@lovable.dev/mcp-js 0.7.1 → 0.9.0

package/README.internal.md

@@ -133,7 +133,11 @@ src/
   stacks/
     tanstack/
       handlers.ts                # TanStack route-ctx adapters
-      vite.ts                    # mcpPlugin (route emission + stale-file cleanup)
+      vite.ts                    # mcpPlugin (route emission + stale-file cleanup; no manifest)
+      ssr-loader.ts              # produceViaSsr: load the entry via a throwaway Vite SSR server
+      extract-manifest.ts        # project a defineMcp result to the manifest (types + manifestFromDefinition)
+      manifest-io.ts             # runExtract/syncManifest: write/remove .lovable/mcp/manifest.json
+      cli/extract-manifest.ts    # lovable-mcp-extract-manifest bin (runs runExtract on cwd)
       index.ts                   # barrel
 tests/
   core/{define,promise,url}.test.ts
@@ -143,7 +147,7 @@ tests/
     rest/{list-tools,invoke-tool}.test.ts
     parity.test.ts                   # REST↔MCP equivalence contract
   stacks/
-    tanstack/{handlers,vite}.test.ts
+    tanstack/{handlers,vite,extract-manifest,manifest-io,ssr-loader}.test.ts
   integration/                       # boots an example app, hits live HTTP
     global-setup.ts                  # spawns example/tanstack on :8080
     tools.test.ts                    # non-OAuth example

package/README.md

@@ -53,6 +53,18 @@ MCP (`POST /mcp`) is the public wire format clients speak directly. REST (`/.mcp
 
 The OAuth metadata route is emitted by default and returns `404` until OAuth auth is configured. Disable it with `mcpPlugin({ protectedResourceMetadataRoute: false })` only if the app owns `/.well-known/oauth-protected-resource` itself.
 
+To serve the metadata from a different path — e.g. a workspace-private project where only `/api/public/*` is anonymously reachable and `/.well-known/...` is gated — pass `mcpPlugin({ metadataPath: "/api/public/.well-known/oauth-protected-resource" })`. The plugin emits the route there and injects the same path into every handler, so the 401 `WWW-Authenticate` challenge advertises exactly what it serves. `metadataPath` is mutually exclusive with `auth.protectedResourceMetadataUrl` (and with `protectedResourceMetadataRoute: false`).
+
+### `.lovable/mcp/manifest.json`
+
+`.lovable/mcp/manifest.json` is a snapshot the Lovable platform reads to register the MCP server. Envelope fields: `version` (manifest schema version), `sdk_version` (the `@lovable.dev/mcp-js` release that wrote the snapshot), `path`, and `auth`. `auth` is the server's auth configuration, lifted into the envelope (not into `mcp`): `{ "type": "none" }`, or `{ "type": "oauth", ... }` mirroring the `defineMcp({ auth })` config (snake_case — `issuer`, `accepted_audiences`, `required_scopes`, `resource`, …). The `mcp` field is **exactly the `GET /.mcp/list-tools` body** — `server` plus the tool catalog (`name`/`title`/`description`/`annotations` and JSON-Schema `inputSchema`/`outputSchema`) — so the committed snapshot can't drift from what the live route serves. It's produced by loading the entry and reading the catalog off the `defineMcp` result, so the manifest reflects exactly what the server exposes, including tools built programmatically (spreads, computed names, tools from npm). **The `lovable-mcp-extract-manifest` CLI writes it** (loading the entry through Vite's SSR module loader, so it works under Node/Bun), and removes it when the entry is deleted. The Lovable platform runs the CLI in its commit pipeline; the Vite plugin only generates routes. Commit it: the platform reads the committed file.
+
+Three caveats:
+
+- **The entry must import cleanly.** Because extraction imports the entry, it must not throw at module load — read env vars and do I/O *inside* tool handlers, not at module top level. A top-level throw also breaks Worker cold-start, so this is correct authoring regardless. An entry that can't be imported (or doesn't `export default defineMcp(...)`) **makes the extract CLI exit non-zero with a clear error** rather than emitting a partial manifest.
+- **Tool `title`/`description` and the `auth` config are serialized verbatim.** They land in a committed file. The `auth` config is whatever the entry resolves at build time — an issuer read from env resolves to its build-time value (e.g. a fallback like `https://supabase.invalid/auth/v1` when the env var is unset), so don't put secrets in it.
+- **The `version` field is a wire-format version, not the package version.** The platform reader must accept a manifest `version` before this package starts emitting it, so bumping it is a coordinated deploy with the Lovable backend — not something an app author changes.
+
 ## OAuth resource-server auth
 
