toolcraft 0.0.309 → 0.0.311

package/node_modules/tiny-mcp-client/dist/index.d.ts

@@ -20,11 +20,31 @@ interface McpSubscription {
     cancel(): void;
 }
 
+interface SecretStoreLockFileSystem {
+    mkdir(path: string, options?: {
+        recursive?: boolean;
+        mode?: number;
+    }): Promise<unknown>;
+    readdir(path: string): Promise<string[]>;
+    readFile(path: string, encoding: BufferEncoding): Promise<string>;
+    writeFile(path: string, value: string, options: {
+        encoding: BufferEncoding;
+        flag: string;
+        mode: number;
+    }): Promise<void>;
+    rename(from: string, to: string): Promise<void>;
+    unlink(path: string): Promise<void>;
+    lstat(path: string): Promise<{
+        isSymbolicLink(): boolean;
+    }>;
+}
+
 interface MachineIdentity {
     hostname: string;
     username: string;
 }
 interface EncryptedFileStoreFileSystem {
+    readdir?(path: string): Promise<string[]>;
     readFile(path: string, encoding: BufferEncoding): Promise<string>;
     writeFile(path: string, data: string | NodeJS.ArrayBufferView, options?: {
         encoding?: BufferEncoding;
@@ -65,6 +85,10 @@ interface KeychainStoreInput {
     runCommand?: KeychainCommandRunner;
     service: string;
     account: string;
+    lock?: {
+        fs?: SecretStoreLockFileSystem;
+        directory?: string;
+    };
 }
 
 type StoreBackend = "file" | "keychain";
@@ -110,7 +134,7 @@ interface OAuthClientProvider {
         headers: Headers;
         fetch: OAuthMetadataFetch;
         signal?: AbortSignal;
-    }): Promise<void> | void;
+    }): Promise<StoredOAuthTokens | void> | StoredOAuthTokens | void;
     handleUnauthorized(input: {
         requestUrl: URL;
         response: Response;
@@ -118,6 +142,10 @@ interface OAuthClientProvider {
         discovery: OAuthDiscoveryResult;
         fetch: OAuthMetadataFetch;
         signal?: AbortSignal;
+        /** Headers actually attached to this rejected request. */
+        requestHeaders?: Headers;
+        /** Owned snapshot returned when this request was authorized, or null if absent. */
+        presentedTokens?: StoredOAuthTokens | null;
     }): Promise<{
         action: "retry";
     } | {
@@ -151,6 +179,8 @@ interface StoredOAuthSession {
         clientSecret?: string;
     };
     tokens?: StoredOAuthTokens;
+    /** A refresh was begun; its winning response may not have been persisted. */
+    refreshState?: "pending";
     discovery: {
         resourceMetadataUrl: string;
         resourceMetadata: Record<string, unknown>;
@@ -161,6 +191,11 @@ interface OAuthSessionStore {
     load(resource: string): Promise<StoredOAuthSession | null>;
     save(resource: string, session: StoredOAuthSession): Promise<void>;
     clear(resource: string): Promise<void>;
+    /** Backend-wide lock covering a complete read/redeem/write transaction. */
+    withLock?<T>(resource: string, operation: () => Promise<T>, options: {
+        signal?: AbortSignal;
+        timeoutMs: number;
+    }): Promise<T>;
 }
 interface DefaultOAuthClientProviderOptions {
     client: {
@@ -176,6 +211,8 @@ interface DefaultOAuthClientProviderOptions {
     };
     /** Disable interactive authorization while allowing cached tokens and silent refresh. */
     allowInteractive?: boolean;
+    /** Maximum wait to acquire a session transaction lock (default 30,000 ms). */
+    sessionLockTimeoutMs?: number;
     /** Import an existing grant for one resource. Persisted sessions take precedence. */
     initialGrant?: {
         resource: string;
@@ -649,6 +686,7 @@ declare class HttpTransport implements McpTransport {
     private readonly oauthMetadataDiscovery;
     private readonly inFlightFetchAbortControllers;
     private readonly inFlightOAuthAbortControllers;
+    private readonly oauthRequestTokens;
     private readonly openResponseReaders;
     private readonly modernRequests;
     private modernMode;