f506713f5a
apiKey is shared with sibling tools that read it from the same config file, so device login must not remove it. Precedence flips to a live OAuth token over apiKey; a dead grant now degrades to the saved key with a warning instead of aborting. The oauth block records the host it was minted against and is ignored (no use, no refresh) when base_url points elsewhere, so a staging grant is never sent to prod. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| commands | ||
| __init__.py | ||
| _help.py | ||
| branding.py | ||
| common.py | ||
| config.py | ||
| main.py | ||
| oauth.py | ||
| output.py | ||
| validation.py | ||