tripo-cli 0.1.0 → 0.2.1

package/README.md

@@ -15,7 +15,7 @@ tripo login          # browser approves, key arrives automatically; or --paste /
 tripo make knight.png --for game-mobile --then texture,rig,convert:fbx
 ```
 
-Works with both Tripo regions from the same install — international (`openapi.tripo3d.ai`, console `developers.tripo3d.ai`, email login + Stripe) and China mainland (`openapi.tripo3d.com`, console `developers.tripo3d.com`, SMS login + Alipay). `tripo login` runs an RFC 8628 device flow: the terminal shows a short code, the browser signs in (each console's own method) and approves, and the key lands in the CLI automatically — with graceful fallback to open-the-keys-page-and-paste when the device-auth backend is unavailable. You never pick a region when a key is in hand: the key is probed against both regions and whichever accepts it wins; `tripo topup` then opens the matching billing page (`/billing` on ov, `/billing/recharge` on cn). If a config was moved between machines, `tripo doctor` detects the mismatch and prints the one-line fix.
+Works with both Tripo regions from the same install — international (`openapi.tripo3d.ai`, console `developers.tripo3d.ai`, email login + Stripe) and China mainland (`openapi.tripo3d.com`, console `developers.tripo3d.com`, SMS login + Alipay). `tripo login` runs an RFC 8628 device flow: the terminal shows a short code, the browser signs in (each console's own method) and approves, and the key lands in the CLI automatically — with graceful fallback to open-the-keys-page-and-paste when the device-auth backend is unavailable. The same flow works without a TTY: `tripo login --region ov|cn` from an agent or CI prints the verification URL + code and waits for the browser approval, so an AI agent can start the login and relay the code to its human. You never pick a region when a key is in hand: the key is probed against both regions and whichever accepts it wins; `tripo topup` then opens the matching billing page (`/billing` on ov, `/billing/recharge` on cn). If a config was moved between machines, `tripo doctor` detects the mismatch and prints the one-line fix.
 
 ## Why this CLI
 
@@ -31,7 +31,7 @@ Works with both Tripo regions from the same install — international (`openapi.
 | `tripo ai [description]` | plan with a wizard (no LLM needed) or multi-expert conversation (BYO LLM), confirm a plan card, execute |
 | `tripo view [task\|file]` | interactive 3D preview in your browser (local server, model-viewer) |
 | `tripo redo [task]` | re-run with a fresh seed |
-| `tripo login / logout / whoami` | device flow: browser approves, key arrives automatically (paste fallback); stored 0600 in `~/.tripo/config.json` |
+| `tripo login / logout / whoami / use` | device flow: browser approves, key arrives automatically (paste fallback); stored 0600 in `~/.tripo/config.json`; `use` switches accounts |
 | `tripo topup / balance / usage` | open the billing page + detect the credits arriving; check spend |
 | `tripo generate <endpoint>` | deterministic access to all 8 generation endpoints |
 | `tripo model / anim / mesh <step>` | refine, texture, stylize, convert, import, rig-check, rig, retarget, segment, complete, decimate, smartsegment |
@@ -43,7 +43,22 @@ Works with both Tripo regions from the same install — international (`openapi.
 | `tripo mcp` | run as an MCP server (Cursor / Claude Desktop) |
 | `tripo completion <shell>` | bash/zsh/fish completion |
 
-Every task-producing command supports `-o/--out`, `--no-wait`, `--no-download`, `--name`, `--timeout`, `--notify`, and repeatable `--param key=value` passthrough. Global flags: `--json`, `--yes`, `--quiet`, `--no-open`.
+Every task-producing command supports `-o/--out`, `--no-wait`, `--no-download`, `--name`, `--timeout`, `--notify`, and repeatable `--param key=value` passthrough. Global flags: `--json`, `--yes`, `--quiet`, `--no-open`, `--profile`.
