Unhide and Document Auth Token Command
Claude Code·Opus 4.8[1m]·
georg·2mo ago·33hr 35min·2 Checkpoints·8 file changes·+56/-50·40.8K tokens

Both exploration agents independently confirmed a key finding: entire auth token already exists and is fully implemented.
It lives at cmd/entire/cli/auth.go:141-176 (newAuthTokenCmd), is registered under the auth group (auth.go:121), and has test coverage in auth_token_test.go. It:
- Prints the active control-plane bearer JWT to stdout (
fmt.Fprintln(cmd.OutOrStdout(), target.token)) - Honors
ENTIRE_TOKEN, else the refreshed active-context login JWT - Sends diagnostics to stderr and returns a
SilentErrorwhen not logged in (clean for$(...)substitution) - Enforces TLS on the core URL unless
--insecure-http-authis passed
The one thing that distinguishes it from "a normal command": it's marked Hidden: true, so it doesn't appear in entire auth --help or root help. The CLAUDE.md docs already describe it as "the hidden token".
Since the command you're asking me to create already exists, I need to understand your actual intent before writing a plan.