tiny-http-mcp-server 0.1.50 → 0.1.52

package/dist/composition.json

@@ -18,7 +18,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.50",
+      "version": "0.1.52",
       "license": "MIT"
     },
     {

package/node_modules/mcp-oauth/dist/client/default-oauth-client-provider.js

@@ -187,7 +187,7 @@ export function createDefaultOAuthClientProvider(options) {
             if (forceRefresh && rejectedTokens !== undefined && (rejectedTokens === null || session?.tokens === undefined || !sameTokenGrant(session.tokens, rejectedTokens)))
                 forceRefresh = false;
             const sessionDiscovery = resolveDiscovery(discovery, session);
-            if ((options.client.mode === "static" || configuredClient?.registration !== undefined || initialGrant !== undefined) && session !== null && (session.tokens !== undefined || session.refreshState === "pending")) {
+            if ((options.client.mode === "static" || configuredClient !== null || initialGrant !== undefined) && session !== null && (session.tokens !== undefined || session.refreshState === "pending")) {
                 const configured = configuredClient;
                 if (configured === null || configured.clientId !== session.client.clientId || configured.clientSecret !== session.client.clientSecret)
                     throw new Error("Stored session belongs to a different OAuth client; use separate persistence or explicitly reset it");

package/node_modules/tiny-mcp-client/README.md

@@ -22,12 +22,23 @@ console.log(result.structuredContent);
 await client.close();
 ```
 
-`Tool` includes MCP `outputSchema` when a server advertises typed tool output. `CallToolResult` includes `structuredContent?: Record<string, unknown>` for typed results; legacy/content-block tools still use `content[]`.
+Omit `protocolVersion` for automatic modern discovery and legacy negotiation.
+Set it to `"2025-03-26"` or `"2026-07-28"` to pin a protocol. A modern pin
+rejects failed or timed-out discovery without sending legacy initialization.
+Unsupported pins fail before connection setup.
+
+`Tool` includes MCP `outputSchema` when a server advertises typed tool output.
+`CallToolResult.structuredContent` preserves modern JSON values; legacy servers
+require an object. Complete `content[]` blocks remain available in either case.
 
 Set `requestTimeoutMs` on `McpClient` or `timeoutMs` on individual requests.
 Numeric deadlines must be finite, nonnegative and no greater than
 2,147,483,647 ms; oversized values fail before a request is sent. Individual
 JSON-RPC requests also accept `timeoutMs: null` to disable their timer.
+The deadline covers the complete request, including modern input callbacks and
+continuation rounds. On expiry, callback signals abort and late input cannot
+submit another round. Successful requests, cancellation and disposal clear the
+timer; a timeout releases request capacity so later operations can proceed.
 
 ## Transports
 

package/node_modules/tiny-mcp-client/dist/index.js

@@ -5398,7 +5398,7 @@ function createDefaultOAuthClientProvider(options) {
       if (forceRefresh && rejectedTokens !== void 0 && (rejectedTokens === null || session?.tokens === void 0 || !sameTokenGrant(session.tokens, rejectedTokens)))
         forceRefresh = false;
       const sessionDiscovery = resolveDiscovery(discovery, session);
-      if ((options.client.mode === "static" || configuredClient?.registration !== void 0 || initialGrant !== void 0) && session !== null && (session.tokens !== void 0 || session.refreshState === "pending")) {
+      if ((options.client.mode === "static" || configuredClient !== null || initialGrant !== void 0) && session !== null && (session.tokens !== void 0 || session.refreshState === "pending")) {
         const configured = configuredClient;
         if (configured === null || configured.clientId !== session.client.clientId || configured.clientSecret !== session.client.clientSecret)
           throw new Error("Stored session belongs to a different OAuth client; use separate persistence or explicitly reset it");
@@ -6685,6 +6685,8 @@ var McpClient = class {
   }
   async connect(transport, options = {}) {
     options.signal?.throwIfAborted();
+    if (this.options.protocolVersion !== void 0 && this.options.protocolVersion !== MCP_PROTOCOL_VERSION && this.options.protocolVersion !== "2026-07-28")
