@mhosaic/feedback-cli 0.49.0 → 0.50.0

package/README.md

@@ -91,7 +91,7 @@ pnpm remove @mhosaic/feedback   # or npm/yarn equivalent
 
 ## The guided skill
 
-After `install-skill`, run `/integrate-feedback` inside Claude Code. The skill branches on **operator** vs **consumer** mode and walks you through provisioning a project, generating a public key, and wiring the widget into your specific framework — with explicit checkpoints, framework-aware snippets, and a smoke test that proves the end-to-end path works before declaring done.
+After `install-skill`, run `/integrate-feedback` inside Claude Code. Paste the handoff payload from your Mhosaic contact (endpoint, `pk_proj_…` key, allowed origins) as your first message, and the skill walks you through wiring the widget into your specific framework — with explicit checkpoints, framework-aware snippets, and a smoke test that proves the end-to-end path works before declaring done. (Provisioning the project/key itself is a separate, Mhosaic-internal step — not part of this package.)
 
 Full details: `skills/integrate-feedback/SKILL.md` in this package, or installed at `~/.claude/skills/integrate-feedback/SKILL.md` after `install-skill`.
 

package/dist/bin.js

@@ -4,27 +4,27 @@
 async function main() {
   const [, , cmd, ...args] = process.argv;
   if (!cmd || cmd === "init") {
-    const { runInit } = await import("./init-RS7BKALE.js");
+    const { runInit } = await import("./init-BK6TPKX6.js");
     return runInit(args);
   }
   if (cmd === "doctor") {
-    const { runDoctor } = await import("./doctor-CTL34U4Y.js");
+    const { runDoctor } = await import("./doctor-Z4KZBFBN.js");
     return runDoctor(args);
   }
   if (cmd === "eject") {
-    const { runEject } = await import("./eject-VNJVOCQM.js");
+    const { runEject } = await import("./eject-QFPZ7Z3P.js");
     return runEject(args);
   }
   if (cmd === "verify") {
-    const { runVerify } = await import("./verify-LCXL3WOX.js");
+    const { runVerify } = await import("./verify-24HTNRXV.js");
     return runVerify(args);
   }
   if (cmd === "install-skill") {
-    const { runInstallSkill } = await import("./install-skill-BIBDYLKE.js");
+    const { runInstallSkill } = await import("./install-skill-FZ4YOIHX.js");
     return runInstallSkill(args);
   }
   if (cmd === "qa") {
-    const { runQa } = await import("./qa-YR4GCV6T.js");
+    const { runQa } = await import("./qa-APZ5CKN5.js");
     return runQa(args);
   }
   if (cmd === "--version" || cmd === "-v") {
@@ -48,4 +48,3 @@ main().catch((err) => {
 `);
   process.exitCode = 1;
 });
-//# sourceMappingURL=bin.js.map

package/dist/{build-RCLWV2WL.js → build-AHXPNO76.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   loadQaConfig
-} from "./chunk-IHJPCMYF.js";
+} from "./chunk-KHQBWJ4A.js";
 
 // src/qa/build.ts
 import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync3, writeFileSync } from "fs";
@@ -562,4 +562,3 @@ export {
   buildArtifact,
   runBuild
 };
-//# sourceMappingURL=build-RCLWV2WL.js.map

package/dist/{check-FOJPEE4Q.js → check-UZZFPZMA.js}

@@ -2,11 +2,11 @@
 import {
   generateSuites,
   serializeSuite
-} from "./chunk-SSLQOK2Z.js";
-import "./chunk-AZQSQJNQ.js";
+} from "./chunk-GJEJSB2Q.js";
+import "./chunk-CFJPCJAQ.js";
 import {
   loadQaConfig
-} from "./chunk-IHJPCMYF.js";
+} from "./chunk-KHQBWJ4A.js";
 
 // src/qa/check.ts
 import { execFileSync } from "child_process";
@@ -339,4 +339,3 @@ export {
   runCheck,
   runChecks
 };
-//# sourceMappingURL=check-FOJPEE4Q.js.map

package/dist/{chunk-COJ75KUD.js → chunk-45QCNACT.js}

@@ -23,4 +23,3 @@ async function detectFramework(cwd) {
 export {
   detectFramework
 };
-//# sourceMappingURL=chunk-COJ75KUD.js.map

package/dist/{chunk-AZQSQJNQ.js → chunk-CFJPCJAQ.js}

@@ -80,4 +80,3 @@ export {
   normalizePattern,
   buildSitemap
 };
-//# sourceMappingURL=chunk-AZQSQJNQ.js.map

package/dist/{chunk-SSLQOK2Z.js → chunk-GJEJSB2Q.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   normalizePattern
-} from "./chunk-AZQSQJNQ.js";
+} from "./chunk-CFJPCJAQ.js";
 import {
   loadQaConfig
-} from "./chunk-IHJPCMYF.js";
+} from "./chunk-KHQBWJ4A.js";
 
