toolcraft 0.0.349 → 0.0.351

package/composition.json

@@ -98,7 +98,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.78",
+      "version": "0.1.82",
       "license": "MIT"
     },
     {
@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.349",
+      "version": "0.0.351",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.349",
+      "version": "0.0.351",
       "license": "MIT"
     },
     {

package/dist/composition.json

@@ -98,7 +98,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.78",
+      "version": "0.1.82",
       "license": "MIT"
     },
     {
@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.349",
+      "version": "0.0.351",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.349",
+      "version": "0.0.351",
       "license": "MIT"
     },
     {

package/node_modules/tiny-http-mcp-server/dist/composition.json

@@ -18,7 +18,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.78",
+      "version": "0.1.82",
       "license": "MIT"
     },
     {

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/README.md

@@ -61,12 +61,16 @@ alone do not establish either native error type.
 - `browser.timeoutMs` optional authorization deadline (default 120,000 ms)
 - `sessionStore` optional
 - `authStore` optional `auth-store` backend config for the default session store
-- `now()` optional clock override
+- `now()` optional clock override returning integer Unix epoch milliseconds within the JavaScript Date range
 
 The default provider captures client, interaction, callback, landing-page and
 lock policies when created. Create a new provider to change those settings.
 Selected callbacks, stores, clocks and AbortSignals remain live host dependencies;
 aborting the original signal still cancels authorization.
+An invalid clock fails before attaching or refreshing a grant with a known
+expiry or redeeming a time-limited client secret. Unknown access lifetimes and
+unlimited secret lifetimes do not require a clock read. Valid negative epoch
+times remain supported.
 Native session and client persistence factories also capture file paths, salts,
 Keychain identities, lock locations and selected filesystem/command handles.
 Mutating these settings cannot redirect a later read or write.
@@ -94,6 +98,9 @@ authorization and code exchange. Credentials, fragments, port zero and reserved
 OAuth callback query parameters, including `error_uri`, are rejected before binding a listener.
 Fragment rejection includes a trailing empty `#`. Empty queries and percent-escaped
 hash data remain valid and keep their exact registered spelling.
+Direct initial grants and host-supplied or stored authorization, token and
+registration endpoints also reject empty fragment components before consent or
+credential redemption. Percent-escaped hashes remain ordinary path/query data.
 `createDefaultOAuthClientProvider` also checks the configured redirect before
 creating the provider. Imported tokens that cannot be sent as HTTP header
 values fail with diagnostics that omit their contents. Omit
@@ -164,7 +171,14 @@ refresh retains the previous granted set. Mismatched responses never activate
 credentials; an unusable refresh response retains the pending refresh record.
 `resourceIdentity` selects a native-owned logical server within its optional
 persistence namespace. One encrypted, locked document owns that identity's
-current resource URL, sessions and registrations. Changing the URL retires its
+current resource URL, sessions and registrations. Explicit imports and resets
+reject fragment components, including an empty trailing `#`; imported protected-
+resource metadata and stored client issuers obey the same fragment-free policy.
+Issuer identifiers must also omit query components, including an empty `?`.
+Direct and stored authorization flows enforce the same issuer URL policy before
+consent or token redemption. New discovery identity and endpoint policy checks
+run before acquiring the session transaction, so invalid replacement metadata
+cannot retire a valid old grant. Escaped delimiter data stays valid. Changing the URL retires its
 credentials permanently; returning to the old URL does not restore them.
 Retired identities also withhold stale initial grants; authorize again or select
 a fresh explicit profile to import a new grant. This option requires native persistence; custom
@@ -187,7 +201,9 @@ using the original configured client. Persisted sessions take precedence,
 including sessions whose tokens have been cleared; an import cannot revive them.
 Input tokens are copied before any host clock anchors a relative lifetime;
 clock mutation cannot replace the selected access/refresh/scope values. Invalid
-expiry values fail before authorization.
+expiry values fail before authorization. Relative-lifetime clock anchors must
+also be valid epoch milliseconds; adding the lifetime cannot make an invalid
+issuance clock acceptable. This applies to raw-grant parsing and token responses.
 For a raw OAuth response, `parseOAuthTokenGrant(response, { issuedAt, expiresAt })`
 returns normalized `StoredOAuthTokens`. Timing options are captured before the
 host clock runs, so it cannot bypass their earlier validation. The parser accepts

