@lovable.dev/mcp-js 2.1.0-rc.0 → 2.1.0

package/dist/errors-CdrGi5aP.cjs

@@ -1,309 +0,0 @@
-const require_logger = require("./logger-CN1q-KNn.cjs");
-const require_schema = require("./schema-D3vClxb7.cjs");
-//#region src/core/define.ts
-function toolRequiresAppContext(tool) {
-	return "requiresAppContext" in tool && tool.requiresAppContext === true;
-}
-function assertUniqueNames(mcp) {
-	const seen = /* @__PURE__ */ new Set();
-	for (const tool of mcp.tools) {
-		if (seen.has(tool.name)) throw new Error(`@lovable.dev/mcp-js: duplicate tool name "${tool.name}"`);
-		seen.add(tool.name);
-	}
-}
-function assertAppContextConfiguration(mcp) {
-	if (mcp.createAppContext && !mcp.auth) throw new Error(`@lovable.dev/mcp-js: createAppContext requires auth`);
-	if (!mcp.createAppContext && mcp.tools.some((tool) => tool.enabled || toolRequiresAppContext(tool))) throw new Error(`@lovable.dev/mcp-js: app-context or conditional tools require createAppContext`);
-}
-function assertNonEmptyString(label, value) {
-	if (value.trim() === "") throw new Error(`@lovable.dev/mcp-js: ${label} must not be empty`);
-	if (value !== value.trim()) throw new Error(`@lovable.dev/mcp-js: ${label} must not have leading or trailing whitespace`);
-}
-function assertHttpsUrlField(name, value) {
-	assertNonEmptyString(`auth.${name}`, value);
-	require_logger.parseSafeUrl(`@lovable.dev/mcp-js: auth.${name}`, value);
-}
-function assertScope(scope) {
-	if (scope.trim() === "" || /\s/.test(scope)) throw new Error(`@lovable.dev/mcp-js: OAuth scopes must be non-empty space-free tokens`);
-}
-function assertJwtAlgorithm(algorithm) {
-	if (algorithm.trim() === "" || /\s/.test(algorithm)) throw new Error(`@lovable.dev/mcp-js: auth.algorithms must contain non-empty space-free tokens`);
-	if (/^HS\d+$/i.test(algorithm) || algorithm.toLowerCase() === "none") throw new Error(`@lovable.dev/mcp-js: auth.algorithms cannot include "${algorithm}"; this verifier is JWKS-only`);
-}
-const MAX_CLOCK_TOLERANCE_SECONDS = 300;
-function assertClockToleranceSeconds(value) {
-	if (typeof value !== "number" || !Number.isFinite(value) || value < 0 || value > MAX_CLOCK_TOLERANCE_SECONDS) throw new Error(`@lovable.dev/mcp-js: auth.clockToleranceSeconds must be a non-negative number of seconds no greater than ${MAX_CLOCK_TOLERANCE_SECONDS}`);
-}
-function assertOAuthConfig(auth) {
-	if (auth.type !== "oauth") {
-		const authType = String(auth.type);
-		throw new Error(`@lovable.dev/mcp-js: unsupported auth type "${authType}"`);
-	}
-	if (auth.issuer === void 0) throw new Error(`@lovable.dev/mcp-js: auth.issuer is required`);
-	assertHttpsUrlField("issuer", auth.issuer);
-	if (auth.jwksUri !== void 0) assertHttpsUrlField("jwksUri", auth.jwksUri);
-	if (auth.resource !== void 0) assertHttpsUrlField("resource", auth.resource);
-	if (auth.resourceName !== void 0) assertNonEmptyString("auth.resourceName", auth.resourceName);
-	if (auth.resourceDocumentation !== void 0) assertHttpsUrlField("resourceDocumentation", auth.resourceDocumentation);
-	if (auth.protectedResourceMetadataUrl !== void 0) assertHttpsUrlField("protectedResourceMetadataUrl", auth.protectedResourceMetadataUrl);
-	if (auth.acceptedAudiences !== void 0) {
-		if (!Array.isArray(auth.acceptedAudiences)) throw new Error(`@lovable.dev/mcp-js: auth.acceptedAudiences must be an array`);
-		if (auth.acceptedAudiences.length === 0) throw new Error(`@lovable.dev/mcp-js: auth.acceptedAudiences must not be empty`);
-		for (const audience of auth.acceptedAudiences) {
-			if (typeof audience !== "string") throw new Error(`@lovable.dev/mcp-js: auth.acceptedAudiences must contain strings`);
-			assertNonEmptyString("auth.acceptedAudiences", audience);
-			if (require_logger.trimTrailingSlash(audience) === "") throw new Error(`@lovable.dev/mcp-js: auth.acceptedAudiences entries must not be only slashes`);
-		}
-	}
