@fitchmultz/pi-mcp-adapter 8.0.5 → 8.0.7

package/dist/mcp-callback-server.js

@@ -115,10 +115,12 @@ function handleRequest(req, res) {
     }
     try {
         const validate = pending?.validate ?? reserved?.validate;
-        if (validate)
+        if (validate) {
             validate({ ...(iss !== null ? { iss } : {}), ...(error ? { error } : {}) });
-        else if (error)
+        }
+        else if (error) {
             throw new Error("Cannot verify the OAuth error callback issuer");
+        }
     }
     catch (failure) {
         const message = failure instanceof Error ? failure.message : "Invalid OAuth callback";
@@ -147,7 +149,10 @@ function handleRequest(req, res) {
         }
         else if (reserved) {
             // Keep provider-controlled callback payloads out of tool output.
-            reserved.result = { error: "OAuth authorization was denied or failed. Finish authorization in the browser, then retry auth-complete.", ...(iss !== null ? { iss } : {}) };
+            reserved.result = {
+                error: "OAuth authorization was denied or failed. Finish authorization in the browser, then retry auth-complete.",
+                ...(iss !== null ? { iss } : {}),
+            };
         }
         return;
     }
@@ -158,8 +163,9 @@ function handleRequest(req, res) {
         return;
     }
     if (!pending) {
-        if (reserved)
+        if (reserved) {
             reserved.result = { code, ...(iss !== null ? { iss } : {}) };
+        }
         res.writeHead(200, { "Content-Type": "text/html" });
         res.end(HTML_MANUAL_SUCCESS);
         return;
@@ -206,7 +212,9 @@ async function ensureCallbackServerLocked(options = {}) {
     const strictPort = options.strictPort === true;
     const requestedHost = options.callbackHost ?? DEFAULT_OAUTH_CALLBACK_HOST;
     const rawRequestedPath = options.callbackPath ?? DEFAULT_OAUTH_CALLBACK_PATH;
-    const requestedPath = rawRequestedPath.startsWith("/") ? rawRequestedPath : `/${rawRequestedPath}`;
+    const requestedPath = rawRequestedPath.startsWith("/")
+        ? rawRequestedPath
+        : `/${rawRequestedPath}`;
     if (options.reserveState && !options.oauthState) {
         throw new Error("OAuth callback reservation requires an oauthState");
     }
@@ -289,8 +297,9 @@ export function releaseCallbackServer(oauthState) {
 export function takeCallbackResult(oauthState) {
     const reserved = reservedAuthStates.get(oauthState);
     const result = reserved?.result;
-    if (reserved)
+    if (reserved) {
         delete reserved.result;
+    }
     return result;
 }
 /**
@@ -333,8 +342,9 @@ export function cancelPendingCallback(oauthState) {
  * Stop the callback server and reject all pending authorizations.
  */
 export function stopCallbackServer() {
-    if (stoppingPromise)
+    if (stoppingPromise) {
         return stoppingPromise;
+    }
     callbackGeneration += 1;
     const cleanup = (async () => {
         while (bindingPromise) {
@@ -363,8 +373,9 @@ export function stopCallbackServer() {
         }, 0);
     })();
     const operation = cleanup.finally(() => {
-        if (stoppingPromise === operation)
+        if (stoppingPromise === operation) {
             stoppingPromise = undefined;
+        }
     });
     stoppingPromise = operation;
     return operation;

