fix(installer): recover unauthorized dashboard configuration safely

[nicknisi]

Complete the local implementation and verification for AUTH-6735: robust bounded retry/recovery for Unauthorized dashboard configuration in the current WorkOS CLI. Preserve and adapt the useful work from existing CLI PR219 to today's installer architecture, resolve real review findings and formatting issues, and add regression proof. Produce a small reviewed-change-ready branch, not another investigation-only report; distinguish offline proof from any still-required live acceptance.

Riker's check bun run test && bun run typecheck && bun run lint && bun run format:check passed.

Opened as a draft by Riker (job 11).

[linear-code]

AUTH-6735

[greptile-apps]

Confidence Score: 5/5

[High risk] Adds credential recovery logic to installer configuration flow.

The PR appears safe to merge based on this review; no new actionable issue was found in the changes since the previous review.

Summary

The PR adds bounded recovery for Unauthorized dashboard configuration, with same-application checks, credential adoption safeguards, and regression coverage. Since the previous review, it clarifies manual recovery for rejected but locally unexpired sessions and makes an unchanged homepage explicit in installer output.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  A[Configure application URLs] --> B{Unauthorized?}
  B -->|No| C[Complete or report pending setup]
  B -->|Yes| D{Interactive recovery available?}
  D -->|No| E[Return manual guidance]
  D -->|Yes| F[Check authentication]
  F --> G{Usable changed session or verified replacement pair?}
  G -->|No| E
  G -->|Yes| H[Retry once on the same target]
  H --> I{Retry succeeds?}
  I -->|No| E
  I -->|Yes| J[Verify result and adopt eligible credentials]

Loading

_{Reviews (2) · Last reviewed commit: "fix(installer): clarify manual recovery ..."}