-	if (auth.requireOAuthClientClaim !== void 0 && typeof auth.requireOAuthClientClaim !== "boolean") throw new Error(`@lovable.dev/mcp-js: auth.requireOAuthClientClaim must be a boolean`);
-	if (auth.acceptResourceClaim !== void 0 && typeof auth.acceptResourceClaim !== "boolean") throw new Error(`@lovable.dev/mcp-js: auth.acceptResourceClaim must be a boolean`);
-	if (auth.requiredScopes !== void 0) {
-		if (!Array.isArray(auth.requiredScopes)) throw new Error(`@lovable.dev/mcp-js: auth.requiredScopes must be an array`);
-		for (const scope of auth.requiredScopes) assertScope(scope);
-	}
-	if (auth.algorithms !== void 0) {
-		if (!Array.isArray(auth.algorithms)) throw new Error(`@lovable.dev/mcp-js: auth.algorithms must be an array`);
-		if (auth.algorithms.length === 0) throw new Error(`@lovable.dev/mcp-js: auth.algorithms must not be empty`);
-		for (const algorithm of auth.algorithms) assertJwtAlgorithm(algorithm);
-	}
-	if (auth.accessTokenTyp !== void 0) {
-		if (!Array.isArray(auth.accessTokenTyp)) throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must be an array`);
-		if (auth.accessTokenTyp.length === 0) throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must not be empty`);
-		for (const typ of auth.accessTokenTyp) {
-			if (typeof typ !== "string") throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must contain strings`);
-			assertNonEmptyString("auth.accessTokenTyp", typ);
-		}
-	}
-	if (auth.clockToleranceSeconds !== void 0) assertClockToleranceSeconds(auth.clockToleranceSeconds);
-	if (auth.resource === void 0 && auth.acceptedAudiences === void 0) throw new Error(`@lovable.dev/mcp-js: auth.resource or auth.acceptedAudiences is required`);
-}
-function freezeAuth(auth) {
-	if (!auth) return;
-	if (auth.acceptedAudiences) Object.freeze(auth.acceptedAudiences);
-	if (auth.requiredScopes) Object.freeze(auth.requiredScopes);
-	if (auth.algorithms) Object.freeze(auth.algorithms);
-	if (auth.accessTokenTyp) Object.freeze(auth.accessTokenTyp);
-	Object.freeze(auth);
-}
-function assertAllowedOrigins(allowedOrigins) {
-	if (allowedOrigins === void 0 || allowedOrigins === "any") return;
-	if (!Array.isArray(allowedOrigins)) throw new Error(`@lovable.dev/mcp-js: allowedOrigins must be "any" or an array of exact origins`);
-	for (const origin of allowedOrigins) {
-		if (typeof origin !== "string") throw new Error(`@lovable.dev/mcp-js: allowedOrigins must contain strings`);
-		let parsed;
-		try {
-			parsed = new URL(origin);
-		} catch {
-			throw new Error(`@lovable.dev/mcp-js: allowedOrigins must contain valid exact origins`);
-		}
-		if (parsed.protocol !== "http:" && parsed.protocol !== "https:" || parsed.origin !== origin) throw new Error(`@lovable.dev/mcp-js: allowedOrigins entry "${origin}" must be an exact http(s) origin without a path, query, fragment, or trailing slash`);
-	}
-}
-function assertToolSchemas(mcp) {
-	for (const tool of mcp.tools) for (const [name, definition, strategy] of [[
-		"inputSchema",
-		tool.inputSchema,
-		"input"
-	], [
-		"outputSchema",
-		tool.outputSchema,
-		"output"
-	]]) {
-		if (!definition) continue;
-		try {
-			require_schema.jsonSchemaFromDefinition(definition, strategy);
-		} catch (error) {
-			const detail = error instanceof Error ? `: ${error.message}` : "";
-			throw new Error(`@lovable.dev/mcp-js: tool "${tool.name}" ${name} cannot be represented as JSON Schema${detail}`);
-		}
-	}
-}
-/** Bind app context once while retaining input/output inference for every tool. */
-const defineStaticTool = (def) => def;
-const defineTool = Object.assign(defineStaticTool, { withAppContext: () => (def) => {
-	return {
-		...def,
-		requiresAppContext: true
-	};
-} });
-/**
-* Declare the MCP server. `export default` the result from your MCP
-* entrypoint (default `lib/mcp/index.ts`); the Vite plugin reads it to
-* emit the framework-specific route(s) at build time.