+
+## Multiple accounts
+
+Credentials live in named profiles (one per account — e.g. a cn account and an ov account, or personal + work). Logging in never overwrites another profile's key:
+
+```bash
+tripo login                     # first account → profile "default"
+tripo login --profile work-cn   # second account, kept separately, becomes active
+tripo use                       # switch interactively (or: tripo use default)
+tripo whoami                    # shows the active profile and lists the others
+tripo make "a fox" --profile work-cn   # one-shot override, nothing sticky
+tripo logout                    # removes the *active* profile only
+```
+
+Each profile carries its own key + region, so switching accounts switches regions automatically. `TRIPO_PROFILE=work-cn` does the same as `--profile work-cn`; `TRIPO_API_KEY` bypasses profiles entirely (CI/agents). Configs written by older versions are read as the `default` profile — no migration step, nothing breaks.
 
 ## Scenario presets
 
@@ -81,7 +96,8 @@ tripo batch run assets.yaml --concurrency 2
 
 | var | meaning |
 | --- | --- |
-| `TRIPO_API_KEY` | API key (`tsk_...`), highest precedence |
+| `TRIPO_API_KEY` | API key (`tsk_...`), highest precedence (bypasses profiles) |
+| `TRIPO_PROFILE` | account profile to use, same as the global `--profile` flag |
 | `TRIPO_REGION` | `ov` or `cn` — normally unnecessary: `tripo login` probes both regions with your key and stores the right one automatically |
 | `TRIPO_API_BASE_URL` / `TRIPO_PLATFORM_BASE_URL` | endpoint overrides |
 | `TRIPO_HOME` | config/history directory (default `~/.tripo`) |

package/dist/commands/completion.js

@@ -1,7 +1,7 @@
 /** `tripo completion <shell>` — static shell completion scripts. */
 import { UsageError } from '../core/errors.js';
 const COMMANDS = [
-    'login', 'logout', 'whoami', 'balance', 'usage', 'topup',
+    'login', 'logout', 'whoami', 'use', 'balance', 'usage', 'topup',
     'make', 'view', 'redo', 'ai',
     'generate', 'model', 'anim', 'mesh', 'task', 'files', 'batch', 'history',
     'config', 'doctor', 'docs', 'completion', 'mcp',

package/dist/commands/config-cmd.js

@@ -1,40 +1,46 @@
 /** `tripo config` — global config + directory context management. */
-import { loadConfig, maskKey, saveConfig } from '../config/config.js';
+import { activeProfileName, loadConfig, maskKey, saveConfig, updateProfile, } from '../config/config.js';
 import { findContextFile, loadContext, updateContext } from '../config/context.js';
 import { UsageError } from '../core/errors.js';
 import { emitResult, success } from '../core/output.js';
 import { coerceValue } from './shared.js';
-const SETTABLE = new Set([
-    'region',
-    'api_base_url',
-    'platform_base_url',
-    'language',
-    'default_output_dir',
-    'llm.base_url',
-    'llm.api_key',
-    'llm.model',
-]);
+/** Account-bound settings — these live in the *active profile*. */
+const PROFILE_SETTABLE = new Set(['region', 'api_base_url', 'platform_base_url']);
+/** User preferences — top-level, shared by all profiles. */
+const GLOBAL_SETTABLE = new Set(['language', 'default_output_dir', 'llm.base_url', 'llm.api_key', 'llm.model']);
+const SETTABLE = [...PROFILE_SETTABLE, ...GLOBAL_SETTABLE];
 export function registerConfigCommands(program) {
     const config = program.command('config').description('global config (~/.tripo) and directory context (.tripo)');
     config
         .command('list')
-        .description('show effective config (key masked)')
+        .description('show effective config (keys masked)')
         .action(() => {
         const cfg = loadConfig();
         const shown = {
             ...cfg,
-            api_key: cfg.api_key ? maskKey(cfg.api_key) : undefined,
+            profiles: cfg.profiles
