@mushi-mushi/cli 0.16.0 → 0.17.1

package/README.md

@@ -152,16 +152,23 @@ real-catalog regression guard).
 
 ### `mushi doctor`
 
-Checks CLI and SDK health.  Without flags it verifies local config and endpoint
-reachability only.
+Checks CLI and SDK health. **Ingest and dispatch (server) checks run by
+default** — pass `--no-server` / `--no-ingest` to limit it to local checks.
 
 ```bash
-mushi doctor                  # local checks only
-mushi doctor --server         # + calls /preflight on the backend (all 4 dispatch checks)
-mushi doctor --ingest         # + calls /v1/sync/ingest-setup (API key → heartbeat → first report)
+mushi doctor                  # local + ingest + dispatch readiness (the full picture)
+mushi doctor --no-server      # skip the dispatch-readiness /preflight checks
+mushi doctor --no-ingest      # skip the ingest-setup checks (SDK heartbeat, first report)
+mushi doctor --fix            # apply safe local fixes, then re-run and report the post-fix state
 mushi doctor --json           # machine-readable JSON output (exits 1 if any check fails)
+mushi doctor --qa-stories     # also flag enabled QA stories with setup issues (needs server creds)
+mushi doctor --host-app       # also verify host-app wiring (env vars, Cursor MCP, Capacitor notes)
 ```
 
+`--fix` writes any missing `.env.local` lines and wires the Cursor MCP config
+(via `mushi connect`), then re-runs every check so the printed result and exit
+code reflect the post-fix state rather than the stale pre-fix failures.
+
 Local checks performed:
 
 | Check | What it verifies |
@@ -170,9 +177,10 @@ Local checks performed:
 | Endpoint reachability | `GET /v1/sdk/config?project_id=...` returns 200 |
 | SDK install | `@mushi-mushi/web` or framework-specific SDK is in `node_modules` |
 
-With `--server`, also calls `GET /v1/admin/projects/:id/preflight` (same 4 checks
-the admin console dispatch popover uses) and merges the results.  The four
-server checks (`key` values returned by the endpoint):
+The dispatch-readiness checks (on by default; skip with `--no-server`) call
+`GET /v1/admin/projects/:id/preflight` (the same 4 checks the admin console
+dispatch popover uses) and merge the results.  The four server checks (`key`
+values returned by the endpoint):
 
 | `key` | What it verifies |
 |---|---|
@@ -181,15 +189,16 @@ server checks (`key` values returned by the endpoint):
 | `anthropic` | A BYOK Anthropic key is stored in Supabase Vault (`project_settings.byok_anthropic_key_ref`) |
 | `autofix` | The autofix toggle is ON (`project_settings.autofix_enabled = true`) |
 
-`--server` requires `adminOrApiKey` credentials — set `MUSHI_API_KEY` to an
-admin key (not a public SDK key).
+The dispatch-readiness checks require `adminOrApiKey` credentials — set
+`MUSHI_API_KEY` to an admin key (not a public SDK key). If you only have an SDK
+key, pass `--no-server` to skip them.
 
-With `--ingest`, also calls `GET /v1/sync/ingest-setup` (authenticated with the
-SDK API key) and reports each **required ingest step** — project exists, active
-API key, SDK heartbeat, at least one ingested report — plus a
-`Last SDK heartbeat` diagnostic with the timestamp and endpoint host. This is
-the same payload `mushi connect --wait` polls, so a failing step here tells you
-exactly why the banner isn't showing up.
+The ingest checks (on by default; skip with `--no-ingest`) call
+`GET /v1/sync/ingest-setup` (authenticated with the SDK API key) and report each
+**required ingest step** — project exists, active API key, SDK heartbeat, at
+least one ingested report — plus a `Last SDK heartbeat` diagnostic with the
+timestamp and endpoint host. This is the same payload `mushi connect --wait`
+polls, so a failing step here tells you exactly why the banner isn't showing up.
 