-*/
-function defineMcp(def) {
-	assertNonEmptyString("name", def.name);
-	assertNonEmptyString("title", def.title);
-	assertNonEmptyString("version", def.version);
-	assertUniqueNames(def);
-	assertAppContextConfiguration(def);
-	if (def.auth) assertOAuthConfig(def.auth);
-	assertAllowedOrigins(def.allowedOrigins);
-	assertToolSchemas(def);
-	require_logger.resolveMetricsConfig(def.metrics);
-	freezeAuth(def.auth);
-	if (Array.isArray(def.allowedOrigins)) Object.freeze(def.allowedOrigins);
-	Object.freeze(def.tools);
-	for (const tool of def.tools) Object.freeze(tool);
-	return def;
-}
-//#endregion
-//#region src/auth/context.ts
-const NEVER_ABORTED = new AbortController().signal;
-/** Verified caller identity exposed to the app-context factory.
-* `getToken()` is the sole bearer escape hatch. */
-var AuthContext = class {
-	#auth;
-	constructor(auth) {
-		this.#auth = auth;
-	}
-	/** Whether the in-flight tool call carries a verified auth context. */
-	isAuthenticated() {
-		return this.#auth !== void 0;
-	}
-	/** The verified bearer token, or `undefined` when unauthenticated. Pass it to downstream APIs; never return or log it. */
-	getToken() {
-		return this.#auth?.bearer.token;
-	}
-	/** The verified user id (the token `sub`), or `undefined`. */
-	getUserId() {
-		return this.#auth?.principal.sub;
-	}
-	/** The verified user email, or `undefined` when absent. */
-	getUserEmail() {
-		return this.#auth?.principal.email;
-	}
-	/** The verified OAuth `client_id`, or `undefined`. */
-	getClientId() {
-		return this.#auth?.principal.clientId;
-	}
-	/** The verified OAuth scopes, or `undefined` when unauthenticated. */
-	getScopes() {
-		return this.#auth?.principal.scopes;
-	}
-	/** The verified token issuer, or `undefined`. */
-	getIssuer() {
-		return this.#auth?.principal.issuer;
-	}
-	/**
-	* The full verified JWT claims, or `undefined`. Use this for app/business
-	* authorization on issuer-specific claims that have no dedicated accessor.