+                ? Object.fromEntries(Object.entries(cfg.profiles).map(([name, prof]) => [
+                    name,
+                    { ...prof, api_key: prof.api_key ? maskKey(prof.api_key) : undefined },
+                ]))
+                : undefined,
             llm: cfg.llm ? { ...cfg.llm, api_key: cfg.llm.api_key ? maskKey(cfg.llm.api_key) : undefined } : undefined,
         };
         const context = loadContext();
-        emitResult({ config: shown, context, context_file: findContextFile() }, JSON.stringify({ config: shown, context }, null, 2));
+        emitResult({ config: shown, active_profile: activeProfileName(cfg), context, context_file: findContextFile() }, JSON.stringify({ config: shown, active_profile: activeProfileName(cfg), context }, null, 2));
     });
     config
         .command('set <key> <value>')
-        .description(`set a config value (${[...SETTABLE].join(', ')})`)
+        .description(`set a config value (${SETTABLE.join(', ')})`)
         .action((key, value) => {
-        if (!SETTABLE.has(key)) {
-            throw new UsageError(`unknown config key "${key}" (valid: ${[...SETTABLE].join(', ')})`);
+        if (PROFILE_SETTABLE.has(key)) {
+            const profile = activeProfileName();
+            updateProfile(profile, { [key]: coerceValue(value) }, { activate: false });
+            success(`${key} = ${value} (profile "${profile}")`);
+            return;
+        }
+        if (!GLOBAL_SETTABLE.has(key)) {
+            throw new UsageError(`unknown config key "${key}" (valid: ${SETTABLE.join(', ')})`);
         }
         const cfg = loadConfig();
         applyPath(cfg, key.split('.'), coerceValue(value));
@@ -45,6 +51,15 @@ export function registerConfigCommands(program) {
         .command('unset <key>')
         .description('remove a config value')
         .action((key) => {
+        if (PROFILE_SETTABLE.has(key)) {
+            const cfg = loadConfig();
+            const profile = activeProfileName(cfg);
+            const prof = { ...cfg.profiles?.[profile] };
+            delete prof[key];
+            saveConfig({ ...cfg, profiles: { ...cfg.profiles, [profile]: prof } });
+            success(`${key} removed (profile "${profile}")`);
+            return;
+        }
         const cfg = loadConfig();
         const parts = key.split('.');
         const parent = parts.slice(0, -1).reduce((acc, part) => (acc && typeof acc[part] === 'object' ? acc[part] : undefined), cfg);

package/dist/commands/doctor.js

@@ -2,7 +2,7 @@
 import { statSync } from 'node:fs';
 import { join } from 'node:path';
 import pc from 'picocolors';
-import { configFileExists, loadConfig, resolveApiBaseUrl, resolveApiKey, resolveRegion, tripoHome } from '../config/config.js';
+import { configFileExists, describeKeySource, listProfiles, loadConfig, resolveApiBaseUrl, resolveApiKey, resolveRegion, tripoHome } from '../config/config.js';
 import { TripoClient } from '../core/client.js';
 import { CliError } from '../core/errors.js';
 import { detectRegionForKey } from '../core/region.js';
@@ -24,14 +24,15 @@ export function registerDoctorCommand(program) {
             critical: true,
         });
         const key = resolveApiKey();
+        const profiles = listProfiles();
         checks.push({
             name: 'api key',
             ok: Boolean(key),
             detail: key
-                ? process.env.TRIPO_API_KEY
-                    ? 'from TRIPO_API_KEY env'
-                    : 'from ~/.tripo/config.json'
-                : 'missing — run "tripo login"',
+                ? `from ${describeKeySource()}${profiles.length > 1 ? ` (${profiles.length} profiles: ${profiles.map((x) => x.name).join(', ')})` : ''}`
+                : profiles.length > 0
