHnn5.cjs → forwarded-Bhwcj22u.cjs}

@@ -15,9 +15,9 @@
 *   proxy which *overwrites* the header (Lovable's web-proxy does), never by a
 *   bare SDK consumer.
 * - `X-Forwarded-Proto` only selects http/https, so it is gated separately:
-*   Supabase's gateway stamps it (that stack always trusts it), and Lovable's
-*   preview proxy overwrites it before the TanStack dev server, so the TanStack
-*   Vite plugin emits the flag by default.
+*   Supabase terminates TLS upstream and forwards over http with a
+*   gateway-stamped proto, so that stack always trusts it; the TanStack proxy
+*   does not sanitize proto, so its Vite plugin never emits the flag.
 */
 function applyForwardedOrigin(request, options) {
 	const proto = options.trustForwardedProto ? firstForwardedValue(request, "x-forwarded-proto") : void 0;

package/dist/{forwarded-B3EBjHnA.js → forwarded-BlLF3dfc.js}

@@ -15,9 +15,9 @@
 *   proxy which *overwrites* the header (Lovable's web-proxy does), never by a
 *   bare SDK consumer.
 * - `X-Forwarded-Proto` only selects http/https, so it is gated separately:
-*   Supabase's gateway stamps it (that stack always trusts it), and Lovable's
-*   preview proxy overwrites it before the TanStack dev server, so the TanStack
-*   Vite plugin emits the flag by default.
+*   Supabase terminates TLS upstream and forwards over http with a
+*   gateway-stamped proto, so that stack always trusts it; the TanStack proxy
+*   does not sanitize proto, so its Vite plugin never emits the flag.
 */
 function applyForwardedOrigin(request, options) {
 	const proto = options.trustForwardedProto ? firstForwardedValue(request, "x-forwarded-proto") : void 0;

package/dist/index.cjs

@@ -1,7 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_logger = require("./logger-CN1q-KNn.cjs");
-const require_schema = require("./schema-D3vClxb7.cjs");
-const require_errors = require("./errors-Cr95rSkB.cjs");
+const require_errors = require("./errors-CN6Da8iz.cjs");
 //#region src/core/define.ts
 function assertUniqueNames(mcp) {
 	const seen = /* @__PURE__ */ new Set();
@@ -80,39 +79,6 @@ function freezeAuth(auth) {
 	if (auth.accessTokenTyp) Object.freeze(auth.accessTokenTyp);
 	Object.freeze(auth);
 }
-function assertAllowedOrigins(allowedOrigins) {
-	if (allowedOrigins === void 0 || allowedOrigins === "any") return;
-	if (!Array.isArray(allowedOrigins)) throw new Error(`@lovable.dev/mcp-js: allowedOrigins must be "any" or an array of exact origins`);
-	for (const origin of allowedOrigins) {
-		if (typeof origin !== "string") throw new Error(`@lovable.dev/mcp-js: allowedOrigins must contain strings`);
-		let parsed;
-		try {
-			parsed = new URL(origin);
-		} catch {
-			throw new Error(`@lovable.dev/mcp-js: allowedOrigins must contain valid exact origins`);
-		}
-		if (parsed.protocol !== "http:" && parsed.protocol !== "https:" || parsed.origin !== origin) throw new Error(`@lovable.dev/mcp-js: allowedOrigins entry "${origin}" must be an exact http(s) origin without a path, query, fragment, or trailing slash`);
-	}
-}
-function assertToolSchemas(mcp) {
-	for (const tool of mcp.tools) for (const [name, definition, strategy] of [[
-		"inputSchema",
-		tool.inputSchema,
-		"input"
-	], [
-		"outputSchema",
-		tool.outputSchema,
-		"output"
-	]]) {
-		if (!definition) continue;
-		try {
-			require_schema.jsonSchemaFromDefinition(definition, strategy);
-		} catch (error) {
-			const detail = error instanceof Error ? `: ${error.message}` : "";
-			throw new Error(`@lovable.dev/mcp-js: tool "${tool.name}" ${name} cannot be represented as JSON Schema${detail}`);
-		}
-	}
-}
 /**
 * Declare a single MCP tool. Import the result into your MCP definition's
 * `tools` array — `defineMcp({ tools: [echoTool, ...] })`.
@@ -135,11 +101,8 @@ function defineMcp(def) {
 	assertNonEmptyString("version", def.version);
 	assertUniqueNames(def);
 	if (def.auth) assertOAuthConfig(def.auth);
-	assertAllowedOrigins(def.allowedOrigins);
-	assertToolSchemas(def);
 	require_logger.resolveMetricsConfig(def.metrics);
 	freezeAuth(def.auth);
-	if (Array.isArray(def.allowedOrigins)) Object.freeze(def.allowedOrigins);
 	Object.freeze(def.tools);
 	for (const tool of def.tools) Object.freeze(tool);
 	return def;

