[Brooooooklyn]

What

Adds void github link and makes void github install work for any Void login (Google, GitHub, SSO) — the CLI side of RFC 0074 (decouple GitHub-for-deploys from the login provider). Pairs with the platform PR (void-platform) that adds the link routes; this PR is the framework/CLI half.

Changes

• void github link — links the current Void account to a GitHub identity via a localhost + PKCE handshake (mirrors void auth login). Drives the platform's 3-endpoint flow: GET /github/link-url (authed) → GET /github/link-callback (public, returns a PKCE-bound link_code to localhost) → POST /github/link/complete (authed, binds to the bearer-token holder).
• void github install auto-links — on a github_identity_required 403 it runs the link flow then retries once; any other error surfaces normally. Removes the old "run void auth login and choose GitHub" message (which risked forking a second account).
• awaitBrowserCallback — extracted the localhost OAuth callback server from runLogin into a shared, tested helper with a finalize hook (the token/identity exchange runs in the request path, so the browser only shows success after it actually succeeds). runLogin is behavior-preserving.
• Client methods getGithubLinkUrl / completeGithubLink; link wired into args/help/CLI; docs/reference/cli.md updated.

Security

The link flow uses deferred bind: the public callback never binds an identity — it only mints a stateless, PKCE-bound link_code delivered to the initiator's own localhost; the bind happens in the authenticated /complete keyed on the token holder. This defeats the account-linking confused-deputy (an attacker can only ever link their own identity). Reviewed via codex adversarial-review; findings fixed and test-pinned.

Tests

Feature unit tests green (auth-callback, auth-login regression, github-link/install/args/client). The repo's browser-based integration tests require Playwright browsers (unrelated to this CLI-only change).

Note

Requires the paired platform change; deploy needs <API>/github/link-callback registered as a GitHub App callback URL.

🤖 Generated with Claude Code

---

Note

Medium Risk
Touches account-linking and localhost OAuth callback behavior; mistakes could affect login UX or identity binding, though behavior is heavily unit-tested and defers binding to authenticated /complete.

Overview
Adds void github link so users logged in with Google or other SSO can bind a GitHub identity to their Void account via localhost + PKCE (same pattern as void auth login), using new platform APIs getGithubLinkUrl / completeGithubLink. 409 conflicts get clear messages for “GitHub already on another Void account” vs “Void account already has a different GitHub.”

void github install no longer tells users to re-login with GitHub on github_identity_required. It runs the link flow inline and retries the install URL once; other errors after linking still propagate normally.

Refactors OAuth localhost handling into shared awaitBrowserCallback with a finalize hook so token/link exchange runs in the request path before the browser sees success; runLogin is rewired on top with preserved ?token= / missing-code behavior. Exports createCodeVerifier / createCodeChallenge for the link flow.

Wires link through args, help, and CLI docs; adds unit tests for the callback helper, login exchange failure, install auto-link, link command, and client methods.

^{Reviewed by Cursor Bugbot for commit 63bd41b. Bugbot is set up for automated code reviews on this repo. Configure here.}