feat: support configurable CLI global config (#1011)

- Add `coder.globalConfig` machine-scoped setting to control the CLI `--global-config` path; falls back to `CODER_CONFIG_DIR`, then the existing per-deployment `<globalStorage>/<safeHost>` default
- Propagate the resolved config dir through `PathResolver`, CLI auth flags, credential file reads/writes/deletes, active remote reload prompts, and support bundle settings
- On CLI 2.31+: delegate credential writes to `coder login` and deletes to `coder logout --global-config <dir>` instead of the extension touching files directly
- On CLI 2.31+ (file mode): read file-backed CLI credentials so the extension can share a login with the terminal `coder` binary
- Preserve keyring precedence (macOS/Windows, 2.29+); no behavior change for keyring users
- Prevent `coder.globalFlags` from overriding the managed `--global-config` / `--use-keyring` flags
- Move binary cache out of the per-deployment dir; always use the plugin dir (`coder.binaryDestination` still applies)

Closes #185

Author: EhabY

CHANGELOG.md

@@ -18,6 +18,15 @@
   raw output. When a slow connection is detected, the network status bar
   tooltip also links to the network check alongside the latency test, for a
   deployment-wide view of the network path.
+- Share login with the terminal `coder` CLI by setting `--global-config=<dir>`
+  in `coder.globalFlags`; the extension reads file-based CLI credentials from
+  that directory (requires a deployment on 2.31.0+).
+
+### Changed
+
+- File-based credentials are now written and cleared through `coder login` and
+  `coder logout` rather than by the extension directly. The minimum supported
+  Coder version is now v0.25.0.
 
 ### Fixed
 

package.json

@@ -182,7 +182,7 @@
 					"scope": "machine"
 				},
 				"coder.globalFlags": {
-					"markdownDescription": "Global flags to pass to every Coder CLI invocation. Enter each flag as a separate array item, in order. Do **not** include the `coder` command itself. See the [CLI reference](https://coder.com/docs/reference/cli) for available global flags.\n\nSupports `${env:VAR}`, `${userHome}`, and a leading `~`. For `--flag=value` items the expansion applies to the value half, so `--cfg=~/coder` works.\n\nFor `--header-command`, precedence is: `#coder.headerCommand#` setting, then `CODER_HEADER_COMMAND` environment variable, then the value specified here. The `--global-config` and `--use-keyring` flags are silently ignored as the extension manages them via `#coder.useKeyring#`.",
+					"markdownDescription": "Global flags to pass to every Coder CLI invocation. Enter each flag as a separate array item, in order. Do **not** include the `coder` command itself. See the [CLI reference](https://coder.com/docs/reference/cli) for available global flags.\n\nSupports `${env:VAR}`, `${userHome}`, and a leading `~`. For `--flag=value` items the expansion applies to the value half, so `--cfg=~/coder` works.\n\nSet `--global-config` here to point the CLI at a shared config directory (e.g. `--global-config=~/.config/coderv2` to share login/auth with the Coder CLI); requires a deployment on 2.31.0+ and is ignored when `#coder.useKeyring#` is active. The `--use-keyring` flag is ignored; use `#coder.useKeyring#` instead.\n\nFor `--header-command`, precedence is: `#coder.headerCommand#` setting, then `CODER_HEADER_COMMAND` environment variable, then the value specified here.",
 					"type": "array",
 					"items": {
 						"type": "string"

src/api/authInterceptor.ts

@@ -2,7 +2,7 @@ import { type AxiosError, isAxiosError } from "axios";
 
 import { AuthTelemetry } from "../instrumentation/auth";
 import { OAuthError } from "../oauth/errors";
-import { toSafeHost } from "../util";
+import { toSafeHost } from "../util/uri";
 
 import type * as vscode from "vscode";
 

src/commands.ts

@@ -46,7 +46,8 @@ import {
 import { resolveCliAuth } from "./settings/cli";
 import { appendVsCodeLogs } from "./supportBundle/appendVsCodeLogs";
 import { runExportTelemetryCommand } from "./telemetry/export/command";
-import { openInBrowser, toRemoteAuthority, toSafeHost } from "./util";
+import { toRemoteAuthority } from "./util/authority";
+import { openInBrowser, toSafeHost } from "./util/uri";
 import { vscodeProposed } from "./vscodeProposed";
 import { parseNetcheckReport } from "./webviews/netcheck/types";
 import { parseSpeedtestResult } from "./webviews/speedtest/types";