+                    ? `active profile has no key — profiles: ${profiles.map((x) => x.name).join(', ')}; run "tripo use"`
+                    : 'missing — run "tripo login"',
             critical: true,
         });
         if (configFileExists()) {

package/dist/commands/home.js

@@ -1,7 +1,7 @@
 /** Bare `tripo` — interactive home: status, quick actions, continue last task. */
 import * as p from '@clack/prompts';
 import pc from 'picocolors';
-import { loadConfig, resolveApiKey } from '../config/config.js';
+import { activeProfileName, listProfiles, loadConfig, resolveApiKey } from '../config/config.js';
 import { readHistory } from '../config/history.js';
 import { TripoClient } from '../core/client.js';
 import { isInteractive, log } from '../core/output.js';
@@ -29,7 +29,9 @@ export function registerHomeAction(program) {
             balanceLine = t({ zh: '余额获取失败', en: 'balance unavailable' });
         }
         const last = readHistory().filter((e) => e.status === 'success').pop();
-        log(`${balanceLine}${last ? t({ zh: ` · 上次任务 @${last.name}`, en: ` · last task @${last.name}` }) : ''}`);
+        const config = loadConfig();
+        const profileNote = listProfiles(config).length > 1 ? t({ zh: ` · 账号 ${activeProfileName(config)}`, en: ` · profile ${activeProfileName(config)}` }) : '';
+        log(`${balanceLine}${profileNote}${last ? t({ zh: ` · 上次任务 @${last.name}`, en: ` · last task @${last.name}` }) : ''}`);
         const action = await p.select({
             message: t({ zh: '想做什么?', en: 'What do you want to do?' }),
             options: [

package/dist/commands/login.js

@@ -1,12 +1,17 @@
 /**
  * Onboarding loop: `tripo login` (device flow: browser approves, key arrives
  * automatically; falls back to open-keys-page-and-paste), `tripo logout`,
- * `tripo whoami`. Key precedence: TRIPO_API_KEY env > ~/.tripo/config.json.
+ * `tripo whoami`, `tripo use` (switch between named profiles).
+ *
+ * Multi-account: every login lands in a profile (default: the active one).
+ * `tripo login --profile work` adds a second account without touching the
+ * first; `tripo use work` switches. Key precedence stays:
+ * TRIPO_API_KEY env > active profile in ~/.tripo/config.json.
  */
 import * as p from '@clack/prompts';
-import { deleteApiKey, loadConfig, maskKey, REGION_DEFAULTS, resolveApiKey, resolvePlatformBaseUrl, resolveRegion, updateConfig, } from '../config/config.js';
+import { activeProfileName, DEFAULT_PROFILE, deleteProfile, describeKeySource, isValidProfileName, listProfiles, loadConfig, maskKey, REGION_DEFAULTS, resolveApiKey, resolvePlatformBaseUrl, resolveRegion, setActiveProfile, updateProfile, } from '../config/config.js';
 import { TripoClient } from '../core/client.js';
-import { DeviceAuthUnavailableError, requestDeviceCode, waitForDeviceApproval } from '../core/device-auth.js';
+import { DeviceAuthUnavailableError, requestDeviceCode, waitForDeviceApproval, } from '../core/device-auth.js';
 import { AuthError, CliError, UsageError } from '../core/errors.js';
 import { detectRegionForKey } from '../core/region.js';
 import { emitResult, isInteractive, log, shouldOpen, success, warn } from '../core/output.js';
@@ -21,21 +26,29 @@ export function registerAuthCommands(program) {
         .description('sign in: browser authorizes, the key arrives automatically')
         .option('--paste', 'skip the browser flow; just paste an API key')
         .option('--key <key>', 'provide the API key directly (tsk_...); region is auto-detected')
-        .option('--region <region>', 'ov or cn — only needed for the browser flow; auto-detected once a key exists')
+        .option('--region <region>', 'ov or cn — needed for the browser flow; required for non-interactive login')
