@lovable.dev/mcp-js 0.9.1 → 0.9.4

package/README.internal.md

@@ -7,6 +7,7 @@ Architecture rationale, source layout, and dev scripts for contributors. The use
 - **`protocols/`** is the wire layer — one folder per externally observable HTTP surface. `protocols/mcp` is the public MCP-over-HTTP surface; `protocols/oauth-metadata` serves the RFC 9728 protected-resource metadata required to bootstrap protected MCP clients; `protocols/rest` is internal RPC for the upstream MCP proxy. Every backend wires both MCP and REST, plus the metadata endpoint when OAuth is configured.
 - **`auth/`** (unpublished) is the cross-cutting OAuth middleware — bearer verification, issuer/JWKS discovery, the `auth.oauth.*` config namespace. It depends only on `core/`; both `protocols/mcp` and `protocols/rest` depend on it for the shared bearer gate, so it isn't a wire-format peer of `mcp`/`rest` and doesn't live under `protocols/`.
 - **`stacks/`** is the framework integration: TanStack today; future entries (Supabase Edge Functions, classic Vite, …) live next to it under the same parent, forwarding to `protocols/{mcp,oauth-metadata,rest}` directly — protocol logic stays shared, only ctx unwrapping differs.
+- **`manifest/`** is the stack-agnostic snapshot writer. `lovable-mcp-extract-manifest` is one CLI for every stack: it asks Vite for the resolved config, finds any plugin whose name matches `@lovable.dev/mcp-js*`, and reads `mcpEntry` + `urlPath` off its `api`. TanStack publishes its configured route path (`/mcp`); Supabase publishes `/functions/v1/<functionName>`. The projection (`extract.ts`) is pure and shares `buildMcpListing` with the live `GET /.mcp/list-tools` route so the committed manifest and the served catalog can't drift.
 
 ## Design decisions
 
@@ -111,6 +112,7 @@ src/
     url.ts                       # URL parsing/validation
     validation.ts                # config assertions
     promise.ts                   # cachedPromise (resolved-value cache)
+    fs-errors.ts                 # ENOENT-only catch guard (shared by manifest/io + stacks)
   auth/                          # cross-cutting OAuth middleware (unpublished); depends only on core/
     config.ts                    # auth namespace: auth.oauth.issuer
     authorize.ts                 # request authorizer, bearer parsing, challenges
@@ -130,14 +132,16 @@ src/
       list-tools.ts              # createListToolsHandler (Web-Standard, GET)
       invoke-tool.ts             # createInvokeToolHandler (Web-Standard, POST)
       index.ts                   # barrel
+  manifest/                      # stack-agnostic manifest extraction (TanStack + Supabase both feed it)
+    extract.ts                   # project a defineMcp result to the manifest (types + manifestFromDefinition)
+    io.ts                        # runExtract/syncManifest: read any @lovable.dev/mcp-js* plugin's api + write .lovable/mcp/manifest.json
+    ssr-loader.ts                # produceViaSsr: load the entry via a throwaway Vite SSR server
+  cli/
+    extract-manifest.ts          # lovable-mcp-extract-manifest bin (runs runExtract on cwd)
   stacks/
     tanstack/
       handlers.ts                # TanStack route-ctx adapters
-      vite.ts                    # mcpPlugin (route emission + stale-file cleanup; no manifest)
-      ssr-loader.ts              # produceViaSsr: load the entry via a throwaway Vite SSR server
-      extract-manifest.ts        # project a defineMcp result to the manifest (types + manifestFromDefinition)
-      manifest-io.ts             # runExtract/syncManifest: write/remove .lovable/mcp/manifest.json
-      cli/extract-manifest.ts    # lovable-mcp-extract-manifest bin (runs runExtract on cwd)
+      vite.ts                    # mcpPlugin (route emission + stale-file cleanup; exposes McpPluginApi for the extractor)
       index.ts                   # barrel
 tests/
   core/{define,promise,url}.test.ts
@@ -146,8 +150,9 @@ tests/
     mcp/protocol.test.ts
     rest/{list-tools,invoke-tool}.test.ts
     parity.test.ts                   # REST↔MCP equivalence contract
+  manifest/{extract,io,ssr-loader,run-extract}.test.ts  # stack-agnostic extractor (run-extract covers TanStack + Supabase)
   stacks/
-    tanstack/{handlers,vite,extract-manifest,manifest-io,ssr-loader}.test.ts
+    tanstack/{handlers,vite}.test.ts
   integration/                       # boots an example app, hits live HTTP
     global-setup.ts                  # spawns example/tanstack on :8080
     tools.test.ts                    # non-OAuth example

