@mushi-mushi/cli 0.24.0 → 0.25.0

package/dist/{chunk-GUVGTFVK.js → chunk-2WHQONHK.js}

@@ -1,6 +1,6 @@
 import {
   MUSHI_CLI_VERSION
-} from "./chunk-X74T7JKC.js";
+} from "./chunk-SS42XQ57.js";
 
 // src/config.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-BWASDQI6.js → chunk-3JRQN6S4.js}

@@ -116,7 +116,7 @@ function tightenDirPermissions(path) {
 }
 
 // src/version.ts
-var MUSHI_CLI_VERSION = true ? "0.24.0" : "0.0.0-dev";
+var MUSHI_CLI_VERSION = true ? "0.25.0" : "0.0.0-dev";
 
 // src/errors.ts
 var EXIT_CODE_MAP = {

package/dist/chunk-SS42XQ57.js

@@ -0,0 +1,6 @@
+// src/version.ts
+var MUSHI_CLI_VERSION = true ? "0.25.0" : "0.0.0-dev";
+
+export {
+  MUSHI_CLI_VERSION
+};

package/dist/{connect-KKN62YK2.js → connect-22IHGT2L.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runConnect
-} from "./chunk-BWASDQI6.js";
+} from "./chunk-3JRQN6S4.js";
 import "./chunk-LDPFTQLE.js";
 export {
   runConnect

package/dist/{connect-7LTQRBEW.js → connect-XFWRSEMW.js}

@@ -4,13 +4,13 @@ import {
   normalizeEndpoint,
   requireUuid,
   saveConfig
-} from "./chunk-GUVGTFVK.js";
+} from "./chunk-2WHQONHK.js";
 import {
   detectFramework,
   envVarsToWrite,
   readPackageJson
 } from "./chunk-AIZRI665.js";
-import "./chunk-X74T7JKC.js";
+import "./chunk-SS42XQ57.js";
 
 // src/connect.ts
 import { appendFile, readFile as readFile2, writeFile as writeFile2 } from "fs/promises";

package/dist/index.js

@@ -37,7 +37,7 @@ import {
   sanitizeProjectId,
   saveConfig,
   writeMcpServerEntry
-} from "./chunk-BWASDQI6.js";
+} from "./chunk-3JRQN6S4.js";
 import {
   TEST_REPORT_FETCH_TIMEOUT_MS,
   assertEndpoint,
@@ -245,28 +245,26 @@ async function createProject(endpoint, cliToken, name) {
 }
 async function mintProjectKey(endpoint, cliToken, projectId) {
   const base = trimTrailingSlash(endpoint);
-  return withOneRetry(async () => {
-    let res;
-    try {
-      res = await deviceFetch(`${base}/v1/cli/projects/${projectId}/keys`, {
-        method: "POST",
-        headers: cliAuthHeaders(cliToken),
-        body: JSON.stringify({})
-      });
-    } catch (err) {
-      throw new DeviceAuthRequestError(
-        "mint_key",
-        `Could not reach ${base}/v1/cli/projects/\u2026/keys: ${err instanceof Error ? err.message : String(err)}`
-      );
-    }
-    const json = await res.json().catch(() => null);
-    if (res.ok && json?.ok && json.data?.key) return json.data.key;
+  let res;
+  try {
+    res = await deviceFetch(`${base}/v1/cli/projects/${projectId}/keys`, {
+      method: "POST",
+      headers: cliAuthHeaders(cliToken),
+      body: JSON.stringify({})
+    });
+  } catch (err) {
     throw new DeviceAuthRequestError(
       "mint_key",
-      json?.error?.message ?? `Could not mint an SDK key (HTTP ${res.status}).`,
-      res.ok ? void 0 : res.status
+      `Could not reach ${base}/v1/cli/projects/\u2026/keys: ${err instanceof Error ? err.message : String(err)}`
     );
-  });
+  }
+  const json = await res.json().catch(() => null);
+  if (res.ok && json?.ok && json.data?.key) return json.data.key;
+  throw new DeviceAuthRequestError(
+    "mint_key",
+    json?.error?.message ?? `Could not mint an SDK key (HTTP ${res.status}).`,
+    res.status
+  );
 }
 
