toolcraft 0.0.350 → 0.0.352

package/composition.json

@@ -98,7 +98,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.80",
+      "version": "0.1.82",
       "license": "MIT"
     },
     {
@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.350",
+      "version": "0.0.352",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.350",
+      "version": "0.0.352",
       "license": "MIT"
     },
     {

package/dist/composition.json

@@ -98,7 +98,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.80",
+      "version": "0.1.82",
       "license": "MIT"
     },
     {
@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.350",
+      "version": "0.0.352",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.350",
+      "version": "0.0.352",
       "license": "MIT"
     },
     {

package/node_modules/tiny-http-mcp-server/dist/composition.json

@@ -18,7 +18,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.80",
+      "version": "0.1.82",
       "license": "MIT"
     },
     {

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/README.md

@@ -123,6 +123,9 @@ A browser callback cannot redirect a later code exchange by changing caller
 metadata. Metadata loaded from a host session store is copied before clock or
 fetch callbacks, retaining the original refresh endpoint and persisted extensions. Explicit authentication owns metadata when lazy discovery returns;
 the selected discovery method retains its original receiver and live host state.
+Browser and standalone loopback snapshots retain declared redirects, deadlines,
+cancellation and selected host hooks regardless of property enumerability.
+Browser callback hooks retain their original receiver and live host state.
 
 Provider request inputs accept an optional `signal`. It reaches callback waits,
 registration, token requests and bounded token-body reads. Cancellation retains
@@ -171,7 +174,14 @@ refresh retains the previous granted set. Mismatched responses never activate
 credentials; an unusable refresh response retains the pending refresh record.
 `resourceIdentity` selects a native-owned logical server within its optional
 persistence namespace. One encrypted, locked document owns that identity's
-current resource URL, sessions and registrations. Changing the URL retires its
+current resource URL, sessions and registrations. Explicit imports and resets
+reject fragment components, including an empty trailing `#`; imported protected-
+resource metadata and stored client issuers obey the same fragment-free policy.
+Issuer identifiers must also omit query components, including an empty `?`.
+Direct and stored authorization flows enforce the same issuer URL policy before
+consent or token redemption. New discovery identity and endpoint policy checks
+run before acquiring the session transaction, so invalid replacement metadata
+cannot retire a valid old grant. Escaped delimiter data stays valid. Changing the URL retires its
 credentials permanently; returning to the old URL does not restore them.
 Retired identities also withhold stale initial grants; authorize again or select
 a fresh explicit profile to import a new grant. This option requires native persistence; custom
@@ -194,7 +204,9 @@ using the original configured client. Persisted sessions take precedence,
 including sessions whose tokens have been cleared; an import cannot revive them.
 Input tokens are copied before any host clock anchors a relative lifetime;
 clock mutation cannot replace the selected access/refresh/scope values. Invalid
-expiry values fail before authorization.
+expiry values fail before authorization. Relative-lifetime clock anchors must
+also be valid epoch milliseconds; adding the lifetime cannot make an invalid
+issuance clock acceptable. This applies to raw-grant parsing and token responses.
 For a raw OAuth response, `parseOAuthTokenGrant(response, { issuedAt, expiresAt })`
 returns normalized `StoredOAuthTokens`. Timing options are captured before the
 host clock runs, so it cannot bypass their earlier validation. The parser accepts

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/default-oauth-client-provider.js