 `@lovable.dev/mcp-js` can protect an app-hosted MCP server as an OAuth 2.1 resource server. The package does not implement `/authorize`, `/token`, client registration, refresh tokens, or consent UI; those stay with the authorization server (for today's Supabase-backed Lovable Cloud apps, Supabase Auth). The MCP runtime validates bearer JWTs, publishes RFC 9728 protected-resource metadata, returns `WWW-Authenticate: Bearer ... resource_metadata="..."` challenges, and passes verified claims to tools.
@@ -172,7 +184,7 @@ Use an OAuth access token from the configured authorization server for MCP calls
 | `algorithms` | Accepted JWT signing algorithms. Defaults to asymmetric algorithms (`RS*`, `ES*`, `EdDSA`); set explicitly only for a narrower policy. |
 | `clockToleranceSeconds` | Allowed JWT clock skew for `exp`/`nbf` checks, in seconds. Defaults to `30`; max `300`. |
 | `resourceName`, `resourceDocumentation` | Optional metadata fields for MCP clients and humans. `resourceName` defaults to the MCP server `title`. |
-| `protectedResourceMetadataUrl` | Absolute HTTPS URL of an externally hosted RFC 9728 protected-resource metadata document. When set, the SDK advertises this URL in the 401 `WWW-Authenticate: resource_metadata` challenge and stops generating its own metadata — the `/.well-known/oauth-protected-resource` handler returns 404. Use it when the resource server already publishes its own PRM; you'll typically also pass `protectedResourceMetadataRoute: false` to the Vite plugin so the now-unused route isn't emitted. |
+| `protectedResourceMetadataUrl` | Absolute HTTPS URL of an externally hosted RFC 9728 protected-resource metadata document. When set, the SDK advertises this URL in the 401 `WWW-Authenticate: resource_metadata` challenge and stops generating its own metadata — the `/.well-known/oauth-protected-resource` handler returns 404. Use it when the resource server already publishes its own PRM; you'll typically also pass `protectedResourceMetadataRoute: false` to the Vite plugin so the now-unused route isn't emitted. Mutually exclusive with the plugin's `metadataPath` (which has the SDK serve its own document at a custom path); configuring both throws at handler construction. |
 
 Protected-resource metadata is derived from the same config. When `resource` is omitted, the published resource is the incoming request origin plus the MCP route path the stack adapter supplies as `resourcePath` (for example, `https://my-app.lovable.app/mcp`); `authorization_servers` is the configured issuer, and `resource_name` is `defineMcp({ title })` unless `resourceName` overrides it. Because the metadata endpoint is served from `/.well-known/...`, it can't infer the resource from its own path — the handler throws at construction when neither `resource` nor `resourcePath` is set (the generated TanStack routes always pass `resourcePath`). For Supabase auth, this metadata still names the MCP resource even though Supabase JWTs use the project audience `"authenticated"`.
 

package/dist/authorize-HTd0GKmB.d.ts

@@ -0,0 +1,18 @@
+interface McpRuntimeOptions {
+    /**
+     * Public MCP protocol path. REST companion handlers pass this so OAuth
+     * resource/audience checks bind to `/mcp`, not internal `/.mcp/*` RPC URLs.
+     */
+    resourcePath?: string;
+    /**
+     * Host-relative path of the SDK-served protected-resource metadata document.
+     * The Vite plugin injects it into every emitted handler when it generates the
+     * PRM route, so the 401 challenge advertises the same path the route serves.
+     * Its presence is the signal that the SDK owns the PRM document, so it is
+     * mutually exclusive with `auth.protectedResourceMetadataUrl` (which points at
+     * an externally hosted document). Defaults to the well-known path when absent.
+     */
+    metadataPath?: string;
+}
+
+export type { McpRuntimeOptions as M };

