toolcraft 0.0.347 → 0.0.348

package/composition.json

@@ -98,7 +98,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.75",
+      "version": "0.1.76",
       "license": "MIT"
     },
     {
@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.347",
+      "version": "0.0.348",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.347",
+      "version": "0.0.348",
       "license": "MIT"
     },
     {

package/dist/composition.json

@@ -98,7 +98,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.75",
+      "version": "0.1.76",
       "license": "MIT"
     },
     {
@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.347",
+      "version": "0.0.348",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.347",
+      "version": "0.0.348",
       "license": "MIT"
     },
     {

package/node_modules/tiny-http-mcp-server/dist/composition.json

@@ -18,7 +18,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.75",
+      "version": "0.1.76",
       "license": "MIT"
     },
     {

package/node_modules/tiny-http-mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tiny-http-mcp-server",
-  "version": "0.1.75",
+  "version": "0.1.76",
   "description": "Minimal MCP server over HTTP built on tiny-stdio-mcp-server",
   "type": "module",
   "main": "dist/index.js",

package/node_modules/tiny-mcp-client/README.md

@@ -36,6 +36,9 @@ Unsupported pins fail before connection setup.
 `Tool` includes MCP `outputSchema` when a server advertises typed tool output.
 `CallToolResult.structuredContent` preserves modern JSON values; legacy servers
 require an object. Complete `content[]` blocks remain available in either case.
+`callTool` captures its signal and progress token when called. Later edits to
+the options object cannot leave a finished call's progress token active; progress
+notifications remain available while that call is pending.
 
 Set `requestTimeoutMs` on `McpClient` or `timeoutMs` on individual requests.
 Numeric deadlines must be finite, nonnegative and no greater than
@@ -111,6 +114,9 @@ You can also call `discoverOAuthMetadata(resourceUrl, options)` directly, or ins
 Resource/issuer binding mismatches and exhausted authorization-server discovery
 expose `OAuthMetadataError.phase` while retaining complete SDK messages.
 Protected-resource metadata HTTP failures also expose their numeric `status`.
+Advertised resource identities reject named and empty fragments before issuer
+discovery; malformed shared-cache identities are evicted. Resource queries and
+percent-escaped hash data remain part of the exact resource identity.
 Rejected metadata bodies start cleanup without delaying failure or caller
 cancellation. Host cleanup may finish later; its rejection remains observed.
 `OAuthMetadataError.is(value)` recognizes separately bundled native copies.

package/node_modules/tiny-mcp-client/dist/index.js

@@ -6294,6 +6294,9 @@ function validateProtectedResourceMetadata(value, resourceUrl) {
   if (typeof value.resource !== "string" || value.resource.length === 0) {
     throw new Error("Protected resource metadata must include a resource string");
   }
+  if (value.resource.includes("#")) {
+    throw new OAuthMetadataError("protected-resource", "Protected resource metadata resource must not include fragment");
+  }
   const normalizedResource = canonicalizeResourceIndicator(value.resource);
   if (normalizedResource !== resourceUrl) {
     throw new OAuthMetadataError(
@@ -7116,6 +7119,7 @@ var McpClient = class {
     };
   }
   async callTool(params, options = {}) {
+    options = { ...options };
     const messageLayer = this.getMessageLayerOrThrow();
     const serverCapabilities = this.getServerCapabilitiesOrThrow();
     if (serverCapabilities.tools === void 0) {

package/node_modules/tiny-stdio-mcp-server/dist/composition.json

@@ -8,7 +8,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.347",
+      "version": "0.0.348",
       "license": "MIT"
     }
   ]

package/node_modules/toolcraft-schema/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft-schema",
-  "version": "0.0.347",
+  "version": "0.0.348",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft",
-  "version": "0.0.347",
+  "version": "0.0.348",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",
@@ -158,7 +158,7 @@
     "yaml"
   ],
   "optionalDependencies": {
-    "toolcraft-schema": "0.0.347",
+    "toolcraft-schema": "0.0.348",
     "toolcraft-design": "*",
     "@poe-code/frontmatter": "*",
     "@poe-code/agent-mcp-config": "*",