Function addAccountByEmail

src/auth.js:479–513

(email, password)

 * so the background renewal loop in checkAndRefreshTokens picks it up.
 */
export async function addAccountByEmail(email, password) {
  if (!email || !password) {
    throw new Error('email and password required');
  }
  const emailKey = String(email).trim().toLowerCase();
  const { windsurfLogin } = await import('./dashboard/windsurf-login.js');
  const result = await windsurfLogin(email, password, null);
  if (!result?.apiKey) {
    throw new Error('Login succeeded but no apiKey returned');
  }
  const label = result.name || email;
  const existingByEmail = accounts.find(a => String(a.email || '').trim().toLowerCase() === emailKey);
  const account = existingByEmail || addAccountByKey(result.apiKey, label);
  if (existingByEmail) {
    account.apiKey = result.apiKey;
    if (account.status === 'error') account.status = 'active';
    account.errorCount = 0;
  }
  if (account.email !== label) {
    account.email = label;
  }
  account.method = 'email';
  if (result.apiServerUrl && !account.apiServerUrl) {
    account.apiServerUrl = result.apiServerUrl;
  }
  if (result.refreshToken || result.idToken) {
    setAccountTokens(account.id, {
      refreshToken: result.refreshToken || '',
      idToken: result.idToken || '',
    });
  }
  saveAccounts();
  log.info(`Account added via email: ${safeAccountRef(account)}`);
  return account;
}

/**
 * Per-account blocklist: hide specific models from this account so the