toolcraft 0.0.343 → 0.0.345

package/composition.json

@@ -98,7 +98,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.68",
+      "version": "0.1.71",
       "license": "MIT"
     },
     {
@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.343",
+      "version": "0.0.345",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.343",
+      "version": "0.0.345",
       "license": "MIT"
     },
     {

package/dist/composition.json

@@ -98,7 +98,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.68",
+      "version": "0.1.71",
       "license": "MIT"
     },
     {
@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.343",
+      "version": "0.0.345",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.343",
+      "version": "0.0.345",
       "license": "MIT"
     },
     {

package/node_modules/tiny-http-mcp-server/dist/composition.json

@@ -18,7 +18,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.68",
+      "version": "0.1.71",
       "license": "MIT"
     },
     {

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/README.md

@@ -24,10 +24,15 @@ const verifier = createJwksTokenVerifier({
 
 ## Public API
 
+`OAuthError.is(value)` recognizes native token/challenge failures across separately
+bundled package copies while preserving the SDK diagnostic fields. Error names
+alone do not establish either native error type.
+
 - `createDefaultOAuthClientProvider(options)`: default MCP OAuth client provider with dynamic or static client registration.
 - `createOAuthClientProvider(options)`: lower-level provider constructor.
 - `createAuthStoreSessionStore(options)`: persisted OAuth session store backed by `auth-store`.
 - `createLoopbackAuthorizationSession(options)`: local callback server for browser authorization.
+- `OAuthAuthorizationError`: a callback denial with its original `error`, `errorDescription` and message for host observers. Use `OAuthAuthorizationError.is(value)` to recognize errors across separately bundled package copies.
 - `generateCodeVerifier()` and `generateCodeChallenge(...)`: PKCE helpers.
 - `normalizeStoredOAuthClient(value)`: normalize a saved client identity, full registration and ownership marker.
 - `normalizeOAuthScope(value)`: validate scope syntax and normalize its case-sensitive set.
@@ -86,14 +91,21 @@ later environment changes cannot move a transaction between file and Keychain.
 Fixed redirects support `localhost`, `127.0.0.1`, and `::1` over HTTP. Their
 exact spelling, port, path and query are preserved through registration,
 authorization and code exchange. Credentials, fragments, port zero and reserved
-OAuth callback query parameters are rejected before binding a listener.
+OAuth callback query parameters, including `error_uri`, are rejected before binding a listener.
 `createDefaultOAuthClientProvider` also checks the configured redirect before
 creating the provider. Imported tokens that cannot be sent as HTTP header
 values fail with diagnostics that omit their contents. Omit
 `redirectUri` to allocate a random loopback port. Standalone callback sessions
-accept the same `redirectUri`, `signal` and `timeoutMs` options. Cancellation,
+accept the same `redirectUri`, `signal` and `timeoutMs` options. They capture configuration,
+landing-page data and selected callbacks before invoking a host listener factory;
+original signals and selected callback receivers/live method state remain active. Cancellation,
 timeout and explicit close settle pending code waits and release listeners.
-Always close a successful standalone session in `finally`.
+Always close a standalone session in `finally`. Failed callback responses declare
+plain UTF-8 text with content sniffing disabled; provider markup remains literal
+text. Successful landing pages remain HTML with escaped custom title/body. Recognized
+OAuth callback parameters must occur only once in HTTP callbacks or pasted URLs;
+duplicates fail without reflecting values and code extraction returns null.
+Unrecognized extension parameters remain ignored, including repeated fields.
 
 Native provider calls capture request option handles before host work. Unauthorized
 handling also owns complete discovery metadata, presented grant values, rejected
@@ -261,6 +273,8 @@ Before sending a refresh request, the provider persists a tokenless session with
 A successful response replaces it with the rotated grant. A crash, cancellation,
 network disconnect or incomplete response leaves the marker, so another process
 cannot replay a possibly consumed refresh token or revive the initial import.
+An explicit `refresh_token` must be a nonempty string; malformed fields also
+retain the pending marker. Omitting it preserves the previous refresh token.
 Such a session requires fresh authorization. Interactive unauthorized handling
 can recover it; headless requests fail with an explicit unknown-outcome error.
 Only complete OAuth error responses establish a rejected request and allow a

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/loopback-authorization.d.ts

