fix(mcp): scope decision-pack cache to auth token

[JSONbored]

Motivation

• The decision-pack stale-fallback cache was keyed only by API URL/API version/login and could return a cached private pack to a different local session when the live request hit a 429 or network/server error, leaking private contributor data.
• The intent is to ensure cached decision packs are only reused by the same authenticated local actor and not by other local sessions sharing the same cache directory.

Description

• Add a SHA-256 based auth cache key derived from the active API/session token via decisionPackAuthCacheKey() and import createHash from node:crypto.
• Include the authCacheKey in the cache filename key and stored cache metadata and require it during readDecisionPackCache() and isCompatibleDecisionPackCacheEntry() checks so entries are bound to the current token.
• Skip reading/writing decision-pack cache when no local token is configured and avoid storing the raw token (only the token hash is stored as authCacheKey).
• Extend unit tests in test/unit/mcp-cli.test.ts to assert cached entries contain authCacheKey and add a regression test that verifies a different local token will not reuse an existing cache on a 429 fallback.

Testing

• Ran git diff --check && npm run typecheck and the typecheck completed successfully.
• Ran the focused unit tests with npx vitest run test/unit/mcp-cli.test.ts -t "decision-pack cache" and the updated decision-pack cache tests passed.
• Executed npx vitest run test/unit/mcp-cli.test.ts -t "ignores incompatible" and the related cache/clear tests passed after adjusting test timeouts/expectations.
• A broader npm run test:unit invocation was previously interrupted by an unrelated long-running agent process, but the targeted cache test runs and typecheck above succeeded.

---

Codex Task

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	gittensory-ui	ed9c7bc	Commit Preview URL Branch Preview URL	Jun 02 2026, 05:24 PM