toolcraft 0.0.342 → 0.0.344

package/composition.json

@@ -98,7 +98,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.65",
+      "version": "0.1.70",
       "license": "MIT"
     },
     {
@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.342",
+      "version": "0.0.344",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.342",
+      "version": "0.0.344",
       "license": "MIT"
     },
     {

package/dist/composition.json

@@ -98,7 +98,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.65",
+      "version": "0.1.70",
       "license": "MIT"
     },
     {
@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.342",
+      "version": "0.0.344",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.342",
+      "version": "0.0.344",
       "license": "MIT"
     },
     {

package/node_modules/tiny-http-mcp-server/dist/composition.json

@@ -18,7 +18,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.65",
+      "version": "0.1.70",
       "license": "MIT"
     },
     {

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/README.md

@@ -24,13 +24,19 @@ const verifier = createJwksTokenVerifier({
 
 ## Public API
 
+`OAuthError.is(value)` recognizes native token/challenge failures across separately
+bundled package copies while preserving the SDK diagnostic fields. Error names
+alone do not establish either native error type.
+
 - `createDefaultOAuthClientProvider(options)`: default MCP OAuth client provider with dynamic or static client registration.
 - `createOAuthClientProvider(options)`: lower-level provider constructor.
 - `createAuthStoreSessionStore(options)`: persisted OAuth session store backed by `auth-store`.
 - `createLoopbackAuthorizationSession(options)`: local callback server for browser authorization.
+- `OAuthAuthorizationError`: a callback denial with its original `error`, `errorDescription` and message for host observers. Use `OAuthAuthorizationError.is(value)` to recognize errors across separately bundled package copies.
 - `generateCodeVerifier()` and `generateCodeChallenge(...)`: PKCE helpers.
 - `normalizeStoredOAuthClient(value)`: normalize a saved client identity, full registration and ownership marker.
 - `normalizeOAuthScope(value)`: validate scope syntax and normalize its case-sensitive set.
+- `waitForOAuthOperation(promise, signal?)`: settle the caller on cancellation while continuing to observe host completion.
 - `canonicalizeResourceIndicator(value)`: resource indicator canonicalization.
 - `createJwksTokenVerifier(options)`: JWKS-backed access-token verifier for MCP servers.
 - `OAuthError`: OAuth HTTP error type with status, retryability and known-outcome fields.
@@ -98,7 +104,8 @@ Native provider calls capture request option handles before host work. Unauthori
 handling also owns complete discovery metadata, presented grant values, rejected
 request headers and the selected challenge error before reading persistence.
 A browser callback cannot redirect a later code exchange by changing caller
-metadata. Explicit authentication owns metadata when lazy discovery returns;
+metadata. Metadata loaded from a host session store is copied before clock or
+fetch callbacks, retaining the original refresh endpoint and persisted extensions. Explicit authentication owns metadata when lazy discovery returns;
 the selected discovery method retains its original receiver and live host state.
 
 Provider request inputs accept an optional `signal`. It reaches callback waits,

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/default-oauth-client-provider.js

@@ -593,12 +593,13 @@ function normalizeLoadedSession(session) {
     if (session === null) {
         return null;
     }
+    const discovery = structuredClone(session.discovery);
     const refreshState = getOwnEntry(session, "refreshState");
     if (refreshState !== undefined && (refreshState !== "pending" || getOwnEntry(session, "tokens") !== undefined))
         throw new Error("Stored OAuth refresh state is invalid");
     const client = normalizeStoredOAuthClient(getOwnEntry(session, "client"));
     if (client === null) {
-        return { ...session, client: { clientId: "" }, tokens: undefined };
+        return { ...session, discovery, client: { clientId: "" }, tokens: undefined };
     }
     const tokens = normalizeStoredTokens(getOwnEntry(session, "tokens"));
     if (tokens !== undefined) {
@@ -609,7 +610,7 @@ function normalizeLoadedSession(session) {
             throw new Error("Stored OAuth access token is not a valid HTTP header value");
         }
     }
-    return { ...session, client, tokens };
+    return { ...session, discovery, client, tokens };
 }
 function normalizeImportedTokens(value, now) {
     if (!isObjectRecord(value))

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/loopback-authorization.d.ts