package/dist/{chunk-W7F6JRDB.js → chunk-3GQXQBYQ.js}

@@ -7,7 +7,7 @@ import {
   oauthConfigurationErrorResponse,
   resolveProtectedResource,
   withCors
-} from "./chunk-HRMLGCXV.js";
+} from "./chunk-FQLM4JDU.js";
 import {
   describeError,
   log

package/dist/chunk-BG3HOZXZ.js

@@ -0,0 +1,57 @@
+import {
+  assertRestResourceBinding,
+  corsPreflightResponse,
+  createRequestAuthorizer,
+  headResponse,
+  methodNotAllowed,
+  withCors
+} from "./chunk-FQLM4JDU.js";
+
+// src/protocols/rest/list-tools.ts
+import { objectFromShape } from "@modelcontextprotocol/sdk/server/zod-compat.js";
+import { toJsonSchemaCompat } from "@modelcontextprotocol/sdk/server/zod-json-schema-compat.js";
+function shapeToJsonSchema(shape) {
+  if (!shape)
+    return null;
+  try {
+    return toJsonSchemaCompat(objectFromShape(shape));
+  } catch {
+    return null;
+  }
+}
+function buildMcpListing(mcp) {
+  return {
+    server: { name: mcp.name, version: mcp.version, title: mcp.title },
+    tools: mcp.tools.map((tool) => ({
+      name: tool.name,
+      title: tool.title,
+      description: tool.description,
+      annotations: tool.annotations,
+      inputSchema: shapeToJsonSchema(tool.inputSchema),
+      outputSchema: shapeToJsonSchema(tool.outputSchema)
+    }))
+  };
+}
+function createListToolsHandler(mcp, options = {}) {
+  assertRestResourceBinding(mcp, options);
+  const authorizer = createRequestAuthorizer(mcp, options);
+  const handle = async (request) => {
+    const authResult = await authorizer.authorize(request);
+    if (!authResult.ok)
+      return authResult.response;
+    if (request.method !== "GET" && request.method !== "HEAD")
+      return methodNotAllowed("GET, HEAD, OPTIONS");
+    const response = Response.json(buildMcpListing(mcp));
+    return request.method === "HEAD" ? headResponse(response) : response;
+  };
+  return async (request) => {
+    if (request.method === "OPTIONS")
+      return corsPreflightResponse("GET, HEAD, OPTIONS");
+    return withCors(await handle(request));
+  };
+}
+
+export {
+  buildMcpListing,
+  createListToolsHandler
+};

package/dist/{chunk-3XPKR4G6.js → chunk-CJMHLE7F.js}

@@ -5,7 +5,7 @@ import {
   corsPreflightResponse,
   createRequestAuthorizer,
   withCors
-} from "./chunk-HRMLGCXV.js";
+} from "./chunk-FQLM4JDU.js";
 import {
   describeError,
   log