package/dist/mcp-code.js

@@ -1,6 +1,6 @@
 import { formatWithOptions } from "node:util";
 import { Worker } from "node:worker_threads";
-import { guardedMcpDetails, resolveMcpOutputGuardOptions, readMcpResult, formatMcpResultReference, formatMcpPayloadFile } from "./mcp-output-guard.js";
+import { guardedMcpDetails, resolveMcpOutputGuardOptions, readMcpResult, formatMcpResultReference, formatMcpPayloadFile, } from "./mcp-output-guard.js";
 import { createMcpOutputSpool } from "./mcp-output-preview.js";
 import { executeCall, executeConnect } from "./proxy-modes.js";
 import { executeResourceList, executeResourceRead } from "./resource-tools.js";
@@ -18,14 +18,24 @@ class McpScriptTimeoutError extends Error {
     }
 }
 function needsInspectableFormatting(value, stack = new WeakSet()) {
-    if (value === undefined || typeof value === "bigint" || typeof value === "function" || typeof value === "symbol")
+    if (value === undefined ||
+        typeof value === "bigint" ||
+        typeof value === "function" ||
+        typeof value === "symbol") {
         return true;
-    if (typeof value !== "object" || value === null)
+    }
+    if (typeof value !== "object" || value === null) {
         return false;
-    if (stack.has(value))
+    }
+    if (stack.has(value)) {
         return true;
-    if (value instanceof Map || value instanceof Set || value instanceof WeakMap || value instanceof WeakSet)
+    }
+    if (value instanceof Map ||
+        value instanceof Set ||
+        value instanceof WeakMap ||
+        value instanceof WeakSet) {
         return true;
+    }
     stack.add(value);
     try {
         return Object.values(value).some((entry) => needsInspectableFormatting(entry, stack));
@@ -35,13 +45,15 @@ function needsInspectableFormatting(value, stack = new WeakSet()) {
     }
 }
 function formatValue(value) {
-    if (typeof value === "string")
+    if (typeof value === "string") {
         return value;
+    }
     try {
         if (!needsInspectableFormatting(value)) {
             const json = JSON.stringify(value, null, 2);
-            if (json !== undefined)
+            if (json !== undefined) {
                 return json;
+            }
         }
         return formatWithOptions({ colors: false, depth: 6 }, value);
     }
@@ -55,7 +67,9 @@ function toContentBlock(value) {
         if (block.type === "text" && typeof block.text === "string") {
             return { type: "text", text: block.text };
         }
-        if (block.type === "image" && typeof block.data === "string" && typeof block.mimeType === "string") {
+        if (block.type === "image" &&
+            typeof block.data === "string" &&
+            typeof block.mimeType === "string") {
             return { type: "image", data: block.data, mimeType: block.mimeType };
         }
     }
@@ -71,22 +85,43 @@ function abortReasonError(reason) {
     return reason instanceof Error ? reason : new Error(String(reason ?? "MCP request aborted"));
 }
 function parseWorkerMessage(value) {
-    if (typeof value !== "object" || value === null)
+    if (typeof value !== "object" || value === null) {
         return null;
+    }
     const message = value;
     // An older worker file, such as one restored by a rollback under a running Pi, neither charges the window nor sends a size.
-    if (message.type === "emit" && "block" in message)
-        return { type: "emit", block: message.block, size: typeof message.size === "number" ? message.size : 0 };
-    if (message.type === "call" && typeof message.id === "number" && typeof message.path === "string") {
-        return { type: "call", id: message.id, path: message.path, ...(message.args !== undefined ? { args: message.args } : {}), ...(typeof message.server === "string" ? { server: message.server } : {}) };
+    if (message.type === "emit" && "block" in message) {
+        return {
+            type: "emit",
+            block: message.block,
+            size: typeof message.size === "number" ? message.size : 0,
+        };
     }
-    if ((message.type === "search" || message.type === "describe" || message.type === "resources" || message.type === "readResource" || message.type === "readResult") && typeof message.id === "number") {
+    if (message.type === "call" &&
+        typeof message.id === "number" &&
+        typeof message.path === "string") {
+        return {
+            type: "call",
+            id: message.id,
+            path: message.path,
+            ...(message.args !== undefined ? { args: message.args } : {}),
+            ...(typeof message.server === "string" ? { server: message.server } : {}),
+        };
+    }
+    if ((message.type === "search" ||
+        message.type === "describe" ||
+        message.type === "resources" ||
+        message.type === "readResource" ||
+        message.type === "readResult") &&
+        typeof message.id === "number") {
         return "input" in message
             ? { type: message.type, id: message.id, input: message.input }
             : { type: message.type, id: message.id };
     }
     if (message.type === "done") {
-        return "returnBlock" in message ? { type: "done", returnBlock: message.returnBlock } : { type: "done" };
