@lovable.dev/mcp-js 2.0.1 → 2.0.2-rc.1

package/dist/{authorize-9hTTG-qJ.d.cts → authorize-BobVCjtA.d.cts}

@@ -1,4 +1,4 @@
-import "./types-3CZPz364.cjs";
+import "./types-C6O4ciic.cjs";
 //#region src/auth/authorize.d.ts
 interface McpRuntimeOptions {
   /** Public MCP path OAuth resource/audience checks bind to when it differs from the request path. */

package/dist/{authorize-DNUlPT7k.d.ts → authorize-Wg16_NdO.d.ts}

@@ -1,4 +1,4 @@
-import "./types-3CZPz364.js";
+import "./types-C6O4ciic.js";
 //#region src/auth/authorize.d.ts
 interface McpRuntimeOptions {
   /** Public MCP path OAuth resource/audience checks bind to when it differs from the request path. */

package/dist/{base-CHNFFrMG.d.cts → base-6YZsnawW.d.cts}

@@ -1,4 +1,4 @@
-import { E as McpProtocolEra } from "./types-3CZPz364.cjs";
+import { E as McpProtocolEra } from "./types-C6O4ciic.cjs";
 //#region src/metrics/impl/base.d.ts
 type InvocationOutcome = "ok" | "tool_error" | "handler_error" | "transport_error" | "auth_challenge" | "origin_rejected" | "auth_discovery_config_error" | "auth_discovery_unreachable" | "auth_jwks_config_error" | "auth_jwks_unreachable";
 /** One recorded MCP call. Carries no arguments or response payloads — only the

package/dist/{base-7cq6HCPO.d.ts → base-BKfPCoJ4.d.ts}

@@ -1,4 +1,4 @@
-import { E as McpProtocolEra } from "./types-3CZPz364.js";
+import { E as McpProtocolEra } from "./types-C6O4ciic.js";
 //#region src/metrics/impl/base.d.ts
 type InvocationOutcome = "ok" | "tool_error" | "handler_error" | "transport_error" | "auth_challenge" | "origin_rejected" | "auth_discovery_config_error" | "auth_discovery_unreachable" | "auth_jwks_config_error" | "auth_jwks_unreachable";
 /** One recorded MCP call. Carries no arguments or response payloads — only the

package/dist/cli/extract-manifest.cjs

@@ -1,155 +1,10 @@
 #!/usr/bin/env node
-const require_schema = require("../schema-D3vClxb7.cjs");
-const require_package = require("../package-D8nZVoHm.cjs");
-const require_fs_errors = require("../fs-errors-CWNzOV75.cjs");
-let node_fs = require("node:fs");
-let node_path = require("node:path");
-let vite = require("vite");
-let node_crypto = require("node:crypto");
-//#region src/manifest/listing.ts
-function schemaToJsonSchema(definition, pipeStrategy) {
-	if (!definition) return null;
-	return require_schema.jsonSchemaFromDefinition(definition, pipeStrategy);
-}
-function buildMcpListing(mcp) {
-	return {
-		server: {
-			name: mcp.name,
-			version: mcp.version,
-			title: mcp.title
-		},
-		tools: mcp.tools.map((tool) => ({
-			name: tool.name,
-			title: tool.title,
-			description: tool.description,
-			annotations: tool.annotations,
-			inputSchema: schemaToJsonSchema(tool.inputSchema, "input"),
-			outputSchema: schemaToJsonSchema(tool.outputSchema, "output")
-		}))
-	};
-}
-const MANIFEST_RELATIVE_PATH = ".lovable/mcp/manifest.json";
-function manifestAuth(auth) {
-	if (!auth) return { type: "none" };
-	const oauth = {
-		type: "oauth",
-		issuer: auth.issuer
-	};
-	if (auth.resource !== void 0) oauth.resource = auth.resource;
-	if (auth.resourceName !== void 0) oauth.resource_name = auth.resourceName;
-	if (auth.resourceDocumentation !== void 0) oauth.resource_documentation = auth.resourceDocumentation;
-	if (auth.protectedResourceMetadataUrl !== void 0) oauth.protected_resource_metadata_url = auth.protectedResourceMetadataUrl;
-	if (auth.requireOAuthClientClaim !== void 0) oauth.require_oauth_client_claim = auth.requireOAuthClientClaim;
-	if (auth.acceptResourceClaim !== void 0) oauth.accept_resource_claim = auth.acceptResourceClaim;
-	if (auth.acceptedAudiences !== void 0) oauth.accepted_audiences = auth.acceptedAudiences;
-	if (auth.requiredScopes !== void 0) oauth.required_scopes = auth.requiredScopes;
-	if (auth.jwksUri !== void 0) oauth.jwks_uri = auth.jwksUri;
-	if (auth.algorithms !== void 0) oauth.algorithms = auth.algorithms;
-	if (auth.clockToleranceSeconds !== void 0) oauth.clock_tolerance_seconds = auth.clockToleranceSeconds;
-	return oauth;
-}
-function isToolShape(tool) {
-	if (typeof tool !== "object" || tool === null) return false;
-	const t = tool;
-	return typeof t.name === "string" && typeof t.title === "string" && typeof t.description === "string";
-}
-function isAuthShape(auth) {
-	if (auth === void 0) return true;
-	if (typeof auth !== "object" || auth === null) return false;
-	const a = auth;
-	return a.type === "oauth" && typeof a.issuer === "string" && a.issuer.length > 0;
-}
-function manifestFromDefinition(definition, urlPath, source = "the MCP entry") {
-	const def = definition;
-	if (!(!!def && typeof def === "object" && typeof def.name === "string" && typeof def.title === "string" && typeof def.version === "string" && Array.isArray(def.tools) && def.tools.every(isToolShape) && isAuthShape(def.auth))) throw new Error(`@lovable.dev/mcp-js: ${source} must \`export default defineMcp(...)\` (got ${definition == null ? "no default export" : typeof definition}).`);
-	return {
-		version: 1,
-		sdk_version: require_package.version,
-		path: urlPath,
-		auth: manifestAuth(def.auth),
-		mcp: buildMcpListing(def)
-	};
-}
-//#endregion
-//#region src/manifest/ssr-loader.ts
-async function produceViaSsr(projectRoot, alias, entryAbs, urlPath) {
-	const server = await (0, vite.createServer)({
-		configFile: false,
-		root: projectRoot,
-		logLevel: "silent",
-		server: {
-			middlewareMode: true,
-			hmr: false,
-			watch: null
-		},
-		optimizeDeps: { noDiscovery: true },
-		resolve: { alias }
-	});
-	try {
-		return manifestFromDefinition((await server.ssrLoadModule(entryAbs)).default, urlPath, entryAbs);
-	} finally {
-		await server.close();
-	}
-}
-//#endregion
-//#region src/manifest/io.ts
-const MCP_PLUGIN_NAME_PREFIX = "@lovable.dev/mcp-js";
-function writeManifestIfChanged(file, manifest) {
-	const content = JSON.stringify(manifest, null, 2) + "\n";
-	let existing;
-	try {
-		existing = (0, node_fs.readFileSync)(file, "utf8");
-	} catch (err) {
-		if (!require_fs_errors.isFileMissing(err)) throw err;
-	}
-	if (existing === content) return;
-	(0, node_fs.mkdirSync)((0, node_path.dirname)(file), { recursive: true });
-	const tmp = `${file}.${(0, node_crypto.randomUUID)()}.tmp`;
-	try {
-		(0, node_fs.writeFileSync)(tmp, content, "utf8");
-		(0, node_fs.renameSync)(tmp, file);
-	} catch (err) {
-		try {
-			(0, node_fs.unlinkSync)(tmp);
-		} catch {}
-		throw err;
-	}
-}
-function removeManifest(file) {
-	try {
-		(0, node_fs.unlinkSync)(file);
-	} catch (err) {
-		if (!require_fs_errors.isFileMissing(err)) throw err;
-	}
-}
-async function syncManifest(manifestFile, entryAbs, urlPath, produce) {
-	let entryExists = true;
-	try {
-		(0, node_fs.lstatSync)(entryAbs);
-	} catch (err) {
-		if (!require_fs_errors.isFileMissing(err)) throw err;
-		entryExists = false;
-	}
-	if (!entryExists) {
-		removeManifest(manifestFile);
-		return;
-	}
-	writeManifestIfChanged(manifestFile, await produce(entryAbs, urlPath));
-}
-async function runExtract(projectRoot) {
-	const resolved = await (0, vite.resolveConfig)({
-		root: projectRoot,
-		logLevel: "silent"
-	}, "serve");
-	const alias = resolved.resolve?.alias ?? [];
-	const pluginApi = resolved.plugins.find((p) => typeof p.name === "string" && p.name.startsWith(MCP_PLUGIN_NAME_PREFIX))?.api;
-	const entryAbs = pluginApi?.mcpEntry ?? (0, node_path.resolve)(projectRoot, "src/lib/mcp/index.ts");
-	const urlPath = pluginApi?.urlPath ?? "/mcp";
-	await syncManifest((0, node_path.resolve)(projectRoot, MANIFEST_RELATIVE_PATH), entryAbs, urlPath, (entry, path) => produceViaSsr(projectRoot, alias, entry, path));
-}
-//#endregion
 //#region src/cli/extract-manifest.ts
-runExtract(process.argv[2] ?? process.cwd()).catch((err) => {
+const projectRoot = process.argv[2] ?? process.cwd();
+import("zod/v3").catch((err) => {
+	const message = err instanceof Error ? err.message : String(err);
+	throw new Error(`@lovable.dev/mcp-js requires zod ^3.25 or ^4.0 to extract MCP schemas. Verify the project's zod dependency and package resolution, then try again. Underlying error: ${message}`);
+}).then(() => Promise.resolve().then(() => require("../io-9UsqbMrm.cjs"))).then(({ runExtract }) => runExtract(projectRoot)).catch((err) => {
 	console.error(err instanceof Error ? err.message : String(err));
 	process.exit(1);
 });