-	*/
-	getClaims() {
-		return this.#auth?.principal.claims;
-	}
-};
-/** The per-request context passed to every tool handler as its second argument. */
-var ToolContext = class extends AuthContext {
-	#appContext;
-	#signal;
-	#client;
-	#sendProgress;
-	constructor(auth, request = {}, appContext) {
-		super(auth);
-		this.#appContext = appContext;
-		this.#signal = request.signal ?? NEVER_ABORTED;
-		this.#client = request.client ?? { protocol: "legacy" };
-		this.#sendProgress = request.sendProgress;
-	}
-	/** App-defined context created for this tool call. */
-	get appContext() {
-		return this.#appContext;
-	}
-	/** Aborts when the client cancels the request or disconnects. */
-	get signal() {
-		return this.#signal;
-	}
-	/** What the client declared about itself on this request. Unverified input. */
-	get client() {
-		return this.#client;
-	}
-	/** Send a progress notification for this call. A no-op when the client
-	* didn't request progress (no `progressToken` on the request). */
-	async progress(update) {
-		await this.#sendProgress?.(update);
-	}
-};
-//#endregion
-//#region src/core/errors.ts
-const TOOL_ERROR_BRAND = Symbol.for("@lovable.dev/mcp-js/tool-error");
-/** Error whose message is meant for the remote MCP caller; thrown from a handler
-*  it becomes an `isError` result carrying exactly `message`. */
-var ToolError = class extends Error {
-	constructor(message, options) {
-		super(message, options);
-		this.name = "ToolError";
-		Object.defineProperty(this, TOOL_ERROR_BRAND, { value: true });
-	}
-};
-function isToolError(err) {
-	return err instanceof Error && Object.getOwnPropertyDescriptor(err, TOOL_ERROR_BRAND)?.value === true;
-}
-/** The caller-visible message of a thrown ToolError, or undefined for anything
-*  else — including when inspecting the value itself throws (fail closed). */
-function resolveToolErrorMessage(err) {
-	try {
-		return isToolError(err) ? String(err.message) : void 0;
-	} catch {
-		return;
-	}
-}
-const MAX_ERROR_SUMMARY = 500;
-/** Bounded name+message line for local logs; never for wire responses. */
-function errorSummary(err) {
-	try {
-		const text = err instanceof Error ? `${err.name}: ${err.message}` : String(err);
-		return text.length > MAX_ERROR_SUMMARY ? `${text.slice(0, MAX_ERROR_SUMMARY)}…` : text;
-	} catch {
-		return "unprintable error";
-	}
-}
-//#endregion
-Object.defineProperty(exports, "AuthContext", {
-	enumerable: true,
-	get: function() {
-		return AuthContext;
-	}
-});
-Object.defineProperty(exports, "ToolContext", {
-	enumerable: true,
-	get: function() {
-		return ToolContext;
-	}
-});
-Object.defineProperty(exports, "ToolError", {
-	enumerable: true,
-	get: function() {
-		return ToolError;
-	}
-});
-Object.defineProperty(exports, "defineMcp", {
-	enumerable: true,
-	get: function() {
-		return defineMcp;
-	}
-});
-Object.defineProperty(exports, "defineTool", {
-	enumerable: true,
-	get: function() {
-		return defineTool;
-	}
-});
-Object.defineProperty(exports, "errorSummary", {
-	enumerable: true,
-	get: function() {
-		return errorSummary;
-	}
-});
-Object.defineProperty(exports, "resolveToolErrorMessage", {
-	enumerable: true,
-	get: function() {
-		return resolveToolErrorMessage;
-	}
-});
-Object.defineProperty(exports, "toolRequiresAppContext", {
-	enumerable: true,
-	get: function() {
-		return toolRequiresAppContext;
-	}
-});

package/dist/errors-DTvfh8lb.js

@@ -1,262 +0,0 @@
-import { o as parseSafeUrl, s as trimTrailingSlash, u as resolveMetricsConfig } from "./logger-Ctv5xUSD.js";
-import { t as jsonSchemaFromDefinition } from "./schema-CW1jKvio.js";
-//#region src/core/define.ts
-function toolRequiresAppContext(tool) {
-	return "requiresAppContext" in tool && tool.requiresAppContext === true;
-}
-function assertUniqueNames(mcp) {
-	const seen = /* @__PURE__ */ new Set();
-	for (const tool of mcp.tools) {
-		if (seen.has(tool.name)) throw new Error(`@lovable.dev/mcp-js: duplicate tool name "${tool.name}"`);