package/dist/{chunk-QJ7XEKT3.js → chunk-Y3ZFPEQH.js}

@@ -1,4 +1,4 @@
-// src/stacks/tanstack/fs-errors.ts
+// src/core/fs-errors.ts
 function isFileMissing(err) {
   return typeof err === "object" && err !== null && "code" in err && err.code === "ENOENT";
 }

package/dist/{stacks/tanstack/cli → cli}/extract-manifest.cjs

@@ -1,14 +1,19 @@
 #!/usr/bin/env node
 "use strict";
 
-// src/stacks/tanstack/manifest-io.ts
+// src/manifest/io.ts
 var import_node_crypto = require("crypto");
 var import_node_fs = require("fs");
 var import_node_path = require("path");
 var import_vite2 = require("vite");
 
+// src/core/fs-errors.ts
+function isFileMissing(err) {
+  return typeof err === "object" && err !== null && "code" in err && err.code === "ENOENT";
+}
+
 // package.json
-var version = "0.9.1";
+var version = "0.9.4";
 
 // src/protocols/rest/list-tools.ts
 var import_zod_compat = require("@modelcontextprotocol/sdk/server/zod-compat.js");
@@ -57,7 +62,7 @@ function buildMcpListing(mcp) {
   };
 }
 
-// src/stacks/tanstack/extract-manifest.ts
+// src/manifest/extract.ts
 var MANIFEST_VERSION = 1;
 var MANIFEST_RELATIVE_PATH = ".lovable/mcp/manifest.json";
 function manifestAuth(auth) {
@@ -116,12 +121,7 @@ function manifestFromDefinition(definition, urlPath, source = "the MCP entry") {
   };
 }
 
-// src/stacks/tanstack/fs-errors.ts
-function isFileMissing(err) {
-  return typeof err === "object" && err !== null && "code" in err && err.code === "ENOENT";
-}
-
-// src/stacks/tanstack/ssr-loader.ts
+// src/manifest/ssr-loader.ts
 var import_vite = require("vite");
 async function produceViaSsr(projectRoot2, alias, entryAbs, urlPath) {
   const server = await (0, import_vite.createServer)({
@@ -140,8 +140,8 @@ async function produceViaSsr(projectRoot2, alias, entryAbs, urlPath) {
   }
 }
 
-// src/stacks/tanstack/manifest-io.ts
-var MCP_PLUGIN_NAME = "@lovable.dev/mcp-js";
+// src/manifest/io.ts
+var MCP_PLUGIN_NAME_PREFIX = "@lovable.dev/mcp-js";
 var DEFAULT_MCP_ENTRY = "src/lib/mcp/index.ts";
 var DEFAULT_MCP_PATH = "/mcp";
 function writeManifestIfChanged(file, manifest) {
@@ -195,7 +195,9 @@ async function syncManifest(manifestFile, entryAbs, urlPath, produce) {
 async function runExtract(projectRoot2) {
   const resolved = await (0, import_vite2.resolveConfig)({ root: projectRoot2, logLevel: "silent" }, "serve");
   const alias = resolved.resolve?.alias ?? [];
-  const pluginApi = resolved.plugins.find((p) => p.name === MCP_PLUGIN_NAME)?.api;
+  const pluginApi = resolved.plugins.find(
+    (p) => typeof p.name === "string" && p.name.startsWith(MCP_PLUGIN_NAME_PREFIX)
+  )?.api;
   const entryAbs = pluginApi?.mcpEntry ?? (0, import_node_path.resolve)(projectRoot2, DEFAULT_MCP_ENTRY);
   const urlPath = pluginApi?.urlPath ?? DEFAULT_MCP_PATH;
   await syncManifest(
@@ -206,7 +208,7 @@ async function runExtract(projectRoot2) {
   );
 }
 