package/dist/cli/extract-manifest.js

@@ -1,155 +1,10 @@
 #!/usr/bin/env node
-import { t as jsonSchemaFromDefinition } from "../schema-CW1jKvio.js";
-import { t as version } from "../package-DSwNopNG.js";
-import { t as isFileMissing } from "../fs-errors-PA2t1TIp.js";
-import { lstatSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
-import { dirname, resolve } from "node:path";
-import { createServer, resolveConfig } from "vite";
-import { randomUUID } from "node:crypto";
-//#region src/manifest/listing.ts
-function schemaToJsonSchema(definition, pipeStrategy) {
-	if (!definition) return null;
-	return jsonSchemaFromDefinition(definition, pipeStrategy);
-}
-function buildMcpListing(mcp) {
-	return {
-		server: {
-			name: mcp.name,
-			version: mcp.version,
-			title: mcp.title
-		},
-		tools: mcp.tools.map((tool) => ({
-			name: tool.name,
-			title: tool.title,
-			description: tool.description,
-			annotations: tool.annotations,
-			inputSchema: schemaToJsonSchema(tool.inputSchema, "input"),
-			outputSchema: schemaToJsonSchema(tool.outputSchema, "output")
-		}))
-	};
-}
-const MANIFEST_RELATIVE_PATH = ".lovable/mcp/manifest.json";
-function manifestAuth(auth) {
-	if (!auth) return { type: "none" };
-	const oauth = {
-		type: "oauth",
-		issuer: auth.issuer
-	};
-	if (auth.resource !== void 0) oauth.resource = auth.resource;
-	if (auth.resourceName !== void 0) oauth.resource_name = auth.resourceName;
-	if (auth.resourceDocumentation !== void 0) oauth.resource_documentation = auth.resourceDocumentation;
-	if (auth.protectedResourceMetadataUrl !== void 0) oauth.protected_resource_metadata_url = auth.protectedResourceMetadataUrl;
-	if (auth.requireOAuthClientClaim !== void 0) oauth.require_oauth_client_claim = auth.requireOAuthClientClaim;
-	if (auth.acceptResourceClaim !== void 0) oauth.accept_resource_claim = auth.acceptResourceClaim;
-	if (auth.acceptedAudiences !== void 0) oauth.accepted_audiences = auth.acceptedAudiences;
-	if (auth.requiredScopes !== void 0) oauth.required_scopes = auth.requiredScopes;
-	if (auth.jwksUri !== void 0) oauth.jwks_uri = auth.jwksUri;
-	if (auth.algorithms !== void 0) oauth.algorithms = auth.algorithms;
-	if (auth.clockToleranceSeconds !== void 0) oauth.clock_tolerance_seconds = auth.clockToleranceSeconds;
-	return oauth;
-}
-function isToolShape(tool) {
-	if (typeof tool !== "object" || tool === null) return false;
-	const t = tool;
-	return typeof t.name === "string" && typeof t.title === "string" && typeof t.description === "string";
-}
-function isAuthShape(auth) {
-	if (auth === void 0) return true;
-	if (typeof auth !== "object" || auth === null) return false;
-	const a = auth;
-	return a.type === "oauth" && typeof a.issuer === "string" && a.issuer.length > 0;
-}
-function manifestFromDefinition(definition, urlPath, source = "the MCP entry") {
-	const def = definition;
-	if (!(!!def && typeof def === "object" && typeof def.name === "string" && typeof def.title === "string" && typeof def.version === "string" && Array.isArray(def.tools) && def.tools.every(isToolShape) && isAuthShape(def.auth))) throw new Error(`@lovable.dev/mcp-js: ${source} must \`export default defineMcp(...)\` (got ${definition == null ? "no default export" : typeof definition}).`);
-	return {
-		version: 1,
-		sdk_version: version,
-		path: urlPath,
-		auth: manifestAuth(def.auth),
-		mcp: buildMcpListing(def)
-	};
-}
-//#endregion
-//#region src/manifest/ssr-loader.ts
-async function produceViaSsr(projectRoot, alias, entryAbs, urlPath) {
-	const server = await createServer({
-		configFile: false,
-		root: projectRoot,
-		logLevel: "silent",
-		server: {
-			middlewareMode: true,
-			hmr: false,
-			watch: null
-		},
-		optimizeDeps: { noDiscovery: true },
-		resolve: { alias }
-	});
-	try {
-		return manifestFromDefinition((await server.ssrLoadModule(entryAbs)).default, urlPath, entryAbs);
-	} finally {
-		await server.close();
-	}
-}
-//#endregion
-//#region src/manifest/io.ts
-const MCP_PLUGIN_NAME_PREFIX = "@lovable.dev/mcp-js";
-function writeManifestIfChanged(file, manifest) {
-	const content = JSON.stringify(manifest, null, 2) + "\n";
-	let existing;
-	try {
-		existing = readFileSync(file, "utf8");
-	} catch (err) {
-		if (!isFileMissing(err)) throw err;
-	}
-	if (existing === content) return;
-	mkdirSync(dirname(file), { recursive: true });
