Session Refresh

After bootstrap, the agent receives SSO tokens including a refresh_token. The refresh command renews the access_token without requiring human interaction.

Explicit Refresh

node cli.mjs refresh

Automatic Refresh

The auth-header command automatically refreshes expired sessions before generating the token:

# Transparently refreshes if needed
node cli.mjs auth-header

Revocation

If the human revokes the agent’s authorization via the Alien App, the refresh will fail and the agent will need to re-bootstrap.

Next Steps

• External Services Auth — Use refreshed sessions for service authentication
• CLI Reference — Full refresh command reference