 // src/qa/generate.ts
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "fs";
@@ -453,4 +453,3 @@ export {
   serializeSuite,
   runGenerate
 };
-//# sourceMappingURL=chunk-SSLQOK2Z.js.map

package/dist/{chunk-IHJPCMYF.js → chunk-KHQBWJ4A.js}

@@ -123,4 +123,3 @@ function loadQaConfig(cwd) {
 export {
   loadQaConfig
 };
-//# sourceMappingURL=chunk-IHJPCMYF.js.map

package/dist/config-75OC57EE.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import {
+  loadQaConfig
+} from "./chunk-KHQBWJ4A.js";
+export {
+  loadQaConfig
+};

package/dist/{doctor-CTL34U4Y.js → doctor-Z4KZBFBN.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   detectFramework
-} from "./chunk-COJ75KUD.js";
+} from "./chunk-45QCNACT.js";
 
 // src/commands/doctor.ts
 import { existsSync, readFileSync, readdirSync } from "fs";
@@ -225,4 +225,3 @@ export {
   scanWidgetWiring,
   scriptSrcOf
 };
-//# sourceMappingURL=doctor-CTL34U4Y.js.map

package/dist/{eject-VNJVOCQM.js → eject-QFPZ7Z3P.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   detectFramework
-} from "./chunk-COJ75KUD.js";
+} from "./chunk-45QCNACT.js";
 
 // src/commands/eject.ts
 import { existsSync, readFileSync } from "fs";
@@ -37,4 +37,3 @@ async function runEject(argv) {
 export {
   runEject
 };
-//# sourceMappingURL=eject-VNJVOCQM.js.map

package/dist/{generate-VFRQNPOI.js → generate-CLL5W7SX.js}

@@ -3,12 +3,11 @@ import {
   generateSuites,
   runGenerate,
   serializeSuite
-} from "./chunk-SSLQOK2Z.js";
-import "./chunk-AZQSQJNQ.js";
-import "./chunk-IHJPCMYF.js";
+} from "./chunk-GJEJSB2Q.js";
+import "./chunk-CFJPCJAQ.js";
+import "./chunk-KHQBWJ4A.js";
 export {
   generateSuites,
   runGenerate,
   serializeSuite
 };
-//# sourceMappingURL=generate-VFRQNPOI.js.map

package/dist/{init-RS7BKALE.js → init-BK6TPKX6.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   detectFramework
-} from "./chunk-COJ75KUD.js";
+} from "./chunk-45QCNACT.js";
 
 // src/commands/init.ts
 import { existsSync as existsSync3 } from "fs";
@@ -269,4 +269,3 @@ async function runInit(argv) {
 export {
   runInit
 };
-//# sourceMappingURL=init-RS7BKALE.js.map

