@lovable.dev/mcp-js 2.1.0 → 2.2.0-rc.0

package/dist/stacks/tanstack/index.js

@@ -1,5 +1,5 @@
-import { c as createRecorderForRuntime } from "../../cors-BaRKDl4r.js";
-import { t as createMcpProtocolHandler } from "../../mcp-DcmfehoI.js";
+import { c as createRecorderForRuntime } from "../../cors-BfacizN-.js";
+import { t as createMcpProtocolHandler } from "../../mcp-DdJJjYYZ.js";
 import { createOAuthProtectedResourceMetadataHandler } from "../../protocols/oauth-metadata.js";
 import { t as applyForwardedOrigin } from "../../forwarded-BBXvFeh6.js";
 //#region src/stacks/tanstack/handlers.ts

package/dist/stacks/tanstack/vite.d.cts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-Ds5MRSiK.cjs";
+import { t as McpPluginApi } from "../../io-CL1GeE3D.cjs";
 import { Plugin } from "vite";
 //#region src/stacks/tanstack/vite.d.ts
 interface McpPluginOptions {

package/dist/stacks/tanstack/vite.d.ts

@@ -1,4 +1,4 @@
-import { t as McpPluginApi } from "../../io-pl5npWDw.js";
+import { t as McpPluginApi } from "../../io-7U860POB.js";
 import { Plugin } from "vite";
 //#region src/stacks/tanstack/vite.d.ts
 interface McpPluginOptions {

package/dist/{types-B3_lX-L1.d.ts → types-BCKyT2wb.d.cts}

@@ -116,18 +116,11 @@ interface ToolRequestContext {
   client?: McpClientInfo;
   sendProgress?: (update: ProgressUpdate) => Promise<void>;
 }
-/** The per-request context passed to every tool handler as its second argument. The
- * auth context lives in a private field so the accessors are the only way out; `getToken()` is the sole bearer escape hatch. */
-declare class ToolContext {
+/** Verified caller identity exposed to the app-context factory.
+ * `getToken()` is the sole bearer escape hatch. */
+declare class AuthContext {
   #private;
-  constructor(auth: McpAuthContext | undefined, request?: ToolRequestContext);
-  /** Aborts when the client cancels the request or disconnects. */
-  get signal(): AbortSignal;
-  /** What the client declared about itself on this request. Unverified input. */
-  get client(): McpClientInfo;
-  /** Send a progress notification for this call. A no-op when the client
-   * didn't request progress (no `progressToken` on the request). */
-  progress(update: ProgressUpdate): Promise<void>;
+  constructor(auth: McpAuthContext | undefined);
   /** Whether the in-flight tool call carries a verified auth context. */
   isAuthenticated(): boolean;
   /** The verified bearer token, or `undefined` when unauthenticated. Pass it to downstream APIs; never return or log it. */
@@ -148,6 +141,20 @@ declare class ToolContext {
    */
   getClaims(): JwtClaims | undefined;
 }
+/** The per-request context passed to every tool handler as its second argument. */
+declare class ToolContext<TAppContext = undefined> extends AuthContext {
+  #private;
+  constructor(auth: McpAuthContext | undefined, request?: ToolRequestContext, appContext?: TAppContext);
+  /** App-defined context created for this tool call. */
+  get appContext(): TAppContext;
+  /** Aborts when the client cancels the request or disconnects. */
+  get signal(): AbortSignal;
+  /** What the client declared about itself on this request. Unverified input. */
+  get client(): McpClientInfo;
+  /** Send a progress notification for this call. A no-op when the client
+   * didn't request progress (no `progressToken` on the request). */
+  progress(update: ProgressUpdate): Promise<void>;
+}
 //#endregion
 //#region src/metrics/config.d.ts
 /**
@@ -307,7 +314,16 @@ interface ToolHandlerResult {
   structuredContent?: JsonValueInput;
   isError?: boolean;
 }
-interface ToolDefinition<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodOutputSchema | undefined = ZodOutputSchema | undefined> {