 // src/freshness.ts
@@ -984,7 +982,7 @@ async function maybeOfferConnect(credentials, options, _consoleBase) {
   if (p.isCancel(answer) || !answer) return;
   const endpoint = resolveCloudEndpoint(options.endpoint);
   try {
-    const { runConnect: runConnect2 } = await import("./connect-KKN62YK2.js");
+    const { runConnect: runConnect2 } = await import("./connect-22IHGT2L.js");
     await runConnect2({
       apiKey: credentials.apiKey,
       projectId: credentials.projectId,
@@ -1273,189 +1271,7 @@ Examples:
   mushi login                              # browser-guided (recommended)
   mushi login --api-key mushi_xxx         # non-interactive / CI
   mushi login --api-key mushi_xxx --project-id <uuid>
-  mushi login --upgrade-scope             # re-auth to add mcp:read + mcp:write to your key`).action(async (opts) => {
-    const { CLOUD_API_ENDPOINT, resolveCloudEndpoint: resolveCloudEndpoint2 } = await import("./endpoint-DGS73AVM.js");
-    const endpoint = opts.endpoint ? resolveCloudEndpoint2(opts.endpoint) : CLOUD_API_ENDPOINT;
-    const consoleBase = await resolveConsoleUrl();
-    let apiKey = opts.apiKey;
-    let projectId = opts.projectId;
-    if (apiKey) {
-      const config2 = loadConfig();
-      config2.apiKey = apiKey;
-      config2.endpoint = endpoint;
-      if (projectId) config2.projectId = projectId;
-      config2.consoleUrl = consoleBase;
-      saveConfig(config2);
-      console.log("");
-      console.log("  \u2713 Credentials saved.");
-      const verifyResult = await apiCall(
-        "/v1/sync/whoami",
-        { apiKey, endpoint, projectId }
-      );
-      if (!verifyResult.ok) {
-        console.warn(`  \u26A0  Key saved, but verification failed: ${verifyResult.error?.message ?? "unknown error"}`);
-        console.warn(`     Check your key at: ${cliSetupDeepLink(consoleBase)}`);
-        return;
-      }
-      const d = verifyResult.data;
-      if (d.project_name) {
-        if (!projectId && d.project_id) {
-          config2.projectId = d.project_id;
-          saveConfig(config2);
-        }
-        console.log(`  \u2713 Project: ${d.project_name} (${d.project_id})`);
-      }
-      console.log(`  \u2713 Endpoint: ${endpoint}`);
-      console.log("");
-      console.log("  Run 'mushi whoami' to verify \xB7 'mushi init' to set up the SDK");
-      return;
-    }
-    console.log("");
-    if (opts.upgradeScope) {
-      console.log("  Mushi login \u2014 scope upgrade");
-      console.log("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
-      console.log("  Re-authenticating to mint a new key with report:write + mcp:read + mcp:write scopes.");
-      console.log("  This lets the CLI admin commands (including writes) and MCP server both work with a single key.");
-      console.log("");
-    } else {
-      console.log("  Mushi login");
-      console.log("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
-    }
-    let deviceData;
-    try {
-      deviceData = await startDeviceAuth(endpoint, ensureClientId());
-    } catch (err) {
-      process.stderr.write(`
-error: Could not start login session: ${err instanceof Error ? err.message : String(err)}
-`);
-      process.stderr.write(`  Fallback: mushi login --api-key <key> --project-id <uuid>
-`);
-      process.exit(1);
-    }
-    const verifyUrl = deviceData.verification_uri;
-    if (opts.browser !== false) {
-      try {
-        await openInBrowser(verifyUrl);
-      } catch {
-      }
-    }
-    printAuthBanner(deviceData.user_code, verifyUrl);
-    let cliToken = null;
-    const pollIntervalMs = (deviceData.interval ?? 5) * 1e3;
-    const deadline = Date.now() + (deviceData.expires_in ?? 600) * 1e3;
-    const MAX_CONSECUTIVE_ERRORS = 5;
-    let consecutiveErrors = 0;