-	const tmp = `${file}.${randomUUID()}.tmp`;
-	try {
-		writeFileSync(tmp, content, "utf8");
-		renameSync(tmp, file);
-	} catch (err) {
-		try {
-			unlinkSync(tmp);
-		} catch {}
-		throw err;
-	}
-}
-function removeManifest(file) {
-	try {
-		unlinkSync(file);
-	} catch (err) {
-		if (!isFileMissing(err)) throw err;
-	}
-}
-async function syncManifest(manifestFile, entryAbs, urlPath, produce) {
-	let entryExists = true;
-	try {
-		lstatSync(entryAbs);
-	} catch (err) {
-		if (!isFileMissing(err)) throw err;
-		entryExists = false;
-	}
-	if (!entryExists) {
-		removeManifest(manifestFile);
-		return;
-	}
-	writeManifestIfChanged(manifestFile, await produce(entryAbs, urlPath));
-}
-async function runExtract(projectRoot) {
-	const resolved = await resolveConfig({
-		root: projectRoot,
-		logLevel: "silent"
-	}, "serve");
-	const alias = resolved.resolve?.alias ?? [];
-	const pluginApi = resolved.plugins.find((p) => typeof p.name === "string" && p.name.startsWith(MCP_PLUGIN_NAME_PREFIX))?.api;
-	const entryAbs = pluginApi?.mcpEntry ?? resolve(projectRoot, "src/lib/mcp/index.ts");
-	const urlPath = pluginApi?.urlPath ?? "/mcp";
-	await syncManifest(resolve(projectRoot, MANIFEST_RELATIVE_PATH), entryAbs, urlPath, (entry, path) => produceViaSsr(projectRoot, alias, entry, path));
-}
-//#endregion
 //#region src/cli/extract-manifest.ts
-runExtract(process.argv[2] ?? process.cwd()).catch((err) => {
+const projectRoot = process.argv[2] ?? process.cwd();
+import("zod/v3").catch((err) => {
+	const message = err instanceof Error ? err.message : String(err);
+	throw new Error(`@lovable.dev/mcp-js requires zod ^3.25 or ^4.0 to extract MCP schemas. Verify the project's zod dependency and package resolution, then try again. Underlying error: ${message}`);
+}).then(() => import("../io-BvWgnyti.js")).then(({ runExtract }) => runExtract(projectRoot)).catch((err) => {
 	console.error(err instanceof Error ? err.message : String(err));
 	process.exit(1);
 });

package/dist/{cors-BvJ-XM16.cjs → cors-BEmy5zOp.cjs}

@@ -1,5 +1,5 @@
 const require_logger = require("./logger-CN1q-KNn.cjs");
-const require_package = require("./package-D8nZVoHm.cjs");
+const require_package = require("./package-BvuxcMeS.cjs");
 require("./metadata-path-zd7NSNoa.cjs");
 let jose = require("jose");
 //#region src/core/http.ts

package/dist/{cors-BLWQyVL5.js → cors-D-jcGC2G.js}

@@ -1,5 +1,5 @@
 import { i as log, n as applyLogLevelFromEnv, o as parseSafeUrl, r as describeError, s as trimTrailingSlash, t as LOG_LEVEL_ENV_VAR, u as resolveMetricsConfig } from "./logger-Ctv5xUSD.js";
-import { t as version } from "./package-DSwNopNG.js";
+import { t as version } from "./package-B-TcHr-P.js";
 import "./metadata-path-CAkNcfyY.js";
 import { createLocalJWKSet, decodeProtectedHeader, errors, jwtVerify } from "jose";
 //#region src/core/http.ts

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { A as McpAuthConfig, C as MetricsConfig, D as ProgressUpdate, E as McpProtocolEra, O as ToolContext, S as ZodSchema, T as McpClientInfo, _ as ToolContent, a as EmbeddedResource, b as ZodOutputSchema, c as JsonValue, d as McpDefinition, f as McpDefinitionInput, g as ToolAnnotations, h as TextContent, i as EmbeddedBlobResource, k as JwtClaims, l as JsonValueInput, m as ResourceLinkIcon, n as ContentAnnotations, o as EmbeddedTextResource, p as ResourceLink, r as ContentBlock, s as ImageContent, t as AudioContent, u as McpAllowedOrigins, v as ToolDefinition, w as MetricsOptions, x as ZodRawShape, y as ToolHandlerResult } from "./types-3CZPz364.cjs";
+import { A as McpAuthConfig, C as MetricsConfig, D as ProgressUpdate, E as McpProtocolEra, O as ToolContext, S as ZodSchema, T as McpClientInfo, _ as ToolContent, a as EmbeddedResource, b as ZodOutputSchema, c as JsonValue, d as McpDefinition, f as McpDefinitionInput, g as ToolAnnotations, h as TextContent, i as EmbeddedBlobResource, k as JwtClaims, l as JsonValueInput, m as ResourceLinkIcon, n as ContentAnnotations, o as EmbeddedTextResource, p as ResourceLink, r as ContentBlock, s as ImageContent, t as AudioContent, u as McpAllowedOrigins, v as ToolDefinition, w as MetricsOptions, x as ZodRawShape, y as ToolHandlerResult } from "./types-C6O4ciic.cjs";
 //#region src/core/define.d.ts
 /**
  * Declare a single MCP tool. Import the result into your MCP definition's

