fix(cli): address Codex review — api key passthrough, fork parsing, version ID

1. annotation job create: pass resolved API key to Roboflow() instead of
   relying on global config. Fixes auth failure in CI/non-interactive
   contexts when --api-key is provided.

2. workflow fork: extract URL from nested {"workflow": {"url": "..."}}
   response instead of assigning the whole dict to new_url.

3. version create: use return value from generate_version() directly
   instead of inferring via max(versions), which is race-prone if
   another version is created concurrently.

405 tests pass, all linting clean.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: yeldarby

roboflow/cli/handlers/annotation.py

@@ -237,7 +237,7 @@ def _job_create(args: argparse.Namespace) -> None:
 
     with suppress_sdk_output(args):
         try:
-            rf = roboflow.Roboflow()
+            rf = roboflow.Roboflow(api_key=_api_key)
             workspace = rf.workspace(workspace_url)
             project = workspace.project(project_slug)
         except Exception as exc:

roboflow/cli/handlers/version.py

@@ -299,18 +299,13 @@ def _create(args: argparse.Namespace) -> None:
         try:
             rf = roboflow.Roboflow(api_key)
             project = rf.workspace(workspace_url).project(project_slug)
-            project.generate_version(settings)
+            version_id = project.generate_version(settings)
         except Exception as exc:
             output_error(args, str(exc))
             return
 
-    # After generation, the latest version is the newly created one
-    with suppress_sdk_output():
-        try:
-            versions = project.versions()
-            version_num = max(int(v.version.split("/")[-1]) for v in versions) if versions else 1
-        except Exception:
-            version_num = 1
+    # generate_version returns the version number/ID directly
+    version_num = version_id if version_id else "unknown"
 
     data = {"status": "created", "project": project_slug, "version": version_num}
     output(args, data, text=f"Created version {version_num} for project {project_slug}")

roboflow/cli/handlers/workflow.py

@@ -316,7 +316,14 @@ def _fork_workflow(args: argparse.Namespace) -> None:
         output_error(args, str(exc))
         return
 
-    new_url = data.get("workflow", data.get("url", data.get("workflow_url", ""))) if isinstance(data, dict) else ""
+    # Extract the forked workflow URL from potentially nested response
+    new_url = ""
+    if isinstance(data, dict):
+        wf = data.get("workflow", data)
+        if isinstance(wf, dict):
+            new_url = str(wf.get("url", wf.get("workflow_url", "")))
+        else:
+            new_url = str(wf) if wf else ""
     result = {"status": "forked", "source": args.workflow_url, "new_url": new_url}
     text = f"Forked workflow: {args.workflow_url} -> {new_url}"
     output(args, result, text=text)