+/** Inputs available while creating app context for one MCP request. */
+interface CreateAppContextInput {
+  readonly auth: AuthContext;
+  readonly signal: AbortSignal;
+}
+/** The restricted surface used to decide whether a tool exists. */
+interface ToolVisibilityContext<TAppContext> {
+  readonly appContext: TAppContext;
+}
+interface ToolDefinitionBase<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodOutputSchema | undefined = ZodOutputSchema | undefined> {
   readonly name: string;
   /** Human-readable display name shown to the user in MCP clients. Required. */
   readonly title: string;
@@ -316,22 +332,52 @@ interface ToolDefinition<TInput extends ZodRawShape$1 | undefined = ZodRawShape$
   readonly inputSchema?: TInput;
   readonly outputSchema?: TOutput;
   readonly annotations?: ToolAnnotations;
-  readonly handler: TInput extends ZodRawShape$1 ? (args: ShapeOutput<TInput>, ctx: ToolContext) => ToolHandlerResult | Promise<ToolHandlerResult> : (args: Record<string, never> | undefined, ctx: ToolContext) => ToolHandlerResult | Promise<ToolHandlerResult>;
+}
+type ToolHandler<TInput extends ZodRawShape$1 | undefined, TAppContext> = TInput extends ZodRawShape$1 ? (args: ShapeOutput<TInput>, ctx: ToolContext<TAppContext>) => ToolHandlerResult | Promise<ToolHandlerResult> : (args: Record<string, never> | undefined, ctx: ToolContext<TAppContext>) => ToolHandlerResult | Promise<ToolHandlerResult>;
+/** A tool that exists for every caller. Its handler receives the plain `ToolContext`. */
+interface ToolDefinition<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodOutputSchema | undefined = ZodOutputSchema | undefined> extends ToolDefinitionBase<TInput, TOutput> {
+  readonly handler: ToolHandler<TInput, undefined>;
+}
+/** Input to `defineTool.withAppContext<TAppContext>()`. */
+interface AppContextToolDefinitionInput<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodOutputSchema | undefined = ZodOutputSchema | undefined, TAppContext = unknown> extends ToolDefinitionBase<TInput, TOutput> {
+  /** Synchronously decide whether this tool exists for the current caller. */
+  readonly enabled?: (ctx: ToolVisibilityContext<TAppContext>) => boolean;
+  readonly handler: ToolHandler<TInput, TAppContext>;
+}
+interface AppContextToolDefinition<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodOutputSchema | undefined = ZodOutputSchema | undefined, TAppContext = unknown> extends AppContextToolDefinitionInput<TInput, TOutput, TAppContext> {
+  readonly requiresAppContext: true;
 }
 /** Type-erased element of `McpDefinition.tools`; per-tool generic typing
  * happens at the `defineTool` call site. */
-interface AnyToolDefinition {
+interface AnyToolDefinition<TAppContext = never> {
   readonly name: string;
   readonly title: string;
   readonly description: string;
   readonly inputSchema?: ZodRawShape$1 | undefined;
   readonly outputSchema?: ZodOutputSchema | undefined;
   readonly annotations?: ToolAnnotations;
-  readonly handler: (args: any, ctx: ToolContext) => ToolHandlerResult | Promise<ToolHandlerResult>;
+  readonly enabled?: (ctx: ToolVisibilityContext<TAppContext>) => boolean;
+  readonly handler: (args: any, ctx: ToolContext<TAppContext>) => ToolHandlerResult | Promise<ToolHandlerResult>;
 }
+type StaticToolDefinition = Omit<AnyToolDefinition<undefined>, "enabled"> & {
+  readonly enabled?: never;
+};
+type AnyAppContextToolDefinition<TAppContext = unknown> = AnyToolDefinition<TAppContext> & {
+  readonly requiresAppContext: true;
+};
+type CreateAppContext<TAppContext> = (input: CreateAppContextInput) => TAppContext | Promise<TAppContext>;
+/** Concrete app context requires a factory. `undefined`, `unknown`, and `never`