@@ -6,7 +6,7 @@ import { isIP } from "node:net";
 import { fetchMcpResponse } from "../http-fetch.js";
 import { URL } from "node:url";
 import { createAuthStoreClientStore, createAuthStoreSessionStore, assertPersistenceNamespace } from "./auth-store-session-store.js";
-import { createLoopbackAuthorizationSession, loopbackTarget } from "./loopback-authorization.js";
+import { createLoopbackAuthorizationSession, loopbackTarget, snapshotLoopbackAuthorizationOptions } from "./loopback-authorization.js";
 import { createAuthorizationState } from "./authorization-state.js";
 import { generateCodeChallenge, generateCodeVerifier } from "./pkce.js";
 import { exchangeAuthorizationCode, OAuthError, refreshAccessToken, isRetryableOAuthError, readOAuthJsonObjectResponse } from "./token-endpoint.js";
@@ -21,8 +21,7 @@ export function createOAuthClientProvider(options) {
     return createDefaultOAuthClientProvider(options);
 }
 export function createDefaultOAuthClientProvider(options) {
-    const browser = { ...options.browser,
-        ...(options.browser.landingPage === undefined ? {} : { landingPage: { ...options.browser.landingPage } }) };
+    const browser = snapshotLoopbackAuthorizationOptions(options.browser);
     const clientMode = options.client.mode;
     const interactiveEnabled = options.allowInteractive !== false;
     const sessionLockTimeoutMs = options.sessionLockTimeoutMs;
@@ -172,6 +171,11 @@ export function createDefaultOAuthClientProvider(options) {
     };
     async function ensureAuthorizedSession(resource, discovery, fetch, allowInteractive, forceRefresh = false, signal, rejectedTokens) {
         signal?.throwIfAborted();
+        if (discovery !== undefined) {
+            if (getOwnString(discovery.authorizationServerMetadata, "issuer") !== discovery.authorizationServer)
+                throw new Error("OAuth discovery authorization-server issuer mismatch");
+            assertSecureOAuthFlowEndpoints(discovery.authorizationServerMetadata);
+        }
         const canonicalResource = canonicalizeResourceIndicator(resource);
         return withOAuthSessionTransaction(sessionStore, canonicalResource, async () => {
             let session = await loadSession(canonicalResource);
@@ -187,9 +191,6 @@ export function createDefaultOAuthClientProvider(options) {
             if (session !== null && initialGrant?.resource === canonicalResource)
                 initialGrantConsumed = true;
             signal?.throwIfAborted();
-            if (discovery !== undefined && getOwnString(discovery.authorizationServerMetadata, "issuer") !== discovery.authorizationServer) {
-                throw new Error("OAuth discovery authorization-server issuer mismatch");
-            }
             if (session !== null && (canonicalizeResourceIndicator(session.resource) !== canonicalResource
                 || getOwnString(session.discovery.authorizationServerMetadata, "issuer") !== session.authorizationServer
                 || (discovery !== undefined && discovery.authorizationServer !== session.authorizationServer))) {
@@ -198,7 +199,6 @@ export function createDefaultOAuthClientProvider(options) {
             }
             if (session === null && discovery !== undefined && !initialGrantConsumed && initialGrant?.resource === canonicalResource &&
                 initialGrant.tokens !== undefined && initialGrant.client !== null) {
-                assertSecureOAuthFlowEndpoints(discovery.authorizationServerMetadata);
                 session = { resource: canonicalResource, authorizationServer: discovery.authorizationServer,
                     client: initialGrant.client, tokens: initialGrant.tokens,
                     ...(requestedScope === undefined ? {} : { requestedScope }), discovery: toStoredDiscovery(discovery) };
@@ -766,14 +766,17 @@ function assertSecureUrl(value, label) {
         throw new Error(`${label} must not include credentials or fragment`);
     }
     if (url.protocol === "https:") {
-        return;
+        return url;
     }
     if (url.protocol === "http:" && isLoopbackHostname(url.hostname)) {
-        return;
+        return url;
     }
     throw new Error(`${label} must use https unless it targets a loopback host`);
 }
 function assertSecureOAuthFlowEndpoints(metadata) {
+    const issuer = assertSecureUrl(requireOwnString(metadata, "issuer", "Authorization server metadata"), "Authorization server issuer");
+    if (issuer.href.includes("?"))
+        throw new Error("Authorization server issuer must not include query or fragment");
     const authorizationEndpoint = requireOwnString(metadata, "authorization_endpoint", "Authorization server metadata");
     const tokenEndpoint = requireOwnString(metadata, "token_endpoint", "Authorization server metadata");
     const registrationEndpoint = getOwnString(metadata, "registration_endpoint");

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/loopback-authorization.d.ts

@@ -20,6 +20,8 @@ export interface LoopbackAuthorizationSession {
     waitForCode(authorizationUrl: string): Promise<string>;
     close(): void;
 }
+/** Capture declared configuration regardless of property enumerability. */
+export declare function snapshotLoopbackAuthorizationOptions(options: LoopbackAuthorizationOptions): LoopbackAuthorizationOptions;
 /** Authorization callback denial, retaining the provider diagnostic for host observers. */
 export declare class OAuthAuthorizationError extends Error {
     readonly error: string;