-// src/stacks/tanstack/cli/extract-manifest.ts
+// src/cli/extract-manifest.ts
 var projectRoot = process.argv[2] ?? process.cwd();
 runExtract(projectRoot).catch((err) => {
   console.error(err instanceof Error ? err.message : String(err));

package/dist/{stacks/tanstack/cli → cli}/extract-manifest.js

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
 import {
   buildMcpListing
-} from "../../../chunk-2RGXCDBU.js";
-import "../../../chunk-YQBOGY7D.js";
-import "../../../chunk-QC3DXQTH.js";
+} from "../chunk-2RGXCDBU.js";
+import "../chunk-YQBOGY7D.js";
+import "../chunk-QC3DXQTH.js";
 import {
   isFileMissing
-} from "../../../chunk-QJ7XEKT3.js";
-import "../../../chunk-6DXGZZA4.js";
+} from "../chunk-Y3ZFPEQH.js";
+import "../chunk-6DXGZZA4.js";
 
-// src/stacks/tanstack/manifest-io.ts
+// src/manifest/io.ts
 import { randomUUID } from "crypto";
 import { lstatSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";
 import { dirname, resolve } from "path";
 import { resolveConfig } from "vite";
 
 // package.json
-var version = "0.9.1";
+var version = "0.9.4";
 
-// src/stacks/tanstack/extract-manifest.ts
+// src/manifest/extract.ts
 var MANIFEST_VERSION = 1;
 var MANIFEST_RELATIVE_PATH = ".lovable/mcp/manifest.json";
 function manifestAuth(auth) {
@@ -77,7 +77,7 @@ function manifestFromDefinition(definition, urlPath, source = "the MCP entry") {
   };
 }
 
-// src/stacks/tanstack/ssr-loader.ts
+// src/manifest/ssr-loader.ts
 import { createServer } from "vite";
 async function produceViaSsr(projectRoot2, alias, entryAbs, urlPath) {
   const server = await createServer({
@@ -96,8 +96,8 @@ async function produceViaSsr(projectRoot2, alias, entryAbs, urlPath) {
   }
 }
 
-// src/stacks/tanstack/manifest-io.ts
-var MCP_PLUGIN_NAME = "@lovable.dev/mcp-js";
+// src/manifest/io.ts
+var MCP_PLUGIN_NAME_PREFIX = "@lovable.dev/mcp-js";
 var DEFAULT_MCP_ENTRY = "src/lib/mcp/index.ts";
 var DEFAULT_MCP_PATH = "/mcp";
 function writeManifestIfChanged(file, manifest) {
@@ -151,7 +151,9 @@ async function syncManifest(manifestFile, entryAbs, urlPath, produce) {
 async function runExtract(projectRoot2) {
   const resolved = await resolveConfig({ root: projectRoot2, logLevel: "silent" }, "serve");
   const alias = resolved.resolve?.alias ?? [];
-  const pluginApi = resolved.plugins.find((p) => p.name === MCP_PLUGIN_NAME)?.api;
+  const pluginApi = resolved.plugins.find(
+    (p) => typeof p.name === "string" && p.name.startsWith(MCP_PLUGIN_NAME_PREFIX)
+  )?.api;
   const entryAbs = pluginApi?.mcpEntry ?? resolve(projectRoot2, DEFAULT_MCP_ENTRY);
   const urlPath = pluginApi?.urlPath ?? DEFAULT_MCP_PATH;
   await syncManifest(
@@ -162,7 +164,7 @@ async function runExtract(projectRoot2) {
   );
 }
 
-// src/stacks/tanstack/cli/extract-manifest.ts
+// src/cli/extract-manifest.ts
 var projectRoot = process.argv[2] ?? process.cwd();
 runExtract(projectRoot).catch((err) => {
   console.error(err instanceof Error ? err.message : String(err));

package/dist/stacks/tanstack/vite.cjs

@@ -33,7 +33,7 @@ var import_node_path = require("path");
 // src/auth/metadata-path.ts
 var OAUTH_PROTECTED_RESOURCE_METADATA_PATH = "/.well-known/oauth-protected-resource";
 
-// src/stacks/tanstack/fs-errors.ts
+// src/core/fs-errors.ts
 function isFileMissing(err) {
   return typeof err === "object" && err !== null && "code" in err && err.code === "ENOENT";
 }

package/dist/stacks/tanstack/vite.d.cts

@@ -1,5 +1,17 @@
 import { Plugin } from 'vite';
 
