Summary

• Distinguish managed MCP consent cancellation from authorization failures and provider outages; log only recognized OAuth error codes.
• Settle expired or invalid managed OAuth popups using the exact attempt nonce while preserving the existing success channel and authorization checks.

Type of Change

• Bug fix

Testing

• 1,011 focused account, credential, MCP, callback, and popup regressions passed.
• New regression cases failed before the fix; independent guard-removal controls verified classification, correlation, and diagnostic redaction.
• Actual callback HTML and popup code communicate over real BroadcastChannel in the protocol tests.
• 27 real Postgres/Redis integration tests, app type-check, lint, all 54 audits, generators, registry and docs parity checks.

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)