neoagent 2.3.1-beta.103 → 2.3.1-beta.104

package/lib/manager.js

@@ -797,7 +797,7 @@ async function cmdLoginClaudeCode() {
       const data = JSON.parse(raw);
       const token = data?.claudeAiOauthTokens?.accessToken;
       if (token) {
-        upsertEnvValue('CLAUDE_CODE_ACCESS_TOKEN', token);
+        upsertEnvValue('CLAUDE_CODE_OAUTH_TOKEN', token);
         logOk('Imported access token from Claude CLI credentials store');
         logInfo('Restarting NeoAgent to apply credentials...');
         cmdRestart();
@@ -806,13 +806,34 @@ async function cmdLoginClaudeCode() {
     } catch { }
   }
 
-  // Fall back to browser-based PKCE OAuth flow
+  // Browser-based PKCE OAuth flow.
+  // client_id is the metadata URL per claude.ai's dynamic client registration.
+  // Redirect URIs registered: http://localhost/callback and http://127.0.0.1/callback (port 80).
+  // Per RFC 8252 §7.3, servers SHOULD allow any loopback port — we try high ports first
+  // and fall back to 80 if everything else is occupied.
   const http = require('http');
   const { URL: NodeURL } = require('url');
+  const net = require('net');
 
-  const clientId = '9d1c250a-e61b-48f7-87a4-b8a14c8a8f5e';
-  const redirectPort = 54321;
-  const redirectUri = `http://localhost:${redirectPort}/callback`;
+  const clientId = 'https://claude.ai/oauth/claude-code-client-metadata';
+  const SCOPES = 'user:inference user:profile org:create_api_key user:sessions:claude_code offline_access';
+
+  // Find a free port (prefer high ports to avoid permission issues; fall back to 80)
+  const preferredPorts = [65432, 58080, 54321, 49152, 80];
+  let redirectPort = null;
+
+  for (const p of preferredPorts) {
+    const free = await new Promise((res) => {
+      const probe = net.createServer();
+      probe.listen(p, '127.0.0.1', () => { probe.close(() => res(true)); });
+      probe.on('error', () => res(false));
+    });
+    if (free) { redirectPort = p; break; }
+  }
+
+  if (!redirectPort) throw new Error('Could not find a free local port for the OAuth callback.');
+
+  const redirectUri = `http://127.0.0.1${redirectPort === 80 ? '' : `:${redirectPort}`}/callback`;
 
   // Generate PKCE verifier and challenge
   const codeVerifier = crypto.randomBytes(48).toString('base64url');
@@ -827,7 +848,7 @@ async function cmdLoginClaudeCode() {
   authUrl.searchParams.set('response_type', 'code');
   authUrl.searchParams.set('client_id', clientId);
   authUrl.searchParams.set('redirect_uri', redirectUri);
-  authUrl.searchParams.set('scope', 'openid profile email offline_access');
+  authUrl.searchParams.set('scope', SCOPES);
   authUrl.searchParams.set('code_challenge', codeChallenge);
   authUrl.searchParams.set('code_challenge_method', 'S256');
   authUrl.searchParams.set('state', state);
@@ -851,7 +872,7 @@ async function cmdLoginClaudeCode() {
 
     const server = http.createServer((req, res) => {
       try {
-        const reqUrl = new NodeURL(req.url, `http://localhost:${redirectPort}`);
+        const reqUrl = new NodeURL(req.url, redirectUri);
         const code = reqUrl.searchParams.get('code');
         const returnedState = reqUrl.searchParams.get('state');
         const error = reqUrl.searchParams.get('error');
@@ -897,7 +918,7 @@ async function cmdLoginClaudeCode() {
   });
 
   logInfo('Exchanging authorization code for access token...');
-  const tokenRes = await fetch('https://claude.ai/api/oauth/token', {
+  const tokenRes = await fetch('https://claude.ai/oauth/token', {
     method: 'POST',
     headers: { 'Content-Type': 'application/json', 'Accept': 'application/json' },
     body: JSON.stringify({
@@ -920,11 +941,11 @@ async function cmdLoginClaudeCode() {
     throw new Error('Token exchange succeeded but no access_token was returned.');
   }
 
