Function mcpRpcAutoRefresh

notfair-cmo/src/server/mcp/rpc.ts:179–219

(
  project_slug: string,
  catalog_key: string,
  method: string,
  params: Record<string, unknown> = {},
  opts: McpRpcOpts = {},
)

 * is returned and the caller's existing stale-token UX kicks in.
 */
export async function mcpRpcAutoRefresh<T = unknown>(
  project_slug: string,
  catalog_key: string,
  method: string,
  params: Record<string, unknown> = {},
  opts: McpRpcOpts = {},
): Promise<RpcResult<T>> {
  const spec = mcpSpecByKey(project_slug, catalog_key);
  if (!spec) {
    return { ok: false, kind: "http_error", status: 404, body: "unknown mcp catalog key" };
  }
  let token = findMcpToken(project_slug, catalog_key);
  if (!token) {
    return { ok: false, kind: "http_error", status: 401, body: "no token stored" };
  }

  if (isExpiringSoon(token)) {
    const refreshed = await refreshMcpToken(token);
    if (refreshed) token = refreshed;
  }

  const first = await mcpRpc<T>(
    spec.resource_url,
    token.access_token_enc,
    method,
    params,
    opts,
  );
  if (first.ok) return first;
  if (first.kind !== "http_error" || first.status !== 401) return first;

  // Reactive refresh. Skip if we just refreshed proactively — the upstream
  // is telling us our fresh token is bad, and looping would burn cycles.
  // `updated_at` is bumped by updateMcpTokenSecrets, so we can detect a
  // refresh that happened within this same call.
  if (Date.parse(token.updated_at) > Date.now() - 5_000) return first;

  const refreshed = await refreshMcpToken(token);
  if (!refreshed) return first;
  return mcpRpc<T>(spec.resource_url, refreshed.access_token_enc, method, params, opts);
}

function parseRpcBody<T>(body: string): RpcResult<T> {
  const envelope = pickRpcEnvelope(body);