toolcraft 0.0.343 → 0.0.344

package/composition.json

@@ -98,7 +98,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.68",
+      "version": "0.1.70",
       "license": "MIT"
     },
     {
@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.343",
+      "version": "0.0.344",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.343",
+      "version": "0.0.344",
       "license": "MIT"
     },
     {

package/dist/composition.json

@@ -98,7 +98,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.68",
+      "version": "0.1.70",
       "license": "MIT"
     },
     {
@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.343",
+      "version": "0.0.344",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.343",
+      "version": "0.0.344",
       "license": "MIT"
     },
     {

package/node_modules/tiny-http-mcp-server/dist/composition.json

@@ -18,7 +18,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.68",
+      "version": "0.1.70",
       "license": "MIT"
     },
     {

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/README.md

@@ -24,10 +24,15 @@ const verifier = createJwksTokenVerifier({
 
 ## Public API
 
+`OAuthError.is(value)` recognizes native token/challenge failures across separately
+bundled package copies while preserving the SDK diagnostic fields. Error names
+alone do not establish either native error type.
+
 - `createDefaultOAuthClientProvider(options)`: default MCP OAuth client provider with dynamic or static client registration.
 - `createOAuthClientProvider(options)`: lower-level provider constructor.
 - `createAuthStoreSessionStore(options)`: persisted OAuth session store backed by `auth-store`.
 - `createLoopbackAuthorizationSession(options)`: local callback server for browser authorization.
+- `OAuthAuthorizationError`: a callback denial with its original `error`, `errorDescription` and message for host observers. Use `OAuthAuthorizationError.is(value)` to recognize errors across separately bundled package copies.
 - `generateCodeVerifier()` and `generateCodeChallenge(...)`: PKCE helpers.
 - `normalizeStoredOAuthClient(value)`: normalize a saved client identity, full registration and ownership marker.
 - `normalizeOAuthScope(value)`: validate scope syntax and normalize its case-sensitive set.

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/loopback-authorization.d.ts

@@ -20,6 +20,14 @@ export interface LoopbackAuthorizationSession {
     waitForCode(authorizationUrl: string): Promise<string>;
     close(): void;
 }
+/** Authorization callback denial, retaining the provider diagnostic for host observers. */
+export declare class OAuthAuthorizationError extends Error {
+    readonly error: string;
+    readonly errorDescription: string;
+    /** Recognize errors from separately bundled copies of this package. */
+    static is(value: unknown): value is OAuthAuthorizationError;
+    constructor(error: string, errorDescription: string);
+}
 export declare function createLoopbackAuthorizationSession(options?: LoopbackAuthorizationOptions): Promise<LoopbackAuthorizationSession>;
 export declare function loopbackTarget(options: LoopbackAuthorizationOptions): {
     port: number;

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/loopback-authorization.js

@@ -1,5 +1,22 @@
 import http from "node:http";
 import { parseAuthorizationState } from "./authorization-state.js";
+const authorizationErrorBrand = Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
+/** Authorization callback denial, retaining the provider diagnostic for host observers. */
+export class OAuthAuthorizationError extends Error {
+    error;
+    errorDescription;
+    /** Recognize errors from separately bundled copies of this package. */
+    static is(value) {
+        return value instanceof Error && Object.getOwnPropertyDescriptor(value, authorizationErrorBrand)?.value === true;
+    }
+    constructor(error, errorDescription) {
+        super(`OAuth authorization failed: ${error} — ${errorDescription}`);
+        this.error = error;
+        this.errorDescription = errorDescription;
+        this.name = "OAuthAuthorizationError";
+        Object.defineProperty(this, authorizationErrorBrand, { value: true });
+    }
+}
 export async function createLoopbackAuthorizationSession(options = {}) {
     options.signal?.throwIfAborted();
     const timeoutMs = options.timeoutMs ?? 120_000;
@@ -144,7 +161,7 @@ function waitForAuthorizationCode(server, authorizationUrl, options, callbackPat
             try {
                 validateAuthorizationCallbackBinding(callbackParameters, expectedAuthorization);
                 if (callbackParameters.error !== null)
-                    throw createAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
+                    throw new OAuthAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
                 const code = validateAuthorizationCallbackParameters(callbackParameters, expectedAuthorization);
                 res.writeHead(200, { "Content-Type": "text/html" });
                 res.end(buildSuccessPage(options.landingPage));
@@ -167,7 +184,7 @@ function waitForAuthorizationCode(server, authorizationUrl, options, callbackPat
                     throw new Error("OAuth callback missing authorization code");
                 validateAuthorizationCallbackBinding(callbackParameters, expectedAuthorization);
                 if (callbackParameters.error !== null)
-                    throw createAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
+                    throw new OAuthAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
                 const code = validateAuthorizationCallbackParameters(callbackParameters, expectedAuthorization);
                 settle(() => resolve(code));
             }).catch(error => settle(() => reject(error)));
@@ -244,9 +261,6 @@ function validateAuthorizationCallbackBinding(callback, expected) {
         throw new Error("OAuth callback issuer mismatch");
     }
 }
-function createAuthorizationError(error, description) {
-    return new Error(`OAuth authorization failed: ${error} — ${description}`);
-}
 function escapeHtml(text) {
     return text
         .replaceAll("&", "&")

