Function clearOAuth

packages/cli/src/auth/store.ts:195–214

(path = credentialPath())

/** Remove only the `oauth` block. Used by `auth logout --keep-api-key`. */
export async function clearOAuth(path = credentialPath()): Promise<void> {
  const { credentials, source } = await readStore(path);
  if (source === "absent" || !credentials.oauth) return;
  // Drop oauth, keep everything else (api_key, the friendly-display
  // user block, and any unknown/foreign keys) so a logout that only
  // clears the OAuth session doesn't silently wipe co-located data.
  const next: Credentials = { ...credentials };
  delete next.oauth;
  if (!next.api_key && !hasPreservedUnknownData(next)) {
    // Nothing worth preserving survives. The leftover user block had no
    // friendly fields and there's no foreign/unknown data to round-trip,
    // so this is orphaned metadata with no credential to attach to — drop
    // the file. (A surviving top-level / user-block unknown key, by
    // contrast, may be a future credential another CLI owns, so we keep
    // the file in that case.)
    await deleteStore(path);
    return;
  }
  await writeStore(next, path);
}

async function ensureDir(dir: string): Promise<void> {
  try {