toolcraft 0.0.355 → 0.0.356

package/composition.json

@@ -98,7 +98,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.87",
+      "version": "0.1.88",
       "license": "MIT"
     },
     {
@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.355",
+      "version": "0.0.356",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.355",
+      "version": "0.0.356",
       "license": "MIT"
     },
     {

package/dist/composition.json

@@ -98,7 +98,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.87",
+      "version": "0.1.88",
       "license": "MIT"
     },
     {
@@ -113,7 +113,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.355",
+      "version": "0.0.356",
       "license": "MIT"
     },
     {
@@ -123,7 +123,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.355",
+      "version": "0.0.356",
       "license": "MIT"
     },
     {

package/node_modules/auth-store/README.md

@@ -35,7 +35,8 @@ instances and processes serialize the same encrypted file or Keychain
 service/account; unrelated identities proceed independently. The default
 acquisition timeout is 30 seconds. Cancellation during acquisition does not
 release the active owner's lock. Each acquisition retains its original signal
-and timeout before path checks wait; replacing the caller's option handles cannot
+and timeout before path checks wait, including nonenumerable declared options;
+replacing the caller's option handles cannot
 bypass original cancellation or introduce another signal's cancellation. Individual `get`, `set` and `delete` calls do
 not implicitly acquire it.
 

package/node_modules/auth-store/dist/encrypted-file-store.js

@@ -81,7 +81,7 @@ export class EncryptedFileStore {
         }
     }
     async withLock(operation, options = {}) {
-        options = { ...options };
+        options = { ...options, signal: options.signal, timeoutMs: options.timeoutMs };
         await this.assertCredentialPathHasNoSymbolicLinks(`${this.filePath}.lock`);
         if (this.fs.readdir === undefined)
             throw new Error("Secret-store transaction locks require filesystem readdir support");

package/node_modules/auth-store/dist/transaction-lock.js

@@ -3,7 +3,7 @@ import path from "node:path";
 import { hasOwnErrorCode } from "./error-codes.js";
 /** Filesystem bakery lock: unique claims allow dead-owner cleanup without deleting a replacement owner's lock. */
 export async function withSecretStoreFileLock(fs, lockDirectory, operation, options = {}) {
-    options = { ...options };
+    options = { ...options, signal: options.signal, timeoutMs: options.timeoutMs };
     const timeoutMs = options.timeoutMs ?? 30_000;
     if (!Number.isFinite(timeoutMs) || timeoutMs < 0 || timeoutMs > 2_147_483_647)
         throw new Error("Invalid secret-store transaction lock timeout");

package/node_modules/tiny-http-mcp-server/dist/composition.json

@@ -18,7 +18,7 @@
     },
     {
       "name": "tiny-http-mcp-server",
-      "version": "0.1.87",
+      "version": "0.1.88",
       "license": "MIT"
     },
     {

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/README.md

@@ -170,8 +170,8 @@ corrupt or undecryptable records without reading their old contents. It atomical
 retires the identity's grant and registrations and writes a marker that suppresses
 stale initial grants. The default lock wait is 30 seconds. Other names/profiles
 are untouched, and symlink paths are still refused. Native reset, import and
-transaction callbacks retain their original signal while locks or reconciliation
-wait; replacing a caller handle cannot change subsequent cancellation checks.
+transaction callbacks retain their original signal and acquisition limit, including
+nonenumerable declared options, while locks or reconciliation wait; replacing a caller handle cannot change subsequent cancellation checks.
 Cancellation after a completed identity write prevents the transaction callback
 from running and retains that already persisted identity.
 

package/node_modules/tiny-http-mcp-server/node_modules/mcp-oauth/dist/client/resource-bound-store.js

@@ -52,7 +52,7 @@ export function createResourceBoundOAuthStores(options, namespace, identity) {
         }
     };
     async function replace(record, options) {
-        options = { ...options };
+        options = { ...options, signal: options.signal, timeoutMs: options.timeoutMs };
         options.signal?.throwIfAborted();
         const timeoutMs = options.timeoutMs ?? 30_000;
         if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 2_147_483_647)
@@ -126,7 +126,7 @@ export function createResourceBoundOAuthStores(options, namespace, identity) {
     }
     result.sessionStore = {
         async withLock(resource, operation, options) {
-            options = { ...options };
+            options = { ...options, signal: options?.signal, timeoutMs: options?.timeoutMs };
             if (store.withLock === undefined)
                 throw new Error("OAuth resource identity backend must support transaction locks");
             return store.withLock(async () => {

package/node_modules/tiny-http-mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tiny-http-mcp-server",
-  "version": "0.1.87",
+  "version": "0.1.88",
   "description": "Minimal MCP server over HTTP built on tiny-stdio-mcp-server",
   "type": "module",
   "main": "dist/index.js",

package/node_modules/tiny-mcp-client/dist/index.js

@@ -3985,7 +3985,7 @@ function hasOwnErrorCode(error, code) {
 import { randomUUID } from "node:crypto";
 import path from "node:path";
 async function withSecretStoreFileLock(fs2, lockDirectory, operation, options = {}) {
-  options = { ...options };
+  options = { ...options, signal: options.signal, timeoutMs: options.timeoutMs };
   const timeoutMs = options.timeoutMs ?? 3e4;
   if (!Number.isFinite(timeoutMs) || timeoutMs < 0 || timeoutMs > 2147483647)
     throw new Error("Invalid secret-store transaction lock timeout");
@@ -4205,7 +4205,7 @@ var EncryptedFileStore = class {
     }
   }
   async withLock(operation, options = {}) {
-    options = { ...options };
+    options = { ...options, signal: options.signal, timeoutMs: options.timeoutMs };
     await this.assertCredentialPathHasNoSymbolicLinks(`${this.filePath}.lock`);
     if (this.fs.readdir === void 0)
       throw new Error("Secret-store transaction locks require filesystem readdir support");
@@ -4867,7 +4867,7 @@ function createResourceBoundOAuthStores(options, namespace, identity) {
     }
   };
   async function replace(record2, options2) {
-    options2 = { ...options2 };
+    options2 = { ...options2, signal: options2.signal, timeoutMs: options2.timeoutMs };
     options2.signal?.throwIfAborted();
     const timeoutMs = options2.timeoutMs ?? 3e4;
     if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 2147483647)
@@ -4933,7 +4933,7 @@ function createResourceBoundOAuthStores(options, namespace, identity) {
   }
   result.sessionStore = {
     async withLock(resource, operation, options2) {
-      options2 = { ...options2 };
+      options2 = { ...options2, signal: options2?.signal, timeoutMs: options2?.timeoutMs };
       if (store.withLock === void 0)
         throw new Error("OAuth resource identity backend must support transaction locks");
       return store.withLock(async () => {

package/node_modules/tiny-stdio-mcp-server/dist/composition.json

@@ -8,7 +8,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.355",
+      "version": "0.0.356",
       "license": "MIT"
     }
   ]

package/node_modules/toolcraft-schema/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft-schema",
-  "version": "0.0.355",
+  "version": "0.0.356",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft",
-  "version": "0.0.355",
+  "version": "0.0.356",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",
@@ -158,7 +158,7 @@
     "yaml"
   ],
   "optionalDependencies": {
-    "toolcraft-schema": "0.0.355",
+    "toolcraft-schema": "0.0.356",
     "toolcraft-design": "*",
     "@poe-code/frontmatter": "*",
     "@poe-code/agent-mcp-config": "*",