@@ -20,6 +20,14 @@ export interface LoopbackAuthorizationSession {
     waitForCode(authorizationUrl: string): Promise<string>;
     close(): void;
 }
+/** Authorization callback denial, retaining the provider diagnostic for host observers. */
+export declare class OAuthAuthorizationError extends Error {
+    readonly error: string;
+    readonly errorDescription: string;
+    /** Recognize errors from separately bundled copies of this package. */
+    static is(value: unknown): value is OAuthAuthorizationError;
+    constructor(error: string, errorDescription: string);
+}
 export declare function createLoopbackAuthorizationSession(options?: LoopbackAuthorizationOptions): Promise<LoopbackAuthorizationSession>;
 export declare function loopbackTarget(options: LoopbackAuthorizationOptions): {
     port: number;

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/loopback-authorization.js

@@ -1,6 +1,28 @@
 import http from "node:http";
 import { parseAuthorizationState } from "./authorization-state.js";
+const authorizationErrorBrand = Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
+const oauthCallbackParameters = ["code", "state", "iss", "error", "error_description", "error_uri"];
+/** Authorization callback denial, retaining the provider diagnostic for host observers. */
+export class OAuthAuthorizationError extends Error {
+    error;
+    errorDescription;
+    /** Recognize errors from separately bundled copies of this package. */
+    static is(value) {
+        return value instanceof Error && Object.getOwnPropertyDescriptor(value, authorizationErrorBrand)?.value === true;
+    }
+    constructor(error, errorDescription) {
+        super(`OAuth authorization failed: ${error} — ${errorDescription}`);
+        this.error = error;
+        this.errorDescription = errorDescription;
+        this.name = "OAuthAuthorizationError";
+        Object.defineProperty(this, authorizationErrorBrand, { value: true });
+    }
+}
 export async function createLoopbackAuthorizationSession(options = {}) {
+    const selected = { ...options };
+    options = { ...selected, createServer: selected.createServer?.bind(options),
+        openBrowser: selected.openBrowser?.bind(options), readLine: selected.readLine?.bind(options),
+        landingPage: selected.landingPage === undefined ? undefined : { ...selected.landingPage } };
     options.signal?.throwIfAborted();
     const timeoutMs = options.timeoutMs ?? 120_000;
     if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 2_147_483_647)
@@ -63,10 +85,9 @@ export function loopbackTarget(options) {
         catch (cause) {
             throw new Error("Invalid OAuth loopback redirect URI", { cause });
         }
-        const forbiddenQuery = ["code", "state", "error", "error_description", "iss"];
         if (url.protocol !== "http:" || !["localhost", "127.0.0.1", "[::1]"].includes(url.hostname)
             || url.username || url.password || url.hash || url.port === "0"
-            || forbiddenQuery.some(name => url.searchParams.has(name))
+            || oauthCallbackParameters.some(name => url.searchParams.has(name))
             || [...options.redirectUri].some(char => char.codePointAt(0) <= 32)
             || (options.callbackPath !== undefined && options.callbackPath !== url.pathname))
             throw new Error("Invalid OAuth loopback redirect URI");
@@ -137,21 +158,18 @@ function waitForAuthorizationCode(server, authorizationUrl, options, callbackPat
                 res.end("Not found");
                 return;
             }
-            const callbackParameters = {
-                code: url.searchParams.get("code"), error: url.searchParams.get("error"),
-                errorDescription: url.searchParams.get("error_description"), state: url.searchParams.get("state"), iss: url.searchParams.get("iss")
-            };
             try {
+                const callbackParameters = readAuthorizationCallbackParameters(url);
                 validateAuthorizationCallbackBinding(callbackParameters, expectedAuthorization);
                 if (callbackParameters.error !== null)
-                    throw createAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
+                    throw new OAuthAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
                 const code = validateAuthorizationCallbackParameters(callbackParameters, expectedAuthorization);
                 res.writeHead(200, { "Content-Type": "text/html" });
                 res.end(buildSuccessPage(options.landingPage));
                 settle(() => resolve(code));
             }
             catch (error) {
-                res.writeHead(400);
+                res.writeHead(400, { "Content-Type": "text/plain; charset=utf-8", "X-Content-Type-Options": "nosniff" });
                 res.end(error instanceof Error ? error.message : "Invalid OAuth callback");
                 settle(() => reject(error));
             }
@@ -167,7 +185,7 @@ function waitForAuthorizationCode(server, authorizationUrl, options, callbackPat
                     throw new Error("OAuth callback missing authorization code");
                 validateAuthorizationCallbackBinding(callbackParameters, expectedAuthorization);
                 if (callbackParameters.error !== null)
-                    throw createAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
+                    throw new OAuthAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
                 const code = validateAuthorizationCallbackParameters(callbackParameters, expectedAuthorization);
                 settle(() => resolve(code));
             }).catch(error => settle(() => reject(error)));
@@ -179,22 +197,21 @@ function waitForAuthorizationCode(server, authorizationUrl, options, callbackPat
     });
 }
 export function extractCodeFromInput(input) {
-    return extractCallbackParametersFromInput(input)?.code ?? null;
+    try {
+        return extractCallbackParametersFromInput(input)?.code ?? null;
+    }
+    catch {
+        return null;
+    }
 }
 function extractCallbackParametersFromInput(input) {
     const trimmed = input.replaceAll("\r", "").replaceAll("\n", "").trim();
     if (trimmed.length === 0) {
         return null;
     }
+    let url;
     try {
-        const url = new URL(trimmed);
-        return {
-            code: url.searchParams.get("code"),
-            error: url.searchParams.get("error"),
-            errorDescription: url.searchParams.get("error_description"),
-            state: url.searchParams.get("state"),
-            iss: url.searchParams.get("iss")
-        };
+        url = new URL(trimmed);
     }
     catch {
         return {
@@ -205,6 +222,15 @@ function extractCallbackParametersFromInput(input) {
             iss: null
         };
     }
+    return readAuthorizationCallbackParameters(url);
+}
+function readAuthorizationCallbackParameters(url) {
+    for (const parameter of oauthCallbackParameters) {
+        if (url.searchParams.getAll(parameter).length > 1)
+            throw new Error(`OAuth callback parameter '${parameter}' must occur only once`);
+    }
+    return { code: url.searchParams.get("code"), error: url.searchParams.get("error"),
+        errorDescription: url.searchParams.get("error_description"), state: url.searchParams.get("state"), iss: url.searchParams.get("iss") };
 }
 function readExpectedAuthorizationCallback(authorizationUrl) {
     const url = new URL(authorizationUrl);
@@ -244,9 +270,6 @@ function validateAuthorizationCallbackBinding(callback, expected) {
         throw new Error("OAuth callback issuer mismatch");
     }
 }
-function createAuthorizationError(error, description) {
-    return new Error(`OAuth authorization failed: ${error} — ${description}`);
-}
 function escapeHtml(text) {
     return text
         .replaceAll("&", "&amp;")

