[tkkhq]

Tracking

• Related: feat(auth): treat pg- delegated grants as project-bound volcano-cli#476, feat(functions): invoke with a delegated grant, not a service key volcano-cli#477, feat(auth): read the token from a file descriptor and print grant error codes volcano-cli#479 (the CLI changes these pages describe)
• Related: docs: move published docs to volcano-docs volcano-cli#489 (moved the CLI's docs here, so the CLI PRs no longer carry them)

Why

• the CLI PRs above add delegated grants (pg-), exit code 6, VOLCANO_TOKEN_FD and an Error code: line, and their docs edits were dropped from the CLI repo when #489 moved docs/ to content/cli

Summary

• content/cli/authentication.md: list delegated grants next to account and project access tokens, and add a "Delegated grants" section: where a grant goes (VOLCANO_TOKEN_FD or VOLCANO_TOKEN), exit code 6, the Error code: line, passing the token on a file descriptor, what volcano login --token pg-… does, functions invoke with a grant, and migration apply (not up) for migrations
• content/cli/scripting.md: exit code 6 for 429 grant_budget_exhausted
• content/cli/telemetry.md: pg- and vgt_ in the redacted token list
• content/cli/domains.md, durable-functions.md, feedback.md, git.md, lavaflow.md: a delegated grant is refused where a project access token is
• add a ## Log out heading in authentication.md so the log-out text no longer sits under "Delegated grants"
• merge with the CLI release that carries feat(auth): read the token from a file descriptor and print grant error codes volcano-cli#479

Verification

• node scripts/lint-docs.mjs content/cli
• node scripts/check-links.mjs content public