+        .option('--profile <name>', 'save into a named profile (for a second account); becomes the active profile')
         .action(async (opts) => {
         await runLogin(opts);
     });
     program
         .command('logout')
-        .description('remove the locally stored API key')
-        .action(() => {
-        const config = loadConfig();
-        if (!config.api_key) {
-            log(t({ zh: '本地没有存储 API Key', en: 'no API key stored locally' }));
+        .description('remove the locally stored API key (current profile only)')
+        .option('--profile <name>', 'log out a specific profile instead of the active one')
+        .action((opts) => {
+        const name = opts.profile ?? activeProfileName();
+        if (!deleteProfile(name)) {
+            log(t({ zh: `Profile「${name}」本地没有存储 API Key`, en: `no API key stored locally for profile "${name}"` }));
         }
         else {
-            deleteApiKey();
-            success(t({ zh: '已删除本地 API Key', en: 'local API key removed' }));
+            success(t({ zh: `已删除 profile「${name}」的本地 API Key`, en: `local API key removed (profile "${name}")` }));
+            const rest = listProfiles();
+            if (rest.length > 0) {
+                log(t({
+                    zh: `其余账号仍在: ${rest.map((x) => x.name).join(', ')}(tripo use 切换)`,
+                    en: `remaining profiles: ${rest.map((x) => x.name).join(', ')} (switch with "tripo use")`,
+                }));
+            }
         }
         log(t({
             zh: `如需吊销 Key 本身,请前往 ${resolvePlatformBaseUrl()} 的 API Keys 页面`,
@@ -44,43 +57,120 @@ export function registerAuthCommands(program) {
     });
     program
         .command('whoami')
-        .description('show the active key (masked), region, and balance')
+        .description('show the active key (masked), region, balance, and other profiles')
         .action(async () => {
         const config = loadConfig();
+        // TripoClient's constructor is the single authority on "no key": it
+        // distinguishes a mistyped profile from not being logged in at all.
+        const client = new TripoClient();
         const key = resolveApiKey(config);
-        if (!key)
-            throw new AuthError(t({ zh: '未配置 API Key', en: 'no API key configured' }));
-        const source = process.env.TRIPO_API_KEY ? 'env:TRIPO_API_KEY' : '~/.tripo/config.json';
+        const source = describeKeySource(config);
         const region = resolveRegion(config);
-        const client = new TripoClient();
         const balance = await client.getBalance();
+        const others = listProfiles(config).filter((x) => !x.active);
+        const lines = [
+            `key      ${maskKey(key)} (${source})`,
+            `region   ${region}`,
+            `api      ${client.baseUrl}`,
+            t({ zh: `余额     ${balance.balance} 积分(冻结 ${balance.frozen})`, en: `balance  ${balance.balance} credits (${balance.frozen} frozen)` }),
+        ];
+        if (others.length > 0) {
+            lines.push(t({
+                zh: `其它账号 ${others.map((x) => profileLabel(x.name, x.profile.region)).join(', ')}(tripo use 切换)`,
+                en: `others   ${others.map((x) => profileLabel(x.name, x.profile.region)).join(', ')} (switch with "tripo use")`,
+            }));
+        }
         emitResult({
             key: maskKey(key),
             source,
+            profile: activeProfileName(config),
             region,
             api_base_url: client.baseUrl,
             balance: balance.balance,
             frozen: balance.frozen,
-        }, [
-            `key      ${maskKey(key)} (${source})`,
-            `region   ${region}`,
-            `api      ${client.baseUrl}`,
-            t({ zh: `余额     ${balance.balance} 积分(冻结 ${balance.frozen})`, en: `balance  ${balance.balance} credits (${balance.frozen} frozen)` }),
