vibecodingmachine-cli 1.0.6 → 1.0.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibecodingmachine-cli",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "description": "Command-line interface for Vibe Coding Machine - Autonomous development",
   "main": "src/index.js",
   "bin": {

package/src/utils/auth.js

@@ -240,8 +240,9 @@ class CLIAuth {
     // VS Code Remote SSH - use optimized flow with instructions
     if (isVSCodeRemote && !options.headless) {
       console.log(chalk.cyan('\n🔐 VS Code Remote SSH Detected!\n'));
-      console.log(chalk.gray('VS Code will automatically forward port 3000 to your laptop.'));
-      console.log(chalk.gray('The authentication URL will be shown below - click it to login.\n'));
+      console.log(chalk.yellow('⚠️  IMPORTANT: VS Code will show "Port 3000 is now available"'));
+      console.log(chalk.yellow('    → DO NOT click that notification!'));
+      console.log(chalk.yellow('    → Instead, Ctrl+Click the authentication URL shown below\n'));
     }
 
     // Standard browser-based login
@@ -252,10 +253,28 @@ class CLIAuth {
       const codeVerifier = generateCodeVerifier();
       const codeChallenge = generateCodeChallenge(codeVerifier);
 
+      // Build Cognito OAuth URL with PKCE - force Google account picker every time
+      const authUrl = `https://${COGNITO_DOMAIN}/oauth2/authorize?` +
+        `client_id=${CLIENT_ID}&` +
+        `response_type=code&` +
+        `scope=email+openid+profile&` +
+        `redirect_uri=http://localhost:${PORT}/callback&` +
+        `code_challenge=${codeChallenge}&` +
+        `code_challenge_method=S256&` +
+        `identity_provider=Google&` +
+        `prompt=select_account`;
+
       // Create local server to receive callback
       const server = http.createServer(async (req, res) => {
         const url = new URL(req.url, `http://localhost:${PORT}`);
 
+        // Root path - redirect to auth URL (for VS Code "Open in Browser" clicks)
+        if (url.pathname === '/') {
+          res.writeHead(302, { 'Location': authUrl });
+          res.end();
+          return;
+        }
+
         if (url.pathname === '/callback') {
           // Extract authorization code from query params
           const code = url.searchParams.get('code');