@@ -20,6 +20,14 @@ export interface LoopbackAuthorizationSession {
     waitForCode(authorizationUrl: string): Promise<string>;
     close(): void;
 }
+/** Authorization callback denial, retaining the provider diagnostic for host observers. */
+export declare class OAuthAuthorizationError extends Error {
+    readonly error: string;
+    readonly errorDescription: string;
+    /** Recognize errors from separately bundled copies of this package. */
+    static is(value: unknown): value is OAuthAuthorizationError;
+    constructor(error: string, errorDescription: string);
+}
 export declare function createLoopbackAuthorizationSession(options?: LoopbackAuthorizationOptions): Promise<LoopbackAuthorizationSession>;
 export declare function loopbackTarget(options: LoopbackAuthorizationOptions): {
     port: number;

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/loopback-authorization.js

@@ -1,5 +1,22 @@
 import http from "node:http";
 import { parseAuthorizationState } from "./authorization-state.js";
+const authorizationErrorBrand = Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
+/** Authorization callback denial, retaining the provider diagnostic for host observers. */
+export class OAuthAuthorizationError extends Error {
+    error;
+    errorDescription;
+    /** Recognize errors from separately bundled copies of this package. */
+    static is(value) {
+        return value instanceof Error && Object.getOwnPropertyDescriptor(value, authorizationErrorBrand)?.value === true;
+    }
+    constructor(error, errorDescription) {
+        super(`OAuth authorization failed: ${error} — ${errorDescription}`);
+        this.error = error;
+        this.errorDescription = errorDescription;
+        this.name = "OAuthAuthorizationError";
+        Object.defineProperty(this, authorizationErrorBrand, { value: true });
+    }
+}
 export async function createLoopbackAuthorizationSession(options = {}) {
     options.signal?.throwIfAborted();
     const timeoutMs = options.timeoutMs ?? 120_000;
@@ -144,7 +161,7 @@ function waitForAuthorizationCode(server, authorizationUrl, options, callbackPat
             try {
                 validateAuthorizationCallbackBinding(callbackParameters, expectedAuthorization);
                 if (callbackParameters.error !== null)
-                    throw createAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
+                    throw new OAuthAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
                 const code = validateAuthorizationCallbackParameters(callbackParameters, expectedAuthorization);
                 res.writeHead(200, { "Content-Type": "text/html" });
                 res.end(buildSuccessPage(options.landingPage));
@@ -167,7 +184,7 @@ function waitForAuthorizationCode(server, authorizationUrl, options, callbackPat
                     throw new Error("OAuth callback missing authorization code");
                 validateAuthorizationCallbackBinding(callbackParameters, expectedAuthorization);
                 if (callbackParameters.error !== null)
-                    throw createAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
+                    throw new OAuthAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
                 const code = validateAuthorizationCallbackParameters(callbackParameters, expectedAuthorization);
                 settle(() => resolve(code));
             }).catch(error => settle(() => reject(error)));
@@ -244,9 +261,6 @@ function validateAuthorizationCallbackBinding(callback, expected) {
         throw new Error("OAuth callback issuer mismatch");
     }
 }
-function createAuthorizationError(error, description) {
-    return new Error(`OAuth authorization failed: ${error} — ${description}`);
-}
 function escapeHtml(text) {
     return text
         .replaceAll("&", "&")

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/token-endpoint.d.ts

@@ -5,6 +5,8 @@ interface OAuthErrorShape {
     error_uri?: string;
 }
 export declare class OAuthError extends Error {
+    /** Recognize errors from separately bundled copies of this package. */
+    static is(value: unknown): value is OAuthError;
     readonly error: string;
     readonly errorDescription: string | undefined;
     readonly errorUri: string | undefined;

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/token-endpoint.js

@@ -4,7 +4,12 @@ import { readBoundedResponseText } from "../http-response.js";
 import { fetchMcpResponse } from "../http-fetch.js";
 import { normalizeOAuthScope } from "./scope.js";
 const MAX_JS_DATE_MS = 8_640_000_000_000_000;
+const oauthErrorBrand = Symbol.for("poe-platform.mcp-oauth.OAuthError");
 export class OAuthError extends Error {
+    /** Recognize errors from separately bundled copies of this package. */
+    static is(value) {
+        return value instanceof Error && Object.getOwnPropertyDescriptor(value, oauthErrorBrand)?.value === true;
+    }
     error;
     errorDescription;
     errorUri;
@@ -20,6 +25,7 @@ export class OAuthError extends Error {
         const uri = Object.hasOwn(shape, "error_uri") ? shape.error_uri : undefined;
         super(description ?? (outcomeKnown ? shape.error : `OAuth HTTP response did not contain a valid error (HTTP ${status})`));
         this.name = "OAuthError";
+        Object.defineProperty(this, oauthErrorBrand, { value: true });
         this.error = shape.error;
         this.errorDescription = description;
         this.errorUri = uri;