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/default-oauth-client-provider.js

@@ -40,7 +40,13 @@ export function createDefaultOAuthClientProvider(options) {
     const sessionStore = resourceStores?.sessionStore ?? options.sessionStore ?? createAuthStoreSessionStore(options.authStore, options.persistenceNamespace);
     const clientStore = resourceStores?.clientStore ??
         (options.authStore === undefined ? null : createAuthStoreClientStore(options.authStore, options.persistenceNamespace));
-    const now = options.now ?? Date.now;
+    const clock = options.now ?? Date.now;
+    const now = () => {
+        const timestamp = clock();
+        if (!Number.isSafeInteger(timestamp) || Math.abs(timestamp) > MAX_JS_DATE_MS)
+            throw new Error("OAuth clock must return valid epoch milliseconds");
+        return timestamp;
+    };
     const registeredClients = new Map();
     if (options.initialGrant !== undefined) {
         let resource;
@@ -50,7 +56,7 @@ export function createDefaultOAuthClientProvider(options) {
         catch {
             throw new Error("OAuth initial grant resource must be an absolute HTTP URL");
         }
-        if ((resource.protocol !== "http:" && resource.protocol !== "https:") || resource.username || resource.password || resource.hash)
+        if ((resource.protocol !== "http:" && resource.protocol !== "https:") || resource.username || resource.password || resource.href.includes("#"))
             throw new Error("OAuth initial grant resource must be an HTTP URL without credentials or fragments");
     }
     const initialGrant = options.initialGrant === undefined ? undefined : {
@@ -166,6 +172,11 @@ export function createDefaultOAuthClientProvider(options) {
     };
     async function ensureAuthorizedSession(resource, discovery, fetch, allowInteractive, forceRefresh = false, signal, rejectedTokens) {
         signal?.throwIfAborted();
+        if (discovery !== undefined) {
+            if (getOwnString(discovery.authorizationServerMetadata, "issuer") !== discovery.authorizationServer)
+                throw new Error("OAuth discovery authorization-server issuer mismatch");
+            assertSecureOAuthFlowEndpoints(discovery.authorizationServerMetadata);
+        }
         const canonicalResource = canonicalizeResourceIndicator(resource);
         return withOAuthSessionTransaction(sessionStore, canonicalResource, async () => {
             let session = await loadSession(canonicalResource);
@@ -181,9 +192,6 @@ export function createDefaultOAuthClientProvider(options) {
             if (session !== null && initialGrant?.resource === canonicalResource)
                 initialGrantConsumed = true;
             signal?.throwIfAborted();
-            if (discovery !== undefined && getOwnString(discovery.authorizationServerMetadata, "issuer") !== discovery.authorizationServer) {
-                throw new Error("OAuth discovery authorization-server issuer mismatch");
-            }
             if (session !== null && (canonicalizeResourceIndicator(session.resource) !== canonicalResource
                 || getOwnString(session.discovery.authorizationServerMetadata, "issuer") !== session.authorizationServer
                 || (discovery !== undefined && discovery.authorizationServer !== session.authorizationServer))) {
@@ -192,7 +200,6 @@ export function createDefaultOAuthClientProvider(options) {
             }
             if (session === null && discovery !== undefined && !initialGrantConsumed && initialGrant?.resource === canonicalResource &&
                 initialGrant.tokens !== undefined && initialGrant.client !== null) {
-                assertSecureOAuthFlowEndpoints(discovery.authorizationServerMetadata);
                 session = { resource: canonicalResource, authorizationServer: discovery.authorizationServer,
                     client: initialGrant.client, tokens: initialGrant.tokens,
                     ...(requestedScope === undefined ? {} : { requestedScope }), discovery: toStoredDiscovery(discovery) };
@@ -756,18 +763,21 @@ function isLoopbackHostname(hostname) {
 }
 function assertSecureUrl(value, label) {
     const url = new URL(value);
-    if (url.username !== "" || url.password !== "" || url.hash !== "") {
+    if (url.username !== "" || url.password !== "" || url.href.includes("#")) {
         throw new Error(`${label} must not include credentials or fragment`);
     }
     if (url.protocol === "https:") {
-        return;
+        return url;
     }
     if (url.protocol === "http:" && isLoopbackHostname(url.hostname)) {
-        return;
+        return url;
     }
     throw new Error(`${label} must use https unless it targets a loopback host`);
 }
 function assertSecureOAuthFlowEndpoints(metadata) {
+    const issuer = assertSecureUrl(requireOwnString(metadata, "issuer", "Authorization server metadata"), "Authorization server issuer");
+    if (issuer.href.includes("?"))
+        throw new Error("Authorization server issuer must not include query or fragment");
     const authorizationEndpoint = requireOwnString(metadata, "authorization_endpoint", "Authorization server metadata");
     const tokenEndpoint = requireOwnString(metadata, "token_endpoint", "Authorization server metadata");
     const registrationEndpoint = getOwnString(metadata, "registration_endpoint");

