@scorehub/mcp-server 0.2.3 → 0.2.5

package/dist/index.js

@@ -28,6 +28,8 @@ const node_http_1 = require("node:http");
 const node_child_process_1 = require("node:child_process");
 const HOST = new URL(REMOTE_MCP_URL).host;
 const CLIENT_ID = "scorehub-mcp";
+// Proactively refresh token every 4 hours to prevent expiry during long sessions
+const TOKEN_KEEPALIVE_INTERVAL = 4 * 60 * 60 * 1000;
 // ── Remote Tool Proxy (MCP Streamable HTTP) ─────────────────
 async function fetchRemoteTools(token) {
     try {
@@ -129,10 +131,16 @@ server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
             return new Promise((resolve) => {
                 let timeoutId;
                 const callbackServer = (0, node_http_1.createServer)((req, res) => {
-                    if (timeoutId)
-                        clearTimeout(timeoutId);
                     const requestUrl = req.url ?? "/";
                     const url = new URL(requestUrl, `http://127.0.0.1:${actualPort}`);
+                    // 只处理 /callback 路径的请求，忽略浏览器探测请求（favicon、安全检查等）
+                    if (url.pathname !== "/callback") {
+                        res.writeHead(204);
+                        res.end();
+                        return;
+                    }
+                    if (timeoutId)
+                        clearTimeout(timeoutId);
                     const code = url.searchParams.get("code");
                     if (code) {
                         res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
@@ -171,6 +179,7 @@ server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
                         }));
                     }
                     else {
+                        // 到达 /callback 但没有 code —— 真正的错误
                         res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
                         res.end("<!DOCTYPE html><html><head><meta charset=\"utf-8\"><title>Authorization Failed</title></head>" +
                             "<body style=\"font-family:sans-serif;text-align:center;padding-top:80px;\">" +
@@ -251,6 +260,24 @@ server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
         }
     }
 });
+// ── Token Keep-Alive ────────────────────────────────────────
+// Proactively refresh the access token on a fixed interval so long-running
+// sessions never hit an expiry mid-call. Uses timer.unref() so the keep-alive
+// loop does not prevent the process from exiting normally.
+function startTokenKeepAlive() {
+    const timer = setInterval(async () => {
+        try {
+            const result = await (0, auth_js_1.getValidAccessToken)(HOST, TOKEN_ENDPOINT, CLIENT_ID);
+            if (result?.source === "refresh") {
+                console.error("[keep-alive] access token refreshed proactively");
+            }
+        }
+        catch {
+            // Non-fatal: will retry on next interval
+        }
+    }, TOKEN_KEEPALIVE_INTERVAL);
+    timer.unref(); // Don't block process exit when no other work remains
+}
 // ── Start ───────────────────────────────────────────────────
 async function main() {
     // Set process title for easy identification in ps/task manager
@@ -276,6 +303,7 @@ async function main() {
     const transport = new stdio_js_1.StdioServerTransport();
     await server.connect(transport);
     console.error(`ScoreHub MCP Server started (remote: ${REMOTE_MCP_URL})`);
+    startTokenKeepAlive();
 }
 main().catch((err) => {
     console.error("Fatal:", err);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scorehub/mcp-server",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "ScoreHub local MCP proxy — OAuth login, token caching, and tool forwarding to remote MCP endpoint",
   "main": "dist/index.js",
   "bin": {