tiny-http-mcp-server 0.1.58 → 0.1.60

package/dist/composition.json

@@ -18,7 +18,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.58",
+      "version": "0.1.60",
       "license": "MIT"
     },
     {

package/node_modules/auth-store/README.md

@@ -25,6 +25,10 @@ const value = await store.get(); // "secret-value"
 await store.delete();
 ```
 
+Use `resolveSecretStoreBackend(options)` to select and validate the backend
+without constructing a store or reading credentials. Pass the returned backend
+explicitly when deferred operations must keep the same environment selection.
+
 Both built-in backends expose `store.withLock(operation, { signal, timeoutMs })`
 for transactions spanning a read, external operation and write. Independent
 instances and processes serialize the same encrypted file or Keychain

package/node_modules/auth-store/dist/create-secret-store.d.ts

@@ -1,2 +1,4 @@
-import type { CreateSecretStoreInput, CreateSecretStoreResult } from "./types.js";
+import type { CreateSecretStoreInput, CreateSecretStoreResult, StoreBackend } from "./types.js";
 export declare function createSecretStore(input: CreateSecretStoreInput): CreateSecretStoreResult;
+/** Select and validate a backend without constructing a store or accessing credentials. */
+export declare function resolveSecretStoreBackend(input: CreateSecretStoreInput): StoreBackend;

package/node_modules/auth-store/dist/create-secret-store.js

@@ -17,7 +17,7 @@ const storeFactories = {
     }
 };
 export function createSecretStore(input) {
-    const backend = resolveBackend(input);
+    const backend = resolveSecretStoreBackend(input);
     const platform = input.platform ?? process.platform;
     if (backend === "keychain" && platform !== MACOS_PLATFORM) {
         throw new Error(`Keychain backend is only supported on macOS. Current platform: ${platform}`);
@@ -25,7 +25,8 @@ export function createSecretStore(input) {
     const store = storeFactories[backend](input);
     return { backend, store };
 }
-function resolveBackend(input) {
+/** Select and validate a backend without constructing a store or accessing credentials. */
+export function resolveSecretStoreBackend(input) {
     const envVar = input.backendEnvVar ?? DEFAULT_BACKEND_ENV_VAR;
     const configuredBackend = input.backend ?? getOwnEnvValue(input.env, envVar) ?? getOwnEnvValue(process.env, envVar);
     const backend = configuredBackend?.trim();

package/node_modules/auth-store/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { createSecretStore } from "./create-secret-store.js";
+export { createSecretStore, resolveSecretStoreBackend } from "./create-secret-store.js";
 export { EncryptedFileStore } from "./encrypted-file-store.js";
 export { KeychainStore } from "./keychain-store.js";
 export type { SecretStoreLockOptions, SecretStoreLockFileSystem } from "./transaction-lock.js";

package/node_modules/auth-store/dist/index.js

@@ -1,4 +1,4 @@
-export { createSecretStore } from "./create-secret-store.js";
+export { createSecretStore, resolveSecretStoreBackend } from "./create-secret-store.js";
 export { EncryptedFileStore } from "./encrypted-file-store.js";
 export { KeychainStore } from "./keychain-store.js";
 export { key, MigratingSecretStore } from "./provider-store.js";

package/node_modules/mcp-oauth/README.md

@@ -61,6 +61,11 @@ The default provider captures client, interaction, callback, landing-page and
 lock policies when created. Create a new provider to change those settings.
 Selected callbacks, stores, clocks and AbortSignals remain live host dependencies;
 aborting the original signal still cancels authorization.
+Native session and client persistence factories also capture file paths, salts,
+Keychain identities, lock locations and selected filesystem/command handles.
+Mutating these settings cannot redirect a later read or write.
+The factories resolve the selected backend environment variable once at creation;
+later environment changes cannot move a transaction between file and Keychain.
 
 `createJwksTokenVerifier(options)` accepts:
 

package/node_modules/mcp-oauth/dist/client/auth-store-session-store.js

@@ -1,7 +1,7 @@
 import { normalizeStoredOAuthClient } from "./client-registration.js";
 import crypto from "node:crypto";
 import path from "node:path";
-import { createSecretStore } from "auth-store";
+import { createSecretStore, resolveSecretStoreBackend } from "auth-store";
 import { canonicalizeResourceIndicator } from "../resource-indicator.js";
