[cdalar]

Follow-up to #1252. The Claude page mentioned onctl claude login in two lines; this documents it from cmd/claudeauth.go's help text:

• why: Claude on the box logs in separately; without a saved token every new box asks for /login
• onctl claude login runs claude setup-token (Pro, Max, Team or Enterprise plan), or takes a token piped in
• where it's kept: macOS Keychain, elsewhere ~/.onctl/claude/oauth-token (0600); handed to each box's Claude in its environment, never on the box's disk; logout forgets it
• its limit: model requests only, so Remote Control and claude.ai connectors need --claude-auth login
• a table of the four --claude-auth modes (auto, token, login, api-key via ANTHROPIC_API_KEY)

Also a Subcommands section listing login, logout, ls, fetch and push with links to the sections that explain them, so they can be found from the reference part of the page.

npm run build passes with no broken links.

🤖 Generated with Claude Code

https://claude.ai/code/session_01J3DrQy8Pdg8KsM31aMxJaM

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 47.78%. Comparing base (26de1a4) to head (3827df0).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1255   +/-   ##
=======================================
  Coverage   47.78%   47.78%           
=======================================
  Files          81       81           
  Lines        9342     9342           
=======================================
  Hits         4464     4464           
  Misses       4878     4878           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.