-		seen.add(tool.name);
-	}
-}
-function assertAppContextConfiguration(mcp) {
-	if (mcp.createAppContext && !mcp.auth) throw new Error(`@lovable.dev/mcp-js: createAppContext requires auth`);
-	if (!mcp.createAppContext && mcp.tools.some((tool) => tool.enabled || toolRequiresAppContext(tool))) throw new Error(`@lovable.dev/mcp-js: app-context or conditional tools require createAppContext`);
-}
-function assertNonEmptyString(label, value) {
-	if (value.trim() === "") throw new Error(`@lovable.dev/mcp-js: ${label} must not be empty`);
-	if (value !== value.trim()) throw new Error(`@lovable.dev/mcp-js: ${label} must not have leading or trailing whitespace`);
-}
-function assertHttpsUrlField(name, value) {
-	assertNonEmptyString(`auth.${name}`, value);
-	parseSafeUrl(`@lovable.dev/mcp-js: auth.${name}`, value);
-}
-function assertScope(scope) {
-	if (scope.trim() === "" || /\s/.test(scope)) throw new Error(`@lovable.dev/mcp-js: OAuth scopes must be non-empty space-free tokens`);
-}
-function assertJwtAlgorithm(algorithm) {
-	if (algorithm.trim() === "" || /\s/.test(algorithm)) throw new Error(`@lovable.dev/mcp-js: auth.algorithms must contain non-empty space-free tokens`);
-	if (/^HS\d+$/i.test(algorithm) || algorithm.toLowerCase() === "none") throw new Error(`@lovable.dev/mcp-js: auth.algorithms cannot include "${algorithm}"; this verifier is JWKS-only`);
-}
-const MAX_CLOCK_TOLERANCE_SECONDS = 300;
-function assertClockToleranceSeconds(value) {
-	if (typeof value !== "number" || !Number.isFinite(value) || value < 0 || value > MAX_CLOCK_TOLERANCE_SECONDS) throw new Error(`@lovable.dev/mcp-js: auth.clockToleranceSeconds must be a non-negative number of seconds no greater than ${MAX_CLOCK_TOLERANCE_SECONDS}`);
-}
-function assertOAuthConfig(auth) {
-	if (auth.type !== "oauth") {
-		const authType = String(auth.type);
-		throw new Error(`@lovable.dev/mcp-js: unsupported auth type "${authType}"`);
-	}
-	if (auth.issuer === void 0) throw new Error(`@lovable.dev/mcp-js: auth.issuer is required`);
-	assertHttpsUrlField("issuer", auth.issuer);
-	if (auth.jwksUri !== void 0) assertHttpsUrlField("jwksUri", auth.jwksUri);
-	if (auth.resource !== void 0) assertHttpsUrlField("resource", auth.resource);
-	if (auth.resourceName !== void 0) assertNonEmptyString("auth.resourceName", auth.resourceName);
-	if (auth.resourceDocumentation !== void 0) assertHttpsUrlField("resourceDocumentation", auth.resourceDocumentation);
-	if (auth.protectedResourceMetadataUrl !== void 0) assertHttpsUrlField("protectedResourceMetadataUrl", auth.protectedResourceMetadataUrl);
-	if (auth.acceptedAudiences !== void 0) {
-		if (!Array.isArray(auth.acceptedAudiences)) throw new Error(`@lovable.dev/mcp-js: auth.acceptedAudiences must be an array`);
-		if (auth.acceptedAudiences.length === 0) throw new Error(`@lovable.dev/mcp-js: auth.acceptedAudiences must not be empty`);
-		for (const audience of auth.acceptedAudiences) {
-			if (typeof audience !== "string") throw new Error(`@lovable.dev/mcp-js: auth.acceptedAudiences must contain strings`);
-			assertNonEmptyString("auth.acceptedAudiences", audience);
-			if (trimTrailingSlash(audience) === "") throw new Error(`@lovable.dev/mcp-js: auth.acceptedAudiences entries must not be only slashes`);
-		}
-	}
-	if (auth.requireOAuthClientClaim !== void 0 && typeof auth.requireOAuthClientClaim !== "boolean") throw new Error(`@lovable.dev/mcp-js: auth.requireOAuthClientClaim must be a boolean`);
-	if (auth.acceptResourceClaim !== void 0 && typeof auth.acceptResourceClaim !== "boolean") throw new Error(`@lovable.dev/mcp-js: auth.acceptResourceClaim must be a boolean`);
-	if (auth.requiredScopes !== void 0) {
-		if (!Array.isArray(auth.requiredScopes)) throw new Error(`@lovable.dev/mcp-js: auth.requiredScopes must be an array`);
-		for (const scope of auth.requiredScopes) assertScope(scope);
-	}
-	if (auth.algorithms !== void 0) {
