@introspection-ai/recipes 0.19.3 → 0.21.0

package/dist/mcp-chunks/{chunk-DXPHJFSA.js → chunk-OGFFBNIC.js}

@@ -1,9 +1,9 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   pickSharedDefinitionFields
-} from "./chunk-H7F5RZXS.js";
+} from "./chunk-JILBFEBD.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli-metadata.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/cli-metadata.js
 import { spawn } from "node:child_process";
 import fs from "node:fs/promises";
 function metadataPathForArtifact(artifactPath) {
@@ -92,7 +92,7 @@ function serializeDefinition(definition) {
   };
 }
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/generate/tool-selection.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/cli/generate/tool-selection.js
 function validateToolSelection(includeTools, excludeTools, context) {
   if (includeTools && excludeTools) {
     throw new Error(context.mutuallyExclusiveMessage);
@@ -105,7 +105,7 @@ function validateToolSelection(includeTools, excludeTools, context) {
   }
 }
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/generate/template-data.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/cli/generate/template-data.js
 function buildGenerateCliCommand(invocation, definition, globalFlags = {}) {
   const tokens = ["mcporter"];
   const configPath = invocation.configPath ?? globalFlags["--config"];

package/dist/mcp-chunks/{chunk-7RDLPFIO.js → chunk-PPIXUCYQ.js}

@@ -2,9 +2,9 @@ import { createRequire as __createRequire } from "node:module"; const require =
 import {
   logInfo,
   logWarn
-} from "./chunk-RBVYCKCD.js";
+} from "./chunk-PPOHGQKM.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/runtime-debug.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/cli/runtime-debug.js
 var DEBUG_HANG = process.env.MCPORTER_DEBUG_HANG === "1";
 function describeHandle(handle) {
   if (!handle || typeof handle !== "object" && typeof handle !== "function") {

package/dist/mcp-chunks/{chunk-RBVYCKCD.js → chunk-PPOHGQKM.js}

@@ -2,9 +2,9 @@ import { createRequire as __createRequire } from "node:module"; const require =
 import {
   createPrefixedConsoleLogger,
   resolveLogLevelFromEnv
-} from "./chunk-GFYTST6N.js";
+} from "./chunk-X3FOKZ5C.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/logger-context.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/cli/logger-context.js
 var activeLogLevel = resolveLogLevelFromEnv();
 var activeLogger = createPrefixedConsoleLogger("mcporter", activeLogLevel);
 function getActiveLogLevel() {

package/dist/mcp-chunks/{chunk-E6T37ED6.js → chunk-PRZCYXVO.js}

@@ -1,9 +1,9 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   legacyMcporterDir
-} from "./chunk-FWP4RACK.js";
+} from "./chunk-TGJOZDKG.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/runtime/record-transport.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/runtime/record-transport.js
 import fs from "node:fs/promises";
 import path from "node:path";
 var initializedRecordingPaths = /* @__PURE__ */ new Map();

package/dist/mcp-chunks/{chunk-ETWN4IIA.js → chunk-Q7ESBNJG.js}

@@ -1,11 +1,11 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   resolveEnvPlaceholders
-} from "./chunk-HAO6PL7Z.js";
+} from "./chunk-HBDCHBJP.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/runtime/utils.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/runtime/utils.js
 var ENV_PLACEHOLDER_PATTERN = /\$\{[A-Za-z_][A-Za-z0-9_]*(?::-[^}]*)?\}/;
-function resolveCommandArgument(value) {
+function resolveCommandArgument(value, env = process.env) {
   if (!value) {
     return value;
   }
@@ -16,13 +16,13 @@ function resolveCommandArgument(value) {
   if (!needsInterpolation) {
     return value;
   }
-  return resolveEnvPlaceholders(value);
+  return resolveEnvPlaceholders(value, env);
 }
-function resolveCommandArguments(args) {
+function resolveCommandArguments(args, env = process.env) {
   if (args.length === 0) {
     return [];
   }
-  return args.map((arg) => resolveCommandArgument(arg));
+  return args.map((arg) => resolveCommandArgument(arg, env));
 }
 function normalizeTimeout(raw) {
   if (raw == null) {

