chore: sync from internal

Author: phantom-commit-bot[bot]

packages/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phantom/mcp-server",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "MCP Server for Phantom Wallet",
   "repository": {
     "type": "git",

packages/mcp-server/src/server.test.ts

@@ -419,7 +419,7 @@ describe("PhantomMCPServer", () => {
     expect(toolHandler).toHaveBeenCalledTimes(1);
   });
 
-  it("does not retry mutating tools after a successful token refresh", async () => {
+  it("does not retry mutating tools after a successful token refresh and asks the caller to retry", async () => {
     const toolHandler = jest.fn().mockRejectedValue({ response: { status: 401 } });
     mockGetTool.mockReturnValue({
       name: "mock_tool",
@@ -438,8 +438,25 @@ describe("PhantomMCPServer", () => {
     const parsed = JSON.parse(result.content[0].text);
 
     expect(mockSessionManagerInstance.tryRefreshSession).toHaveBeenCalledTimes(1);
-    expect(mockSessionManagerInstance.resetSession).toHaveBeenCalledTimes(1);
+    expect(mockSessionManagerInstance.resetSession).not.toHaveBeenCalled();
     expect(toolHandler).toHaveBeenCalledTimes(1);
-    expect(parsed.code).toBe("AUTH_EXPIRED");
+    expect(result).toEqual({
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify(
+            {
+              error:
+                "Session token was refreshed successfully. Retry the same request now; re-authentication is not required.",
+              code: "SESSION_REFRESHED_RETRY_REQUIRED",
+            },
+            null,
+            2,
+          ),
+        },
+      ],
+      isError: true,
+    });
+    expect(parsed.code).toBe("SESSION_REFRESHED_RETRY_REQUIRED");
   });
 });

packages/mcp-server/src/server.ts

@@ -307,7 +307,26 @@ export class PhantomMCPServer {
               this.logger.warn(`Tool retry also returned 401 — resetting session`);
             }
           } else if (refreshed) {
-            this.logger.warn(`Token refreshed but ${toolName} is not safe to replay automatically — resetting session`);
+            this.logger.info(
+              `Token refreshed but ${toolName} is not safe to replay automatically — asking caller to retry`,
+            );
+            return {
+              content: [
+                {
+                  type: "text" as const,
+                  text: JSON.stringify(
+                    {
+                      error:
+                        "Session token was refreshed successfully. Retry the same request now; re-authentication is not required.",
+                      code: "SESSION_REFRESHED_RETRY_REQUIRED",
+                    },
+                    null,
+                    2,
+                  ),
+                },
+              ],
+              isError: true,
+            };
           }
 
           this.logger.warn(`Token refresh failed or retry 401'd — resetting session`);

packages/phantom-openclaw-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phantom/phantom-openclaw-plugin",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Phantom Embedded Wallet — sign transactions, transfer tokens, and swap on Solana and Ethereum. Powered by Phantom.",
   "repository": {
     "type": "git",