package/dist/{install-skill-BIBDYLKE.js → install-skill-FZ4YOIHX.js}

@@ -1,21 +1,65 @@
 #!/usr/bin/env node
 
 // src/commands/install-skill.ts
-import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "fs";
+import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "fs";
 import { homedir } from "os";
-import { dirname, join } from "path";
+import { dirname, join, sep } from "path";
 import { fileURLToPath } from "url";
 import kleur from "kleur";
 function parseArgs(argv) {
-  const out = { force: false, dryRun: false, dest: join(homedir(), ".claude", "skills") };
+  const out = { force: false, dryRun: false, dest: join(homedir(), ".claude", "skills"), pruneRetired: false };
   for (let i = 0; i < argv.length; i++) {
     const a = argv[i];
     if (a === "--force" || a === "-f") out.force = true;
     else if (a === "--dry-run") out.dryRun = true;
     else if (a === "--dest") out.dest = argv[++i] ?? out.dest;
+    else if (a === "--prune-retired") out.pruneRetired = true;
   }
   return out;
 }
+var RETIRED_SKILLS = [
+  "chantier",
+  "feedback-close",
+  "feedback-fix",
+  "feedback-from-meeting",
+  "feedback-pull",
+  "feedback-watch-merges",
+  "issue-pull"
+];
+var RETIRED_MARKER = "mhosaic-feedback";
+function hasSymlinkOnPath(dest, rel) {
+  let current = dest;
+  for (const part of rel.split(sep)) {
+    current = join(current, part);
+    if (!existsSync(current)) return false;
+    if (lstatSync(current).isSymbolicLink()) return true;
+  }
+  return false;
+}
+function looksLikeOurRetiredSkill(dest, name) {
+  const skillMd = join(dest, name, "SKILL.md");
+  if (!existsSync(skillMd)) return false;
+  const content = readFileSync(skillMd, "utf8");
+  const match = content.match(/^name:\s*(.+)$/m);
+  if (match?.[1]?.trim() !== name) return false;
+  return content.includes(RETIRED_MARKER);
+}
+function scanRetired(dest) {
+  const prunable = [];
+  const skipped = [];
+  for (const name of RETIRED_SKILLS) {
+    if (!existsSync(join(dest, name))) continue;
+    if (hasSymlinkOnPath(dest, name)) {
+      skipped.push({ name, reason: "symlink in the path" });
+    } else if (!looksLikeOurRetiredSkill(dest, name)) {
+      skipped.push({ name, reason: "not a Mhosaic skill" });
+    } else {
+      prunable.push(name);
+    }
+  }
+  return { prunable, skipped };
+}
+var STALE_OWN_FILE = join("integrate-feedback", "references", "operator-provision.md");
 function findSkillsSource() {
   const here = dirname(fileURLToPath(import.meta.url));
   const candidates = [
@@ -76,6 +120,38 @@ async function runInstallSkill(argv) {
     process.stdout.write(kleur.yellow(`\u26A0 ${skipped} file(s) skipped (already exist; use --force to overwrite)
 `));
   }
+  const scan = scanRetired(args.dest);
+  if (args.pruneRetired) {
+    if (scan.prunable.length > 0) {
+      if (!args.dryRun) {
+        for (const name of scan.prunable) rmSync(join(args.dest, name), { recursive: true, force: true });
+      }
+      process.stdout.write(
+        kleur.yellow(`\u26A0 ${scan.prunable.length} retired skill(s) ${args.dryRun ? "would be " : ""}removed: ${scan.prunable.join(", ")}
+`)
+      );
+    }
+    for (const { name, reason } of scan.skipped) {
+      process.stdout.write(kleur.gray(`  left alone: ${name} (${reason})
+`));
+    }
+  } else if (scan.prunable.length > 0) {
+    process.stdout.write(
+      kleur.yellow(`\u26A0 These skills are no longer part of this package: ${scan.prunable.join(", ")}
+`)
+    );
+    process.stdout.write(kleur.gray("  Run with --prune-retired to remove them.\n"));
+  }
+  if (hasSymlinkOnPath(args.dest, STALE_OWN_FILE)) {
+    process.stdout.write(kleur.gray(`  left alone: ${STALE_OWN_FILE} (symlink in the path)
+`));
+  } else if (existsSync(join(args.dest, STALE_OWN_FILE))) {
+    if (!args.dryRun) rmSync(join(args.dest, STALE_OWN_FILE), { force: true });
+    process.stdout.write(
+      kleur.yellow(`\u26A0 ${args.dryRun ? "would remove" : "removed"} ${STALE_OWN_FILE} (no longer part of this package)
+`)
+    );
+  }
   process.stdout.write("\n");
   process.stdout.write(kleur.bold("Next:\n"));
   process.stdout.write(`  1. ${kleur.gray("Restart Claude Code if you have it open \u2014 skills are discovered at session start.")}
@@ -83,15 +159,8 @@ async function runInstallSkill(argv) {
   process.stdout.write(`  2. ${kleur.gray("Onboard a new host app: ")}${kleur.cyan("/integrate-feedback")}
 `);
   process.stdout.write(`  3. ${kleur.gray("Add the QA Meter (test-coverage FAB) to a host app: ")}${kleur.cyan("/integrate-qa-meter")}
-`);
-  process.stdout.write(`  4. ${kleur.gray("Triage + fix reports: ")}${kleur.cyan("/feedback-pull")} ${kleur.gray("\u2192")} ${kleur.cyan("/feedback-fix")} ${kleur.gray("\u2192")} ${kleur.cyan("/feedback-watch-merges")} ${kleur.gray("\u2192")} ${kleur.cyan("/feedback-close")}
-`);
-  process.stdout.write(`  5. ${kleur.gray("Design before development (chantiers): ")}${kleur.cyan("/chantier")}
-`);
-  process.stdout.write(`  6. ${kleur.gray("Record a meeting's feedback in each person's name: ")}${kleur.cyan("/feedback-from-meeting")}
 `);
 }
 export {
   runInstallSkill
 };
-//# sourceMappingURL=install-skill-BIBDYLKE.js.map