+ * remain optional because the SDK uses them for static or type-erased tools. */
+type AppContextConfiguration<TAppContext> = [TAppContext] extends [undefined] ? {
+  readonly createAppContext?: CreateAppContext<TAppContext>;
+} : unknown extends TAppContext ? {
+  readonly createAppContext?: CreateAppContext<TAppContext>;
+} : {
+  readonly createAppContext: CreateAppContext<TAppContext>;
+};
 /** Input shape for `defineMcp(...)`, whose branded `McpDefinition` return type is what
  * `createMcpProtocolHandler` consumes — the brand forces validation + freeze. */
-interface McpDefinitionInput {
+type McpDefinitionInput<TAppContext = undefined> = {
   readonly name: string;
   /** Human-readable display name shown to MCP clients. Required. */
   readonly title: string;
@@ -346,17 +392,19 @@ interface McpDefinitionInput {
    * empty string to opt out.
    */
   readonly instructions: string;
-  readonly tools: readonly AnyToolDefinition[];
+  readonly tools: readonly (AnyAppContextToolDefinition<TAppContext> | StaticToolDefinition)[];
   /**
    * Usage-metrics emission (runtime telemetry), on by default. `false` opts out;
    * `{ endpoint, headers }` sends to your own OTLP collector. Self-disables at
    * runtime without `LOVABLE_API_KEY` on the default Lovable endpoint.
    */
   readonly metrics?: MetricsConfig;
-}
+} & AppContextConfiguration<TAppContext>;
 declare const McpDefinitionBrand: unique symbol;
-type McpDefinition = McpDefinitionInput & {
+type McpDefinition<TAppContext = unknown> = Omit<McpDefinitionInput<TAppContext>, "createAppContext" | "tools"> & {
+  readonly createAppContext?: (input: CreateAppContextInput) => TAppContext | Promise<TAppContext>;
+  readonly tools: readonly AnyToolDefinition[];
   readonly [McpDefinitionBrand]: never;
 };
 //#endregion
-export { McpAuthConfig as A, MetricsConfig as C, ProgressUpdate as D, McpProtocolEra as E, ToolContext as O, ZodSchema as S, McpClientInfo as T, ToolContent as _, EmbeddedResource as a, ZodOutputSchema as b, JsonValue as c, McpDefinition as d, McpDefinitionInput as f, ToolAnnotations as g, TextContent as h, EmbeddedBlobResource as i, JwtClaims as k, JsonValueInput as l, ResourceLinkIcon as m, ContentAnnotations as n, EmbeddedTextResource as o, ResourceLink as p, ContentBlock as r, ImageContent as s, AudioContent as t, McpAllowedOrigins as u, ToolDefinition as v, MetricsOptions as w, ZodRawShape$1 as x, ToolHandlerResult as y };
+export { McpClientInfo as A, ToolVisibilityContext as C, MetricsConfig as D, ZodSchema as E, McpAuthConfig as F, ProgressUpdate as M, ToolContext as N, MetricsOptions as O, JwtClaims as P, ToolHandlerResult as S, ZodRawShape$1 as T, ResourceLinkIcon as _, ContentBlock as a, ToolContent as b, EmbeddedResource as c, JsonValue as d, JsonValueInput as f, ResourceLink as g, McpDefinitionInput as h, ContentAnnotations as i, McpProtocolEra as j, AuthContext as k, EmbeddedTextResource as l, McpDefinition as m, AppContextToolDefinitionInput as n, CreateAppContextInput as o, McpAllowedOrigins as p, AudioContent as r, EmbeddedBlobResource as s, AppContextToolDefinition as t, ImageContent as u, TextContent as v, ZodOutputSchema as w, ToolDefinition as x, ToolAnnotations as y };

package/dist/{types-B3_lX-L1.d.cts → types-BCKyT2wb.d.ts}

@@ -116,18 +116,11 @@ interface ToolRequestContext {
   client?: McpClientInfo;
   sendProgress?: (update: ProgressUpdate) => Promise<void>;
 }
-/** The per-request context passed to every tool handler as its second argument. The
- * auth context lives in a private field so the accessors are the only way out; `getToken()` is the sole bearer escape hatch. */
-declare class ToolContext {
+/** Verified caller identity exposed to the app-context factory.