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/loopback-authorization.js

@@ -2,6 +2,12 @@ import http from "node:http";
 import { parseAuthorizationState } from "./authorization-state.js";
 const authorizationErrorBrand = Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
 const oauthCallbackParameters = ["code", "state", "iss", "error", "error_description", "error_uri"];
+/** Capture declared configuration regardless of property enumerability. */
+export function snapshotLoopbackAuthorizationOptions(options) {
+    return { ...options, openBrowser: options.openBrowser?.bind(options), readLine: options.readLine?.bind(options), createServer: options.createServer?.bind(options),
+        callbackPath: options.callbackPath, redirectUri: options.redirectUri, signal: options.signal, timeoutMs: options.timeoutMs,
+        landingPage: options.landingPage === undefined ? undefined : { ...options.landingPage } };
+}
 /** Authorization callback denial, retaining the provider diagnostic for host observers. */
 export class OAuthAuthorizationError extends Error {
     error;
@@ -19,10 +25,7 @@ export class OAuthAuthorizationError extends Error {
     }
 }
 export async function createLoopbackAuthorizationSession(options = {}) {
-    const selected = { ...options };
-    options = { ...selected, createServer: selected.createServer?.bind(options),
-        openBrowser: selected.openBrowser?.bind(options), readLine: selected.readLine?.bind(options),
-        landingPage: selected.landingPage === undefined ? undefined : { ...selected.landingPage } };
+    options = snapshotLoopbackAuthorizationOptions(options);
     options.signal?.throwIfAborted();
     const timeoutMs = options.timeoutMs ?? 120_000;
     if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 2_147_483_647)

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/resource-bound-store.js

@@ -18,7 +18,7 @@ export function createResourceBoundOAuthStores(options, namespace, identity) {
             catch {
                 throw new Error("OAuth reset resource must be an absolute HTTP URL");
             }
-            if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash)
+            if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.href.includes("#"))
                 throw new Error("OAuth reset resource must be an HTTP URL without credentials or fragment");
             await replace({ version: 1, resource: canonicalizeResourceIndicator(url), generation: 1, session: null, clients: {} }, options);
         },
@@ -28,11 +28,12 @@ export function createResourceBoundOAuthStores(options, namespace, identity) {
             try {
                 if (!isStoredOAuthSession(session) || session.tokens === undefined || session.refreshState !== undefined)
                     throw new Error("Invalid session");
-                const resource = new URL(session.resource), issuer = new URL(session.authorizationServer);
-                if ([resource, issuer].some(url => !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash) ||
-                    session.discovery.authorizationServerMetadata.issuer !== session.authorizationServer ||
-                    typeof session.discovery.resourceMetadata.resource !== "string" ||
-                    canonicalizeResourceIndicator(session.discovery.resourceMetadata.resource) !== canonicalizeResourceIndicator(resource))
+                if (typeof session.discovery.resourceMetadata.resource !== "string")
+                    throw new Error("Invalid resource metadata");
+                const resource = new URL(session.resource), issuer = new URL(session.authorizationServer), advertisedResource = new URL(session.discovery.resourceMetadata.resource);
+                if ([resource, issuer, advertisedResource].some(url => !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.href.includes("#")) ||
+                    issuer.href.includes("?") || session.discovery.authorizationServerMetadata.issuer !== session.authorizationServer ||
+                    canonicalizeResourceIndicator(advertisedResource) !== canonicalizeResourceIndicator(resource))
                     throw new Error("Invalid binding");
                 session.client = normalizeStoredOAuthClient(session.client);
                 if (session.client.registration !== undefined)
@@ -92,7 +93,7 @@ export function createResourceBoundOAuthStores(options, namespace, identity) {
         catch {
             throw new Error("Invalid stored OAuth resource identity URL");
         }
-        if (!["http:", "https:"].includes(resourceUrl.protocol) || resourceUrl.username || resourceUrl.password || resourceUrl.hash)
+        if (!["http:", "https:"].includes(resourceUrl.protocol) || resourceUrl.username || resourceUrl.password || resourceUrl.href.includes("#"))
             throw new Error("Invalid stored OAuth resource identity URL");
         for (const [issuer, client] of Object.entries(record.clients)) {
             const normalized = normalizeStoredOAuthClient(client);
@@ -103,7 +104,7 @@ export function createResourceBoundOAuthStores(options, namespace, identity) {
             catch {
                 throw new Error("Invalid stored OAuth resource client issuer");
             }
-            if (normalized === null || !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash)
+            if (normalized === null || !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.href.includes("?") || url.href.includes("#"))
                 throw new Error("Invalid stored OAuth resource client");
             Object.defineProperty(record.clients, issuer, { value: normalized, enumerable: true, configurable: true, writable: true });
         }

