OAuth tokens can be revoked server-side (e.g., when users revoke access from their Claude.ai account settings). Previously, this would cause authentication failures in various API calls. This release adds automatic token refresh when a revoked token is detected across multiple code paths:
- Fast mode prefetch (checking if your organization has fast mode enabled)
- Metrics opt-out status checks
- General API retry logic
The CLI now catches HTTP 403 responses containing "OAuth token has been revoked" and automatically refreshes the token before retrying the request.
Evidence
OAuth token revocation check helper (search for "OAuth token has been revoked") — GOA() at line ~211503; token refresh function Ju() at line ~114161
Strings lifted out of the shipped bundle, so the claim above can be checked against them.