package/dist/mcp-chunks/{chunk-CA5WFJZA.js → chunk-RE4EVQNC.js}

@@ -1,6 +1,6 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/runtime/elicitation.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/runtime/elicitation.js
 import readline from "node:readline";
 var NON_INTERACTIVE_ELICITATION_HINT = "Server requested interactive input; run mcporter in a terminal.";
 function createInteractiveElicitationResponder(options = {}) {

package/dist/mcp-chunks/{chunk-6D6KPSXN.js → chunk-RO2Y34XX.js}

@@ -1,6 +1,6 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/lifecycle.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/lifecycle.js
 var DEFAULT_KEEP_ALIVE = /* @__PURE__ */ new Set(["chrome-devtools", "mobile-mcp", "playwright", "cloudbase"]);
 var includeOverride = parseList(process.env.MCPORTER_KEEPALIVE);
 var excludeOverride = parseList(process.env.MCPORTER_DISABLE_KEEPALIVE ?? process.env.MCPORTER_NO_KEEPALIVE);

package/dist/mcp-chunks/{chunk-KSMY7PXI.js → chunk-SAK5KCLR.js}

@@ -1,6 +1,6 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/json-output.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/cli/json-output.js
 function buildConnectionIssueEnvelope(params) {
   return {
     server: params.server,

package/dist/mcp-chunks/{chunk-UENXT3NE.js → chunk-SCGMRUKI.js}

@@ -1,6 +1,6 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/cli/http-utils.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/cli/http-utils.js
 var DOMAIN_WITH_PATH_PATTERN = /^[A-Za-z0-9](?:[A-Za-z0-9.-]*)(?::\d+)?\//;
 function normalizeHttpUrlCandidate(value) {
   if (!value) {

