diff --git a/docs/index.html b/docs/index.html
index 94ee323..f345d0a 100644
--- a/docs/index.html
+++ b/docs/index.html
@@ -285,15 +285,15 @@
   <main class="main">
     <!-- Hero -->
     <section class="hero" id="getting-started">
-      <span class="release">v1.0.0</span>
+      <span class="release">v1.0.1</span>
       <h2>tng -- Tangled CLI</h2>
       <p>Work with <a href="https://tangled.org">Tangled</a>, the decentralized Git collaboration platform, from your terminal.</p>
     </section>
 
     <div class="install-box">
       <strong>Quick start</strong>
-      <pre><code>tng auth login --handle alice.bsky.social
-tng repo clone alice.bsky.social/my-project
+      <pre><code>tng auth login --handle example.bsky.social
+tng repo clone example.bsky.social/my-project
 cd my-project
 tng pr list
 tng issue create --title "Bug report"</code></pre>
@@ -327,7 +327,10 @@ make build
     <p><code>tng</code> authenticates using AT Protocol OAuth 2.0 with PKCE and DPoP. This is the same protocol used by Bluesky. Your handle can be from any AT Protocol provider.</p>
 
     <pre><code># Opens browser for authorization
-tng auth login --handle alice.bsky.social
+tng auth login --handle example.bsky.social
+
+# Paste the localhost callback URL in a headless environment
+tng auth login --manual --handle example.bsky.social
 
 # Check current session
 tng auth status
@@ -339,11 +342,12 @@ tng auth logout</code></pre>
     <ol style="margin: 0 0 16px 24px;">
       <li>Resolves your handle to a DID and PDS endpoint</li>
       <li>Sends a Pushed Authorization Request (PAR) with PKCE challenge</li>
-      <li>Opens your browser to authorize the CLI</li>
-      <li>Handles the OAuth callback on a local HTTP server</li>
+      <li>Opens your browser, or displays an authorization URL in a remote session</li>
+      <li>Handles the OAuth callback on a local HTTP server or from a pasted callback URL</li>
       <li>Exchanges the code for DPoP-bound access tokens</li>
       <li>Stores the session locally at <code>~/.config/tng/</code></li>
     </ol>
+    <p>Over SSH, manual browser authentication is selected automatically. Open the displayed URL on your local machine, authorize the CLI, then copy the full localhost callback URL from the browser's address bar back into the terminal. Use <code>--manual</code> to select this flow in other headless environments.</p>
     <p>Tokens are automatically refreshed. The public client flow gives sessions a lifetime of approximately two weeks.</p>
 
     <!-- Commands: auth -->
@@ -353,11 +357,13 @@ tng auth logout</code></pre>
     <h4>tng auth login</h4>
     <p>Authenticate via browser-based OAuth flow.</p>
     <div class="cmd-group"><pre><code>tng auth login
-tng auth login --handle alice.bsky.social
+tng auth login --handle example.bsky.social
+tng auth login --manual --handle example.bsky.social
 tng auth login --handle did:plc:abc123</code></pre></div>
     <table class="flag-table">
       <tr><th>Flag</th><th>Description</th></tr>
       <tr><td>--handle</td><td>AT Protocol handle or DID. If omitted, prompted interactively.</td></tr>
+      <tr><td>--manual</td><td>Complete login by pasting the localhost callback URL. Automatically enabled over SSH.</td></tr>
     </table>
 
     <h4>tng auth status</h4>
@@ -390,8 +396,8 @@ tng repo create my-project --default-branch main --clone --knot knot1.tangled.sh
 
     <h4>tng repo clone &lt;owner/repo&gt; [directory]</h4>
     <p>Clone a Tangled repository via SSH.</p>
-    <div class="cmd-group"><pre><code>tng repo clone alice.bsky.social/my-project
-tng repo clone alice.bsky.social/my-project ./my-dir</code></pre></div>
+    <div class="cmd-group"><pre><code>tng repo clone example.bsky.social/my-project
+tng repo clone example.bsky.social/my-project ./my-dir</code></pre></div>
 
     <h4>tng repo view [owner/repo]</h4>
     <p>Display repository details: file tree, last commit, and README. Uses the current repo if no argument is given.</p>
@@ -425,7 +431,7 @@ tng pr create -t "Fix bug" --base main --head fix-branch</code></pre></div>
 
     <h4>tng pr list</h4>
     <div class="cmd-group"><pre><code>tng pr list
-tng pr list --repo alice.bsky.social/my-project
+tng pr list --repo example.bsky.social/my-project
 tng pr list --web</code></pre></div>
     <table class="flag-table">
       <tr><th>Flag</th><th>Description</th></tr>
@@ -473,7 +479,7 @@ tng issue create -t "Feature request"</code></pre></div>
 
     <h4>tng issue list</h4>
     <div class="cmd-group"><pre><code>tng issue list
-tng issue list --repo alice.bsky.social/my-project
+tng issue list --repo example.bsky.social/my-project
 tng issue list --web</code></pre></div>
     <table class="flag-table">
       <tr><th>Flag</th><th>Description</th></tr>
@@ -503,7 +509,7 @@ tng issue list --web</code></pre></div>
     <div class="cmd-group"><pre><code>tng browse                            # Open repo root
 tng browse src/main.go                # Open specific file
 tng browse -n                         # Print URL, don't open
-tng browse -R alice.bsky.social/proj  # Specify repo</code></pre></div>
+tng browse -R example.bsky.social/proj  # Specify repo</code></pre></div>
     <table class="flag-table">
       <tr><th>Flag</th><th>Description</th></tr>
       <tr><td>-R, --repo</td><td>Repository override</td></tr>