 ### `mushi reset <projectId>`
 

package/dist/{chunk-NYPX5KXR.js → chunk-S4WQHEGH.js}

@@ -273,6 +273,7 @@ function detectFramework(cwd, pkg) {
   if (deps.has("@angular/core")) return FRAMEWORKS.angular;
   if (deps.has("expo")) return FRAMEWORKS.expo;
   if (deps.has("react-native")) return FRAMEWORKS["react-native"];
+  if (deps.has("@capacitor/core") && deps.has("react")) return FRAMEWORKS.react;
   if (deps.has("@capacitor/core")) return FRAMEWORKS.capacitor;
   if (deps.has("svelte")) return FRAMEWORKS.svelte;
   if (deps.has("vue")) return FRAMEWORKS.vue;

package/dist/chunk-XVLIMBPU.js

@@ -0,0 +1,6 @@
+// src/version.ts
+var MUSHI_CLI_VERSION = true ? "0.17.1" : "0.0.0-dev";
+
+export {
+  MUSHI_CLI_VERSION
+};

package/dist/detect.js

@@ -7,7 +7,7 @@ import {
   installCommand,
   isFrameworkId,
   readPackageJson
-} from "./chunk-NYPX5KXR.js";
+} from "./chunk-S4WQHEGH.js";
 export {
   FRAMEWORKS,
   FRAMEWORK_IDS,

package/dist/index.js

@@ -358,6 +358,7 @@ function detectFramework(cwd, pkg) {
   if (deps.has("@angular/core")) return FRAMEWORKS.angular;
   if (deps.has("expo")) return FRAMEWORKS.expo;
   if (deps.has("react-native")) return FRAMEWORKS["react-native"];
+  if (deps.has("@capacitor/core") && deps.has("react")) return FRAMEWORKS.react;
   if (deps.has("@capacitor/core")) return FRAMEWORKS.capacitor;
   if (deps.has("svelte")) return FRAMEWORKS.svelte;
   if (deps.has("vue")) return FRAMEWORKS.vue;
@@ -416,6 +417,13 @@ function collectDeps(pkg) {
 // src/endpoint.ts
 var TEST_REPORT_TIMEOUT_MS = 1e4;
 var TEST_REPORT_FETCH_TIMEOUT_MS = TEST_REPORT_TIMEOUT_MS;
+var CLOUD_API_ENDPOINT = "https://dxptnwrhwsqckaftyymj.supabase.co/functions/v1/api";
+function resolveCloudEndpoint(explicit) {
+  if (explicit?.trim()) return explicit.trim();
+  const fromEnv = process.env.MUSHI_API_ENDPOINT?.trim();
+  if (fromEnv) return fromEnv;
+  return CLOUD_API_ENDPOINT;
+}
 function assertEndpoint(url) {
   let parsed;
   try {
@@ -428,7 +436,7 @@ function assertEndpoint(url) {
   if (parsed.protocol !== "https:" && !isLocal) {
     throw new Error(`Endpoint must use https:// (got ${parsed.protocol}//${host}).`);
   }
-  return parsed.origin + (parsed.pathname === "/" ? "" : parsed.pathname);
+  return normalizeEndpoint(parsed.origin + parsed.pathname);
 }
 function normalizeEndpoint(url) {
   if (!url) {
@@ -598,7 +606,7 @@ function getFrameworkFromPkg(pkg) {
 }
 
 // src/version.ts
-var MUSHI_CLI_VERSION = true ? "0.16.0" : "0.0.0-dev";
+var MUSHI_CLI_VERSION = true ? "0.17.1" : "0.0.0-dev";
 