-  upsertEnvValue('CLAUDE_CODE_ACCESS_TOKEN', accessToken);
+  upsertEnvValue('CLAUDE_CODE_OAUTH_TOKEN', accessToken);
   if (tokenData.refresh_token) {
     upsertEnvValue('CLAUDE_CODE_REFRESH_TOKEN', tokenData.refresh_token);
   }
-  logOk('Saved Claude Code access token to .env');
+  logOk('Saved Claude Code OAuth token to .env');
   logInfo('Restarting NeoAgent to apply credentials...');
   cmdRestart();
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neoagent",
-  "version": "2.3.1-beta.103",
+  "version": "2.3.1-beta.104",
   "description": "Proactive personal AI agent with no limits",
   "license": "MIT",
   "main": "server/index.js",

package/server/public/.last_build_id

@@ -1 +1 @@
-11c4133ebb724b223b80ad380661a4c1
+2f506dae7123235dcafdcda0f78d6a13

package/server/public/flutter_bootstrap.js

@@ -37,6 +37,6 @@ _flutter.buildConfig = {"engineRevision":"42d3d75a56efe1a2e9902f52dc8006099c45d9
 
 _flutter.loader.load({
   serviceWorkerSettings: {
-    serviceWorkerVersion: "1865794536" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
+    serviceWorkerVersion: "2650676693" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
   }
 });

package/server/public/main.dart.js

@@ -129338,7 +129338,7 @@ r===$&&A.b()
 o.push(A.ii(p,A.iY(!1,new A.a3(B.tM,A.dT(new A.cI(B.he,new A.a5V(r,p),p),p,p),p),!1,B.I,!0),p,p,0,0,0,p))}r=!1
 if(!s.ay)if(!s.ch){r=s.e
 r===$&&A.b()
-r=B.b.t("mpacm3gu-abb7f02").length!==0&&r.b}if(r){r=s.d
+r=B.b.t("mpacvqjv-54ec71e").length!==0&&r.b}if(r){r=s.d
 r===$&&A.b()
 r=r.ag&&!r.V?84:0
 q=s.e
@@ -134146,7 +134146,7 @@ $S:236}
 A.Ys.prototype={}
 A.Rr.prototype={
 mT(a){var s=this
-if(B.b.t("mpacm3gu-abb7f02").length===0||s.a!=null)return
+if(B.b.t("mpacvqjv-54ec71e").length===0||s.a!=null)return
 s.A5()
 s.a=A.q1(B.PP,new A.b58(s))},
 A5(){var s=0,r=A.l(t.H),q,p=2,o=[],n=this,m,l,k,j,i,h,g,f
@@ -134164,7 +134164,7 @@ if(!t.f.b(k)){s=1
 break}i=J.Z(k,"buildId")
 h=i==null?null:B.b.t(J.r(i))
 j=h==null?"":h
-if(J.bm(j)===0||J.d(j,"mpacm3gu-abb7f02")){s=1
+if(J.bm(j)===0||J.d(j,"mpacvqjv-54ec71e")){s=1
 break}n.b=!0
 n.D()
 p=2
@@ -134181,7 +134181,7 @@ case 2:return A.i(o.at(-1),r)}})
 return A.k($async$A5,r)},
 vb(){var s=0,r=A.l(t.H),q,p=2,o=[],n=this,m,l,k,j,i,h,g,f,e,d,c,b,a,a0,a1
 var $async$vb=A.h(function(a2,a3){if(a2===1){o.push(a3)
-s=p}for(;;)switch(s){case 0:if(B.b.t("mpacm3gu-abb7f02").length===0||n.c){s=1
+s=p}for(;;)switch(s){case 0:if(B.b.t("mpacvqjv-54ec71e").length===0||n.c){s=1
 break}n.c=!0
 n.D()
 p=4

package/server/services/ai/providers/claudeCode.js

@@ -33,7 +33,7 @@ class ClaudeCodeProvider extends AnthropicProvider {
       'claude-haiku-4-5-20251001': 200000,
     };
 
-    const authToken = config.apiKey || process.env.CLAUDE_CODE_ACCESS_TOKEN || readClaudeCliToken();
+    const authToken = config.apiKey || process.env.CLAUDE_CODE_OAUTH_TOKEN || readClaudeCliToken();
     if (!authToken) {
       console.warn('[ClaudeCode] No access token. Run `neoagent login claude-code` to authenticate.');
     }

package/server/services/ai/settings.js

@@ -83,7 +83,7 @@ const AI_PROVIDER_DEFINITIONS = Object.freeze({
     id: 'claude-code',
     label: 'Claude Code',
     description: 'Claude models via Claude Code subscription. Login with `neoagent login claude-code`.',
-    envKey: 'CLAUDE_CODE_ACCESS_TOKEN',
+    envKey: 'CLAUDE_CODE_OAUTH_TOKEN',
     supportsApiKey: true,
     supportsBaseUrl: false,
     defaultEnabled: false,