-        ].join('\n'));
+            profiles: listProfiles(config).map((x) => ({ name: x.name, region: x.profile.region, active: x.active })),
+        }, lines.join('\n'));
+    });
+    program
+        .command('use [profile]')
+        .description('switch the active account profile (no argument: pick interactively)')
+        .action(async (name) => {
+        await runUse(name);
     });
 }
+function profileLabel(name, region) {
+    return region ? `${name} (${region})` : name;
+}
+async function runUse(name) {
+    const profiles = listProfiles();
+    if (profiles.length === 0) {
+        throw new AuthError(t({ zh: '还没有任何账号', en: 'no profiles yet' }), t({ zh: '先运行 tripo login 登录', en: 'run "tripo login" first' }));
+    }
+    if (!name) {
+        if (!isInteractive()) {
+            throw new UsageError(t({
+                zh: `非交互环境请指定名字: tripo use <${profiles.map((x) => x.name).join('|')}>`,
+                en: `specify a profile in non-interactive mode: tripo use <${profiles.map((x) => x.name).join('|')}>`,
+            }));
+        }
+        const answer = await p.select({
+            message: t({ zh: '切换到哪个账号?', en: 'Switch to which account?' }),
+            initialValue: profiles.find((x) => x.active)?.name,
+            options: profiles.map((x) => ({
+                value: x.name,
+                label: profileLabel(x.name, x.profile.region) + (x.active ? t({ zh: '(当前)', en: ' (current)' }) : ''),
+                hint: x.profile.api_key ? maskKey(x.profile.api_key) : undefined,
+            })),
+        });
+        if (p.isCancel(answer))
+            throw new CliError('cancelled', EXIT.FATAL);
+        name = answer;
+    }
+    const match = profiles.find((x) => x.name === name);
+    if (!match) {
+        throw new UsageError(t({
+            zh: `没有叫「${name}」的 profile(现有: ${profiles.map((x) => x.name).join(', ')})`,
+            en: `no profile named "${name}" (have: ${profiles.map((x) => x.name).join(', ')})`,
+        }), t({ zh: `新账号用 tripo login --profile ${name} 登录`, en: `log a new account in with: tripo login --profile ${name}` }));
+    }
+    setActiveProfile(name);
+    success(t({
+        zh: `已切换到「${name}」${match.profile.region ? `(region=${match.profile.region})` : ''}`,
+        en: `switched to "${name}"${match.profile.region ? ` (region=${match.profile.region})` : ''}`,
+    }));
+    if (process.env.TRIPO_API_KEY) {
+        warn(t({
+            zh: '注意:环境变量 TRIPO_API_KEY 仍然优先于 profile,如需使用 profile 请先 unset',
+            en: 'note: TRIPO_API_KEY env var still overrides the profile — unset it to use the profile key',
+        }));
+    }
+}
 export async function runLogin(opts) {
     let region = normalizeRegion(opts.region);
+    // No --profile → the *active* profile: `tripo use work && tripo login`
+    // re-authenticates work, it does not silently overwrite default.
+    const profile = opts.profile ?? activeProfileName();
+    if (!isValidProfileName(profile)) {
+        throw new UsageError(t({
+            zh: `profile 名「${profile}」不合法(小写字母/数字开头,可含 - _,最长 32)`,
+            en: `invalid profile name "${profile}" (lowercase alphanumeric start, may contain - _, max 32 chars)`,
+        }));
+    }
+    const replacing = loadConfig().profiles?.[profile]?.api_key;
+    if (replacing) {
+        log(t({
+            zh: `将替换 profile「${profile}」现有的 Key ${maskKey(replacing)}(新账号请用 tripo login --profile 名字)`,
+            en: `this will replace the key ${maskKey(replacing)} in profile "${profile}" (for a second account use: tripo login --profile <name>)`,
+        }));
+    }
     if (opts.key) {
         // Key in hand → region is detected, not asked (a key lives in exactly one region).