+        return "returnBlock" in message
+            ? { type: "done", returnBlock: message.returnBlock }
+            : { type: "done" };
     }
     if (message.type === "error" && typeof message.message === "string") {
         return { type: "error", message: message.message };
@@ -111,9 +146,11 @@ export const runMcpScript = async (...args) => {
     }
 };
 async function runMcpScriptOperation(state, code, timeoutMs = DEFAULT_MCP_SCRIPT_TIMEOUT_MS, getPiTools, signal, toolCallId, beforeDispatch) {
-    const resolvedTimeoutMs = timeoutMs === null ? null : Number.isFinite(timeoutMs) && timeoutMs > 0
-        ? Math.floor(timeoutMs)
-        : DEFAULT_MCP_SCRIPT_TIMEOUT_MS;
+    const resolvedTimeoutMs = timeoutMs === null
+        ? null
+        : Number.isFinite(timeoutMs) && timeoutMs > 0
+            ? Math.floor(timeoutMs)
+            : DEFAULT_MCP_SCRIPT_TIMEOUT_MS;
     const output = createMcpOutputSpool(resolveMcpOutputGuardOptions(state.config.settings, state.outputDirectory));
     const externalSignal = combineAbortSignals(state.owner?.signal, signal);
     const timeoutController = new AbortController();
@@ -131,15 +168,25 @@ async function runMcpScriptOperation(state, code, timeoutMs = DEFAULT_MCP_SCRIPT
     const recordCall = async (path, dispatch) => {
         // Record before dispatch so calls still in flight at timeout/abort appear in the trace.
         const startedAt = Date.now();
-        const index = calls.push({ operation: "call", path, ok: false, error: "incomplete", durationMs: 0, startedAt }) - 1;
+        const index = calls.push({
+            operation: "call",
+            path,
+            ok: false,
+            error: "incomplete",
+            durationMs: 0,
+            startedAt,
+        }) - 1;
         const result = await dispatch();
         const details = result.details;
-        if (typeof details.resultRef === "string")
+        if (typeof details.resultRef === "string") {
             resultRefs.add(details.resultRef);
-        if (typeof details.resultWriteError === "string")
+        }
+        if (typeof details.resultWriteError === "string") {
             payloadNotices.add(`[MCP result could not be saved: ${details.resultWriteError}]`);
-        for (const file of (details.payloadFiles ?? []))
+        }
+        for (const file of (details.payloadFiles ?? [])) {
             payloadNotices.add(formatMcpPayloadFile(file));
+        }
         if (details.error !== undefined) {
             const errorCode = String(details.error);
             const suggestions = Array.isArray(details.suggestions)
@@ -151,38 +198,63 @@ async function runMcpScriptOperation(state, code, timeoutMs = DEFAULT_MCP_SCRIPT
                     ? details.message
                     : textFromContent(result.content);
             calls[index] = {
-                operation: "call", path, ok: false, error: errorCode, durationMs: Date.now() - startedAt, startedAt,
+                operation: "call",
+                path,
+                ok: false,
+                error: errorCode,
+                durationMs: Date.now() - startedAt,
+                startedAt,
                 ...(details.recovery !== undefined ? { recovery: details.recovery } : {}),
             };
-            if (errorCode === "call_capture_failed")
+            if (errorCode === "call_capture_failed") {
                 throw new McpScriptCaptureError(details.recovery, message);
-            if (details.recovery !== undefined)
+            }
+            if (details.recovery !== undefined) {
                 output.push({ type: "text", text: message });
+            }
             return {
                 ok: false,
                 ...(details.mcpResult !== undefined ? { data: details.mcpResult } : {}),
                 ...(details.resultRef ? { resultRef: details.resultRef } : {}),
-                error: { code: errorCode, message, ...(details.recovery ? { recovery: details.recovery } : {}) },
+                error: {
+                    code: errorCode,
+                    message,
+                    ...(details.recovery ? { recovery: details.recovery } : {}),
+                },
             };
         }
-        calls[index] = { operation: "call", path, ok: true, durationMs: Date.now() - startedAt, startedAt };
+        calls[index] = {
+            operation: "call",
+            path,
+            ok: true,
+            durationMs: Date.now() - startedAt,
+            startedAt,
+        };
         return {
             ok: true,
             data: details.mcpResult !== undefined ? details.mcpResult : textFromContent(result.content),
             ...(details.resultRef ? { resultRef: details.resultRef } : {}),
         };
     };
-    const callIdentity = (innerCallId) => ({ ...(toolCallId !== undefined ? { toolCallId } : {}), innerCallId });
+    const callIdentity = (innerCallId) => ({
+        ...(toolCallId !== undefined ? { toolCallId } : {}),
+        innerCallId,
+    });
     const callTool = (innerCallId, path, args, server) => recordCall(path, () => executeCall(state, path, args, server, getPiTools, callSignal, callIdentity(innerCallId), beforeDispatch, { raw: true }));