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { A as McpAuthConfig, C as MetricsConfig, D as ProgressUpdate, E as McpProtocolEra, O as ToolContext, S as ZodSchema, T as McpClientInfo, _ as ToolContent, a as EmbeddedResource, b as ZodOutputSchema, c as JsonValue, d as McpDefinition, f as McpDefinitionInput, g as ToolAnnotations, h as TextContent, i as EmbeddedBlobResource, k as JwtClaims, l as JsonValueInput, m as ResourceLinkIcon, n as ContentAnnotations, o as EmbeddedTextResource, p as ResourceLink, r as ContentBlock, s as ImageContent, t as AudioContent, u as McpAllowedOrigins, v as ToolDefinition, w as MetricsOptions, x as ZodRawShape, y as ToolHandlerResult } from "./types-3CZPz364.js";
+import { A as McpAuthConfig, C as MetricsConfig, D as ProgressUpdate, E as McpProtocolEra, O as ToolContext, S as ZodSchema, T as McpClientInfo, _ as ToolContent, a as EmbeddedResource, b as ZodOutputSchema, c as JsonValue, d as McpDefinition, f as McpDefinitionInput, g as ToolAnnotations, h as TextContent, i as EmbeddedBlobResource, k as JwtClaims, l as JsonValueInput, m as ResourceLinkIcon, n as ContentAnnotations, o as EmbeddedTextResource, p as ResourceLink, r as ContentBlock, s as ImageContent, t as AudioContent, u as McpAllowedOrigins, v as ToolDefinition, w as MetricsOptions, x as ZodRawShape, y as ToolHandlerResult } from "./types-C6O4ciic.js";
 //#region src/core/define.d.ts
 /**
  * Declare a single MCP tool. Import the result into your MCP definition's

package/dist/io-9UsqbMrm.cjs

@@ -0,0 +1,155 @@
+const require_schema = require("./schema-D3vClxb7.cjs");
+const require_package = require("./package-BvuxcMeS.cjs");
+const require_fs_errors = require("./fs-errors-CWNzOV75.cjs");
+let node_fs = require("node:fs");
+let node_path = require("node:path");
+let vite = require("vite");
+let node_crypto = require("node:crypto");
+//#region src/manifest/listing.ts
+function schemaToJsonSchema(definition, pipeStrategy) {
+	if (!definition) return null;
+	return require_schema.jsonSchemaFromDefinition(definition, pipeStrategy);
+}
+function buildMcpListing(mcp) {
+	return {
+		server: {
+			name: mcp.name,
+			version: mcp.version,
+			title: mcp.title
+		},
+		tools: mcp.tools.map((tool) => ({
+			name: tool.name,
+			title: tool.title,
+			description: tool.description,
+			annotations: tool.annotations,
+			inputSchema: schemaToJsonSchema(tool.inputSchema, "input"),
+			outputSchema: schemaToJsonSchema(tool.outputSchema, "output")
+		}))
+	};
+}
+const MANIFEST_RELATIVE_PATH = ".lovable/mcp/manifest.json";
+function manifestAuth(auth) {
+	if (!auth) return { type: "none" };
+	const oauth = {
+		type: "oauth",
+		issuer: auth.issuer
+	};
+	if (auth.resource !== void 0) oauth.resource = auth.resource;
+	if (auth.resourceName !== void 0) oauth.resource_name = auth.resourceName;
+	if (auth.resourceDocumentation !== void 0) oauth.resource_documentation = auth.resourceDocumentation;
+	if (auth.protectedResourceMetadataUrl !== void 0) oauth.protected_resource_metadata_url = auth.protectedResourceMetadataUrl;
+	if (auth.requireOAuthClientClaim !== void 0) oauth.require_oauth_client_claim = auth.requireOAuthClientClaim;
+	if (auth.acceptResourceClaim !== void 0) oauth.accept_resource_claim = auth.acceptResourceClaim;
+	if (auth.acceptedAudiences !== void 0) oauth.accepted_audiences = auth.acceptedAudiences;
+	if (auth.requiredScopes !== void 0) oauth.required_scopes = auth.requiredScopes;
+	if (auth.jwksUri !== void 0) oauth.jwks_uri = auth.jwksUri;
+	if (auth.algorithms !== void 0) oauth.algorithms = auth.algorithms;
+	if (auth.clockToleranceSeconds !== void 0) oauth.clock_tolerance_seconds = auth.clockToleranceSeconds;
+	return oauth;
+}
+function isToolShape(tool) {
+	if (typeof tool !== "object" || tool === null) return false;
+	const t = tool;
+	return typeof t.name === "string" && typeof t.title === "string" && typeof t.description === "string";
+}
+function isAuthShape(auth) {
+	if (auth === void 0) return true;
+	if (typeof auth !== "object" || auth === null) return false;
+	const a = auth;
+	return a.type === "oauth" && typeof a.issuer === "string" && a.issuer.length > 0;
+}
+function manifestFromDefinition(definition, urlPath, source = "the MCP entry") {
+	const def = definition;
+	if (!(!!def && typeof def === "object" && typeof def.name === "string" && typeof def.title === "string" && typeof def.version === "string" && Array.isArray(def.tools) && def.tools.every(isToolShape) && isAuthShape(def.auth))) throw new Error(`@lovable.dev/mcp-js: ${source} must \`export default defineMcp(...)\` (got ${definition == null ? "no default export" : typeof definition}).`);
+	return {
+		version: 1,
+		sdk_version: require_package.version,
+		path: urlPath,
+		auth: manifestAuth(def.auth),
+		mcp: buildMcpListing(def)
+	};
+}
+//#endregion
+//#region src/manifest/ssr-loader.ts
+async function produceViaSsr(projectRoot, alias, entryAbs, urlPath) {
+	const server = await (0, vite.createServer)({
+		configFile: false,
+		root: projectRoot,
+		logLevel: "silent",
+		server: {
+			middlewareMode: true,
+			hmr: false,
+			watch: null
+		},
+		optimizeDeps: { noDiscovery: true },
+		resolve: { alias }
+	});
+	try {
+		return manifestFromDefinition((await server.ssrLoadModule(entryAbs)).default, urlPath, entryAbs);
+	} finally {
+		await server.close();
+	}
+}
+//#endregion
+//#region src/manifest/io.ts
+const MCP_PLUGIN_NAME_PREFIX = "@lovable.dev/mcp-js";
+const DEFAULT_MCP_ENTRY = "src/lib/mcp/index.ts";
+const DEFAULT_MCP_PATH = "/mcp";
+function writeManifestIfChanged(file, manifest) {
+	const content = JSON.stringify(manifest, null, 2) + "\n";
+	let existing;
+	try {
+		existing = (0, node_fs.readFileSync)(file, "utf8");
+	} catch (err) {
+		if (!require_fs_errors.isFileMissing(err)) throw err;
+	}
+	if (existing === content) return;
+	(0, node_fs.mkdirSync)((0, node_path.dirname)(file), { recursive: true });
+	const tmp = `${file}.${(0, node_crypto.randomUUID)()}.tmp`;
+	try {
+		(0, node_fs.writeFileSync)(tmp, content, "utf8");
+		(0, node_fs.renameSync)(tmp, file);
+	} catch (err) {
+		try {
+			(0, node_fs.unlinkSync)(tmp);
+		} catch {}
+		throw err;
+	}
+}
+function removeManifest(file) {
+	try {
+		(0, node_fs.unlinkSync)(file);
+	} catch (err) {
+		if (!require_fs_errors.isFileMissing(err)) throw err;
+	}
+}
+async function syncManifest(manifestFile, entryAbs, urlPath, produce) {
+	let entryExists = true;
+	try {
+		(0, node_fs.lstatSync)(entryAbs);
+	} catch (err) {
+		if (!require_fs_errors.isFileMissing(err)) throw err;
+		entryExists = false;
+	}
+	if (!entryExists) {
+		removeManifest(manifestFile);
+		return;
+	}
+	writeManifestIfChanged(manifestFile, await produce(entryAbs, urlPath));
+}
+async function runExtract(projectRoot) {
+	const resolved = await (0, vite.resolveConfig)({
+		root: projectRoot,
+		logLevel: "silent"
+	}, "serve");
+	const alias = resolved.resolve?.alias ?? [];
+	const pluginApi = resolved.plugins.find((p) => typeof p.name === "string" && p.name.startsWith(MCP_PLUGIN_NAME_PREFIX))?.api;
+	const entryAbs = pluginApi?.mcpEntry ?? (0, node_path.resolve)(projectRoot, "src/lib/mcp/index.ts");
+	const urlPath = pluginApi?.urlPath ?? "/mcp";
+	await syncManifest((0, node_path.resolve)(projectRoot, MANIFEST_RELATIVE_PATH), entryAbs, urlPath, (entry, path) => produceViaSsr(projectRoot, alias, entry, path));
+}
+//#endregion
+exports.DEFAULT_MCP_ENTRY = DEFAULT_MCP_ENTRY;
+exports.DEFAULT_MCP_PATH = DEFAULT_MCP_PATH;
+exports.runExtract = runExtract;
+exports.syncManifest = syncManifest;