-    let firstPoll = true;
-    while (Date.now() < deadline) {
-      if (!firstPoll) {
-        await new Promise((r) => setTimeout(r, pollIntervalMs));
-      }
-      firstPoll = false;
-      const outcome = await pollDeviceToken(endpoint, deviceData.device_code);
-      if (outcome.status === "approved") {
-        cliToken = outcome.cliToken;
-        break;
-      }
-      if (outcome.status === "pending") {
-        consecutiveErrors = 0;
-        continue;
-      }
-      if (outcome.status === "error") {
-        if (outcome.retryable) {
-          consecutiveErrors += 1;
-          if (consecutiveErrors < MAX_CONSECUTIVE_ERRORS) continue;
-        }
-        printAuthFailed("error", outcome.message);
-        process.exit(1);
-      }
-      if (outcome.status === "denied") {
-        printAuthFailed("denied");
-        process.exit(1);
-      }
-      if (outcome.status === "expired") {
-        printAuthFailed("timeout");
-        process.exit(1);
-      }
-    }
-    if (!cliToken) {
-      printAuthFailed("timeout");
-      process.exit(1);
-    }
-    printAuthApproved();
-    const projectsList = await listProjects(endpoint, cliToken);
-    let chosenProjectId = projectId;
-    let chosenProjectName;
-    if (!chosenProjectId) {
-      const { createInterface } = await import("readline");
-      const rl = createInterface({ input: process.stdin, output: process.stdout });
-      const ask = (q) => new Promise((resolve3) => rl.question(q, (a) => resolve3(a.trim())));
-      if (projectsList.length > 0) {
-        console.log("");
-        console.log("  Your projects:");
-        projectsList.forEach((p3, i) => {
-          console.log(`    ${i + 1}. ${p3.name} (${p3.id})`);
-        });
-        console.log(`    ${projectsList.length + 1}. Create a new project`);
-        console.log("");
-        const choice = await ask(`  Pick a project [1-${projectsList.length + 1}]: `);
-        const num = parseInt(choice, 10);
-        if (num >= 1 && num <= projectsList.length) {
-          const picked = projectsList[num - 1];
-          chosenProjectId = picked.id;
-          chosenProjectName = picked.name;
-        }
-      }
-      if (!chosenProjectId) {
-        console.log("");
-        const newName = await ask("  Project name: ");
-        rl.close();
-        if (!newName.trim()) {
-          process.stderr.write("\nerror: Project name is required.\n");
-          process.exit(2);
-        }
-        try {
-          const created = await createProject(endpoint, cliToken, newName.trim());
-          chosenProjectId = created.id;
-          chosenProjectName = created.name;
-          apiKey = created.apiKey ?? void 0;
-          console.log(`  \u2713 Created project "${chosenProjectName}"`);
-        } catch (err) {
-          process.stderr.write(`
-error: Could not create project: ${err instanceof Error ? err.message : String(err)}
-`);
-          process.exit(1);
-        }
-      } else {
-        rl.close();
-      }
-    }
-    if (!apiKey && chosenProjectId) {
-      try {
-        apiKey = await mintProjectKey(endpoint, cliToken, chosenProjectId) ?? void 0;
-      } catch {
-      }
-    }
-    const config = loadConfig();
-    config.endpoint = endpoint;
-    config.consoleUrl = consoleBase;
-    if (chosenProjectId) config.projectId = chosenProjectId;
-    if (apiKey) config.apiKey = apiKey;
-    saveConfig(config);
-    console.log("");
-    if (chosenProjectName) console.log(`  \u2713 Project: ${chosenProjectName}`);
-    if (apiKey) {
-      console.log(`  \u2713 Full-scope CLI key saved (${apiKey.slice(0, 12)}\u2026)`);
-      console.log(`    Scopes: report:write \xB7 mcp:read \xB7 mcp:write \u2014 SDK + MCP + admin CLI (incl. writes) all work with this key`);
-    } else {
