@stage-labs/metro 0.1.0-beta.143 → 0.1.0-beta.144

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage-labs/metro",
-  "version": "0.1.0-beta.143",
+  "version": "0.1.0-beta.144",
   "description": "The metro command line. Sign in once per machine, then hand your MCP connector list to Claude Code without the credentials touching disk, argv or shell history.",
   "license": "MIT",
   "repository": {

package/runtime/marketplace/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "metro",
-  "version": "0.1.0-beta.143",
+  "version": "0.1.0-beta.144",
   "description": "Metro for Claude Code, installed by the metro daemon on this machine: every connector the agent holds as its own MCP server relayed through the daemon, the orchestrator-only guard on the main thread, and the standing rules loaded at each session start. No vendor credential ever sits in a config file.",
   "author": {
     "name": "Bonustrack",

package/runtime/node_modules/@metro-labs/daemon/src/connectors/relay.ts

@@ -9,6 +9,7 @@ import { errMsg, log } from '@metro-labs/core/log';
 export interface RelayApiDeps {
   target: (connectorId: string, force: boolean) => Promise<RelayTarget>;
   identify: (req: IncomingMessage) => AgentIdentity | null;
+  signedOut: (connectorId: string) => void;
 }
 
 const ID_PATH_RE = /^\/relay\/([A-Za-z0-9][A-Za-z0-9_-]{10})$/;
@@ -242,6 +243,7 @@ async function relayExchange(
   }
   if (out.kind === 'signin') {
     noteHealth(connectorId, false, 'the sign-in has expired, connect it again');
+    deps.signedOut(connectorId);
     signinAnswer(res, connectorId);
     return;
   }

package/runtime/node_modules/@metro-labs/daemon/src/connectors/store.ts

@@ -201,10 +201,19 @@ export async function localReconnectConnector(
   return replace(dir, { ...row, config: { ...row.config, auth, verified, oauth: true } });
 }
 
+const signedOut = (row: LocalConnectorRow): LocalConnectorRow => ({ ...row, config: { ...row.config, auth: { kind: 'none' }, oauth: true } });
+
 export async function localDisconnectConnector(subject: string, id: string, dir = agentsDir()): Promise<Connector> {
   const row = rowOrThrow(subject, id, dir);
   if (row.config.auth.kind !== 'oauth') throw new ConnectorError('that connector is not signed in', 400);
-  return Promise.resolve(replace(dir, { ...row, config: { ...row.config, auth: { kind: 'none' }, oauth: true } }));
+  return Promise.resolve(replace(dir, signedOut(row)));
+}
+
+export function localMarkSignedOut(id: string, dir = agentsDir()): void {
+  const row = readLocalConnectors(dir).find((r) => r.id === id);
+  if (row?.config.auth.kind !== 'oauth') return;
+  log.info({ id, name: row.name }, 'local relay: the vendor refused the token after a refresh; the connector is signed out');
+  replace(dir, signedOut(row));
 }
 
 async function freshAuth(auth: ConnectorAuth, resource: string): Promise<ConnectorAuth> {

package/runtime/node_modules/@metro-labs/daemon/src/routes/local-mode.ts

@@ -27,6 +27,7 @@ import {
   localRelayTarget,
   localRenameConnector,
   localVerifyConnector,
+  localMarkSignedOut,
   localConnectorTools,
 } from '../connectors/store.js';
 import {
@@ -142,6 +143,9 @@ const relayApi: RelayApiDeps = {
     const who = authenticate(req);
     return who?.kind === 'agent' ? { subject: 'agent-key', agentId: who.agentId } : null;
   },
+  signedOut: (id) => {
+    localMarkSignedOut(id);
+  },
 };
 
 

package/runtime/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.1.0-beta.143"
+  "version": "0.1.0-beta.144"
 }