@mushi-mushi/cli 0.21.0 → 0.22.1

package/dist/index.js

@@ -78,6 +78,23 @@ var MushiCliError = class extends Error {
     };
   }
 };
+function printAndExit(err, asJson = false) {
+  const cliErr = err instanceof MushiCliError ? err : new MushiCliError(
+    "E_INTERNAL",
+    err instanceof Error ? err.message : String(err),
+    "this is unexpected \u2014 re-run with MUSHI_DEBUG=1 and report at https://github.com/kensaurus/mushi-mushi/issues",
+    err
+  );
+  if (asJson) {
+    process.stderr.write(JSON.stringify(cliErr.toJSON()) + "\n");
+  } else {
+    process.stderr.write(`error [${cliErr.code}]: ${cliErr.message}
+`);
+    if (cliErr.hint) process.stderr.write(`  \u2192 fix: ${cliErr.hint}
+`);
+  }
+  process.exit(cliErr.exitCode);
+}
 
 // src/signals.ts
 var installed = false;
@@ -110,7 +127,7 @@ function getAbortSignal(external) {
 }
 
 // src/version.ts
-var MUSHI_CLI_VERSION = true ? "0.21.0" : "0.0.0-dev";
+var MUSHI_CLI_VERSION = true ? "0.22.1" : "0.0.0-dev";
 
 // src/init.ts
 import * as p from "@clack/prompts";
@@ -237,6 +254,20 @@ async function openInBrowser(url) {
 
 // src/cli-shared.ts
 var API_TIMEOUT_MS = 15e3;
+async function probeEndpointHealth(endpoint) {
+  const t0 = Date.now();
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), API_TIMEOUT_MS);
+  try {
+    const res = await fetch(`${endpoint}/health`, { signal: controller.signal });
+    clearTimeout(timer);
+    const body = res.headers.get("content-type")?.includes("json") ? await res.json().catch(() => ({})) : {};
+    return { ok: res.ok, status: res.status, latencyMs: Date.now() - t0, body };
+  } catch (err) {
+    clearTimeout(timer);
+    throw err;
+  }
+}
 async function apiCall(path, config, options = {}) {
   const endpoint = config.endpoint;
   if (!endpoint) {
@@ -337,19 +368,21 @@ function die(result, exitCode = 1) {
 function requireConfig(opts = {}) {
   const config = loadConfig();
   if (!config.apiKey) {
-    process.stderr.write(
-      "error: API key not configured.\n  Run:  mushi login --api-key <key>\n  Or:   export MUSHI_API_KEY=<key>\n"
-    );
-    process.exit(2);
+    printAndExit(new MushiCliError(
+      "E_AUTH_MISSING",
+      "API key not configured.",
+      "Run: mushi login --api-key <key>  Or: export MUSHI_API_KEY=<key>"
+    ));
   }
   if (!config.endpoint) {
     config.endpoint = process.env.MUSHI_API_ENDPOINT?.trim() || CLOUD_API_ENDPOINT;
   }
   if (opts.needsProject && !config.projectId) {
-    process.stderr.write(
-      "error: Project ID not configured.\n  Run:  mushi login --project-id <uuid>\n  Or:   export MUSHI_PROJECT_ID=<uuid>\n  Find your project ID: " + consoleUrl(resolveConsoleUrlSync(), "/projects") + "\n"
-    );
-    process.exit(2);
+    printAndExit(new MushiCliError(
+      "E_PROJECT_MISSING",
+      "Project ID not configured.",
+      `Run: mushi login --project-id <uuid>  Or find your project ID at ${consoleUrl(resolveConsoleUrlSync(), "/projects")}`
+    ));
   }
   return config;
 }
@@ -716,7 +749,7 @@ var API_KEY_PATTERN = /^(mushi_|mush_pk_)[A-Za-z0-9_-]{10,}$/;
 async function runInit(options = {}) {
   const cwd = options.cwd ?? process.cwd();
   ensureInteractiveOrBailOut(options);
-  p.intro("\u{1F41B} Mushi Mushi setup wizard");
+  p.intro("Mushi setup");
   await printFreshnessHint();
   warnIfWorkspaceRoot(cwd);
   const pkg = readPackageJson(cwd);
@@ -750,7 +783,7 @@ async function runInit(options = {}) {
   printNextSteps(framework, consoleBase, enableRewards);
   await maybeSendTestReport(credentials, { ...options, endpoint, consoleBase });
   await maybeOfferConnect(credentials, options, consoleBase);
-  p.outro("Setup complete. Happy bug squashing \u{1F41B}");
+  p.outro("Setup complete.");
 }
 function ensureInteractiveOrBailOut(options) {
   const isTTY = Boolean(process.stdin.isTTY && process.stdout.isTTY);
@@ -1657,24 +1690,19 @@ Useful after 'mushi login' to confirm credentials are correct.`).action(async (o
     const config = requireConfig();
     const t0 = Date.now();
     try {
-      const controller = new AbortController();
-      const timer = setTimeout(() => controller.abort(), API_TIMEOUT_MS);
-      const res = await fetch(`${config.endpoint}/health`, { signal: controller.signal });
-      clearTimeout(timer);
-      const latency = Date.now() - t0;
+      const probe = await probeEndpointHealth(config.endpoint);
       if (opts.json) {
-        console.log(JSON.stringify({ ok: res.ok, status: res.status, latency_ms: latency }));
+        console.log(JSON.stringify({ ok: probe.ok, status: probe.status, latency_ms: probe.latencyMs }));
       } else {
-        const symbol = res.ok ? "\u2713" : "\u2717";
-        console.log(`${symbol} ${res.ok ? "OK" : "FAIL"} \u2014 ${res.status} (${latency}ms)`);
-        if (!res.ok) process.exit(1);
+        console.log(`${probe.ok ? "OK" : "FAIL"} \u2014 ${probe.status} (${probe.latencyMs}ms)`);
+        if (!probe.ok) process.exit(1);
       }
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       if (opts.json) {
         console.log(JSON.stringify({ ok: false, error: msg, latency_ms: Date.now() - t0 }));
       } else {
-        process.stderr.write(`\u2717 Unreachable: ${msg}
+        process.stderr.write(`FAIL Unreachable: ${msg}
 `);
       }
       process.exit(1);
@@ -1739,22 +1767,16 @@ function registerDeployCommands(program2) {
   const deploy = program2.command("deploy").description("Deployment management");
   deploy.command("check").description("Check edge function health and measure latency").option("--json", "Machine-readable JSON output").action(async (opts) => {
     const config = requireConfig();
-    const t0 = Date.now();
     try {
-      const controller = new AbortController();
-      const timer = setTimeout(() => controller.abort(), API_TIMEOUT_MS);
-      const res = await fetch(`${config.endpoint}/health`, { signal: controller.signal });
-      clearTimeout(timer);
-      const latency = Date.now() - t0;
-      const body = res.headers.get("content-type")?.includes("json") ? await res.json().catch(() => ({})) : {};
+      const probe = await probeEndpointHealth(config.endpoint);
       if (opts.json) {
-        console.log(JSON.stringify({ ok: res.ok, status: res.status, latency_ms: latency, ...body }));
+        console.log(JSON.stringify({ ok: probe.ok, status: probe.status, latency_ms: probe.latencyMs, ...probe.body }));
       } else {
-        console.log(`Health: ${res.status === 200 ? "OK" : "FAIL"} (${res.status}) \u2014 ${latency}ms`);
-        if (body["version"]) console.log(`  Version: ${body["version"]}`);
-        if (body["region"]) console.log(`  Region:  ${body["region"]}`);
+        console.log(`Health: ${probe.status === 200 ? "OK" : "FAIL"} (${probe.status}) \u2014 ${probe.latencyMs}ms`);
+        if (probe.body["version"]) console.log(`  Version: ${probe.body["version"]}`);
+        if (probe.body["region"]) console.log(`  Region:  ${probe.body["region"]}`);
       }
-      if (!res.ok) process.exit(1);
+      if (!probe.ok) process.exit(1);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       if (opts.json) {
@@ -2158,11 +2180,11 @@ AI code review context.
 Typical CI usage:
   MUSHI_API_KEY=$KEY MUSHI_PROJECT_ID=$PID MUSHI_API_ENDPOINT=$URL \\
     npx @mushi-mushi/cli sync-lessons --cwd .`).action(async (opts) => {
-    const { writeFile, mkdir } = await import("fs/promises");
-    const nodePath = await import("path");
+    const { writeFile: writeFile2, mkdir } = await import("fs/promises");
+    const nodePath2 = await import("path");
     const config = requireConfig();
     const cwd = opts.cwd ?? process.cwd();
-    const target = nodePath.join(cwd, ".mushi", "lessons.json");
+    const target = nodePath2.join(cwd, ".mushi", "lessons.json");
     const result = await apiCall("/v1/sync/lessons?limit=500", config);
     if (!result.ok) die(result);
     const rows = Array.isArray(result.data) ? result.data : [];
@@ -2185,8 +2207,8 @@ Typical CI usage:
       console.log(JSON.stringify(output, null, 2));
       return;
     }
-    await mkdir(nodePath.dirname(target), { recursive: true });
-    await writeFile(target, JSON.stringify(output, null, 2) + "\n", "utf8");
+    await mkdir(nodePath2.dirname(target), { recursive: true });
+    await writeFile2(target, JSON.stringify(output, null, 2) + "\n", "utf8");
     if (opts.json) {
       console.log(JSON.stringify({ ok: true, path: target, count: lessons2.length }));
     } else {
@@ -2381,35 +2403,35 @@ Examples:
   mushi index ./src
   mushi index ./src --language ts --dry-run`).action(async (path, opts) => {
     const config = requireConfig({ needsProject: true });
-    const { readdir: readdir2, readFile: readFile2, stat } = await import("fs/promises");
-    const nodePath = await import("path");
+    const { readdir: readdir2, readFile: readFile3, stat } = await import("fs/promises");
+    const nodePath2 = await import("path");
     const SKIP = /node_modules|\.git|dist|build|\.next|\.turbo|coverage/;
     const EXTS = /* @__PURE__ */ new Set([".ts", ".tsx", ".js", ".jsx", ".py", ".go", ".rs"]);
     const MAX_FILE_BYTES = 5e5;
     async function* walk(dir) {
       const entries = await readdir2(dir, { withFileTypes: true });
       for (const e of entries) {
-        const full = nodePath.join(dir, e.name);
+        const full = nodePath2.join(dir, e.name);
         if (SKIP.test(full)) continue;
         if (e.isDirectory()) yield* walk(full);
-        else if (EXTS.has(nodePath.extname(e.name))) yield full;
+        else if (EXTS.has(nodePath2.extname(e.name))) yield full;
       }
     }
     let count = 0;
     let bytes = 0;
     let errors = 0;
-    const root = nodePath.resolve(path);
+    const root = nodePath2.resolve(path);
     for await (const file of walk(root)) {
-      const lang = nodePath.extname(file).slice(1);
+      const lang = nodePath2.extname(file).slice(1);
       if (opts.language && opts.language !== lang) continue;
       const stats = await stat(file);
       if (stats.size > MAX_FILE_BYTES) {
-        if (!opts.json) process.stdout.write(`  skip  ${nodePath.relative(root, file)} (>${MAX_FILE_BYTES / 1e3}KB)
+        if (!opts.json) process.stdout.write(`  skip  ${nodePath2.relative(root, file)} (>${MAX_FILE_BYTES / 1e3}KB)
 `);
         continue;
       }
-      const source = await readFile2(file, "utf8");
-      const relative2 = nodePath.relative(root, file).replaceAll("\\", "/");
+      const source = await readFile3(file, "utf8");
+      const relative2 = nodePath2.relative(root, file).replaceAll("\\", "/");
       count++;
       bytes += source.length;
       if (opts.dryRun) {
@@ -2455,6 +2477,48 @@ Examples:
   });
 }
 
+// src/project-bootstrap.ts
+import { writeFile, readFile as readFile2 } from "fs/promises";
+import nodePath from "path";
+async function writeProjectBootstrapFiles(opts) {
+  const cwd = opts.cwd ?? process.cwd();
+  const envPath = nodePath.join(cwd, ".env.local");
+  const mushiBlock = [
+    "# Mushi MCP \u2014 drop into .env.local (gitignored). The MCP binary picks these up on spawn.",
+    `MUSHI_API_ENDPOINT=${opts.endpoint}`,
+    `MUSHI_PROJECT_ID=${opts.projectId}`,
+    `MUSHI_API_KEY=${opts.apiKey}`
+  ].join("\n");
+  let existing = "";
+  let envUpdated = false;
+  try {
+    existing = await readFile2(envPath, "utf8");
+    envUpdated = true;
+  } catch {
+  }
+  const MUSHI_LINE_RE = /^(NEXT_PUBLIC_|NUXT_PUBLIC_|VITE_|EXPO_PUBLIC_)?MUSHI_[A-Z_]+=.*/gm;
+  const MUSHI_COMMENT_RE = /^# Mushi MCP\b.*/gm;
+  const stripped = existing.replace(MUSHI_LINE_RE, "").replace(MUSHI_COMMENT_RE, "").replace(/\n{3,}/g, "\n\n").trimEnd();
+  const prefix = stripped.length > 0 ? `${stripped}
+
+` : "";
+  await writeFile(envPath, `${prefix}${mushiBlock}
+`, "utf8");
+  const mcpPath = nodePath.join(cwd, ".cursor", "mcp.json");
+  const serverName = buildMcpServerName({ legacy: true });
+  const serverBlock = buildMcpServerBlock({
+    endpoint: opts.endpoint,
+    projectId: opts.projectId,
+    apiKey: opts.apiKey
+  });
+  const { created: mcpCreated } = await writeMcpServerEntry({
+    configPath: mcpPath,
+    serverName,
+    serverBlock
+  });
+  return { envUpdated, mcpUpdated: !mcpCreated };
+}
+
 // src/commands/project.ts
 function registerProjectCommands(program2) {
   const project = program2.command("project").description("Project management");
@@ -2469,9 +2533,6 @@ Typical first-time flow:
   # Browser opens \u2192 click Approve \u2192 pick or create a project
   # CLI writes .env.local and .cursor/mcp.json
   # mushi whoami to confirm`).action(async (opts) => {
-    const { writeFile } = await import("fs/promises");
-    const { existsSync: existsSync4 } = await import("fs");
-    const nodePath = await import("path");
     const savedConfig = loadConfig();
     const endpoint = resolveCloudEndpoint(
       opts.endpoint ?? process.env.MUSHI_API_ENDPOINT?.trim() ?? savedConfig.endpoint
@@ -2568,24 +2629,14 @@ error: Could not create project: ${err instanceof Error ? err.message : String(e
     config.projectId = projectId;
     config.consoleUrl = consoleBase;
     saveConfig(config);
-    const cwd = process.cwd();
-    const envPath = nodePath.join(cwd, ".env.local");
-    const envLines = [
-      "# Mushi MCP \u2014 drop into .env.local (gitignored). The MCP binary picks these up on spawn.",
-      `MUSHI_API_ENDPOINT=${endpoint}`,
-      `MUSHI_PROJECT_ID=${projectId}`,
-      `MUSHI_API_KEY=${apiKey}`,
-      ""
-    ];
-    const envExisting = existsSync4(envPath);
-    await writeFile(envPath, envLines.join("\n"), "utf8");
+    const { envUpdated, mcpUpdated } = await writeProjectBootstrapFiles({
+      endpoint,
+      projectId,
+      apiKey
+    });
     console.log(`
-  \u2713 ${envExisting ? "Updated" : "Created"} .env.local`);
-    const mcpPath = nodePath.join(cwd, ".cursor", "mcp.json");
-    const serverName = buildMcpServerName({ legacy: true });
-    const serverBlock = buildMcpServerBlock({ endpoint, projectId, apiKey });
-    const { created: mcpCreated } = await writeMcpServerEntry({ configPath: mcpPath, serverName, serverBlock });
-    console.log(`  \u2713 ${mcpCreated ? "Created" : "Updated"} .cursor/mcp.json`);
+  OK  ${envUpdated ? "Updated" : "Created"} .env.local`);
+    console.log(`  OK  ${mcpUpdated ? "Updated" : "Created"} .cursor/mcp.json`);
     console.log("");
     console.log('  Done! Restart Cursor and ask: "list mushi tools"');
     console.log("  Run `mushi whoami` to verify the connection.");
@@ -2609,9 +2660,9 @@ Supported IDEs:
   zed       \u2014 writes ~/.config/zed/settings.json mcpServers block
 
