Clank 0.19.4
MCP OAuth refresh reliability
- Keeps MCP clients connected when they fail to persist a rotated refresh-token successor.
- Recovers access through the encrypted, single-successor handoff without branching refresh families or extending the successor expiry.
- Preserves family revocation when an adopted successor's predecessor is replayed.
- Adds
agent.refreshTokenRotationMode: "strict"for applications that require immediate post-window revocation.
This patch resolves the recurring hourly invalid_token disconnect observed with remote MCP clients.