+      throw new Error("Unsupported protocolVersion; use 2025-03-26 or 2026-07-28");
     if (this.currentState !== "disconnected" && this.currentState !== "closed") {
       throw new Error("MCP client is already connected");
     }
@@ -6861,6 +6863,7 @@ var McpClient = class {
         }, { signal: options.signal, timeoutMs: this.options.protocolVersion === "2026-07-28" ? this.options.requestTimeoutMs ?? 3e4 : Math.min(this.options.requestTimeoutMs ?? 3e4, 1e3) });
       } catch (error) {
         options.signal?.throwIfAborted();
+        if (this.options.protocolVersion === "2026-07-28") throw error;
         if (error instanceof McpError && [-32020, -32021, -32022].includes(error.code)) throw error;
       }
       if (discovery !== void 0) {
@@ -8481,6 +8484,7 @@ var JsonRpcMessageLayer = class {
       rejectAbort = reject;
     });
     const cancel = () => {
+      clearTimeout(deadline);
       if (currentRequestId !== void 0) this.cancelRequest(currentRequestId, controller.signal.reason);
       rejectAbort(controller.signal.reason);
     };
@@ -8492,6 +8496,15 @@ var JsonRpcMessageLayer = class {
       currentRequestId = id;
       onRequestId?.(id);
     } };
+    const deadline = timeoutMs === null ? void 0 : setTimeout(() => {
+      let reason = new Error(`JSON-RPC request "${method}" timed out after ${timeoutMs}ms`);
+      try {
+        if (currentRequestId !== void 0) options.onTimeout?.(currentRequestId);
+      } catch (error) {
+        reason = error;
+      }
+      controller.abort(reason);
+    }, timeoutMs);
     if (callerSignal?.aborted) forwardAbort();
     const work = (async () => {
       let retryParams = originalParams;
@@ -8564,6 +8577,7 @@ var JsonRpcMessageLayer = class {
       throw new McpError(ERROR_INTERNAL, "Unreachable MCP retry state");
     })();
     return Promise.race([work, aborted]).finally(() => {
+      clearTimeout(deadline);
       callerSignal?.removeEventListener("abort", forwardAbort);
       controller.signal.removeEventListener("abort", cancel);
       this.exchangeControllers.delete(controller);
@@ -8575,8 +8589,6 @@ var JsonRpcMessageLayer = class {
     }
     const id = this.nextRequestId;
     this.nextRequestId += 1;
-    const timeoutMs = options.timeoutMs === null ? null : options.timeoutMs ?? this.requestTimeoutMs;
-    if (timeoutMs !== null) validateRequestTimer(timeoutMs, "timeoutMs");
     if (options.onRequestId !== void 0) {
       options.onRequestId(id);
     }
@@ -8599,16 +8611,10 @@ var JsonRpcMessageLayer = class {
       message.params = params;
     }
     return new Promise((resolve, reject) => {
-      const timeout = timeoutMs === null ? void 0 : setTimeout(() => {
-        this.pendingRequests.delete(id);
-        options.onTimeout?.(id);
-        reject(new Error(`JSON-RPC request "${method}" timed out after ${timeoutMs}ms`));
-      }, timeoutMs);
-      this.pendingRequests.set(id, { resolve, reject, timeout });
+      this.pendingRequests.set(id, { resolve, reject });
       try {
         this.output.write(serializeJsonRpcMessage(message));
       } catch (error) {
-        clearTimeout(timeout);
         this.pendingRequests.delete(id);
         reject(error);
       }
@@ -8620,7 +8626,6 @@ var JsonRpcMessageLayer = class {
       return false;
     }
     this.pendingRequests.delete(requestId);
-    clearTimeout(pending.timeout);
     pending.reject(reason);
     return true;
   }
@@ -8631,7 +8636,6 @@ var JsonRpcMessageLayer = class {
     this.disposedError = reason;
     for (const controller of this.exchangeControllers) controller.abort(reason);
     for (const pending of this.pendingRequests.values()) {
-      clearTimeout(pending.timeout);
       pending.reject(reason);
     }
     this.pendingRequests.clear();
@@ -8769,7 +8773,6 @@ var JsonRpcMessageLayer = class {
       return;
     }
     this.pendingRequests.delete(parsed.message.id);
-    clearTimeout(pending.timeout);
     if ("result" in parsed.message) {
       pending.resolve(parsed.message.result);
       return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tiny-http-mcp-server",
-  "version": "0.1.50",
+  "version": "0.1.52",
   "description": "Minimal MCP server over HTTP built on tiny-stdio-mcp-server",
   "type": "module",
   "main": "dist/index.js",