+/**
+ * Shape every MCP Vite plugin exposes on its `api` so `runExtract` can read
+ * back the resolved entry path and the URL the stack mounts the MCP server at.
+ * TanStack sets `urlPath` to the configured route path (default `/mcp`);
+ * Supabase sets it to `/functions/v1/<functionName>` (the public mount under
+ * which the function and its companion routes live).
+ */
+interface McpPluginApi {
+    readonly mcpEntry: string;
+    readonly urlPath: string;
+}
+
 interface McpPluginOptions {
     /**
      * Path to the MCP entry file (default export = `defineMcp(...)` result),
@@ -64,10 +76,7 @@ interface McpPluginOptions {
      */
     metadataPath?: string;
 }
-interface McpPluginApi {
-    readonly mcpEntry: string;
-    readonly urlPath: string;
-}
+
 declare function assertUrlPathShape(urlPath: string): string;
 declare function deriveRouteFileName(urlPath: string): string;
 declare function assertMetadataPathShape(metadataPath: string): void;

package/dist/stacks/tanstack/vite.d.ts

@@ -1,5 +1,17 @@
 import { Plugin } from 'vite';
 
+/**
+ * Shape every MCP Vite plugin exposes on its `api` so `runExtract` can read
+ * back the resolved entry path and the URL the stack mounts the MCP server at.
+ * TanStack sets `urlPath` to the configured route path (default `/mcp`);
+ * Supabase sets it to `/functions/v1/<functionName>` (the public mount under
+ * which the function and its companion routes live).
+ */
+interface McpPluginApi {
+    readonly mcpEntry: string;
+    readonly urlPath: string;
+}
+
 interface McpPluginOptions {
     /**
      * Path to the MCP entry file (default export = `defineMcp(...)` result),
@@ -64,10 +76,7 @@ interface McpPluginOptions {
      */
     metadataPath?: string;
 }
-interface McpPluginApi {
-    readonly mcpEntry: string;
-    readonly urlPath: string;
-}
+
 declare function assertUrlPathShape(urlPath: string): string;
 declare function deriveRouteFileName(urlPath: string): string;
 declare function assertMetadataPathShape(metadataPath: string): void;

package/dist/stacks/tanstack/vite.js

@@ -1,6 +1,6 @@
 import {
   isFileMissing
-} from "../../chunk-QJ7XEKT3.js";
+} from "../../chunk-Y3ZFPEQH.js";
 import {
   OAUTH_PROTECTED_RESOURCE_METADATA_PATH
 } from "../../chunk-6DXGZZA4.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovable.dev/mcp-js",
-  "version": "0.9.1",
+  "version": "0.9.4",
   "description": "Author MCP servers for Lovable apps. Declare tools with defineTool, register them in defineMcp, and the framework adapter (TanStack today, Supabase Edge Functions next) emits the route(s) at build time.",
   "type": "module",
   "repository": {
@@ -51,7 +51,7 @@
     }
   },
   "bin": {
-    "lovable-mcp-extract-manifest": "./dist/stacks/tanstack/cli/extract-manifest.cjs"
+    "lovable-mcp-extract-manifest": "./dist/cli/extract-manifest.cjs"
   },
   "files": [
     "dist"
@@ -82,8 +82,8 @@
     "zod": "^4.1.13"
   },
   "scripts": {
-    "build": "tsup src/index.ts src/protocols/mcp/index.ts src/protocols/oauth-metadata.ts src/protocols/rest/index.ts src/stacks/tanstack/index.ts src/stacks/tanstack/vite.ts src/stacks/tanstack/cli/extract-manifest.ts --format cjs,esm --dts --outDir dist",
-    "dev": "tsup src/index.ts src/protocols/mcp/index.ts src/protocols/oauth-metadata.ts src/protocols/rest/index.ts src/stacks/tanstack/index.ts src/stacks/tanstack/vite.ts src/stacks/tanstack/cli/extract-manifest.ts --format cjs,esm --dts --watch",
+    "build": "tsup src/index.ts src/protocols/mcp/index.ts src/protocols/oauth-metadata.ts src/protocols/rest/index.ts src/stacks/tanstack/index.ts src/stacks/tanstack/vite.ts src/cli/extract-manifest.ts --format cjs,esm --dts --outDir dist",
+    "dev": "tsup src/index.ts src/protocols/mcp/index.ts src/protocols/oauth-metadata.ts src/protocols/rest/index.ts src/stacks/tanstack/index.ts src/stacks/tanstack/vite.ts src/cli/extract-manifest.ts --format cjs,esm --dts --watch",
     "typecheck": "tsgo --noEmit",
     "format": "oxfmt --write src/ tests/",
     "format:check": "oxfmt --check src/ tests/",