Release 33.7

Fixed browser login and signup

CronitorCLI 33.7 replaces the unsupported device authorization flow from 33.6 with authorization code and PKCE. Existing API-key configurations continue to work.

• On the same computer as your browser, run cronitor auth login. Sign in or create an account; the CLI receives the browser callback automatically.
• On a remote machine, run cronitor auth login --no-browser. Open the printed URL in your browser, then paste the full resulting localhost callback URL into the waiting terminal prompt. A browser connection error is expected when the CLI is on another computer. No SSH tunnel is required; the prompt hides your input. Never paste callback URLs into agent conversations or logs.
• cronitor signup uses the same login flow. Successful login saves a persistent machine credential; cronitor auth status checks it without revealing the key.

Login validates callback state and uses PKCE, times out after five minutes by default, and preserves existing credentials when authorization or credential creation fails. Use --timeout 10m if more time is needed. Local login uses port 8319; if it is occupied, close the other login attempt or use --no-browser.

This release also adds spacing around authorization URLs for easier copying. WorkOS tokens are used only to create the machine credential and are not saved. Existing logout, config permissions, and credential replacement behavior are retained.