replit-tools 1.1.7 → 1.1.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replit-tools",
-  "version": "1.1.7",
+  "version": "1.1.8",
   "description": "DATA Tools - One command to set up Claude Code and Codex CLI on Replit with full persistence",
   "main": "index.js",
   "bin": {

package/scripts/setup-claude-code.sh

@@ -243,12 +243,18 @@ fi
 # Step 6: Auto-refresh OAuth token if needed (with loop prevention)
 # =============================================================================
 CREDENTIALS_FILE="${CLAUDE_PERSISTENT}/.credentials.json"
+AUTH_FAILED_MARKER="${REPLIT_TOOLS}/.auth-refresh-failed"
 
-# Prevent infinite refresh loops - only try once per shell session
-if [ -z "${_REPLIT_TOOLS_AUTH_CHECKED}" ]; then
-    export _REPLIT_TOOLS_AUTH_CHECKED=1
+# Clear failed marker if it's more than 1 hour old (allow retry after cooldown)
+if [ -f "${AUTH_FAILED_MARKER}" ]; then
+    marker_age=$(( $(date +%s) - $(stat -c %Y "${AUTH_FAILED_MARKER}" 2>/dev/null || echo "0") ))
+    if [ "${marker_age}" -gt 3600 ]; then
+        rm -f "${AUTH_FAILED_MARKER}" 2>/dev/null
+    fi
+fi
 
-    if [ -f "${CREDENTIALS_FILE}" ] && [ -f "${AUTH_REFRESH_SCRIPT}" ]; then
+# Skip auth refresh if we already failed recently (file-based lock prevents loops)
+if [ ! -f "${AUTH_FAILED_MARKER}" ] && [ -f "${CREDENTIALS_FILE}" ] && [ -f "${AUTH_REFRESH_SCRIPT}" ]; then
         # Source the auth refresh script to get the function
         source "${AUTH_REFRESH_SCRIPT}"
 
@@ -291,12 +297,12 @@ if [ -z "${_REPLIT_TOOLS_AUTH_CHECKED}" ]; then
                             " 2>/dev/null)
                             log "✅ Claude authentication: refreshed (${NEW_REMAINING}h remaining)"
                         else
-                            log "❌ Token refresh failed - will use --dangerously-skip-permissions"
-                            export CLAUDE_SKIP_AUTH=1
+                            log "❌ Token refresh failed - run 'claude login' when ready"
+                            touch "${AUTH_FAILED_MARKER}"
                         fi
                     else
-                        log "❌ Token expired (no refresh token) - will use --dangerously-skip-permissions"
-                        export CLAUDE_SKIP_AUTH=1
+                        log "❌ Token expired (no refresh token) - run 'claude login' when ready"
+                        touch "${AUTH_FAILED_MARKER}"
                     fi
                 elif [ "${remaining}" -lt 2 ]; then
                     # Less than 2 hours - refresh proactively
@@ -321,14 +327,13 @@ if [ -z "${_REPLIT_TOOLS_AUTH_CHECKED}" ]; then
                     log "✅ Claude authentication: valid (${remaining}h remaining)"
                 fi
             elif [ "${auth_type}" = "none" ] || [ "${auth_type}" = "error" ]; then
-                log "⚠️  No valid auth found - will use --dangerously-skip-permissions"
-                export CLAUDE_SKIP_AUTH=1
+                log "⚠️  No valid auth - run 'claude login' when ready"
             fi
         fi
-    elif [ ! -f "${CREDENTIALS_FILE}" ]; then
-        log "⚠️  No credentials - will use --dangerously-skip-permissions"
-        export CLAUDE_SKIP_AUTH=1
-    fi
+elif [ -f "${AUTH_FAILED_MARKER}" ]; then
+    log "⏭️  Skipping auth check (refresh failed recently, retry in 1h or run 'claude login')"
+elif [ ! -f "${CREDENTIALS_FILE}" ]; then
+    log "⚠️  No credentials - run 'claude login' when ready"
 fi
 
 # =============================================================================