From d458e8180a5ec121870da141a3cbacbafdc6b30e Mon Sep 17 00:00:00 2001
From: ThinkCode <coolguy.net@gmail.com>
Date: Fri, 19 Jun 2026 18:43:18 -0700
Subject: [PATCH] fix(anthropic): use platform.claude.com for OAuth token
 exchange

The OAuth login token exchange POSTed the authorization code to
console.anthropic.com/v1/oauth/token, which Anthropic has retired
(now returns HTTP 404), so 'hermes auth add anthropic --type oauth'
failed with 'Token exchange failed: HTTP Error 404: Not Found'.

Try platform.claude.com first and fall back to the legacy console
host, mirroring the multi-endpoint logic already used by the token
refresh path (refresh_anthropic_oauth_pure).
---
 agent/anthropic_adapter.py | 38 ++++++++++++++++++++++++++++----------
 1 file changed, 28 insertions(+), 10 deletions(-)

diff --git a/agent/anthropic_adapter.py b/agent/anthropic_adapter.py
index 03e8b58e16c4..e761cef5694e 100644
--- a/agent/anthropic_adapter.py
+++ b/agent/anthropic_adapter.py
@@ -1349,18 +1349,36 @@ def run_hermes_oauth_login_pure() -> Optional[Dict[str, Any]]:
             "code_verifier": verifier,
         }).encode()
 
-        req = urllib.request.Request(
+        # Anthropic migrated the OAuth token endpoint to platform.claude.com;
+        # console.anthropic.com/v1/oauth/token now returns 404. Try the new
+        # host first and fall back to the legacy one (mirrors token refresh).
+        token_endpoints = [
+            "https://platform.claude.com/v1/oauth/token",
             _OAUTH_TOKEN_URL,
-            data=exchange_data,
-            headers={
-                "Content-Type": "application/json",
-                "User-Agent": f"claude-cli/{_get_claude_code_version()} (external, cli)",
-            },
-            method="POST",
-        )
+        ]
+        result = None
+        last_error = None
+        for endpoint in token_endpoints:
+            req = urllib.request.Request(
+                endpoint,
+                data=exchange_data,
+                headers={
+                    "Content-Type": "application/json",
+                    "User-Agent": f"claude-cli/{_get_claude_code_version()} (external, cli)",
+                },
+                method="POST",
+            )
+            try:
+                with urllib.request.urlopen(req, timeout=15) as resp:
+                    result = json.loads(resp.read().decode())
+                break
+            except Exception as exc:
+                last_error = exc
+                logger.debug("Anthropic token exchange failed at %s: %s", endpoint, exc)
+                continue
 
-        with urllib.request.urlopen(req, timeout=15) as resp:
-            result = json.loads(resp.read().decode())
+        if result is None:
+            raise last_error if last_error is not None else ValueError("Token exchange failed")
     except Exception as e:
         print(f"Token exchange failed: {e}")
         return None