@reproapp/mcp 0.0.1 → 0.0.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reproapp/mcp",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "description": "Repro MCP server for AI-assisted debugging and privacy policy workflows",
   "license": "MIT",
   "type": "commonjs",

package/src/index.js

@@ -810,7 +810,7 @@ function shouldRetryWithInteractiveAuth(error, config) {
     return false;
   }
   const statusCode = error && typeof error === 'object' ? error.statusCode : null;
-  return statusCode === 401;
+  return statusCode === 401 && !isRemoteAuthConfigurationError(error);
 }
 
 function shouldRetryApiWithInteractiveAuth(error, config) {
@@ -821,6 +821,18 @@ function shouldRetryApiWithInteractiveAuth(error, config) {
   return statusCode === 401 || statusCode === 403;
 }
 
+function isRemoteAuthConfigurationError(error) {
+  if (!error || typeof error !== 'object') {
+    return false;
+  }
+  const messages = [
+    typeof error.message === 'string' ? error.message : '',
+    typeof error.details?.error === 'string' ? error.details.error : '',
+    typeof error.details?.message === 'string' ? error.details.message : '',
+  ];
+  return messages.some((message) => message.includes('App-user bearer auth is not configured'));
+}
+
 function resolveAuthFilePath(value) {
   if (typeof value === 'string' && value.trim()) {
     return path.resolve(value.trim());
@@ -1279,11 +1291,38 @@ async function resolveScope(input, config, client) {
   }
 
   if (client && typeof client.executeTool === 'function') {
-    return client.executeTool('resolve_scope', input);
+    return client.executeTool('resolve_scope', sanitizeRemoteResolveScopeInput(input));
   }
   throw rpcError(-32602, 'appId or sessionId is required to resolve scope');
 }
 
+function sanitizeRemoteResolveScopeInput(input) {
+  const sanitized = {};
+  for (const key of ['tenantId', 'sessionId', 'appId']) {
+    const value = optionalNonEmptyString(input[key]);
+    if (value) {
+      sanitized[key] = value;
+    }
+  }
+
+  if (input.timeRange && typeof input.timeRange === 'object' && !Array.isArray(input.timeRange)) {
+    const timeRange = {};
+    const from = optionalNonEmptyString(input.timeRange.from);
+    const to = optionalNonEmptyString(input.timeRange.to);
+    if (from) {
+      timeRange.from = from;
+    }
+    if (to) {
+      timeRange.to = to;
+    }
+    if (Object.keys(timeRange).length > 0) {
+      sanitized.timeRange = timeRange;
+    }
+  }
+
+  return sanitized;
+}
+
 async function checkPrivacyCoverage(input, config, client) {
   if (!client || typeof client.requestApi !== 'function') {
     throw rpcError(-32603, 'This MCP client cannot fetch app privacy policies');