- Add token expiry detection with 60-second buffer before API calls - Implement refresh_token grant flow against Anthropic OAuth endpoint - Cache refreshed access tokens in-memory only (never written to disk) - Retry token refresh on 401/403 responses before failing - Add comprehensive tests for token refresh, expiry, and error scenarios