package/dist/{io-D_5cuaEL.d.ts → io-BD2TuqtG.d.ts}

@@ -1,4 +1,4 @@
-import "./types-3CZPz364.js";
+import "./types-C6O4ciic.js";
 //#region src/manifest/io.d.ts
 /**
  * Shape every MCP Vite plugin exposes on its `api` so `runExtract` can read

package/dist/io-BvWgnyti.js

@@ -0,0 +1,152 @@
+import { t as jsonSchemaFromDefinition } from "./schema-CW1jKvio.js";
+import { t as version } from "./package-B-TcHr-P.js";
+import { t as isFileMissing } from "./fs-errors-PA2t1TIp.js";
+import { lstatSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { createServer, resolveConfig } from "vite";
+import { randomUUID } from "node:crypto";
+//#region src/manifest/listing.ts
+function schemaToJsonSchema(definition, pipeStrategy) {
+	if (!definition) return null;
+	return jsonSchemaFromDefinition(definition, pipeStrategy);
+}
+function buildMcpListing(mcp) {
+	return {
+		server: {
+			name: mcp.name,
+			version: mcp.version,
+			title: mcp.title
+		},
+		tools: mcp.tools.map((tool) => ({
+			name: tool.name,
+			title: tool.title,
+			description: tool.description,
+			annotations: tool.annotations,
+			inputSchema: schemaToJsonSchema(tool.inputSchema, "input"),
+			outputSchema: schemaToJsonSchema(tool.outputSchema, "output")
+		}))
+	};
+}
+const MANIFEST_RELATIVE_PATH = ".lovable/mcp/manifest.json";
+function manifestAuth(auth) {
+	if (!auth) return { type: "none" };
+	const oauth = {
+		type: "oauth",
+		issuer: auth.issuer
+	};
+	if (auth.resource !== void 0) oauth.resource = auth.resource;
+	if (auth.resourceName !== void 0) oauth.resource_name = auth.resourceName;
+	if (auth.resourceDocumentation !== void 0) oauth.resource_documentation = auth.resourceDocumentation;
+	if (auth.protectedResourceMetadataUrl !== void 0) oauth.protected_resource_metadata_url = auth.protectedResourceMetadataUrl;
+	if (auth.requireOAuthClientClaim !== void 0) oauth.require_oauth_client_claim = auth.requireOAuthClientClaim;
+	if (auth.acceptResourceClaim !== void 0) oauth.accept_resource_claim = auth.acceptResourceClaim;
+	if (auth.acceptedAudiences !== void 0) oauth.accepted_audiences = auth.acceptedAudiences;
+	if (auth.requiredScopes !== void 0) oauth.required_scopes = auth.requiredScopes;
+	if (auth.jwksUri !== void 0) oauth.jwks_uri = auth.jwksUri;
+	if (auth.algorithms !== void 0) oauth.algorithms = auth.algorithms;
+	if (auth.clockToleranceSeconds !== void 0) oauth.clock_tolerance_seconds = auth.clockToleranceSeconds;
+	return oauth;
+}
+function isToolShape(tool) {
+	if (typeof tool !== "object" || tool === null) return false;
+	const t = tool;
+	return typeof t.name === "string" && typeof t.title === "string" && typeof t.description === "string";
+}
+function isAuthShape(auth) {
+	if (auth === void 0) return true;
+	if (typeof auth !== "object" || auth === null) return false;
+	const a = auth;
+	return a.type === "oauth" && typeof a.issuer === "string" && a.issuer.length > 0;
+}
+function manifestFromDefinition(definition, urlPath, source = "the MCP entry") {
+	const def = definition;
+	if (!(!!def && typeof def === "object" && typeof def.name === "string" && typeof def.title === "string" && typeof def.version === "string" && Array.isArray(def.tools) && def.tools.every(isToolShape) && isAuthShape(def.auth))) throw new Error(`@lovable.dev/mcp-js: ${source} must \`export default defineMcp(...)\` (got ${definition == null ? "no default export" : typeof definition}).`);
+	return {
+		version: 1,
+		sdk_version: version,
+		path: urlPath,
+		auth: manifestAuth(def.auth),
+		mcp: buildMcpListing(def)
+	};
+}
+//#endregion
+//#region src/manifest/ssr-loader.ts
+async function produceViaSsr(projectRoot, alias, entryAbs, urlPath) {
+	const server = await createServer({
+		configFile: false,
+		root: projectRoot,
+		logLevel: "silent",
+		server: {
+			middlewareMode: true,
+			hmr: false,
+			watch: null
+		},
+		optimizeDeps: { noDiscovery: true },
+		resolve: { alias }
+	});
+	try {
+		return manifestFromDefinition((await server.ssrLoadModule(entryAbs)).default, urlPath, entryAbs);
+	} finally {
+		await server.close();
+	}
+}
+//#endregion
+//#region src/manifest/io.ts
+const MCP_PLUGIN_NAME_PREFIX = "@lovable.dev/mcp-js";
+const DEFAULT_MCP_ENTRY = "src/lib/mcp/index.ts";
+const DEFAULT_MCP_PATH = "/mcp";
+function writeManifestIfChanged(file, manifest) {
+	const content = JSON.stringify(manifest, null, 2) + "\n";
+	let existing;
+	try {
+		existing = readFileSync(file, "utf8");
+	} catch (err) {
+		if (!isFileMissing(err)) throw err;
+	}
+	if (existing === content) return;
+	mkdirSync(dirname(file), { recursive: true });
+	const tmp = `${file}.${randomUUID()}.tmp`;
+	try {
+		writeFileSync(tmp, content, "utf8");
+		renameSync(tmp, file);
+	} catch (err) {
+		try {
+			unlinkSync(tmp);
+		} catch {}
+		throw err;
+	}
+}
+function removeManifest(file) {
+	try {
+		unlinkSync(file);
+	} catch (err) {
+		if (!isFileMissing(err)) throw err;
+	}
+}
+async function syncManifest(manifestFile, entryAbs, urlPath, produce) {
+	let entryExists = true;
+	try {
+		lstatSync(entryAbs);
+	} catch (err) {
+		if (!isFileMissing(err)) throw err;
+		entryExists = false;
+	}
+	if (!entryExists) {
+		removeManifest(manifestFile);
+		return;
+	}
+	writeManifestIfChanged(manifestFile, await produce(entryAbs, urlPath));
+}
+async function runExtract(projectRoot) {
+	const resolved = await resolveConfig({
+		root: projectRoot,
+		logLevel: "silent"
+	}, "serve");
+	const alias = resolved.resolve?.alias ?? [];
+	const pluginApi = resolved.plugins.find((p) => typeof p.name === "string" && p.name.startsWith(MCP_PLUGIN_NAME_PREFIX))?.api;
+	const entryAbs = pluginApi?.mcpEntry ?? resolve(projectRoot, "src/lib/mcp/index.ts");
+	const urlPath = pluginApi?.urlPath ?? "/mcp";
+	await syncManifest(resolve(projectRoot, MANIFEST_RELATIVE_PATH), entryAbs, urlPath, (entry, path) => produceViaSsr(projectRoot, alias, entry, path));
+}
+//#endregion
+export { DEFAULT_MCP_ENTRY, DEFAULT_MCP_PATH, runExtract, syncManifest };

