Function ensureFreshToken

src/auth/refresh.ts:99–114

(creds: CredentialFile)

 * (and persisting) the stored token if it expires within 5 minutes.
 */
export async function ensureFreshToken(creds: CredentialFile): Promise<string> {
  const expiresAt = new Date(creds.expires_at).getTime();
  if (Date.now() < expiresAt - REFRESH_BUFFER_MS) return creds.access_token;

  const fresh = await refreshAccessToken(creds.refresh_token, creds.region ?? 'global');
  const updated: CredentialFile = {
    access_token: fresh.access_token,
    refresh_token: fresh.refresh_token,
    expires_at: fresh.expires_at,
    region: creds.region,
    resource_url: fresh.resource_url ?? creds.resource_url,
    account: creds.account,
  };
  await saveCredentials(updated);
  return updated.access_token;
}