+ * `getToken()` is the sole bearer escape hatch. */
+declare class AuthContext {
   #private;
-  constructor(auth: McpAuthContext | undefined, request?: ToolRequestContext);
-  /** Aborts when the client cancels the request or disconnects. */
-  get signal(): AbortSignal;
-  /** What the client declared about itself on this request. Unverified input. */
-  get client(): McpClientInfo;
-  /** Send a progress notification for this call. A no-op when the client
-   * didn't request progress (no `progressToken` on the request). */
-  progress(update: ProgressUpdate): Promise<void>;
+  constructor(auth: McpAuthContext | undefined);
   /** Whether the in-flight tool call carries a verified auth context. */
   isAuthenticated(): boolean;
   /** The verified bearer token, or `undefined` when unauthenticated. Pass it to downstream APIs; never return or log it. */
@@ -148,6 +141,20 @@ declare class ToolContext {
    */
   getClaims(): JwtClaims | undefined;
 }
+/** The per-request context passed to every tool handler as its second argument. */
+declare class ToolContext<TAppContext = undefined> extends AuthContext {
+  #private;
+  constructor(auth: McpAuthContext | undefined, request?: ToolRequestContext, appContext?: TAppContext);
+  /** App-defined context created for this tool call. */
+  get appContext(): TAppContext;
+  /** Aborts when the client cancels the request or disconnects. */
+  get signal(): AbortSignal;
+  /** What the client declared about itself on this request. Unverified input. */
+  get client(): McpClientInfo;
+  /** Send a progress notification for this call. A no-op when the client
+   * didn't request progress (no `progressToken` on the request). */
+  progress(update: ProgressUpdate): Promise<void>;
+}
 //#endregion
 //#region src/metrics/config.d.ts
 /**
@@ -307,7 +314,16 @@ interface ToolHandlerResult {
   structuredContent?: JsonValueInput;
   isError?: boolean;
 }
-interface ToolDefinition<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodOutputSchema | undefined = ZodOutputSchema | undefined> {
+/** Inputs available while creating app context for one MCP request. */
+interface CreateAppContextInput {
+  readonly auth: AuthContext;
+  readonly signal: AbortSignal;
+}
+/** The restricted surface used to decide whether a tool exists. */
+interface ToolVisibilityContext<TAppContext> {
+  readonly appContext: TAppContext;
+}
+interface ToolDefinitionBase<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodOutputSchema | undefined = ZodOutputSchema | undefined> {
   readonly name: string;
   /** Human-readable display name shown to the user in MCP clients. Required. */
   readonly title: string;
@@ -316,22 +332,52 @@ interface ToolDefinition<TInput extends ZodRawShape$1 | undefined = ZodRawShape$
   readonly inputSchema?: TInput;
   readonly outputSchema?: TOutput;
   readonly annotations?: ToolAnnotations;
-  readonly handler: TInput extends ZodRawShape$1 ? (args: ShapeOutput<TInput>, ctx: ToolContext) => ToolHandlerResult | Promise<ToolHandlerResult> : (args: Record<string, never> | undefined, ctx: ToolContext) => ToolHandlerResult | Promise<ToolHandlerResult>;
+}
+type ToolHandler<TInput extends ZodRawShape$1 | undefined, TAppContext> = TInput extends ZodRawShape$1 ? (args: ShapeOutput<TInput>, ctx: ToolContext<TAppContext>) => ToolHandlerResult | Promise<ToolHandlerResult> : (args: Record<string, never> | undefined, ctx: ToolContext<TAppContext>) => ToolHandlerResult | Promise<ToolHandlerResult>;