 The command reads credentials from ~/.config/mushi/config.json (run \`mushi login\` first).`).action(async (opts) => {
-    const { writeFile, mkdir, readFile: readFile2 } = await import("fs/promises");
+    const { writeFile: writeFile2, mkdir, readFile: readFile3 } = await import("fs/promises");
     const { existsSync: existsSync4 } = await import("fs");
-    const nodePath = await import("path");
+    const nodePath2 = await import("path");
     const os = await import("os");
     const config = requireConfig({ needsProject: true });
     const redactKeyForDisplay = (text2) => {
@@ -2654,7 +2705,7 @@ The command reads credentials from ~/.config/mushi/config.json (run \`mushi logi
       cursor: { dir: ".cursor", file: "mcp.json", format: "mcp-json" },
       claude: { dir: ".claude", file: "mcp.json", format: "mcp-json" },
       continue: { dir: ".continue", file: "mcp.json", format: "mcp-json" },
-      zed: { dir: nodePath.join(os.homedir(), ".config", "zed"), file: "settings.json", format: "zed" }
+      zed: { dir: nodePath2.join(os.homedir(), ".config", "zed"), file: "settings.json", format: "zed" }
     };
     const ideEntry = IDE_CONFIG[opts.ide];
     if (!ideEntry) {
@@ -2690,8 +2741,8 @@ The command reads credentials from ~/.config/mushi/config.json (run \`mushi logi
         MUSHI_API_KEY: config.apiKey
       }
     };
-    const configDir = ideEntry.dir.startsWith("/") ? ideEntry.dir : nodePath.join(cwd, ideEntry.dir);
-    const configPath = nodePath.join(configDir, ideEntry.file);
+    const configDir = ideEntry.dir.startsWith("/") ? ideEntry.dir : nodePath2.join(cwd, ideEntry.dir);
+    const configPath = nodePath2.join(configDir, ideEntry.file);
     if (ideEntry.format === "mcp-json") {
       if (allProjectsList && allProjectsList.length > 0) {
         for (const p3 of allProjectsList) {
@@ -2724,7 +2775,7 @@ The command reads credentials from ~/.config/mushi/config.json (run \`mushi logi
       let settings = {};
       if (existsSync4(configPath)) {
         try {
-          const raw = await readFile2(configPath, "utf8");
+          const raw = await readFile3(configPath, "utf8");
           settings = JSON.parse(raw);
         } catch {
         }
@@ -2749,7 +2800,7 @@ The command reads credentials from ~/.config/mushi/config.json (run \`mushi logi
         console.log(redactKeyForDisplay(output));
       } else {
         await mkdir(configDir, { recursive: true });
-        await writeFile(configPath, output, "utf8");
+        await writeFile2(configPath, output, "utf8");
         console.log(`\u2713 Written ${configPath}`);
       }
     }
@@ -2764,7 +2815,7 @@ The command reads credentials from ~/.config/mushi/config.json (run \`mushi logi
         "## Before writing a fix",
         "",
         "1. Call `get_fix_context` (MCP) for the report \u2014 get root cause + blast radius first.",
-        "2. Call `lessons.query` (MCP) or read .mushi/lessons.json \u2014 apply every matching rule.",
+        "2. Call `list_lessons` (MCP) or read .mushi/lessons.json \u2014 apply every matching rule.",
         "3. Prefer the smallest change that makes the test pass. Don't refactor unrelated code.",
         "",
         "## After writing a fix",
@@ -2779,21 +2830,21 @@ The command reads credentials from ~/.config/mushi/config.json (run \`mushi logi
         ""
       ].join("\n");
       if (opts.ide === "cursor") {
-        const rulesPath = nodePath.join(cwd, ".cursorrules");
+        const rulesPath = nodePath2.join(cwd, ".cursorrules");
         if (opts.dryRun) {
           console.log(`[dry-run] Would write ${rulesPath}`);
         } else {
-          await writeFile(rulesPath, rulesContent, "utf8");
+          await writeFile2(rulesPath, rulesContent, "utf8");
           console.log(`\u2713 Written .cursorrules`);
         }
       } else if (opts.ide === "claude") {
-        const rulesDir = nodePath.join(cwd, ".claude", "rules");
-        const rulesPath = nodePath.join(rulesDir, "mushi.md");
+        const rulesDir = nodePath2.join(cwd, ".claude", "rules");
+        const rulesPath = nodePath2.join(rulesDir, "mushi.md");
         if (opts.dryRun) {
           console.log(`[dry-run] Would write ${rulesPath}`);
         } else {
           await mkdir(rulesDir, { recursive: true });
-          await writeFile(rulesPath, rulesContent, "utf8");
+          await writeFile2(rulesPath, rulesContent, "utf8");
           console.log(`\u2713 Written .claude/rules/mushi.md`);
         }
       }
@@ -2852,393 +2903,809 @@ The command reads credentials from ~/.config/mushi/config.json (run \`mushi logi
       if (!opts.withRules) {
         console.log(`Tip: run with --with-rules to also write the lesson-library coding hook.`);
       }
-      const configRelPath = ideEntry.dir.startsWith("/") ? configPath : nodePath.relative(cwd, configPath);
+      const configRelPath = ideEntry.dir.startsWith("/") ? configPath : nodePath2.relative(cwd, configPath);
       console.log(`
 Note: ${configRelPath} contains your Mushi API key \u2014 add it to .gitignore if this is a shared repo.`);
     }
   });
 }
 
-// src/nudge.ts
-var PRESETS = {
-  // Alpha: noisy is OK because there are very few users and you need
-  // signal yesterday. Show all triggers, short cooldowns.
-  alpha: {
-    maxProactivePerSession: 3,
-    dismissCooldownHours: 6,
-    suppressAfterDismissals: 5,
-    pageDwellMinutes: 3,
-    firstSessionSeconds: 30,
-    rageClick: true,
-    longTask: true,
-    apiCascade: true,
-    errorBoundary: true,
-    betaMode: true,
-    featureRequestCard: true
-  },
-  // Beta: most apps spend the longest here. Conservative cadence so
-  // we don't poison the well, but every trigger still on.
-  beta: {
-    maxProactivePerSession: 2,
-    dismissCooldownHours: 24,
-    suppressAfterDismissals: 3,
-    pageDwellMinutes: 5,
-    firstSessionSeconds: 45,
-    rageClick: true,
-    longTask: true,
-    apiCascade: true,
-    errorBoundary: true,
-    betaMode: true,
-    featureRequestCard: true
-  },
-  // GA / production: only the technical signals (error boundary, rage
-  // click). No page-dwell, no welcome — those are explicitly beta-only
-  // patterns. Feature-request card still on because it's user-initiated.
-  ga: {
-    maxProactivePerSession: 1,
-    dismissCooldownHours: 168,
-    suppressAfterDismissals: 2,
-    pageDwellMinutes: 0,
-    firstSessionSeconds: 0,
-    rageClick: true,
-    longTask: false,
-    apiCascade: true,
-    errorBoundary: true,
-    betaMode: false,
-    featureRequestCard: true
-  }
-};
-function renderNudgeSnippet(opts) {
-  const p3 = { ...PRESETS[opts.phase], ...opts.overrides };
-  const dwellMs = p3.pageDwellMinutes > 0 ? `${p3.pageDwellMinutes} * 60 * 1000` : null;
-  const firstMs = p3.firstSessionSeconds > 0 ? `${p3.firstSessionSeconds} * 1000` : null;
-  const proactiveLines = [];
-  if (p3.rageClick) proactiveLines.push(`    rageClick: true,`);
-  if (p3.longTask) proactiveLines.push(`    longTask: true,`);
-  if (p3.apiCascade) proactiveLines.push(`    apiCascade: true,`);
-  if (p3.errorBoundary) proactiveLines.push(`    errorBoundary: true,`);
-  if (dwellMs) proactiveLines.push(`    pageDwell: { thresholdMs: ${dwellMs} }, // ${p3.pageDwellMinutes}min on the same route`);
-  if (firstMs) proactiveLines.push(`    firstSession: { delayMs: ${firstMs} }, // welcome new users after ${p3.firstSessionSeconds}s`);
-  proactiveLines.push(`    cooldown: {`);
-  proactiveLines.push(`      maxProactivePerSession: ${p3.maxProactivePerSession},`);
-  proactiveLines.push(`      dismissCooldownHours: ${p3.dismissCooldownHours},`);
-  proactiveLines.push(`      suppressAfterDismissals: ${p3.suppressAfterDismissals},`);
-  proactiveLines.push(`    },`);
-  const widgetLines = [];
-  if (p3.featureRequestCard) widgetLines.push(`    featureRequestCard: true,`);
-  if (p3.betaMode) {
-    widgetLines.push(`    betaMode: {`);
-    widgetLines.push(`      enabled: true,`);
-    widgetLines.push(`      label: 'BETA',`);
-    widgetLines.push(`      // changelogItems: [{ version: 'v0.42', date: '${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}', items: ['\u2026'] }],`);
-    widgetLines.push(`    },`);
-  }
-  return [
-    `// Generated by \`mushi nudge --phase ${opts.phase}\``,
-    `// Phase: ${opts.phase} \u2014 tune via --max, --cooldown, --dwell, --welcome.`,
-    `Mushi.init({`,
-    `  projectId: process.env.MUSHI_PROJECT_ID!,`,
-    `  apiKey: process.env.MUSHI_API_KEY!,`,
-    `  proactive: {`,
-    ...proactiveLines,
-    `  },`,
-    ...widgetLines.length ? [`  widget: {`, ...widgetLines, `  },`] : [],
-    `})`,
-    ``
-  ].join("\n");
-}
-function renderNudgeExplainer(phase) {
-  const p3 = PRESETS[phase];
-  const lines = [];
-  lines.push(``);
-  lines.push(`Nudge preset for "${phase}" phase:`);
-  lines.push(`  - max ${p3.maxProactivePerSession} proactive prompts per session`);
-  lines.push(`  - ${p3.dismissCooldownHours}h cooldown after a dismissal`);
-  lines.push(`  - suppress permanently after ${p3.suppressAfterDismissals} consecutive dismissals`);
-  if (p3.pageDwellMinutes > 0) lines.push(`  - fire page-dwell trigger after ${p3.pageDwellMinutes} continuous minutes on a route`);
-  if (p3.firstSessionSeconds > 0) lines.push(`  - welcome new users with a button pulse ${p3.firstSessionSeconds}s after init`);
-  lines.push(`  - signals enabled: ${[
-    p3.rageClick && "rage-click",
-    p3.longTask && "long-task",
-    p3.apiCascade && "api-cascade",
-    p3.errorBoundary && "error-boundary"
-  ].filter(Boolean).join(", ")}`);
-  lines.push(`  - feature-request card: ${p3.featureRequestCard ? "shown" : "hidden"}`);
-  lines.push(`  - beta-mode UI: ${p3.betaMode ? "on" : "off"}`);
-  lines.push(``);
-  return lines.join("\n");
-}
+// src/commands/fix.ts
+function registerFixCommands(program2) {
+  const fixCmd = program2.command("fix").description("Dispatch an agentic fix for a report");
+  fixCmd.argument("<reportId>", "Report UUID to fix").option(
+    "--agent <name>",
+    "Agent adapter: claude_code (default), cursor_cloud, codex, mcp",
+    "claude_code"
+  ).option(
+    "--model <slug>",
+    "Model override for cursor_cloud (e.g. composer-latest)"
+  ).option(
+    "--no-auto-pr",
+    "For cursor_cloud: skip automatic PR creation (branch only)"
+  ).option(
+    "--wait",
+    "Poll until terminal state and exit non-zero on error/cancelled (CI-friendly)"
+  ).option("-e, --endpoint <url>", "API endpoint (overrides MUSHI_API_ENDPOINT)").option("--api-key <key>", "API key (overrides MUSHI_API_KEY)").option("--project-id <id>", "Project ID (overrides MUSHI_PROJECT_ID)").addHelpText("after", `
+Examples:
+  mushi fix abc123 --agent cursor_cloud --wait
+  mushi fix abc123 --agent cursor_cloud --model composer-latest --no-auto-pr
+  mushi fix abc123 --agent claude_code
 
