toolcraft 0.0.351 → 0.0.352

package/composition.json

@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.351",
+      "version": "0.0.352",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.351",
+      "version": "0.0.352",
       "license": "MIT"
     },
     {

package/dist/composition.json

@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.351",
+      "version": "0.0.352",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.351",
+      "version": "0.0.352",
       "license": "MIT"
     },
     {

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/README.md

@@ -123,6 +123,9 @@ A browser callback cannot redirect a later code exchange by changing caller
 metadata. Metadata loaded from a host session store is copied before clock or
 fetch callbacks, retaining the original refresh endpoint and persisted extensions. Explicit authentication owns metadata when lazy discovery returns;
 the selected discovery method retains its original receiver and live host state.
+Browser and standalone loopback snapshots retain declared redirects, deadlines,
+cancellation and selected host hooks regardless of property enumerability.
+Browser callback hooks retain their original receiver and live host state.
 
 Provider request inputs accept an optional `signal`. It reaches callback waits,
 registration, token requests and bounded token-body reads. Cancellation retains

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/default-oauth-client-provider.js

@@ -6,7 +6,7 @@ import { isIP } from "node:net";
 import { fetchMcpResponse } from "../http-fetch.js";
 import { URL } from "node:url";
 import { createAuthStoreClientStore, createAuthStoreSessionStore, assertPersistenceNamespace } from "./auth-store-session-store.js";
-import { createLoopbackAuthorizationSession, loopbackTarget } from "./loopback-authorization.js";
+import { createLoopbackAuthorizationSession, loopbackTarget, snapshotLoopbackAuthorizationOptions } from "./loopback-authorization.js";
 import { createAuthorizationState } from "./authorization-state.js";
 import { generateCodeChallenge, generateCodeVerifier } from "./pkce.js";
 import { exchangeAuthorizationCode, OAuthError, refreshAccessToken, isRetryableOAuthError, readOAuthJsonObjectResponse } from "./token-endpoint.js";
@@ -21,8 +21,7 @@ export function createOAuthClientProvider(options) {
     return createDefaultOAuthClientProvider(options);
 }
 export function createDefaultOAuthClientProvider(options) {
-    const browser = { ...options.browser,
-        ...(options.browser.landingPage === undefined ? {} : { landingPage: { ...options.browser.landingPage } }) };
+    const browser = snapshotLoopbackAuthorizationOptions(options.browser);
     const clientMode = options.client.mode;
     const interactiveEnabled = options.allowInteractive !== false;
     const sessionLockTimeoutMs = options.sessionLockTimeoutMs;

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/loopback-authorization.d.ts

@@ -20,6 +20,8 @@ export interface LoopbackAuthorizationSession {
     waitForCode(authorizationUrl: string): Promise<string>;
     close(): void;
 }
+/** Capture declared configuration regardless of property enumerability. */
+export declare function snapshotLoopbackAuthorizationOptions(options: LoopbackAuthorizationOptions): LoopbackAuthorizationOptions;
 /** Authorization callback denial, retaining the provider diagnostic for host observers. */
 export declare class OAuthAuthorizationError extends Error {
     readonly error: string;

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/loopback-authorization.js

@@ -2,6 +2,12 @@ import http from "node:http";
 import { parseAuthorizationState } from "./authorization-state.js";
 const authorizationErrorBrand = Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
 const oauthCallbackParameters = ["code", "state", "iss", "error", "error_description", "error_uri"];
+/** Capture declared configuration regardless of property enumerability. */
+export function snapshotLoopbackAuthorizationOptions(options) {
+    return { ...options, openBrowser: options.openBrowser?.bind(options), readLine: options.readLine?.bind(options), createServer: options.createServer?.bind(options),
+        callbackPath: options.callbackPath, redirectUri: options.redirectUri, signal: options.signal, timeoutMs: options.timeoutMs,
+        landingPage: options.landingPage === undefined ? undefined : { ...options.landingPage } };
+}
 /** Authorization callback denial, retaining the provider diagnostic for host observers. */
 export class OAuthAuthorizationError extends Error {
     error;
@@ -19,10 +25,7 @@ export class OAuthAuthorizationError extends Error {
     }
 }
 export async function createLoopbackAuthorizationSession(options = {}) {
-    const selected = { ...options };
-    options = { ...selected, createServer: selected.createServer?.bind(options),
-        openBrowser: selected.openBrowser?.bind(options), readLine: selected.readLine?.bind(options),
-        landingPage: selected.landingPage === undefined ? undefined : { ...selected.landingPage } };
+    options = snapshotLoopbackAuthorizationOptions(options);
     options.signal?.throwIfAborted();
     const timeoutMs = options.timeoutMs ?? 120_000;
     if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 2_147_483_647)

package/node_modules/tiny-mcp-client/dist/index.js

@@ -3518,6 +3518,19 @@ function getOwnEntry(record2, key2) {
 // ../mcp-oauth/dist/client/loopback-authorization.js
 var authorizationErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
 var oauthCallbackParameters = ["code", "state", "iss", "error", "error_description", "error_uri"];
+function snapshotLoopbackAuthorizationOptions(options) {
+  return {
+    ...options,
+    openBrowser: options.openBrowser?.bind(options),
+    readLine: options.readLine?.bind(options),
+    createServer: options.createServer?.bind(options),
+    callbackPath: options.callbackPath,
+    redirectUri: options.redirectUri,
+    signal: options.signal,
+    timeoutMs: options.timeoutMs,
+    landingPage: options.landingPage === void 0 ? void 0 : { ...options.landingPage }
+  };
+}
 var OAuthAuthorizationError = class extends Error {
   error;
   errorDescription;
@@ -3534,14 +3547,7 @@ var OAuthAuthorizationError = class extends Error {
   }
 };
 async function createLoopbackAuthorizationSession(options = {}) {
-  const selected = { ...options };
-  options = {
-    ...selected,
-    createServer: selected.createServer?.bind(options),
-    openBrowser: selected.openBrowser?.bind(options),
-    readLine: selected.readLine?.bind(options),
-    landingPage: selected.landingPage === void 0 ? void 0 : { ...selected.landingPage }
-  };
+  options = snapshotLoopbackAuthorizationOptions(options);
   options.signal?.throwIfAborted();
   const timeoutMs = options.timeoutMs ?? 12e4;
   if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 2147483647)
@@ -5321,10 +5327,7 @@ function createOAuthClientProvider(options) {
   return createDefaultOAuthClientProvider(options);
 }
 function createDefaultOAuthClientProvider(options) {
-  const browser = {
-    ...options.browser,
-    ...options.browser.landingPage === void 0 ? {} : { landingPage: { ...options.browser.landingPage } }
-  };
+  const browser = snapshotLoopbackAuthorizationOptions(options.browser);
   const clientMode = options.client.mode;
   const interactiveEnabled = options.allowInteractive !== false;
   const sessionLockTimeoutMs = options.sessionLockTimeoutMs;

package/node_modules/tiny-stdio-mcp-server/dist/composition.json

@@ -8,7 +8,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.351",
+      "version": "0.0.352",
       "license": "MIT"
     }
   ]

package/node_modules/toolcraft-schema/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft-schema",
-  "version": "0.0.351",
+  "version": "0.0.352",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft",
-  "version": "0.0.351",
+  "version": "0.0.352",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",
@@ -158,7 +158,7 @@
     "yaml"
   ],
   "optionalDependencies": {
-    "toolcraft-schema": "0.0.351",
+    "toolcraft-schema": "0.0.352",
     "toolcraft-design": "*",
     "@poe-code/frontmatter": "*",
     "@poe-code/agent-mcp-config": "*",