 // src/init.ts
 var ENV_FILES = [".env.local", ".env"];
@@ -632,11 +640,12 @@ async function runInit(options = {}) {
   } else {
     p.log.info(`Skipped install. Run \`${installCommand(pm, packagesToInstall)}\` yourself.`);
   }
+  const endpoint = resolveCloudEndpoint(options.endpoint);
   writeEnvFile(cwd, credentials.apiKey, credentials.projectId, framework);
-  persistCliConfig(credentials.apiKey, credentials.projectId);
+  persistCliConfig(credentials.apiKey, credentials.projectId, endpoint);
   const enableRewards = await maybeEnableRewards(options);
   printNextSteps(framework, credentials.apiKey, credentials.projectId, enableRewards);
-  await maybeSendTestReport(credentials, options);
+  await maybeSendTestReport(credentials, { ...options, endpoint });
   p.outro("Setup complete. Happy bug squashing \u{1F41B}");
 }
 function ensureInteractiveOrBailOut(options) {
@@ -810,9 +819,9 @@ function warnIfMissingFromGitignore(cwd, envFile) {
     p.log.warn(`${envFile} is not in .gitignore \u2014 add it before committing.`);
   }
 }
-function persistCliConfig(apiKey, projectId) {
+function persistCliConfig(apiKey, projectId, endpoint) {
   const existing = loadConfig();
-  saveConfig({ ...existing, apiKey, projectId });
+  saveConfig({ ...existing, apiKey, projectId, endpoint });
 }
 function printNextSteps(framework, apiKey, projectId, enableRewards = false) {
   p.note(framework.snippet(apiKey, projectId), "Add this to your app:");
@@ -856,16 +865,9 @@ async function maybeSendTestReport(credentials, options) {
     shouldSend = answer;
   }
   if (!shouldSend) return;
-  if (!options.endpoint) {
-    p.note(
-      "No endpoint configured \u2014 skipping test report.\nSet endpoint to your Supabase edge function URL, e.g. https://xyz.supabase.co/functions/v1/api",
-      "Skipped"
-    );
-    return;
-  }
+  const endpoint = normalizeEndpoint(resolveCloudEndpoint(options.endpoint));
   const spinner3 = p.spinner();
   spinner3.start("Sending test report\u2026");
-  const endpoint = normalizeEndpoint(options.endpoint);
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), TEST_REPORT_FETCH_TIMEOUT_MS);
   try {
@@ -1747,20 +1749,95 @@ async function checkQaStoriesHealth(config, doFetch = globalThis.fetch) {
   }
   return checks;
 }
+async function checkHostAppWiring(cwd) {
+  const checks = [];
+  try {
+    const { readFile: readFile3, access } = await import("fs/promises");
+    const { join: join7, resolve: resolve4 } = await import("path");
+    const root = resolve4(cwd);
+    const pkgPath = join7(root, "package.json");
+    const pkg = JSON.parse(await readFile3(pkgPath, "utf8"));
+    const deps = { ...pkg.dependencies ?? {}, ...pkg.devDependencies ?? {} };
+    const isCapHybrid = Boolean(deps["@capacitor/core"] && deps["react"]);
+    const envCandidates = [".env.local", ".env"];
+    let envContent = "";
+    for (const f of envCandidates) {
+      try {
+        envContent = await readFile3(join7(root, f), "utf8");
+        break;
+      } catch {
+      }
+    }
+    const hasProjectId = /VITE_MUSHI_PROJECT_ID=|NEXT_PUBLIC_MUSHI_PROJECT_ID=|MUSHI_PROJECT_ID=/.test(envContent);
+    const hasApiKey = /VITE_MUSHI_API_KEY=|NEXT_PUBLIC_MUSHI_API_KEY=|MUSHI_API_KEY=/.test(envContent);
+    checks.push({
+      name: "[host] Mushi env vars in .env.local",
+      ok: hasProjectId && hasApiKey,
+      detail: hasProjectId && hasApiKey ? "VITE_/MUSHI_ project id + API key found" : "Run `mushi connect --write-env` or add VITE_MUSHI_PROJECT_ID + VITE_MUSHI_API_KEY"
+    });
+    let mcpPresent = false;
+    try {
+      await access(join7(root, ".cursor", "mcp.json"));
+      mcpPresent = true;
+    } catch {
+    }
+    checks.push({
+      name: "[host] Cursor MCP config",
+      ok: mcpPresent,
+      detail: mcpPresent ? ".cursor/mcp.json present" : "Run `mushi connect` to wire MCP for two-way reporter replies"
+    });
+    if (isCapHybrid) {