-// src/doctor.ts
-function checkCliConfig(config) {
-  return [
-    {
-      name: "CLI config file",
-      ok: Boolean(config.endpoint),
-      detail: config.endpoint ? `endpoint=${config.endpoint}` : "No endpoint \u2014 set MUSHI_API_ENDPOINT, run `mushi connect`, or `mushi config endpoint <url>`"
-    },
-    {
-      name: "API key configured",
-      ok: Boolean(config.apiKey),
-      detail: config.apiKey ? `apiKey=${config.apiKey.slice(0, 8)}\u2026${config.apiKey.slice(-4)}` : "No API key set \u2014 run `mushi login --api-key <key>`"
-    },
-    {
-      name: "Project ID configured",
-      ok: Boolean(config.projectId),
-      detail: config.projectId ? `projectId=${config.projectId}` : "No default project \u2014 set via `mushi config projectId <uuid>`"
-    }
-  ];
-}
-async function checkEndpointReachability(endpoint, doFetch = globalThis.fetch) {
-  try {
-    const safeEndpoint = sanitizeEndpoint(endpoint);
-    const res = await doFetch(`${safeEndpoint}/health`, {
-      signal: AbortSignal.timeout(5e3)
-    });
-    return {
-      name: "Endpoint reachable",
-      ok: res.status === 200,
-      detail: `GET ${safeEndpoint}/health \u2192 ${res.status}`
+  # CI: fail the pipeline if the fix errors
+  mushi fix $REPORT_ID --agent cursor_cloud --wait && echo "Fix PR opened"`).action(async (reportId, opts) => {
+    const cfg = loadConfig();
+    if (opts.endpoint) cfg.endpoint = opts.endpoint;
+    if (opts.apiKey) cfg.apiKey = opts.apiKey;
+    if (opts.projectId) cfg.projectId = opts.projectId;
+    const isTTY = process.stdout.isTTY;
+    const emitEvent = (type, data) => {
+      if (isTTY) {
+        const ts = (/* @__PURE__ */ new Date()).toISOString();
+        console.log(`[${ts}] ${type}`, JSON.stringify(data));
+      } else {
+        process.stdout.write(JSON.stringify({ type, ...data }) + "\n");
+      }
     };
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    return { name: "Endpoint reachable", ok: false, detail: `Fetch failed: ${msg}` };
-  }
-}
-async function checkSdkInstall(cwd) {
-  try {
-    const { readFile: readFile2 } = await import("fs/promises");
-    const { join: join5, resolve: resolve3 } = await import("path");
-    const root = resolve3(cwd);
-    const pkgPath = join5(root, "package.json");
-    const pkg = JSON.parse(await readFile2(pkgPath, "utf8"));
-    const deps = { ...pkg.dependencies ?? {}, ...pkg.devDependencies ?? {} };
-    const sdks = [
-      "@mushi-mushi/react",
-      "@mushi-mushi/web",
-      "@mushi-mushi/core",
-      "@mushi-mushi/react-native"
-    ];
-    const installed2 = sdks.filter((s) => deps[s]);
-    return {
-      name: "SDK installed in this repo",
-      ok: installed2.length > 0,
-      detail: installed2.length > 0 ? installed2.map((s) => `${s}@${deps[s]}`).join(", ") : "No @mushi-mushi/* package in package.json \u2014 run `mushi init` to install"
+    emitEvent("dispatch.start", { reportId, agent: opts.agent, model: opts.model ?? null });
+    const body = {
+      reportId,
+      projectId: cfg.projectId,
+      agent: opts.agent
     };
-  } catch {
-    return null;
-  }
-}
-async function checkServerPreflight(config, doFetch = globalThis.fetch) {
-  if (!config.projectId || !config.apiKey || !config.endpoint) {
-    return [
-      {
-        name: "Server preflight",
-        ok: false,
-        detail: "Need projectId, apiKey, and endpoint. Run `mushi login` and `mushi config projectId <uuid>`."
-      }
-    ];
-  }
-  try {
-    const { endpoint, apiKey, projectId } = sanitizeCliCredentials(config);
-    const res = await doFetch(
-      `${endpoint}/v1/admin/projects/${projectId}/preflight`,
-      {
-        headers: apiKeyHeaders(apiKey, projectId),
-        signal: AbortSignal.timeout(8e3)
-      }
-    );
-    if (res.ok) {
-      const body = await res.json();
-      const serverChecks = body.data?.checks ?? [];
-      return serverChecks.map((sc) => ({
-        name: `[server] ${sc.label}`,
-        ok: sc.ready,
-        detail: sc.ready ? "" : sc.hint
-      }));
+    if (opts.agent === "cursor_cloud") {
+      if (opts.model) body.cursorModel = opts.model;
+      if (!opts.autoPr) body.cursorAutoCreatePR = false;
     }
-    if (res.status === 403) {
-      let errCode;
-      try {
-        const body = await res.json();
-        errCode = body?.error?.code;
-      } catch {
-      }
-      if (errCode === "INSUFFICIENT_SCOPE") {
-        return [
-          {
-            name: "Server preflight",
-            ok: true,
-            detail: "Skipped \u2014 your key has report:write scope only (pre-Jun 2026 key). Run `mushi login --upgrade-scope` to get mcp:read and unlock admin checks."
-          }
-        ];
-      }
+    const result = await apiCall("/v1/admin/fixes/dispatch", cfg, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body)
+    });
+    if (!result.ok) {
+      console.error("Error dispatching fix:", result.error.message);
+      process.exit(1);
     }
-    const text2 = await res.text().catch(() => "");
-    return [
-      {
-        name: "Server preflight",
-        ok: false,
-        detail: `HTTP ${res.status}: ${text2.slice(0, 120)}`
-      }
-    ];
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    return [{ name: "Server preflight", ok: false, detail: `Fetch failed: ${msg}` }];
-  }
-}
-async function checkIngestSetup(config, doFetch = globalThis.fetch) {
-  if (!config.apiKey || !config.endpoint) {
-    return [
-      {
-        name: "Ingest setup",
-        ok: false,
-        detail: "Need apiKey and endpoint. Run `mushi connect`."
-      }
-    ];
-  }
-  try {
-    const data = await fetchIngestSetup(
-      { endpoint: config.endpoint, apiKey: config.apiKey, projectId: config.projectId },
-      doFetch
-    );
-    if (!data) {
-      return [{ name: "Ingest setup", ok: false, detail: "Request to /v1/sync/ingest-setup failed or returned invalid payload" }];
+    const { fixId, status, agentId, runId, prUrl } = result.data;
+    emitEvent("dispatch.ok", { fixId, status, agentId, runId, prUrl });
+    if (!opts.wait) {
+      process.exit(0);
     }
-    const steps = data.steps ?? [];
-    const checks = steps.filter((s) => s.required).map((s) => ({
-      name: `[ingest] ${s.label}`,
-      ok: s.complete,
-      detail: s.complete ? "" : s.hint ?? ""
-    }));
-    const diag = data.diagnostic;
-    if (diag?.last_sdk_seen_at) {
-      checks.push({
-        name: "[ingest] Last SDK heartbeat",
-        ok: true,
-        detail: `${diag.last_sdk_seen_at}${diag.last_sdk_endpoint_host ? ` @ ${diag.last_sdk_endpoint_host}` : ""}`
-      });
+    if (!fixId) {
+      console.error("No fixId returned \u2014 cannot poll.");
+      process.exit(1);
     }
-    return checks.length > 0 ? checks : [{ name: "Ingest setup", ok: false, detail: "Empty response from /v1/sync/ingest-setup" }];
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    return [{ name: "Ingest setup", ok: false, detail: `Fetch failed: ${msg}` }];
-  }
-}
-async function checkQaStoriesHealth(config, doFetch = globalThis.fetch) {
-  if (!config.projectId || !config.apiKey || !config.endpoint) {
-    return [
-      {
-        name: "QA stories health",
-        ok: false,
-        detail: "Need projectId, apiKey, and endpoint for QA story checks."
+    const POLL_MS = 5e3;
+    const MAX_POLLS = 120;
+    const TERMINAL = /* @__PURE__ */ new Set(["completed", "failed", "error", "cancelled", "skipped", "skipped_unsupported_agent", "skipped_no_sandbox"]);
+    for (let i = 0; i < MAX_POLLS; i++) {
+      await new Promise((r) => setTimeout(r, POLL_MS));
+      const pollResult = await apiCall(
+        `/v1/admin/fixes/${fixId}`,
+        cfg
+      );
+      if (!pollResult.ok) {
+        emitEvent("poll.error", { error: pollResult.error.message });
+        continue;
       }
-    ];
-  }
-  const checks = [];
-  try {
-    const { endpoint, apiKey, projectId } = sanitizeCliCredentials(config);
-    const headers = apiKeyHeaders(apiKey, projectId);
-    const storiesRes = await doFetch(
-      `${endpoint}/v1/admin/projects/${projectId}/qa-coverage`,
-      {
-        headers,
-        signal: AbortSignal.timeout(8e3)
+      const s = pollResult.data.status;
+      emitEvent("fix.status", { status: s, pr_url: pollResult.data.pr_url, cursor_agent_id: pollResult.data.cursor_agent_id });
+      if (s && TERMINAL.has(s)) {
+        const success = s === "completed";
+        if (!success) {
+          console.error(`Fix ended with status: ${s}${pollResult.data.error ? ` \u2014 ${pollResult.data.error}` : ""}`);
+          process.exit(1);
+        }
+        process.exit(0);
       }
-    );
-    if (!storiesRes.ok) {
-      checks.push({ name: "[qa] Fetch QA stories", ok: false, detail: `HTTP ${storiesRes.status}` });
-      return checks;
     }
-    const storiesBody = await storiesRes.json();
-    const stories = storiesBody.data?.coverage ?? [];
-    const enabled = stories.filter((s) => s.enabled);
-    if (enabled.length === 0) {
-      checks.push({ name: "[qa] Enabled QA stories", ok: true, detail: "No enabled stories \u2014 create one at /qa-coverage" });
-      return checks;
+    console.error("Polling timed out after 10 minutes. The fix may still be running.");
+    process.exit(1);
+  });
+  const fixes = program2.command("fixes").description("Fix dispatch management");
+  fixes.command("tail").description(
+    "Stream SSE dispatch events for a report in real time. Useful for headless debugging without opening the browser."
+  ).requiredOption("--report-id <id>", "Report ID to follow").action(async (opts) => {
+    const config = loadConfig();
+    if (!config.apiKey) {
+      console.error("Run `mushi login` first");
+      process.exit(1);
     }
-    checks.push({
-      name: "[qa] Enabled QA stories",
-      ok: true,
-      detail: `${enabled.length} enabled story/stories configured`
-    });
-    const slackRes = await doFetch(
-      `${endpoint}/v1/admin/projects/${projectId}/integrations/probe/slack`,
-      {
-        method: "POST",
-        headers,
-        signal: AbortSignal.timeout(6e3)
-      }
-    );
-    const slackBody = slackRes.ok ? await slackRes.json() : null;
-    const slackOk = slackBody?.status === "ok";
-    checks.push({
-      name: "[qa] Slack notifications configured",
-      ok: slackOk,
-      detail: slackOk ? "Slack connected \u2014 failures will notify your channel" : "Slack not connected \u2014 you won't be notified when stories fail. Visit /integrations \u2192 Add to Slack."
-    });
-    const fcRes = await doFetch(
-      `${endpoint}/v1/admin/projects/${projectId}/integrations/probe/firecrawl`,
-      {
-        method: "POST",
-        headers,
-        signal: AbortSignal.timeout(6e3)
-      }
-    );
-    const fcBody = fcRes.ok ? await fcRes.json() : null;
-    const hasFirecrawlStories = enabled.some(
-      (s) => !s.browser_provider || s.browser_provider === "firecrawl_actions"
-    );
-    if (hasFirecrawlStories) {
-      const fcOk = fcBody?.status === "ok";
-      checks.push({
-        name: "[qa] Firecrawl API key configured",
-        ok: fcOk,
-        detail: fcOk ? "Firecrawl key is resolvable \u2014 stories will run without Unauthorized errors" : "No Firecrawl key found \u2014 enabled stories using firecrawl_actions will 401. Add a key at /integrations \u2192 BYOK keys."
-      });
+    if (!config.endpoint) {
+      console.error("No endpoint configured. Run `mushi init`");
+      process.exit(1);
     }
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    checks.push({ name: "[qa] QA stories health", ok: false, detail: `Fetch failed: ${msg}` });
-  }
-  return checks;
-}
-async function checkHostAppWiring(cwd) {
-  const checks = [];
-  try {
-    const { readFile: readFile2, access } = await import("fs/promises");
-    const { join: join5, resolve: resolve3 } = await import("path");
-    const root = resolve3(cwd);
-    const pkgPath = join5(root, "package.json");
-    const pkg = JSON.parse(await readFile2(pkgPath, "utf8"));
-    const deps = { ...pkg.dependencies ?? {}, ...pkg.devDependencies ?? {} };
-    const isCapHybrid = Boolean(deps["@capacitor/core"] && deps["react"]);
-    const envCandidates = [".env.local", ".env"];
-    let envContent = "";
-    for (const f of envCandidates) {
-      try {
-        envContent = await readFile2(join5(root, f), "utf8");
-        break;
-      } catch {
+    const url = `${config.endpoint}/v1/admin/reports/${opts.reportId}/dispatch/stream`;
+    console.log(`Tailing dispatch stream for report ${opts.reportId}\u2026`);
+    console.log(`(Ctrl-C to stop)
+`);
+    const res = await fetch(url, {
+      headers: {
+        "Authorization": `Bearer ${config.apiKey}`,
+        "X-Mushi-Api-Key": config.apiKey,
+        "X-Mushi-Project": config.projectId ?? "",
+        "Accept": "text/event-stream"
       }
-    }
-    const hasProjectId = /VITE_MUSHI_PROJECT_ID=|NEXT_PUBLIC_MUSHI_PROJECT_ID=|MUSHI_PROJECT_ID=/.test(envContent);
-    const hasApiKey = /VITE_MUSHI_API_KEY=|NEXT_PUBLIC_MUSHI_API_KEY=|MUSHI_API_KEY=/.test(envContent);
-    checks.push({
-      name: "[host] Mushi env vars in .env.local",
-      ok: hasProjectId && hasApiKey,
-      detail: hasProjectId && hasApiKey ? "VITE_/MUSHI_ project id + API key found" : "Run `mushi connect --write-env` or add VITE_MUSHI_PROJECT_ID + VITE_MUSHI_API_KEY"
     });
-    let mcpPresent = false;
-    try {
-      await access(join5(root, ".cursor", "mcp.json"));
-      mcpPresent = true;
-    } catch {
+    if (!res.ok || !res.body) {
+      console.error(`Failed to connect: HTTP ${res.status}`);
+      const text2 = await res.text().catch(() => "");
+      if (text2) console.error(text2.slice(0, 300));
+      process.exit(1);
     }
-    checks.push({
-      name: "[host] Cursor MCP config",
-      ok: mcpPresent,
-      detail: mcpPresent ? ".cursor/mcp.json present" : "Run `mushi connect` to wire MCP for two-way reporter replies"
+    const decoder = new TextDecoder();
+    const reader = res.body.getReader();
+    let done = false;
+    process.on("SIGINT", () => {
+      done = true;
+      void reader.cancel();
+      console.log("\nDisconnected.");
+      process.exit(0);
+    });
+    while (!done) {
+      const { value, done: streamDone } = await reader.read();
+      if (streamDone) break;
+      const chunk = decoder.decode(value, { stream: true });
+      for (const line of chunk.split("\n")) {
+        if (line.startsWith("data: ")) {
+          const raw = line.slice(6).trim();
+          if (raw === "[DONE]") {
+            console.log("\n[stream ended]");
+            process.exit(0);
+          }
+          try {
+            const event = JSON.parse(raw);
+            const ts = (/* @__PURE__ */ new Date()).toISOString();
+            const type = event.type ?? event.event ?? "event";
+            const status = event.status ?? event.data ?? "";
+            console.log(`${ts}  ${type.padEnd(24)}  ${status}`);
+          } catch {
+            console.log(line);
+          }
+        } else if (line.startsWith("event: ")) {
+        } else if (line && !line.startsWith(":")) {
+          console.log(line);
+        }
+      }
+    }
+  });
+  fixes.command("merge <fixId>").description(
+    "Squash-merge the fix PR on GitHub and mark the report Fixed (same as console merge)"
+  ).option(
+    "--method <method>",
+    "GitHub merge method: squash (default), merge, or rebase",
+    "squash"
+  ).option("--json", "Machine-readable JSON output").action(async (fixId, opts) => {
+    const config = loadConfig();
+    if (!config.apiKey) {
+      console.error("Run `mushi login` first");
+      process.exit(1);
+    }
+    if (!config.endpoint) {
+      console.error("No endpoint configured. Run `mushi init`");
+      process.exit(1);
+    }
+    const method = opts.method;
+    if (!["squash", "merge", "rebase"].includes(method)) {
+      console.error("--method must be squash, merge, or rebase");
+      process.exit(1);
+    }
+    const result = await apiCall(`/v1/admin/fixes/${fixId}/merge`, config, {
+      method: "POST",
+      body: JSON.stringify({ mergeMethod: method })
+    });
+    if (!result.ok) {
+      if (opts.json) {
+        console.log(JSON.stringify({ ok: false, error: result.error }, null, 2));
+      } else {
+        console.error("Merge failed:", result.error.message);
+      }
+      process.exit(1);
+    }
+    const data = result.data ?? {};
+    if (opts.json) {
+      console.log(JSON.stringify({ ok: true, ...data }, null, 2));
+      return;
+    }
+    if (data.alreadyMerged) {
+      console.log(`PR was already merged. Report status: ${data.reportStatus ?? "unknown"}`);
+    } else {
+      console.log(`Merged successfully. Report status: ${data.reportStatus ?? "fixed"}`);
+    }
+  });
+  fixes.command("refresh-ci <fixId>").description("Pull latest GitHub Actions check-run status for a fix attempt (on-demand ci-sync)").option("--json", "Machine-readable JSON output").action(async (fixId, opts) => {
+    const config = loadConfig();
+    if (!config.apiKey) {
+      console.error("Run `mushi login` first");
+      process.exit(1);
+    }
+    if (!config.endpoint) {
+      console.error("No endpoint configured. Run `mushi init`");
+      process.exit(1);
+    }
+    const result = await apiCall(`/v1/admin/fixes/${fixId}/refresh-ci`, config, { method: "POST" });
+    if (!result.ok) {
+      if (opts.json) {
+        console.log(JSON.stringify({ ok: false, error: result.error }, null, 2));
+      } else {
+        console.error("CI refresh failed:", result.error.message);
+      }
+      process.exit(1);
+    }
+    const data = result.data ?? {};
+    if (opts.json) {
+      console.log(JSON.stringify({ ok: true, ...data }, null, 2));
+      return;
+    }
+    const status = data.check_run_status ?? "unknown";
+    const conclusion = data.check_run_conclusion ?? "\u2014";
+    const updated = data.check_run_updated_at ? new Date(data.check_run_updated_at).toISOString() : "\u2014";
+    console.log(`CI status: ${status} \xB7 conclusion: ${conclusion} \xB7 updated: ${updated}`);
+  });
+}
+
+// src/nudge.ts
+var PRESETS = {
+  // Alpha: noisy is OK because there are very few users and you need
+  // signal yesterday. Show all triggers, short cooldowns.
+  alpha: {
+    maxProactivePerSession: 3,
+    dismissCooldownHours: 6,
+    suppressAfterDismissals: 5,
+    pageDwellMinutes: 3,
+    firstSessionSeconds: 30,
+    rageClick: true,
+    longTask: true,
+    apiCascade: true,
+    errorBoundary: true,
+    betaMode: true,
+    featureRequestCard: true
+  },
+  // Beta: most apps spend the longest here. Conservative cadence so
+  // we don't poison the well, but every trigger still on.
+  beta: {
+    maxProactivePerSession: 2,
+    dismissCooldownHours: 24,
+    suppressAfterDismissals: 3,
+    pageDwellMinutes: 5,