 const DEFAULT_FILE_SALT = "poe-code:mcp-oauth:v1";
 const DEFAULT_FILE_DIRECTORY = ".poe-code/mcp-oauth";
@@ -12,6 +12,7 @@ const DEFAULT_CLIENT_KEYCHAIN_SERVICE = "poe-code-mcp-oauth-clients";
 const MAX_JS_DATE_MS = 8_640_000_000_000_000;
 export function createAuthStoreSessionStore(options = {}, namespace) {
     assertPersistenceNamespace(namespace);
+    options = snapshotPersistenceOptions(options);
     return {
         async withLock(resource, operation, lockOptions) {
             const store = createResourceSecretStore(resource, options, namespace);
@@ -49,6 +50,7 @@ export function createAuthStoreSessionStore(options = {}, namespace) {
 }
 export function createAuthStoreClientStore(options, namespace) {
     assertPersistenceNamespace(namespace);
+    options = snapshotPersistenceOptions(options);
     return {
         async load(issuer) {
             const store = createIssuerSecretStore(issuer, options, namespace);
@@ -79,6 +81,14 @@ export function createAuthStoreClientStore(options, namespace) {
         }
     };
 }
+function snapshotPersistenceOptions(options) {
+    return {
+        ...options, backend: resolveSecretStoreBackend(options),
+        ...(options.fileStore === undefined ? {} : { fileStore: { ...options.fileStore } }),
+        ...(options.keychainStore === undefined ? {} : { keychainStore: { ...options.keychainStore,
+                ...(options.keychainStore.lock === undefined ? {} : { lock: { ...options.keychainStore.lock } }) } })
+    };
+}
 export function createNamedSecretStore(key, options, defaults, namespace) {
     const hash = crypto.createHash("sha256").update(namespace === undefined ? key : JSON.stringify([namespace, key])).digest("hex");
     const configuredFilePath = options.fileStore?.filePath;

package/node_modules/tiny-mcp-client/dist/index.js

@@ -4526,7 +4526,7 @@ var storeFactories = {
   }
 };
 function createSecretStore(input) {
-  const backend = resolveBackend(input);
+  const backend = resolveSecretStoreBackend(input);
   const platform = input.platform ?? process.platform;
   if (backend === "keychain" && platform !== MACOS_PLATFORM) {
     throw new Error(`Keychain backend is only supported on macOS. Current platform: ${platform}`);
@@ -4534,7 +4534,7 @@ function createSecretStore(input) {
   const store = storeFactories[backend](input);
   return { backend, store };
 }
-function resolveBackend(input) {
+function resolveSecretStoreBackend(input) {
   const envVar = input.backendEnvVar ?? DEFAULT_BACKEND_ENV_VAR;
   const configuredBackend = input.backend ?? getOwnEnvValue(input.env, envVar) ?? getOwnEnvValue(process.env, envVar);
   const backend = configuredBackend?.trim();
@@ -4572,6 +4572,7 @@ var DEFAULT_CLIENT_KEYCHAIN_SERVICE = "poe-code-mcp-oauth-clients";
 var MAX_JS_DATE_MS = 864e13;
 function createAuthStoreSessionStore(options = {}, namespace) {
   assertPersistenceNamespace(namespace);
+  options = snapshotPersistenceOptions(options);
   return {
     async withLock(resource, operation, lockOptions) {
       const store = createResourceSecretStore(resource, options, namespace);
@@ -4608,6 +4609,7 @@ function createAuthStoreSessionStore(options = {}, namespace) {
 }
 function createAuthStoreClientStore(options, namespace) {
   assertPersistenceNamespace(namespace);
+  options = snapshotPersistenceOptions(options);
   return {
     async load(issuer) {
       const store = createIssuerSecretStore(issuer, options, namespace);
@@ -4635,6 +4637,17 @@ function createAuthStoreClientStore(options, namespace) {
     }
   };
 }
+function snapshotPersistenceOptions(options) {
+  return {
+    ...options,
+    backend: resolveSecretStoreBackend(options),
+    ...options.fileStore === void 0 ? {} : { fileStore: { ...options.fileStore } },
+    ...options.keychainStore === void 0 ? {} : { keychainStore: {
+      ...options.keychainStore,
+      ...options.keychainStore.lock === void 0 ? {} : { lock: { ...options.keychainStore.lock } }
+    } }
+  };
+}
 function createNamedSecretStore(key2, options, defaults, namespace) {
   const hash = crypto2.createHash("sha256").update(namespace === void 0 ? key2 : JSON.stringify([namespace, key2])).digest("hex");
   const configuredFilePath = options.fileStore?.filePath;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tiny-http-mcp-server",
-  "version": "0.1.58",
+  "version": "0.1.60",
   "description": "Minimal MCP server over HTTP built on tiny-stdio-mcp-server",
   "type": "module",
   "main": "dist/index.js",