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/index.d.ts

@@ -1,4 +1,5 @@
 export { normalizeOAuthScope } from "./client/scope.js";
+export { waitForOAuthOperation } from "./client/cancellable-operation.js";
 export { parseOAuthTokenGrant } from "./client/token-grant.js";
 export type { OAuthTokenGrantImportOptions } from "./client/token-grant.js";
 export { createAuthStoreSessionStore, } from "./client/auth-store-session-store.js";
@@ -6,7 +7,7 @@ export { createResourceBoundOAuthStores } from "./client/resource-bound-store.js
 export type { ResourceBoundOAuthStores } from "./client/resource-bound-store.js";
 export { parseOAuthClientRegistration, normalizeStoredOAuthClient } from "./client/client-registration.js";
 export { createDefaultOAuthClientProvider, createOAuthClientProvider, } from "./client/default-oauth-client-provider.js";
-export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, } from "./client/loopback-authorization.js";
+export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, OAuthAuthorizationError, } from "./client/loopback-authorization.js";
 export { generateCodeChallenge, generateCodeVerifier, } from "./client/pkce.js";
 export { OAuthError, } from "./client/token-endpoint.js";
 export { canonicalizeResourceIndicator, } from "./resource-indicator.js";

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/index.js

@@ -1,10 +1,11 @@
 export { normalizeOAuthScope } from "./client/scope.js";
+export { waitForOAuthOperation } from "./client/cancellable-operation.js";
 export { parseOAuthTokenGrant } from "./client/token-grant.js";
 export { createAuthStoreSessionStore, } from "./client/auth-store-session-store.js";
 export { createResourceBoundOAuthStores } from "./client/resource-bound-store.js";
 export { parseOAuthClientRegistration, normalizeStoredOAuthClient } from "./client/client-registration.js";
 export { createDefaultOAuthClientProvider, createOAuthClientProvider, } from "./client/default-oauth-client-provider.js";
-export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, } from "./client/loopback-authorization.js";
+export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, OAuthAuthorizationError, } from "./client/loopback-authorization.js";
 export { generateCodeChallenge, generateCodeVerifier, } from "./client/pkce.js";
 export { OAuthError, } from "./client/token-endpoint.js";
 export { canonicalizeResourceIndicator, } from "./resource-indicator.js";

package/node_modules/tiny-http-mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tiny-http-mcp-server",
-  "version": "0.1.65",
+  "version": "0.1.70",
   "description": "Minimal MCP server over HTTP built on tiny-stdio-mcp-server",
   "type": "module",
   "main": "dist/index.js",