+    firstSessionSeconds: 45,
+    rageClick: true,
+    longTask: true,
+    apiCascade: true,
+    errorBoundary: true,
+    betaMode: true,
+    featureRequestCard: true
+  },
+  // GA / production: only the technical signals (error boundary, rage
+  // click). No page-dwell, no welcome — those are explicitly beta-only
+  // patterns. Feature-request card still on because it's user-initiated.
+  ga: {
+    maxProactivePerSession: 1,
+    dismissCooldownHours: 168,
+    suppressAfterDismissals: 2,
+    pageDwellMinutes: 0,
+    firstSessionSeconds: 0,
+    rageClick: true,
+    longTask: false,
+    apiCascade: true,
+    errorBoundary: true,
+    betaMode: false,
+    featureRequestCard: true
+  }
+};
+function renderNudgeSnippet(opts) {
+  const p3 = { ...PRESETS[opts.phase], ...opts.overrides };
+  const dwellMs = p3.pageDwellMinutes > 0 ? `${p3.pageDwellMinutes} * 60 * 1000` : null;
+  const firstMs = p3.firstSessionSeconds > 0 ? `${p3.firstSessionSeconds} * 1000` : null;
+  const proactiveLines = [];
+  if (p3.rageClick) proactiveLines.push(`    rageClick: true,`);
+  if (p3.longTask) proactiveLines.push(`    longTask: true,`);
+  if (p3.apiCascade) proactiveLines.push(`    apiCascade: true,`);
+  if (p3.errorBoundary) proactiveLines.push(`    errorBoundary: true,`);
+  if (dwellMs) proactiveLines.push(`    pageDwell: { thresholdMs: ${dwellMs} }, // ${p3.pageDwellMinutes}min on the same route`);
+  if (firstMs) proactiveLines.push(`    firstSession: { delayMs: ${firstMs} }, // welcome new users after ${p3.firstSessionSeconds}s`);
+  proactiveLines.push(`    cooldown: {`);
+  proactiveLines.push(`      maxProactivePerSession: ${p3.maxProactivePerSession},`);
+  proactiveLines.push(`      dismissCooldownHours: ${p3.dismissCooldownHours},`);
+  proactiveLines.push(`      suppressAfterDismissals: ${p3.suppressAfterDismissals},`);
+  proactiveLines.push(`    },`);
+  const widgetLines = [];
+  if (p3.featureRequestCard) widgetLines.push(`    featureRequestCard: true,`);
+  if (p3.betaMode) {
+    widgetLines.push(`    betaMode: {`);
+    widgetLines.push(`      enabled: true,`);
+    widgetLines.push(`      label: 'BETA',`);
+    widgetLines.push(`      // changelogItems: [{ version: '1.0.0', date: '${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}', items: ['Fixed login timeout on slow networks'] }],`);
+    widgetLines.push(`    },`);
+  }
+  return [
+    `// Generated by \`mushi nudge --phase ${opts.phase}\``,
+    `// Phase: ${opts.phase} \u2014 tune via --max, --cooldown, --dwell, --welcome.`,
+    `Mushi.init({`,
+    `  projectId: process.env.MUSHI_PROJECT_ID!,`,
+    `  apiKey: process.env.MUSHI_API_KEY!,`,
+    `  proactive: {`,
+    ...proactiveLines,
+    `  },`,
+    ...widgetLines.length ? [`  widget: {`, ...widgetLines, `  },`] : [],
+    `})`,
+    ``
+  ].join("\n");
+}
+function renderNudgeExplainer(phase) {
+  const p3 = PRESETS[phase];
+  const lines = [];
+  lines.push(``);
+  lines.push(`Nudge preset for "${phase}" phase:`);
+  lines.push(`  - max ${p3.maxProactivePerSession} proactive prompts per session`);
+  lines.push(`  - ${p3.dismissCooldownHours}h cooldown after a dismissal`);
+  lines.push(`  - suppress permanently after ${p3.suppressAfterDismissals} consecutive dismissals`);
+  if (p3.pageDwellMinutes > 0) lines.push(`  - fire page-dwell trigger after ${p3.pageDwellMinutes} continuous minutes on a route`);
+  if (p3.firstSessionSeconds > 0) lines.push(`  - welcome new users with a button pulse ${p3.firstSessionSeconds}s after init`);
+  lines.push(`  - signals enabled: ${[
+    p3.rageClick && "rage-click",
+    p3.longTask && "long-task",
+    p3.apiCascade && "api-cascade",
+    p3.errorBoundary && "error-boundary"
+  ].filter(Boolean).join(", ")}`);
+  lines.push(`  - feature-request card: ${p3.featureRequestCard ? "shown" : "hidden"}`);
+  lines.push(`  - beta-mode UI: ${p3.betaMode ? "on" : "off"}`);
+  lines.push(``);
+  return lines.join("\n");
+}
+
+// src/commands/nudge.ts
+function registerNudgeCommand(program2) {
+  program2.command("nudge").description(
+    "Generate a Mushi.init() snippet tuned for your release phase (alpha, beta, ga). Customises proactive triggers, cooldowns, feature-request card, and beta-mode UI."
+  ).option("--phase <phase>", "Release phase: alpha | beta | ga", "beta").option("--explain", "Print a human-readable summary of what the preset does").option("--max <n>", "Override maxProactivePerSession").option("--cooldown <hours>", "Override dismissCooldownHours").option("--dwell <minutes>", "Override page-dwell threshold (0 disables)").option("--welcome <seconds>", "Override first-session welcome delay (0 disables)").action((opts) => {
+    const validPhases = ["alpha", "beta", "ga"];
+    if (!validPhases.includes(opts.phase)) {
+      console.error(`Unknown phase "${opts.phase}". Use one of: ${validPhases.join(", ")}`);
+      process.exit(1);
+    }
+    const phase = opts.phase;
+    const overrides = {};
+    const parseNumericFlag = (flag, raw, min) => {
+      const n = Number(raw);
+      if (!Number.isFinite(n) || n < min) {
+        console.error(
+          `error: --${flag} must be a finite number >= ${min} (got "${raw}")`
+        );
+        process.exit(1);
+      }
+      return n;
+    };
+    if (opts.max !== void 0) overrides.maxProactivePerSession = parseNumericFlag("max", opts.max, 1);
+    if (opts.cooldown !== void 0) overrides.dismissCooldownHours = parseNumericFlag("cooldown", opts.cooldown, 0);
+    if (opts.dwell !== void 0) overrides.pageDwellMinutes = parseNumericFlag("dwell", opts.dwell, 0);
+    if (opts.welcome !== void 0) overrides.firstSessionSeconds = parseNumericFlag("welcome", opts.welcome, 0);
+    if (opts.explain) {
+      console.log(renderNudgeExplainer(phase));
+    }
+    console.log(renderNudgeSnippet({ phase, overrides }));
+  });
+}
+
+// src/upgrade.ts
+import { resolve as resolve2 } from "path";
+import { execSync } from "child_process";
+var SAFE_NPM_VERSION = /^\d+\.\d+\.\d+(-[\w.]+)?$/;
+var MUSHI_PACKAGES = [
+  "@mushi-mushi/web",
+  "@mushi-mushi/core",
+  "@mushi-mushi/react",
+  "@mushi-mushi/react-native",
+  "@mushi-mushi/capacitor",
+  "@mushi-mushi/node",
+  "@mushi-mushi/cli"
+];
+async function planUpgrade(cwd) {
+  const root = resolve2(cwd);
+  const pkg = readPackageJson(root);
+  const pm = detectPackageManager(root);
+  const deps = {
+    ...pkg?.dependencies ?? {},
+    ...pkg?.devDependencies ?? {}
+  };
+  const installed2 = MUSHI_PACKAGES.filter((name) => deps[name]);
+  const entries = await Promise.all(
+    installed2.map(async (name) => {
+      const current = deps[name] ?? "";
+      const currentCore = current.replace(/^[\^~>=<]*/, "");
+      if (!/^\d/.test(currentCore)) {
+        return { name, current, latest: null, willUpgrade: false };
+      }
+      const freshness = await checkFreshness(name, currentCore, {
+        timeoutMs: 4e3,
+        ignoreOptOut: true
+      });
+      const latest = freshness?.latest ?? null;
+      const safeLatest = latest && SAFE_NPM_VERSION.test(latest) ? latest : null;
+      const willUpgrade = Boolean(freshness?.isOutdated && safeLatest);
+      return {
+        name,
+        current,
+        latest: safeLatest,
+        willUpgrade,
+        migrateToWeb: name === "@mushi-mushi/react" && willUpgrade
+      };
+    })
+  );
+  const toBump = entries.filter((e) => e.willUpgrade && e.latest).map((e) => `${e.name}@${e.latest}`);
+  return {
+    cwd: root,
+    packageManager: pm,
+    entries,
+    installCmd: toBump.length > 0 ? installCommand(pm, toBump) : null
+  };
+}
+async function runUpgrade(opts = {}) {
+  const plan = await planUpgrade(opts.cwd ?? process.cwd());
+  if (plan.entries.length === 0) {
+    return {
+      plan,
+      upgraded: false,
+      message: "No @mushi-mushi/* packages in package.json \u2014 run `mushi init` first."
+    };
+  }
+  if (!plan.installCmd) {
+    const semverEntries = plan.entries.filter((e) => /\d/.test(e.current));
+    const allChecksFailed = semverEntries.length > 0 && semverEntries.every((e) => e.latest === null);
+    return {
+      plan,
+      upgraded: false,
+      message: allChecksFailed ? "Could not reach the npm registry to check for updates \u2014 try again in a moment." : "All installed Mushi packages are already at the latest stable version."
+    };
+  }
+  if (opts.dryRun) {
+    return { plan, upgraded: false, message: `[dry-run] Would run: ${plan.installCmd}` };
+  }
+  try {
+    execSync(plan.installCmd, { cwd: plan.cwd, stdio: "inherit", env: process.env });
+  } catch {
+    return {
+      plan,
+      upgraded: false,
+      message: `Install command failed \u2014 fix the error above or run it manually:
+  ${plan.installCmd}`
+    };
+  }
+  const reactEntry = plan.entries.find((e) => e.migrateToWeb);
+  const migrateNote = reactEntry ? "\nNote: @mushi-mushi/react is legacy \u2014 prefer @mushi-mushi/web for Vite/Capacitor/SPA apps." : "";
+  return {
+    plan,
+    upgraded: true,
+    message: `Upgraded Mushi SDK packages.
+  ${plan.installCmd}${migrateNote}`
+  };
+}
+
+// src/commands/upgrade-cli.ts
+function registerUpgradeCommand(program2) {
+  program2.command("upgrade").description("Bump installed @mushi-mushi/* packages to the latest stable npm release").option("--cwd <path>", "Target repo (default: cwd)").option("--dry-run", "Print the install command without running it").option("--json", "Machine-readable plan + result").addHelpText("after", `
+Examples:
+  mushi upgrade
+  mushi upgrade --dry-run
+  mushi upgrade --cwd ../glot.it`).action(async (opts) => {
+    const result = await runUpgrade({ cwd: opts.cwd, dryRun: opts.dryRun, json: opts.json });
+    if (opts.json) {
+      console.log(JSON.stringify(result, null, 2));
+    } else {
+      console.log(result.message);
+      for (const e of result.plan.entries) {
+        const tag = e.willUpgrade && e.latest ? `\u2192 v${e.latest}` : "(current)";
+        console.log(`  ${e.name}@${e.current} ${tag}`);
+      }
+    }
+    if (!result.upgraded && result.plan.entries.some((e) => e.willUpgrade) && !opts.dryRun) {
+      process.exit(1);
+    }
+    if (result.plan.entries.length === 0) process.exit(1);
+  });
+}
+
+// src/commands/connect-cli.ts
+function registerConnectCommand(program2) {
+  program2.command("connect").description("Save credentials, merge env vars, wire Cursor MCP, optionally wait for SDK heartbeat").option("--api-key <key>", "Mushi API key (mushi_\u2026) \u2014 or set MUSHI_API_KEY to keep it out of shell history").requiredOption("--project-id <id>", "Project UUID").requiredOption("--endpoint <url>", "Supabase edge function URL").option("--cwd <path>", "Target repo").option("--write-env", "Force-write SDK env vars to .env.local (default; overrides --no-env)").option("--wire-ide", "Force-wire Cursor MCP into .cursor/mcp.json (default; overrides --no-ide)").option("--no-env", "Skip writing .env.local").option("--no-ide", "Skip writing .cursor/mcp.json").option("--wait", "Poll ingest-setup until SDK heartbeat lands").option("--wait-timeout <sec>", "Max seconds for --wait", "120").option("--json", "Machine-readable output").addHelpText("after", `
+Examples:
+  MUSHI_API_KEY=mushi_xxx mushi connect --project-id <uuid> --endpoint https://<ref>.supabase.co/functions/v1/api --wait
+  mushi connect --api-key mushi_xxx --project-id <uuid> --endpoint <url> --no-ide`).action(async (opts) => {
+    const apiKey = process.env.MUSHI_API_KEY ?? opts.apiKey;
+    if (!apiKey) {
+      console.error("Provide the API key via the MUSHI_API_KEY env var (recommended) or --api-key <key>.");
+      process.exit(1);
+    }
+    const result = await runConnect({
+      apiKey,
+      projectId: opts.projectId,
+      endpoint: opts.endpoint,
+      cwd: opts.cwd,
+      writeEnv: opts.writeEnv === true ? true : opts.env !== false,
+      wireIde: opts.wireIde === true ? true : opts.ide !== false,
+      wait: opts.wait,
+      waitTimeoutSec: parseInt(opts.waitTimeout, 10) || 120,
+      json: opts.json
+    });
+    if (opts.json) {
+      console.log(JSON.stringify(result, null, 2));
+    } else {
+      for (const line of result.messages) console.log(line);
+    }
+    if (!result.ok) process.exit(1);
+  });
+}
+
+// src/doctor.ts
+function checkCliConfig(config) {
+  return [
+    {
+      name: "CLI config file",
+      ok: Boolean(config.endpoint),
+      detail: config.endpoint ? `endpoint=${config.endpoint}` : "No endpoint \u2014 set MUSHI_API_ENDPOINT, run `mushi connect`, or `mushi config endpoint <url>`"
+    },
+    {
+      name: "API key configured",
+      ok: Boolean(config.apiKey),
+      detail: config.apiKey ? `apiKey=${config.apiKey.slice(0, 8)}\u2026${config.apiKey.slice(-4)}` : "No API key set \u2014 run `mushi login --api-key <key>`"
+    },
+    {
+      name: "Project ID configured",
+      ok: Boolean(config.projectId),
+      detail: config.projectId ? `projectId=${config.projectId}` : "No default project \u2014 set via `mushi config projectId <uuid>`"
+    }
+  ];
+}
+async function checkEndpointReachability(endpoint, doFetch = globalThis.fetch) {
+  try {
+    const safeEndpoint = sanitizeEndpoint(endpoint);
+    const res = await doFetch(`${safeEndpoint}/health`, {
+      signal: AbortSignal.timeout(5e3)
+    });
+    return {
+      name: "Endpoint reachable",
+      ok: res.status === 200,
+      detail: `GET ${safeEndpoint}/health \u2192 ${res.status}`
+    };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return { name: "Endpoint reachable", ok: false, detail: `Fetch failed: ${msg}` };
+  }
+}
+async function checkSdkInstall(cwd) {
+  try {
+    const { readFile: readFile3 } = await import("fs/promises");
+    const { join: join5, resolve: resolve3 } = await import("path");
+    const root = resolve3(cwd);
+    const pkgPath = join5(root, "package.json");
+    const pkg = JSON.parse(await readFile3(pkgPath, "utf8"));
+    const deps = { ...pkg.dependencies ?? {}, ...pkg.devDependencies ?? {} };
+    const sdks = [
+      "@mushi-mushi/react",
+      "@mushi-mushi/web",
+      "@mushi-mushi/core",
+      "@mushi-mushi/react-native"
+    ];
+    const installed2 = sdks.filter((s) => deps[s]);
+    return {
+      name: "SDK installed in this repo",
+      ok: installed2.length > 0,
+      detail: installed2.length > 0 ? installed2.map((s) => `${s}@${deps[s]}`).join(", ") : "No @mushi-mushi/* package in package.json \u2014 run `mushi init` to install"
+    };
+  } catch {
+    return null;
+  }
+}
+async function checkServerPreflight(config, doFetch = globalThis.fetch) {
+  if (!config.projectId || !config.apiKey || !config.endpoint) {
+    return [
+      {
+        name: "Server preflight",
+        ok: false,
+        detail: "Need projectId, apiKey, and endpoint. Run `mushi login` and `mushi config projectId <uuid>`."
+      }
+    ];
+  }
+  try {
+    const { endpoint, apiKey, projectId } = sanitizeCliCredentials(config);
+    const res = await doFetch(
+      `${endpoint}/v1/admin/projects/${projectId}/preflight`,
+      {
+        headers: apiKeyHeaders(apiKey, projectId),
+        signal: AbortSignal.timeout(8e3)
+      }
+    );
+    if (res.ok) {
+      const body = await res.json();
+      const serverChecks = body.data?.checks ?? [];
+      return serverChecks.map((sc) => ({
+        name: `[server] ${sc.label}`,
+        ok: sc.ready,
+        detail: sc.ready ? "" : sc.hint
+      }));
+    }
+    if (res.status === 403) {
+      let errCode;
+      try {
+        const body = await res.json();
+        errCode = body?.error?.code;
+      } catch {
+      }
+      if (errCode === "INSUFFICIENT_SCOPE") {
+        return [
+          {
+            name: "Server preflight",
+            ok: true,
+            detail: "Skipped \u2014 your key has report:write scope only (pre-Jun 2026 key). Run `mushi login --upgrade-scope` to get mcp:read and run admin checks."
+          }
+        ];
+      }
+    }
+    const text2 = await res.text().catch(() => "");
+    return [
+      {
+        name: "Server preflight",
+        ok: false,
+        detail: `HTTP ${res.status}: ${text2.slice(0, 120)}`
+      }
+    ];
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return [{ name: "Server preflight", ok: false, detail: `Fetch failed: ${msg}` }];
+  }
+}
+async function checkIngestSetup(config, doFetch = globalThis.fetch) {
+  if (!config.apiKey || !config.endpoint) {
+    return [
+      {
+        name: "Ingest setup",
+        ok: false,
+        detail: "Need apiKey and endpoint. Run `mushi connect`."
+      }
+    ];
+  }
+  try {
+    const data = await fetchIngestSetup(
+      { endpoint: config.endpoint, apiKey: config.apiKey, projectId: config.projectId },
+      doFetch
+    );
+    if (!data) {
+      return [{ name: "Ingest setup", ok: false, detail: "Request to /v1/sync/ingest-setup failed or returned invalid payload" }];
+    }
+    const steps = data.steps ?? [];
+    const checks = steps.filter((s) => s.required).map((s) => ({
+      name: `[ingest] ${s.label}`,
+      ok: s.complete,
+      detail: s.complete ? "" : s.hint ?? ""
+    }));
+    const diag = data.diagnostic;
+    if (diag?.last_sdk_seen_at) {
+      checks.push({
+        name: "[ingest] Last SDK heartbeat",
+        ok: true,
+        detail: `${diag.last_sdk_seen_at}${diag.last_sdk_endpoint_host ? ` @ ${diag.last_sdk_endpoint_host}` : ""}`
+      });
+    }
+    return checks.length > 0 ? checks : [{ name: "Ingest setup", ok: false, detail: "Empty response from /v1/sync/ingest-setup" }];
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return [{ name: "Ingest setup", ok: false, detail: `Fetch failed: ${msg}` }];
+  }
+}
+async function checkQaStoriesHealth(config, doFetch = globalThis.fetch) {
+  if (!config.projectId || !config.apiKey || !config.endpoint) {
+    return [
+      {
+        name: "QA stories health",
+        ok: false,
+        detail: "Need projectId, apiKey, and endpoint for QA story checks."
+      }
+    ];
+  }
+  const checks = [];
+  try {
+    const { endpoint, apiKey, projectId } = sanitizeCliCredentials(config);
+    const headers = apiKeyHeaders(apiKey, projectId);
+    const storiesRes = await doFetch(
+      `${endpoint}/v1/admin/projects/${projectId}/qa-coverage`,
+      {
+        headers,
+        signal: AbortSignal.timeout(8e3)
+      }
+    );
+    if (!storiesRes.ok) {
+      checks.push({ name: "[qa] Fetch QA stories", ok: false, detail: `HTTP ${storiesRes.status}` });
+      return checks;
+    }
+    const storiesBody = await storiesRes.json();
+    const stories = storiesBody.data?.coverage ?? [];
+    const enabled = stories.filter((s) => s.enabled);
+    if (enabled.length === 0) {
+      checks.push({ name: "[qa] Enabled QA stories", ok: true, detail: "No enabled stories \u2014 create one at /qa-coverage" });
+      return checks;
+    }
+    checks.push({
