From 0434380915802128d222fd700b8b7caa597cb3e0 Mon Sep 17 00:00:00 2001
From: Jane Alesi <ja@satware.ai>
Date: Wed, 4 Mar 2026 20:49:17 +0100
Subject: [PATCH] docs(tools): document developer CLI tools setup and auth
 config

- Add Developer CLI Tools section to README with tea/gh/glab versions
- Document auth config file paths and SSH-safe verification commands
- Document re-run setup commands for token rotation
- Add keychain error workaround note
- Update Verification Status timestamp to 2026-03-04 20:27 CET
- Update CHANGELOG with evening session entries
---
 CHANGELOG.md | 15 ++++++++++++-
 README.md    | 59 +++++++++++++++++++++++++++++++++++++++++++++++++++-
 2 files changed, 72 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 69b3198..9df7a17 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,7 +2,20 @@
 
 All notable changes to this repository are documented in this file.
 
-## 2026-03-04
+## [Unreleased]
+
+## 2026-03-04 (Evening)
+
+### Added
+
+- Cloned repository into `~/infrastructure/mw-macbook-pro` on MacBook Pro via Tailscale SSH.
+- Installed and configured three developer CLI tools via Homebrew (Intel x86):
+  - `tea` v0.12.0 - Gitea CLI, authenticated as `ja` on `https://git.satware.ai`
+  - `gh` v2.87.3 - GitHub CLI, authenticated as `jane-alesi` on `github.com`
+  - `glab` v1.87.0 - GitLab CLI, authenticated as `ja` on `gitlab.satware.com`
+- Documented tool auth configuration paths and verification commands in README.
+
+## 2026-03-04 (Morning)
 
 ### Added
 
diff --git a/README.md b/README.md
index 3732439..d82266e 100644
--- a/README.md
+++ b/README.md
@@ -240,6 +240,63 @@ Node-specific security policy:
 | `paired.json` | Gateway: `openclaw-data/devices/paired.json` | Paired devices registry |
 | `authorized_keys` | Gateway: `ssh-keys/authorized_keys` | SSH access keys |
 
+## Developer CLI Tools
+
+The MacBook has the following version control CLI tools installed via Homebrew (Intel x86, `/usr/local/bin/`).
+
+| Tool | Version | Auth | Host |
+|------|---------|------|------|
+| `tea` | 0.12.0 | `ja` | `https://git.satware.ai` |
+| `gh` | 2.87.3 | `jane-alesi` | `github.com` |
+| `glab` | 1.87.0 | `ja` | `gitlab.satware.com` |
+| `git` | 2.50.1 | n/a | (Apple Git-155, system) |
+
+### Auth Configuration Paths
+
+| Tool | Config File |
+|------|------------|
+| `tea` | `~/.config/tea/config.yml` |
+| `gh` | `~/.config/gh/hosts.yml` |
+| `glab` | `~/.config/glab-cli/config.yml` |
+
+### Verify Auth (SSH-safe)
+
+```bash
+export PATH="/usr/local/bin:/usr/bin:/bin:$PATH"
+
+# tea - Gitea (git.satware.ai)
+tea logins list
+
+# gh - GitHub
+gh auth status
+
+# glab - GitLab (gitlab.satware.com)
+glab auth status
+
+# git fetch from this repo (bypasses macOS keychain)
+cd ~/infrastructure/mw-macbook-pro
+git -c credential.helper="" fetch origin
+```
+
+### Re-run Setup
+
+If tokens expire or tools need to be reconfigured:
+
+```bash
+# tea
+tea logins add --name git-satware --url https://git.satware.ai --token <TOKEN>
+
+# gh
+echo "<GITHUB_TOKEN>" | gh auth login --with-token
+
+# glab
+glab auth login --hostname gitlab.satware.com --token <TOKEN>
+```
+
+> **Note**: The macOS keychain error `fatal: failed to store: -25308` during non-interactive SSH sessions is cosmetic - use `git -c credential.helper=""` to suppress it. Credentials are stored in the config files above.
+
+---
+
 ## Related Documentation
 
 - OpenClaw Docs: https://docs.openclaw.ai/cli/nodes
@@ -248,7 +305,7 @@ Node-specific security policy:
 
 ## Verification Status
 
-**Last Verified**: 2026-03-04 04:41 CET
+**Last Verified**: 2026-03-04 20:27 CET
 
 | Component | Status |
 |-----------|--------|