@integrity-labs/agt-cli 0.9.3 → 0.9.5

package/mcp/index.js

@@ -14,30 +14,42 @@ if (!AGT_HOST || !AGT_AGENT_ID || (!AGT_TOKEN && !AGT_API_KEY)) {
     process.exit(1);
 }
 // ── Token refresh ───────────────────────────────────────────────────────────
-let tokenExpiresAt = Date.now() + 50 * 60_000; // assume ~50min remaining on initial token
+// If no initial token was provided, force an immediate exchange on first call
+let tokenExpiresAt = AGT_TOKEN ? Date.now() + 50 * 60_000 : 0;
+let exchangeInFlight = null;
+async function refreshToken() {
+    const res = await fetch(`${AGT_HOST}/host/exchange`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ host_key: AGT_API_KEY }),
+    });
+    if (!res.ok) {
+        const text = await res.text().catch(() => res.statusText);
+        throw new Error(`Token exchange failed: ${res.status} ${text}`);
+    }
+    const data = (await res.json());
+    AGT_TOKEN = data.token;
+    tokenExpiresAt = new Date(data.expires_at).getTime();
+    return AGT_TOKEN;
+}
 async function getToken() {
-    // If we have an API key and the token is expiring soon (within 5 min), refresh
-    if (AGT_API_KEY && Date.now() > tokenExpiresAt - 5 * 60_000) {
+    // If we have an API key and the token is missing or expiring soon (within 5 min), refresh
+    if (AGT_API_KEY && (!AGT_TOKEN || Date.now() > tokenExpiresAt - 5 * 60_000)) {
+        // Coalesce concurrent refresh calls
+        if (!exchangeInFlight) {
+            exchangeInFlight = refreshToken().finally(() => { exchangeInFlight = null; });
+        }
         try {
-            const res = await fetch(`${AGT_HOST}/host/exchange`, {
-                method: 'POST',
-                headers: { 'Content-Type': 'application/json' },
-                body: JSON.stringify({ host_key: AGT_API_KEY }),
-            });
-            if (res.ok) {
-                const data = (await res.json());
-                AGT_TOKEN = data.token;
-                tokenExpiresAt = new Date(data.expires_at).getTime();
-            }
+            return await exchangeInFlight;
         }
         catch {
-            // Use existing token if refresh fails
+            // Fall through to return existing token (may be stale but avoids crash)
         }
     }
     return AGT_TOKEN;
 }
 // ── API client ──────────────────────────────────────────────────────────────
-async function apiPost(path, body) {
+async function apiPost(path, body, retried = false) {
     const controller = new AbortController();
     const timeout = setTimeout(() => controller.abort(), 15_000);
     const token = await getToken();
@@ -51,6 +63,12 @@ async function apiPost(path, body) {
             body: JSON.stringify(body),
             signal: controller.signal,
         });
+        // Retry once on 401 — token may have expired between cache check and server verification
+        if (res.status === 401 && AGT_API_KEY && !retried) {
+            clearTimeout(timeout);
+            tokenExpiresAt = 0; // force re-exchange
+            return apiPost(path, body, true);
+        }
         if (!res.ok) {
             const text = await res.text().catch(() => res.statusText);
             throw new Error(`API ${path} returned ${res.status}: ${text}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/agt-cli",
-  "version": "0.9.3",
+  "version": "0.9.5",
   "description": "Augmented CLI — agent provisioning and management",
   "type": "module",
   "bin": {