+      name: "[qa] Enabled QA stories",
+      ok: true,
+      detail: `${enabled.length} enabled story/stories configured`
+    });
+    const slackRes = await doFetch(
+      `${endpoint}/v1/admin/projects/${projectId}/integrations/probe/slack`,
+      {
+        method: "POST",
+        headers,
+        signal: AbortSignal.timeout(6e3)
+      }
+    );
+    const slackBody = slackRes.ok ? await slackRes.json() : null;
+    const slackOk = slackBody?.status === "ok";
+    checks.push({
+      name: "[qa] Slack notifications configured",
+      ok: slackOk,
+      detail: slackOk ? "Slack connected \u2014 failures will notify your channel" : "Slack not connected \u2014 you won't be notified when stories fail. Visit /integrations \u2192 Add to Slack."
+    });
+    const fcRes = await doFetch(
+      `${endpoint}/v1/admin/projects/${projectId}/integrations/probe/firecrawl`,
+      {
+        method: "POST",
+        headers,
+        signal: AbortSignal.timeout(6e3)
+      }
+    );
+    const fcBody = fcRes.ok ? await fcRes.json() : null;
+    const hasFirecrawlStories = enabled.some(
+      (s) => !s.browser_provider || s.browser_provider === "firecrawl_actions"
+    );
+    if (hasFirecrawlStories) {
+      const fcOk = fcBody?.status === "ok";
+      checks.push({
+        name: "[qa] Firecrawl API key configured",
+        ok: fcOk,
+        detail: fcOk ? "Firecrawl key is resolvable \u2014 stories will run without Unauthorized errors" : "No Firecrawl key found \u2014 enabled stories using firecrawl_actions will 401. Add a key at /integrations \u2192 BYOK keys."
+      });
+    }
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    checks.push({ name: "[qa] QA stories health", ok: false, detail: `Fetch failed: ${msg}` });
+  }
+  return checks;
+}
+async function checkHostAppWiring(cwd) {
+  const checks = [];
+  try {
+    const { readFile: readFile3, access } = await import("fs/promises");
+    const { join: join5, resolve: resolve3 } = await import("path");
+    const root = resolve3(cwd);
+    const pkgPath = join5(root, "package.json");
+    const pkg = JSON.parse(await readFile3(pkgPath, "utf8"));
+    const deps = { ...pkg.dependencies ?? {}, ...pkg.devDependencies ?? {} };
+    const isCapHybrid = Boolean(deps["@capacitor/core"] && deps["react"]);
+    const envCandidates = [".env.local", ".env"];
+    let envContent = "";
+    for (const f of envCandidates) {
+      try {
+        envContent = await readFile3(join5(root, f), "utf8");
+        break;
+      } catch {
+      }
+    }
+    const hasProjectId = /VITE_MUSHI_PROJECT_ID=|NEXT_PUBLIC_MUSHI_PROJECT_ID=|MUSHI_PROJECT_ID=/.test(envContent);
+    const hasApiKey = /VITE_MUSHI_API_KEY=|NEXT_PUBLIC_MUSHI_API_KEY=|MUSHI_API_KEY=/.test(envContent);
+    checks.push({
+      name: "[host] Mushi env vars in .env.local",
+      ok: hasProjectId && hasApiKey,
+      detail: hasProjectId && hasApiKey ? "VITE_/MUSHI_ project id + API key found" : "Run `mushi connect --write-env` or add VITE_MUSHI_PROJECT_ID + VITE_MUSHI_API_KEY"
+    });
+    let mcpPresent = false;
+    try {
+      await access(join5(root, ".cursor", "mcp.json"));
+      mcpPresent = true;
+    } catch {
+    }
+    checks.push({
+      name: "[host] Cursor MCP config",
+      ok: mcpPresent,
+      detail: mcpPresent ? ".cursor/mcp.json present" : "Run `mushi connect` to wire MCP for two-way reporter replies"
     });
     if (isCapHybrid) {
       const hasWebSdk = Boolean(deps["@mushi-mushi/web"] || deps["@mushi-mushi/react"]);
@@ -3264,7 +3731,7 @@ async function checkHostAppWiring(cwd) {
 }
 async function checkMcpConfig(config, cwd, doFetch = globalThis.fetch) {
   const checks = [];
-  const { readFile: readFile2 } = await import("fs/promises");
+  const { readFile: readFile3 } = await import("fs/promises");
   const { join: join5, resolve: resolve3 } = await import("path");
   const { homedir } = await import("os");
   const root = resolve3(cwd);
@@ -3276,7 +3743,7 @@ async function checkMcpConfig(config, cwd, doFetch = globalThis.fetch) {
   let mcpRaw = null;
   for (const candidate of candidates) {
     try {
-      const raw = await readFile2(candidate, "utf8");
+      const raw = await readFile3(candidate, "utf8");
       let parsed = {};
       try {
         parsed = JSON.parse(raw);
@@ -3386,451 +3853,189 @@ async function checkMcpConfig(config, cwd, doFetch = globalThis.fetch) {
         ok: false,
         detail: `Probe failed: ${msg}. Check MUSHI_API_ENDPOINT and network connectivity.`
       });
-    }
-  }
-  return checks;
-}
-var FIX_HINTS = {
-  "CLI config file": "Run `mushi connect --endpoint <url> --project-id <uuid> --api-key mushi_xxx` or `mushi config endpoint <url>`.",
-  "API key configured": "Mint a key in the console (Projects \u2192 API Keys) then `mushi login --api-key mushi_xxx`.",
-  "Project ID configured": "Copy the project UUID from the console Projects page \u2192 `mushi config projectId <uuid>`.",
-  "Endpoint reachable": "Check your network and that MUSHI_API_ENDPOINT points at `\u2026/functions/v1/api`.",
-  "[ingest]": "Open the console Onboarding wizard \u2192 Install SDK \u2192 submit a test report, or run `mushi connect --wait`.",
-  "[server]": "Open Settings \u2192 Integrations: connect GitHub, index codebase, add Anthropic BYOK key, enable autofix.",
-  "[mcp]": "Run `mushi setup` to regenerate .cursor/mcp.json with a fresh API key and endpoint."
-};
-function fixHintForCheck(name) {
-  if (FIX_HINTS[name]) return FIX_HINTS[name];
-  if (name.startsWith("[ingest]")) return FIX_HINTS["[ingest]"];
-  if (name.startsWith("[server]") || name.startsWith("[preflight]")) return FIX_HINTS["[server]"];
-  if (name.startsWith("[mcp]")) return FIX_HINTS["[mcp]"];
-  return void 0;
-}
-async function checkOnboardingStatus(config, _consoleBase, cwd, doFetch = globalThis.fetch) {
-  if (!config.apiKey || !config.projectId || !config.endpoint) {
-    if (config.apiKey && config.endpoint) {
-      return {
-        nextAction: "Select or create a project: run `mushi project create` or pick one with `mushi project list`",
-        ctaPath: "/onboarding?tab=steps&setup=cli",
-        done: false
-      };
-    }
-    return {
-      nextAction: "Sign in to Mushi: run `npx mushi-mushi` (browser opens automatically \u2014 do NOT type the code in the terminal)",
-      ctaPath: "/onboarding?tab=steps&setup=cli",
-      done: false
-    };
-  }
-  try {
-    const { readFile: readFile2 } = await import("fs/promises");
-    const { join: join5, resolve: resolve3 } = await import("path");
-    const root = resolve3(cwd);
-    let envContent = "";
-    for (const f of [".env.local", ".env"]) {
-      try {
-        envContent = await readFile2(join5(root, f), "utf8");
-        break;
-      } catch {
-      }
-    }
-    const hasEnvVars = /(?:VITE_|NEXT_PUBLIC_|EXPO_PUBLIC_|NUXT_PUBLIC_)?MUSHI_PROJECT_ID=/.test(envContent);
-    if (!hasEnvVars) {
-      return {
-        nextAction: "Write env vars to your app: run `npx mushi-mushi` or `mushi connect --write-env`",
-        ctaPath: "/onboarding?tab=sdk",
-        done: false
-      };
-    }
-  } catch {
-  }
-  try {
-    const sdkCheck = await checkSdkInstall(cwd);
-    if (sdkCheck && !sdkCheck.ok) {
-      return {
-        nextAction: `Install the Mushi SDK: ${sdkCheck.detail}`,
-        ctaPath: "/onboarding?tab=sdk",
-        done: false
-      };
-    }
-  } catch {
-  }
-  try {
-    const data = await fetchIngestSetup(
-      { endpoint: config.endpoint, apiKey: config.apiKey, projectId: config.projectId },
-      doFetch
-    );
-    if (data) {
-      const steps = data.steps ?? [];
-      const incomplete = steps.find((s) => s.required && !s.complete);
-      if (incomplete) {
-        const tabMap = {
-          project_created: "/onboarding?tab=steps&setup=cli",
-          api_key_generated: "/onboarding?tab=verify",
-          sdk_installed: "/onboarding?tab=sdk",
-          first_report_received: "/onboarding?tab=verify"
-        };
-        const tab = tabMap[incomplete.id] ?? "/onboarding?tab=verify";
-        return {
-          nextAction: incomplete.hint ?? `Complete setup step: ${incomplete.label}`,
-          ctaPath: tab,
-          done: false
-        };
-      }
-      return {
-        nextAction: "All 4 required setup steps are complete! Open the console to explore.",
-        ctaPath: "/reports",
-        done: true
-      };
-    }
-  } catch {
-  }
-  return {
-    nextAction: "Open the onboarding wizard in the console to check your setup status.",
-    ctaPath: "/onboarding",
-    done: false
-  };
-}
-async function runDoctor(config, options = {}) {
-  const doFetch = options.fetch ?? globalThis.fetch;
-  const checks = [];
-  const isFull = options.full === true;
-  const runServer = isFull || options.server !== false;
-  const runIngest = isFull || options.ingest !== false;
-  checks.push(...checkCliConfig(config));
-  if (config.endpoint) {
-    checks.push(await checkEndpointReachability(config.endpoint, doFetch));
-  }
-  const sdkCheck = await checkSdkInstall(options.cwd ?? process.cwd());
-  if (sdkCheck) checks.push(sdkCheck);
-  if (runServer) {
-    const serverChecks = await checkServerPreflight(config, doFetch);
-    checks.push(...serverChecks);
-  }
-  if (runIngest) {
-    const ingestChecks = await checkIngestSetup(config, doFetch);
-    checks.push(...ingestChecks);
-  }
-  if (isFull || options.qaStories) {
-    const qaChecks = await checkQaStoriesHealth(config, doFetch);
-    checks.push(...qaChecks);
-  }
-  if (isFull || options.hostApp) {
-    const hostChecks = await checkHostAppWiring(options.cwd ?? process.cwd());
-    checks.push(...hostChecks);
-  }
-  if (isFull || options.mcp) {
-    const mcpChecks = await checkMcpConfig(config, options.cwd ?? process.cwd(), doFetch);
-    checks.push(...mcpChecks);
-  }
-  const heartbeatPassed = checks.some((c) => c.name === "[ingest] Last SDK heartbeat" && c.ok);
-  if (heartbeatPassed) {
-    const idx = checks.findIndex((c) => c.name === "SDK installed in this repo" && !c.ok);
-    if (idx >= 0) {
-      checks[idx] = {
-        ...checks[idx],
-        ok: true,
-        warn: true,
-        detail: "No @mushi-mushi/* found in cwd package.json \u2014 but live heartbeats confirm the SDK is active. Run from your app repo or install with `mushi init`."
-      };
-    }
-  }
-  return { checks, ready: checks.every((c) => c.ok) };
-}
-function formatDoctorResult(result) {
-  const PASS = "\u2713";
-  const WARN = "\u26A0";
-  const FAIL = "\u2717";
-  const lines = [];
-  for (const c of result.checks) {
-    const icon = !c.ok ? FAIL : c.warn ? WARN : PASS;
-    lines.push(`${icon} ${c.name}`);
-    if (c.detail) lines.push(`  ${c.detail}`);
-    if (!c.ok) {
-      const hint = fixHintForCheck(c.name);
-      if (hint) lines.push(`  \u2192 Fix: ${hint}`);
-    }
-  }
-  const failed = result.checks.filter((c) => !c.ok);
-  const warned = result.checks.filter((c) => c.ok && c.warn);
-  if (failed.length === 0) {
-    if (warned.length > 0) {
-      lines.push(`
-All checks passed with ${warned.length} advisory warning${warned.length === 1 ? "" : "s"}. The CLI is ready.`);
-    } else {
-      lines.push("\nAll checks passed. The CLI is ready.");
-    }
-  } else {
-    lines.push(`
-${failed.length} check${failed.length === 1 ? "" : "s"} failed.`);
-    lines.push("Fix the items above and re-run `mushi doctor`.");
-  }
-  return lines.join("\n");
-}
-
-// src/upgrade.ts
-import { resolve as resolve2 } from "path";
-import { execSync } from "child_process";
-var SAFE_NPM_VERSION = /^\d+\.\d+\.\d+(-[\w.]+)?$/;
-var MUSHI_PACKAGES = [
-  "@mushi-mushi/web",
-  "@mushi-mushi/core",
-  "@mushi-mushi/react",
-  "@mushi-mushi/react-native",
-  "@mushi-mushi/capacitor",
-  "@mushi-mushi/node",
-  "@mushi-mushi/cli"
-];
-async function planUpgrade(cwd) {
-  const root = resolve2(cwd);
-  const pkg = readPackageJson(root);
-  const pm = detectPackageManager(root);
-  const deps = {
-    ...pkg?.dependencies ?? {},
-    ...pkg?.devDependencies ?? {}
-  };
-  const installed2 = MUSHI_PACKAGES.filter((name) => deps[name]);
-  const entries = await Promise.all(
-    installed2.map(async (name) => {
-      const current = deps[name] ?? "";
-      const currentCore = current.replace(/^[\^~>=<]*/, "");
-      if (!/^\d/.test(currentCore)) {
-        return { name, current, latest: null, willUpgrade: false };
-      }
-      const freshness = await checkFreshness(name, currentCore, {
-        timeoutMs: 4e3,
-        ignoreOptOut: true
-      });
-      const latest = freshness?.latest ?? null;
-      const safeLatest = latest && SAFE_NPM_VERSION.test(latest) ? latest : null;
-      const willUpgrade = Boolean(freshness?.isOutdated && safeLatest);
+    }
+  }
+  return checks;
+}
+var FIX_HINTS = {
+  "CLI config file": "Run `mushi connect --endpoint <url> --project-id <uuid> --api-key mushi_xxx` or `mushi config endpoint <url>`.",
+  "API key configured": "Mint a key in the console (Projects \u2192 API Keys) then `mushi login --api-key mushi_xxx`.",
+  "Project ID configured": "Copy the project UUID from the console Projects page \u2192 `mushi config projectId <uuid>`.",
+  "Endpoint reachable": "Check your network and that MUSHI_API_ENDPOINT points at `\u2026/functions/v1/api`.",
+  "[ingest]": "Open the console Onboarding wizard \u2192 Install SDK \u2192 submit a test report, or run `mushi connect --wait`.",
+  "[server]": "Open Settings \u2192 Integrations: connect GitHub, index codebase, add Anthropic BYOK key, enable autofix.",
+  "[mcp]": "Run `mushi setup` to regenerate .cursor/mcp.json with a fresh API key and endpoint."
+};
+function fixHintForCheck(name) {
+  if (FIX_HINTS[name]) return FIX_HINTS[name];
+  if (name.startsWith("[ingest]")) return FIX_HINTS["[ingest]"];
+  if (name.startsWith("[server]") || name.startsWith("[preflight]")) return FIX_HINTS["[server]"];
+  if (name.startsWith("[mcp]")) return FIX_HINTS["[mcp]"];
+  return void 0;
+}
+async function checkOnboardingStatus(config, _consoleBase, cwd, doFetch = globalThis.fetch) {
+  if (!config.apiKey || !config.projectId || !config.endpoint) {
+    if (config.apiKey && config.endpoint) {
       return {
-        name,
-        current,
-        latest: safeLatest,
-        willUpgrade,
-        migrateToWeb: name === "@mushi-mushi/react" && willUpgrade
+        nextAction: "Select or create a project: run `mushi project create` or pick one with `mushi project list`",
+        ctaPath: "/onboarding?tab=steps&setup=cli",
+        done: false
       };
-    })
-  );
-  const toBump = entries.filter((e) => e.willUpgrade && e.latest).map((e) => `${e.name}@${e.latest}`);
-  return {
-    cwd: root,
-    packageManager: pm,
-    entries,
-    installCmd: toBump.length > 0 ? installCommand(pm, toBump) : null
-  };
-}
-async function runUpgrade(opts = {}) {
-  const plan = await planUpgrade(opts.cwd ?? process.cwd());
-  if (plan.entries.length === 0) {
-    return {
-      plan,
-      upgraded: false,
-      message: "No @mushi-mushi/* packages in package.json \u2014 run `mushi init` first."
-    };
-  }
-  if (!plan.installCmd) {
-    const semverEntries = plan.entries.filter((e) => /\d/.test(e.current));
-    const allChecksFailed = semverEntries.length > 0 && semverEntries.every((e) => e.latest === null);
+    }
     return {
-      plan,
-      upgraded: false,
-      message: allChecksFailed ? "Could not reach the npm registry to check for updates \u2014 try again in a moment." : "All installed Mushi packages are already at the latest stable version."
+      nextAction: "Sign in to Mushi: run `npx mushi-mushi` (browser opens automatically \u2014 do NOT type the code in the terminal)",
+      ctaPath: "/onboarding?tab=steps&setup=cli",
+      done: false
     };
   }
-  if (opts.dryRun) {
-    return { plan, upgraded: false, message: `[dry-run] Would run: ${plan.installCmd}` };
-  }
   try {
-    execSync(plan.installCmd, { cwd: plan.cwd, stdio: "inherit", env: process.env });
-  } catch {
-    return {
-      plan,
-      upgraded: false,
-      message: `Install command failed \u2014 fix the error above or run it manually:
-  ${plan.installCmd}`
-    };
-  }
-  const reactEntry = plan.entries.find((e) => e.migrateToWeb);
-  const migrateNote = reactEntry ? "\nNote: @mushi-mushi/react is legacy \u2014 prefer @mushi-mushi/web for Vite/Capacitor/SPA apps." : "";
-  return {
-    plan,
-    upgraded: true,
-    message: `Upgraded Mushi SDK packages.
-  ${plan.installCmd}${migrateNote}`
-  };
-}
-
-// src/commands/fix.ts
-function registerFixCommands(program2) {
-  const fixCmd = program2.command("fix").description("Dispatch an agentic fix for a report");
-  fixCmd.argument("<reportId>", "Report UUID to fix").option(
-    "--agent <name>",
-    "Agent adapter: claude_code (default), cursor_cloud, codex, mcp",
-    "claude_code"
-  ).option(
-    "--model <slug>",
-    "Model override for cursor_cloud (e.g. composer-latest)"
-  ).option(
-    "--no-auto-pr",
-    "For cursor_cloud: skip automatic PR creation (branch only)"
-  ).option(
-    "--wait",
-    "Poll until terminal state and exit non-zero on error/cancelled (CI-friendly)"
-  ).option("-e, --endpoint <url>", "API endpoint (overrides MUSHI_API_ENDPOINT)").option("--api-key <key>", "API key (overrides MUSHI_API_KEY)").option("--project-id <id>", "Project ID (overrides MUSHI_PROJECT_ID)").addHelpText("after", `
-Examples:
-  mushi fix abc123 --agent cursor_cloud --wait
-  mushi fix abc123 --agent cursor_cloud --model composer-latest --no-auto-pr
-  mushi fix abc123 --agent claude_code
-
-  # CI: fail the pipeline if the fix errors
-  mushi fix $REPORT_ID --agent cursor_cloud --wait && echo "Fix PR opened"`).action(async (reportId, opts) => {
-    const cfg = loadConfig();
-    if (opts.endpoint) cfg.endpoint = opts.endpoint;
-    if (opts.apiKey) cfg.apiKey = opts.apiKey;
-    if (opts.projectId) cfg.projectId = opts.projectId;
-    const isTTY = process.stdout.isTTY;
-    const emitEvent = (type, data) => {
-      if (isTTY) {
-        const ts = (/* @__PURE__ */ new Date()).toISOString();
-        console.log(`[${ts}] ${type}`, JSON.stringify(data));
-      } else {
-        process.stdout.write(JSON.stringify({ type, ...data }) + "\n");
-      }
-    };
-    emitEvent("dispatch.start", { reportId, agent: opts.agent, model: opts.model ?? null });
-    const body = {
-      reportId,
-      projectId: cfg.projectId,
-      agent: opts.agent
-    };
-    if (opts.agent === "cursor_cloud") {
-      if (opts.model) body.cursorModel = opts.model;
-      if (!opts.autoPr) body.cursorAutoCreatePR = false;
-    }
-    const result = await apiCall("/v1/admin/fixes/dispatch", cfg, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(body)
-    });
-    if (!result.ok) {
-      console.error("Error dispatching fix:", result.error.message);