package/dist/{chunk-HRMLGCXV.js → chunk-FQLM4JDU.js}

@@ -30,10 +30,10 @@ function resolveProtectedResource(auth, request, options) {
   resourceURL.hash = "";
   return trimTrailingSlash(resourceURL.toString());
 }
-function assertResourcePathShape(resourcePath) {
+function assertResourcePathShape(resourcePath, label = "resourcePath") {
   if (!resourcePath.startsWith("/") || resourcePath.startsWith("//") || resourcePath.includes("\\") || /(^|\/)\.\.(\/|$)/.test(resourcePath)) {
     throw new Error(
-      `@lovable.dev/mcp-js: resourcePath must be an absolute path beginning with "/" without ".." segments or backslashes (got ${JSON.stringify(resourcePath)})`
+      `@lovable.dev/mcp-js: ${label} must be an absolute path beginning with "/" without ".." segments or backslashes (got ${JSON.stringify(resourcePath)})`
     );
   }
 }
@@ -299,16 +299,16 @@ function quoteAuthenticateParam(value) {
   const sanitized = value.replace(/[\u0000-\u001F\u007F]/g, "");
   return `"${sanitized.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
 }
-function resolveProtectedResourceMetadataUrl(auth, request) {
+function resolveProtectedResourceMetadataUrl(auth, request, options) {
   if (auth.protectedResourceMetadataUrl !== void 0)
     return auth.protectedResourceMetadataUrl;
   const base = auth.resource ?? request.url;
-  return new URL(OAUTH_PROTECTED_RESOURCE_METADATA_PATH, base).toString();
+  return new URL(options.metadataPath ?? OAUTH_PROTECTED_RESOURCE_METADATA_PATH, base).toString();
 }
-function wwwAuthenticateHeader(auth, request, params = {}) {
+function wwwAuthenticateHeader(auth, request, options, params = {}) {
   const values = [
     `realm=${quoteAuthenticateParam("mcp")}`,
-    `resource_metadata=${quoteAuthenticateParam(resolveProtectedResourceMetadataUrl(auth, request))}`
+    `resource_metadata=${quoteAuthenticateParam(resolveProtectedResourceMetadataUrl(auth, request, options))}`
   ];
   if (auth.requiredScopes && auth.requiredScopes.length > 0) {
     values.push(`scope=${quoteAuthenticateParam(auth.requiredScopes.join(" "))}`);
@@ -319,9 +319,12 @@ function wwwAuthenticateHeader(auth, request, params = {}) {
     values.push(`error_description=${quoteAuthenticateParam(params.errorDescription)}`);
   return `Bearer ${values.join(", ")}`;
 }
-function challengeResponse(auth, request, status, oauthError, errorDescription) {
+function challengeResponse(auth, request, options, status, oauthError, errorDescription) {
   const headers = new Headers(JSON_HEADERS);
-  headers.set("WWW-Authenticate", wwwAuthenticateHeader(auth, request, { error: oauthError, errorDescription }));
+  headers.set(
+    "WWW-Authenticate",
+    wwwAuthenticateHeader(auth, request, options, { error: oauthError, errorDescription })
+  );
   headers.set("Cache-Control", "no-store");
   return new Response(JSON.stringify({ error: status === 403 ? "forbidden" : "unauthorized" }), {
     status,
@@ -349,10 +352,17 @@ function parseBearerToken(request) {
 function getOAuthRuntime(mcp, options = {}) {
   if (options.resourcePath !== void 0)
     assertResourcePathShape(options.resourcePath);
-  const stableOptions = { resourcePath: options.resourcePath };
+  if (options.metadataPath !== void 0)
+    assertResourcePathShape(options.metadataPath, "metadataPath");
+  const stableOptions = { resourcePath: options.resourcePath, metadataPath: options.metadataPath };
   const auth = mcp.auth?.type === "oauth" ? mcp.auth : void 0;
   if (!auth)
     return { kind: "unconfigured", options: stableOptions };
+  if (options.metadataPath !== void 0 && auth.protectedResourceMetadataUrl !== void 0) {
+    throw new Error(
+      `@lovable.dev/mcp-js: the Vite plugin generates protected-resource metadata (metadataPath set), so auth.protectedResourceMetadataUrl must not also be set. Drop protectedResourceMetadataUrl, or set protectedResourceMetadataRoute: false in mcpPlugin(...) to host the document yourself.`
+    );
+  }
   const discovery = createOAuthDiscoveryResolver(auth);
   return {
     kind: "configured",
@@ -391,7 +401,7 @@ function createRequestAuthorizer(mcp, options = {}) {
       const token = parseBearerToken(request);
       if (!token) {
         log.info("auth.no_bearer_token", { outcome: "401" });
-        return { ok: false, response: challengeResponse(runtime.auth, request, 401) };
+        return { ok: false, response: challengeResponse(runtime.auth, request, runtime.options, 401) };
       }
       try {
         const auth = await runtime.verify(token, request, runtime.options);
@@ -406,13 +416,27 @@ function createRequestAuthorizer(mcp, options = {}) {
           log.info("auth.token_rejected", { status: err.status, oauthError: err.oauthError });
           return {
             ok: false,
-            response: challengeResponse(runtime.auth, request, err.status, err.oauthError, err.message)
+            response: challengeResponse(
+              runtime.auth,
+              request,
+              runtime.options,
+              err.status,
+              err.oauthError,
+              err.message
+            )
           };
         }
         log.error("auth.unexpected_error", { ...describeError(err), outcome: "401" });
         return {
           ok: false,
-          response: challengeResponse(runtime.auth, request, 401, "invalid_token", "Invalid access token")
+          response: challengeResponse(
+            runtime.auth,
+            request,
+            runtime.options,
+            401,
+            "invalid_token",
+            "Invalid access token"
+          )
         };
       }
     }

