diff --git a/agent/anthropic_adapter.py b/agent/anthropic_adapter.py
index ccb61dc813e..e7e1a8acb6d 100644
--- a/agent/anthropic_adapter.py
+++ b/agent/anthropic_adapter.py
@@ -1060,12 +1060,12 @@ def _generate_pkce() -> tuple:
 
 def run_hermes_oauth_login_pure() -> Optional[Dict[str, Any]]:
     """Run Hermes-native OAuth PKCE flow and return credential state."""
+    import secrets
     import time
     import webbrowser
 
     verifier, challenge = _generate_pkce()
-    import secrets as _secrets
-    oauth_state = _secrets.token_urlsafe(32)
+    oauth_state = secrets.token_urlsafe(32)
 
     params = {
         "code": "true",