@oodarun/cli 0.1.2 → 0.1.3

package/dist/cli.js

@@ -763,6 +763,54 @@ function getAccessToken() {
   if (process.env.OODA_ACCESS_TOKEN) return process.env.OODA_ACCESS_TOKEN;
   return readAuthData().accessToken || null;
 }
+function decodeJwtExp(token) {
+  try {
+    const payload = JSON.parse(
+      Buffer.from(token.split(".")[1], "base64url").toString()
+    );
+    return typeof payload.exp === "number" ? payload.exp : null;
+  } catch {
+    return null;
+  }
+}
+var _refreshInFlight = null;
+async function ensureFreshAccessToken() {
+  if (process.env.OODA_ACCESS_TOKEN) return process.env.OODA_ACCESS_TOKEN;
+  const data = readAuthData();
+  if (!data.accessToken || !data.refreshToken) return data.accessToken || null;
+  const exp = decodeJwtExp(data.accessToken);
+  const now = Math.floor(Date.now() / 1e3);
+  if (exp && exp - now > 300) return data.accessToken;
+  if (_refreshInFlight) return _refreshInFlight;
+  _refreshInFlight = refreshAccessToken(data.refreshToken, data.orgId || "").finally(
+    () => {
+      _refreshInFlight = null;
+    }
+  );
+  return _refreshInFlight;
+}
+async function refreshAccessToken(refreshToken, orgId) {
+  try {
+    const doFetch = globalThis.__originalFetch ?? globalThis.fetch;
+    const res = await doFetch(
+      `${ORG_API_BASE}/auth/refresh`,
+      {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ refreshToken })
+      }
+    );
+    if (!res.ok) return null;
+    const body = await res.json();
+    const data = readAuthData();
+    data.accessToken = body.accessToken;
+    data.refreshToken = body.refreshToken;
+    writeAuthData(data);
+    return body.accessToken;
+  } catch {
+    return null;
+  }
+}
 function saveJwtTokens(accessToken, refreshToken, userId, orgId) {
   const data = readAuthData();
   data.accessToken = accessToken;
@@ -1081,13 +1129,14 @@ function patchFetchForOrg(orgId) {
   if (_orgPatchApplied) return;
   _orgPatchApplied = true;
   const originalFetch = globalThis.fetch;
+  globalThis.__originalFetch = originalFetch;
   globalThis.fetch = (async (input, init) => {
     const url = typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
     const method = init?.method ?? (input instanceof Request ? input.method : void 0);
     const rewritten = rewriteOrgUrl(url, orgId, method);
     if (rewritten) {
       const headers = new Headers(init?.headers || {});
-      const jwt = getAccessToken();
+      const jwt = await ensureFreshAccessToken() ?? getAccessToken();
       if (jwt) {
         headers.set("Authorization", `Bearer ${jwt}`);
       }
@@ -5258,7 +5307,7 @@ async function deployFromGitHubFlow(target, apiToken, claudeToken) {
 }
 
 // src/cli/index.ts
-var CLI_VERSION = "0.1.2";
+var CLI_VERSION = "0.1.3";
 function formatMutationError(result) {
   const parts = [];
   if (result.status !== void 0) parts.push(String(result.status));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oodarun/cli",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Launch Claude Code on cloud dev environments",
   "type": "module",
   "license": "UNLICENSED",