     const discoverServer = async (server) => {
-        if (!server)
+        if (!server) {
             return undefined;
-        if (isServerDisabled(state.config.mcpServers[server]))
+        }
+        if (isServerDisabled(state.config.mcpServers[server])) {
             return { code: "server_disabled", message: `Server "${server}" is disabled.` };
-        if (state.config.mcpServers[server] && state.toolMetadata.has(server))
+        }
+        if (state.config.mcpServers[server] && state.toolMetadata.has(server)) {
             return undefined;
+        }
         const result = await executeConnect(state, server, callSignal);
-        return result.details.error ? { code: result.details.error, message: textFromContent(result.content) } : undefined;
+        return result.details.error
+            ? { code: result.details.error, message: textFromContent(result.content) }
+            : undefined;
     };
     const searchTools = async (input) => {
         const startedAt = Date.now();
@@ -196,13 +268,15 @@ async function runMcpScriptOperation(state, code, timeoutMs = DEFAULT_MCP_SCRIPT
                 error = discoveryError.code;
                 return { error: discoveryError, coverage };
             }
-            if (query.trim() === "")
+            if (query.trim() === "") {
                 return { items: [], total: 0, hasMore: false, nextOffset: null, coverage };
+            }
             const limit = typeof input?.limit === "number" ? input.limit : 12;
             const offset = typeof input?.offset === "number" ? input.offset : 0;
-            const page = paginate(rankToolMatches(state, query, server).filter(match => !match.tool.resourceUri), offset, limit);
+            const page = paginate(rankToolMatches(state, query, server).filter((match) => !match.tool.resourceUri), offset, limit);
             return {
-                ...page, coverage,
+                ...page,
+                coverage,
                 items: page.items.map(({ server: matchServer, tool, score }) => ({
                     path: tool.name,
                     name: tool.originalName,
@@ -219,7 +293,14 @@ async function runMcpScriptOperation(state, code, timeoutMs = DEFAULT_MCP_SCRIPT
         finally {
             calls.push(error === undefined
                 ? { operation: "search", query, ok: true, durationMs: Date.now() - startedAt, startedAt }
-                : { operation: "search", query, ok: false, error: error instanceof Error ? error.message : String(error), durationMs: Date.now() - startedAt, startedAt });
+                : {
+                    operation: "search",
+                    query,
+                    ok: false,
+                    error: error instanceof Error ? error.message : String(error),
+                    durationMs: Date.now() - startedAt,
+                    startedAt,
+                });
         }
     };
     const describeTool = async (input) => {
@@ -234,17 +315,24 @@ async function runMcpScriptOperation(state, code, timeoutMs = DEFAULT_MCP_SCRIPT
                 return { path, error: discoveryError };
             }
             const matches = [...state.toolMetadata].flatMap(([server, metadata]) => {
-                if ((selectedServer && server !== selectedServer) || !state.config.mcpServers[server] || isServerDisabled(state.config.mcpServers[server]))
+                if ((selectedServer && server !== selectedServer) ||
+                    !state.config.mcpServers[server] ||
+                    isServerDisabled(state.config.mcpServers[server])) {
                     return [];
-                const tools = metadata.filter(tool => !tool.resourceUri);
-                const originals = selectedServer ? tools.filter(tool => tool.originalName === path) : [];
-                return (originals.length ? originals : tools.filter(tool => tool.name === path)).map(tool => toToolDescriptor(server, tool));
+                }
+                const tools = metadata.filter((tool) => !tool.resourceUri);
+                const originals = selectedServer ? tools.filter((tool) => tool.originalName === path) : [];
+                return (originals.length ? originals : tools.filter((tool) => tool.name === path)).map((tool) => toToolDescriptor(server, tool));
             });
-            if (matches.length === 1)
+            if (matches.length === 1) {
                 return matches[0];
+            }
             if (matches.length > 1) {
                 error = "ambiguous_tool";
-                return { path, error: { code: "ambiguous_tool", message: "Specify server and exact tool name." } };
+                return {
+                    path,
+                    error: { code: "ambiguous_tool", message: "Specify server and exact tool name." },
+                };
             }
             const suggestions = path ? rankSuggestions(state, path, 5, selectedServer) : [];
             error = "tool_not_found";
@@ -264,7 +352,14 @@ async function runMcpScriptOperation(state, code, timeoutMs = DEFAULT_MCP_SCRIPT
         finally {
             calls.push(error === undefined
                 ? { operation: "describe", path, ok: true, durationMs: Date.now() - startedAt, startedAt }