package/dist/{qa-YR4GCV6T.js → qa-APZ5CKN5.js}

@@ -5,16 +5,16 @@ async function runQa(args) {
   const [sub, ...rest] = args;
   const commands = {
     sitemap: async () => ({ run: dispatchSitemap }),
-    generate: async () => ({ run: (await import("./generate-VFRQNPOI.js")).runGenerate }),
-    build: async () => ({ run: (await import("./build-RCLWV2WL.js")).runBuild }),
-    check: async () => ({ run: (await import("./check-FOJPEE4Q.js")).runCheck }),
+    generate: async () => ({ run: (await import("./generate-CLL5W7SX.js")).runGenerate }),
+    build: async () => ({ run: (await import("./build-AHXPNO76.js")).runBuild }),
+    check: async () => ({ run: (await import("./check-UZZFPZMA.js")).runCheck }),
     refresh: async () => ({
       run: async (a) => {
-        const { loadQaConfig } = await import("./config-JE3QRZVH.js");
+        const { loadQaConfig } = await import("./config-75OC57EE.js");
         const cfg = loadQaConfig(process.cwd());
         if (cfg.sitemap?.framework) await dispatchSitemap(a);
-        await (await import("./generate-VFRQNPOI.js")).runGenerate(a);
-        await (await import("./build-RCLWV2WL.js")).runBuild(a);
+        await (await import("./generate-CLL5W7SX.js")).runGenerate(a);
+        await (await import("./build-AHXPNO76.js")).runBuild(a);
       }
     })
   };
@@ -27,10 +27,10 @@ async function runQa(args) {
   await (await entry()).run(rest);
 }
 async function dispatchSitemap(args) {
-  const { loadQaConfig } = await import("./config-JE3QRZVH.js");
+  const { loadQaConfig } = await import("./config-75OC57EE.js");
   const framework = loadQaConfig(process.cwd()).sitemap?.framework;
-  if (framework === "vue-router") return (await import("./sitemap-vue-EJDQTCYM.js")).runSitemap(args);
-  if (framework === "react-router") return (await import("./sitemap-react-QTEAUKN5.js")).runReactSitemap(args);
+  if (framework === "vue-router") return (await import("./sitemap-vue-LWK6Y4FE.js")).runSitemap(args);
+  if (framework === "react-router") return (await import("./sitemap-react-IF5PX2PM.js")).runReactSitemap(args);
   process.stderr.write(
     `qa sitemap: unsupported framework ${framework ? `'${framework}'` : "(none set)"} (supported: vue-router, react-router). Set config.sitemap.framework.
 `
@@ -40,4 +40,3 @@ async function dispatchSitemap(args) {
 export {
   runQa
 };
-//# sourceMappingURL=qa-YR4GCV6T.js.map

package/dist/{sitemap-react-QTEAUKN5.js → sitemap-react-IF5PX2PM.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   buildSitemap
-} from "./chunk-AZQSQJNQ.js";
+} from "./chunk-CFJPCJAQ.js";
 import {
   loadQaConfig
-} from "./chunk-IHJPCMYF.js";
+} from "./chunk-KHQBWJ4A.js";
 
 // src/qa/sitemap-react.ts
 import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "fs";
@@ -327,4 +327,3 @@ export {
   readJsxRoutes,
   runReactSitemap
 };
-//# sourceMappingURL=sitemap-react-QTEAUKN5.js.map

package/dist/{sitemap-vue-EJDQTCYM.js → sitemap-vue-LWK6Y4FE.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   buildSitemap
-} from "./chunk-AZQSQJNQ.js";
+} from "./chunk-CFJPCJAQ.js";
 import {
   loadQaConfig
-} from "./chunk-IHJPCMYF.js";
+} from "./chunk-KHQBWJ4A.js";
 
 // src/qa/sitemap-vue.ts
 import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "fs";
@@ -240,4 +240,3 @@ export {
   extractWithWarnings,
   runSitemap
 };
-//# sourceMappingURL=sitemap-vue-EJDQTCYM.js.map

package/dist/{verify-LCXL3WOX.js → verify-24HTNRXV.js}

@@ -185,4 +185,3 @@ ${failed} check(s) failed.
 export {
   runVerify
 };
-//# sourceMappingURL=verify-LCXL3WOX.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mhosaic/feedback-cli",
-  "version": "0.49.0",
+  "version": "0.50.0",
   "description": "CLI to install @mhosaic/feedback into a host app, verify the integration, and drop a guided Claude Code skill (/integrate-feedback) into ~/.claude/skills.",
   "type": "module",
   "bin": {