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/token-endpoint.d.ts

@@ -5,6 +5,8 @@ interface OAuthErrorShape {
     error_uri?: string;
 }
 export declare class OAuthError extends Error {
+    /** Recognize errors from separately bundled copies of this package. */
+    static is(value: unknown): value is OAuthError;
     readonly error: string;
     readonly errorDescription: string | undefined;
     readonly errorUri: string | undefined;

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/token-endpoint.js

@@ -4,7 +4,12 @@ import { readBoundedResponseText } from "../http-response.js";
 import { fetchMcpResponse } from "../http-fetch.js";
 import { normalizeOAuthScope } from "./scope.js";
 const MAX_JS_DATE_MS = 8_640_000_000_000_000;
+const oauthErrorBrand = Symbol.for("poe-platform.mcp-oauth.OAuthError");
 export class OAuthError extends Error {
+    /** Recognize errors from separately bundled copies of this package. */
+    static is(value) {
+        return value instanceof Error && Object.getOwnPropertyDescriptor(value, oauthErrorBrand)?.value === true;
+    }
     error;
     errorDescription;
     errorUri;
@@ -20,6 +25,7 @@ export class OAuthError extends Error {
         const uri = Object.hasOwn(shape, "error_uri") ? shape.error_uri : undefined;
         super(description ?? (outcomeKnown ? shape.error : `OAuth HTTP response did not contain a valid error (HTTP ${status})`));
         this.name = "OAuthError";
+        Object.defineProperty(this, oauthErrorBrand, { value: true });
         this.error = shape.error;
         this.errorDescription = description;
         this.errorUri = uri;

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/index.d.ts

@@ -7,7 +7,7 @@ export { createResourceBoundOAuthStores } from "./client/resource-bound-store.js
 export type { ResourceBoundOAuthStores } from "./client/resource-bound-store.js";
 export { parseOAuthClientRegistration, normalizeStoredOAuthClient } from "./client/client-registration.js";
 export { createDefaultOAuthClientProvider, createOAuthClientProvider, } from "./client/default-oauth-client-provider.js";
-export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, } from "./client/loopback-authorization.js";
+export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, OAuthAuthorizationError, } from "./client/loopback-authorization.js";
 export { generateCodeChallenge, generateCodeVerifier, } from "./client/pkce.js";
 export { OAuthError, } from "./client/token-endpoint.js";
 export { canonicalizeResourceIndicator, } from "./resource-indicator.js";

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/index.js

@@ -5,7 +5,7 @@ export { createAuthStoreSessionStore, } from "./client/auth-store-session-store.
 export { createResourceBoundOAuthStores } from "./client/resource-bound-store.js";
 export { parseOAuthClientRegistration, normalizeStoredOAuthClient } from "./client/client-registration.js";
 export { createDefaultOAuthClientProvider, createOAuthClientProvider, } from "./client/default-oauth-client-provider.js";
-export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, } from "./client/loopback-authorization.js";
+export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, OAuthAuthorizationError, } from "./client/loopback-authorization.js";
 export { generateCodeChallenge, generateCodeVerifier, } from "./client/pkce.js";
 export { OAuthError, } from "./client/token-endpoint.js";
 export { canonicalizeResourceIndicator, } from "./resource-indicator.js";

package/node_modules/tiny-http-mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tiny-http-mcp-server",
-  "version": "0.1.68",
+  "version": "0.1.70",
   "description": "Minimal MCP server over HTTP built on tiny-stdio-mcp-server",
   "type": "module",
   "main": "dist/index.js",