+      const hasWebSdk = Boolean(deps["@mushi-mushi/web"] || deps["@mushi-mushi/react"]);
+      checks.push({
+        name: "[host] Capacitor hybrid \u2014 WebView SDK",
+        ok: hasWebSdk,
+        detail: hasWebSdk ? "Use @mushi-mushi/web or @mushi-mushi/react in the WebView (initMushi in main.tsx)" : "Install @mushi-mushi/web for Capacitor WebView reporting"
+      });
+      checks.push({
+        name: "[host] Capacitor native plugin (optional)",
+        ok: true,
+        detail: deps["@mushi-mushi/capacitor"] ? `@mushi-mushi/capacitor@${deps["@mushi-mushi/capacitor"]} installed` : "Optional: @mushi-mushi/capacitor for native shell parity \u2014 WebView SDK covers most flows"
+      });
+    }
+  } catch {
+    checks.push({
+      name: "[host] Host app detection",
+      ok: false,
+      detail: "No package.json in cwd \u2014 run from your app repo root"
+    });
+  }
+  return checks;
+}
+var FIX_HINTS = {
+  "CLI config file": "Run `mushi connect --endpoint <url> --project-id <uuid> --api-key mushi_xxx` or `mushi config endpoint <url>`.",
+  "API key configured": "Mint a key in the console (Projects \u2192 API Keys) then `mushi login --api-key mushi_xxx`.",
+  "Project ID configured": "Copy the project UUID from the console Projects page \u2192 `mushi config projectId <uuid>`.",
+  "Endpoint reachable": "Check your network and that MUSHI_API_ENDPOINT points at `\u2026/functions/v1/api`.",
+  "[ingest]": "Open the console Onboarding wizard \u2192 Install SDK \u2192 submit a test report, or run `mushi connect --wait`.",
+  "[server]": "Open Settings \u2192 Integrations: connect GitHub, index codebase, add Anthropic BYOK key, enable autofix."
+};
+function fixHintForCheck(name) {
+  if (FIX_HINTS[name]) return FIX_HINTS[name];
+  if (name.startsWith("[ingest]")) return FIX_HINTS["[ingest]"];
+  if (name.startsWith("[server]") || name.startsWith("[preflight]")) return FIX_HINTS["[server]"];
+  return void 0;
+}
 async function runDoctor(config, options = {}) {
   const doFetch = options.fetch ?? globalThis.fetch;
   const checks = [];
+  const runServer = options.server !== false;
+  const runIngest = options.ingest !== false;
   checks.push(...checkCliConfig(config));
   if (config.endpoint) {
     checks.push(await checkEndpointReachability(config.endpoint, doFetch));
   }
   const sdkCheck = await checkSdkInstall(options.cwd ?? process.cwd());
   if (sdkCheck) checks.push(sdkCheck);
-  if (options.server) {
+  if (runServer) {
     const serverChecks = await checkServerPreflight(config, doFetch);
     checks.push(...serverChecks);
   }
-  if (options.ingest) {
+  if (runIngest) {
     const ingestChecks = await checkIngestSetup(config, doFetch);
     checks.push(...ingestChecks);
   }
@@ -1768,6 +1845,10 @@ async function runDoctor(config, options = {}) {
     const qaChecks = await checkQaStoriesHealth(config, doFetch);
     checks.push(...qaChecks);
   }
+  if (options.hostApp) {
+    const hostChecks = await checkHostAppWiring(options.cwd ?? process.cwd());
+    checks.push(...hostChecks);
+  }
   return { checks, ready: checks.every((c) => c.ok) };
 }
 function formatDoctorResult(result) {
@@ -1777,6 +1858,10 @@ function formatDoctorResult(result) {
   for (const c of result.checks) {
     lines.push(`${c.ok ? PASS : FAIL} ${c.name}`);
     if (c.detail) lines.push(`  ${c.detail}`);
+    if (!c.ok) {
+      const hint = fixHintForCheck(c.name);
+      if (hint) lines.push(`  \u2192 Fix: ${hint}`);
+    }
   }
   const failed = result.checks.filter((c) => !c.ok);
   if (failed.length === 0) {
@@ -1956,6 +2041,12 @@ async function runConnect(opts, baseConfig = {}) {
     messages.push(
       wrote ? `\u2713 Env vars merged into ${envPath}` : `\u2713 Env vars already present in ${envPath} (existing values left untouched)`
     );
+    const deps = { ...pkg?.dependencies ?? {}, ...pkg?.devDependencies ?? {} };
+    if (deps["@capacitor/core"] && deps["react"]) {
+      messages.push(