package/skills/integrate-feedback/SKILL.md

@@ -1,16 +1,12 @@
 ---
 name: integrate-feedback
-description: Full guide for integrating @mhosaic/feedback. Covers operator-side provisioning (Company/Project/pk_proj_ key creation via the admin SPA), consumer-side install (CLI run + framework-specific wiring + identify() recipes + smoke test), and every common question a teammate might ask — what permissions are needed, where to run from, how the operator→consumer handoff works, what Chrome MCP is for, external clients vs internal apps, why the FAB isn't appearing, CORS errors, etc. Use whenever the user mentions: the Mhosaic feedback widget, adding feedback to an app, onboarding a new client/app, getting a pk_proj_ key, deploying for a company, configuring identify(), CORS errors on the widget, or any troubleshooting around the integration. Equally useful as a slash-command runbook and as a reference Claude reads to answer ad-hoc questions.
+description: Full guide for installing @mhosaic/feedback into a host app — CLI run, framework-specific wiring, identify() recipes, and a live smoke test — plus every common question a teammate might ask about the integration. Use whenever the user mentions: the Mhosaic feedback widget, adding feedback to an app, installing the widget in a client/app, wiring identify(), CORS errors on the widget, or any troubleshooting around the integration. Equally useful as a slash-command runbook and as a reference Claude reads to answer ad-hoc questions.
 user-invocable: true
 ---
 
-# /integrate-feedback — guided widget integration
+# /integrate-feedback — guided widget install
 
-End-to-end flow for getting the **@mhosaic/feedback** widget into a host app. There are two phases, run in two separate places:
-
-1. **Operator phase** — provisions Company / Project / `pk_proj_…` key on the Mhosaic backend (https://software-factory-3tbbu.ondigitalocean.app). Run from **inside `feedback-tool-mhosaic`**. The skill drives Chrome at the admin SPA, no filesystem changes. At the end, it outputs a Markdown handoff payload and offers to install itself globally so phase 2 is invokable in the client's repo.
-
-2. **Consumer phase** — installs the widget in the host app. Run from **inside the client's app directory** (NOT feedback-tool-mhosaic). The skill detects the framework, runs the CLI's `init`, pastes the right entry-point snippet, wires `identify()` against the client's auth provider, and runs a live smoke test in Chrome.
+End-to-end flow for getting the **@mhosaic/feedback** widget into a host app. Run this from **inside the host app's own directory** (NOT `feedback-tool-mhosaic`). You'll need a handoff payload from your Mhosaic contact first — see the Q&A below if you don't have one yet.
 
 This skill is **both** a slash-command runbook AND a reference doc. When the user invokes `/integrate-feedback`, run the procedural flow. When they just ask an integration question, answer from the Q&A below.
 
@@ -19,47 +15,28 @@ This skill is **both** a slash-command runbook AND a reference doc. When the use
 ## Quick Q&A
 
 **"What does this skill do?"**
-End-to-end widget integration. Operator phase: creates Company/Project/key on the backend. Consumer phase: installs the widget in a host app + runs a smoke test that confirms a report lands in admin. Framework-aware (Vite/Next/Nuxt/Astro/Remix/Vue/SvelteKit/plain HTML). Auth-aware (Auth0/Clerk/Supabase/Firebase/NextAuth/Django/JWT/anonymous).
+Installs the widget in a host app + runs a smoke test that confirms a report lands in admin. Framework-aware (Vite/Next/Nuxt/Astro/Remix/Vue/SvelteKit/plain HTML). Auth-aware (Auth0/Clerk/Supabase/Firebase/NextAuth/Django/JWT/anonymous).
 
 **"Do I need to install anything first?"**
-
-- Inside `feedback-tool-mhosaic`: no. The skill is committed under `.claude/skills/integrate-feedback/`; `/integrate-feedback` works directly.
-- In the client's repo: optional. If you want `/integrate-feedback` invokable there too (recommended for the consumer phase), the operator phase will offer to install it globally for you (one shell command, `npx @mhosaic/feedback-cli@latest install-skill`). Skip the install and the consumer phase can still happen — you just run `npx @mhosaic/feedback-cli@latest init …` directly in the client's repo and follow the framework-specific snippet from `references/`.
+No — the skill is installed globally by `npx @mhosaic/feedback-cli@latest install-skill` (or your Mhosaic contact may have installed it for you). If it's not there yet, run that command once, then `/integrate-feedback` works in any project on this machine. You can also skip the skill entirely and run `npx @mhosaic/feedback-cli@latest init …` directly, following the framework-specific snippet from `references/`.
 
 **"Where do I run `/integrate-feedback` from?"**
+Inside the host app's own project root — NOT `feedback-tool-mhosaic`. The skill writes to the current directory (`.env.local`, entry-point edits); running it inside `feedback-tool-mhosaic` would install the widget into that monorepo by mistake. The skill detects this (via `package.json` name check) and refuses.
 
