v0.13.2 — Safer call arguments and OAuth refresh

CLI

• Accept --params as an alias for JSON call arguments and reject undeclared long-form tool flags before dispatch. (#298)

OAuth

• Preserve refreshable dynamic OAuth client registrations across fresh callback ports, replacing an obsolete redirect registration only when interactive authorization is required. (#290, thanks @elecnix)

Distribution and verification

• npm: mcporter@0.13.2
• Registry tarball: mcporter-0.13.2.tgz
• npm integrity: sha512-fojohhbVIV09+mLWdb1eztQU/lkFuhbGJD1Ii/R3+imHjUbExJx8rg6MaHfBtFgplTX1ury79aH0a2v84Op4qw==
• Source CI: release preparation CI
• Native proof: arm64 and x86_64 protected verification
• Homebrew: formula update workflow

The macOS arm64 and x86_64 standalone binaries are signed with the OpenClaw Foundation Developer ID, notarized by Apple, and accompanied by checksums and provenance. npm and Homebrew use the same protected, verified release artifact.