@introspection-ai/recipes 0.19.2 → 0.20.0

package/dist/mcp-chunks/{chunk-3IZQW4H4.js → chunk-MNAVFYYV.js}

@@ -12,31 +12,35 @@ import {
   sameOAuthTokenGeneration,
   sameOAuthTokenValue,
   saveVaultEntry,
+  vaultCredentialKeys,
   withHiddenOAuthClientGeneration,
   withHiddenOAuthTokenGeneration,
   withOAuthClientGeneration,
   withOAuthTokenGeneration
-} from "./chunk-C2PQFLWS.js";
+} from "./chunk-B4XFULJ6.js";
 import {
   checkResourceAllowed,
   discoverOAuthServerInfo,
   refreshAuthorization,
   resourceUrlFromServerUrl
-} from "./chunk-YPJ5EHXR.js";
+} from "./chunk-K56RW4HB.js";
 import {
+  canonicalizeFilePath,
+  isFileLockTimeoutError,
   readJsonFile,
   withFileLock,
   writeJsonFile,
   writeTextFileAtomic
-} from "./chunk-7A63PAGP.js";
+} from "./chunk-ETYYCEQF.js";
 import {
-  legacyMcporterDir
-} from "./chunk-FWP4RACK.js";
+  legacyMcporterDir,
+  mcporterDir
+} from "./chunk-VREKED5H.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/oauth-persistence.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/oauth-persistence.js
 import fs2 from "node:fs/promises";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/oauth-persistence-stores.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/oauth-persistence-stores.js
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
@@ -441,6 +445,10 @@ var CompositePersistence = class {
     this.recoveryTokenSource = result.source;
     return result.value;
   }
+  async readTokensPerStore() {
+    const perStore = await Promise.all(this.stores.map((store) => store.readTokens()));
+    return perStore.filter((tokens) => tokens !== void 0);
+  }
   async saveTokens(tokens) {
     const stored = prepareStoredTokens(tokens);
     await Promise.all(this.stores.map((store) => store.saveTokens(stored)));
@@ -598,10 +606,10 @@ async function clearLegacyOAuthArtifacts(definition, logger, scope) {
   }));
 }
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/oauth-token-refresh.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/oauth-token-refresh.js
 import { Buffer } from "node:buffer";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/oauth-client-info.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/oauth-client-info.js
 function buildStaticClientInformation(definition, options = {}) {
   if (!definition.oauthClientId) {
     return void 0;
@@ -627,10 +635,121 @@ function resolveOAuthClientSecret(definition, options = {}) {
   return definition.oauthClientSecret;
 }
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/oauth-token-refresh.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/oauth-refresh-lock.js
+import { AsyncLocalStorage } from "node:async_hooks";
+import crypto from "node:crypto";
+import path2 from "node:path";
+var REFRESH_LOCK_DIR = "refresh-locks";
+var LOCK_LABEL_MAX = 40;
+var IDENTITY_HASH_LENGTH = 16;
+var TIMEOUT_OVERRIDE_ENV = "MCPORTER_TEST_REFRESH_LOCK_TIMEOUT_MS";
+var heldLockPaths = new AsyncLocalStorage();
+function refreshLockDir() {
+  return path2.join(mcporterDir("data"), REFRESH_LOCK_DIR);
+}
+async function refreshLockPaths(definition) {
+  const paths = [];
+  if (definition.tokenCacheDir) {
+    const tokenPath = await canonicalizeFilePath(path2.join(definition.tokenCacheDir, "tokens.json"));
+    paths.push(lockPathFor(path2.basename(path2.dirname(tokenPath)), `dir:${tokenPath}`));
+  }
+  for (const vaultKey of await vaultCredentialKeys(definition)) {
+    paths.push(lockPathFor(vaultKey.split("|")[0] ?? "", `vault:${vaultKey}`));
+  }
+  return [...new Set(paths)].toSorted();
+}
+async function withRefreshLock(definition, task, options = {}) {
+  const lockPaths = await refreshLockPaths(definition);
+  return await acquireAll(lockPaths, task, resolveTimeoutMs(options.timeoutMs));
+}
+async function acquireAll(lockPaths, task, timeoutMs) {
