@loopops/mcp-server 2.0.0 → 2.0.1

package/dist/api-client.js

@@ -153,34 +153,48 @@ function isRetryable(err) {
     return false;
 }
 /**
- * Persist a rotated refresh token back to ~/.mcp.json. Best-effort — if
- * the write fails, we still keep the new token in-memory so the current
- * subprocess keeps working. Claude Desktop's next spawn will need the
- * disk value though.
+ * Persist a rotated refresh token across every config location we know
+ * users store MCP settings in:
+ *   - ~/.mcp.json (Claude Desktop)
+ *   - ~/.claude/settings.json (Claude Code)
+ *
+ * We update whichever files have the loop-operations stanza. Missing
+ * files are skipped silently. This mirrors @loopops/mcp-cli's
+ * `updateRefreshToken` helper — keep the two in sync.
+ *
+ * Best-effort: if all writes fail, we still keep the new token
+ * in-memory so the current subprocess keeps working. The next cold
+ * spawn is the one that breaks.
  */
 function persistRotatedRefreshToken(newToken) {
-    try {
-        const path = join(homedir(), ".mcp.json");
-        if (!existsSync(path))
-            return;
-        const raw = readFileSync(path, "utf-8");
-        const data = JSON.parse(raw);
-        const stanza = data.mcpServers?.[SERVER_NAME];
-        if (!stanza?.env)
-            return;
-        stanza.env.OKTA_REFRESH_TOKEN = newToken;
-        writeFileSync(path, JSON.stringify(data, null, 2) + "\n");
+    const paths = [
+        join(homedir(), ".mcp.json"),
+        join(homedir(), ".claude", "settings.json"),
+    ];
+    for (const path of paths) {
         try {
-            chmodSync(path, 0o600);
+            if (!existsSync(path))
+                continue;
+            const raw = readFileSync(path, "utf-8");
+            const data = JSON.parse(raw);
+            const stanza = data.mcpServers?.[SERVER_NAME];
+            if (!stanza?.env)
+                continue;
+            stanza.env.OKTA_REFRESH_TOKEN = newToken;
+            writeFileSync(path, JSON.stringify(data, null, 2) + "\n");
+            try {
+                chmodSync(path, 0o600);
+            }
+            catch {
+                // ok on platforms where this is a no-op
+            }
         }
-        catch {
-            // ok on platforms where this is a no-op
+        catch (err) {
+            // Log to stderr (visible in Claude Desktop/Code logs) but don't
+            // fail the request.
+            console.error(`[MCP] Could not persist rotated refresh token to ${path}:`, err instanceof Error ? err.message : String(err));
         }
     }
-    catch (err) {
-        // Log to stderr (visible in Claude Desktop logs) but don't fail the request.
-        console.error("[MCP] Could not persist rotated refresh token to ~/.mcp.json:", err instanceof Error ? err.message : String(err));
-    }
 }
 /**
  * Mint a fresh access token via Okta's /token endpoint. Updates the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loopops/mcp-server",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "Loop Operations MCP Server — AI skills for RevOps",
   "license": "UNLICENSED",
   "type": "module",