package/dist/chunk-QJ7XEKT3.js

@@ -0,0 +1,8 @@
+// src/stacks/tanstack/fs-errors.ts
+function isFileMissing(err) {
+  return typeof err === "object" && err !== null && "code" in err && err.code === "ENOENT";
+}
+
+export {
+  isFileMissing
+};

package/dist/{chunk-LMT6RXUF.js → chunk-SBKIKJNB.js}

@@ -6,55 +6,12 @@ import {
   assertRestResourceBinding,
   corsPreflightResponse,
   createRequestAuthorizer,
-  headResponse,
   methodNotAllowed,
   withCors
-} from "./chunk-HRMLGCXV.js";
-
-// src/protocols/rest/list-tools.ts
-import { objectFromShape } from "@modelcontextprotocol/sdk/server/zod-compat.js";
-import { toJsonSchemaCompat } from "@modelcontextprotocol/sdk/server/zod-json-schema-compat.js";
-function shapeToJsonSchema(shape) {
-  if (!shape)
-    return null;
-  try {
-    return toJsonSchemaCompat(objectFromShape(shape));
-  } catch {
-    return null;
-  }
-}
-function createListToolsHandler(mcp, options = {}) {
-  assertRestResourceBinding(mcp, options);
-  const authorizer = createRequestAuthorizer(mcp, options);
-  const handle = async (request) => {
-    const authResult = await authorizer.authorize(request);
-    if (!authResult.ok)
-      return authResult.response;
-    if (request.method !== "GET" && request.method !== "HEAD")
-      return methodNotAllowed("GET, HEAD, OPTIONS");
-    const body = {
-      server: { name: mcp.name, version: mcp.version, title: mcp.title },
-      tools: mcp.tools.map((tool) => ({
-        name: tool.name,
-        title: tool.title,
-        description: tool.description,
-        annotations: tool.annotations,
-        inputSchema: shapeToJsonSchema(tool.inputSchema),
-        outputSchema: shapeToJsonSchema(tool.outputSchema)
-      }))
-    };
-    const response = Response.json(body);
-    return request.method === "HEAD" ? headResponse(response) : response;
-  };
-  return async (request) => {
-    if (request.method === "OPTIONS")
-      return corsPreflightResponse("GET, HEAD, OPTIONS");
-    return withCors(await handle(request));
-  };
-}
+} from "./chunk-FQLM4JDU.js";
 
 // src/protocols/rest/invoke-tool.ts
-import { getParseErrorMessage, objectFromShape as objectFromShape2, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";
+import { getParseErrorMessage, objectFromShape, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";
 var MAX_REFLECTED_TOOL_NAME = 256;
 function safeReflectName(name) {
   const text = String(name);
@@ -98,7 +55,7 @@ function createInvokeToolHandler(mcp, options = {}) {
     let args = rawArgs;
     if (tool.inputSchema) {
       try {
-        const schema = objectFromShape2(tool.inputSchema);
+        const schema = objectFromShape(tool.inputSchema);
         const parsed = await safeParseAsync(schema, rawArgs);
         if (!parsed.success) {
           return new Response(
@@ -151,6 +108,5 @@ function createInvokeToolHandler(mcp, options = {}) {
 }
 
 export {
-  createListToolsHandler,
   createInvokeToolHandler
 };

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { e as McpDefinitionInput, d as McpDefinition, Z as ZodRawShape, j as ToolDefinition, M as McpAuthConfig } from './types-zMlr1mOK.js';
-export { A as AudioContent, C as ContentAnnotations, a as ContentBlock, E as EmbeddedBlobResource, b as EmbeddedResource, c as EmbeddedTextResource, I as ImageContent, J as JwtClaims, R as ResourceLink, f as ResourceLinkIcon, T as TextContent, g as ToolAnnotations, h as ToolContent, i as ToolContext, k as ToolHandlerResult, l as ZodSchema } from './types-zMlr1mOK.js';
+import { e as McpDefinitionInput, d as McpDefinition, Z as ZodRawShape, j as ToolDefinition, M as McpAuthConfig } from './types-C5SSORxe.js';
+export { A as AudioContent, C as ContentAnnotations, a as ContentBlock, E as EmbeddedBlobResource, b as EmbeddedResource, c as EmbeddedTextResource, I as ImageContent, J as JwtClaims, R as ResourceLink, f as ResourceLinkIcon, T as TextContent, g as ToolAnnotations, h as ToolContent, i as ToolContext, k as ToolHandlerResult, l as ZodSchema } from './types-C5SSORxe.js';
 import 'zod';
 