+  const held = heldLockPaths.getStore();
+  const pending = held ? lockPaths.filter((lockPath) => !held.has(lockPath)) : lockPaths;
+  if (pending.length === 0) {
+    return await task();
+  }
+  const nextHeld = /* @__PURE__ */ new Set([...held ?? [], ...pending]);
+  return await heldLockPaths.run(nextHeld, async () => {
+    let run = task;
+    for (const lockPath of pending.toReversed()) {
+      const inner = run;
+      run = async () => await withFileLock(lockPath, inner, timeoutMs === void 0 ? {} : { timeoutMs });
+    }
+    return await run();
+  });
+}
+function resolveTimeoutMs(explicit) {
+  if (explicit !== void 0) {
+    return explicit;
+  }
+  const raw = process.env[TIMEOUT_OVERRIDE_ENV];
+  if (raw === void 0 || raw.trim().length === 0) {
+    return void 0;
+  }
+  const parsed = Number(raw);
+  return Number.isFinite(parsed) && parsed >= 0 ? parsed : void 0;
+}
+function lockPathFor(label, identity) {
+  const digest = crypto.createHash("sha256").update(identity).digest("hex").slice(0, IDENTITY_HASH_LENGTH);
+  const safeLabel = filenameSafeLabel(label);
+  return path2.join(refreshLockDir(), safeLabel.length > 0 ? `${safeLabel}-${digest}` : digest);
+}
+function filenameSafeLabel(value) {
+  return value.replace(/[^A-Za-z0-9._-]+/g, "_").replace(/^[._-]+/, "").slice(0, LOCK_LABEL_MAX);
+}
+
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/oauth-token-refresh.js
 var TOKEN_EXPIRY_SKEW_SECONDS = 60;
+var TOKEN_REQUEST_TIMEOUT_MS = 1e4;
 var OAuthIssuerMismatchError = class extends Error {
 };
+function decideUnderRefreshLock(original, latest, skewSeconds) {
+  if (!latest || typeof latest.access_token !== "string" || latest.access_token.trim().length === 0) {
+    return { kind: "gone" };
+  }
+  const adopted = cachedTokensChanged(original, latest);
+  if (!shouldRefreshCachedToken(latest, skewSeconds)) {
+    return { kind: "use", accessToken: latest.access_token, adopted };
+  }
+  if (typeof latest.refresh_token !== "string" || latest.refresh_token.trim().length === 0) {
+    return adopted ? { kind: "use", accessToken: latest.access_token, adopted } : { kind: "unrefreshable", accessToken: latest.access_token };
+  }
+  return { kind: "redeem", tokens: latest, refreshToken: latest.refresh_token };
+}
+async function reconcilePersistedTokens(definition, persistence, logger) {
+  const perStore = await persistence.readTokensPerStore?.();
+  if (!perStore || perStore.length <= 1) {
+    return await persistence.readTokens();
+  }
+  const candidates = perStore.filter((candidate) => typeof candidate.access_token === "string" && candidate.access_token.trim().length > 0);
+  const distinctRefreshTokens = new Set(candidates.map((candidate) => typeof candidate.refresh_token === "string" ? candidate.refresh_token : ""));
+  if (candidates.length <= 1 || distinctRefreshTokens.size <= 1) {
+    return await persistence.readTokens();
+  }
+  let selected = candidates[0];
+  for (const candidate of candidates.slice(1)) {
+    if (selected === void 0 || outranksForRedemption(candidate, selected)) {
+      selected = candidate;
+    }
+  }
+  logger?.debug?.(`Persisted OAuth stores for '${definition.name}' hold different refresh tokens; redeeming the newest.`);
+  return selected;
+}
+function outranksForRedemption(candidate, incumbent) {
+  const candidateDue = shouldRefreshCachedToken(candidate);
+  if (candidateDue !== shouldRefreshCachedToken(incumbent)) {
+    return !candidateDue;
+  }
+  const candidateExpiry = tokenExpirySeconds(candidate) ?? Number.NEGATIVE_INFINITY;
+  const incumbentExpiry = tokenExpirySeconds(incumbent) ?? Number.NEGATIVE_INFINITY;
+  return candidateExpiry > incumbentExpiry;
+}
+async function accessTokenAfterLockTimeout(definition, persistence, tokenKind, logger) {
+  const latest = await persistence.readTokens();