+/** A tool that exists for every caller. Its handler receives the plain `ToolContext`. */
+interface ToolDefinition<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodOutputSchema | undefined = ZodOutputSchema | undefined> extends ToolDefinitionBase<TInput, TOutput> {
+  readonly handler: ToolHandler<TInput, undefined>;
+}
+/** Input to `defineTool.withAppContext<TAppContext>()`. */
+interface AppContextToolDefinitionInput<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodOutputSchema | undefined = ZodOutputSchema | undefined, TAppContext = unknown> extends ToolDefinitionBase<TInput, TOutput> {
+  /** Synchronously decide whether this tool exists for the current caller. */
+  readonly enabled?: (ctx: ToolVisibilityContext<TAppContext>) => boolean;
+  readonly handler: ToolHandler<TInput, TAppContext>;
+}
+interface AppContextToolDefinition<TInput extends ZodRawShape$1 | undefined = ZodRawShape$1 | undefined, TOutput extends ZodOutputSchema | undefined = ZodOutputSchema | undefined, TAppContext = unknown> extends AppContextToolDefinitionInput<TInput, TOutput, TAppContext> {
+  readonly requiresAppContext: true;
 }
 /** Type-erased element of `McpDefinition.tools`; per-tool generic typing
  * happens at the `defineTool` call site. */
-interface AnyToolDefinition {
+interface AnyToolDefinition<TAppContext = never> {
   readonly name: string;
   readonly title: string;
   readonly description: string;
   readonly inputSchema?: ZodRawShape$1 | undefined;
   readonly outputSchema?: ZodOutputSchema | undefined;
   readonly annotations?: ToolAnnotations;
-  readonly handler: (args: any, ctx: ToolContext) => ToolHandlerResult | Promise<ToolHandlerResult>;
+  readonly enabled?: (ctx: ToolVisibilityContext<TAppContext>) => boolean;
+  readonly handler: (args: any, ctx: ToolContext<TAppContext>) => ToolHandlerResult | Promise<ToolHandlerResult>;
 }
+type StaticToolDefinition = Omit<AnyToolDefinition<undefined>, "enabled"> & {
+  readonly enabled?: never;
+};
+type AnyAppContextToolDefinition<TAppContext = unknown> = AnyToolDefinition<TAppContext> & {
+  readonly requiresAppContext: true;
+};
+type CreateAppContext<TAppContext> = (input: CreateAppContextInput) => TAppContext | Promise<TAppContext>;
+/** Concrete app context requires a factory. `undefined`, `unknown`, and `never`
+ * remain optional because the SDK uses them for static or type-erased tools. */
+type AppContextConfiguration<TAppContext> = [TAppContext] extends [undefined] ? {
+  readonly createAppContext?: CreateAppContext<TAppContext>;
+} : unknown extends TAppContext ? {
+  readonly createAppContext?: CreateAppContext<TAppContext>;
+} : {
+  readonly createAppContext: CreateAppContext<TAppContext>;
+};
 /** Input shape for `defineMcp(...)`, whose branded `McpDefinition` return type is what
  * `createMcpProtocolHandler` consumes — the brand forces validation + freeze. */
-interface McpDefinitionInput {
+type McpDefinitionInput<TAppContext = undefined> = {
   readonly name: string;
   /** Human-readable display name shown to MCP clients. Required. */
   readonly title: string;
@@ -346,17 +392,19 @@ interface McpDefinitionInput {
    * empty string to opt out.