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/resource-bound-store.js

@@ -18,7 +18,7 @@ export function createResourceBoundOAuthStores(options, namespace, identity) {
             catch {
                 throw new Error("OAuth reset resource must be an absolute HTTP URL");
             }
-            if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash)
+            if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.href.includes("#"))
                 throw new Error("OAuth reset resource must be an HTTP URL without credentials or fragment");
             await replace({ version: 1, resource: canonicalizeResourceIndicator(url), generation: 1, session: null, clients: {} }, options);
         },
@@ -28,11 +28,12 @@ export function createResourceBoundOAuthStores(options, namespace, identity) {
             try {
                 if (!isStoredOAuthSession(session) || session.tokens === undefined || session.refreshState !== undefined)
                     throw new Error("Invalid session");
-                const resource = new URL(session.resource), issuer = new URL(session.authorizationServer);
-                if ([resource, issuer].some(url => !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash) ||
-                    session.discovery.authorizationServerMetadata.issuer !== session.authorizationServer ||
-                    typeof session.discovery.resourceMetadata.resource !== "string" ||
-                    canonicalizeResourceIndicator(session.discovery.resourceMetadata.resource) !== canonicalizeResourceIndicator(resource))
+                if (typeof session.discovery.resourceMetadata.resource !== "string")
+                    throw new Error("Invalid resource metadata");
+                const resource = new URL(session.resource), issuer = new URL(session.authorizationServer), advertisedResource = new URL(session.discovery.resourceMetadata.resource);
+                if ([resource, issuer, advertisedResource].some(url => !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.href.includes("#")) ||
+                    issuer.href.includes("?") || session.discovery.authorizationServerMetadata.issuer !== session.authorizationServer ||
+                    canonicalizeResourceIndicator(advertisedResource) !== canonicalizeResourceIndicator(resource))
                     throw new Error("Invalid binding");
                 session.client = normalizeStoredOAuthClient(session.client);
                 if (session.client.registration !== undefined)
@@ -92,7 +93,7 @@ export function createResourceBoundOAuthStores(options, namespace, identity) {
         catch {
             throw new Error("Invalid stored OAuth resource identity URL");
         }
-        if (!["http:", "https:"].includes(resourceUrl.protocol) || resourceUrl.username || resourceUrl.password || resourceUrl.hash)
+        if (!["http:", "https:"].includes(resourceUrl.protocol) || resourceUrl.username || resourceUrl.password || resourceUrl.href.includes("#"))
             throw new Error("Invalid stored OAuth resource identity URL");
         for (const [issuer, client] of Object.entries(record.clients)) {
             const normalized = normalizeStoredOAuthClient(client);
@@ -103,7 +104,7 @@ export function createResourceBoundOAuthStores(options, namespace, identity) {
             catch {
                 throw new Error("Invalid stored OAuth resource client issuer");
             }
-            if (normalized === null || !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash)
+            if (normalized === null || !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.href.includes("?") || url.href.includes("#"))
                 throw new Error("Invalid stored OAuth resource client");
             Object.defineProperty(record.clients, issuer, { value: normalized, enumerable: true, configurable: true, writable: true });
         }

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/token-endpoint.js

@@ -130,7 +130,10 @@ async function requestTokens(input) {
             expiresIn < 0) {
             throw new Error("OAuth token response has invalid expires_in");
         }
-        expiresAt = input.now() + expiresIn * 1000;
+        const issuedAt = input.now();
+        if (!Number.isSafeInteger(issuedAt) || Math.abs(issuedAt) > MAX_JS_DATE_MS)
+            throw new Error("OAuth token response has invalid expires_in");
+        expiresAt = issuedAt + expiresIn * 1000;
         if (!Number.isSafeInteger(expiresAt) ||
             expiresAt > MAX_JS_DATE_MS ||
             !Number.isFinite(new Date(expiresAt).getTime())) {