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/token-endpoint.d.ts

@@ -5,6 +5,8 @@ interface OAuthErrorShape {
     error_uri?: string;
 }
 export declare class OAuthError extends Error {
+    /** Recognize errors from separately bundled copies of this package. */
+    static is(value: unknown): value is OAuthError;
     readonly error: string;
     readonly errorDescription: string | undefined;
     readonly errorUri: string | undefined;

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/token-endpoint.js

@@ -4,7 +4,12 @@ import { readBoundedResponseText } from "../http-response.js";
 import { fetchMcpResponse } from "../http-fetch.js";
 import { normalizeOAuthScope } from "./scope.js";
 const MAX_JS_DATE_MS = 8_640_000_000_000_000;
+const oauthErrorBrand = Symbol.for("poe-platform.mcp-oauth.OAuthError");
 export class OAuthError extends Error {
+    /** Recognize errors from separately bundled copies of this package. */
+    static is(value) {
+        return value instanceof Error && Object.getOwnPropertyDescriptor(value, oauthErrorBrand)?.value === true;
+    }
     error;
     errorDescription;
     errorUri;
@@ -20,6 +25,7 @@ export class OAuthError extends Error {
         const uri = Object.hasOwn(shape, "error_uri") ? shape.error_uri : undefined;
         super(description ?? (outcomeKnown ? shape.error : `OAuth HTTP response did not contain a valid error (HTTP ${status})`));
         this.name = "OAuthError";
+        Object.defineProperty(this, oauthErrorBrand, { value: true });
         this.error = shape.error;
         this.errorDescription = description;
         this.errorUri = uri;
@@ -132,6 +138,8 @@ async function requestTokens(input) {
         }
     }
     const refreshToken = getOwnEntry(payload, "refresh_token");
+    if (refreshToken !== undefined && (typeof refreshToken !== "string" || refreshToken.trim().length === 0))
+        throw new Error("OAuth token response has invalid refresh_token");
     const scope = getOwnEntry(payload, "scope");
     const normalizedRefreshToken = typeof refreshToken === "string" && refreshToken.trim().length > 0
         ? refreshToken.trim()