+        "\u2139 Capacitor + React detected \u2014 install @mushi-mushi/web (or @mushi-mushi/react) and call initMushi() in main.tsx. Optional @mushi-mushi/capacitor for native shell parity."
+      );
+    }
   }
   let mcpPath = null;
   if (opts.wireIde !== false) {
@@ -2348,6 +2439,46 @@ Examples:
   \u2026 ${result.data.total - rows.length} more. Use --limit to see more.`);
   }
 });
+reports.command("thread <id>").description("Show unified timeline for a report (comments, fixes, QA, pipelines)").option("--json", "Machine-readable JSON output").option("--watch", "Poll for new timeline entries (TTY only)").action(async (id, opts) => {
+  const config = requireConfig();
+  const fetchTimeline = async () => {
+    const result = await apiCall(`/v1/sync/reports/${id}/timeline`, config);
+    if (!result.ok) {
+      if (result.httpStatus === 404 || result.error.code === "NOT_FOUND") {
+        process.stderr.write(`error: report "${id}" not found
+`);
+        process.exit(3);
+      }
+      die(result);
+    }
+    return result.data;
+  };
+  const render = (data) => {
+    if (opts.json) {
+      console.log(JSON.stringify(data, null, 2));
+      return;
+    }
+    console.log(`Timeline for ${data.report_id}`);
+    console.log("\u2500".repeat(72));
+    for (const e of data.timeline) {
+      console.log(`${fmtDate(e.at)}  [${e.lane}] ${e.title}${e.status ? ` (${e.status})` : ""}`);
+      if (e.body) console.log(`    ${e.body.replace(/\n/g, "\n    ")}`);
+    }
+  };
+  if (opts.watch && process.stdout.isTTY) {
+    let lastLen = -1;
+    for (; ; ) {
+      const data = await fetchTimeline();
+      if (data.timeline.length !== lastLen) {
+        console.clear();
+        render(data);
+        lastLen = data.timeline.length;
+      }
+      await new Promise((r) => setTimeout(r, 3e3));
+    }
+  }
+  render(await fetchTimeline());
+});
 reports.command("show <id>").description("Show full details for a single report").option("--json", "Machine-readable JSON output").action(async (id, opts) => {
   const config = requireConfig();
   const result = await apiCall(`/v1/sync/reports/${id}`, config);
@@ -2441,7 +2572,7 @@ reports.command("resolve <id>").description("Mark a report as resolved (shorthan
 });
 reports.command("reopen <id>").description("Reopen a resolved or dismissed report").option("--note <text>", "Note explaining the reopen").option("--json", "Machine-readable JSON output").action(async (id, opts) => {
   const config = requireConfig();
-  const body = { status: "new" };
+  const body = { status: "reopened" };
   if (opts.note) body["note"] = opts.note;
   const result = await apiCall(`/v1/sync/reports/${id}`, config, {
     method: "PATCH",
@@ -2461,6 +2592,18 @@ reports.command("reopen <id>").description("Reopen a resolved or dismissed repor
     console.log(`\u2713 Reopened report ${id}`);
   }
 });
+reports.command("verify <id>").description("Mark a fixed report as verified by the reporter (operator shortcut)").option("--note <text>", "Optional audit note").option("--json", "Machine-readable JSON output").action(async (id, opts) => {
+  const config = requireConfig();
+  const body = { status: "verified" };
+  if (opts.note) body["note"] = opts.note;
+  const result = await apiCall(`/v1/sync/reports/${id}`, config, {
+    method: "PATCH",
+    body: JSON.stringify(body)
+  });
+  if (!result.ok) die(result);
+  if (opts.json) console.log(JSON.stringify(result.data, null, 2));
+  else console.log(`\u2713 Verified report ${id}`);
+});
 reports.command("dismiss <id>").description("Dismiss a report (not a real bug / out of scope)").option("--note <text>", "Reason for dismissal").option("--json", "Machine-readable JSON output").action(async (id, opts) => {
   const config = requireConfig();
   const body = { status: "dismissed" };
@@ -2537,6 +2680,37 @@ Examples:
     console.log("");
   }
 });
+var feedback = program.command("feedback").description("Community feedback board (bugs + feature requests)");