package/node_modules/tiny-mcp-client/README.md

@@ -101,7 +101,7 @@ const transport = new HttpTransport({
 });
 ```
 
-You can also call `discoverOAuthMetadata(resourceUrl, options)` directly, or instantiate `OAuthMetadataDiscovery` with a custom `fetch` implementation and shared cache. Lookup options accept `signal`; cancellation stops metadata fetches and body reads without trying another discovery candidate.
+You can also call `discoverOAuthMetadata(resourceUrl, options)` directly, or instantiate `OAuthMetadataDiscovery` with a custom `fetch` implementation and shared cache. An explicit `resourceMetadataUrl` requires fresh network discovery without reading either cache; validated results still populate both caches. Lookup options accept `signal`; cancellation stops metadata fetches and body reads without trying another discovery candidate. It also settles while shared-cache reads, writes or eviction wait. Host cache work may finish afterward; its late rejection remains observed, and canceled discovery does not start another candidate.
 
 OAuth provider inputs receive the originating request's `signal`, covering header authorization and unauthorized handling. Modern request cancellation stops its OAuth work while leaving other requests usable; transport disposal cancels all pending OAuth operations. The default provider propagates this signal to callback, registration and token work. Custom providers must observe it for their own operations.
 

package/node_modules/tiny-mcp-client/dist/index.js

@@ -3405,6 +3405,24 @@ function normalizeOAuthScope(scope) {
   return normalized || void 0;
 }
 
+// ../mcp-oauth/dist/client/cancellable-operation.js
+async function waitForOAuthOperation(operation, signal) {
+  if (signal === void 0)
+    return operation;
+  let abort;
+  try {
+    return await new Promise((resolve, reject) => {
+      abort = () => reject(signal.reason);
+      signal.addEventListener("abort", abort, { once: true });
+      operation.then(resolve, reject);
+      if (signal.aborted)
+        abort();
+    });
+  } finally {
+    signal.removeEventListener("abort", abort);
+  }
+}
+
 // ../mcp-oauth/dist/client/bounded-json.js
 function copyBoundedOAuthJson(value, message) {
   const invalid = () => new Error(message);
@@ -3498,6 +3516,22 @@ function getOwnEntry(record2, key2) {
 }
 
 // ../mcp-oauth/dist/client/loopback-authorization.js
+var authorizationErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
+var OAuthAuthorizationError = class extends Error {
+  error;
+  errorDescription;
+  /** Recognize errors from separately bundled copies of this package. */
+  static is(value) {
+    return value instanceof Error && Object.getOwnPropertyDescriptor(value, authorizationErrorBrand)?.value === true;
+  }
+  constructor(error, errorDescription) {
+    super(`OAuth authorization failed: ${error} \u2014 ${errorDescription}`);
+    this.error = error;
+    this.errorDescription = errorDescription;
+    this.name = "OAuthAuthorizationError";
+    Object.defineProperty(this, authorizationErrorBrand, { value: true });
+  }
+};
 async function createLoopbackAuthorizationSession(options = {}) {
   options.signal?.throwIfAborted();
   const timeoutMs = options.timeoutMs ?? 12e4;
@@ -3645,7 +3679,7 @@ function waitForAuthorizationCode(server, authorizationUrl, options, callbackPat
       try {
         validateAuthorizationCallbackBinding(callbackParameters, expectedAuthorization);
         if (callbackParameters.error !== null)
-          throw createAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
+          throw new OAuthAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
         const code = validateAuthorizationCallbackParameters(callbackParameters, expectedAuthorization);
         res.writeHead(200, { "Content-Type": "text/html" });
         res.end(buildSuccessPage(options.landingPage));
@@ -3667,7 +3701,7 @@ function waitForAuthorizationCode(server, authorizationUrl, options, callbackPat
           throw new Error("OAuth callback missing authorization code");
         validateAuthorizationCallbackBinding(callbackParameters, expectedAuthorization);
         if (callbackParameters.error !== null)
-          throw createAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
+          throw new OAuthAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
         const code = validateAuthorizationCallbackParameters(callbackParameters, expectedAuthorization);
         settle(() => resolve(code));
       }).catch((error) => settle(() => reject(error)));
@@ -3736,9 +3770,6 @@ function validateAuthorizationCallbackBinding(callback, expected) {
     throw new Error("OAuth callback issuer mismatch");
   }
 }
-function createAuthorizationError(error, description) {
-  return new Error(`OAuth authorization failed: ${error} \u2014 ${description}`);
-}
 function escapeHtml(text) {
   return text.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
 }
@@ -5020,7 +5051,12 @@ async function readBoundedResponseText(response, maxBytes, readers, signal) {
 
 // ../mcp-oauth/dist/client/token-endpoint.js
 var MAX_JS_DATE_MS2 = 864e13;
+var oauthErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.mcp-oauth.OAuthError");
 var OAuthError = class extends Error {
+  /** Recognize errors from separately bundled copies of this package. */
+  static is(value) {