-      process.exit(1);
-    }
-    const { fixId, status, agentId, runId, prUrl } = result.data;
-    emitEvent("dispatch.ok", { fixId, status, agentId, runId, prUrl });
-    if (!opts.wait) {
-      process.exit(0);
-    }
-    if (!fixId) {
-      console.error("No fixId returned \u2014 cannot poll.");
-      process.exit(1);
-    }
-    const POLL_MS = 5e3;
-    const MAX_POLLS = 120;
-    const TERMINAL = /* @__PURE__ */ new Set(["completed", "failed", "error", "cancelled", "skipped", "skipped_unsupported_agent", "skipped_no_sandbox"]);
-    for (let i = 0; i < MAX_POLLS; i++) {
-      await new Promise((r) => setTimeout(r, POLL_MS));
-      const pollResult = await apiCall(
-        `/v1/admin/fixes/${fixId}`,
-        cfg
-      );
-      if (!pollResult.ok) {
-        emitEvent("poll.error", { error: pollResult.error.message });
-        continue;
-      }
-      const s = pollResult.data.status;
-      emitEvent("fix.status", { status: s, pr_url: pollResult.data.pr_url, cursor_agent_id: pollResult.data.cursor_agent_id });
-      if (s && TERMINAL.has(s)) {
-        const success = s === "completed";
-        if (!success) {
-          console.error(`Fix ended with status: ${s}${pollResult.data.error ? ` \u2014 ${pollResult.data.error}` : ""}`);
-          process.exit(1);
-        }
-        process.exit(0);
+    const { readFile: readFile3 } = await import("fs/promises");
+    const { join: join5, resolve: resolve3 } = await import("path");
+    const root = resolve3(cwd);
+    let envContent = "";
+    for (const f of [".env.local", ".env"]) {
+      try {
+        envContent = await readFile3(join5(root, f), "utf8");
+        break;
+      } catch {
       }
     }
-    console.error("Polling timed out after 10 minutes. The fix may still be running.");
-    process.exit(1);
-  });
-  program2.command("nudge").description(
-    "Generate a Mushi.init() snippet tuned for your release phase (alpha, beta, ga). Customises proactive triggers, cooldowns, feature-request card, and beta-mode UI."
-  ).option("--phase <phase>", "Release phase: alpha | beta | ga", "beta").option("--explain", "Print a human-readable summary of what the preset does").option("--max <n>", "Override maxProactivePerSession").option("--cooldown <hours>", "Override dismissCooldownHours").option("--dwell <minutes>", "Override page-dwell threshold (0 disables)").option("--welcome <seconds>", "Override first-session welcome delay (0 disables)").action((opts) => {
-    const validPhases = ["alpha", "beta", "ga"];
-    if (!validPhases.includes(opts.phase)) {
-      console.error(`Unknown phase "${opts.phase}". Use one of: ${validPhases.join(", ")}`);
-      process.exit(1);
+    const hasEnvVars = /(?:VITE_|NEXT_PUBLIC_|EXPO_PUBLIC_|NUXT_PUBLIC_)?MUSHI_PROJECT_ID=/.test(envContent);
+    if (!hasEnvVars) {
+      return {
+        nextAction: "Write env vars to your app: run `npx mushi-mushi` or `mushi connect --write-env`",
+        ctaPath: "/onboarding?tab=sdk",
+        done: false
+      };
     }
-    const phase = opts.phase;
-    const overrides = {};
-    const parseNumericFlag = (flag, raw, min) => {
-      const n = Number(raw);
-      if (!Number.isFinite(n) || n < min) {
-        console.error(
-          `error: --${flag} must be a finite number >= ${min} (got "${raw}")`
-        );
-        process.exit(1);
-      }
-      return n;
-    };
-    if (opts.max !== void 0) overrides.maxProactivePerSession = parseNumericFlag("max", opts.max, 1);
-    if (opts.cooldown !== void 0) overrides.dismissCooldownHours = parseNumericFlag("cooldown", opts.cooldown, 0);
-    if (opts.dwell !== void 0) overrides.pageDwellMinutes = parseNumericFlag("dwell", opts.dwell, 0);
-    if (opts.welcome !== void 0) overrides.firstSessionSeconds = parseNumericFlag("welcome", opts.welcome, 0);
-    if (opts.explain) {
-      console.log(renderNudgeExplainer(phase));
+  } catch {
+  }
+  try {
+    const sdkCheck = await checkSdkInstall(cwd);
+    if (sdkCheck && !sdkCheck.ok) {
+      return {
+        nextAction: `Install the Mushi SDK: ${sdkCheck.detail}`,
+        ctaPath: "/onboarding?tab=sdk",
+        done: false
+      };
     }
-    console.log(renderNudgeSnippet({ phase, overrides }));
-  });
-  program2.command("upgrade").description("Bump installed @mushi-mushi/* packages to the latest stable npm release").option("--cwd <path>", "Target repo (default: cwd)").option("--dry-run", "Print the install command without running it").option("--json", "Machine-readable plan + result").addHelpText("after", `
-Examples:
-  mushi upgrade
-  mushi upgrade --dry-run
-  mushi upgrade --cwd ../glot.it`).action(async (opts) => {
-    const result = await runUpgrade({ cwd: opts.cwd, dryRun: opts.dryRun, json: opts.json });
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
-    } else {
-      console.log(result.message);
-      for (const e of result.plan.entries) {
-        const tag = e.willUpgrade && e.latest ? `\u2192 v${e.latest}` : "(current)";
-        console.log(`  ${e.name}@${e.current} ${tag}`);
+  } catch {
+  }
+  try {
+    const data = await fetchIngestSetup(
+      { endpoint: config.endpoint, apiKey: config.apiKey, projectId: config.projectId },
+      doFetch
+    );
+    if (data) {
+      const steps = data.steps ?? [];
+      const incomplete = steps.find((s) => s.required && !s.complete);
+      if (incomplete) {
+        const tabMap = {
+          project_created: "/onboarding?tab=steps&setup=cli",
+          api_key_generated: "/onboarding?tab=verify",
+          sdk_installed: "/onboarding?tab=sdk",
+          first_report_received: "/onboarding?tab=verify"
+        };
+        const tab = tabMap[incomplete.id] ?? "/onboarding?tab=verify";
+        return {
+          nextAction: incomplete.hint ?? `Complete setup step: ${incomplete.label}`,
+          ctaPath: tab,
+          done: false
+        };
       }
+      return {
+        nextAction: "All 4 required setup steps are complete! Open the console to explore.",
+        ctaPath: "/reports",
+        done: true
+      };
     }
-    if (!result.upgraded && result.plan.entries.some((e) => e.willUpgrade) && !opts.dryRun) {
-      process.exit(1);
+  } catch {
+  }
+  return {
+    nextAction: "Open the onboarding wizard in the console to check your setup status.",
+    ctaPath: "/onboarding",
+    done: false
+  };
+}
+async function runDoctor(config, options = {}) {
+  const doFetch = options.fetch ?? globalThis.fetch;
+  const checks = [];
+  const isFull = options.full === true;
+  const runServer = isFull || options.server !== false;
+  const runIngest = isFull || options.ingest !== false;
+  checks.push(...checkCliConfig(config));
+  if (config.endpoint) {
+    checks.push(await checkEndpointReachability(config.endpoint, doFetch));
+  }
+  const sdkCheck = await checkSdkInstall(options.cwd ?? process.cwd());
+  if (sdkCheck) checks.push(sdkCheck);
+  if (runServer) {
+    const serverChecks = await checkServerPreflight(config, doFetch);
+    checks.push(...serverChecks);
+  }
+  if (runIngest) {
+    const ingestChecks = await checkIngestSetup(config, doFetch);
+    checks.push(...ingestChecks);
+  }
+  if (isFull || options.qaStories) {
+    const qaChecks = await checkQaStoriesHealth(config, doFetch);
+    checks.push(...qaChecks);
+  }
+  if (isFull || options.hostApp) {
+    const hostChecks = await checkHostAppWiring(options.cwd ?? process.cwd());
+    checks.push(...hostChecks);
+  }
+  if (isFull || options.mcp) {
+    const mcpChecks = await checkMcpConfig(config, options.cwd ?? process.cwd(), doFetch);
+    checks.push(...mcpChecks);
+  }
+  const heartbeatPassed = checks.some((c) => c.name === "[ingest] Last SDK heartbeat" && c.ok);
+  if (heartbeatPassed) {
+    const idx = checks.findIndex((c) => c.name === "SDK installed in this repo" && !c.ok);
+    if (idx >= 0) {
+      checks[idx] = {
+        ...checks[idx],
+        ok: true,
+        warn: true,
+        detail: "No @mushi-mushi/* found in cwd package.json \u2014 but live heartbeats confirm the SDK is active. Run from your app repo or install with `mushi init`."
+      };
     }
-    if (result.plan.entries.length === 0) process.exit(1);
-  });
-  program2.command("connect").description("Save credentials, merge env vars, wire Cursor MCP, optionally wait for SDK heartbeat").option("--api-key <key>", "Mushi API key (mushi_\u2026) \u2014 or set MUSHI_API_KEY to keep it out of shell history").requiredOption("--project-id <id>", "Project UUID").requiredOption("--endpoint <url>", "Supabase edge function URL").option("--cwd <path>", "Target repo").option("--write-env", "Force-write SDK env vars to .env.local (default; overrides --no-env)").option("--wire-ide", "Force-wire Cursor MCP into .cursor/mcp.json (default; overrides --no-ide)").option("--no-env", "Skip writing .env.local").option("--no-ide", "Skip writing .cursor/mcp.json").option("--wait", "Poll ingest-setup until SDK heartbeat lands").option("--wait-timeout <sec>", "Max seconds for --wait", "120").option("--json", "Machine-readable output").addHelpText("after", `
-Examples:
-  MUSHI_API_KEY=mushi_xxx mushi connect --project-id <uuid> --endpoint https://<ref>.supabase.co/functions/v1/api --wait
-  mushi connect --api-key mushi_xxx --project-id <uuid> --endpoint <url> --no-ide`).action(async (opts) => {
-    const apiKey = process.env.MUSHI_API_KEY ?? opts.apiKey;
-    if (!apiKey) {
-      console.error("Provide the API key via the MUSHI_API_KEY env var (recommended) or --api-key <key>.");
-      process.exit(1);
+  }
+  return { checks, ready: checks.every((c) => c.ok) };
+}
+function formatDoctorResult(result) {
+  const PASS = "OK";
+  const WARN = "WARN";
+  const FAIL = "FAIL";
+  const lines = [];
+  for (const c of result.checks) {
+    const icon = !c.ok ? FAIL : c.warn ? WARN : PASS;
+    lines.push(`${icon} ${c.name}`);
+    if (c.detail) lines.push(`  ${c.detail}`);
+    if (!c.ok) {
+      const hint = fixHintForCheck(c.name);
+      if (hint) lines.push(`  \u2192 Fix: ${hint}`);
     }
-    const result = await runConnect({
-      apiKey,
-      projectId: opts.projectId,
-      endpoint: opts.endpoint,
-      cwd: opts.cwd,
-      // Explicit --write-env / --wire-ide force the action on even if --no-env /
-      // --no-ide was also passed; otherwise writing is the default.
-      writeEnv: opts.writeEnv === true ? true : opts.env !== false,
-      wireIde: opts.wireIde === true ? true : opts.ide !== false,
-      wait: opts.wait,
-      waitTimeoutSec: parseInt(opts.waitTimeout, 10) || 120,
-      json: opts.json
-    });
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
+  }
+  const failed = result.checks.filter((c) => !c.ok);
+  const warned = result.checks.filter((c) => c.ok && c.warn);
+  if (failed.length === 0) {
+    if (warned.length > 0) {
+      lines.push(`
+All checks passed with ${warned.length} advisory warning${warned.length === 1 ? "" : "s"}. The CLI is ready.`);
     } else {
-      for (const line of result.messages) console.log(line);
+      lines.push("\nAll checks passed. The CLI is ready.");
     }
-    if (!result.ok) process.exit(1);
-  });
+  } else {
+    lines.push(`
+${failed.length} check${failed.length === 1 ? "" : "s"} failed.`);
+    lines.push("Fix the items above and re-run `mushi doctor`.");
+  }
+  return lines.join("\n");
+}
+
+// src/commands/doctor-cli.ts
+function registerDoctorCommand(program2) {
   program2.command("doctor").description(
     "Run pre-flight checks: CLI config, endpoint reachability, SDK install, ingest readiness (API key \u2192 heartbeat \u2192 first report), and dispatch readiness (GitHub, index, BYOK, autofix). Ingest + server checks run by default; pass --no-server or --no-ingest to skip."
   ).option("--cwd <path>", "Run package detection from a different directory").option("--json", "Machine-readable output").option("--no-server", "Skip dispatch-readiness /preflight checks").option("--no-ingest", "Skip ingest-setup checks (SDK heartbeat, first report)").option(
@@ -3859,11 +4064,11 @@ Examples:
       const status = await checkOnboardingStatus(config, consoleBase, cwd);
       const base = consoleBase.replace(/\/$/, "");
       if (status.done) {
-        console.log(`\u2713 Setup complete. ${status.nextAction}`);
-        console.log(`  ${base}${status.ctaPath}`);
+        console.log(`OK  Setup complete. ${status.nextAction}`);
+        console.log(`    ${base}${status.ctaPath}`);
       } else {
         console.log(`\u2192 Next: ${status.nextAction}`);
-        console.log(`  Open: ${base}${status.ctaPath}`);
+        console.log(`    Open: ${base}${status.ctaPath}`);
       }
       if (!status.done) process.exit(1);
       return;
@@ -3899,6 +4104,10 @@ Examples:
     console.log(formatDoctorResult(result));
     if (!result.ready) process.exit(1);
   });
+}
+
+// src/commands/reset-cli.ts
+function registerResetCommand(program2) {
   program2.command("reset [projectId]").description(
     "Archive a project and wipe its test data (codebase_files, fix_attempts, reports). Speeds up re-running the full onboarding flow from scratch. Requires `--confirm` to prevent accidents."
   ).option("--confirm", "Required safety flag \u2014 must pass to proceed").option("--json", "Machine-readable output").action(async (projectId, opts) => {
@@ -3933,146 +4142,6 @@ Re-run with --confirm to proceed.`
       process.exit(1);
     }
   });
-  const fixes = program2.command("fixes").description("Fix dispatch management");
-  fixes.command("tail").description(
-    "Stream SSE dispatch events for a report in real time. Useful for headless debugging without opening the browser."
-  ).requiredOption("--report-id <id>", "Report ID to follow").action(async (opts) => {
-    const config = loadConfig();
-    if (!config.apiKey) {
-      console.error("Run `mushi login` first");
-      process.exit(1);
-    }
-    if (!config.endpoint) {
-      console.error("No endpoint configured. Run `mushi init`");
-      process.exit(1);
-    }
-    const url = `${config.endpoint}/v1/admin/reports/${opts.reportId}/dispatch/stream`;
-    console.log(`Tailing dispatch stream for report ${opts.reportId}\u2026`);
-    console.log(`(Ctrl-C to stop)
-`);
-    const res = await fetch(url, {
-      headers: {
-        "Authorization": `Bearer ${config.apiKey}`,
-        "X-Mushi-Api-Key": config.apiKey,
-        "X-Mushi-Project": config.projectId ?? "",
-        "Accept": "text/event-stream"
-      }
-    });
-    if (!res.ok || !res.body) {
-      console.error(`Failed to connect: HTTP ${res.status}`);
-      const text2 = await res.text().catch(() => "");
-      if (text2) console.error(text2.slice(0, 300));
-      process.exit(1);
-    }
-    const decoder = new TextDecoder();
-    const reader = res.body.getReader();
-    let done = false;
-    process.on("SIGINT", () => {
-      done = true;
-      void reader.cancel();
-      console.log("\nDisconnected.");
-      process.exit(0);
-    });
-    while (!done) {
-      const { value, done: streamDone } = await reader.read();
-      if (streamDone) break;
-      const chunk = decoder.decode(value, { stream: true });
-      for (const line of chunk.split("\n")) {
-        if (line.startsWith("data: ")) {
-          const raw = line.slice(6).trim();
-          if (raw === "[DONE]") {
-            console.log("\n[stream ended]");
-            process.exit(0);
-          }
-          try {
-            const event = JSON.parse(raw);
-            const ts = (/* @__PURE__ */ new Date()).toISOString();
-            const type = event.type ?? event.event ?? "event";
-            const status = event.status ?? event.data ?? "";
-            console.log(`${ts}  ${type.padEnd(24)}  ${status}`);
-          } catch {
-            console.log(line);
-          }
-        } else if (line.startsWith("event: ")) {
-        } else if (line && !line.startsWith(":")) {
-          console.log(line);
-        }
-      }
-    }
-  });
-  fixes.command("merge <fixId>").description(
-    "Squash-merge the fix PR on GitHub and mark the report Fixed (same as console merge)"
-  ).option(
-    "--method <method>",
-    "GitHub merge method: squash (default), merge, or rebase",
-    "squash"
-  ).option("--json", "Machine-readable JSON output").action(async (fixId, opts) => {
-    const config = loadConfig();
-    if (!config.apiKey) {
-      console.error("Run `mushi login` first");
-      process.exit(1);
-    }
-    if (!config.endpoint) {
-      console.error("No endpoint configured. Run `mushi init`");
-      process.exit(1);
-    }
-    const method = opts.method;
-    if (!["squash", "merge", "rebase"].includes(method)) {
-      console.error("--method must be squash, merge, or rebase");
-      process.exit(1);
-    }
-    const result = await apiCall(`/v1/admin/fixes/${fixId}/merge`, config, {
-      method: "POST",
-      body: JSON.stringify({ mergeMethod: method })
-    });
-    if (!result.ok) {
-      if (opts.json) {
-        console.log(JSON.stringify({ ok: false, error: result.error }, null, 2));
-      } else {
-        console.error("Merge failed:", result.error.message);
-      }
-      process.exit(1);
-    }
-    const data = result.data ?? {};
-    if (opts.json) {
-      console.log(JSON.stringify({ ok: true, ...data }, null, 2));
-      return;
-    }
-    if (data.alreadyMerged) {
-      console.log(`PR was already merged. Report status: ${data.reportStatus ?? "unknown"}`);
-    } else {
-      console.log(`Merged successfully. Report status: ${data.reportStatus ?? "fixed"}`);
-    }
-  });
-  fixes.command("refresh-ci <fixId>").description("Pull latest GitHub Actions check-run status for a fix attempt (on-demand ci-sync)").option("--json", "Machine-readable JSON output").action(async (fixId, opts) => {
-    const config = loadConfig();
-    if (!config.apiKey) {
-      console.error("Run `mushi login` first");
-      process.exit(1);
-    }
-    if (!config.endpoint) {
-      console.error("No endpoint configured. Run `mushi init`");
-      process.exit(1);
-    }
-    const result = await apiCall(`/v1/admin/fixes/${fixId}/refresh-ci`, config, { method: "POST" });
-    if (!result.ok) {
-      if (opts.json) {
-        console.log(JSON.stringify({ ok: false, error: result.error }, null, 2));
-      } else {
-        console.error("CI refresh failed:", result.error.message);
-      }
-      process.exit(1);
-    }
-    const data = result.data ?? {};
-    if (opts.json) {
-      console.log(JSON.stringify({ ok: true, ...data }, null, 2));
-      return;
-    }
-    const status = data.check_run_status ?? "unknown";
-    const conclusion = data.check_run_conclusion ?? "\u2014";
-    const updated = data.check_run_updated_at ? new Date(data.check_run_updated_at).toISOString() : "\u2014";
-    console.log(`CI status: ${status} \xB7 conclusion: ${conclusion} \xB7 updated: ${updated}`);
-  });
 }
 