+  const accessToken = typeof latest?.access_token === "string" && latest.access_token.trim().length > 0 ? latest.access_token : void 0;
+  logger?.debug?.(`Timed out waiting for the ${tokenKind} refresh lock for '${definition.name}'; ${accessToken ? "returning the persisted access token, which may already be expired." : "no persisted access token remains."}`);
+  return accessToken;
+}
 function tokenExpirySeconds(tokens) {
   const stored = tokens;
   for (const candidate of [stored.expires_at, stored.expiresAt]) {
@@ -646,6 +765,9 @@ function cachedTokensChanged(original, current) {
   }
   return !sameOAuthTokenGeneration(current, original);
 }
+function oauthAccessTokenNeedsRefresh(tokens) {
+  return shouldRefreshCachedToken(tokens);
+}
 function shouldRefreshCachedToken(tokens, skewSeconds = TOKEN_EXPIRY_SKEW_SECONDS) {
   const expiresAt = tokenExpirySeconds(tokens);
   if (expiresAt !== void 0) {
@@ -698,9 +820,11 @@ function oauthErrorCode(error) {
   if (!error || typeof error !== "object") {
     return void 0;
   }
-  const { errorCode, name } = error;
-  if (typeof errorCode === "string" && errorCode.length > 0) {
-    return errorCode.toLowerCase();
+  const { errorCode, code, name } = error;
+  for (const candidate of [errorCode, code]) {
+    if (typeof candidate === "string" && candidate.length > 0) {
+      return candidate.toLowerCase();
+    }
   }
   if (typeof name === "string") {
     const normalized = name.toLowerCase();
@@ -730,6 +854,35 @@ async function readCachedAccessTokenWithPersistence(definition, persistence, log
   if (typeof tokens.refresh_token !== "string" || tokens.refresh_token.trim().length === 0) {
     return tokens.access_token;
   }
+  if (definition.command.kind !== "http") {
+    return tokens.access_token;
+  }
+  try {
+    return await withRefreshLock(definition, async () => await refreshCachedOAuthTokenUnderLock(definition, persistence, tokens, logger));
+  } catch (error) {
+    if (isFileLockTimeoutError(error)) {
+      return await accessTokenAfterLockTimeout(definition, persistence, "OAuth", logger);
+    }
+    throw error;
+  }
+}
+async function refreshCachedOAuthTokenUnderLock(definition, persistence, original, logger) {
+  const latest = await reconcilePersistedTokens(definition, persistence, logger);
+  const decision = decideUnderRefreshLock(original, latest, TOKEN_EXPIRY_SKEW_SECONDS);
+  if (decision.kind === "gone") {
+    logger?.debug?.(`Cached OAuth token for '${definition.name}' was cleared before its refresh could run.`);
+    return void 0;
+  }
+  if (decision.kind === "unrefreshable") {
+    return decision.accessToken;
+  }
+  if (decision.kind === "use") {
+    if (decision.adopted) {
+      logger?.debug?.(`Adopted the OAuth access token another refresh persisted first for '${definition.name}'.`);
+    }
+    return decision.accessToken;
+  }
+  const tokens = decision.tokens;
   let persistedClientInformation;
   try {
     const staticClientInformation = buildStaticClientInformation(definition);
@@ -742,13 +895,14 @@ async function readCachedAccessTokenWithPersistence(definition, persistence, log
     if (definition.command.kind !== "http") {
       return tokens.access_token;
     }
-    const serverInfo = await discoverOAuthServerInfo(definition.command.url);
+    const serverInfo = await discoverOAuthServerInfo(definition.command.url, { fetchFn: boundedRefreshFetch });
     await assertRefreshIssuerBinding(definition, persistence, tokens, clientInformation, serverInfo.authorizationServerUrl);
     const resource = resourceForRefresh(definition.command.url, serverInfo.resourceMetadata);
     const refreshed = await refreshAuthorization(serverInfo.authorizationServerUrl, {
       metadata: serverInfo.authorizationServerMetadata,
       clientInformation,
-      refreshToken: tokens.refresh_token,
+      refreshToken: decision.refreshToken,
