5.7.0: one authorization URL per connect, not one per call

[dickhardt]

Why

Prod, 2026-09-28 16:16–16:18 UTC. Claude Code 2.1.283 on 2026-07-28 called connect_resources once with four Google items. Gmail and Calendar both answered requirement=interaction. The person got two URL elicitations:

• Call AAuth -11: @aauth/proxy 1.0.0 — person tokens, three-way access_mode, R3 -02 #2 started Gmail only. onInteraction (mcp.aauth.dev) threw the elicitation, which left pass 1 at the first item, so Calendar never started.
• Call MCP SDK v2 (3.0.0) #3 started Calendar, and its onInteraction threw a second elicitation. The wallet tab already held both codes: aauth.reach.connected queued: 2, then Calendar acked web_delivered.

The Person Server queues every pending interaction per person and drains the queue into the open tab. The second URL was not needed.

What changes

• One URL per connect. Pass 1 starts both live items, then the call hands over one URL, the head's. Every other live code at the same interaction endpoint is marked coveredBy that URL, and so is a code started while that URL is out. A retry waits on covered codes through pass 2 with progress notifications.
• When a further URL is handed over. Only if (a) a poll re-advertises the code (requirement=interaction), or (b) the code has sat at the head of the queue (queue_position 1) for 30 s with the poll still answering status: 'pending', not 'interacting'. Why 30 s: the tab gets every queued code when it connects and acks within about 1 s (16:17:19.8 → 16:17:20 in the incident). But a poll held by Prefer: wait=20 answers with the record as it was when the poll arrived, so it can be 20 s stale. 30 s after first seeing the code at the head leaves at least 10 s. Covered codes are polled in 15 s slices so the check isn't whole rounds late. A PS that sends no status counts as pending, so its covered codes fall back to their own URL instead of waiting out CONNECT_MAX_MS.
• onInteraction is a hand-over hook. It is called once per URL handed over and is expected to return. A throw still passes through, with the URL recorded as handed over first. invoke now elicits natively after the hook returns, as connect_resources does.
• pollConnection returns the 202 body's status, queuePosition and queueDepth, plus advertised when that poll carried requirement=interaction. A new stopOnAdvertise option ends a slice on a code the caller has not handed over. The poller is the proxy's own pollUntilDone; @aauth/mcp-agent is not used.
• Fix: a re-advertisement without Location is now recognised. Wallet poll.js re-advertises with AAuth-Requirement and Retry-After only, and interactionFrom required Location, so poll re-advertisements were dropped.
• Fix: surfaceNatively reads client capabilities from the 2026-07-28 request envelope. serveStdio does not backfill getClientCapabilities(), so the stdio bin fell back to text on that revision.
• tool.call records outcome: 'input_required'.

Tests

connect-resources.test.ts, with real SDK clients on both eras:

• 2026-07-28: four items, first two interaction. One input_required carrying one URL. The SDK driver's retry lands all four. onInteraction is called once.
• 2025-era: one -32042 with one URL. The retry lands all four.
• A covered code still pending at the head past the bound gets its own URL, not before the bound.
• A covered code that is interacting gets no URL however long it waits.
• A re-advertised covered code gets its URL at once, and only once.
• A code started while a URL is out is covered.

Also: connect.test.ts covers the poll fields and the Location-less re-advertisement. invoke-resume.test.ts covers invoke eliciting natively once.

npm run typecheck, npm test (220 passed), npm run build.

Known gap (Wallet, not changed here)

If the person closes the wallet tab after it acked the queued codes, those codes stay interacting. The PS's stranded-delivery guard (poll.js) re-advertises only records created with reach_delivery: true. A covered code in that state waits until CONNECT_MAX_MS (10 min) and answers timed_out.

Not merged or published. That waits for Dick.

🤖 Generated with Claude Code

https://claude.ai/code/session_01CEukeoQvjrsXzfmBNDoZN3