 // src/commands/tdd.ts
@@ -4329,7 +4398,7 @@ function registerIntegrationsCommands(program2) {
     console.log("\nIntegrations:\n");
     for (const row of rows) {
       const icon = icons[row.kind] ?? "\u{1F50C}";
-      const statusIcon = row.status === "ok" ? "\u2705" : row.status === "error" ? "\u274C" : "\u26AA";
+      const statusIcon = row.status === "ok" ? "OK" : row.status === "error" ? "FAIL" : "SKIP";
       console.log(`  ${icon}  ${row.kind.padEnd(20)} ${statusIcon}  ${row.detail ?? ""}`);
     }
     console.log();
@@ -4361,7 +4430,7 @@ function registerIntegrationsCommands(program2) {
     }
     const probeOk = result.data?.status === "ok";
     console.log(
-      probeOk ? `\u2705  ${kind} integration is healthy${result.data.detail ? ": " + result.data.detail : ""}` : `\u274C  ${kind} integration check failed${result.data.detail ? ": " + result.data.detail : ""}`
+      probeOk ? `OK   ${kind} integration is healthy${result.data.detail ? ": " + result.data.detail : ""}` : `FAIL ${kind} integration check failed${result.data.detail ? ": " + result.data.detail : ""}`
     );
     if (!probeOk) process.exit(1);
   });
@@ -4390,11 +4459,11 @@ function registerIntegrationsCommands(program2) {
       return;
     }
     if (result.data?.status === "ok") {
-      console.log("\u2705  Slack connected");
+      console.log("OK   Slack connected");
       if (result.data.detail) console.log(`    ${result.data.detail}`);
       console.log("\n    To change the channel or notification prefs, visit /integrations in the Mushi console.");
     } else {
-      console.log("\u26AA  Slack not connected");
+      console.log("SKIP Slack not connected");
       console.log('    Visit /integrations in the Mushi console and click "Add to Slack".');
     }
   });
@@ -4422,9 +4491,9 @@ function registerIntegrationsCommands(program2) {
       return;
     }
     if (result.data?.ok) {
-      console.log("\u2705  Test message sent! Check your Slack channel.");
+      console.log("OK   Test message sent. Check your Slack channel.");
     } else {
-      console.error("\u274C  Test failed:", result.data?.error ?? "unknown error");
+      console.error("FAIL Test failed:", result.data?.error ?? "unknown error");
       process.exit(1);
     }
   });
@@ -4464,7 +4533,7 @@ function registerQaCommands(program2) {
 QA Stories (${stories.length}):
 `);
     for (const s of stories) {
-      const statusIcon = s.last_run_status === "passed" ? "\u2705" : s.last_run_status === "failed" ? "\u274C" : s.last_run_status === "error" ? "\u{1F6A8}" : "\u26AA";
+      const statusIcon = s.last_run_status === "passed" ? "PASS" : s.last_run_status === "failed" ? "FAIL" : s.last_run_status === "error" ? "ERROR" : "SKIP";
       const enabled = s.enabled ? "" : " [disabled]";
       const sid = s.story_id ?? s.id ?? "\u2014";
       console.log(`  ${statusIcon}  ${s.name.slice(0, 50).padEnd(52)}  ${sid}${enabled}`);
@@ -4505,7 +4574,7 @@ QA Stories (${stories.length}):
 Recent runs for story ${storyId.slice(0, 8)}\u2026:
 `);
     for (const r of runs) {
-      const statusIcon = r.status === "passed" ? "\u2705" : r.status === "failed" ? "\u274C" : r.status === "error" ? "\u{1F6A8}" : "\u23F3";
+      const statusIcon = r.status === "passed" ? "PASS" : r.status === "failed" ? "FAIL" : r.status === "error" ? "ERROR" : "PEND";
       const ts = r.created_at ? new Date(r.created_at).toISOString().slice(0, 16).replace("T", " ") : "\u2014";
       const latency = r.latency_ms ? ` (${(r.latency_ms / 1e3).toFixed(1)}s)` : "";
       console.log(`  ${statusIcon}  ${ts}${latency}  ${r.id.slice(0, 8)}`);
@@ -4518,7 +4587,7 @@ Recent runs for story ${storyId.slice(0, 8)}\u2026:
         }
       }
     }
-    const consoleUrl2 = config.consoleUrl ?? "https://app.mushi.ai";
+    const consoleUrl2 = config.consoleUrl ?? resolveConsoleUrlSync();
     console.log(`
    Open in console: ${consoleUrl2}/qa-coverage?story=${storyId}`);
     console.log(`   Tip: run 'mushi config consoleUrl <url>' to override (e.g. http://localhost:6464 for local dev)`);
@@ -4549,10 +4618,10 @@ Recent runs for story ${storyId.slice(0, 8)}\u2026:
     }
     const runId = result.data?.run_id;
     if (runId) {
-      console.log(`\u25B6  Run triggered: ${runId.slice(0, 8)}\u2026`);
-      console.log(`   Check results: mushi qa runs ${storyId}`);
+      console.log(`RUN  Triggered: ${runId.slice(0, 8)}\u2026`);
+      console.log(`     Check results: mushi qa runs ${storyId}`);
     } else {
-      console.error("\u274C  Trigger failed: no run_id in response", JSON.stringify(result.data));
+      console.error("FAIL Trigger failed: no run_id in response", JSON.stringify(result.data));
       process.exit(1);
     }
   });
@@ -4569,10 +4638,10 @@ Description:
     \u2022 Gate results: API contract (G3), spec drift (G6), orphan endpoints (G7),
       unknown frontend calls (G8), schema drift, status claim (G5)
 