+      fetchFn: boundedRefreshFetch,
       ...resource ? { resource } : {}
     });
     await persistence.saveTokens({ ...refreshed, issuer: serverInfo.authorizationServerUrl });
@@ -766,6 +920,12 @@ async function readCachedAccessTokenWithPersistence(definition, persistence, log
     return tokens.access_token;
   }
 }
+function boundedRefreshFetch(input, init) {
+  return withRefreshRequestTimeout(fetch)(input, init);
+}
+function withRefreshRequestTimeout(fetchFn) {
+  return async (input, init) => await fetchFn(input, { ...init, signal: init?.signal ?? AbortSignal.timeout(TOKEN_REQUEST_TIMEOUT_MS) });
+}
 async function recoverFromUnrecoverableRefresh(definition, persistence, tokens, unrecoverableCode, tokenKind, logger, rejectedClientInformation) {
   const clientToClear = unrecoverableCode === "invalid_grant" ? void 0 : rejectedClientInformation;
   await persistence.clearRejectedCredentials(tokens, clientToClear);
@@ -791,7 +951,36 @@ async function readExplicitRefreshableBearerToken(definition, persistence, token
     throw new Error(`Cached bearer token for '${definition.name}' is expired, but no refresh_token is available.`);
   }
   try {
-    const refreshed = await refreshBearerToken(definition, tokens.refresh_token);
+    return await withRefreshLock(definition, async () => await refreshBearerTokenUnderLock(definition, persistence, tokens, skewSeconds, logger));
+  } catch (error) {
+    if (!isFileLockTimeoutError(error)) {
+      throw error;
+    }
+    const persisted = await accessTokenAfterLockTimeout(definition, persistence, "bearer", logger);
+    if (persisted) {
+      return persisted;
+    }
+    throw new Error(`Failed to refresh cached bearer token for '${definition.name}': timed out waiting for the refresh lock.`, { cause: error });
+  }
+}
+async function refreshBearerTokenUnderLock(definition, persistence, original, skewSeconds, logger) {
+  const latest = await reconcilePersistedTokens(definition, persistence, logger);
+  const decision = decideUnderRefreshLock(original, latest, skewSeconds);
+  if (decision.kind === "gone") {
+    throw new Error(`Cached bearer token for '${definition.name}' was cleared before its refresh could run.`);
+  }
+  if (decision.kind === "unrefreshable") {
+    throw new Error(`Cached bearer token for '${definition.name}' is expired, but no refresh_token is available.`);
+  }
+  if (decision.kind === "use") {
+    if (decision.adopted) {
+      logger?.debug?.(`Adopted the bearer access token another refresh persisted first for '${definition.name}'.`);
+    }
+    return decision.accessToken;
+  }
+  const tokens = decision.tokens;
+  try {
+    const refreshed = await refreshBearerToken(definition, decision.refreshToken);
     await persistence.saveTokens(refreshed);
     logger?.debug?.(`Refreshed bearer access token for '${definition.name}' (non-interactive).`);
     return refreshed.access_token;
@@ -840,7 +1029,7 @@ async function refreshBearerToken(definition, refreshToken) {
     }
     headers.authorization = `Basic ${Buffer.from(`${formEncodeCredential(clientId)}:${formEncodeCredential(clientSecret)}`).toString("base64")}`;
   }
-  const response = await fetch(refresh.tokenEndpoint, {
+  const response = await boundedRefreshFetch(refresh.tokenEndpoint, {
     method: "POST",
     headers,
     body
@@ -904,7 +1093,7 @@ function readClientSecret(definition, refreshClientSecretEnv) {
   return resolveOAuthClientSecret(definition, { rejectBlank: true });
 }
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/oauth-persistence.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/oauth-persistence.js
 async function buildOAuthPersistence(definition, logger) {
   return await createOAuthPersistenceStores(definition, logger);
 }
@@ -923,6 +1112,11 @@ async function readCachedAccessToken(definition, logger) {
 