    */
   readonly instructions: string;
-  readonly tools: readonly AnyToolDefinition[];
+  readonly tools: readonly (AnyAppContextToolDefinition<TAppContext> | StaticToolDefinition)[];
   /**
    * Usage-metrics emission (runtime telemetry), on by default. `false` opts out;
    * `{ endpoint, headers }` sends to your own OTLP collector. Self-disables at
    * runtime without `LOVABLE_API_KEY` on the default Lovable endpoint.
    */
   readonly metrics?: MetricsConfig;
-}
+} & AppContextConfiguration<TAppContext>;
 declare const McpDefinitionBrand: unique symbol;
-type McpDefinition = McpDefinitionInput & {
+type McpDefinition<TAppContext = unknown> = Omit<McpDefinitionInput<TAppContext>, "createAppContext" | "tools"> & {
+  readonly createAppContext?: (input: CreateAppContextInput) => TAppContext | Promise<TAppContext>;
+  readonly tools: readonly AnyToolDefinition[];
   readonly [McpDefinitionBrand]: never;
 };
 //#endregion
-export { McpAuthConfig as A, MetricsConfig as C, ProgressUpdate as D, McpProtocolEra as E, ToolContext as O, ZodSchema as S, McpClientInfo as T, ToolContent as _, EmbeddedResource as a, ZodOutputSchema as b, JsonValue as c, McpDefinition as d, McpDefinitionInput as f, ToolAnnotations as g, TextContent as h, EmbeddedBlobResource as i, JwtClaims as k, JsonValueInput as l, ResourceLinkIcon as m, ContentAnnotations as n, EmbeddedTextResource as o, ResourceLink as p, ContentBlock as r, ImageContent as s, AudioContent as t, McpAllowedOrigins as u, ToolDefinition as v, MetricsOptions as w, ZodRawShape$1 as x, ToolHandlerResult as y };
+export { McpClientInfo as A, ToolVisibilityContext as C, MetricsConfig as D, ZodSchema as E, McpAuthConfig as F, ProgressUpdate as M, ToolContext as N, MetricsOptions as O, JwtClaims as P, ToolHandlerResult as S, ZodRawShape$1 as T, ResourceLinkIcon as _, ContentBlock as a, ToolContent as b, EmbeddedResource as c, JsonValue as d, JsonValueInput as f, ResourceLink as g, McpDefinitionInput as h, ContentAnnotations as i, McpProtocolEra as j, AuthContext as k, EmbeddedTextResource as l, McpDefinition as m, AppContextToolDefinitionInput as n, CreateAppContextInput as o, McpAllowedOrigins as p, AudioContent as r, EmbeddedBlobResource as s, AppContextToolDefinition as t, ImageContent as u, TextContent as v, ZodOutputSchema as w, ToolDefinition as x, ToolAnnotations as y };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovable.dev/mcp-js",
-  "version": "2.1.0",
+  "version": "2.2.0-rc.0",
   "engines": {
     "node": ">=20"
   },
@@ -108,8 +108,8 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@modelcontextprotocol/server": "2.0.0",
     "@modelcontextprotocol/sdk": "1.28.0",
+    "@modelcontextprotocol/server": "2.0.0",
     "esbuild": "^0.27.0",
     "jose": "^6.2.2"
   },

package/dist/errors-Bwd1L0Rf.js

@@ -1,100 +0,0 @@
-//#region src/auth/context.ts
-const NEVER_ABORTED = new AbortController().signal;
-/** The per-request context passed to every tool handler as its second argument. The
-* auth context lives in a private field so the accessors are the only way out; `getToken()` is the sole bearer escape hatch. */
-var ToolContext = class {
-	#auth;
-	#signal;
-	#client;
-	#sendProgress;
-	constructor(auth, request = {}) {
-		this.#auth = auth;
-		this.#signal = request.signal ?? NEVER_ABORTED;
-		this.#client = request.client ?? { protocol: "legacy" };
-		this.#sendProgress = request.sendProgress;
-	}
-	/** Aborts when the client cancels the request or disconnects. */
