fix(core): create token file on first save (#5367)

packages/core/src/mcp/token-storage/file-token-storage.test.ts

@@ -120,6 +120,39 @@ describe('FileTokenStorage', () => {
   });
 
   describe('setCredentials', () => {
+    it('should create token file when saving credentials for the first time', async () => {
+      mockFs.readFile.mockRejectedValue({ code: 'ENOENT' });
+      mockFs.mkdir.mockResolvedValue(undefined);
+      vi.mocked(atomicWriteFile).mockResolvedValue(undefined);
+
+      const credentials: OAuthCredentials = {
+        serverName: 'test-server',
+        token: {
+          accessToken: 'access-token',
+          tokenType: 'Bearer',
+        },
+        updatedAt: Date.now() - 10000,
+      };
+
+      await storage.setCredentials(credentials);
+
+      expect(mockFs.mkdir).toHaveBeenCalledWith(
+        path.join('/home/test', '.qwen'),
+        { recursive: true, mode: 0o700 },
+      );
+      expect(atomicWriteFile).toHaveBeenCalled();
+
+      const writeCall = vi.mocked(atomicWriteFile).mock.calls[0];
+      const decrypted = storage['decrypt'](writeCall[1] as string);
+      const saved = JSON.parse(decrypted);
+
+      expect(Object.keys(saved)).toEqual(['test-server']);
+      expect(saved['test-server']).toEqual({
+        ...credentials,
+        updatedAt: expect.any(Number),
+      });
+    });
+
     it('should save credentials with encryption', async () => {
       const encryptedData = storage['encrypt'](
         JSON.stringify({ 'existing-server': existingCredentials }),

packages/core/src/mcp/token-storage/file-token-storage.ts

@@ -78,7 +78,9 @@ export class FileTokenStorage
     await fs.mkdir(dir, { recursive: true, mode: 0o700 });
   }
 
-  private async loadTokens(): Promise<Map<string, OAuthCredentials>> {
+  private async loadTokens(
+    allowMissing = false,
+  ): Promise<Map<string, OAuthCredentials>> {
     try {
       const data = await fs.readFile(this.tokenFilePath, 'utf-8');
       const decrypted = this.decrypt(data);
@@ -87,6 +89,9 @@ export class FileTokenStorage
     } catch (error: unknown) {
       const err = error as NodeJS.ErrnoException & { message?: string };
       if (err.code === 'ENOENT') {
+        if (allowMissing) {
+          return new Map();
+        }
         throw new Error('Token file does not exist');
       }
       if (
@@ -135,7 +140,7 @@ export class FileTokenStorage
   async setCredentials(credentials: OAuthCredentials): Promise<void> {
     this.validateCredentials(credentials);
 
-    const tokens = await this.loadTokens();
+    const tokens = await this.loadTokens(true);
     const updatedCredentials: OAuthCredentials = {
       ...credentials,
       updatedAt: Date.now(),