-      console.log(`  \u2139  Get an SDK key at: ${apiKeyHint(consoleBase)}`);
-    }
-    console.log("");
-    if (opts.upgradeScope) {
-      console.log("  Key upgraded! Re-run 'mushi setup' to update your .cursor/mcp.json, then restart Cursor.");
-    } else {
-      console.log("  Run 'mushi init' to set up the SDK in this project.");
-    }
-  });
+  mushi login --upgrade-scope             # re-auth to add mcp:read + mcp:write to your key`).action(runLogin);
   program2.command("whoami").description("Verify API key and display project info").option("--json", "Machine-readable JSON output").addHelpText("after", `
 Verifies that MUSHI_API_KEY is valid and shows which project it belongs to.
 Useful after 'mushi login' to confirm credentials are correct.`).action(async (opts) => {
@@ -1547,6 +1363,189 @@ Examples:
     }
   });
 }
+async function runLogin(opts) {
+  const { CLOUD_API_ENDPOINT, resolveCloudEndpoint: resolveCloudEndpoint2 } = await import("./endpoint-DGS73AVM.js");
+  const endpoint = opts.endpoint ? resolveCloudEndpoint2(opts.endpoint) : CLOUD_API_ENDPOINT;
+  const consoleBase = await resolveConsoleUrl();
+  let apiKey = opts.apiKey;
+  let projectId = opts.projectId;
+  if (apiKey) {
+    const config2 = loadConfig();
+    config2.apiKey = apiKey;
+    config2.endpoint = endpoint;
+    if (projectId) config2.projectId = projectId;
+    config2.consoleUrl = consoleBase;
+    saveConfig(config2);
+    console.log("");
+    console.log("  \u2713 Credentials saved.");
+    const verifyResult = await apiCall(
+      "/v1/sync/whoami",
+      { apiKey, endpoint, projectId }
+    );
+    if (!verifyResult.ok) {
+      console.warn(`  \u26A0  Key saved, but verification failed: ${verifyResult.error?.message ?? "unknown error"}`);
+      console.warn(`     Check your key at: ${cliSetupDeepLink(consoleBase)}`);
+      return;
+    }
+    const d = verifyResult.data;
+    if (d.project_name) {
+      if (!projectId && d.project_id) {
+        config2.projectId = d.project_id;
+        saveConfig(config2);
+      }
+      console.log(`  \u2713 Project: ${d.project_name} (${d.project_id})`);
+    }
+    console.log(`  \u2713 Endpoint: ${endpoint}`);
+    console.log("");
+    console.log("  Run 'mushi whoami' to verify \xB7 'mushi init' to set up the SDK");
+    return;
+  }
+  console.log("");
+  if (opts.upgradeScope) {
+    console.log("  Mushi login \u2014 scope upgrade");
+    console.log("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
+    console.log("  Re-authenticating to mint a new key with report:write + mcp:read + mcp:write scopes.");
+    console.log("  This lets the CLI admin commands (including writes) and MCP server both work with a single key.");
+    console.log("");
+  } else {
+    console.log("  Mushi login");
+    console.log("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
+  }
+  let deviceData;
+  try {
+    deviceData = await startDeviceAuth(endpoint, ensureClientId());
+  } catch (err) {
+    process.stderr.write(`
+error: Could not start login session: ${err instanceof Error ? err.message : String(err)}
+`);
+    process.stderr.write(`  Fallback: mushi login --api-key <key> --project-id <uuid>
+`);
+    process.exit(1);
+  }
+  const verifyUrl = deviceData.verification_uri;
+  if (opts.browser !== false) {
+    try {
+      await openInBrowser(verifyUrl);
+    } catch {
+    }
+  }
+  printAuthBanner(deviceData.user_code, verifyUrl);
+  let cliToken = null;
+  const pollIntervalMs = (deviceData.interval ?? 5) * 1e3;
+  const deadline = Date.now() + (deviceData.expires_in ?? 600) * 1e3;
+  const MAX_CONSECUTIVE_ERRORS = 5;
+  let consecutiveErrors = 0;
+  let firstPoll = true;
+  while (Date.now() < deadline) {
+    if (!firstPoll) {