 /**

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { e as McpDefinitionInput, d as McpDefinition, Z as ZodRawShape, j as ToolDefinition, M as McpAuthConfig } from './types-zMlr1mOK.js';
-export { A as AudioContent, C as ContentAnnotations, a as ContentBlock, E as EmbeddedBlobResource, b as EmbeddedResource, c as EmbeddedTextResource, I as ImageContent, J as JwtClaims, R as ResourceLink, f as ResourceLinkIcon, T as TextContent, g as ToolAnnotations, h as ToolContent, i as ToolContext, k as ToolHandlerResult, l as ZodSchema } from './types-zMlr1mOK.js';
+import { e as McpDefinitionInput, d as McpDefinition, Z as ZodRawShape, j as ToolDefinition, M as McpAuthConfig } from './types-C5SSORxe.js';
+export { A as AudioContent, C as ContentAnnotations, a as ContentBlock, E as EmbeddedBlobResource, b as EmbeddedResource, c as EmbeddedTextResource, I as ImageContent, J as JwtClaims, R as ResourceLink, f as ResourceLinkIcon, T as TextContent, g as ToolAnnotations, h as ToolContent, i as ToolContext, k as ToolHandlerResult, l as ZodSchema } from './types-C5SSORxe.js';
 import 'zod';
 