-	get signal() {
-		return this.#signal;
-	}
-	/** What the client declared about itself on this request. Unverified input. */
-	get client() {
-		return this.#client;
-	}
-	/** Send a progress notification for this call. A no-op when the client
-	* didn't request progress (no `progressToken` on the request). */
-	async progress(update) {
-		await this.#sendProgress?.(update);
-	}
-	/** Whether the in-flight tool call carries a verified auth context. */
-	isAuthenticated() {
-		return this.#auth !== void 0;
-	}
-	/** The verified bearer token, or `undefined` when unauthenticated. Pass it to downstream APIs; never return or log it. */
-	getToken() {
-		return this.#auth?.bearer.token;
-	}
-	/** The verified user id (the token `sub`), or `undefined`. */
-	getUserId() {
-		return this.#auth?.principal.sub;
-	}
-	/** The verified user email, or `undefined` when absent. */
-	getUserEmail() {
-		return this.#auth?.principal.email;
-	}
-	/** The verified OAuth `client_id`, or `undefined`. */
-	getClientId() {
-		return this.#auth?.principal.clientId;
-	}
-	/** The verified OAuth scopes, or `undefined` when unauthenticated. */
-	getScopes() {
-		return this.#auth?.principal.scopes;
-	}
-	/** The verified token issuer, or `undefined`. */
-	getIssuer() {
-		return this.#auth?.principal.issuer;
-	}
-	/**
-	* The full verified JWT claims, or `undefined`. Use this for app/business
-	* authorization on issuer-specific claims that have no dedicated accessor.
-	*/
-	getClaims() {
-		return this.#auth?.principal.claims;
-	}
-};
-//#endregion
-//#region src/core/errors.ts
-const TOOL_ERROR_BRAND = Symbol.for("@lovable.dev/mcp-js/tool-error");
-/** Error whose message is meant for the remote MCP caller; thrown from a handler
-*  it becomes an `isError` result carrying exactly `message`. */
-var ToolError = class extends Error {
-	constructor(message, options) {
-		super(message, options);
-		this.name = "ToolError";
-		Object.defineProperty(this, TOOL_ERROR_BRAND, { value: true });
-	}
-};
-function isToolError(err) {
-	return err instanceof Error && Object.getOwnPropertyDescriptor(err, TOOL_ERROR_BRAND)?.value === true;
-}
-/** The caller-visible message of a thrown ToolError, or undefined for anything
-*  else — including when inspecting the value itself throws (fail closed). */
-function resolveToolErrorMessage(err) {
-	try {
-		return isToolError(err) ? String(err.message) : void 0;
-	} catch {
-		return;
-	}
-}
-const MAX_ERROR_SUMMARY = 500;
-/** Bounded name+message line for local logs; never for wire responses. */
-function errorSummary(err) {
-	try {
-		const text = err instanceof Error ? `${err.name}: ${err.message}` : String(err);
-		return text.length > MAX_ERROR_SUMMARY ? `${text.slice(0, MAX_ERROR_SUMMARY)}…` : text;
-	} catch {
-		return "unprintable error";
-	}
-}
-//#endregion
-export { ToolContext as i, errorSummary as n, resolveToolErrorMessage as r, ToolError as t };

package/dist/errors-Cr95rSkB.cjs

@@ -1,123 +0,0 @@
-//#region src/auth/context.ts
-const NEVER_ABORTED = new AbortController().signal;
-/** The per-request context passed to every tool handler as its second argument. The
-* auth context lives in a private field so the accessors are the only way out; `getToken()` is the sole bearer escape hatch. */
-var ToolContext = class {
-	#auth;
-	#signal;
-	#client;
-	#sendProgress;
-	constructor(auth, request = {}) {
-		this.#auth = auth;
-		this.#signal = request.signal ?? NEVER_ABORTED;