+feedback.command("board").description("List open feature requests and community tickets for the current project").option("--limit <n>", "Max results (1\u201350)", "20").option("--json", "Machine-readable JSON output").addHelpText("after", `
+Examples:
+  mushi feedback board
+  mushi feedback board --limit 10 --json`).action(async (opts) => {
+  const config = requireConfig();
+  if (!config.projectId) {
+    process.stderr.write("error: no projectId \u2014 run `mushi config projectId <uuid>`\n");
+    process.exit(2);
+  }
+  const limit = Math.min(Math.max(1, parseInt(opts.limit) || 20), 50);
+  const result = await apiCall(
+    `/v1/admin/feature-board`,
+    config
+  );
+  if (!result.ok) die(result);
+  const rows = (result.data?.tickets ?? []).slice(0, limit);
+  if (opts.json) {
+    console.log(JSON.stringify(rows, null, 2));
+    return;
+  }
+  if (rows.length === 0) {
+    console.log("No feature requests on the board yet.");
+    return;
+  }
+  console.log(`${pad("ID", 38)} ${pad("VOTES", 6)} ${pad("STATUS", 12)} ${pad("CREATED", 17)} SUBJECT`);
+  console.log("\u2500".repeat(110));
+  for (const t of rows) {
+    console.log(`${pad(t.id, 38)} ${pad(String(t.vote_count ?? 0), 6)} ${pad(t.status, 12)} ${pad(fmtDate(t.created_at), 17)} ${(t.subject ?? "").slice(0, 40)}`);
+  }
+});
 var lessons = program.command("lessons").description("Manage learned mistake rules");
 lessons.command("list").description("List active lessons (mistake rules) for the current project").option("--severity <sev>", "Filter: info|warn|critical").option("--limit <n>", "Max results (1\u2013200)", "50").option("--json", "Machine-readable JSON output").addHelpText("after", `
 Lessons are mistake rules extracted from past bug reports by the clustering
@@ -3179,19 +3353,32 @@ Examples:
   if (!result.ok) process.exit(1);
 });
 program.command("doctor").description(
-  "Run pre-flight checks: CLI config, endpoint reachability, API key shape, SDK install status, and (with --server) the same 4 dispatch-readiness checks shown in the Mushi console. Mirrors the in-console dispatch preflight so you can spot setup gaps before opening the admin UI."
-).option("--cwd <path>", "Run package detection from a different directory").option("--json", "Machine-readable output").option(
-  "--server",
-  "Also call GET /preflight on the backend and include the 4 dispatch checks (GitHub repo, codebase indexed, Anthropic key, autofix enabled). Requires a configured projectId and API key."
-).option(
-  "--ingest",
-  "Also call GET /v1/sync/ingest-setup for the 4 required ingest steps (API key, SDK heartbeat, first report). Composable with --server."
-).option(
+  "Run pre-flight checks: CLI config, endpoint reachability, SDK install, ingest readiness (API key \u2192 heartbeat \u2192 first report), and dispatch readiness (GitHub, index, BYOK, autofix). Ingest + server checks run by default; pass --no-server or --no-ingest to skip."
+).option("--cwd <path>", "Run package detection from a different directory").option("--json", "Machine-readable output").option("--no-server", "Skip dispatch-readiness /preflight checks").option("--no-ingest", "Skip ingest-setup checks (SDK heartbeat, first report)").option(
   "--qa-stories",
   "Check enabled QA stories for common setup issues: missing Firecrawl key, missing target URL, Slack not connected. Requires --server credentials."
+).option(
+  "--host-app",
+  "Verify host-app wiring: Mushi env vars, Cursor MCP config, Capacitor hybrid SDK notes."
+).option(
+  "--fix",
+  "Apply safe local fixes when checks fail: write missing .env.local lines and wire Cursor MCP config."
 ).action(async (opts) => {
   const config = loadConfig();
-  const result = await runDoctor(config, { cwd: opts.cwd, server: opts.server, ingest: opts.ingest, qaStories: opts.qaStories });
+  const doctorOpts = { cwd: opts.cwd, server: opts.server, ingest: opts.ingest, qaStories: opts.qaStories, hostApp: opts.hostApp };