 /**

package/dist/protocols/mcp/index.cjs

@@ -246,10 +246,10 @@ function resolveProtectedResource(auth, request, options) {
   resourceURL.hash = "";
   return trimTrailingSlash(resourceURL.toString());
 }
-function assertResourcePathShape(resourcePath) {
+function assertResourcePathShape(resourcePath, label = "resourcePath") {
   if (!resourcePath.startsWith("/") || resourcePath.startsWith("//") || resourcePath.includes("\\") || /(^|\/)\.\.(\/|$)/.test(resourcePath)) {
     throw new Error(
-      `@lovable.dev/mcp-js: resourcePath must be an absolute path beginning with "/" without ".." segments or backslashes (got ${JSON.stringify(resourcePath)})`
+      `@lovable.dev/mcp-js: ${label} must be an absolute path beginning with "/" without ".." segments or backslashes (got ${JSON.stringify(resourcePath)})`
     );
   }
 }
@@ -390,16 +390,16 @@ function quoteAuthenticateParam(value) {
   const sanitized = value.replace(/[\u0000-\u001F\u007F]/g, "");
   return `"${sanitized.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
 }
-function resolveProtectedResourceMetadataUrl(auth, request) {
+function resolveProtectedResourceMetadataUrl(auth, request, options) {
   if (auth.protectedResourceMetadataUrl !== void 0)
     return auth.protectedResourceMetadataUrl;
   const base = auth.resource ?? request.url;
-  return new URL(OAUTH_PROTECTED_RESOURCE_METADATA_PATH, base).toString();
+  return new URL(options.metadataPath ?? OAUTH_PROTECTED_RESOURCE_METADATA_PATH, base).toString();
 }
-function wwwAuthenticateHeader(auth, request, params = {}) {
+function wwwAuthenticateHeader(auth, request, options, params = {}) {
   const values = [
     `realm=${quoteAuthenticateParam("mcp")}`,
-    `resource_metadata=${quoteAuthenticateParam(resolveProtectedResourceMetadataUrl(auth, request))}`
+    `resource_metadata=${quoteAuthenticateParam(resolveProtectedResourceMetadataUrl(auth, request, options))}`
   ];
   if (auth.requiredScopes && auth.requiredScopes.length > 0) {
     values.push(`scope=${quoteAuthenticateParam(auth.requiredScopes.join(" "))}`);
@@ -410,9 +410,12 @@ function wwwAuthenticateHeader(auth, request, params = {}) {
     values.push(`error_description=${quoteAuthenticateParam(params.errorDescription)}`);
   return `Bearer ${values.join(", ")}`;
 }
-function challengeResponse(auth, request, status, oauthError, errorDescription) {
+function challengeResponse(auth, request, options, status, oauthError, errorDescription) {
   const headers = new Headers(JSON_HEADERS);
-  headers.set("WWW-Authenticate", wwwAuthenticateHeader(auth, request, { error: oauthError, errorDescription }));
+  headers.set(
+    "WWW-Authenticate",
+    wwwAuthenticateHeader(auth, request, options, { error: oauthError, errorDescription })
+  );
   headers.set("Cache-Control", "no-store");
   return new Response(JSON.stringify({ error: status === 403 ? "forbidden" : "unauthorized" }), {
     status,
@@ -440,10 +443,17 @@ function parseBearerToken(request) {
 function getOAuthRuntime(mcp, options = {}) {
   if (options.resourcePath !== void 0)
     assertResourcePathShape(options.resourcePath);
-  const stableOptions = { resourcePath: options.resourcePath };
+  if (options.metadataPath !== void 0)
+    assertResourcePathShape(options.metadataPath, "metadataPath");
+  const stableOptions = { resourcePath: options.resourcePath, metadataPath: options.metadataPath };
   const auth = mcp.auth?.type === "oauth" ? mcp.auth : void 0;
   if (!auth)
     return { kind: "unconfigured", options: stableOptions };
+  if (options.metadataPath !== void 0 && auth.protectedResourceMetadataUrl !== void 0) {
+    throw new Error(
+      `@lovable.dev/mcp-js: the Vite plugin generates protected-resource metadata (metadataPath set), so auth.protectedResourceMetadataUrl must not also be set. Drop protectedResourceMetadataUrl, or set protectedResourceMetadataRoute: false in mcpPlugin(...) to host the document yourself.`
+    );
+  }
   const discovery = createOAuthDiscoveryResolver(auth);
   return {
     kind: "configured",
@@ -474,7 +484,7 @@ function createRequestAuthorizer(mcp, options = {}) {
       const token = parseBearerToken(request);
       if (!token) {
         log.info("auth.no_bearer_token", { outcome: "401" });
-        return { ok: false, response: challengeResponse(runtime.auth, request, 401) };
+        return { ok: false, response: challengeResponse(runtime.auth, request, runtime.options, 401) };
       }
       try {
         const auth = await runtime.verify(token, request, runtime.options);
@@ -489,13 +499,27 @@ function createRequestAuthorizer(mcp, options = {}) {
           log.info("auth.token_rejected", { status: err.status, oauthError: err.oauthError });
           return {
             ok: false,
-            response: challengeResponse(runtime.auth, request, err.status, err.oauthError, err.message)
+            response: challengeResponse(
+              runtime.auth,
+              request,
+              runtime.options,
+              err.status,
+              err.oauthError,
+              err.message
+            )
           };
         }
         log.error("auth.unexpected_error", { ...describeError(err), outcome: "401" });
         return {
           ok: false,
-          response: challengeResponse(runtime.auth, request, 401, "invalid_token", "Invalid access token")
+          response: challengeResponse(
+            runtime.auth,
+            request,
+            runtime.options,
+            401,
+            "invalid_token",
+            "Invalid access token"
+          )
         };
       }
     }

package/dist/protocols/mcp/index.d.cts

@@ -1,5 +1,5 @@
-import { M as McpRuntimeOptions } from '../../authorize-DpTEIFvs.js';
-import { d as McpDefinition } from '../../types-zMlr1mOK.js';
+import { M as McpRuntimeOptions } from '../../authorize-HTd0GKmB.js';
+import { d as McpDefinition } from '../../types-C5SSORxe.js';
 import 'zod';
 
 type McpProtocolHandler = (request: Request) => Promise<Response>;

package/dist/protocols/mcp/index.d.ts

@@ -1,5 +1,5 @@
-import { M as McpRuntimeOptions } from '../../authorize-DpTEIFvs.js';
-import { d as McpDefinition } from '../../types-zMlr1mOK.js';
+import { M as McpRuntimeOptions } from '../../authorize-HTd0GKmB.js';
+import { d as McpDefinition } from '../../types-C5SSORxe.js';
 import 'zod';
 