-                : { operation: "describe", path, ok: false, error: error instanceof Error ? error.message : String(error), durationMs: Date.now() - startedAt, startedAt });
+                : {
+                    operation: "describe",
+                    path,
+                    ok: false,
+                    error: error instanceof Error ? error.message : String(error),
+                    durationMs: Date.now() - startedAt,
+                    startedAt,
+                });
         }
     };
     let worker;
@@ -287,19 +382,22 @@ async function runMcpScriptOperation(state, code, timeoutMs = DEFAULT_MCP_SCRIPT
             let completed = false;
             activeWorker.on("message", (value) => {
                 const message = parseWorkerMessage(value);
-                if (!message || completed)
+                if (!message || completed) {
                     return;
+                }
                 if (message.type === "emit") {
                     output.push(toContentBlock(message.block));
                     const queued = Atomics.sub(outputFlow, 0, message.size) - message.size;
-                    if (queued <= SCRIPT_OUTPUT_WINDOW / 2)
+                    if (queued <= SCRIPT_OUTPUT_WINDOW / 2) {
                         Atomics.notify(outputFlow, 0);
+                    }
                     return;
                 }
                 if (message.type === "done") {
                     completed = true;
-                    if ("returnBlock" in message)
+                    if ("returnBlock" in message) {
                         output.push(toContentBlock(message.returnBlock));
+                    }
                     resolve();
                     return;
                 }
@@ -324,12 +422,23 @@ async function runMcpScriptOperation(state, code, timeoutMs = DEFAULT_MCP_SCRIPT
                     }
                     else {
                         const input = message.input;
-                        if (typeof input?.server !== "string" || !input.server || (message.type === "readResource" && (typeof input.uri !== "string" || !input.uri))) {
-                            envelope = { error: { code: "invalid_arguments", message: "Specify server and, for reads, resource uri." } };
+                        if (typeof input?.server !== "string" ||
+                            !input.server ||
+                            (message.type === "readResource" && (typeof input.uri !== "string" || !input.uri))) {
+                            envelope = {
+                                error: {
+                                    code: "invalid_arguments",
+                                    message: "Specify server and, for reads, resource uri.",
+                                },
+                            };
                         }
                         else if (message.type === "resources") {
                             const result = await executeResourceList(state, input.server, typeof input.limit === "number" ? input.limit : 12, typeof input.offset === "number" ? input.offset : 0, callSignal);
-                            envelope = result.details.error ? { error: { code: result.details.error, message: textFromContent(result.content) } } : result.details;
+                            envelope = result.details.error
+                                ? {
+                                    error: { code: result.details.error, message: textFromContent(result.content) },
+                                }
+                                : result.details;
                         }
                         else {
                             const server = input.server;
@@ -345,13 +454,15 @@ async function runMcpScriptOperation(state, code, timeoutMs = DEFAULT_MCP_SCRIPT
             });
             activeWorker.once("error", reject);
             activeWorker.once("exit", (code) => {
-                if (!completed && code !== 0)
+                if (!completed && code !== 0) {
                     reject(new Error(`mcp_script worker exited with code ${code}`));
+                }
             });
         });
         const timeout = new Promise((_resolve, reject) => {
-            if (resolvedTimeoutMs === null)
+            if (resolvedTimeoutMs === null) {
                 return;
+            }
             const timeoutError = new McpScriptTimeoutError(resolvedTimeoutMs);
             timer = setTimeout(() => {
                 timeoutController.abort(timeoutError);
@@ -403,12 +514,15 @@ async function runMcpScriptOperation(state, code, timeoutMs = DEFAULT_MCP_SCRIPT
         await worker?.terminate();
     }
     const callsSnapshot = snapshotCalls();
-    if (output.empty)
+    if (output.empty) {
         output.push({ type: "text", text: "(no output)" });
-    for (const text of payloadNotices)
+    }
+    for (const text of payloadNotices) {
         output.push({ type: "text", text });
-    for (const ref of resultRefs)
+    }
+    for (const ref of resultRefs) {
         output.push({ type: "text", text: formatMcpResultReference(ref) });
+    }
     const guarded = output.finish();
     return {
         content: guarded.content,