-		this.#client = request.client ?? { protocol: "legacy" };
-		this.#sendProgress = request.sendProgress;
-	}
-	/** Aborts when the client cancels the request or disconnects. */
-	get signal() {
-		return this.#signal;
-	}
-	/** What the client declared about itself on this request. Unverified input. */
-	get client() {
-		return this.#client;
-	}
-	/** Send a progress notification for this call. A no-op when the client
-	* didn't request progress (no `progressToken` on the request). */
-	async progress(update) {
-		await this.#sendProgress?.(update);
-	}
-	/** Whether the in-flight tool call carries a verified auth context. */
-	isAuthenticated() {
-		return this.#auth !== void 0;
-	}
-	/** The verified bearer token, or `undefined` when unauthenticated. Pass it to downstream APIs; never return or log it. */
-	getToken() {
-		return this.#auth?.bearer.token;
-	}
-	/** The verified user id (the token `sub`), or `undefined`. */
-	getUserId() {
-		return this.#auth?.principal.sub;
-	}
-	/** The verified user email, or `undefined` when absent. */
-	getUserEmail() {
-		return this.#auth?.principal.email;
-	}
-	/** The verified OAuth `client_id`, or `undefined`. */
-	getClientId() {
-		return this.#auth?.principal.clientId;
-	}
-	/** The verified OAuth scopes, or `undefined` when unauthenticated. */
-	getScopes() {
-		return this.#auth?.principal.scopes;
-	}
-	/** The verified token issuer, or `undefined`. */
-	getIssuer() {
-		return this.#auth?.principal.issuer;
-	}
-	/**
-	* The full verified JWT claims, or `undefined`. Use this for app/business
-	* authorization on issuer-specific claims that have no dedicated accessor.
-	*/
-	getClaims() {
-		return this.#auth?.principal.claims;
-	}
-};
-//#endregion
-//#region src/core/errors.ts
-const TOOL_ERROR_BRAND = Symbol.for("@lovable.dev/mcp-js/tool-error");
-/** Error whose message is meant for the remote MCP caller; thrown from a handler
-*  it becomes an `isError` result carrying exactly `message`. */
-var ToolError = class extends Error {
-	constructor(message, options) {
-		super(message, options);
-		this.name = "ToolError";
-		Object.defineProperty(this, TOOL_ERROR_BRAND, { value: true });
-	}
-};
-function isToolError(err) {
-	return err instanceof Error && Object.getOwnPropertyDescriptor(err, TOOL_ERROR_BRAND)?.value === true;
-}
-/** The caller-visible message of a thrown ToolError, or undefined for anything
-*  else — including when inspecting the value itself throws (fail closed). */
-function resolveToolErrorMessage(err) {
-	try {
-		return isToolError(err) ? String(err.message) : void 0;
-	} catch {
-		return;
-	}
-}
-const MAX_ERROR_SUMMARY = 500;
-/** Bounded name+message line for local logs; never for wire responses. */
-function errorSummary(err) {
-	try {
-		const text = err instanceof Error ? `${err.name}: ${err.message}` : String(err);
-		return text.length > MAX_ERROR_SUMMARY ? `${text.slice(0, MAX_ERROR_SUMMARY)}…` : text;
-	} catch {
-		return "unprintable error";
-	}
-}
-//#endregion
-Object.defineProperty(exports, "ToolContext", {
-	enumerable: true,
-	get: function() {
-		return ToolContext;
-	}
-});
-Object.defineProperty(exports, "ToolError", {
-	enumerable: true,
-	get: function() {
-		return ToolError;
-	}
-});
-Object.defineProperty(exports, "errorSummary", {
-	enumerable: true,
-	get: function() {
-		return errorSummary;
-	}
-});
-Object.defineProperty(exports, "resolveToolErrorMessage", {
-	enumerable: true,
-	get: function() {
-		return resolveToolErrorMessage;
-	}
-});