package/dist/mcp-chunks/{chunk-3IZQW4H4.js → chunk-SQTXZR56.js}

@@ -12,31 +12,35 @@ import {
   sameOAuthTokenGeneration,
   sameOAuthTokenValue,
   saveVaultEntry,
+  vaultCredentialKeys,
   withHiddenOAuthClientGeneration,
   withHiddenOAuthTokenGeneration,
   withOAuthClientGeneration,
   withOAuthTokenGeneration
-} from "./chunk-C2PQFLWS.js";
+} from "./chunk-7CS27CWE.js";
 import {
   checkResourceAllowed,
   discoverOAuthServerInfo,
   refreshAuthorization,
   resourceUrlFromServerUrl
-} from "./chunk-YPJ5EHXR.js";
+} from "./chunk-K56RW4HB.js";
 import {
+  canonicalizeFilePath,
+  isFileLockTimeoutError,
   readJsonFile,
   withFileLock,
   writeJsonFile,
   writeTextFileAtomic
-} from "./chunk-7A63PAGP.js";
+} from "./chunk-ADINDBOF.js";
 import {
-  legacyMcporterDir
-} from "./chunk-FWP4RACK.js";
+  legacyMcporterDir,
+  mcporterDir
+} from "./chunk-TGJOZDKG.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/oauth-persistence.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/oauth-persistence.js
 import fs2 from "node:fs/promises";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/oauth-persistence-stores.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/oauth-persistence-stores.js
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
@@ -441,6 +445,10 @@ var CompositePersistence = class {
     this.recoveryTokenSource = result.source;
     return result.value;
   }
+  async readTokensPerStore() {
+    const perStore = await Promise.all(this.stores.map((store) => store.readTokens()));
+    return perStore.filter((tokens) => tokens !== void 0);
+  }
   async saveTokens(tokens) {
     const stored = prepareStoredTokens(tokens);
     await Promise.all(this.stores.map((store) => store.saveTokens(stored)));
@@ -598,10 +606,10 @@ async function clearLegacyOAuthArtifacts(definition, logger, scope) {
   }));
 }
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/oauth-token-refresh.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/oauth-token-refresh.js
 import { Buffer } from "node:buffer";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/oauth-client-info.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/oauth-client-info.js
 function buildStaticClientInformation(definition, options = {}) {
   if (!definition.oauthClientId) {
     return void 0;
@@ -627,10 +635,121 @@ function resolveOAuthClientSecret(definition, options = {}) {
   return definition.oauthClientSecret;
 }
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/oauth-token-refresh.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/oauth-refresh-lock.js
+import { AsyncLocalStorage } from "node:async_hooks";
+import crypto from "node:crypto";
+import path2 from "node:path";
+var REFRESH_LOCK_DIR = "refresh-locks";
+var LOCK_LABEL_MAX = 40;
+var IDENTITY_HASH_LENGTH = 16;
+var TIMEOUT_OVERRIDE_ENV = "MCPORTER_TEST_REFRESH_LOCK_TIMEOUT_MS";
+var heldLockPaths = new AsyncLocalStorage();
+function refreshLockDir() {
+  return path2.join(mcporterDir("data"), REFRESH_LOCK_DIR);
+}
+async function refreshLockPaths(definition) {
+  const paths = [];
+  if (definition.tokenCacheDir) {
+    const tokenPath = await canonicalizeFilePath(path2.join(definition.tokenCacheDir, "tokens.json"));
+    paths.push(lockPathFor(path2.basename(path2.dirname(tokenPath)), `dir:${tokenPath}`));
+  }
+  for (const vaultKey of await vaultCredentialKeys(definition)) {
+    paths.push(lockPathFor(vaultKey.split("|")[0] ?? "", `vault:${vaultKey}`));
+  }
+  return [...new Set(paths)].toSorted();
+}
+async function withRefreshLock(definition, task, options = {}) {
+  const lockPaths = await refreshLockPaths(definition);
+  return await acquireAll(lockPaths, task, resolveTimeoutMs(options.timeoutMs));
+}
+async function acquireAll(lockPaths, task, timeoutMs) {
+  const held = heldLockPaths.getStore();
+  const pending = held ? lockPaths.filter((lockPath) => !held.has(lockPath)) : lockPaths;
+  if (pending.length === 0) {
+    return await task();
+  }
+  const nextHeld = /* @__PURE__ */ new Set([...held ?? [], ...pending]);
+  return await heldLockPaths.run(nextHeld, async () => {
+    let run = task;
+    for (const lockPath of pending.toReversed()) {
+      const inner = run;
+      run = async () => await withFileLock(lockPath, inner, timeoutMs === void 0 ? {} : { timeoutMs });
+    }
+    return await run();
+  });
+}
+function resolveTimeoutMs(explicit) {
+  if (explicit !== void 0) {
+    return explicit;
+  }
+  const raw = process.env[TIMEOUT_OVERRIDE_ENV];
+  if (raw === void 0 || raw.trim().length === 0) {
+    return void 0;
+  }
+  const parsed = Number(raw);
+  return Number.isFinite(parsed) && parsed >= 0 ? parsed : void 0;
+}
+function lockPathFor(label, identity) {
+  const digest = crypto.createHash("sha256").update(identity).digest("hex").slice(0, IDENTITY_HASH_LENGTH);
+  const safeLabel = filenameSafeLabel(label);
+  return path2.join(refreshLockDir(), safeLabel.length > 0 ? `${safeLabel}-${digest}` : digest);
+}
+function filenameSafeLabel(value) {
+  return value.replace(/[^A-Za-z0-9._-]+/g, "_").replace(/^[._-]+/, "").slice(0, LOCK_LABEL_MAX);
