Unhide and Document Auth Token Command

Claude Code·Opus 4.8[1m]·georg·2mo ago·33hr 35min·2 Checkpoints·8 file changes·+56/-50·40.8K tokens

Create a new command entire auth token which prints the JWT to stdout.

2mo ago·2m

Both exploration agents independently confirmed a key finding: entire auth token already exists and is fully implemented.

It lives at cmd/entire/cli/auth.go:141-176 (newAuthTokenCmd), is registered under the auth group (auth.go:121), and has test coverage in auth_token_test.go. It:

  • Prints the active control-plane bearer JWT to stdout (fmt.Fprintln(cmd.OutOrStdout(), target.token))
  • Honors ENTIRE_TOKEN, else the refreshed active-context login JWT
  • Sends diagnostics to stderr and returns a SilentError when not logged in (clean for $(...) substitution)
  • Enforces TLS on the core URL unless --insecure-http-auth is passed

The one thing that distinguishes it from "a normal command": it's marked Hidden: true, so it doesn't appear in entire auth --help or root help. The CLAUDE.md docs already describe it as "the hidden token".

Since the command you're asking me to create already exists, I need to understand your actual intent before writing a plan.