+    return value instanceof Error && Object.getOwnPropertyDescriptor(value, oauthErrorBrand)?.value === true;
+  }
   error;
   errorDescription;
   errorUri;
@@ -5036,6 +5072,7 @@ var OAuthError = class extends Error {
     const uri = Object.hasOwn(shape, "error_uri") ? shape.error_uri : void 0;
     super(description ?? (outcomeKnown ? shape.error : `OAuth HTTP response did not contain a valid error (HTTP ${status})`));
     this.name = "OAuthError";
+    Object.defineProperty(this, oauthErrorBrand, { value: true });
     this.error = shape.error;
     this.errorDescription = description;
     this.errorUri = uri;
@@ -5204,24 +5241,6 @@ function normalizeBearerTokenType(value) {
   return value.toLowerCase() === "bearer" ? "Bearer" : null;
 }
 
-// ../mcp-oauth/dist/client/cancellable-operation.js
-async function waitForOAuthOperation(operation, signal) {
-  if (signal === void 0)
-    return operation;
-  let abort;
-  try {
-    return await new Promise((resolve, reject) => {
-      abort = () => reject(signal.reason);
-      signal.addEventListener("abort", abort, { once: true });
-      operation.then(resolve, reject);
-      if (signal.aborted)
-        abort();
-    });
-  } finally {
-    signal.removeEventListener("abort", abort);
-  }
-}
-
 // ../mcp-oauth/dist/client/session-transaction.js
 var queues = /* @__PURE__ */ new WeakMap();
 async function withOAuthSessionTransaction(store, resource, operation, options = {}) {
@@ -5837,12 +5856,13 @@ function normalizeLoadedSession(session) {
   if (session === null) {
     return null;
   }
+  const discovery = structuredClone(session.discovery);
   const refreshState = getOwnEntry6(session, "refreshState");
   if (refreshState !== void 0 && (refreshState !== "pending" || getOwnEntry6(session, "tokens") !== void 0))
     throw new Error("Stored OAuth refresh state is invalid");
   const client = normalizeStoredOAuthClient(getOwnEntry6(session, "client"));
   if (client === null) {
-    return { ...session, client: { clientId: "" }, tokens: void 0 };
+    return { ...session, discovery, client: { clientId: "" }, tokens: void 0 };
   }
   const tokens = normalizeStoredTokens(getOwnEntry6(session, "tokens"));
   if (tokens !== void 0) {
@@ -5852,7 +5872,7 @@ function normalizeLoadedSession(session) {
       throw new Error("Stored OAuth access token is not a valid HTTP header value");
     }
   }
-  return { ...session, client, tokens };
+  return { ...session, discovery, client, tokens };
 }
 function normalizeImportedTokens(value, now) {
   if (!isObjectRecord3(value))
@@ -6423,6 +6443,20 @@ function validateCachedDiscovery(value, resource) {
     authorizationServerMetadata
   });
 }
+async function waitForCache(operation, signal) {
+  if (signal === void 0) return operation;
+  let abort;
+  try {
+    return await new Promise((resolve, reject) => {
+      abort = () => reject(signal.reason);
+      signal.addEventListener("abort", abort, { once: true });
+      Promise.resolve(operation).then(resolve, reject);
+      if (signal.aborted) abort();
+    });
+  } finally {
+    signal.removeEventListener("abort", abort);
+  }
+}
 var OAuthMetadataDiscovery = class {
   fetchImpl;
   cache;
@@ -6459,7 +6493,7 @@ var OAuthMetadataDiscovery = class {
     if (memoryCachedResult !== void 0 && resourceMetadataUrl === void 0) {
       return structuredClone(memoryCachedResult);
     }
-    const sharedCachedResult = await this.cache?.get(cacheKey);
+    const sharedCachedResult = resourceMetadataUrl === void 0 ? await waitForCache(this.cache?.get(cacheKey), signal) : void 0;
     signal?.throwIfAborted();
     if (sharedCachedResult !== null && sharedCachedResult !== void 0 && resourceMetadataUrl === void 0) {
       try {
@@ -6467,7 +6501,7 @@ var OAuthMetadataDiscovery = class {
         this.memoryCache.set(cacheKey, structuredClone(result));
         return result;
       } catch {
-        await this.cache?.delete?.(cacheKey);
+        await waitForCache(this.cache?.delete?.(cacheKey), signal);
       }
     }
     const { location: resourceMetadataLocation, metadata: resourceMetadata } = await this.discoverProtectedResource(cacheKey, resourceMetadataUrl, signal);
@@ -6490,7 +6524,7 @@ var OAuthMetadataDiscovery = class {
             authorizationServerMetadata
           };
           this.memoryCache.set(cacheKey, structuredClone(result));
-          await this.cache?.set(cacheKey, structuredClone(result));
+          await waitForCache(this.cache?.set(cacheKey, structuredClone(result)), signal);
           return result;
         } catch (error) {
           signal?.throwIfAborted();

package/node_modules/tiny-stdio-mcp-server/dist/composition.json

@@ -8,7 +8,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.342",
+      "version": "0.0.344",
       "license": "MIT"
     }
   ]

package/node_modules/toolcraft-schema/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft-schema",
-  "version": "0.0.342",
+  "version": "0.0.344",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft",
-  "version": "0.0.342",
+  "version": "0.0.344",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",
@@ -158,7 +158,7 @@
     "yaml"
   ],
   "optionalDependencies": {
-    "toolcraft-schema": "0.0.342",
+    "toolcraft-schema": "0.0.344",
     "toolcraft-design": "*",
     "@poe-code/frontmatter": "*",
     "@poe-code/agent-mcp-config": "*",