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/index.d.ts

@@ -7,7 +7,7 @@ export { createResourceBoundOAuthStores } from "./client/resource-bound-store.js
 export type { ResourceBoundOAuthStores } from "./client/resource-bound-store.js";
 export { parseOAuthClientRegistration, normalizeStoredOAuthClient } from "./client/client-registration.js";
 export { createDefaultOAuthClientProvider, createOAuthClientProvider, } from "./client/default-oauth-client-provider.js";
-export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, } from "./client/loopback-authorization.js";
+export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, OAuthAuthorizationError, } from "./client/loopback-authorization.js";
 export { generateCodeChallenge, generateCodeVerifier, } from "./client/pkce.js";
 export { OAuthError, } from "./client/token-endpoint.js";
 export { canonicalizeResourceIndicator, } from "./resource-indicator.js";

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/index.js

@@ -5,7 +5,7 @@ export { createAuthStoreSessionStore, } from "./client/auth-store-session-store.
 export { createResourceBoundOAuthStores } from "./client/resource-bound-store.js";
 export { parseOAuthClientRegistration, normalizeStoredOAuthClient } from "./client/client-registration.js";
 export { createDefaultOAuthClientProvider, createOAuthClientProvider, } from "./client/default-oauth-client-provider.js";
-export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, } from "./client/loopback-authorization.js";
+export { buildSuccessPage, createLoopbackAuthorizationSession, extractCodeFromInput, OAuthAuthorizationError, } from "./client/loopback-authorization.js";
 export { generateCodeChallenge, generateCodeVerifier, } from "./client/pkce.js";
 export { OAuthError, } from "./client/token-endpoint.js";
 export { canonicalizeResourceIndicator, } from "./resource-indicator.js";

package/node_modules/tiny-http-mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tiny-http-mcp-server",
-  "version": "0.1.68",
+  "version": "0.1.71",
   "description": "Minimal MCP server over HTTP built on tiny-stdio-mcp-server",
   "type": "module",
   "main": "dist/index.js",

package/node_modules/tiny-mcp-client/README.md

@@ -58,6 +58,10 @@ Legacy SSE mode opens a GET stream and posts messages to the endpoint announced
 by the server. Announced endpoints must remain on the original origin without
 embedded credentials or fragments; endpoint changes close the connection.
 Both transports accept the same headers, OAuth provider and response limits.
+Static HTTP headers are copied and validated when the transport is constructed,
+before OAuth callbacks run. Invalid headers fail without reflecting their values.
+Use `snapshotHttpTransportHeaders(headers)` to apply the same ownership and safe
+validation when preparing a registry before constructing transports.
 `maxResponseBytes` bounds a complete JSON body or each SSE event (default 16 MiB).
 Receive streams may carry many bounded events and keepalive comments; the limit
 does not cap their lifetime bytes. Use request deadlines and cancellation to

package/node_modules/tiny-mcp-client/dist/index.d.ts

@@ -725,6 +725,8 @@ declare class StdioTransport implements McpTransport {
     private appendStderrOutput;
     dispose(reason?: Error): void;
 }
+/** Own and validate static HTTP headers without reflecting malformed values. */
+declare function snapshotHttpTransportHeaders(headers?: RequestInit["headers"]): Headers;
 declare class HttpTransport implements McpTransport {
     readonly readable: Readable;
     readonly writable: Writable;
@@ -872,5 +874,5 @@ declare class JsonRpcMessageLayer {
     private handleCancellationNotification;
 }
 
