@aexol/spectral 0.2.11 → 0.2.13

package/dist/mcp/proxy-modes.js

@@ -24,13 +24,8 @@ async function attemptAutoAuth(state, serverName) {
         return { status: "skipped" };
     }
     const oauthConfig = definition.oauth;
-    const grantType = oauthConfig?.grantType ?? "authorization_code";
-    if (!state.ui && grantType !== "client_credentials") {
-        return {
-            status: "failed",
-            message: getAuthRequiredMessage(state, serverName, `Server "${serverName}" requires OAuth authentication. Run /mcp-auth ${serverName} in an interactive session.`),
-        };
-    }
+    // OAuth flow works even without TUI — open() uses the system browser and the
+    // callback server handles the redirect.
     try {
         await authenticate(serverName, definition.url, definition);
         return { status: "success" };

package/dist/mcp/server-manager.js

@@ -43,33 +43,33 @@ export class McpServerManager {
     async createConnection(name, definition) {
         const client = this.createClient(name);
         let transport;
-        if (definition.command) {
-            let command = definition.command;
-            let args = definition.args ?? [];
-            if (command === "npx" || command === "npm") {
-                const resolved = await resolveNpxBinary(command, args);
-                if (resolved) {
-                    command = resolved.isJs ? "node" : resolved.binPath;
-                    args = resolved.isJs ? [resolved.binPath, ...resolved.extraArgs] : resolved.extraArgs;
-                    logger.debug(`${name} resolved to ${resolved.binPath} (skipping npm parent)`);
+        try {
+            if (definition.command) {
+                let command = definition.command;
+                let args = definition.args ?? [];
+                if (command === "npx" || command === "npm") {
+                    const resolved = await resolveNpxBinary(command, args);
+                    if (resolved) {
+                        command = resolved.isJs ? "node" : resolved.binPath;
+                        args = resolved.isJs ? [resolved.binPath, ...resolved.extraArgs] : resolved.extraArgs;
+                        logger.debug(`${name} resolved to ${resolved.binPath} (skipping npm parent)`);
+                    }
                 }
+                transport = new StdioClientTransport({
+                    command,
+                    args,
+                    env: resolveEnv(definition.env),
+                    cwd: resolveConfigPath(definition.cwd),
+                    stderr: definition.debug ? "inherit" : "ignore",
+                });
+            }
+            else if (definition.url) {
+                // HTTP transport with fallback
+                transport = await this.createHttpTransport(definition, name);
+            }
+            else {
+                throw new Error(`Server ${name} has no command or url`);
             }
-            transport = new StdioClientTransport({
-                command,
-                args,
-                env: resolveEnv(definition.env),
-                cwd: resolveConfigPath(definition.cwd),
-                stderr: definition.debug ? "inherit" : "ignore",
-            });
-        }
-        else if (definition.url) {
-            // HTTP transport with fallback
-            transport = await this.createHttpTransport(definition, name);
-        }
-        else {
-            throw new Error(`Server ${name} has no command or url`);
-        }
-        try {
             await client.connect(transport);
             this.attachAdapterNotificationHandlers(name, client);
             // Discover tools and resources
@@ -89,14 +89,17 @@ export class McpServerManager {
             };
         }
         catch (error) {
-            // Check for UnauthorizedError - server requires OAuth
-            if (error instanceof UnauthorizedError && supportsOAuth(definition)) {
-                // Clean up both client and transport before reporting needs-auth.
-                await client.close().catch(() => { });
+            // Clean up client and transport on any error.
+            await client.close().catch(() => { });
+            if (transport) {
                 await transport.close().catch(() => { });
+            }
+            // Check for UnauthorizedError — server requires OAuth.
+            // This can fire from createHttpTransport probe or client.connect.
+            if (error instanceof UnauthorizedError && supportsOAuth(definition)) {
                 return {
                     client,
-                    transport,
+                    transport: transport,
                     definition,
                     tools: [],
                     resources: [],
@@ -105,9 +108,6 @@ export class McpServerManager {
                     status: "needs-auth",
                 };
             }
-            // Clean up both client and transport on any error
-            await client.close().catch(() => { });
-            await transport.close().catch(() => { });
             throw error;
         }
     }
@@ -140,6 +140,7 @@ export class McpServerManager {
                 clientId: definition.oauth?.clientId,
                 clientSecret: definition.oauth?.clientSecret,
                 scope: definition.oauth?.scope,
+                redirectUri: definition.oauth?.redirectUri,
             };
             authProvider = new McpOAuthProvider(serverName, definition.url, oauthConfig, {
                 onRedirect: async (_authUrl) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aexol/spectral",
-  "version": "0.2.11",
+  "version": "0.2.13",
   "description": "Always-on coding agent for Aexol — branded pi wrapper with relay-based browser access.",
   "type": "module",
   "private": false,