package/dist/{io-CDV3mud0.d.cts → io-D2PGAhYM.d.cts}

@@ -1,4 +1,4 @@
-import "./types-3CZPz364.cjs";
+import "./types-C6O4ciic.cjs";
 //#region src/manifest/io.d.ts
 /**
  * Shape every MCP Vite plugin exposes on its `api` so `runExtract` can read

package/dist/{mcp-BsvVuQvW.cjs → mcp-Dzc7qqNm.cjs}

@@ -1,7 +1,7 @@
 const require_logger = require("./logger-CN1q-KNn.cjs");
 const require_schema = require("./schema-D3vClxb7.cjs");
 const require_errors = require("./errors-Cr95rSkB.cjs");
-const require_cors = require("./cors-BvJ-XM16.cjs");
+const require_cors = require("./cors-BEmy5zOp.cjs");
 let _modelcontextprotocol_sdk_server_zod_compat_js = require("@modelcontextprotocol/sdk/server/zod-compat.js");
 let _modelcontextprotocol_server = require("@modelcontextprotocol/server");
 //#region src/core/content.ts

package/dist/{mcp-CMph8_rD.js → mcp-uA_Zcw4c.js}

@@ -1,7 +1,7 @@
 import { i as log, r as describeError } from "./logger-Ctv5xUSD.js";
 import { n as schemaFromDefinition, t as jsonSchemaFromDefinition } from "./schema-CW1jKvio.js";
 import { i as ToolContext, n as errorSummary, r as resolveToolErrorMessage } from "./errors-Bwd1L0Rf.js";
-import { f as finalizeWireResponse, i as normalizeHttpMethod, l as createNoopRecorder, n as createRequestAuthorizer, t as evaluateCors, u as nowMs } from "./cors-BLWQyVL5.js";
+import { f as finalizeWireResponse, i as normalizeHttpMethod, l as createNoopRecorder, n as createRequestAuthorizer, t as evaluateCors, u as nowMs } from "./cors-D-jcGC2G.js";
 import { getParseErrorMessage, safeParseAsync } from "@modelcontextprotocol/sdk/server/zod-compat.js";
 import { CLIENT_CAPABILITIES_META_KEY, CLIENT_INFO_META_KEY, McpServer, createMcpHandler } from "@modelcontextprotocol/server";
 //#region src/core/content.ts

package/dist/{package-DSwNopNG.js → package-B-TcHr-P.js}

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "2.0.1";
+var version = "2.0.2-rc.1";
 //#endregion
 export { version as t };

package/dist/{package-D8nZVoHm.cjs → package-BvuxcMeS.cjs}

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "2.0.1";
+var version = "2.0.2-rc.1";
 //#endregion
 Object.defineProperty(exports, "version", {
 	enumerable: true,

package/dist/protocols/mcp/index.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_mcp = require("../../mcp-BsvVuQvW.cjs");
+const require_mcp = require("../../mcp-Dzc7qqNm.cjs");
 exports.createMcpProtocolHandler = require_mcp.createMcpProtocolHandler;

package/dist/protocols/mcp/index.d.cts

@@ -1,6 +1,6 @@
-import { d as McpDefinition } from "../../types-3CZPz364.cjs";
-import { t as MetricsRecorder } from "../../base-CHNFFrMG.cjs";
-import { t as McpRuntimeOptions } from "../../authorize-9hTTG-qJ.cjs";
+import { d as McpDefinition } from "../../types-C6O4ciic.cjs";
+import { t as MetricsRecorder } from "../../base-6YZsnawW.cjs";
+import { t as McpRuntimeOptions } from "../../authorize-BobVCjtA.cjs";
 //#region src/protocols/mcp/protocol.d.ts
 type McpProtocolHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;
 /**

