fix(coderabbit): retry sandbox auth failures through approved host execution

[nehal-a2z]

Local Codex reviews can mistake sandbox-inaccessible saved credentials for a signed-out session and enter a localhost login flow that the sandbox cannot serve. The skill now names the command-scoped host execution mechanism and recovers a pre-review sandbox authentication failure with one host auth check and, only when authenticated, one retry of the original review.

The retry preserves the working directory and arguments, supports structured local-auth statuses and older CLI auth errors, and stops when host execution is denied, host authentication remains unavailable, or the initial review already ran on the host. It does not retry network, billing, rate-limit, or active/completed review failures. Plugin version: 1.1.3.

Validation: skill frontmatter validation, manifest JSON parsing, and git diff --check pass. A verified official CLI 0.8.1 reproduced the sandbox callback failure and completed a production fixture review through approved host execution. The updated CLI diagnostic contract was separately exercised with a compiled local candidate. This is instruction-driven recovery; no automatic harness routing enforcement or cross-platform model evaluation is claimed. Existing host-execution guidance remains the primary path.

Rollout: publish the plugin update through the normal release process. Legacy-error support allows use before the new CLI diagnostics are released. Rollback: restore plugin 1.1.2. No credential copying, global permission changes, installs, or automatic browser login are introduced.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 37e0d86b-d272-4fae-85c0-d0cda322dd20

📥 Commits

Reviewing files that changed from the base of the PR and between 999871a and 6a9f566.

⛔ Files ignored due to path filters (1)

• plugins/coderabbit/.codex-plugin/plugin.json is excluded by !**/*.json

📒 Files selected for processing (1)

• plugins/coderabbit/skills/coderabbit-review/SKILL.md

 __________________________________________________________________________
< Your code is like a magic trick: now you see it... now it's `undefined`. >
 --------------------------------------------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

✨ Simplify code

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}