-		if (!Array.isArray(auth.algorithms)) throw new Error(`@lovable.dev/mcp-js: auth.algorithms must be an array`);
-		if (auth.algorithms.length === 0) throw new Error(`@lovable.dev/mcp-js: auth.algorithms must not be empty`);
-		for (const algorithm of auth.algorithms) assertJwtAlgorithm(algorithm);
-	}
-	if (auth.accessTokenTyp !== void 0) {
-		if (!Array.isArray(auth.accessTokenTyp)) throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must be an array`);
-		if (auth.accessTokenTyp.length === 0) throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must not be empty`);
-		for (const typ of auth.accessTokenTyp) {
-			if (typeof typ !== "string") throw new Error(`@lovable.dev/mcp-js: auth.accessTokenTyp must contain strings`);
-			assertNonEmptyString("auth.accessTokenTyp", typ);
-		}
-	}
-	if (auth.clockToleranceSeconds !== void 0) assertClockToleranceSeconds(auth.clockToleranceSeconds);
-	if (auth.resource === void 0 && auth.acceptedAudiences === void 0) throw new Error(`@lovable.dev/mcp-js: auth.resource or auth.acceptedAudiences is required`);
-}
-function freezeAuth(auth) {
-	if (!auth) return;
-	if (auth.acceptedAudiences) Object.freeze(auth.acceptedAudiences);
-	if (auth.requiredScopes) Object.freeze(auth.requiredScopes);
-	if (auth.algorithms) Object.freeze(auth.algorithms);
-	if (auth.accessTokenTyp) Object.freeze(auth.accessTokenTyp);
-	Object.freeze(auth);
-}
-function assertAllowedOrigins(allowedOrigins) {
-	if (allowedOrigins === void 0 || allowedOrigins === "any") return;
-	if (!Array.isArray(allowedOrigins)) throw new Error(`@lovable.dev/mcp-js: allowedOrigins must be "any" or an array of exact origins`);
-	for (const origin of allowedOrigins) {
-		if (typeof origin !== "string") throw new Error(`@lovable.dev/mcp-js: allowedOrigins must contain strings`);
-		let parsed;
-		try {
-			parsed = new URL(origin);
-		} catch {
-			throw new Error(`@lovable.dev/mcp-js: allowedOrigins must contain valid exact origins`);
-		}
-		if (parsed.protocol !== "http:" && parsed.protocol !== "https:" || parsed.origin !== origin) throw new Error(`@lovable.dev/mcp-js: allowedOrigins entry "${origin}" must be an exact http(s) origin without a path, query, fragment, or trailing slash`);
-	}
-}
-function assertToolSchemas(mcp) {
-	for (const tool of mcp.tools) for (const [name, definition, strategy] of [[
-		"inputSchema",
-		tool.inputSchema,
-		"input"
-	], [
-		"outputSchema",
-		tool.outputSchema,
-		"output"
-	]]) {
-		if (!definition) continue;
-		try {
-			jsonSchemaFromDefinition(definition, strategy);
-		} catch (error) {
-			const detail = error instanceof Error ? `: ${error.message}` : "";
-			throw new Error(`@lovable.dev/mcp-js: tool "${tool.name}" ${name} cannot be represented as JSON Schema${detail}`);
-		}
-	}
-}
-/** Bind app context once while retaining input/output inference for every tool. */
-const defineStaticTool = (def) => def;
-const defineTool = Object.assign(defineStaticTool, { withAppContext: () => (def) => {
-	return {
-		...def,
-		requiresAppContext: true
-	};
-} });
-/**
-* Declare the MCP server. `export default` the result from your MCP
-* entrypoint (default `lib/mcp/index.ts`); the Vite plugin reads it to
-* emit the framework-specific route(s) at build time.
-*/
-function defineMcp(def) {
-	assertNonEmptyString("name", def.name);
-	assertNonEmptyString("title", def.title);
-	assertNonEmptyString("version", def.version);
-	assertUniqueNames(def);
-	assertAppContextConfiguration(def);
-	if (def.auth) assertOAuthConfig(def.auth);
-	assertAllowedOrigins(def.allowedOrigins);
-	assertToolSchemas(def);
-	resolveMetricsConfig(def.metrics);
-	freezeAuth(def.auth);
-	if (Array.isArray(def.allowedOrigins)) Object.freeze(def.allowedOrigins);
-	Object.freeze(def.tools);
-	for (const tool of def.tools) Object.freeze(tool);
-	return def;
-}
-//#endregion
-//#region src/auth/context.ts
-const NEVER_ABORTED = new AbortController().signal;
-/** Verified caller identity exposed to the app-context factory.
