docs: update CLI reference, visibility, env vars, and FAQ for login/logout and private configs

Author: fullstackjam

src/docs/cli-reference.md

@@ -36,6 +36,8 @@ Install from a custom config hosted on openboot.dev.
 openboot --user sarah/frontend-team
 ```
 
+For private configs, run `openboot login` first — the CLI sends your auth token automatically.
+
 ### Install Flags
 
 | Flag | Description |
@@ -97,6 +99,26 @@ openboot snapshot --import https://example.com/snapshot.json
 | `--dry-run` | Preview without saving or uploading |
 | `--import <path>` | Restore from a local file or URL |
 
+## Authentication
+
+### `openboot login`
+
+Authenticate with openboot.dev via browser. Required for installing private configs and uploading snapshots.
+
+```
+openboot login
+```
+
+Opens your browser to approve the login. After approval, a token is saved at `~/.openboot/auth.json`.
+
+### `openboot logout`
+
+Remove the stored authentication token from this machine.
+
+```
+openboot logout
+```
+
 ## Maintain Your Environment
 
 ### `openboot doctor`

src/docs/config-options.md

@@ -114,7 +114,7 @@ Controls who can see and install this config.
 - **Options:**
   - `"public"` — listed on your profile, install URL works for everyone
   - `"unlisted"` — not listed on your profile, but install URL still works if shared
-  - `"private"` — only you can access. Installing via `curl | bash` will open a browser for authorization, then proceed automatically
+  - `"private"` — only you can access. Via `curl | bash`, the script opens a browser for authorization. Via the CLI, run `openboot login` first, then `openboot --user yourname/slug`
 
 ## Export
 

src/docs/custom-configs.md

@@ -49,10 +49,30 @@ You can also install via the CLI directly:
 openboot --user sarah/frontend-team
 ```
 
-## Public vs Private
+## Visibility
 
-- **Public** (default) — anyone can view the config page and install
-- **Private** — hidden from your profile, but the install URL still works if shared
+Every config has a visibility setting you can change in the dashboard:
+
+| Visibility | Listed on Profile | Install URL | Config Page |
+|------------|:-:|:-:|:-:|
+| **Public** | Yes | Works for everyone | Viewable by anyone |
+| **Unlisted** (default) | No | Works for everyone | Viewable with direct link |
+| **Private** | No | Requires auth | Owner only |
+
+### Installing Private Configs
+
+**Via `curl | bash`** — the install script automatically opens your browser for authorization, then proceeds with the install:
+
+```
+curl -fsSL https://openboot.dev/yourname/my-setup/install.sh | bash
+```
+
+**Via the CLI** — run `openboot login` first, then use `--user` as usual. The CLI sends your auth token automatically:
+
+```
+openboot login
+openboot --user yourname/my-setup
+```
 
 ## Short URLs
 

src/docs/env-vars.md

@@ -50,6 +50,8 @@ These are used by the `openboot` binary at runtime.
 | `OPENBOOT_PRESET` | Default preset to use (overridden by `--preset` flag) |
 | `OPENBOOT_USER` | Default remote config to use (overridden by `--user` flag) |
 | `OPENBOOT_DOTFILES` | Dotfiles repository URL (overridden by config's `dotfiles_repo`) |
+| `OPENBOOT_API_URL` | Override the API base URL (default: `https://openboot.dev`) |
+| `OPENBOOT_DISABLE_AUTOUPDATE` | Set to `1` to disable auto-update checks |
 
 ### Examples
 
@@ -74,6 +76,6 @@ These aren't environment variables, but useful to know:
 | Path | What's There |
 |------|-------------|
 | `~/.openboot/bin/openboot` | The OpenBoot binary |
-| `~/.openboot/auth.json` | Auth token (after `openboot snapshot` upload) |
+| `~/.openboot/auth.json` | Auth token (after `openboot login` or snapshot upload) |
 | `~/.openboot/snapshot.json` | Local snapshot (when using `--local`) |
 | `~/.dotfiles/` | Cloned dotfiles repo (when configured) |

src/docs/faq.md

@@ -42,7 +42,10 @@ Yes. No account needed for:
 - Using the interactive TUI
 - Running `openboot snapshot --local` or `--json`
 
-An account (GitHub OAuth) is only needed to upload configs to openboot.dev and share them via URL.
+An account (GitHub or Google OAuth) is needed to:
+
+- Upload configs to openboot.dev and share them via URL
+- Install private configs (run `openboot login` first)
 
 ## How do I update OpenBoot?
 
@@ -61,7 +64,7 @@ Or re-run the install script — it downloads the latest binary and replaces the
 | Local snapshots | `~/.openboot/snapshot.json` (local) |
 | OpenBoot binary | `~/.openboot/bin/openboot` (local) |
 
-Configs are public by default. You can mark them private in the dashboard — they'll be hidden from your profile but the install URL still works if shared.
+Configs are **unlisted** by default — not listed on your profile, but the install URL works if shared. You can set them to **public** (listed on profile) or **private** (requires authentication to install). See [Custom Configs — Visibility](/docs/custom-configs#visibility) for details.
 
 ## What shell does OpenBoot set up?