 type McpProtocolHandler = (request: Request) => Promise<Response>;

package/dist/protocols/mcp/index.js

@@ -1,8 +1,8 @@
 import {
   createMcpProtocolHandler
-} from "../../chunk-3XPKR4G6.js";
+} from "../../chunk-CJMHLE7F.js";
 import "../../chunk-MA5H6PSF.js";
-import "../../chunk-HRMLGCXV.js";
+import "../../chunk-FQLM4JDU.js";
 import "../../chunk-QC3DXQTH.js";
 import "../../chunk-6DXGZZA4.js";
 export {

package/dist/protocols/oauth-metadata.cjs

@@ -248,10 +248,10 @@ function resolveProtectedResource(auth, request, options) {
   resourceURL.hash = "";
   return trimTrailingSlash(resourceURL.toString());
 }
-function assertResourcePathShape(resourcePath) {
+function assertResourcePathShape(resourcePath, label = "resourcePath") {
   if (!resourcePath.startsWith("/") || resourcePath.startsWith("//") || resourcePath.includes("\\") || /(^|\/)\.\.(\/|$)/.test(resourcePath)) {
     throw new Error(
-      `@lovable.dev/mcp-js: resourcePath must be an absolute path beginning with "/" without ".." segments or backslashes (got ${JSON.stringify(resourcePath)})`
+      `@lovable.dev/mcp-js: ${label} must be an absolute path beginning with "/" without ".." segments or backslashes (got ${JSON.stringify(resourcePath)})`
     );
   }
 }
@@ -397,10 +397,17 @@ function oauthConfigurationErrorResponse() {
 function getOAuthRuntime(mcp, options = {}) {
   if (options.resourcePath !== void 0)
     assertResourcePathShape(options.resourcePath);
-  const stableOptions = { resourcePath: options.resourcePath };
+  if (options.metadataPath !== void 0)
+    assertResourcePathShape(options.metadataPath, "metadataPath");
+  const stableOptions = { resourcePath: options.resourcePath, metadataPath: options.metadataPath };
   const auth = mcp.auth?.type === "oauth" ? mcp.auth : void 0;
   if (!auth)
     return { kind: "unconfigured", options: stableOptions };
+  if (options.metadataPath !== void 0 && auth.protectedResourceMetadataUrl !== void 0) {
+    throw new Error(
+      `@lovable.dev/mcp-js: the Vite plugin generates protected-resource metadata (metadataPath set), so auth.protectedResourceMetadataUrl must not also be set. Drop protectedResourceMetadataUrl, or set protectedResourceMetadataRoute: false in mcpPlugin(...) to host the document yourself.`
+    );
+  }
   const discovery = createOAuthDiscoveryResolver(auth);
   return {
     kind: "configured",

package/dist/protocols/oauth-metadata.d.cts

@@ -1,5 +1,5 @@
-import { M as McpRuntimeOptions } from '../authorize-DpTEIFvs.js';
-import { d as McpDefinition } from '../types-zMlr1mOK.js';
+import { M as McpRuntimeOptions } from '../authorize-HTd0GKmB.js';
+import { d as McpDefinition } from '../types-C5SSORxe.js';
 import 'zod';
 
 type OAuthProtectedResourceMetadataHandler = (request: Request) => Promise<Response>;

package/dist/protocols/oauth-metadata.d.ts

@@ -1,5 +1,5 @@
-import { M as McpRuntimeOptions } from '../authorize-DpTEIFvs.js';
-import { d as McpDefinition } from '../types-zMlr1mOK.js';
+import { M as McpRuntimeOptions } from '../authorize-HTd0GKmB.js';
+import { d as McpDefinition } from '../types-C5SSORxe.js';
 import 'zod';
 
 type OAuthProtectedResourceMetadataHandler = (request: Request) => Promise<Response>;

package/dist/protocols/oauth-metadata.js

@@ -1,7 +1,7 @@
 import {
   createOAuthProtectedResourceMetadataHandler
-} from "../chunk-W7F6JRDB.js";
-import "../chunk-HRMLGCXV.js";
+} from "../chunk-3GQXQBYQ.js";
+import "../chunk-FQLM4JDU.js";
 import "../chunk-QC3DXQTH.js";
 import "../chunk-6DXGZZA4.js";
 export {