deepsec init goes through Vercel account authentication flow even when specifying a key

What happened

Per the deepsec documentation:

You don't need a Vercel account to use deepsec with your own API key. To use your own OpenAI key: $ MY_KEY=... npx deepsec init --agent codex --model-auth direct --ai-provider openai --ai-api-key-env MY_KEY

However, when actually running this command, deepsec goes through Vercel auth anyway:

$ MY_OPENAI_KEY=<removed> npx deepsec init \
  --agent codex \
  --model-auth direct \
  --ai-provider openai \
  --ai-api-key-env MY_OPENAI_KEY
Now we're linking Deepsec to a Vercel project for AI Gateway access. Because the link reads the project's development environment, a dedicated empty Deepsec project is safest.
Vercel CLI 56.3.2 (Node.js 25.2.1)
> No existing credentials found. Please log in:
>
  Visit https://vercel.com/oauth/device?user_code=<removed>

Reproduction

$ MY_OPENAI_KEY=<removed> npx deepsec init \
  --agent codex \
  --model-auth direct \
  --ai-provider openai \
  --ai-api-key-env MY_OPENAI_KEY

Expected vs actual

Expected result: No Vercel account should be required (and therefore no Vercel authentication) Actual result: prompted to authenticate to Vercel

Environment

• deepsec version (pnpm deepsec --version):
• Node version (node --version): 11.19.0
• OS: WSL2
• Agent backend (claude-agent-sdk / codex): codex
• Model: N/A

Logs