f506713f5a
apiKey is shared with sibling tools that read it from the same config file, so device login must not remove it. Precedence flips to a live OAuth token over apiKey; a dead grant now degrades to the saved key with a warning instead of aborting. The oauth block records the host it was minted against and is ignored (no use, no refresh) when base_url points elsewhere, so a staging grant is never sent to prod. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| conftest.py | ||
| test_commands.py | ||
| test_common.py | ||
| test_config.py | ||
| test_oauth.py | ||
| test_validation.py | ||