+}
+
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/oauth-token-refresh.js
 var TOKEN_EXPIRY_SKEW_SECONDS = 60;
+var TOKEN_REQUEST_TIMEOUT_MS = 1e4;
 var OAuthIssuerMismatchError = class extends Error {
 };
+function decideUnderRefreshLock(original, latest, skewSeconds) {
+  if (!latest || typeof latest.access_token !== "string" || latest.access_token.trim().length === 0) {
+    return { kind: "gone" };
+  }
+  const adopted = cachedTokensChanged(original, latest);
+  if (!shouldRefreshCachedToken(latest, skewSeconds)) {
+    return { kind: "use", accessToken: latest.access_token, adopted };
+  }
+  if (typeof latest.refresh_token !== "string" || latest.refresh_token.trim().length === 0) {
+    return adopted ? { kind: "use", accessToken: latest.access_token, adopted } : { kind: "unrefreshable", accessToken: latest.access_token };
+  }
+  return { kind: "redeem", tokens: latest, refreshToken: latest.refresh_token };
+}
+async function reconcilePersistedTokens(definition, persistence, logger) {
+  const perStore = await persistence.readTokensPerStore?.();
+  if (!perStore || perStore.length <= 1) {
+    return await persistence.readTokens();
+  }
+  const candidates = perStore.filter((candidate) => typeof candidate.access_token === "string" && candidate.access_token.trim().length > 0);
+  const distinctRefreshTokens = new Set(candidates.map((candidate) => typeof candidate.refresh_token === "string" ? candidate.refresh_token : ""));
+  if (candidates.length <= 1 || distinctRefreshTokens.size <= 1) {
+    return await persistence.readTokens();
+  }
+  let selected = candidates[0];
+  for (const candidate of candidates.slice(1)) {
+    if (selected === void 0 || outranksForRedemption(candidate, selected)) {
+      selected = candidate;
+    }
+  }
+  logger?.debug?.(`Persisted OAuth stores for '${definition.name}' hold different refresh tokens; redeeming the newest.`);
+  return selected;
+}
+function outranksForRedemption(candidate, incumbent) {
+  const candidateDue = shouldRefreshCachedToken(candidate);
+  if (candidateDue !== shouldRefreshCachedToken(incumbent)) {
+    return !candidateDue;
+  }
+  const candidateExpiry = tokenExpirySeconds(candidate) ?? Number.NEGATIVE_INFINITY;
+  const incumbentExpiry = tokenExpirySeconds(incumbent) ?? Number.NEGATIVE_INFINITY;
+  return candidateExpiry > incumbentExpiry;
+}
+async function accessTokenAfterLockTimeout(definition, persistence, tokenKind, logger) {
+  const latest = await persistence.readTokens();
+  const accessToken = typeof latest?.access_token === "string" && latest.access_token.trim().length > 0 ? latest.access_token : void 0;
+  logger?.debug?.(`Timed out waiting for the ${tokenKind} refresh lock for '${definition.name}'; ${accessToken ? "returning the persisted access token, which may already be expired." : "no persisted access token remains."}`);
+  return accessToken;
+}
 function tokenExpirySeconds(tokens) {
   const stored = tokens;
   for (const candidate of [stored.expires_at, stored.expiresAt]) {
@@ -646,6 +765,9 @@ function cachedTokensChanged(original, current) {
   }
   return !sameOAuthTokenGeneration(current, original);
 }
+function oauthAccessTokenNeedsRefresh(tokens) {
+  return shouldRefreshCachedToken(tokens);
+}
 function shouldRefreshCachedToken(tokens, skewSeconds = TOKEN_EXPIRY_SKEW_SECONDS) {
   const expiresAt = tokenExpirySeconds(tokens);
   if (expiresAt !== void 0) {
@@ -698,9 +820,11 @@ function oauthErrorCode(error) {
   if (!error || typeof error !== "object") {
     return void 0;
   }
-  const { errorCode, name } = error;
-  if (typeof errorCode === "string" && errorCode.length > 0) {
-    return errorCode.toLowerCase();
+  const { errorCode, code, name } = error;
+  for (const candidate of [errorCode, code]) {
+    if (typeof candidate === "string" && candidate.length > 0) {
+      return candidate.toLowerCase();
+    }
   }
   if (typeof name === "string") {
     const normalized = name.toLowerCase();
@@ -730,6 +854,35 @@ async function readCachedAccessTokenWithPersistence(definition, persistence, log
   if (typeof tokens.refresh_token !== "string" || tokens.refresh_token.trim().length === 0) {
     return tokens.access_token;
   }
+  if (definition.command.kind !== "http") {
+    return tokens.access_token;
+  }
+  try {
+    return await withRefreshLock(definition, async () => await refreshCachedOAuthTokenUnderLock(definition, persistence, tokens, logger));
+  } catch (error) {
+    if (isFileLockTimeoutError(error)) {
+      return await accessTokenAfterLockTimeout(definition, persistence, "OAuth", logger);
+    }
+    throw error;
+  }
+}
+async function refreshCachedOAuthTokenUnderLock(definition, persistence, original, logger) {
+  const latest = await reconcilePersistedTokens(definition, persistence, logger);
+  const decision = decideUnderRefreshLock(original, latest, TOKEN_EXPIRY_SKEW_SECONDS);
+  if (decision.kind === "gone") {
+    logger?.debug?.(`Cached OAuth token for '${definition.name}' was cleared before its refresh could run.`);
+    return void 0;
+  }
+  if (decision.kind === "unrefreshable") {