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { C as MetricsOptions, D as JwtClaims, E as ToolContext, O as McpAuthConfig, S as MetricsConfig, T as ProgressUpdate, _ as ToolDefinition, a as EmbeddedResource, b as ZodRawShape, c as JsonValue, d as McpDefinitionInput, f as ResourceLink, g as ToolContent, h as ToolAnnotations, i as EmbeddedBlobResource, l as McpAllowedOrigins, m as TextContent, n as ContentAnnotations, o as EmbeddedTextResource, p as ResourceLinkIcon, r as ContentBlock, s as ImageContent, t as AudioContent, u as McpDefinition, v as ToolHandlerResult, w as McpClientInfo, x as ZodSchema, y as ZodOutputSchema } from "./types-DnGEKnvI.cjs";
+import { C as McpAuthConfig, S as JwtClaims, _ as ZodRawShape, a as EmbeddedResource, b as MetricsOptions, c as McpDefinition, d as ResourceLinkIcon, f as TextContent, g as ToolHandlerResult, h as ToolDefinition, i as EmbeddedBlobResource, l as McpDefinitionInput, m as ToolContent, n as ContentAnnotations, o as EmbeddedTextResource, p as ToolAnnotations, r as ContentBlock, s as ImageContent, t as AudioContent, u as ResourceLink, v as ZodSchema, x as ToolContext, y as MetricsConfig } from "./types-C0Wgm9zp.cjs";
 //#region src/core/define.d.ts
 /**
  * Declare a single MCP tool. Import the result into your MCP definition's
@@ -8,7 +8,7 @@ import { C as MetricsOptions, D as JwtClaims, E as ToolContext, O as McpAuthConf
  * full `z.object(...)` — the MCP SDK builds the object wrapper internally
  * and the raw shape is what the JSON-RPC `tools/list` payload exposes.
  */
-declare function defineTool<TInput extends ZodRawShape | undefined = undefined, TOutput extends ZodOutputSchema | undefined = undefined>(def: ToolDefinition<TInput, TOutput>): ToolDefinition<TInput, TOutput>;
+declare function defineTool<TInput extends ZodRawShape | undefined = undefined, TOutput extends ZodRawShape | undefined = undefined>(def: ToolDefinition<TInput, TOutput>): ToolDefinition<TInput, TOutput>;
 /**
  * Declare the MCP server. `export default` the result from your MCP
  * entrypoint (default `lib/mcp/index.ts`); the Vite plugin reads it to
@@ -71,4 +71,4 @@ type LogLevel = "silent" | "error" | "warn" | "info" | "debug";
  */
 declare function setLogLevel(level: LogLevel): LogLevel;
 //#endregion
-export { type AudioContent, type ContentAnnotations, type ContentBlock, type EmbeddedBlobResource, type EmbeddedResource, type EmbeddedTextResource, type ImageContent, type IssuerOAuthOptions, type JsonValue, type JwtClaims, type LogLevel, type McpAllowedOrigins, type McpClientInfo, type McpDefinitionInput, type MetricsConfig, type MetricsOptions, type ProgressUpdate, type ResourceLink, type ResourceLinkIcon, type TextContent, type ToolAnnotations, type ToolContent, ToolContext, type ToolDefinition, ToolError, type ToolHandlerResult, type ZodOutputSchema, type ZodRawShape, type ZodSchema, auth, defineMcp, defineTool, setLogLevel };
+export { type AudioContent, type ContentAnnotations, type ContentBlock, type EmbeddedBlobResource, type EmbeddedResource, type EmbeddedTextResource, type ImageContent, type IssuerOAuthOptions, type JwtClaims, type LogLevel, type McpDefinitionInput, type MetricsConfig, type MetricsOptions, type ResourceLink, type ResourceLinkIcon, type TextContent, type ToolAnnotations, type ToolContent, ToolContext, type ToolDefinition, ToolError, type ToolHandlerResult, type ZodRawShape, type ZodSchema, auth, defineMcp, defineTool, setLogLevel };