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/token-grant.js

@@ -34,7 +34,10 @@ export function parseOAuthTokenGrant(value, options = {}) {
     const absoluteSeconds = typeof seconds === "number" ? seconds * 1000 : undefined;
     if (absoluteSeconds !== undefined && !validTimestamp(absoluteSeconds))
         throw invalid();
-    const relative = typeof lifetime === "number" ? (options.issuedAt ?? (options.now ?? Date.now)()) + lifetime * 1000 : undefined;
+    const anchor = typeof lifetime === "number" ? options.issuedAt ?? (options.now ?? Date.now)() : undefined;
+    if (typeof lifetime === "number" && !validTimestamp(anchor))
+        throw invalid();
+    const relative = typeof lifetime === "number" ? anchor + lifetime * 1000 : undefined;
     if (relative !== undefined && !validTimestamp(relative))
         throw invalid();
     const expiresAt = options.expiresAt ?? (typeof milliseconds === "number" ? milliseconds : undefined) ?? absoluteSeconds ?? relative ?? null;

package/node_modules/tiny-http-mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tiny-http-mcp-server",
-  "version": "0.1.78",
+  "version": "0.1.82",
   "description": "Minimal MCP server over HTTP built on tiny-stdio-mcp-server",
   "type": "module",
   "main": "dist/index.js",

package/node_modules/tiny-mcp-client/README.md

@@ -63,6 +63,11 @@ embedded credentials or fragments; endpoint changes close the connection.
 Empty fragment delimiters are rejected too; escaped hashes in an endpoint path
 or query remain literal data.
 Both transports accept the same headers, OAuth provider and response limits.
+The original HTTP transport target must be an absolute HTTP/HTTPS URL without
+credentials or a fragment, including an empty trailing `#`. Invalid targets fail
+before OAuth provider construction or clock reads. Empty queries and escaped
+path/query delimiters remain valid; accepted target strings keep their spelling.
+
 Static HTTP headers are copied and validated when the transport is constructed,
 before OAuth callbacks run. Invalid headers fail without reflecting their values.
 Use `snapshotHttpTransportHeaders(headers)` to apply the same ownership and safe