+  let result = await runDoctor(config, doctorOpts);
+  if (!result.ready && opts.fix && config.apiKey && config.projectId && config.endpoint) {
+    const connectResult = await runConnect({
+      apiKey: config.apiKey,
+      projectId: config.projectId,
+      endpoint: config.endpoint,
+      cwd: opts.cwd ?? process.cwd(),
+      writeEnv: true,
+      wireIde: true
+    }, config);
+    for (const msg of connectResult.messages) console.log(msg);
+    result = await runDoctor(config, doctorOpts);
+  }
   const { checks } = result;
   if (opts.json) {
     console.log(JSON.stringify({ checks, ready: result.ready }, null, 2));
@@ -3807,7 +3994,7 @@ Recent runs for story ${storyId.slice(0, 8)}\u2026:
   const consoleUrl = config.consoleUrl ?? "https://app.mushi.ai";
   console.log(`
    Open in console: ${consoleUrl}/qa-coverage?story=${storyId}`);
-  console.log(`   Tip: run 'mushi config consoleUrl http://localhost:6464' to set your local console URL`);
+  console.log(`   Tip: run 'mushi config consoleUrl <url>' to override (e.g. http://localhost:6464 for local dev)`);
   console.log();
 });
 qa.command("run <storyId>").description("Manually trigger a QA story run (fire-and-forget; check results with `mushi qa runs <id>`)").option("--json", "Machine-readable output").action(async (storyId, opts) => {
@@ -3882,14 +4069,11 @@ Examples:
     "Content-Type": "application/json",
     "X-Mushi-Project-Id": projectId
   };
-  const jwt = config.jwt ?? null;
   const apiKey = config.apiKey ?? null;
-  if (jwt) {
-    headers["Authorization"] = `Bearer ${jwt.replace(/[\r\n\0]/g, "")}`;
-  } else if (apiKey) {
+  if (apiKey) {
     headers["X-Mushi-Api-Key"] = sanitizeApiKey(apiKey);
   } else {
-    process.stderr.write("error: no credentials found. Run `mushi login` first.\n");
+    process.stderr.write("error: no API key found. Run `mushi login` or set MUSHI_API_KEY.\n");
     process.exit(1);
   }
   if (!opts.json) process.stdout.write("Running full-stack audit\u2026 ");
@@ -4066,6 +4250,40 @@ skills.command("sync").description("Trigger skill sync for all configured skill
   console.log();
 });
 var pipeline = program.command("pipeline").description("Manage skill pipeline runs");
+var consoleCmd = program.command("console").description("Live developer console for Mushi threads");
+consoleCmd.command("watch <reportId>").description("Watch unified report timeline (alias for mushi reports thread --watch)").option("--json", "NDJSON output for non-TTY").action(async (reportId, opts) => {
+  const config = requireConfig();
+  const fetchTimeline = async () => {
+    const result = await apiCall(`/v1/sync/reports/${reportId}/timeline`, config);
+    if (!result.ok) die(result);
+    return result.data;
+  };
+  if (opts.json || !process.stdout.isTTY) {
+    let lastLen2 = -1;
+    for (; ; ) {
+      const data = await fetchTimeline();
+      if (data.timeline.length !== lastLen2) {
+        console.log(JSON.stringify({ type: "timeline", ...data }));
+        lastLen2 = data.timeline.length;
+      }
+      await new Promise((r) => setTimeout(r, 3e3));
+    }
+  }
+  let lastLen = -1;
+  for (; ; ) {
+    const data = await fetchTimeline();
+    if (data.timeline.length !== lastLen) {
+      console.clear();
+      console.log(`Console \xB7 ${data.report_id}`);
+      for (const e of data.timeline) {
+        console.log(`${fmtDate(e.at)} [${e.lane}] ${e.title}`);
+        if (e.body) console.log(`  ${e.body}`);
+      }
+      lastLen = data.timeline.length;
+    }
+    await new Promise((r) => setTimeout(r, 3e3));
+  }
+});
 pipeline.command("start <reportId>").description("Start a skill pipeline for a report").requiredOption("--skill <slug>", "Root skill slug (e.g. workflow-fix-and-ship)").option("--mode <mode>", "Execution mode: handoff (default) or cloud", "handoff").option("--json", "Machine-readable output").action(async (reportId, opts) => {
   const config = loadConfig();
   if (!config.apiKey) {

