@ouro.bot/cli 0.1.0-alpha.130 → 0.1.0-alpha.131

package/changelog.json

@@ -1,6 +1,12 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.131",
+      "changes": [
+        "ouro auth --provider anthropic now exchanges the setup token for a refresh token immediately, enabling auto-refresh for subsequent sessions."
+      ]
+    },
     {
       "version": "0.1.0-alpha.130",
       "changes": [

package/dist/heart/daemon/auth-flow.js

@@ -320,6 +320,25 @@ async function collectRuntimeAuthCredentials(input, deps) {
         }
         const prompt = ensurePromptInput(input.promptInput, input.provider);
         const setupToken = validateAnthropicToken(await prompt("Paste the setup token from `claude setup-token`: "));
+        // Exchange the setup token for an access+refresh token pair so auto-refresh works.
+        // The setup token IS the initial access token — we use it as a refresh token to
+        // get back a proper token pair from the OAuth endpoint.
+        /* v8 ignore start -- token exchange: requires live Anthropic OAuth endpoint @preserve */
+        try {
+            const { refreshAnthropicToken } = await Promise.resolve().then(() => __importStar(require("../providers/anthropic-token")));
+            const tokenState = await refreshAnthropicToken(setupToken);
+            if (tokenState) {
+                return {
+                    setupToken: tokenState.accessToken,
+                    refreshToken: tokenState.refreshToken,
+                    expiresAt: tokenState.expiresAt,
+                };
+            }
+        }
+        catch {
+            // Exchange failed — use the raw setup token as-is (it'll work until expiry)
+        }
+        /* v8 ignore stop */
         return { setupToken };
     }
     if (input.provider === "minimax") {
@@ -387,6 +406,12 @@ async function resolveHatchCredentials(input) {
 function applyCredentials(secrets, provider, credentials) {
     if (provider === "anthropic") {
         secrets.providers.anthropic.setupToken = credentials.setupToken.trim();
+        /* v8 ignore start -- token refresh fields: populated when OAuth exchange succeeds @preserve */
+        if (credentials.refreshToken)
+            secrets.providers.anthropic.refreshToken = credentials.refreshToken;
+        if (credentials.expiresAt)
+            secrets.providers.anthropic.expiresAt = credentials.expiresAt;
+        /* v8 ignore stop */
         return;
     }
     if (provider === "github-copilot") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.130",
+  "version": "0.1.0-alpha.131",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",