sandbox 3.4.2 → 3.4.3

package/dist/{app-CBTroEEt.mjs → app-BHH8y5dv.mjs}

@@ -6973,13 +6973,8 @@ var import_cjs$26 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
 var import_dist = require_dist();
 const debug$7 = createDebugger("sandbox:args:auth");
-/**
-* Timestamp (ms epoch) of the most recent auto-login. Used to identify
-* tokens so that the first 401/403 against a freshly-issued token can be
-* retried instead of surfaced to the user.
-*/
 let freshTokenAcquiredAt;
-const FRESH_TOKEN_WINDOW_MS = 1e4;
+const FRESH_TOKEN_WINDOW_MS = 15e3;
 function isTokenFresh() {
 	return freshTokenAcquiredAt !== void 0 && Date.now() - freshTokenAcquiredAt < FRESH_TOKEN_WINDOW_MS;
 }
@@ -7002,7 +6997,10 @@ const token = import_cjs$26.option({
 				console.warn(source_default.yellow(`${source_default.bold("warn:")} failed to get or refresh OIDC token, using personal token authentication.`));
 			}
 			try {
-				return await (0, import_dist.getVercelToken)();
+				const previousToken = getAuth()?.token;
+				const storedToken = await (0, import_dist.getVercelToken)();
+				if (previousToken && storedToken !== previousToken) markTokenAsFresh();
+				return storedToken;
 			} catch (error) {
 				if (error instanceof import_dist.AccessTokenMissingError || error instanceof import_dist.RefreshAccessTokenFailedError) {
 					debug$7(`CLI token unavailable (${error.name}), prompting for login...`);
@@ -7286,7 +7284,7 @@ const scope = {
 
 //#endregion
 //#region package.json
-var version = "3.4.2";
+var version = "3.4.3";
 
 //#endregion
 //#region src/error.ts
@@ -12087,4 +12085,4 @@ const app = (opts) => (0, import_cjs.subcommands)({
 
 //#endregion
 export { source_exports as a, init_source as i, printTopLevelError as n, require_cjs as r, app as t };
-//# sourceMappingURL=app-CBTroEEt.mjs.map
+//# sourceMappingURL=app-BHH8y5dv.mjs.map