package/dist/init.js

@@ -5,10 +5,10 @@ import {
   envVarsToWrite,
   installCommand,
   readPackageJson
-} from "./chunk-NYPX5KXR.js";
+} from "./chunk-S4WQHEGH.js";
 import {
   MUSHI_CLI_VERSION
-} from "./chunk-BCTHNCIY.js";
+} from "./chunk-XVLIMBPU.js";
 
 // src/init.ts
 import * as p from "@clack/prompts";
@@ -112,6 +112,13 @@ function tightenDirPermissions(path) {
 // src/endpoint.ts
 var TEST_REPORT_TIMEOUT_MS = 1e4;
 var TEST_REPORT_FETCH_TIMEOUT_MS = TEST_REPORT_TIMEOUT_MS;
+var CLOUD_API_ENDPOINT = "https://dxptnwrhwsqckaftyymj.supabase.co/functions/v1/api";
+function resolveCloudEndpoint(explicit) {
+  if (explicit?.trim()) return explicit.trim();
+  const fromEnv = process.env.MUSHI_API_ENDPOINT?.trim();
+  if (fromEnv) return fromEnv;
+  return CLOUD_API_ENDPOINT;
+}
 function normalizeEndpoint(url) {
   if (!url) {
     throw new Error(
@@ -311,11 +318,12 @@ async function runInit(options = {}) {
   } else {
     p.log.info(`Skipped install. Run \`${installCommand(pm, packagesToInstall)}\` yourself.`);
   }
+  const endpoint = resolveCloudEndpoint(options.endpoint);
   writeEnvFile(cwd, credentials.apiKey, credentials.projectId, framework);
-  persistCliConfig(credentials.apiKey, credentials.projectId);
+  persistCliConfig(credentials.apiKey, credentials.projectId, endpoint);
   const enableRewards = await maybeEnableRewards(options);
   printNextSteps(framework, credentials.apiKey, credentials.projectId, enableRewards);
-  await maybeSendTestReport(credentials, options);
+  await maybeSendTestReport(credentials, { ...options, endpoint });
   p.outro("Setup complete. Happy bug squashing \u{1F41B}");
 }
 function ensureInteractiveOrBailOut(options) {
@@ -489,9 +497,9 @@ function warnIfMissingFromGitignore(cwd, envFile) {
     p.log.warn(`${envFile} is not in .gitignore \u2014 add it before committing.`);
   }
 }
-function persistCliConfig(apiKey, projectId) {
+function persistCliConfig(apiKey, projectId, endpoint) {
   const existing = loadConfig();
-  saveConfig({ ...existing, apiKey, projectId });
+  saveConfig({ ...existing, apiKey, projectId, endpoint });
 }
 function printNextSteps(framework, apiKey, projectId, enableRewards = false) {
   p.note(framework.snippet(apiKey, projectId), "Add this to your app:");
@@ -535,16 +543,9 @@ async function maybeSendTestReport(credentials, options) {
     shouldSend = answer;
   }
   if (!shouldSend) return;
-  if (!options.endpoint) {
-    p.note(
-      "No endpoint configured \u2014 skipping test report.\nSet endpoint to your Supabase edge function URL, e.g. https://xyz.supabase.co/functions/v1/api",
-      "Skipped"
-    );
-    return;
-  }
+  const endpoint = normalizeEndpoint(resolveCloudEndpoint(options.endpoint));
   const spinner2 = p.spinner();
   spinner2.start("Sending test report\u2026");
-  const endpoint = normalizeEndpoint(options.endpoint);
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), TEST_REPORT_FETCH_TIMEOUT_MS);
   try {

package/dist/version.js

@@ -1,6 +1,6 @@
 import {
   MUSHI_CLI_VERSION
-} from "./chunk-BCTHNCIY.js";
+} from "./chunk-XVLIMBPU.js";
 export {
   MUSHI_CLI_VERSION
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mushi-mushi/cli",
-  "version": "0.16.0",
+  "version": "0.17.1",
   "license": "MIT",
   "description": "CLI for Mushi Mushi — `mushi init` wizard installs the right SDK for your framework, plus report triage and pipeline health commands",
   "bin": {

package/dist/chunk-BCTHNCIY.js

@@ -1,6 +0,0 @@
-// src/version.ts
-var MUSHI_CLI_VERSION = true ? "0.16.0" : "0.0.0-dev";
-
-export {
-  MUSHI_CLI_VERSION
-};