+      await new Promise((r) => setTimeout(r, pollIntervalMs));
+    }
+    firstPoll = false;
+    const outcome = await pollDeviceToken(endpoint, deviceData.device_code);
+    if (outcome.status === "approved") {
+      cliToken = outcome.cliToken;
+      break;
+    }
+    if (outcome.status === "pending") {
+      consecutiveErrors = 0;
+      continue;
+    }
+    if (outcome.status === "error") {
+      if (outcome.retryable) {
+        consecutiveErrors += 1;
+        if (consecutiveErrors < MAX_CONSECUTIVE_ERRORS) continue;
+      }
+      printAuthFailed("error", outcome.message);
+      process.exit(1);
+    }
+    if (outcome.status === "denied") {
+      printAuthFailed("denied");
+      process.exit(1);
+    }
+    if (outcome.status === "expired") {
+      printAuthFailed("timeout");
+      process.exit(1);
+    }
+  }
+  if (!cliToken) {
+    printAuthFailed("timeout");
+    process.exit(1);
+  }
+  printAuthApproved();
+  const projectsList = await listProjects(endpoint, cliToken);
+  let chosenProjectId = projectId;
+  let chosenProjectName;
+  if (!chosenProjectId) {
+    const { createInterface } = await import("readline");
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    const ask = (q) => new Promise((resolve3) => rl.question(q, (a) => resolve3(a.trim())));
+    if (projectsList.length > 0) {
+      console.log("");
+      console.log("  Your projects:");
+      projectsList.forEach((p3, i) => {
+        console.log(`    ${i + 1}. ${p3.name} (${p3.id})`);
+      });
+      console.log(`    ${projectsList.length + 1}. Create a new project`);
+      console.log("");
+      const choice = await ask(`  Pick a project [1-${projectsList.length + 1}]: `);
+      const num = parseInt(choice, 10);
+      if (num >= 1 && num <= projectsList.length) {
+        const picked = projectsList[num - 1];
+        chosenProjectId = picked.id;
+        chosenProjectName = picked.name;
+      }
+    }
+    if (!chosenProjectId) {
+      console.log("");
+      const newName = await ask("  Project name: ");
+      rl.close();
+      if (!newName.trim()) {
+        process.stderr.write("\nerror: Project name is required.\n");
+        process.exit(2);
+      }
+      try {
+        const created = await createProject(endpoint, cliToken, newName.trim());
+        chosenProjectId = created.id;
+        chosenProjectName = created.name;
+        apiKey = created.apiKey ?? void 0;
+        console.log(`  \u2713 Created project "${chosenProjectName}"`);
+      } catch (err) {
+        process.stderr.write(`
+error: Could not create project: ${err instanceof Error ? err.message : String(err)}
+`);
+        process.exit(1);
+      }
+    } else {
+      rl.close();
+    }
+  }
+  if (!apiKey && chosenProjectId) {
+    try {
+      apiKey = await mintProjectKey(endpoint, cliToken, chosenProjectId) ?? void 0;
+    } catch {
+    }
+  }
+  const config = loadConfig();
+  config.endpoint = endpoint;
+  config.consoleUrl = consoleBase;
+  if (chosenProjectId) config.projectId = chosenProjectId;
+  if (apiKey) config.apiKey = apiKey;
+  saveConfig(config);
+  console.log("");
+  if (chosenProjectName) console.log(`  \u2713 Project: ${chosenProjectName}`);
+  if (apiKey) {
+    console.log(`  \u2713 Full-scope CLI key saved (${apiKey.slice(0, 12)}\u2026)`);
+    console.log(`    Scopes: report:write \xB7 mcp:read \xB7 mcp:write \u2014 SDK + MCP + admin CLI (incl. writes) all work with this key`);
+  } else {
+    console.log(`  \u2139  Get an SDK key at: ${apiKeyHint(consoleBase)}`);
+  }
+  console.log("");
+  if (opts.upgradeScope) {
+    console.log("  Key upgraded! Re-run 'mushi setup' to update your .cursor/mcp.json, then restart Cursor.");
+  } else {
+    console.log("  Run 'mushi init' to set up the SDK in this project.");
+  }
+}
 