-        await validateAndSave(opts.key, region);
+        await validateAndSave(opts.key, region, profile);
         return;
     }
     if (!isInteractive()) {
-        throw new UsageError(t({
-            zh: '非交互环境请用 TRIPO_API_KEY 环境变量或 tripo login --key tsk_...',
-            en: 'in non-interactive environments use the TRIPO_API_KEY env var or "tripo login --key tsk_..."',
-        }));
+        await runHeadlessLogin(region, profile, opts.paste);
+        return;
     }
     p.intro('tripo login');
     // The browser/paste flows need a console URL *before* any key exists — the
@@ -105,13 +195,78 @@ export async function runLogin(opts) {
             throw new CliError('cancelled', EXIT.FATAL);
         region = answer;
     }
-    const key = opts.paste ? await keyFromConsole(region, false) : await deviceFlowWithFallback(region);
-    await validateAndSave(key, region);
+    const key = opts.paste ? await keyFromConsole(region, false) : await deviceFlowWithFallback(region, profile);
+    await validateAndSave(key, region, profile);
     p.outro(t({
         zh: '登录完成!试试: tripo make "一只可爱的机器人"',
         en: 'logged in! try: tripo make "a cute robot"',
     }));
 }
+/**
+ * Non-interactive login (agents, CI without a provisioned key): the same
+ * device flow, but with the verification URL and one-time code printed as
+ * plain text so the caller can relay them to a human, then a blocking poll
+ * until that human approves in a browser. The prompts of the interactive
+ * path are impossible here, so --region must be explicit (there is no key
+ * yet to probe, and the two regions have different console hosts) and
+ * --paste is rejected outright.
+ */
+async function runHeadlessLogin(region, profile, paste) {
+    if (paste) {
+        throw new UsageError(t({
+            zh: '--paste 需要交互终端;非交互环境请用设备码登录(tripo login --region ov|cn)或 TRIPO_API_KEY / --key',
+            en: '--paste needs an interactive terminal — use device login ("tripo login --region ov|cn"), TRIPO_API_KEY, or --key instead',
+        }));
+    }
+    if (!region) {
+        throw new UsageError(t({
+            zh: '非交互登录请指定 --region ov(海外站)或 cn(国内站),例如: tripo login --region ov;或改用 TRIPO_API_KEY / tripo login --key tsk_...',
+            en: 'non-interactive login needs an explicit --region ov (international) or cn (China mainland), e.g. "tripo login --region ov" — or use TRIPO_API_KEY / "tripo login --key tsk_..."',
+        }));
+    }
+    let grant;
+    try {
+        grant = await requestDeviceCode(region, profile === DEFAULT_PROFILE ? undefined : profile);
+    }
+    catch (err) {
+        if (err instanceof DeviceAuthUnavailableError) {
+            // No paste fallback without a TTY — fail with every remaining option spelled out.
+            throw new CliError(t({
+                zh: `浏览器授权服务不可用(${err.message});请设置 TRIPO_API_KEY,运行 tripo login --key tsk_...,或在交互终端里运行 tripo login`,
+                en: `device authorization unavailable (${err.message}) — set TRIPO_API_KEY, run "tripo login --key tsk_...", or run "tripo login" in an interactive terminal`,
+            }), EXIT.AUTH);
+        }
+        throw err;
+    }
+    const minutes = Math.max(1, Math.round(grant.expires_in / 60));
+    log(t({
+        zh: [
+            '需要在浏览器完成授权;本命令会一直等待,直到授权完成或过期。请转告用户:',
+            `  1. 打开: ${grant.verification_url_complete}`,
+            '     (页面如果提示登录,先登录或注册 Tripo 账号 — 新账号有免费额度)',
+            `  2. 在「Verification code」输入框填入终端码: ${grant.user_code}`,
+            '  3. 账号已有多把 API Key 时页面会让用户选择一把;一把没有则自动创建',
+            `  4. 点击「Authorize」。此码 ${minutes} 分钟内有效`,
+        ].join('\n'),
+        en: [
+            'Authorization happens in a browser; this command keeps waiting until approved or expired. Relay these steps:',
+            `  1. Open: ${grant.verification_url_complete}`,
+            '     (if the page asks to sign in, sign in or sign up first — new accounts get free credits)',
+            `  2. Enter this one-time code in the "Verification code" field: ${grant.user_code}`,
+            '  3. An account with several API keys is asked to pick one; with none, a key is created automatically',
+            `  4. Click "Authorize". The code expires in ${minutes} minutes`,
+        ].join('\n'),
+    }));
+    const result = await waitForDeviceApproval(region, grant);
+    if (result.status === 'denied') {
+        throw new CliError(t({ zh: '授权被拒绝;重新运行 tripo login 再试', en: 'authorization denied — run "tripo login" again to retry' }), EXIT.AUTH);
+    }
+    if (result.status !== 'approved') {
+        throw new CliError(t({ zh: '授权超时或已过期;重新运行 tripo login 获取新的终端码', en: 'authorization expired — run "tripo login" again for a fresh code' }), EXIT.AUTH);
+    }
+    const saved = await validateAndSave(result.apikey, region, profile);
+    emitResult({ status: 'logged_in', profile, region: saved.region, key: maskKey(result.apikey), balance: saved.balance }, t({ zh: `登录完成(profile=${profile}, region=${saved.region})`, en: `logged in (profile=${profile}, region=${saved.region})` }));
+}
 /**
  * Preferred path: RFC 8628 device flow — the browser does the sign-in and a
  * one-click approve, the key arrives over the CLI↔console-API channel, and
@@ -119,10 +274,12 @@ export async function runLogin(opts) {
  * the backend feature flag is off (endpoints 404) or the console API is
  * unreachable, so login never hard-fails on a backend rollout state.
