tiny-http-mcp-server 0.1.59 → 0.1.60

package/dist/composition.json

@@ -18,7 +18,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.59",
+      "version": "0.1.60",
       "license": "MIT"
     },
     {

package/node_modules/auth-store/README.md

@@ -25,6 +25,10 @@ const value = await store.get(); // "secret-value"
 await store.delete();
 ```
 
+Use `resolveSecretStoreBackend(options)` to select and validate the backend
+without constructing a store or reading credentials. Pass the returned backend
+explicitly when deferred operations must keep the same environment selection.
+
 Both built-in backends expose `store.withLock(operation, { signal, timeoutMs })`
 for transactions spanning a read, external operation and write. Independent
 instances and processes serialize the same encrypted file or Keychain

package/node_modules/auth-store/dist/create-secret-store.d.ts

@@ -1,2 +1,4 @@
-import type { CreateSecretStoreInput, CreateSecretStoreResult } from "./types.js";
+import type { CreateSecretStoreInput, CreateSecretStoreResult, StoreBackend } from "./types.js";
 export declare function createSecretStore(input: CreateSecretStoreInput): CreateSecretStoreResult;
+/** Select and validate a backend without constructing a store or accessing credentials. */
+export declare function resolveSecretStoreBackend(input: CreateSecretStoreInput): StoreBackend;

package/node_modules/auth-store/dist/create-secret-store.js

@@ -17,7 +17,7 @@ const storeFactories = {
     }
 };
 export function createSecretStore(input) {
-    const backend = resolveBackend(input);
+    const backend = resolveSecretStoreBackend(input);
     const platform = input.platform ?? process.platform;
     if (backend === "keychain" && platform !== MACOS_PLATFORM) {
         throw new Error(`Keychain backend is only supported on macOS. Current platform: ${platform}`);
@@ -25,7 +25,8 @@ export function createSecretStore(input) {
     const store = storeFactories[backend](input);
     return { backend, store };
 }
-function resolveBackend(input) {
+/** Select and validate a backend without constructing a store or accessing credentials. */
+export function resolveSecretStoreBackend(input) {
     const envVar = input.backendEnvVar ?? DEFAULT_BACKEND_ENV_VAR;
     const configuredBackend = input.backend ?? getOwnEnvValue(input.env, envVar) ?? getOwnEnvValue(process.env, envVar);
     const backend = configuredBackend?.trim();

package/node_modules/auth-store/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { createSecretStore } from "./create-secret-store.js";
+export { createSecretStore, resolveSecretStoreBackend } from "./create-secret-store.js";
 export { EncryptedFileStore } from "./encrypted-file-store.js";
 export { KeychainStore } from "./keychain-store.js";
 export type { SecretStoreLockOptions, SecretStoreLockFileSystem } from "./transaction-lock.js";

package/node_modules/auth-store/dist/index.js

@@ -1,4 +1,4 @@
-export { createSecretStore } from "./create-secret-store.js";
+export { createSecretStore, resolveSecretStoreBackend } from "./create-secret-store.js";
 export { EncryptedFileStore } from "./encrypted-file-store.js";
 export { KeychainStore } from "./keychain-store.js";
 export { key, MigratingSecretStore } from "./provider-store.js";

package/node_modules/mcp-oauth/README.md

@@ -64,6 +64,8 @@ aborting the original signal still cancels authorization.
 Native session and client persistence factories also capture file paths, salts,
 Keychain identities, lock locations and selected filesystem/command handles.
 Mutating these settings cannot redirect a later read or write.
+The factories resolve the selected backend environment variable once at creation;
+later environment changes cannot move a transaction between file and Keychain.
 
 `createJwksTokenVerifier(options)` accepts:
 

package/node_modules/mcp-oauth/dist/client/auth-store-session-store.js

@@ -1,7 +1,7 @@
 import { normalizeStoredOAuthClient } from "./client-registration.js";
 import crypto from "node:crypto";
 import path from "node:path";
-import { createSecretStore } from "auth-store";
+import { createSecretStore, resolveSecretStoreBackend } from "auth-store";
 import { canonicalizeResourceIndicator } from "../resource-indicator.js";
 const DEFAULT_FILE_SALT = "poe-code:mcp-oauth:v1";
 const DEFAULT_FILE_DIRECTORY = ".poe-code/mcp-oauth";
@@ -83,7 +83,7 @@ export function createAuthStoreClientStore(options, namespace) {
 }
 function snapshotPersistenceOptions(options) {
     return {
-        ...options,
+        ...options, backend: resolveSecretStoreBackend(options),
         ...(options.fileStore === undefined ? {} : { fileStore: { ...options.fileStore } }),
         ...(options.keychainStore === undefined ? {} : { keychainStore: { ...options.keychainStore,
                 ...(options.keychainStore.lock === undefined ? {} : { lock: { ...options.keychainStore.lock } }) } })

package/node_modules/tiny-mcp-client/dist/index.js

@@ -4526,7 +4526,7 @@ var storeFactories = {
   }
 };
 function createSecretStore(input) {
-  const backend = resolveBackend(input);
+  const backend = resolveSecretStoreBackend(input);
   const platform = input.platform ?? process.platform;
   if (backend === "keychain" && platform !== MACOS_PLATFORM) {
     throw new Error(`Keychain backend is only supported on macOS. Current platform: ${platform}`);
@@ -4534,7 +4534,7 @@ function createSecretStore(input) {
   const store = storeFactories[backend](input);
   return { backend, store };
 }
-function resolveBackend(input) {
+function resolveSecretStoreBackend(input) {
   const envVar = input.backendEnvVar ?? DEFAULT_BACKEND_ENV_VAR;
   const configuredBackend = input.backend ?? getOwnEnvValue(input.env, envVar) ?? getOwnEnvValue(process.env, envVar);
   const backend = configuredBackend?.trim();
@@ -4640,6 +4640,7 @@ function createAuthStoreClientStore(options, namespace) {
 function snapshotPersistenceOptions(options) {
   return {
     ...options,
+    backend: resolveSecretStoreBackend(options),
     ...options.fileStore === void 0 ? {} : { fileStore: { ...options.fileStore } },
     ...options.keychainStore === void 0 ? {} : { keychainStore: {
       ...options.keychainStore,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tiny-http-mcp-server",
-  "version": "0.1.59",
+  "version": "0.1.60",
   "description": "Minimal MCP server over HTTP built on tiny-stdio-mcp-server",
   "type": "module",
   "main": "dist/index.js",