+    return decision.accessToken;
+  }
+  if (decision.kind === "use") {
+    if (decision.adopted) {
+      logger?.debug?.(`Adopted the OAuth access token another refresh persisted first for '${definition.name}'.`);
+    }
+    return decision.accessToken;
+  }
+  const tokens = decision.tokens;
   let persistedClientInformation;
   try {
     const staticClientInformation = buildStaticClientInformation(definition);
@@ -742,13 +895,14 @@ async function readCachedAccessTokenWithPersistence(definition, persistence, log
     if (definition.command.kind !== "http") {
       return tokens.access_token;
     }
-    const serverInfo = await discoverOAuthServerInfo(definition.command.url);
+    const serverInfo = await discoverOAuthServerInfo(definition.command.url, { fetchFn: boundedRefreshFetch });
     await assertRefreshIssuerBinding(definition, persistence, tokens, clientInformation, serverInfo.authorizationServerUrl);
     const resource = resourceForRefresh(definition.command.url, serverInfo.resourceMetadata);
     const refreshed = await refreshAuthorization(serverInfo.authorizationServerUrl, {
       metadata: serverInfo.authorizationServerMetadata,
       clientInformation,
-      refreshToken: tokens.refresh_token,
+      refreshToken: decision.refreshToken,
+      fetchFn: boundedRefreshFetch,
       ...resource ? { resource } : {}
     });
     await persistence.saveTokens({ ...refreshed, issuer: serverInfo.authorizationServerUrl });
@@ -766,6 +920,12 @@ async function readCachedAccessTokenWithPersistence(definition, persistence, log
     return tokens.access_token;
   }
 }
+function boundedRefreshFetch(input, init) {
+  return withRefreshRequestTimeout(fetch)(input, init);
+}
+function withRefreshRequestTimeout(fetchFn) {
+  return async (input, init) => await fetchFn(input, { ...init, signal: init?.signal ?? AbortSignal.timeout(TOKEN_REQUEST_TIMEOUT_MS) });
+}
 async function recoverFromUnrecoverableRefresh(definition, persistence, tokens, unrecoverableCode, tokenKind, logger, rejectedClientInformation) {
   const clientToClear = unrecoverableCode === "invalid_grant" ? void 0 : rejectedClientInformation;
   await persistence.clearRejectedCredentials(tokens, clientToClear);
@@ -791,7 +951,36 @@ async function readExplicitRefreshableBearerToken(definition, persistence, token
     throw new Error(`Cached bearer token for '${definition.name}' is expired, but no refresh_token is available.`);
   }
   try {
-    const refreshed = await refreshBearerToken(definition, tokens.refresh_token);
+    return await withRefreshLock(definition, async () => await refreshBearerTokenUnderLock(definition, persistence, tokens, skewSeconds, logger));
+  } catch (error) {
+    if (!isFileLockTimeoutError(error)) {
+      throw error;
+    }
+    const persisted = await accessTokenAfterLockTimeout(definition, persistence, "bearer", logger);
+    if (persisted) {
+      return persisted;
+    }
+    throw new Error(`Failed to refresh cached bearer token for '${definition.name}': timed out waiting for the refresh lock.`, { cause: error });
+  }
+}
+async function refreshBearerTokenUnderLock(definition, persistence, original, skewSeconds, logger) {
+  const latest = await reconcilePersistedTokens(definition, persistence, logger);
+  const decision = decideUnderRefreshLock(original, latest, skewSeconds);
+  if (decision.kind === "gone") {
+    throw new Error(`Cached bearer token for '${definition.name}' was cleared before its refresh could run.`);
+  }
+  if (decision.kind === "unrefreshable") {
+    throw new Error(`Cached bearer token for '${definition.name}' is expired, but no refresh_token is available.`);
+  }
+  if (decision.kind === "use") {
+    if (decision.adopted) {
+      logger?.debug?.(`Adopted the bearer access token another refresh persisted first for '${definition.name}'.`);
+    }
+    return decision.accessToken;
+  }
+  const tokens = decision.tokens;
+  try {
+    const refreshed = await refreshBearerToken(definition, decision.refreshToken);
     await persistence.saveTokens(refreshed);
     logger?.debug?.(`Refreshed bearer access token for '${definition.name}' (non-interactive).`);
     return refreshed.access_token;
@@ -840,7 +1029,7 @@ async function refreshBearerToken(definition, refreshToken) {
     }
     headers.authorization = `Basic ${Buffer.from(`${formEncodeCredential(clientId)}:${formEncodeCredential(clientSecret)}`).toString("base64")}`;
   }
-  const response = await fetch(refresh.tokenEndpoint, {
+  const response = await boundedRefreshFetch(refresh.tokenEndpoint, {
     method: "POST",
     headers,
     body
@@ -904,7 +1093,7 @@ function readClientSecret(definition, refreshClientSecretEnv) {
   return resolveOAuthClientSecret(definition, { rejectBlank: true });
 }
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/oauth-persistence.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/oauth-persistence.js
 async function buildOAuthPersistence(definition, logger) {
   return await createOAuthPersistenceStores(definition, logger);
 }
@@ -923,6 +1112,11 @@ async function readCachedAccessToken(definition, logger) {
 