 export {
   buildStaticClientInformation,
+  withRefreshLock,
+  reconcilePersistedTokens,
+  oauthAccessTokenNeedsRefresh,
+  readCachedAccessTokenWithPersistence,
+  withRefreshRequestTimeout,
   buildOAuthPersistence,
   clearOAuthCaches,
   readCachedAccessToken

package/dist/mcp-chunks/{chunk-7DH57OKF.js → chunk-MWD5PZ4G.js}

@@ -1,9 +1,9 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   analyzeConnectionError
-} from "./chunk-DEUU7WSN.js";
+} from "./chunk-ZNKNF2BV.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/runtime-oauth-support.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/runtime-oauth-support.js
 function maybeEnableOAuth(definition, logger) {
   if (definition.auth === "oauth" || definition.auth === "refreshable_bearer") {
     return void 0;

package/dist/mcp-chunks/{chunk-YSPT6F7K.js → chunk-N2HVJU7X.js}

@@ -1,6 +1,6 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/daemon/launch.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/daemon/launch.js
 import { spawn } from "node:child_process";
 import path from "node:path";
 function launchDaemonDetached(options, launch = spawn) {

package/dist/mcp-chunks/{chunk-WWO5WGH5.js → chunk-NACLB5YH.js}

@@ -1,20 +1,20 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   __configInternals
-} from "./chunk-L4VKBFYI.js";
+} from "./chunk-5HQYKAE7.js";
 import {
   withFileLock,
   writeTextFileAtomic
-} from "./chunk-7A63PAGP.js";
+} from "./chunk-ETYYCEQF.js";
 import {
   expandHome
-} from "./chunk-HAO6PL7Z.js";
+} from "./chunk-DIIFWDZ7.js";
 import {
   canonicalKeepAliveName,
   resolveLifecycle
-} from "./chunk-6D6KPSXN.js";
+} from "./chunk-AJPFOQLF.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/adhoc-server.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/cli/adhoc-server.js
 import fs from "node:fs/promises";
 import path from "node:path";
 var TEMP_SOURCE = { kind: "local", path: "<adhoc>" };

package/dist/mcp-chunks/{chunk-QJACOI2W.js → chunk-NMF5S5DC.js}

@@ -1,12 +1,13 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   raceWithTimeout
-} from "./chunk-ETWN4IIA.js";
+} from "./chunk-LYZRCACV.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/timeouts.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/cli/timeouts.js
 var DEFAULT_LIST_TIMEOUT_MS = 3e4;
 var DEFAULT_CALL_TIMEOUT_MS = 6e4;
 var POSITIVE_INTEGER_PATTERN = /^[1-9]\d*$/;
+var STDOUT_FLUSH_TIMEOUT_MS = 2e3;
 function parsePositiveInteger(raw) {
   if (!raw || !POSITIVE_INTEGER_PATTERN.test(raw)) {
     return void 0;
@@ -49,6 +50,7 @@ function consumeTimeoutFlag(args, index, options) {
 }
 
 export {
+  STDOUT_FLUSH_TIMEOUT_MS,
   parsePositiveInteger,
   parseTimeout,
   LIST_TIMEOUT_MS,