  */
-async function deviceFlowWithFallback(region) {
+async function deviceFlowWithFallback(region, profile) {
     let grant;
     try {
-        grant = await requestDeviceCode(region);
+        // The backend rotates keys by name; scoping the name by profile keeps two
+        // profiles of the same account from revoking each other's key.
+        grant = await requestDeviceCode(region, profile === DEFAULT_PROFILE ? undefined : profile);
     }
     catch (err) {
         if (err instanceof DeviceAuthUnavailableError) {
@@ -258,17 +415,18 @@ async function keyFromConsole(region, openBrowser) {
  * its verdict beats whatever the user selected, so a wrong region choice
  * self-heals instead of producing a config that 401s on every call.
  */
-async function validateAndSave(key, selectedRegion) {
+async function validateAndSave(key, selectedRegion, profile) {
     if (process.env.TRIPO_API_BASE_URL) {
         const client = new TripoClient({ apiKey: key });
         try {
             const balance = await client.getBalance();
-            finishSave(key, selectedRegion ?? 'ov', balance.balance);
+            const region = selectedRegion ?? 'ov';
+            finishSave(key, region, balance.balance, profile);
+            return { region, balance: balance.balance };
         }
         catch (err) {
             throw asAuthError(err);
         }
-        return;
     }
     const detected = await detectRegionForKey(key);
     if (!detected) {
@@ -283,13 +441,17 @@ async function validateAndSave(key, selectedRegion) {
             en: `this key belongs to the ${detected.region} region — auto-switched (your choice "${selectedRegion}" was wrong)`,
         }));
     }
-    finishSave(key, detected.region, detected.balance.balance);
+    finishSave(key, detected.region, detected.balance.balance, profile);
+    return { region: detected.region, balance: detected.balance.balance };
 }
-function finishSave(key, region, balance) {
-    updateConfig({ api_key: key, region });
+function finishSave(key, region, balance, profile) {
+    // Saving activates the profile: "the account I just logged into is the
+    // account I am using" — no second command needed for the common case.
+    updateProfile(profile, { api_key: key, region });
+    const where = profile === DEFAULT_PROFILE ? '~/.tripo/config.json' : `~/.tripo/config.json · profile "${profile}"`;
     success(t({
-        zh: `Key 验证通过(region=${region}),当前余额 ${balance} 积分(已保存到 ~/.tripo/config.json,权限 0600)`,
-        en: `key verified (region=${region}); balance ${balance} credits (saved to ~/.tripo/config.json, mode 0600)`,
+        zh: `Key 验证通过(region=${region}),当前余额 ${balance} 积分(已保存到 ${where},权限 0600)`,
+        en: `key verified (region=${region}); balance ${balance} credits (saved to ${where}, mode 0600)`,
     }));
     if (Number(balance) === 0) {
         warn(t({