Under the hood
MCP auth-needed marking on permission errors was refactored, no behavior change expected.
When a tool call throws an MCP permission-denied/auth error, the code now marks the client as needing auth through session.mcpSessionWiring.connections()?.markNeedsAuth(...) instead of dynamically importing a helper module. This is an internal refactor of how MCP auth-needed state propagates, with no behavior change expected.