package/dist/protocols/mcp/index.d.ts

@@ -1,6 +1,6 @@
-import { d as McpDefinition } from "../../types-3CZPz364.js";
-import { t as MetricsRecorder } from "../../base-7cq6HCPO.js";
-import { t as McpRuntimeOptions } from "../../authorize-DNUlPT7k.js";
+import { d as McpDefinition } from "../../types-C6O4ciic.js";
+import { t as MetricsRecorder } from "../../base-BKfPCoJ4.js";
+import { t as McpRuntimeOptions } from "../../authorize-Wg16_NdO.js";
 //#region src/protocols/mcp/protocol.d.ts
 type McpProtocolHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;
 /**

package/dist/protocols/mcp/index.js

@@ -1,2 +1,2 @@
-import { t as createMcpProtocolHandler } from "../../mcp-CMph8_rD.js";
+import { t as createMcpProtocolHandler } from "../../mcp-uA_Zcw4c.js";
 export { createMcpProtocolHandler };

package/dist/protocols/oauth-metadata.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_logger = require("../logger-CN1q-KNn.cjs");
-const require_cors = require("../cors-BvJ-XM16.cjs");
+const require_cors = require("../cors-BEmy5zOp.cjs");
 //#region src/protocols/oauth-metadata.ts
 function notFound() {
 	return new Response(JSON.stringify({ error: "not found" }), {

package/dist/protocols/oauth-metadata.d.cts

@@ -1,6 +1,6 @@
-import { d as McpDefinition } from "../types-3CZPz364.cjs";
-import { t as MetricsRecorder } from "../base-CHNFFrMG.cjs";
-import { t as McpRuntimeOptions } from "../authorize-9hTTG-qJ.cjs";
+import { d as McpDefinition } from "../types-C6O4ciic.cjs";
+import { t as MetricsRecorder } from "../base-6YZsnawW.cjs";
+import { t as McpRuntimeOptions } from "../authorize-BobVCjtA.cjs";
 //#region src/protocols/oauth-metadata.d.ts
 type OAuthProtectedResourceMetadataHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;
 declare function createOAuthProtectedResourceMetadataHandler(mcp: McpDefinition, options?: McpRuntimeOptions): OAuthProtectedResourceMetadataHandler;

package/dist/protocols/oauth-metadata.d.ts

@@ -1,6 +1,6 @@
-import { d as McpDefinition } from "../types-3CZPz364.js";
-import { t as MetricsRecorder } from "../base-7cq6HCPO.js";
-import { t as McpRuntimeOptions } from "../authorize-DNUlPT7k.js";
+import { d as McpDefinition } from "../types-C6O4ciic.js";
+import { t as MetricsRecorder } from "../base-BKfPCoJ4.js";
+import { t as McpRuntimeOptions } from "../authorize-Wg16_NdO.js";
 //#region src/protocols/oauth-metadata.d.ts
 type OAuthProtectedResourceMetadataHandler = (request: Request, recorder?: MetricsRecorder) => Promise<Response>;
 declare function createOAuthProtectedResourceMetadataHandler(mcp: McpDefinition, options?: McpRuntimeOptions): OAuthProtectedResourceMetadataHandler;

package/dist/protocols/oauth-metadata.js

@@ -1,5 +1,5 @@
 import { i as log, r as describeError } from "../logger-Ctv5xUSD.js";
-import { a as oauthConfigurationErrorResponse, d as JSON_HEADERS, f as finalizeWireResponse, i as normalizeHttpMethod, l as createNoopRecorder, p as methodNotAllowed, r as getOAuthRuntime, s as resolveProtectedResource, t as evaluateCors } from "../cors-BLWQyVL5.js";
+import { a as oauthConfigurationErrorResponse, d as JSON_HEADERS, f as finalizeWireResponse, i as normalizeHttpMethod, l as createNoopRecorder, p as methodNotAllowed, r as getOAuthRuntime, s as resolveProtectedResource, t as evaluateCors } from "../cors-D-jcGC2G.js";
 //#region src/protocols/oauth-metadata.ts
 function notFound() {
 	return new Response(JSON.stringify({ error: "not found" }), {

package/dist/stacks/supabase/index.cjs

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_logger = require("../../logger-CN1q-KNn.cjs");
-const require_cors = require("../../cors-BvJ-XM16.cjs");
+const require_cors = require("../../cors-BEmy5zOp.cjs");
 const require_metadata_path = require("../../metadata-path-zd7NSNoa.cjs");
-const require_mcp = require("../../mcp-BsvVuQvW.cjs");
+const require_mcp = require("../../mcp-Dzc7qqNm.cjs");
 const require_protocols_oauth_metadata = require("../../protocols/oauth-metadata.cjs");
 const require_forwarded = require("../../forwarded-B37IdmMX.cjs");
 const require_paths = require("../../paths-OP318a6c.cjs");

package/dist/stacks/supabase/index.d.cts

@@ -1,4 +1,4 @@
-import { d as McpDefinition } from "../../types-3CZPz364.cjs";
+import { d as McpDefinition } from "../../types-C6O4ciic.cjs";
 //#region src/stacks/supabase/handler.d.ts
 type SupabaseHandler = (request: Request) => Promise<Response>;
 interface SupabaseHandlerOptions {

package/dist/stacks/supabase/index.d.ts

@@ -1,4 +1,4 @@
-import { d as McpDefinition } from "../../types-3CZPz364.js";
+import { d as McpDefinition } from "../../types-C6O4ciic.js";
 //#region src/stacks/supabase/handler.d.ts
 type SupabaseHandler = (request: Request) => Promise<Response>;
 interface SupabaseHandlerOptions {

package/dist/stacks/supabase/index.js

@@ -1,7 +1,7 @@
 import { s as trimTrailingSlash } from "../../logger-Ctv5xUSD.js";
-import { c as createRecorderForRuntime, o as assertResourcePathShape } from "../../cors-BLWQyVL5.js";
+import { c as createRecorderForRuntime, o as assertResourcePathShape } from "../../cors-D-jcGC2G.js";
 import { t as OAUTH_PROTECTED_RESOURCE_METADATA_PATH } from "../../metadata-path-CAkNcfyY.js";
-import { t as createMcpProtocolHandler } from "../../mcp-CMph8_rD.js";
+import { t as createMcpProtocolHandler } from "../../mcp-uA_Zcw4c.js";
 import { createOAuthProtectedResourceMetadataHandler } from "../../protocols/oauth-metadata.js";
 import { t as applyForwardedOrigin } from "../../forwarded-BBXvFeh6.js";
 import { n as assertFunctionName, t as FUNCTIONS_MOUNT_PREFIX } from "../../paths-IS65L6TA.js";

package/dist/stacks/supabase/vite.cjs

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_package = require("../../package-D8nZVoHm.cjs");
+const require_package = require("../../package-BvuxcMeS.cjs");
 const require_fs_errors = require("../../fs-errors-CWNzOV75.cjs");
 const require_supabase_config = require("../../supabase-config-Dz7dnUv0.cjs");
 const require_paths = require("../../paths-OP318a6c.cjs");