package/node_modules/tiny-mcp-client/dist/index.js

@@ -4801,7 +4801,7 @@ function createResourceBoundOAuthStores(options, namespace, identity) {
       } catch {
         throw new Error("OAuth reset resource must be an absolute HTTP URL");
       }
-      if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash)
+      if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.href.includes("#"))
         throw new Error("OAuth reset resource must be an HTTP URL without credentials or fragment");
       await replace({ version: 1, resource: canonicalizeResourceIndicator(url), generation: 1, session: null, clients: {} }, options2);
     },
@@ -4811,8 +4811,10 @@ function createResourceBoundOAuthStores(options, namespace, identity) {
       try {
         if (!isStoredOAuthSession(session) || session.tokens === void 0 || session.refreshState !== void 0)
           throw new Error("Invalid session");
-        const resource = new URL(session.resource), issuer = new URL(session.authorizationServer);
-        if ([resource, issuer].some((url) => !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash) || session.discovery.authorizationServerMetadata.issuer !== session.authorizationServer || typeof session.discovery.resourceMetadata.resource !== "string" || canonicalizeResourceIndicator(session.discovery.resourceMetadata.resource) !== canonicalizeResourceIndicator(resource))
+        if (typeof session.discovery.resourceMetadata.resource !== "string")
+          throw new Error("Invalid resource metadata");
+        const resource = new URL(session.resource), issuer = new URL(session.authorizationServer), advertisedResource = new URL(session.discovery.resourceMetadata.resource);
+        if ([resource, issuer, advertisedResource].some((url) => !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.href.includes("#")) || issuer.href.includes("?") || session.discovery.authorizationServerMetadata.issuer !== session.authorizationServer || canonicalizeResourceIndicator(advertisedResource) !== canonicalizeResourceIndicator(resource))
           throw new Error("Invalid binding");
         session.client = normalizeStoredOAuthClient(session.client);
         if (session.client.registration !== void 0)
@@ -4868,7 +4870,7 @@ function createResourceBoundOAuthStores(options, namespace, identity) {
     } catch {
       throw new Error("Invalid stored OAuth resource identity URL");
     }
-    if (!["http:", "https:"].includes(resourceUrl.protocol) || resourceUrl.username || resourceUrl.password || resourceUrl.hash)
+    if (!["http:", "https:"].includes(resourceUrl.protocol) || resourceUrl.username || resourceUrl.password || resourceUrl.href.includes("#"))
       throw new Error("Invalid stored OAuth resource identity URL");
     for (const [issuer, client] of Object.entries(record2.clients)) {
       const normalized = normalizeStoredOAuthClient(client);
@@ -4878,7 +4880,7 @@ function createResourceBoundOAuthStores(options, namespace, identity) {
       } catch {
         throw new Error("Invalid stored OAuth resource client issuer");
       }
-      if (normalized === null || !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash)
+      if (normalized === null || !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.href.includes("?") || url.href.includes("#"))
         throw new Error("Invalid stored OAuth resource client");
       Object.defineProperty(record2.clients, issuer, { value: normalized, enumerable: true, configurable: true, writable: true });
     }
@@ -5178,7 +5180,10 @@ async function requestTokens(input) {
     if (typeof expiresIn !== "number" || !Number.isFinite(expiresIn) || !Number.isInteger(expiresIn) || expiresIn < 0) {
       throw new Error("OAuth token response has invalid expires_in");
     }
-    expiresAt = input.now() + expiresIn * 1e3;
+    const issuedAt = input.now();
+    if (!Number.isSafeInteger(issuedAt) || Math.abs(issuedAt) > MAX_JS_DATE_MS2)
+      throw new Error("OAuth token response has invalid expires_in");
+    expiresAt = issuedAt + expiresIn * 1e3;
     if (!Number.isSafeInteger(expiresAt) || expiresAt > MAX_JS_DATE_MS2 || !Number.isFinite(new Date(expiresAt).getTime())) {
       throw new Error("OAuth token response has invalid expires_in");
     }
@@ -5335,7 +5340,13 @@ function createDefaultOAuthClientProvider(options) {
   const resourceStores = options.resourceIdentity === void 0 ? void 0 : createResourceBoundOAuthStores(options.authStore ?? {}, options.persistenceNamespace, options.resourceIdentity);
   const sessionStore = resourceStores?.sessionStore ?? options.sessionStore ?? createAuthStoreSessionStore(options.authStore, options.persistenceNamespace);
   const clientStore = resourceStores?.clientStore ?? (options.authStore === void 0 ? null : createAuthStoreClientStore(options.authStore, options.persistenceNamespace));
-  const now = options.now ?? Date.now;
+  const clock = options.now ?? Date.now;
+  const now = () => {
+    const timestamp = clock();
+    if (!Number.isSafeInteger(timestamp) || Math.abs(timestamp) > MAX_JS_DATE_MS3)
+      throw new Error("OAuth clock must return valid epoch milliseconds");
+    return timestamp;
+  };
   const registeredClients = /* @__PURE__ */ new Map();
   if (options.initialGrant !== void 0) {
     let resource;