package/node_modules/tiny-mcp-client/dist/index.js

@@ -3516,6 +3516,22 @@ function getOwnEntry(record2, key2) {
 }
 
 // ../mcp-oauth/dist/client/loopback-authorization.js
+var authorizationErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
+var OAuthAuthorizationError = class extends Error {
+  error;
+  errorDescription;
+  /** Recognize errors from separately bundled copies of this package. */
+  static is(value) {
+    return value instanceof Error && Object.getOwnPropertyDescriptor(value, authorizationErrorBrand)?.value === true;
+  }
+  constructor(error, errorDescription) {
+    super(`OAuth authorization failed: ${error} \u2014 ${errorDescription}`);
+    this.error = error;
+    this.errorDescription = errorDescription;
+    this.name = "OAuthAuthorizationError";
+    Object.defineProperty(this, authorizationErrorBrand, { value: true });
+  }
+};
 async function createLoopbackAuthorizationSession(options = {}) {
   options.signal?.throwIfAborted();
   const timeoutMs = options.timeoutMs ?? 12e4;
@@ -3663,7 +3679,7 @@ function waitForAuthorizationCode(server, authorizationUrl, options, callbackPat
       try {
         validateAuthorizationCallbackBinding(callbackParameters, expectedAuthorization);
         if (callbackParameters.error !== null)
-          throw createAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
+          throw new OAuthAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
         const code = validateAuthorizationCallbackParameters(callbackParameters, expectedAuthorization);
         res.writeHead(200, { "Content-Type": "text/html" });
         res.end(buildSuccessPage(options.landingPage));
@@ -3685,7 +3701,7 @@ function waitForAuthorizationCode(server, authorizationUrl, options, callbackPat
           throw new Error("OAuth callback missing authorization code");
         validateAuthorizationCallbackBinding(callbackParameters, expectedAuthorization);
         if (callbackParameters.error !== null)
-          throw createAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
+          throw new OAuthAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
         const code = validateAuthorizationCallbackParameters(callbackParameters, expectedAuthorization);
         settle(() => resolve(code));
       }).catch((error) => settle(() => reject(error)));
@@ -3754,9 +3770,6 @@ function validateAuthorizationCallbackBinding(callback, expected) {
     throw new Error("OAuth callback issuer mismatch");
   }
 }
-function createAuthorizationError(error, description) {
-  return new Error(`OAuth authorization failed: ${error} \u2014 ${description}`);
-}
 function escapeHtml(text) {
   return text.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
 }
@@ -5038,7 +5051,12 @@ async function readBoundedResponseText(response, maxBytes, readers, signal) {
 
 // ../mcp-oauth/dist/client/token-endpoint.js
 var MAX_JS_DATE_MS2 = 864e13;
+var oauthErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.mcp-oauth.OAuthError");
 var OAuthError = class extends Error {
+  /** Recognize errors from separately bundled copies of this package. */
+  static is(value) {
+    return value instanceof Error && Object.getOwnPropertyDescriptor(value, oauthErrorBrand)?.value === true;
+  }
   error;
   errorDescription;
   errorUri;
@@ -5054,6 +5072,7 @@ var OAuthError = class extends Error {
     const uri = Object.hasOwn(shape, "error_uri") ? shape.error_uri : void 0;
     super(description ?? (outcomeKnown ? shape.error : `OAuth HTTP response did not contain a valid error (HTTP ${status})`));
     this.name = "OAuthError";
+    Object.defineProperty(this, oauthErrorBrand, { value: true });
     this.error = shape.error;
     this.errorDescription = description;
     this.errorUri = uri;

package/node_modules/tiny-stdio-mcp-server/dist/composition.json

@@ -8,7 +8,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.343",
+      "version": "0.0.344",
       "license": "MIT"
     }
   ]

package/node_modules/toolcraft-schema/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft-schema",
-  "version": "0.0.343",
+  "version": "0.0.344",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft",
-  "version": "0.0.343",
+  "version": "0.0.344",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",
@@ -158,7 +158,7 @@
     "yaml"
   ],
   "optionalDependencies": {
-    "toolcraft-schema": "0.0.343",
+    "toolcraft-schema": "0.0.344",
     "toolcraft-design": "*",
     "@poe-code/frontmatter": "*",
     "@poe-code/agent-mcp-config": "*",