 export {
   buildStaticClientInformation,
+  withRefreshLock,
+  reconcilePersistedTokens,
+  oauthAccessTokenNeedsRefresh,
+  readCachedAccessTokenWithPersistence,
+  withRefreshRequestTimeout,
   buildOAuthPersistence,
   clearOAuthCaches,
   readCachedAccessToken

package/dist/mcp-chunks/{chunk-FWP4RACK.js → chunk-TGJOZDKG.js}

@@ -1,9 +1,9 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 import {
   expandHome
-} from "./chunk-HAO6PL7Z.js";
+} from "./chunk-HBDCHBJP.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/paths.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/paths.js
 import os from "node:os";
 import path from "node:path";
 var XDG_HOME_ENV = {

package/dist/mcp-chunks/{chunk-DEUU7WSN.js → chunk-US57PK4B.js}

@@ -3,9 +3,9 @@ import {
   SdkHttpError,
   SseError,
   UnauthorizedError
-} from "./chunk-YPJ5EHXR.js";
+} from "./chunk-K56RW4HB.js";
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/error-classifier.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/error-classifier.js
 var AUTH_STATUSES = /* @__PURE__ */ new Set([401, 403]);
 var KEYWORD_AUTH_PATTERNS = [/unauthorized/, /invalid_token/, /forbidden/];
 var NUMERIC_AUTH_PATTERNS = [/(?<![0-9a-z_])401(?![0-9a-z_])/i];

package/dist/mcp-chunks/{chunk-UHOKCTZT.js → chunk-V4RYLZM5.js}

@@ -1,6 +1,6 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/stable-json.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/stable-json.js
 function stableJsonStringify(value, space) {
   const json = JSON.stringify(sortJsonValue(value), void 0, space);
   if (json === void 0) {

package/dist/mcp-chunks/{chunk-GFYTST6N.js → chunk-X3FOKZ5C.js}

@@ -1,6 +1,6 @@
 import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
 
-// node_modules/.pnpm/mcporter@0.13.0/node_modules/mcporter/dist/logging.js
+// node_modules/.pnpm/mcporter@0.13.7/node_modules/mcporter/dist/logging.js
 var LOG_LEVEL_ORDER = {
   debug: 10,
   info: 20,

package/dist/mcp-chunks/{chunk-GSZOK5TS.js → chunk-XK3LRH3Q.js}

@@ -2,10 +2,10 @@ import { createRequire as __createRequire } from "node:module"; const require =
 import {
   createCallResult,
   describeConnectionIssue
-} from "./chunk-NZOIX6XW.js";
+} from "./chunk-ACTRQW5L.js";
 import {
   createRuntime
-} from "./chunk-2FSDGCHW.js";
+} from "./chunk-47N2EELW.js";
 
 // node_modules/.pnpm/@opentelemetry+api@1.9.1/node_modules/@opentelemetry/api/build/esm/context/context.js
 function createContextKey(description) {
@@ -1505,7 +1505,7 @@ function loadMcporterCli() {
   if (mcporterCliPromise) return mcporterCliPromise;
   const previousDisableAutorun = process.env.MCPORTER_DISABLE_AUTORUN;
   process.env.MCPORTER_DISABLE_AUTORUN = "1";
-  mcporterCliPromise = import("./cli-E4P6SZLQ.js").finally(() => {
+  mcporterCliPromise = import("./cli-B7WQQUME.js").finally(() => {
     if (previousDisableAutorun === void 0) {
       delete process.env.MCPORTER_DISABLE_AUTORUN;
     } else {