package/dist/mcp-chunks/{chunk-54EWGONA.js → chunk-NPU7EMGE.js}

@@ -2,15 +2,15 @@ import { createRequire as __createRequire } from "node:module"; const require =
 import {
   buildFallbackLiteral,
   pickExampleLiteral
-} from "./chunk-P3RN22HQ.js";
+} from "./chunk-3MIFROM7.js";
 import {
   cyanText,
   dimText,
   extraDimText,
   yellowText
-} from "./chunk-XUF6KARU.js";
+} from "./chunk-IUFDFNNP.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/list-signature.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/cli/list-signature.js
 function formatFunctionSignature(name, options, outputSchema, formatOptions) {
   const colorize = formatOptions?.colorize !== false;
   const keyword = colorize ? extraDimText("function") : "function";
@@ -136,7 +136,8 @@ function inferSchemaDisplayType(descriptor) {
 function formatTypeAnnotation(option, colorize) {
   let baseType;
   if (option.enumValues && option.enumValues.length > 0) {
-    baseType = option.enumValues.map((value) => JSON.stringify(value)).join(" | ");
+    const union = option.enumValues.map((value) => JSON.stringify(value)).join(" | ");
+    baseType = option.type === "array" ? formatEnumArrayType(union, option.enumValues.length) : union;
   } else {
     switch (option.type) {
       case "number":
@@ -174,6 +175,9 @@ function formatTypeAnnotation(option, colorize) {
   }
   return base;
 }
+function formatEnumArrayType(union, memberCount) {
+  return memberCount > 1 ? `(${union})[]` : `${union}[]`;
+}
 function formatArrayItemType(type) {
   switch (type) {
     case "string":
@@ -189,7 +193,7 @@ function formatArrayItemType(type) {
   }
 }
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/list-doc-comments.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/cli/list-doc-comments.js
 var DEFAULT_WRAP_WIDTH = 100;
 function buildDocComment(description, options, opts) {
   const colorize = opts?.colorize !== false;
@@ -300,7 +304,7 @@ function wrapCommentText(text, width = DEFAULT_WRAP_WIDTH) {
   return lines;
 }
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/list-detail-helpers.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/cli/list-detail-helpers.js
 var DEFAULT_MIN_VISIBLE_PARAMS = 5;
 function selectDisplayOptions(options, requiredOnly, minVisible = DEFAULT_MIN_VISIBLE_PARAMS) {
   if (!requiredOnly || options.length <= minVisible) {

package/dist/mcp-chunks/{chunk-SFREPU3D.js → chunk-NSZY5WLR.js}

@@ -1,6 +1,6 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/version.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/version.js
 import { createRequire } from "node:module";
 var MCPORTER_VERSION = (() => {
   try {

package/dist/mcp-chunks/{chunk-7RDLPFIO.js → chunk-QK6LUI5Q.js}

@@ -2,9 +2,9 @@ import { createRequire as __createRequire } from "node:module"; const require =
 import {
   logInfo,
   logWarn
-} from "./chunk-RBVYCKCD.js";
+} from "./chunk-ILULMM2E.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/runtime-debug.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/cli/runtime-debug.js
 var DEBUG_HANG = process.env.MCPORTER_DEBUG_HANG === "1";
 function describeHandle(handle) {
   if (!handle || typeof handle !== "object" && typeof handle !== "function") {

package/dist/mcp-chunks/{chunk-XTL4MHFH.js → chunk-QONTHFPO.js}

@@ -1,18 +1,19 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   isUnauthorizedError
-} from "./chunk-7DH57OKF.js";
+} from "./chunk-MWD5PZ4G.js";
 import {
   ProtocolErrorCode
-} from "./chunk-YPJ5EHXR.js";
+} from "./chunk-K56RW4HB.js";
 import {
+  DAEMON_OAUTH_FLOW_ERROR_CODE,
   DAEMON_OPERATION_TIMEOUT_CODE
-} from "./chunk-ZBFZ5UFE.js";
+} from "./chunk-MDVNQ4HM.js";
 import {
   isKeepAliveServer
-} from "./chunk-6D6KPSXN.js";
+} from "./chunk-AJPFOQLF.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/daemon/runtime-wrapper.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/daemon/runtime-wrapper.js
 function createKeepAliveRuntime(base, options) {
   if (!options.daemonClient || options.keepAliveServers.size === 0) {
     return base;
@@ -152,8 +153,11 @@ function shouldRestartDaemonServer(error) {
   if (!error) {
     return false;
   }
-  if (typeof error === "object" && error.code === DAEMON_OPERATION_TIMEOUT_CODE) {
-    return false;
+  if (typeof error === "object") {
+    const code2 = error.code;
+    if (code2 === DAEMON_OPERATION_TIMEOUT_CODE || code2 === DAEMON_OAUTH_FLOW_ERROR_CODE) {
+      return false;
+    }
   }
   if (isUnauthorizedError(error)) {
     return false;