 // src/commands/deploy.ts
 function registerDeployCommands(program2) {
@@ -2431,8 +2430,11 @@ error: Could not create project: ${err instanceof Error ? err.message : String(e
 }
 
 // src/commands/setup.ts
+function resolveLoginEndpoint(optsEndpoint, existingConfigEndpoint, envEndpoint) {
+  return optsEndpoint ?? existingConfigEndpoint ?? envEndpoint?.trim();
+}
 function registerSetupCommands(program2) {
-  program2.command("setup").description("Wire Cursor MCP into your IDE (reads ~/.config/mushi/config.json \u2014 run `mushi login` first)").option("--ide <ide>", "Target IDE: cursor | claude | continue | zed", "cursor").option("--project-slug <slug>", "Override the project slug in the server name (default: fetched from API or ID prefix)").option("--all-projects", "Write a separate mushi-<name> server entry for every accessible project").option("--with-rules", "Also write the .cursorrules / .claude/rules/mushi.md lesson-library hook").option("--dry-run", "Print what would be written without making changes").option("--verify", "Probe the MCP key after writing to confirm it has mcp:read scope (default: on)").option("--no-verify", "Skip the post-write key probe").addHelpText("after", `
+  program2.command("setup").description("Wire Cursor MCP into your IDE (reads ~/.config/mushi/config.json \u2014 run `mushi login` first)").option("--ide <ide>", "Target IDE: cursor | claude | continue | zed", "cursor").option("--project-slug <slug>", "Override the project slug in the server name (default: fetched from API or ID prefix)").option("--all-projects", "Write a separate mushi-<name> server entry for every accessible project").option("--with-rules", "Also write the .cursorrules / .claude/rules/mushi.md lesson-library hook").option("--dry-run", "Print what would be written without making changes").option("--verify", "Probe the MCP key after writing to confirm it has mcp:read scope (default: on)").option("--no-verify", "Skip the post-write key probe").option("--endpoint <url>", "Override the Mushi API endpoint (self-hosted) \u2014 used for first-run login if not yet configured").addHelpText("after", `
 Examples:
   mushi setup                         # wire Cursor (default)
   mushi setup --all-projects          # one server entry per accessible project
@@ -2450,6 +2452,11 @@ The command reads credentials from ~/.config/mushi/config.json (run \`mushi logi
     const { existsSync: existsSync3 } = await import("fs");
     const nodePath2 = await import("path");
     const os = await import("os");
+    const existingConfig = loadConfig();
+    if (!existingConfig.apiKey) {
+      const endpoint = resolveLoginEndpoint(opts.endpoint, existingConfig.endpoint, process.env.MUSHI_API_ENDPOINT);
+      await runLogin({ endpoint });
+    }
     const config = requireConfig({ needsProject: true });
     const redactKeyForDisplay = (text2) => {
       const key = config.apiKey;