package/dist/mcp-keyring-helper.cjs

@@ -1,14 +1,26 @@
 #!/usr/bin/env node
-'use strict';
+"use strict";
 
-const { createRequire } = require('node:module');
-const { dirname, join } = require('node:path');
+const { createRequire } = require("node:module");
+const { dirname, join } = require("node:path");
 
 const requireFromHere = createRequire(__filename);
 
+/** @param {unknown} error @returns {unknown} */
+function errorMessage(error) {
+  if (
+    error !== null &&
+    (typeof error === "object" || typeof error === "function") &&
+    "message" in error
+  ) {
+    return error.message;
+  }
+  return undefined;
+}
+
 function loadKeyringEntryClass() {
   try {
-    return requireFromHere('@napi-rs/keyring').Entry;
+    return requireFromHere("@napi-rs/keyring").Entry;
   } catch (loaderError) {
     const suffixes = getNativeBindingSuffixes(process.platform, process.arch);
     let lastError;
@@ -20,38 +32,50 @@ function loadKeyringEntryClass() {
         lastError = error;
       }
     }
-    const error = new Error(`Failed to load @napi-rs/keyring in recovery helper: ${lastError?.message ?? loaderError.message}`);
+    const error = new Error(
+      `Failed to load @napi-rs/keyring in recovery helper: ${errorMessage(lastError) ?? errorMessage(loaderError)}`,
+    );
     error.cause = loaderError;
     throw error;
   }
 }
 
+/** @param {string} platform @param {string} arch */
 function getNativeBindingSuffixes(platform, arch) {
-  if (platform === 'linux') {
-    if (arch === 'arm64') return ['linux-arm64-gnu', 'linux-arm64-musl'];
-    if (arch === 'arm') return ['linux-arm-gnueabihf'];
-    if (arch === 'riscv64') return ['linux-riscv64-gnu'];
-    if (arch === 'x64') return ['linux-x64-gnu', 'linux-x64-musl'];
+  if (platform === "linux") {
+    if (arch === "arm64") {
+      return ["linux-arm64-gnu", "linux-arm64-musl"];
+    }
+    if (arch === "arm") {
+      return ["linux-arm-gnueabihf"];
+    }
+    if (arch === "riscv64") {
+      return ["linux-riscv64-gnu"];
+    }
+    if (arch === "x64") {
+      return ["linux-x64-gnu", "linux-x64-musl"];
+    }
   }
   return [];
 }
 
 function readStdin() {
   return new Promise((resolve, reject) => {
-    let input = '';
-    process.stdin.setEncoding('utf8');
-    process.stdin.on('data', chunk => {
+    let input = "";
+    process.stdin.setEncoding("utf8");
+    process.stdin.on("data", (chunk) => {
       input += chunk;
       if (input.length > 1024 * 1024) {
-        reject(new Error('request too large'));
+        reject(new Error("request too large"));
         process.stdin.destroy();
       }
     });
-    process.stdin.on('error', reject);
-    process.stdin.on('end', () => resolve(input));
+    process.stdin.on("error", reject);
+    process.stdin.on("end", () => resolve(input));
   });
 }
 