-export { ERROR_INTERNAL, ERROR_INVALID_PARAMS, ERROR_INVALID_REQUEST, ERROR_METHOD_NOT_FOUND, ERROR_PARSE, HttpTransport, HttpTransportError, JsonRpcMessageLayer, MCP_PROTOCOL_VERSIONS, McpClient, McpError, OAuthMetadataDiscovery, StdioTransport, createInMemoryTransportPair, createSdkTestPair, createTestPair, discoverOAuthMetadata, fetchMcpResponse };
+export { ERROR_INTERNAL, ERROR_INVALID_PARAMS, ERROR_INVALID_REQUEST, ERROR_METHOD_NOT_FOUND, ERROR_PARSE, HttpTransport, HttpTransportError, JsonRpcMessageLayer, MCP_PROTOCOL_VERSIONS, McpClient, McpError, OAuthMetadataDiscovery, StdioTransport, createInMemoryTransportPair, createSdkTestPair, createTestPair, discoverOAuthMetadata, fetchMcpResponse, snapshotHttpTransportHeaders };
 export type { AudioContent, BlobResourceContents, CacheableResultMetadata, CallToolOptions, CallToolParams, CallToolResult, ClientCapabilities, CompleteArgument, CompleteParams, CompleteResult, Completion, ConnectResult, ContentItem, CreateMessageParams, CreateMessageResult, ElicitationParams, ElicitationResult, EmbeddedResource, GetPromptParams, GetPromptResult, HttpTransportFetch, HttpTransportOptions, ImageContent, InMemoryTransportPair, IncludeContext, InitializeParams, InitializeResult, JsonRpcErrorObject, JsonRpcErrorResponse, JsonRpcMessage, JsonRpcNotification, JsonRpcRequest, JsonRpcRequestOptions, JsonRpcResponse, JsonRpcSuccessResponse, LogLevel, LogMessage, McpClientConnection, McpClientOptions, McpProtocolVersion, McpRequestContext, McpSubscription, McpTransport, McpTransportClosedEvent, ModelHint, ModelPreferences, NotificationFilter, OAuthAuthorizationServerMetadata, OAuthClientProvider, OAuthClientProviderOptions, OAuthDiscoveryCache, OAuthDiscoveryResult, OAuthMetadataFetch, OAuthProtectedResourceMetadata, OAuthSessionStore, OAuthUnauthorizedChallenge, PaginatedParams, PaginatedResult, ProgressParams, ProgressToken, PromptMessage, PromptReference, ReadResourceParams, RequestId, ResourceContents, ResourceReference, ResultMetadata, Root, SamplingContent, SamplingMessage, SdkTestPair, ServerCapabilities, StdioSpawn, StdioTransportOptions, StoredOAuthSession, SubscriptionOptions, TextContent, TextResourceContents, Tool, ToolResultContent, ToolUseContent };