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/token-endpoint.js

@@ -130,7 +130,10 @@ async function requestTokens(input) {
             expiresIn < 0) {
             throw new Error("OAuth token response has invalid expires_in");
         }
-        expiresAt = input.now() + expiresIn * 1000;
+        const issuedAt = input.now();
+        if (!Number.isSafeInteger(issuedAt) || Math.abs(issuedAt) > MAX_JS_DATE_MS)
+            throw new Error("OAuth token response has invalid expires_in");
+        expiresAt = issuedAt + expiresIn * 1000;
         if (!Number.isSafeInteger(expiresAt) ||
             expiresAt > MAX_JS_DATE_MS ||
             !Number.isFinite(new Date(expiresAt).getTime())) {

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/token-grant.js

@@ -34,7 +34,10 @@ export function parseOAuthTokenGrant(value, options = {}) {
     const absoluteSeconds = typeof seconds === "number" ? seconds * 1000 : undefined;
     if (absoluteSeconds !== undefined && !validTimestamp(absoluteSeconds))
         throw invalid();
-    const relative = typeof lifetime === "number" ? (options.issuedAt ?? (options.now ?? Date.now)()) + lifetime * 1000 : undefined;
+    const anchor = typeof lifetime === "number" ? options.issuedAt ?? (options.now ?? Date.now)() : undefined;
+    if (typeof lifetime === "number" && !validTimestamp(anchor))
+        throw invalid();
+    const relative = typeof lifetime === "number" ? anchor + lifetime * 1000 : undefined;
     if (relative !== undefined && !validTimestamp(relative))
         throw invalid();
     const expiresAt = options.expiresAt ?? (typeof milliseconds === "number" ? milliseconds : undefined) ?? absoluteSeconds ?? relative ?? null;

package/node_modules/tiny-http-mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tiny-http-mcp-server",
-  "version": "0.1.80",
+  "version": "0.1.82",
   "description": "Minimal MCP server over HTTP built on tiny-stdio-mcp-server",
   "type": "module",
   "main": "dist/index.js",

package/node_modules/tiny-mcp-client/README.md

@@ -63,6 +63,11 @@ embedded credentials or fragments; endpoint changes close the connection.
 Empty fragment delimiters are rejected too; escaped hashes in an endpoint path
 or query remain literal data.
 Both transports accept the same headers, OAuth provider and response limits.
+The original HTTP transport target must be an absolute HTTP/HTTPS URL without
+credentials or a fragment, including an empty trailing `#`. Invalid targets fail
+before OAuth provider construction or clock reads. Empty queries and escaped
+path/query delimiters remain valid; accepted target strings keep their spelling.
+
 Static HTTP headers are copied and validated when the transport is constructed,
 before OAuth callbacks run. Invalid headers fail without reflecting their values.
 Use `snapshotHttpTransportHeaders(headers)` to apply the same ownership and safe