-- Operator phase: **inside `feedback-tool-mhosaic`** (any directory in the monorepo).
-- Consumer phase: **inside the client's app's project root**.
-- Don't run consumer phase inside `feedback-tool-mhosaic` — the CLI would install the widget into our own monorepo. The skill detects this (via `package.json` name check) and refuses.
-
-**"What permissions do I need on the backend?"**
-
-- Login: Feedback Django group.
-- Create a Project/key under an existing company: Feedback group + Membership for that company.
-- Create a brand-new Company (external client): `is_staff=True` + `is_superuser=True`. Held by the platform maintainers.
+**"I don't have a `pk_proj_…` key yet — where do I get one?"**
+Ask your Mhosaic contact. They provision a Company/Project/key on the backend and send you a Markdown handoff payload (endpoint, key, allowed origins) — paste that as your first message when you run `/integrate-feedback`.
 
 **"What's Chrome MCP and why do I need it?"**
-A Claude Code MCP server that lets the skill drive a real Chrome tab. Operator phase uses it to call our admin API from the authenticated browser session (no token paste). Consumer phase uses it for the smoke test. If MCP isn't configured, operator phase stops at Step 0.5 with an install hint; consumer phase degrades to "open the dev URL yourself and confirm visually."
+A Claude Code MCP server that lets the skill drive a real Chrome tab, used here for the smoke test. If MCP isn't configured, the flow degrades to "open the dev URL yourself and confirm visually."
 
-**"How does the handoff between phases work?"**
-End of operator phase produces a Markdown payload (endpoint, `pk_proj_…`, slug, allowed origins). The skill prints it AND offers to install itself globally. The operator then closes this Claude session, `cd`s into the client's repo, opens a fresh `claude`, runs `/integrate-feedback`, picks "Install (consumer)", and pastes the payload as the first message.
+**"How does the handoff work?"**
+Your Mhosaic contact provisions the project and gives you a Markdown handoff payload (endpoint, `pk_proj_…` key, slug, allowed origins). Paste it as your first message when you run `/integrate-feedback` — see the payload format below.
 
 **"My FAB isn't appearing — what's wrong?"**
 The FAB stays hidden until `fb.identify({id: 'something'})` runs with a non-empty `id`. Check `references/identify-snippets.md` for your auth provider's recipe. For testing, hardcode `fb.identify({id: 'test'})` to force-render.
 
 **"CORS errors / 403 / origin not allowed."**
-The project's `allowed_origins` doesn't include the URL the request comes from. Usual causes: forgot the dev URL (e.g. `http://localhost:5173`), trailing slash, path included, wildcard (rejected by design). Operator opens admin SPA → Edit project → adds the missing origin.
-
-**"External client vs internal Mhosaic app?"**
-
-- Internal: use existing companies (`mhosaic`, `arime`, `norag`); create a new project under one. Needs Feedback group + Membership.
-- External: create a brand-new Company. Needs `is_staff=True`. The client can't log into software-factory (it's @mhosaic.com-only SSO); Mhosaic acts as report-viewer for v1.
-
-**"Do clients get notifications / digests?"**
-Notifications go to a per-project Google Chat space (new reports, incidents, ✅ closures, Friday weekly digest) — wired by pasting the space's incoming-webhook URL into the project settings ("Notifications Google Chat"). **A project with no webhook falls through to the platform's global room: the client sees nothing.** Wiring it is part of the operator phase (Step 4.5 of `references/operator-provision.md`). Email digests additionally require SMTP env vars on the backend — ask the platform operator.
-
-**"Why are the project's Métriques / Journaux tabs empty?"**
-`observability enabled` alone forwards nothing. Metrics need `ObservabilityTarget` rows (POST `targets` to `/projects/<id>/observability/enable/` — operator Step 4.6a) and logs need the `log_destinations` block in the client app's DO spec (`scripts/observability/forward-app-logs.sh` — Step 4.6b, triggers a redeploy). If either was skipped at provisioning time, run Step 4.6 now; both are idempotent.
+The project's `allowed_origins` doesn't include the URL the request comes from. Usual causes: forgot the dev URL (e.g. `http://localhost:5173`), trailing slash, path included, wildcard (rejected by design). Ask your Mhosaic contact to open the admin SPA → Edit project → add the missing origin.
 
 **"How do I also enable the QA Meter?"**
 The QA Meter is an opt-in second FAB (half size, stacked above the feedback button) that shows test-coverage status. It's host-served and host-gated — no backend involvement. Build the artifact with `mhosaic-feedback qa refresh`, serve `qa-status.json` as a static asset (or from your own endpoint), then enable it per surface:
@@ -70,76 +47,34 @@ The QA Meter is an opt-in second FAB (half size, stacked above the feedback butt
 Only enable it where you want it (e.g. staging); omit the option in production to ship feedback-only.
 
 **"Where's the human-readable doc?"**
-`docs/INTEGRATING.md` in this repo. Covers the skill, the manual fallback, the CLI command reference, and a troubleshooting matrix.
+`docs/INTEGRATING.md` in the `feedback-tool-mhosaic` repo. Covers the skill, the manual fallback, the CLI command reference, and a troubleshooting matrix.
 