-* `getToken()` is the sole bearer escape hatch. */
-var AuthContext = class {
-	#auth;
-	constructor(auth) {
-		this.#auth = auth;
-	}
-	/** Whether the in-flight tool call carries a verified auth context. */
-	isAuthenticated() {
-		return this.#auth !== void 0;
-	}
-	/** The verified bearer token, or `undefined` when unauthenticated. Pass it to downstream APIs; never return or log it. */
-	getToken() {
-		return this.#auth?.bearer.token;
-	}
-	/** The verified user id (the token `sub`), or `undefined`. */
-	getUserId() {
-		return this.#auth?.principal.sub;
-	}
-	/** The verified user email, or `undefined` when absent. */
-	getUserEmail() {
-		return this.#auth?.principal.email;
-	}
-	/** The verified OAuth `client_id`, or `undefined`. */
-	getClientId() {
-		return this.#auth?.principal.clientId;
-	}
-	/** The verified OAuth scopes, or `undefined` when unauthenticated. */
-	getScopes() {
-		return this.#auth?.principal.scopes;
-	}
-	/** The verified token issuer, or `undefined`. */
-	getIssuer() {
-		return this.#auth?.principal.issuer;
-	}
-	/**
-	* The full verified JWT claims, or `undefined`. Use this for app/business
-	* authorization on issuer-specific claims that have no dedicated accessor.
-	*/
-	getClaims() {
-		return this.#auth?.principal.claims;
-	}
-};
-/** The per-request context passed to every tool handler as its second argument. */
-var ToolContext = class extends AuthContext {
-	#appContext;
-	#signal;
-	#client;
-	#sendProgress;
-	constructor(auth, request = {}, appContext) {
-		super(auth);
-		this.#appContext = appContext;
-		this.#signal = request.signal ?? NEVER_ABORTED;
-		this.#client = request.client ?? { protocol: "legacy" };
-		this.#sendProgress = request.sendProgress;
-	}
-	/** App-defined context created for this tool call. */
-	get appContext() {
-		return this.#appContext;
-	}
-	/** Aborts when the client cancels the request or disconnects. */
-	get signal() {
-		return this.#signal;
-	}
-	/** What the client declared about itself on this request. Unverified input. */
-	get client() {
-		return this.#client;
-	}
-	/** Send a progress notification for this call. A no-op when the client
-	* didn't request progress (no `progressToken` on the request). */
-	async progress(update) {
-		await this.#sendProgress?.(update);
-	}
-};
-//#endregion
-//#region src/core/errors.ts
-const TOOL_ERROR_BRAND = Symbol.for("@lovable.dev/mcp-js/tool-error");
-/** Error whose message is meant for the remote MCP caller; thrown from a handler
-*  it becomes an `isError` result carrying exactly `message`. */
-var ToolError = class extends Error {
-	constructor(message, options) {
-		super(message, options);
-		this.name = "ToolError";
-		Object.defineProperty(this, TOOL_ERROR_BRAND, { value: true });
-	}
-};
-function isToolError(err) {
-	return err instanceof Error && Object.getOwnPropertyDescriptor(err, TOOL_ERROR_BRAND)?.value === true;
-}
-/** The caller-visible message of a thrown ToolError, or undefined for anything
-*  else — including when inspecting the value itself throws (fail closed). */
-function resolveToolErrorMessage(err) {
-	try {
-		return isToolError(err) ? String(err.message) : void 0;
-	} catch {
-		return;
-	}
-}
-const MAX_ERROR_SUMMARY = 500;
-/** Bounded name+message line for local logs; never for wire responses. */
-function errorSummary(err) {
-	try {
-		const text = err instanceof Error ? `${err.name}: ${err.message}` : String(err);
-		return text.length > MAX_ERROR_SUMMARY ? `${text.slice(0, MAX_ERROR_SUMMARY)}…` : text;
-	} catch {
-		return "unprintable error";
-	}
-}
-//#endregion
-export { ToolContext as a, toolRequiresAppContext as c, AuthContext as i, errorSummary as n, defineMcp as o, resolveToolErrorMessage as r, defineTool as s, ToolError as t };