package/node_modules/tiny-mcp-client/dist/index.js

@@ -3518,6 +3518,19 @@ function getOwnEntry(record2, key2) {
 // ../mcp-oauth/dist/client/loopback-authorization.js
 var authorizationErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
 var oauthCallbackParameters = ["code", "state", "iss", "error", "error_description", "error_uri"];
+function snapshotLoopbackAuthorizationOptions(options) {
+  return {
+    ...options,
+    openBrowser: options.openBrowser?.bind(options),
+    readLine: options.readLine?.bind(options),
+    createServer: options.createServer?.bind(options),
+    callbackPath: options.callbackPath,
+    redirectUri: options.redirectUri,
+    signal: options.signal,
+    timeoutMs: options.timeoutMs,
+    landingPage: options.landingPage === void 0 ? void 0 : { ...options.landingPage }
+  };
+}
 var OAuthAuthorizationError = class extends Error {
   error;
   errorDescription;
@@ -3534,14 +3547,7 @@ var OAuthAuthorizationError = class extends Error {
   }
 };
 async function createLoopbackAuthorizationSession(options = {}) {
-  const selected = { ...options };
-  options = {
-    ...selected,
-    createServer: selected.createServer?.bind(options),
-    openBrowser: selected.openBrowser?.bind(options),
-    readLine: selected.readLine?.bind(options),
-    landingPage: selected.landingPage === void 0 ? void 0 : { ...selected.landingPage }
-  };
+  options = snapshotLoopbackAuthorizationOptions(options);
   options.signal?.throwIfAborted();
   const timeoutMs = options.timeoutMs ?? 12e4;
   if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 2147483647)
@@ -4801,7 +4807,7 @@ function createResourceBoundOAuthStores(options, namespace, identity) {
       } catch {
         throw new Error("OAuth reset resource must be an absolute HTTP URL");
       }
-      if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash)
+      if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.href.includes("#"))
         throw new Error("OAuth reset resource must be an HTTP URL without credentials or fragment");
       await replace({ version: 1, resource: canonicalizeResourceIndicator(url), generation: 1, session: null, clients: {} }, options2);
     },
@@ -4811,8 +4817,10 @@ function createResourceBoundOAuthStores(options, namespace, identity) {
       try {
         if (!isStoredOAuthSession(session) || session.tokens === void 0 || session.refreshState !== void 0)
           throw new Error("Invalid session");
-        const resource = new URL(session.resource), issuer = new URL(session.authorizationServer);
-        if ([resource, issuer].some((url) => !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash) || session.discovery.authorizationServerMetadata.issuer !== session.authorizationServer || typeof session.discovery.resourceMetadata.resource !== "string" || canonicalizeResourceIndicator(session.discovery.resourceMetadata.resource) !== canonicalizeResourceIndicator(resource))
+        if (typeof session.discovery.resourceMetadata.resource !== "string")
+          throw new Error("Invalid resource metadata");
+        const resource = new URL(session.resource), issuer = new URL(session.authorizationServer), advertisedResource = new URL(session.discovery.resourceMetadata.resource);
+        if ([resource, issuer, advertisedResource].some((url) => !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.href.includes("#")) || issuer.href.includes("?") || session.discovery.authorizationServerMetadata.issuer !== session.authorizationServer || canonicalizeResourceIndicator(advertisedResource) !== canonicalizeResourceIndicator(resource))
           throw new Error("Invalid binding");
         session.client = normalizeStoredOAuthClient(session.client);
         if (session.client.registration !== void 0)
@@ -4868,7 +4876,7 @@ function createResourceBoundOAuthStores(options, namespace, identity) {
     } catch {
       throw new Error("Invalid stored OAuth resource identity URL");
     }
-    if (!["http:", "https:"].includes(resourceUrl.protocol) || resourceUrl.username || resourceUrl.password || resourceUrl.hash)
+    if (!["http:", "https:"].includes(resourceUrl.protocol) || resourceUrl.username || resourceUrl.password || resourceUrl.href.includes("#"))
       throw new Error("Invalid stored OAuth resource identity URL");
     for (const [issuer, client] of Object.entries(record2.clients)) {
       const normalized = normalizeStoredOAuthClient(client);
@@ -4878,7 +4886,7 @@ function createResourceBoundOAuthStores(options, namespace, identity) {
       } catch {
         throw new Error("Invalid stored OAuth resource client issuer");
       }
-      if (normalized === null || !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash)
+      if (normalized === null || !["http:", "https:"].includes(url.protocol) || url.username || url.password || url.href.includes("?") || url.href.includes("#"))
         throw new Error("Invalid stored OAuth resource client");
       Object.defineProperty(record2.clients, issuer, { value: normalized, enumerable: true, configurable: true, writable: true });
     }
@@ -5178,7 +5186,10 @@ async function requestTokens(input) {
     if (typeof expiresIn !== "number" || !Number.isFinite(expiresIn) || !Number.isInteger(expiresIn) || expiresIn < 0) {
       throw new Error("OAuth token response has invalid expires_in");
     }
-    expiresAt = input.now() + expiresIn * 1e3;
+    const issuedAt = input.now();
