[kjgbot]

Summary

• Bumps @relayflows/cli in packages/cli from 1.0.1 to 1.1.8.
• 1.1.8 is the first release containing fix(core): subscription logins win over API keys for their CLI relayflows#65: subscription logins win over API keys for their CLI.
  • CLAUDE_CODE_OAUTH_TOKEN shadows ANTHROPIC_API_KEY for claude.
  • Codex and Grok logins shadow OPENAI_API_KEY and XAI_API_KEY.
• The cloud worker (feat(cloud-worker): mount subscription logins for the run and write refreshed tokens back #2073) relies on this: it writes run-scoped login files and sets AGENT_RELAY_SUBSCRIPTION_LOGINS.
• Lockfile regenerated with npm install --package-lock-only.
  • The 1.1.8 tree nests under packages/cli/node_modules, because @relayflows/sdk still uses core 1.1.7.
  • The stale 15.1.0 workspace versions in the lock were synced to 15.1.1.

Test plan

• CI green
• Self-host proof: the stock worker from the release runs a flow; claude sees only the setup token, and codex gets its 0600 login file

🤖 Generated with Claude Code

---

^{Open in [code]smith · Need help on this PR? Tag @codesmith-bot with what you need.}

---

Agent Relay sessions

• claude session a19e66d9 · opened via gh pr create · last active 2026-11-04
• claude session 091f15c3 · contributor · ran gh pr commands · last active 2026-11-04

[coderabbitai]

No actionable comments were generated in the recent review.

Walkthrough

The CLI package dependency changes from version 1.0.1 to 1.1.8. The local workflow runner documentation changes to version 1.1.x. The changelog records subscription-login precedence and environment-variable handling for Claude, Codex, and Grok.

Changes: CLI dependency update

Layer / File(s)	Summary
CLI version and release notes packages/cli/package.json, packages/cli/src/cli/commands/cloud-v1-deprecations.ts, CHANGELOG.md	The dependency changes from 1.0.1 to 1.1.8, and the local runner documentation changes to 1.1.x. The changelog records subscription-login precedence and the listed Claude, Codex, and Grok environment-variable handling.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Possibly related PRs

• AgentWorkforce/relay#2073: Adds run-scoped Codex and Grok login files and sets AGENT_RELAY_SUBSCRIPTION_LOGINS. This PR updates the CLI to a release whose subscription-login precedence applies to those credentials.

Merge Risk: Minimal · up to ae99a

No actionable merge-blocking issue is established for this version update. Complete the normal checks before merging.

Pre-merge checks: 4 · 1

Failed checks: 1 warning

Check name	Status	Explanation	Resolution
Description check		The description covers the summary of the bump, the upstream change it includes, the reason for the change, and the lockfile notes. It also includes a Test Plan. However, the template's "RelayFlow Pro…	Add the RelayFlow Proof section. Set the change type to one of the allowed values: "feature" or "bugfix" for user-visible behavior changes, or "non-functional" when runtime behavior is unchanged. Set the RelayFlow case to a case ID, and add…

Passed checks: 4 passed

Check name	Status	Explanation
Title check		The title names a dependency bump of @relayflows/cli to 1.1.8, which matches the single package.json change and the changelog and documentation updates. It also gives the main behavior the bump brings…
Docstring Coverage		Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title names a dependency bump of @relayflows/cli to 1.1.8, which matches the single package.json change and the changelog and documentation updates. It also gives the main behavior the bump brings: subscription-login precedence over API keys. The title uses the conventional "chore(cli):" prefix and is specific. Its length (69 characters) is acceptable for a title.

Full details: Docstring Coverage

Explanation

Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 1 functions across 1 files.

Full details: Description check

Explanation

The description covers the summary of the bump, the upstream change it includes, the reason for the change, and the lockfile notes. It also includes a Test Plan. However, the template's "RelayFlow Proof" section is missing. Its placeholders (change type and RelayFlow case) are still unfilled, so the author did not complete the required proof fields. The Screenshots section is absent, but the template marks it as optional. The Test Plan boxes for tests and manual testing are unchecked, and the description lists the self-host proof as unchecked.

Resolution

Add the RelayFlow Proof section. Set the change type to one of the allowed values: "feature" or "bugfix" for user-visible behavior changes, or "non-functional" when runtime behavior is unchanged. Set the RelayFlow case to a case ID, and add exactly one case under tests/relayflows/cases/<case-id>/. Keep the proof markers relay-pr-proof:type and relay-pr-proof:case. Also, complete or justify the unchecked "Tests added/updated" and "Manual testing completed" items from the template, and confirm the self-host proof result.

Finishing Touches

Generate docstrings

• Commit to this branch
• Create a new PR

Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit checks the version line,
Then hops where worker logins shine.
Claude’s token takes its place,
Codex and Grok keep keys in trace.
The changelog notes the pathway clear.}

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 2ad8334b-a133-42bc-8adf-c7bbd33bb6b2

Commits

Reviewing files that changed from the base of the PR and between 783cc2d and ae99a6c.

Files selected for processing: 1

• packages/cli/src/cli/commands/cloud-v1-deprecations.ts

Included review availability: This review used your included allowance. Your plan provides up to 4 included reviews per hour; 1 remain after this review.

[devin-ai-integration]

Devin Review found 1 potential issue.

[cubic-dev-ai]

All reported issues were addressed across 2 files

<sub>Reply with feedback, questions, or to request a fix.

View guided diff | Re-trigger cubic</sub>

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge; no actionable issues were found.

Summary

Pins @relayflows/cli to 1.1.8 for subscription-login precedence.

• Relayflows runs give subscription logins priority over matching API keys.

_{Reviews (3) · Last reviewed commit: "docs(cli): the v1 runner comment names @..." · Reviewed by Greptile}