- Auto-refresh: before non-auth commands, if the access token is expired but a refresh token exists, silently regenerate tokens. Prints "Token refreshed." to stderr so users know what happened. - FXT_PASSWORD: login reads password from this env var when set, skipping the interactive prompt. Safer than a --password flag (env vars don't appear in ps output or shell history). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>