arisa 2.3.5 → 2.3.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arisa",
-  "version": "2.3.5",
+  "version": "2.3.7",
   "description": "Arisa - dynamic agent runtime with daemon/core architecture that evolves through user interaction",
   "preferGlobal": true,
   "bin": {

package/src/daemon/setup.ts

@@ -276,12 +276,31 @@ async function runInteractiveLogin(cli: AgentCliName, vars: Record<string, strin
 
       const exitCode = await proc.exited;
       if (exitCode === 0) {
-        // Extract token (sk-ant-oat01-...) — may span multiple lines due to terminal wrapping
-        const tokenMatch = output.match(/sk-ant-[A-Za-z0-9_-]+(?:\n[A-Za-z0-9_-]+)*/);
-        if (tokenMatch) {
-          vars.CLAUDE_CODE_OAUTH_TOKEN = tokenMatch[0].replace(/\n/g, "");
+        // Strip ALL ANSI escape sequences and control chars, then extract token line-by-line
+        const clean = output
+          .replace(/\x1b\[[\x20-\x3f]*[\x40-\x7e]/g, "")  // CSI sequences
+          .replace(/\x1b[^\x1b]{0,5}/g, "")                 // other ESC sequences
+          .replace(/\r/g, "");                               // carriage returns
+
+        let token = "";
+        for (const line of clean.split("\n")) {
+          const t = line.trim();
+          if (t.startsWith("sk-ant-")) {
+            token = t;
+          } else if (token && t && /^[A-Za-z0-9_-]+$/.test(t)) {
+            token += t;  // continuation line (wrapped token)
+          } else if (token) {
+            break;  // end of token (empty line or text)
+          }
+        }
+
+        if (token) {
+          console.log(`  [debug] token captured: ${token.slice(0, 20)}...${token.slice(-10)} (${token.length} chars)`);
+          vars.CLAUDE_CODE_OAUTH_TOKEN = token;
           saveEnv(vars);
           console.log("  ✓ claude token saved to .env");
+        } else {
+          console.log("  ⚠ could not extract token from output");
         }
         console.log(`  ✓ claude login successful`);
         return true;