Method markStepUpPending

src/services/mcp/auth.ts:1468–1471

* Called by the fetch wrapper when a 403 insufficient_scope response is * detected. Setting this causes tokens() to omit refresh_token, forcing * the SDK's authInternal to skip its (useless) refresh path and fall through * to startAuthorization → redirectToAuthorization → step-up persistenc

(scope: string)

   * return the same-scoped token and the retry would 403 again.
   */
  markStepUpPending(scope: string): void {
    this._pendingStepUpScope = scope
    logMCPDebug(this.serverName, `Marked step-up pending: ${scope}`)
  }

  async state(): Promise<string> {
    // Generate state if not already generated for this instance