A new file-based locking mechanism prevents concurrent MCP server OAuth token refreshes from colliding. Lock files (mcp-refresh-*.lock) coordinate between processes with retry logic and timeout handling.
Evidence
Lock file naming (search for "mcp-refresh-")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
