UserApiKey (apiKeyHash->userId); CLI 'user apikey --email'; POST /auth/agent/login {apiKey} -> normal user session (api-key-guard exempt). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>