 ---
 
 **"The badge counts feedback from other records / pages — is that a bug?"**
-No — that route was flipped to « Regroupé » in the project's admin **Pages** tab. On grouped routes, every record of the same screen (`/dossier/123`, `/dossier/456` → `/dossier/:id`) counts as one page: badge, hover peek, board default and dedup all follow. Exact is the default; only an operator flip changes it. To check or revert: admin SPA → project → Paramètres → Pages.
+No — that route was flipped to « Regroupé » in the project's admin **Pages** tab. On grouped routes, every record of the same screen (`/dossier/123`, `/dossier/456` → `/dossier/:id`) counts as one page: badge, hover peek, board default and dedup all follow. Exact is the default; only an operator flip changes it. Ask your Mhosaic contact to check or revert it: admin SPA → project → Paramètres → Pages.
 
 **"A client says one bug on their form creates a separate report per record and nothing groups."**
-That's the exact-by-default behavior on a form/workflow route. Fix is operator-side, zero client code: open the project's **Pages** tab, find the route pattern (the tab flags form-looking ones with « suggestion : formulaire ? »), flip it to « Regroupé ». Reads regroup instantly across history; fingerprints group for new reports (run `recompute_fingerprints --project <slug>` to backfill deliberately). If the route uses slug ids the heuristic can't collapse (`/dossier/acme-corp`), add a custom template (`/dossier/:slug`) via « Ajouter un motif ».
+That's the exact-by-default behavior on a form/workflow route. Fix is operator-side, zero client code — flag it to your Mhosaic contact: they open the project's **Pages** tab, find the route pattern (the tab flags form-looking ones with « suggestion : formulaire ? »), flip it to « Regroupé ». Reads regroup instantly across history; fingerprints group for new reports. If the route uses slug ids the heuristic can't collapse (`/dossier/acme-corp`), a custom template (`/dossier/:slug`) fixes it.
 
 **"Does page grouping need anything in the host app?"**
 No. Patterns are discovered from stored feedback and resolved server-side; the widget just sends its pathname. The only optional host hook is `getCurrentPage()` in the widget config, for apps whose notion of "current page" isn't the URL path. Widgets ≥ 0.47.0 also adapt their copy (« sur ce formulaire ») and board default to the resolved mode.
 
-## Step 0 — Identify the phase
-
-`AskUserQuestion`:
-
-- question: `Which phase are you running?`
-- header: `Phase`
-- options:
-  - label: `Provision (operator)`, description: `Create a new Company/Project/key on the Mhosaic backend. Run this from inside feedback-tool-mhosaic.`
-  - label: `Install (consumer)`, description: `Install the widget into a host app. Run this from inside the client's app directory, with the handoff payload from the operator phase.`
-
-Branch on the answer.
+## Step 0 — Pre-flight
 
----
-
-## Step 0.5 — Pre-flight
-
-**For operator phase:** confirm Chrome MCP is configured. Call `mcp__claude-in-chrome__tabs_context_mcp` once. If the tool isn't available, tell the user:
-
-> "Operator phase needs Chrome MCP. Two options:
->
-> 1. Install Chrome MCP (Claude Code → MCP settings → add the chrome connector), then re-run `/integrate-feedback`.
-> 2. Provision manually via `docs/INTEGRATING.md` (open the admin SPA, create the project, mint the key)."
-
-Stop. Don't continue without MCP.
-
-**For consumer phase:** read `package.json` in the cwd. If its `name` is `@mhosaic/feedback-tool-mhosaic` or any of our own monorepo packages, the user is inside our own repo — refuse and redirect:
+Read `package.json` in the cwd. If its `name` is `@mhosaic/feedback-tool-mhosaic` or any of our own monorepo packages, the user is inside our own repo — refuse and redirect:
 
-> "Looks like we're inside `feedback-tool-mhosaic`. The consumer phase writes to the current directory; running it here would install the widget into our own monorepo. Close Claude and re-open in the client app's root, then run `/integrate-feedback` again."
+> "Looks like we're inside `feedback-tool-mhosaic`. This skill writes to the current directory; running it here would install the widget into our own monorepo. Close Claude and re-open in the host app's root, then run `/integrate-feedback` again."
 
 Stop. Don't continue.
 