package/node_modules/tiny-mcp-client/dist/index.js

@@ -3516,7 +3516,32 @@ function getOwnEntry(record2, key2) {
 }
 
 // ../mcp-oauth/dist/client/loopback-authorization.js
+var authorizationErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
+var oauthCallbackParameters = ["code", "state", "iss", "error", "error_description", "error_uri"];
+var OAuthAuthorizationError = class extends Error {
+  error;
+  errorDescription;
+  /** Recognize errors from separately bundled copies of this package. */
+  static is(value) {
+    return value instanceof Error && Object.getOwnPropertyDescriptor(value, authorizationErrorBrand)?.value === true;
+  }
+  constructor(error, errorDescription) {
+    super(`OAuth authorization failed: ${error} \u2014 ${errorDescription}`);
+    this.error = error;
+    this.errorDescription = errorDescription;
+    this.name = "OAuthAuthorizationError";
+    Object.defineProperty(this, authorizationErrorBrand, { value: true });
+  }
+};
 async function createLoopbackAuthorizationSession(options = {}) {
+  const selected = { ...options };
+  options = {
+    ...selected,
+    createServer: selected.createServer?.bind(options),
+    openBrowser: selected.openBrowser?.bind(options),
+    readLine: selected.readLine?.bind(options),
+    landingPage: selected.landingPage === void 0 ? void 0 : { ...selected.landingPage }
+  };
   options.signal?.throwIfAborted();
   const timeoutMs = options.timeoutMs ?? 12e4;
   if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 2147483647)
@@ -3576,8 +3601,7 @@ function loopbackTarget(options) {
     } catch (cause) {
       throw new Error("Invalid OAuth loopback redirect URI", { cause });
     }
-    const forbiddenQuery = ["code", "state", "error", "error_description", "iss"];
-    if (url.protocol !== "http:" || !["localhost", "127.0.0.1", "[::1]"].includes(url.hostname) || url.username || url.password || url.hash || url.port === "0" || forbiddenQuery.some((name) => url.searchParams.has(name)) || [...options.redirectUri].some((char) => char.codePointAt(0) <= 32) || options.callbackPath !== void 0 && options.callbackPath !== url.pathname)
+    if (url.protocol !== "http:" || !["localhost", "127.0.0.1", "[::1]"].includes(url.hostname) || url.username || url.password || url.hash || url.port === "0" || oauthCallbackParameters.some((name) => url.searchParams.has(name)) || [...options.redirectUri].some((char) => char.codePointAt(0) <= 32) || options.callbackPath !== void 0 && options.callbackPath !== url.pathname)
       throw new Error("Invalid OAuth loopback redirect URI");
     return { port: url.port ? Number(url.port) : 80, host: url.hostname === "[::1]" ? "::1" : url.hostname, callbackPath: url.pathname };
   }
@@ -3653,23 +3677,17 @@ function waitForAuthorizationCode(server, authorizationUrl, options, callbackPat
         res.end("Not found");
         return;
       }
-      const callbackParameters = {
-        code: url.searchParams.get("code"),
-        error: url.searchParams.get("error"),
-        errorDescription: url.searchParams.get("error_description"),
-        state: url.searchParams.get("state"),
-        iss: url.searchParams.get("iss")
-      };
       try {
+        const callbackParameters = readAuthorizationCallbackParameters(url);
         validateAuthorizationCallbackBinding(callbackParameters, expectedAuthorization);
         if (callbackParameters.error !== null)
-          throw createAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
+          throw new OAuthAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
         const code = validateAuthorizationCallbackParameters(callbackParameters, expectedAuthorization);
         res.writeHead(200, { "Content-Type": "text/html" });
         res.end(buildSuccessPage(options.landingPage));
         settle(() => resolve(code));
       } catch (error) {
-        res.writeHead(400);
+        res.writeHead(400, { "Content-Type": "text/plain; charset=utf-8", "X-Content-Type-Options": "nosniff" });
         res.end(error instanceof Error ? error.message : "Invalid OAuth callback");
         settle(() => reject(error));
       }
@@ -3685,7 +3703,7 @@ function waitForAuthorizationCode(server, authorizationUrl, options, callbackPat
           throw new Error("OAuth callback missing authorization code");
         validateAuthorizationCallbackBinding(callbackParameters, expectedAuthorization);
         if (callbackParameters.error !== null)
-          throw createAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
+          throw new OAuthAuthorizationError(callbackParameters.error, callbackParameters.errorDescription ?? callbackParameters.error);
         const code = validateAuthorizationCallbackParameters(callbackParameters, expectedAuthorization);
         settle(() => resolve(code));
       }).catch((error) => settle(() => reject(error)));
@@ -3700,15 +3718,9 @@ function extractCallbackParametersFromInput(input) {
   if (trimmed.length === 0) {
     return null;
   }
+  let url;
   try {
-    const url = new URL(trimmed);
-    return {
-      code: url.searchParams.get("code"),
-      error: url.searchParams.get("error"),
-      errorDescription: url.searchParams.get("error_description"),
-      state: url.searchParams.get("state"),
-      iss: url.searchParams.get("iss")
-    };
+    url = new URL(trimmed);
   } catch {
     return {
       code: trimmed,
@@ -3718,6 +3730,20 @@ function extractCallbackParametersFromInput(input) {
       iss: null
     };
   }
+  return readAuthorizationCallbackParameters(url);
+}
+function readAuthorizationCallbackParameters(url) {
+  for (const parameter of oauthCallbackParameters) {
+    if (url.searchParams.getAll(parameter).length > 1)
+      throw new Error(`OAuth callback parameter '${parameter}' must occur only once`);
+  }
+  return {
+    code: url.searchParams.get("code"),
+    error: url.searchParams.get("error"),
+    errorDescription: url.searchParams.get("error_description"),
+    state: url.searchParams.get("state"),
+    iss: url.searchParams.get("iss")
+  };
 }
 function readExpectedAuthorizationCallback(authorizationUrl) {
   const url = new URL(authorizationUrl);
@@ -3754,9 +3780,6 @@ function validateAuthorizationCallbackBinding(callback, expected) {
     throw new Error("OAuth callback issuer mismatch");
   }
 }
-function createAuthorizationError(error, description) {
-  return new Error(`OAuth authorization failed: ${error} \u2014 ${description}`);
-}
 function escapeHtml(text) {
   return text.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
 }
@@ -5038,7 +5061,12 @@ async function readBoundedResponseText(response, maxBytes, readers, signal) {
 
