CC 2.1.133 Adoption — Group F: OAuth + session + network

Issues closed 4

What changes

1. Parallel-session refresh-token race breaking

// 3 worktree-isolated /ork:implement
//   sessions running concurrently.
// Refresh token rotates in session A.
// Sessions B + C race against the
//   rotation and end up holding the
//   now-invalidated old token.
// All three dead-end at 401.

[A] 401 Unauthorized   ← rotated
[B] 401 Unauthorized   ← raced
[C] 401 Unauthorized   ← raced

// Recovery: claude /login + resume
// every session manually.

// Rotation is serialized across all
//   sessions sharing the credential.
// All three see the same fresh token.

[A] continues  ← fresh token
[B] continues  ← same fresh token
[C] continues  ← same fresh token

// No 401 cascade.
// Worktree-isolation workflow is
//   stable for concurrent agents.

2. Remote Control stop/interrupt now matches local Esc breaking

// claude.ai Remote Control: Stop btn
[Stop]  → CLI nominally interrupted
        → message queue NEVER advances
        → session wedged until killed

// Same path as local Esc
[Stop]  → current tool/prompt aborts
        → message queue resumes
        → session immediately usable

3. MCP OAuth respects HTTP(S)_PROXY / NO_PROXY / mTLS breaking

// MCP transport: proxy-aware
// MCP OAuth:     bypasses proxy
//
// Steps that bypassed the proxy:
//   - discovery
//   - dynamic client registration
//   - token exchange
//   - token refresh
//
// Net: corp-proxy users could
//   never auth against OAuth-
//   protected MCP servers.

export HTTPS_PROXY=http://proxy.corp:3128
export NO_PROXY=localhost,.internal
export NODE_EXTRA_CA_CERTS=/etc/ssl/ca.pem
export CLAUDE_CODE_MCP_CLIENT_CERT=...
export CLAUDE_CODE_MCP_CLIENT_KEY=...
claude

// Discovery, DCR, token exchange,
//   token refresh — all routed via
//   the same proxy + mTLS config
//   that already handles MCP
//   transport.

4. --add-dir works for Windows mapped network drives breaking

PS> claude --add-dir Z:\share\project
// CLI accepts the flag.

// Read tool on Z:\share\project\f.ts
[error] path not in allowed directories

// Misidentified mapped drive as
//   "not local filesystem" in the
//   internal permission check.

PS> claude --add-dir Z:\share\project
// Read / Write / Edit all succeed.

// Also covers SDK additionalDirectories
//   for programmatic hosts.
// UNC paths (\\server\share)
//   work the same way.

cc-version-matrix entries added 4

Files changed

Why doc-only is enough

CC floor is at 2.1.138 in engines.claudeCode, so 2.1.133's behavior is already guaranteed at runtime. What was missing: human-readable prose surfacing each fix in the right skill. configure owns CC version-settings, chain-patterns owns worktree-isolation guidance, doctor owns recovery flow, mcp-patterns owns OAuth/transport guidance.

Verification

• npm run build — plugins/ regenerated; count drift = 0 (107/37/188 unchanged)
• npm run test:skills — structure + rule validation pass
• npm run test:agents — 37/37 valid frontmatter
• npm run test:manifests — 108 skills delivered, 0 orphans
• npm run test:security — 14/14 pass
• npm run typecheck — clean

Group plan

First group in M132 (CC 2.1.133 adoption). M131 (CC 2.1.128–2.1.132) is closed; this kicks off the next milestone.

• F · OAuth + session + network (this PR) — 4 breaking-fixes, parent ## CC 2.1.133 Settings header introduced