@avallon-labs/mcp 54.3.0 → 54.5.0-staging.1250

package/dist/index.js

@@ -46,5 +46,5 @@ function setupFetch() {
 
 // src/index.ts
 setupFetch();
-await import("./server-L4QBVRPT.js");
+await import("./server-TINVVYSY.js");
 //# sourceMappingURL=index.js.map

package/dist/{server-L4QBVRPT.js → server-TINVVYSY.js}

@@ -8687,8 +8687,9 @@ var RefreshTokenResponse = zod.object({
   }),
   "message": zod.string()
 });
+var refreshSessionBodyRefreshTokenMax = 512;
 var RefreshSessionBody = zod.object({
-  "refresh_token": zod.string(),
+  "refresh_token": zod.string().max(refreshSessionBodyRefreshTokenMax),
   "tenant_id": zod.string().uuid()
 });
 var RefreshSessionResponse = zod.object({
@@ -13296,7 +13297,7 @@ var createMcpServer = (options) => {
     "refreshSession",
     {
       title: "Refresh session",
-      description: "Rotate the refresh token and return a new access token for `tenant_id`. Call it with a different `tenant_id` to switch tenants.\n\nRequires a valid user session (not an API key). The refresh token must belong to the same user, and the user must be a member of `tenant_id` (404 otherwise).",
+      description: "Rotate the refresh token and return a new access token for `tenant_id`. Call it with a different `tenant_id` to switch tenants.\n\nSend the current access token as `Authorization: Bearer`. It may be expired: it only identifies the user, and the refresh token must belong to that same user. The identity provider decides whether the session is still valid. The user must be a member of `tenant_id` (404 otherwise).",
       inputSchema: {
         bodyParams: RefreshSessionBody.optional()
       },
@@ -15654,4 +15655,4 @@ var transport = new StdioServerTransport();
 server.connect(transport).then(() => {
   console.error("MCP server running on stdio");
 }).catch(console.error);
-//# sourceMappingURL=server-L4QBVRPT.js.map
+//# sourceMappingURL=server-TINVVYSY.js.map