 // ../mcp-oauth/dist/client/token-endpoint.js
 var MAX_JS_DATE_MS2 = 864e13;
+var oauthErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.mcp-oauth.OAuthError");
 var OAuthError = class extends Error {
+  /** Recognize errors from separately bundled copies of this package. */
+  static is(value) {
+    return value instanceof Error && Object.getOwnPropertyDescriptor(value, oauthErrorBrand)?.value === true;
+  }
   error;
   errorDescription;
   errorUri;
@@ -5054,6 +5082,7 @@ var OAuthError = class extends Error {
     const uri = Object.hasOwn(shape, "error_uri") ? shape.error_uri : void 0;
     super(description ?? (outcomeKnown ? shape.error : `OAuth HTTP response did not contain a valid error (HTTP ${status})`));
     this.name = "OAuthError";
+    Object.defineProperty(this, oauthErrorBrand, { value: true });
     this.error = shape.error;
     this.errorDescription = description;
     this.errorUri = uri;
@@ -5155,6 +5184,8 @@ async function requestTokens(input) {
     }
   }
   const refreshToken = getOwnEntry5(payload, "refresh_token");
+  if (refreshToken !== void 0 && (typeof refreshToken !== "string" || refreshToken.trim().length === 0))
+    throw new Error("OAuth token response has invalid refresh_token");
   const scope = getOwnEntry5(payload, "scope");
   const normalizedRefreshToken = typeof refreshToken === "string" && refreshToken.trim().length > 0 ? refreshToken.trim() : void 0;
   const normalizedScope = normalizeOAuthScope(scope);
@@ -7640,6 +7671,13 @@ var StdioTransport = class _StdioTransport {
     }
   }
 };
+function snapshotHttpTransportHeaders(headers) {
+  try {
+    return new Headers(headers);
+  } catch {
+    throw new Error("Invalid HTTP transport headers");
+  }
+}
 var HttpTransport = class {
   readable;
   writable;
@@ -7689,7 +7727,7 @@ var HttpTransport = class {
     this.maxResponseBytes = maxResponseBytes;
     this.url = url;
     this.mode = mode;
-    this.headers = headers;
+    this.headers = snapshotHttpTransportHeaders(headers);
     this.fetchImpl = fetchImpl;
     this.onWarning = onWarning;
     this.oauthProvider = oauth === void 0 ? void 0 : createOAuthClientProvider(oauth);
@@ -9249,7 +9287,8 @@ export {
   createSdkTestPair,
   createTestPair,
   discoverOAuthMetadata,
-  fetchMcpResponse
+  fetchMcpResponse,
+  snapshotHttpTransportHeaders
 };
 /*!
 The MCP project is undergoing a licensing transition from the MIT License to the Apache License, Version 2.0 ("Apache-2.0"). All new code and specification contributions to the project are licensed under Apache-2.0. Documentation contributions (excluding specifications) are licensed under CC-BY-4.0.

package/node_modules/tiny-stdio-mcp-server/dist/composition.json

@@ -8,7 +8,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.343",
+      "version": "0.0.345",
       "license": "MIT"
     }
   ]

package/node_modules/toolcraft-schema/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft-schema",
-  "version": "0.0.343",
+  "version": "0.0.345",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft",
-  "version": "0.0.343",
+  "version": "0.0.345",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",
@@ -158,7 +158,7 @@
     "yaml"
   ],
   "optionalDependencies": {
-    "toolcraft-schema": "0.0.343",
+    "toolcraft-schema": "0.0.345",
     "toolcraft-design": "*",
     "@poe-code/frontmatter": "*",
     "@poe-code/agent-mcp-config": "*",