Opens your browser to sign in with Google. On success the machine is bound: its
sessions are attributed to it, and your agent can later tell you whether work
happened here or somewhere else.
It also starts the background sync service. It has no projects to sync until
you run init for a new project or sync once from
an invited project’s local clone.
Run this on every machine you work from. A machine that has not signed in
cannot sync, and a token without a machine is refused when pushing history.
Already signed in on the website? The CLI still mints its own token bound to
this machine, rather than reusing the browser’s.
logout
Clears this machine’s stored session so a different account can sign in.
Local only. The token the CLI issued is signed and cannot be revoked, so
logging out does not invalidate a token that has already leaked. If one gets
out, treat it as valid until it expires.
It deliberately leaves agent configuration and per-project sync state alone.
Those are not account-specific, and re-collecting them after every account
switch would be busywork.