Function loginWithApiKey

src/commands/auth/login.ts:134–166

(config: Config, key: string)

}

async function loginWithApiKey(config: Config, key: string): Promise<void> {
  if (config.dryRun) {
    console.log('Would validate and save API key.');
    return;
  }

  // Probe both regions and pick the one the key actually authenticates against.
  // This doubles as key validation — if neither region accepts it, the key is bad.
  const detected = await detectRegion(key);
  const cfg: Config = { ...config, region: detected, baseUrl: REGIONS[detected], apiKey: key };

  // Verify the detection actually authorizes the quota endpoint (defends against
  // detectRegion's graceful 'global' fallback when the network is unreachable).
  try {
    await requestJson<QuotaApiResponse>(cfg, { url: quotaEndpoint(cfg.baseUrl) });
  } catch {
    throw new CLIError(
      'API key validation failed.',
      ExitCode.AUTH,
      'Check that your key is valid and belongs to a Token Plan.',
    );
  }

  // OAuth and api_key are mutually exclusive — drop any stale oauth block.
  const existing = readConfigFile() as Record<string, unknown>;
  delete existing.oauth;
  existing.api_key = key;
  existing.region = detected;
  await writeConfigFile(existing);
  process.stderr.write(`API key saved to ${getConfigPath()}\n`);

  await showDashboardAfterLogin(cfg);
}