package/dist/mcp-chunks/{chunk-YTKRAHO6.js → chunk-RDOD354S.js}

@@ -1,15 +1,15 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   buildRecordCommandEnv
-} from "./chunk-E6RVTWJY.js";
+} from "./chunk-5YBCGQA7.js";
 import {
   PRIVATE_RECORDING_FILE_MODE,
   ensurePrivateRecordingDir,
   resolveRecordingConfigPath,
   resolveRecordingPath
-} from "./chunk-E6T37ED6.js";
+} from "./chunk-FNQV2ONG.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/record-replay-command.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/cli/record-replay-command.js
 import { spawn } from "node:child_process";
 import fs from "node:fs/promises";
 async function writeRecordReplayConfig(parsed, mode) {
@@ -63,7 +63,7 @@ function buildRecordReplayInstructionEnv(mode, sessionName, server) {
   };
 }
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/record-command.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/cli/record-command.js
 async function handleRecordCli(args) {
   const parsed = parseRecordArgs(args);
   const recordPath = resolveRecordingPath(parsed.sessionName);

package/dist/mcp-chunks/{chunk-2MEHGB7D.js → chunk-RXSZ2W6Y.js}

@@ -1,6 +1,6 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/sdk-stdio-logging.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/sdk-stdio-logging.js
 var STDIO_LOGS_FORCED = process.env.MCPORTER_STDIO_LOGS === "1";
 var STDIO_TRACE_ENABLED = process.env.MCPORTER_STDIO_TRACE === "1";
 var stdioLogMode = STDIO_LOGS_FORCED ? "always" : "auto";

package/dist/mcp-chunks/{chunk-UHOKCTZT.js → chunk-RYAUNXFA.js}

@@ -1,6 +1,6 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/stable-json.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/stable-json.js
 function stableJsonStringify(value, space) {
   const json = JSON.stringify(sortJsonValue(value), void 0, space);
   if (json === void 0) {

package/dist/mcp-chunks/{chunk-GIF7LOYU.js → chunk-SCD2NAX5.js}

@@ -1,9 +1,9 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   normalizeHttpUrl
-} from "./chunk-UENXT3NE.js";
+} from "./chunk-ILSK6AWI.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/server-lookup.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/cli/server-lookup.js
 function findServerByHttpUrl(definitions, urlString) {
   const normalizedTarget = normalizeHttpUrl(urlString);
   if (!normalizedTarget) {

package/dist/mcp-chunks/{chunk-F3LL4EBL.js → chunk-SHZVDY6Z.js}

@@ -1,6 +1,6 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/output-format.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/cli/output-format.js
 function consumeOutputFormat(args, options = {}) {
   const allowed = options.allowed ?? ["auto", "text", "markdown", "json", "raw"];
   const defaultFormat = options.defaultFormat ?? "auto";

package/dist/mcp-chunks/{chunk-CNDY7WB4.js → chunk-TAVMVGD5.js}

@@ -1,9 +1,9 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   logWarn
-} from "./chunk-RBVYCKCD.js";
+} from "./chunk-ILULMM2E.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/output-utils.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/cli/output-utils.js
 import fs from "node:fs";
 import path from "node:path";
 import { inspect } from "node:util";

package/dist/mcp-chunks/{chunk-JAKI24KR.js → chunk-U23EY5DN.js}

@@ -1,6 +1,6 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/identifier-helpers.js
+// node_modules/.pnpm/mcporter@0.13.6/node_modules/mcporter/dist/cli/identifier-helpers.js
 var AUTO_THRESHOLD_RATIO = 0.3;
 var AUTO_THRESHOLD_MIN = 2;
 function chooseClosestIdentifier(input, candidates) {