package/dist/init.js

@@ -14,7 +14,7 @@ import {
   resolveConsoleUrl,
   resolveConsoleUrlSync,
   saveConfig
-} from "./chunk-GUVGTFVK.js";
+} from "./chunk-2WHQONHK.js";
 import {
   FRAMEWORKS,
   detectFramework,
@@ -25,7 +25,7 @@ import {
 } from "./chunk-AIZRI665.js";
 import {
   MUSHI_CLI_VERSION
-} from "./chunk-X74T7JKC.js";
+} from "./chunk-SS42XQ57.js";
 
 // src/init.ts
 import * as p from "@clack/prompts";
@@ -224,28 +224,26 @@ async function createProject(endpoint, cliToken, name) {
 }
 async function mintProjectKey(endpoint, cliToken, projectId) {
   const base = trimTrailingSlash(endpoint);
-  return withOneRetry(async () => {
-    let res;
-    try {
-      res = await deviceFetch(`${base}/v1/cli/projects/${projectId}/keys`, {
-        method: "POST",
-        headers: cliAuthHeaders(cliToken),
-        body: JSON.stringify({})
-      });
-    } catch (err) {
-      throw new DeviceAuthRequestError(
-        "mint_key",
-        `Could not reach ${base}/v1/cli/projects/\u2026/keys: ${err instanceof Error ? err.message : String(err)}`
-      );
-    }
-    const json = await res.json().catch(() => null);
-    if (res.ok && json?.ok && json.data?.key) return json.data.key;
+  let res;
+  try {
+    res = await deviceFetch(`${base}/v1/cli/projects/${projectId}/keys`, {
+      method: "POST",
+      headers: cliAuthHeaders(cliToken),
+      body: JSON.stringify({})
+    });
+  } catch (err) {
     throw new DeviceAuthRequestError(
       "mint_key",
-      json?.error?.message ?? `Could not mint an SDK key (HTTP ${res.status}).`,
-      res.ok ? void 0 : res.status
+      `Could not reach ${base}/v1/cli/projects/\u2026/keys: ${err instanceof Error ? err.message : String(err)}`
     );
-  });
+  }
+  const json = await res.json().catch(() => null);
+  if (res.ok && json?.ok && json.data?.key) return json.data.key;
+  throw new DeviceAuthRequestError(
+    "mint_key",
+    json?.error?.message ?? `Could not mint an SDK key (HTTP ${res.status}).`,
+    res.status
+  );
 }
 
 // src/freshness.ts
@@ -943,7 +941,7 @@ async function maybeOfferConnect(credentials, options, _consoleBase) {
   if (p.isCancel(answer) || !answer) return;
   const endpoint = resolveCloudEndpoint(options.endpoint);
   try {
-    const { runConnect } = await import("./connect-7LTQRBEW.js");
+    const { runConnect } = await import("./connect-XFWRSEMW.js");
     await runConnect({
       apiKey: credentials.apiKey,
       projectId: credentials.projectId,

package/dist/version.js

@@ -1,6 +1,6 @@
 import {
   MUSHI_CLI_VERSION
-} from "./chunk-X74T7JKC.js";
+} from "./chunk-SS42XQ57.js";
 export {
   MUSHI_CLI_VERSION
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mushi-mushi/cli",
-  "version": "0.24.0",
+  "version": "0.25.0",
   "license": "MIT",
   "description": "CLI for Mushi Mushi — `mushi init` wizard installs the right SDK for your framework, plus report triage and pipeline health commands",
   "bin": {

package/dist/chunk-X74T7JKC.js

@@ -1,6 +0,0 @@
-// src/version.ts
-var MUSHI_CLI_VERSION = true ? "0.24.0" : "0.0.0-dev";
-
-export {
-  MUSHI_CLI_VERSION
-};