package/dist/stacks/supabase/vite.d.cts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-CDV3mud0.cjs";
+import { t as McpPluginApi } from "../../io-D2PGAhYM.cjs";
 import { Plugin } from "vite";
 //#region src/stacks/supabase/vite.d.ts
 interface McpPluginOptions {

package/dist/stacks/supabase/vite.d.ts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-D_5cuaEL.js";
+import { t as McpPluginApi } from "../../io-BD2TuqtG.js";
 import { Plugin } from "vite";
 //#region src/stacks/supabase/vite.d.ts
 interface McpPluginOptions {

package/dist/stacks/supabase/vite.js

@@ -1,4 +1,4 @@
-import { t as version } from "../../package-DSwNopNG.js";
+import { t as version } from "../../package-B-TcHr-P.js";
 import { t as isFileMissing } from "../../fs-errors-PA2t1TIp.js";
 import { t as readSupabaseProjectRef } from "../../supabase-config-CakTU8YF.js";
 import { n as assertFunctionName, t as FUNCTIONS_MOUNT_PREFIX } from "../../paths-IS65L6TA.js";

package/dist/stacks/tanstack/index.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_cors = require("../../cors-BvJ-XM16.cjs");
-const require_mcp = require("../../mcp-BsvVuQvW.cjs");
+const require_cors = require("../../cors-BEmy5zOp.cjs");
+const require_mcp = require("../../mcp-Dzc7qqNm.cjs");
 const require_protocols_oauth_metadata = require("../../protocols/oauth-metadata.cjs");
 const require_forwarded = require("../../forwarded-B37IdmMX.cjs");
 //#region src/stacks/tanstack/handlers.ts

package/dist/stacks/tanstack/index.d.cts

@@ -1,5 +1,5 @@
-import { d as McpDefinition } from "../../types-3CZPz364.cjs";
-import { t as McpRuntimeOptions } from "../../authorize-9hTTG-qJ.cjs";
+import { d as McpDefinition } from "../../types-C6O4ciic.cjs";
+import { t as McpRuntimeOptions } from "../../authorize-BobVCjtA.cjs";
 //#region src/stacks/tanstack/handlers.d.ts
 interface TanStackRouteCtx {
   request: Request;

package/dist/stacks/tanstack/index.d.ts

@@ -1,5 +1,5 @@
-import { d as McpDefinition } from "../../types-3CZPz364.js";
-import { t as McpRuntimeOptions } from "../../authorize-DNUlPT7k.js";
+import { d as McpDefinition } from "../../types-C6O4ciic.js";
+import { t as McpRuntimeOptions } from "../../authorize-Wg16_NdO.js";
 //#region src/stacks/tanstack/handlers.d.ts
 interface TanStackRouteCtx {
   request: Request;

package/dist/stacks/tanstack/index.js

@@ -1,5 +1,5 @@
-import { c as createRecorderForRuntime } from "../../cors-BLWQyVL5.js";
-import { t as createMcpProtocolHandler } from "../../mcp-CMph8_rD.js";
+import { c as createRecorderForRuntime } from "../../cors-D-jcGC2G.js";
+import { t as createMcpProtocolHandler } from "../../mcp-uA_Zcw4c.js";
 import { createOAuthProtectedResourceMetadataHandler } from "../../protocols/oauth-metadata.js";
 import { t as applyForwardedOrigin } from "../../forwarded-BBXvFeh6.js";
 //#region src/stacks/tanstack/handlers.ts

package/dist/stacks/tanstack/vite.d.cts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-CDV3mud0.cjs";
+import { t as McpPluginApi } from "../../io-D2PGAhYM.cjs";
 import { Plugin } from "vite";
 //#region src/stacks/tanstack/vite.d.ts
 interface McpPluginOptions {

package/dist/stacks/tanstack/vite.d.ts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-D_5cuaEL.js";
+import { t as McpPluginApi } from "../../io-BD2TuqtG.js";
 import { Plugin } from "vite";
 //#region src/stacks/tanstack/vite.d.ts
 interface McpPluginOptions {

package/dist/{types-3CZPz364.d.cts → types-C6O4ciic.d.cts}

@@ -319,8 +319,8 @@ interface AnyToolDefinition {
   readonly name: string;
   readonly title: string;
   readonly description: string;
-  readonly inputSchema?: ZodRawShape$1;
-  readonly outputSchema?: ZodOutputSchema;
+  readonly inputSchema?: ZodRawShape$1 | undefined;
+  readonly outputSchema?: ZodOutputSchema | undefined;
   readonly annotations?: ToolAnnotations;
   readonly handler: (args: any, ctx: ToolContext) => ToolHandlerResult | Promise<ToolHandlerResult>;
 }

package/dist/{types-3CZPz364.d.ts → types-C6O4ciic.d.ts}

@@ -319,8 +319,8 @@ interface AnyToolDefinition {
   readonly name: string;
   readonly title: string;
   readonly description: string;
-  readonly inputSchema?: ZodRawShape$1;
-  readonly outputSchema?: ZodOutputSchema;
+  readonly inputSchema?: ZodRawShape$1 | undefined;
+  readonly outputSchema?: ZodOutputSchema | undefined;
   readonly annotations?: ToolAnnotations;
   readonly handler: (args: any, ctx: ToolContext) => ToolHandlerResult | Promise<ToolHandlerResult>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovable.dev/mcp-js",
-  "version": "2.0.1",
+  "version": "2.0.2-rc.1",
   "engines": {
     "node": ">=20"
   },
@@ -108,14 +108,14 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@modelcontextprotocol/server": "2.0.0",
     "@modelcontextprotocol/sdk": "1.28.0",
+    "@modelcontextprotocol/server": "2.0.0",
     "esbuild": "^0.27.0",
     "jose": "^6.2.2"
   },
   "peerDependencies": {
     "vite": ">=5.0.0 <9.0.0",
-    "zod": ">=3.23.0"
+    "zod": "^3.25 || ^4.0"
   },
   "devDependencies": {
     "@types/node": "22.13.13",
@@ -135,7 +135,8 @@
     "format:check": "oxfmt --check src/ tests/",
     "lint": "oxfmt --check src/ tests/ && oxlint -c ../../oxlint.config.ts src/ tests/",
     "lint:fix": "oxfmt --write src/ tests/ && oxlint -c ../../oxlint.config.ts --fix src/ tests/",
-    "test": "vitest run --project unit",
+    "test": "vitest run --project unit && npm run test:package:zod",
+    "test:package:zod": "npm run build && node tests/package/zod-compat.mjs",
     "test:watch": "vitest --project unit",
     "example:tanstack:install": "bun link && cd example/tanstack && bun install && bun link @lovable.dev/mcp-js",
     "example:tanstack:dev": "cd example/tanstack && bun --bun run dev",