@kervnet/opencode-kiro-auth 1.7.16 → 1.7.17

package/dist/core/auth/auth-handler.js

@@ -42,10 +42,20 @@ export class AuthHandler {
                         .get();
                     cliDb.close();
                     if (!tokenRow || !tokenRow.expires || tokenRow.expires < Date.now()) {
-                        logger.log('Background token refresh: kiro-cli token expired or missing, skipping');
-                        return;
+                        logger.log('Background token refresh: kiro-cli token expired, forcing refresh via kiro-cli whoami...');
+                        try {
+                            const { execSync } = await import('node:child_process');
+                            execSync('kiro-cli whoami', { timeout: 15000, stdio: 'pipe' });
+                            logger.log('Background token refresh: kiro-cli token refreshed successfully');
+                        }
+                        catch {
+                            logger.log('Background token refresh: kiro-cli refresh failed, skipping');
+                            return;
+                        }
+                    }
+                    else {
+                        logger.log(`Background token refresh: kiro-cli token valid until ${new Date(tokenRow.expires).toLocaleString()}`);
                     }
-                    logger.log(`Background token refresh: kiro-cli token valid until ${new Date(tokenRow.expires).toLocaleString()}`);
                 }
                 catch (e) {
                     logger.warn('Background token refresh: failed to check kiro-cli token status', e);

package/dist/core/auth/token-refresher.js

@@ -33,17 +33,13 @@ export class TokenRefresher {
         const now = Date.now();
         if (this.config.auto_sync_kiro_cli && now - this.lastSyncTime > this.SYNC_COOLDOWN_MS) {
             this.lastSyncTime = now;
-            // Force kiro-cli to refresh its token first
+            // Force kiro-cli to refresh its token
             try {
-                const { exec } = await import('node:child_process');
-                await new Promise((resolve) => {
-                    exec('kiro-cli whoami', (error) => {
-                        resolve(); // Continue even if it fails
-                    });
-                });
+                const { execSync } = await import('node:child_process');
+                execSync('kiro-cli whoami', { timeout: 15000, stdio: 'pipe' });
             }
-            catch (e) {
-                // Silent fail - continue with sync anyway
+            catch {
+                // Continue with sync anyway
             }
             await this.syncFromKiroCli();
         }

package/dist/core/request/request-handler.js

@@ -54,7 +54,14 @@ export class RequestHandler {
             if (this.allAccountsPermanentlyUnhealthy()) {
                 // Try to recover by syncing from kiro-cli
                 if (this.config.auto_sync_kiro_cli) {
-                    showToast('All accounts unhealthy. Attempting recovery from Kiro CLI...', 'warning');
+                    showToast('All accounts unhealthy. Forcing kiro-cli token refresh...', 'warning');
+                    try {
+                        const { execSync } = await import('node:child_process');
+                        execSync('kiro-cli chat --model claude-haiku-4.5 --no-interactive "hi"', { timeout: 30000, stdio: 'pipe' });
+                    }
+                    catch {
+                        throw new Error('All accounts are unhealthy and kiro-cli token refresh failed. Please run: kiro-cli login');
+                    }
                     const { syncFromKiroCli } = await import('../../plugin/sync/kiro-cli.js');
                     await syncFromKiroCli();
                     // Reset all accounts to healthy and clear fail counts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kervnet/opencode-kiro-auth",
-  "version": "1.7.16",
+  "version": "1.7.17",
   "description": "OpenCode plugin for AWS Kiro (CodeWhisperer) with IAM Identity Center profile support",
   "type": "module",
   "main": "dist/index.js",