@pi-archimedes/mcp 2.6.2 → 2.6.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-archimedes/mcp",
-  "version": "2.6.2",
+  "version": "2.6.3",
   "type": "module",
   "keywords": [
     "pi-package"
@@ -17,7 +17,7 @@
     "@modelcontextprotocol/sdk": "^1.30.0",
     "@napi-rs/keyring": "^1.3.0",
     "open": "^10.2.0",
-    "@pi-archimedes/core": "2.6.2"
+    "@pi-archimedes/core": "2.6.3"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": ">=0.1.0",

package/src/auth-flow.ts

@@ -33,7 +33,7 @@
 
 import { auth } from "@modelcontextprotocol/sdk/client/auth.js";
 
-import { getAuthEntry } from "./auth-storage.js";
+import { getAuthEntry, saveAuthEntry } from "./auth-storage.js";
 import { ensureCallbackServer, reserveAuthState, waitForCallback } from "./callback-server.js";
 import { McpOAuthProvider, type OAuthCallbacks } from "./oauth-provider.js";
 import { OAUTH_CONFIG_FIELDS, type McpOAuthConfig } from "./types.js";
@@ -267,6 +267,17 @@ export async function authenticate(
     return { status: "needs-interaction" };
   }
 
+  // If there is stored clientInfo but no tokens, the previous DCR
+  // registration was never completed (or tokens were cleared). Wipe the
+  // clientInfo so the SDK runs a fresh DCR with the current boundPort —
+  // otherwise it reuses the old redirectUri (a different port) and
+  // Atlassian/other servers redirect back to a listener that isn't running.
+  const existing = getAuthEntry(serverName);
+  if (existing?.clientInfo && !existing.tokens) {
+    const { clientInfo: _drop, ...withoutClient } = existing;
+    saveAuthEntry(serverName, withoutClient, serverUrl);
+  }
+
   const provider = new McpOAuthProvider(
     serverName,
     serverUrl,