+    if (!Number.isSafeInteger(issuedAt) || Math.abs(issuedAt) > MAX_JS_DATE_MS2)
+      throw new Error("OAuth token response has invalid expires_in");
+    expiresAt = issuedAt + expiresIn * 1e3;
     if (!Number.isSafeInteger(expiresAt) || expiresAt > MAX_JS_DATE_MS2 || !Number.isFinite(new Date(expiresAt).getTime())) {
       throw new Error("OAuth token response has invalid expires_in");
     }
@@ -5316,10 +5327,7 @@ function createOAuthClientProvider(options) {
   return createDefaultOAuthClientProvider(options);
 }
 function createDefaultOAuthClientProvider(options) {
-  const browser = {
-    ...options.browser,
-    ...options.browser.landingPage === void 0 ? {} : { landingPage: { ...options.browser.landingPage } }
-  };
+  const browser = snapshotLoopbackAuthorizationOptions(options.browser);
   const clientMode = options.client.mode;
   const interactiveEnabled = options.allowInteractive !== false;
   const sessionLockTimeoutMs = options.sessionLockTimeoutMs;
@@ -5462,6 +5470,11 @@ function createDefaultOAuthClientProvider(options) {
   };
   async function ensureAuthorizedSession(resource, discovery, fetch2, allowInteractive, forceRefresh = false, signal, rejectedTokens) {
     signal?.throwIfAborted();
+    if (discovery !== void 0) {
+      if (getOwnString2(discovery.authorizationServerMetadata, "issuer") !== discovery.authorizationServer)
+        throw new Error("OAuth discovery authorization-server issuer mismatch");
+      assertSecureOAuthFlowEndpoints(discovery.authorizationServerMetadata);
+    }
     const canonicalResource = canonicalizeResourceIndicator(resource);
     return withOAuthSessionTransaction(sessionStore, canonicalResource, async () => {
       let session = await loadSession(canonicalResource);
@@ -5477,15 +5490,11 @@ function createDefaultOAuthClientProvider(options) {
       if (session !== null && initialGrant?.resource === canonicalResource)
         initialGrantConsumed = true;
       signal?.throwIfAborted();
-      if (discovery !== void 0 && getOwnString2(discovery.authorizationServerMetadata, "issuer") !== discovery.authorizationServer) {
-        throw new Error("OAuth discovery authorization-server issuer mismatch");
-      }
       if (session !== null && (canonicalizeResourceIndicator(session.resource) !== canonicalResource || getOwnString2(session.discovery.authorizationServerMetadata, "issuer") !== session.authorizationServer || discovery !== void 0 && discovery.authorizationServer !== session.authorizationServer)) {
         await clearSession(canonicalResource);
         session = null;
       }
       if (session === null && discovery !== void 0 && !initialGrantConsumed && initialGrant?.resource === canonicalResource && initialGrant.tokens !== void 0 && initialGrant.client !== null) {
-        assertSecureOAuthFlowEndpoints(discovery.authorizationServerMetadata);
         session = {
           resource: canonicalResource,
           authorizationServer: discovery.authorizationServer,
@@ -6021,14 +6030,17 @@ function assertSecureUrl(value, label) {
     throw new Error(`${label} must not include credentials or fragment`);
   }
   if (url.protocol === "https:") {
-    return;
+    return url;
   }
   if (url.protocol === "http:" && isLoopbackHostname(url.hostname)) {
-    return;
+    return url;
   }
   throw new Error(`${label} must use https unless it targets a loopback host`);
 }
 function assertSecureOAuthFlowEndpoints(metadata) {
+  const issuer = assertSecureUrl(requireOwnString(metadata, "issuer", "Authorization server metadata"), "Authorization server issuer");
+  if (issuer.href.includes("?"))
+    throw new Error("Authorization server issuer must not include query or fragment");
   const authorizationEndpoint = requireOwnString(metadata, "authorization_endpoint", "Authorization server metadata");
   const tokenEndpoint = requireOwnString(metadata, "token_endpoint", "Authorization server metadata");
   const registrationEndpoint = getOwnString2(metadata, "registration_endpoint");
@@ -7747,6 +7759,13 @@ var HttpTransport = class {
   }) {
     if (!Number.isSafeInteger(maxResponseBytes) || maxResponseBytes < 1)
       throw new Error("HTTP response byte limit must be a positive safe integer");
+    try {
+      const target = new URL(url);
+      if (!["http:", "https:"].includes(target.protocol) || target.username || target.password || target.href.includes("#"))
+        throw new Error("Invalid HTTP transport target");
+    } catch {
+      throw new Error("HTTP transport URL must be an absolute HTTP URL without credentials or fragment");
+    }
     this.maxResponseBytes = maxResponseBytes;
     this.url = url;
     this.mode = mode;

package/node_modules/tiny-stdio-mcp-server/dist/composition.json

@@ -8,7 +8,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.350",
+      "version": "0.0.352",
       "license": "MIT"
     }
   ]

package/node_modules/toolcraft-schema/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft-schema",
-  "version": "0.0.350",
+  "version": "0.0.352",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft",
-  "version": "0.0.350",
+  "version": "0.0.352",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",
@@ -158,7 +158,7 @@
     "yaml"
   ],
   "optionalDependencies": {
-    "toolcraft-schema": "0.0.350",
+    "toolcraft-schema": "0.0.352",
     "toolcraft-design": "*",
     "@poe-code/frontmatter": "*",
     "@poe-code/agent-mcp-config": "*",