-  Returns a PM-readable scorecard with severity-ranked findings.
+  Returns a human-readable summary with severity-ranked findings.
 
   Prerequisites:
-    1. Configure your Supabase PAT: mushi settings set supabase-pat <token>
+    1. Add your Supabase PAT in Admin \u2192 Settings \u2192 API Keys
     2. Set supabase_project_ref in Admin \u2192 Settings \u2192 Project.
 
 Examples:
@@ -4632,8 +4701,8 @@ Examples:
         return;
       }
       const data = body.data;
-      const overallGlyph = data.summary.overall === "fail" ? "\u274C" : data.summary.overall === "warn" ? "\u26A0\uFE0F " : "\u2705";
-      process.stdout.write(`${overallGlyph}
+      const overallLabel = data.summary.overall === "fail" ? "FAIL" : data.summary.overall === "warn" ? "WARN" : "OK";
+      process.stdout.write(`${overallLabel}
 
 `);
       console.log(`Full-Stack Audit \u2014 ${new Date(data.audit_at).toLocaleString()}`);
@@ -4641,18 +4710,18 @@ Examples:
       console.log(`Summary: ${data.summary.error_count} error(s) \xB7 ${data.summary.warn_count} warning(s)
 `);
       if (data.findings.length === 0) {
-        console.log("  \u2713 No findings. Your project looks healthy.");
+        console.log("  OK  No findings. Your project looks healthy.");
       } else {
         for (const f of data.findings) {
-          const icon = f.severity === "error" ? "\u{1F534}" : f.severity === "warn" ? "\u{1F7E1}" : "\u2139\uFE0F ";
-          console.log(`  ${icon} ${f.title}`);
+          const icon = f.severity === "error" ? "FAIL" : f.severity === "warn" ? "WARN" : "INFO";
+          console.log(`  ${icon}  ${f.title}`);
           console.log(`     ${f.detail.slice(0, 120)}${f.detail.length > 120 ? "\u2026" : ""}`);
         }
       }
       if (data.gate_runs.length > 0) {
         console.log("\nGate Results:");
         for (const run of data.gate_runs) {
-          const g = run.status === "pass" ? "\u2713" : run.status === "fail" ? "\u2717" : "~";
+          const g = run.status === "pass" ? "OK" : run.status === "fail" ? "FAIL" : "SKIP";
           console.log(`  ${g} ${run.gate.padEnd(22)} ${run.status}  (${run.findings_count} finding${run.findings_count !== 1 ? "s" : ""})`);
         }
       }
@@ -5053,7 +5122,7 @@ Examples:
 
 // src/index.ts
 installSignalHandlers();
-var program = new Command().name("mushi").description("Mushi Mushi CLI \u2014 set up the SDK, manage bug reports, monitor pipeline").version(MUSHI_CLI_VERSION).addHelpText("after", `
+var program = new Command().name("mushi").description("Mushi CLI \u2014 set up the SDK, triage a report, fix from your editor").version(MUSHI_CLI_VERSION).addHelpText("after", `
 Environment variables:
   MUSHI_API_KEY        SDK ingest key (report:write scope \u2014 from Onboarding \u2192 Verify in the console)
   MUSHI_PROJECT_ID     Project UUID   (from the Projects page in the console)
@@ -5076,6 +5145,11 @@ registerLessonsCommands(program);
 registerDiagnosticsCommands(program);
 registerProjectCommands(program);
 registerSetupCommands(program);
+registerNudgeCommand(program);
+registerUpgradeCommand(program);
+registerConnectCommand(program);
+registerDoctorCommand(program);
+registerResetCommand(program);
 registerFixCommands(program);
 registerTddCommands(program);
 registerKeysCommands(program);