tiny-http-mcp-server 0.1.58 → 0.1.59

package/dist/composition.json

@@ -18,7 +18,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.58",
+      "version": "0.1.59",
       "license": "MIT"
     },
     {

package/node_modules/mcp-oauth/README.md

@@ -61,6 +61,9 @@ The default provider captures client, interaction, callback, landing-page and
 lock policies when created. Create a new provider to change those settings.
 Selected callbacks, stores, clocks and AbortSignals remain live host dependencies;
 aborting the original signal still cancels authorization.
+Native session and client persistence factories also capture file paths, salts,
+Keychain identities, lock locations and selected filesystem/command handles.
+Mutating these settings cannot redirect a later read or write.
 
 `createJwksTokenVerifier(options)` accepts:
 

package/node_modules/mcp-oauth/dist/client/auth-store-session-store.js

@@ -12,6 +12,7 @@ const DEFAULT_CLIENT_KEYCHAIN_SERVICE = "poe-code-mcp-oauth-clients";
 const MAX_JS_DATE_MS = 8_640_000_000_000_000;
 export function createAuthStoreSessionStore(options = {}, namespace) {
     assertPersistenceNamespace(namespace);
+    options = snapshotPersistenceOptions(options);
     return {
         async withLock(resource, operation, lockOptions) {
             const store = createResourceSecretStore(resource, options, namespace);
@@ -49,6 +50,7 @@ export function createAuthStoreSessionStore(options = {}, namespace) {
 }
 export function createAuthStoreClientStore(options, namespace) {
     assertPersistenceNamespace(namespace);
+    options = snapshotPersistenceOptions(options);
     return {
         async load(issuer) {
             const store = createIssuerSecretStore(issuer, options, namespace);
@@ -79,6 +81,14 @@ export function createAuthStoreClientStore(options, namespace) {
         }
     };
 }
+function snapshotPersistenceOptions(options) {
+    return {
+        ...options,
+        ...(options.fileStore === undefined ? {} : { fileStore: { ...options.fileStore } }),
+        ...(options.keychainStore === undefined ? {} : { keychainStore: { ...options.keychainStore,
+                ...(options.keychainStore.lock === undefined ? {} : { lock: { ...options.keychainStore.lock } }) } })
+    };
+}
 export function createNamedSecretStore(key, options, defaults, namespace) {
     const hash = crypto.createHash("sha256").update(namespace === undefined ? key : JSON.stringify([namespace, key])).digest("hex");
     const configuredFilePath = options.fileStore?.filePath;

package/node_modules/tiny-mcp-client/dist/index.js

@@ -4572,6 +4572,7 @@ var DEFAULT_CLIENT_KEYCHAIN_SERVICE = "poe-code-mcp-oauth-clients";
 var MAX_JS_DATE_MS = 864e13;
 function createAuthStoreSessionStore(options = {}, namespace) {
   assertPersistenceNamespace(namespace);
+  options = snapshotPersistenceOptions(options);
   return {
     async withLock(resource, operation, lockOptions) {
       const store = createResourceSecretStore(resource, options, namespace);
@@ -4608,6 +4609,7 @@ function createAuthStoreSessionStore(options = {}, namespace) {
 }
 function createAuthStoreClientStore(options, namespace) {
   assertPersistenceNamespace(namespace);
+  options = snapshotPersistenceOptions(options);
   return {
     async load(issuer) {
       const store = createIssuerSecretStore(issuer, options, namespace);
@@ -4635,6 +4637,16 @@ function createAuthStoreClientStore(options, namespace) {
     }
   };
 }
+function snapshotPersistenceOptions(options) {
+  return {
+    ...options,
+    ...options.fileStore === void 0 ? {} : { fileStore: { ...options.fileStore } },
+    ...options.keychainStore === void 0 ? {} : { keychainStore: {
+      ...options.keychainStore,
+      ...options.keychainStore.lock === void 0 ? {} : { lock: { ...options.keychainStore.lock } }
+    } }
+  };
+}
 function createNamedSecretStore(key2, options, defaults, namespace) {
   const hash = crypto2.createHash("sha256").update(namespace === void 0 ? key2 : JSON.stringify([namespace, key2])).digest("hex");
   const configuredFilePath = options.fileStore?.filePath;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tiny-http-mcp-server",
-  "version": "0.1.58",
+  "version": "0.1.59",
   "description": "Minimal MCP server over HTTP built on tiny-stdio-mcp-server",
   "type": "module",
   "main": "dist/index.js",