 ---
 
-## Operator phase
-
-Read **`references/operator-provision.md`** and follow it step by step. The phase is **A→Z**: a project leaves this flow with its full 360 view (widget + Chat alerts + metrics + logs + members) or with each gap recorded as an explicit operator decision — never a silent skip.
-
-1. Confirm operator is SSO-logged-in to software-factory in Chrome.
-2. Collect: company (existing or new), project name + slug, allowed origins, `share_reports_with_widget`.
-3. Drive Chrome MCP to the admin SPA, refresh the JWT via `/api/auth/token/refresh/`, call `POST /companies/`, `POST /projects/`, `POST /project-keys/create/` from the in-tab `fetch()` (uses the existing cookies). Company create auto-grants the creator an owner Membership.
-4. Capture the plaintext `pk_proj_…` from the keys response.
-5. **Chat notifications (Step 4.5):** create or reuse the client's "«Company» Alerts" Chat space, add an incoming webhook named "Mhosaic Feedback", paste its URL into the project's settings page ("Notifications Google Chat"), fire a `[TEST]` probe and confirm the card lands. Never echo the webhook URL into the chat — it's a credential.
-6. **Observability (Step 4.6, governance-gated):** POST `targets` (`environment` × `component` × DO app id) to `/projects/<id>/observability/enable/` so the Métriques page shows the deployment(s), then run `scripts/observability/forward-app-logs.sh <app-id> <index>` per backend app (triggers a redeploy — verify ACTIVE). Without this step the Métriques/Journaux tabs stay empty forever.
-7. **Members (Step 4.7):** add the responsible Mhosaic owner + any client users; mint an MCP key if the fix-flow is wanted. The company must not end the flow member-less.
-8. Verify the project + key show up in the admin SPA.
-9. **Completeness card (Step 5):** build the "Provisioning 360" checklist; every unchecked line must carry the operator's explicit skip reason. Print it with the handoff payload.
-10. Offer to install the skill globally so the operator can run `/integrate-feedback` in the client's repo for the consumer phase. The full offer logic is at the end of `references/operator-provision.md`.
-
-After this phase the operator has: (a) the Provisioning 360 card + handoff payload in the chat, (b) optionally `/integrate-feedback` available globally so the next `claude` in the client repo picks it up.
-
----
-
-## Consumer phase
+## Steps
 
 Read **`references/consumer-install.md`** and follow it step by step:
 
-1. Confirm cwd is the client app's root (NOT feedback-tool-mhosaic — see Step 0.5).
+1. Confirm cwd is the host app's root (NOT feedback-tool-mhosaic — see Step 0).
 2. Parse the pasted handoff payload (endpoint, key, origins).
 3. Detect the framework from `package.json` → route to `references/consumer-install-<framework>.md` (Vite, Next, Nuxt, Astro, Remix, Vue, SvelteKit, or plain/CDN).
 4. Run `npx @mhosaic/feedback-cli@latest init --api-key=… --endpoint=… --yes`.
@@ -147,15 +82,15 @@ Read **`references/consumer-install.md`** and follow it step by step:
 6. Wire `fb.identify()` per `references/identify-snippets.md` — pick the recipe matching the client's auth provider.
 7. Run `mhosaic-feedback verify --origin <dev-url> --with-test-report` — all 6 checks must be green before proceeding.
 8. Start the dev server, drive Chrome to the dev URL, screenshot the FAB, submit a `[INTEGRATE-FEEDBACK SMOKE TEST]` report.
-9. Drive Chrome to software-factory `/reports`, confirm the report landed.
+9. Confirm the report landed: if you have admin access, drive Chrome to software-factory `/reports`. If you don't (most consumers won't — admin is @mhosaic.com-only SSO), the `201` from step 7's `--with-test-report` is your pass signal — ask your Mhosaic contact to confirm the report landed.
 
 Smoke test details + diagnostic table: **`references/verify-install.md`**.
 
 ---
 
-## Operator → consumer handoff payload format
+## Handoff payload format (what you'll paste in)
 
-Always print this Markdown block at the end of operator phase:
+Your Mhosaic contact sends you a block like this — paste it as your first message:
 
 ````markdown
 ## Mhosaic Feedback handoff
@@ -174,7 +109,7 @@ npx @mhosaic/feedback-cli@latest init \
   --yes
 ```
 
-Or for the full guided flow: `/integrate-feedback` → "Install (consumer)" → paste this block as your first message.
+Or for the full guided flow: `/integrate-feedback` → paste this block as your first message.
 ````
 
 ---
@@ -193,9 +128,8 @@ Or for the full guided flow: `/integrate-feedback` → "Install (consumer)" →
 
 ```
 .claude/skills/integrate-feedback/
-├── SKILL.md                              # this file (phase router)
+├── SKILL.md                              # this file
 ├── references/
-│   ├── operator-provision.md             # Chrome MCP → admin SPA → DRF
 │   ├── consumer-install.md               # framework router
 │   ├── consumer-install-vite.md          # Vite + React (CLI auto-wires)
 │   ├── consumer-install-next.md          # Next.js App Router + Pages