@@ -5344,7 +5355,7 @@ function createDefaultOAuthClientProvider(options) {
     } catch {
       throw new Error("OAuth initial grant resource must be an absolute HTTP URL");
     }
-    if (resource.protocol !== "http:" && resource.protocol !== "https:" || resource.username || resource.password || resource.hash)
+    if (resource.protocol !== "http:" && resource.protocol !== "https:" || resource.username || resource.password || resource.href.includes("#"))
       throw new Error("OAuth initial grant resource must be an HTTP URL without credentials or fragments");
   }
   const initialGrant = options.initialGrant === void 0 ? void 0 : {
@@ -5456,6 +5467,11 @@ function createDefaultOAuthClientProvider(options) {
   };
   async function ensureAuthorizedSession(resource, discovery, fetch2, allowInteractive, forceRefresh = false, signal, rejectedTokens) {
     signal?.throwIfAborted();
+    if (discovery !== void 0) {
+      if (getOwnString2(discovery.authorizationServerMetadata, "issuer") !== discovery.authorizationServer)
+        throw new Error("OAuth discovery authorization-server issuer mismatch");
+      assertSecureOAuthFlowEndpoints(discovery.authorizationServerMetadata);
+    }
     const canonicalResource = canonicalizeResourceIndicator(resource);
     return withOAuthSessionTransaction(sessionStore, canonicalResource, async () => {
       let session = await loadSession(canonicalResource);
@@ -5471,15 +5487,11 @@ function createDefaultOAuthClientProvider(options) {
       if (session !== null && initialGrant?.resource === canonicalResource)
         initialGrantConsumed = true;
       signal?.throwIfAborted();
-      if (discovery !== void 0 && getOwnString2(discovery.authorizationServerMetadata, "issuer") !== discovery.authorizationServer) {
-        throw new Error("OAuth discovery authorization-server issuer mismatch");
-      }
       if (session !== null && (canonicalizeResourceIndicator(session.resource) !== canonicalResource || getOwnString2(session.discovery.authorizationServerMetadata, "issuer") !== session.authorizationServer || discovery !== void 0 && discovery.authorizationServer !== session.authorizationServer)) {
         await clearSession(canonicalResource);
         session = null;
       }
       if (session === null && discovery !== void 0 && !initialGrantConsumed && initialGrant?.resource === canonicalResource && initialGrant.tokens !== void 0 && initialGrant.client !== null) {
-        assertSecureOAuthFlowEndpoints(discovery.authorizationServerMetadata);
         session = {
           resource: canonicalResource,
           authorizationServer: discovery.authorizationServer,
@@ -6011,18 +6023,21 @@ function isLoopbackHostname(hostname2) {
 }
 function assertSecureUrl(value, label) {
   const url = new URL2(value);
-  if (url.username !== "" || url.password !== "" || url.hash !== "") {
+  if (url.username !== "" || url.password !== "" || url.href.includes("#")) {
     throw new Error(`${label} must not include credentials or fragment`);
   }
   if (url.protocol === "https:") {
-    return;
+    return url;
   }
   if (url.protocol === "http:" && isLoopbackHostname(url.hostname)) {
-    return;
+    return url;
   }
   throw new Error(`${label} must use https unless it targets a loopback host`);
 }
 function assertSecureOAuthFlowEndpoints(metadata) {
+  const issuer = assertSecureUrl(requireOwnString(metadata, "issuer", "Authorization server metadata"), "Authorization server issuer");
+  if (issuer.href.includes("?"))
+    throw new Error("Authorization server issuer must not include query or fragment");
   const authorizationEndpoint = requireOwnString(metadata, "authorization_endpoint", "Authorization server metadata");
   const tokenEndpoint = requireOwnString(metadata, "token_endpoint", "Authorization server metadata");
   const registrationEndpoint = getOwnString2(metadata, "registration_endpoint");
@@ -7741,6 +7756,13 @@ var HttpTransport = class {
   }) {
     if (!Number.isSafeInteger(maxResponseBytes) || maxResponseBytes < 1)
       throw new Error("HTTP response byte limit must be a positive safe integer");
+    try {
+      const target = new URL(url);
+      if (!["http:", "https:"].includes(target.protocol) || target.username || target.password || target.href.includes("#"))
+        throw new Error("Invalid HTTP transport target");
+    } catch {
+      throw new Error("HTTP transport URL must be an absolute HTTP URL without credentials or fragment");
+    }
     this.maxResponseBytes = maxResponseBytes;
     this.url = url;
     this.mode = mode;

package/node_modules/tiny-stdio-mcp-server/dist/composition.json

@@ -8,7 +8,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.349",
+      "version": "0.0.351",
       "license": "MIT"
     }
   ]

package/node_modules/toolcraft-schema/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft-schema",
-  "version": "0.0.349",
+  "version": "0.0.351",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft",
-  "version": "0.0.349",
+  "version": "0.0.351",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",
@@ -158,7 +158,7 @@
     "yaml"
   ],
   "optionalDependencies": {
-    "toolcraft-schema": "0.0.349",
+    "toolcraft-schema": "0.0.351",
     "toolcraft-design": "*",
     "@poe-code/frontmatter": "*",
     "@poe-code/agent-mcp-config": "*",