+/** @param {unknown} response */
 function writeResponse(response) {
   process.stdout.write(`${JSON.stringify(response)}\n`);
 }
@@ -59,22 +83,32 @@ function writeResponse(response) {
 (async () => {
   try {
     const request = JSON.parse(await readStdin());
-    if (!request || typeof request !== 'object') throw new Error('invalid request');
+    if (!request || typeof request !== "object") {
+      throw new Error("invalid request");
+    }
     const { operation, service, account, payload } = request;
-    if (!['read', 'write', 'remove'].includes(operation)) throw new Error('invalid operation');
-    if (typeof service !== 'string' || !service) throw new Error('invalid service');
-    if (typeof account !== 'string' || !account) throw new Error('invalid account');
+    if (!["read", "write", "remove"].includes(operation)) {
+      throw new Error("invalid operation");
+    }
+    if (typeof service !== "string" || !service) {
+      throw new Error("invalid service");
+    }
+    if (typeof account !== "string" || !account) {
+      throw new Error("invalid account");
+    }
 
     const Entry = loadKeyringEntryClass();
     const entry = new Entry(service, account);
 
-    if (operation === 'read') {
+    if (operation === "read") {
       const value = entry.getPassword();
       writeResponse(value === null ? { ok: true, found: false } : { ok: true, found: true, value });
       return;
     }
-    if (operation === 'write') {
-      if (typeof payload !== 'string') throw new Error('invalid payload');
+    if (operation === "write") {
+      if (typeof payload !== "string") {
+        throw new Error("invalid payload");
+      }
       entry.setPassword(payload);
       writeResponse({ ok: true });
       return;

package/dist/mcp-oauth-provider.d.ts

@@ -4,8 +4,7 @@
  * Implementation of the MCP SDK's OAuthClientProvider interface.
  * Handles OAuth client registration, token storage, and authorization redirection.
  */
-import { type FetchLike, type AddClientAuthentication, type OAuthClientProvider, type OAuthClientInformationContext, type StoredOAuthClientInformation, type StoredOAuthTokens, type OAuthDiscoveryState } from "@modelcontextprotocol/client";
-import type { OAuthClientMetadata } from "@modelcontextprotocol/client";
+import { type FetchLike, type AddClientAuthentication, type OAuthClientProvider, type OAuthClientInformationContext, type StoredOAuthClientInformation, type StoredOAuthTokens, type OAuthDiscoveryState, type OAuthClientMetadata } from "@modelcontextprotocol/client";
 import { type AuthStorageOptions } from "./mcp-auth.ts";
 import { type OAuthPrivateKeyJwtConfig, type OAuthCrossAppAccessConfig } from "./types.ts";
 /** Validate explicit document URLs without echoing possible credentials in errors. */
@@ -54,11 +53,11 @@ export declare class McpOAuthProvider implements OAuthClientProvider {
     private flowDiscoveryState;
     private flowIssuerMismatch;
     private flowState;
-    private serverName;
-    private serverUrl;
-    private config;
-    private callbacks;
-    private storageOptions;
+    private readonly serverName;
+    private readonly serverUrl;
+    private readonly config;
+    private readonly callbacks;
+    private readonly storageOptions;
     constructor(serverName: string, serverUrl: string, config: McpOAuthConfig, callbacks: McpOAuthCallbacks, storageOptions?: AuthStorageOptions, runtimeSignal?: AbortSignal, initialState?: string);
     private get isNonInteractive();
     private get discoveredIssuer();