@mushi-mushi/cli 0.25.0 → 0.26.1

package/CONTRIBUTING.md

@@ -76,6 +76,7 @@ packages/
 apps/
   admin/         Admin dashboard (React + Tailwind)
   docs/          Documentation site (Nextra — apps/docs)
+  testers/       Tester marketplace portal (Next.js)
 tooling/
   eslint-config/ Shared ESLint flat config
   tsconfig/      Shared TypeScript configs
@@ -118,15 +119,22 @@ If your PR changes **user-visible SDK or CLI behavior**, update docs in the **sa
 Guardrails (run locally before pushing):
 
 ```bash
-pnpm check:docs-stats          # root README stat badges
+pnpm check:docs-stats          # root README stat badges + glance <sub> line
 pnpm check:sdk-version-matrix  # apps/docs/content/sdks/index.mdx versions
 pnpm check:internal-doc-links  # dead /foo links in MDX
-pnpm check:onboarding-drift    # phantom MCP env vars / stale tool names
+pnpm check:onboarding-drift    # phantom MCP env vars / stale tool names / native install coords
+pnpm check:catalog-sync        # MCP catalog ↔ admin counts ↔ prose "N tools"
+pnpm check:mcp-tools-doc       # mcp-tools.generated.mdx stale check
 pnpm check:bundle-docs         # @mushi-mushi/web size-limit vs README
+pnpm check:docs-drift          # versions + public docs links
 pnpm gen:llms-txt              # regenerate apps/docs/public/llms.txt after nav changes
 pnpm gen:mcp-tools-doc         # regenerate sdks/mcp-tools.generated.mdx from catalog.ts
 ```
 
+**Same-PR rule:** if behavior, env vars, CLI commands, MCP tools, or install
+coordinates change, update the matching docs in this PR and run
+`pnpm check:docs-drift && pnpm check:onboarding-drift && pnpm check:catalog-sync`.
+
 README changes on npm packages only appear on [npmjs.com](https://www.npmjs.com) after the next **Changesets publish**.
 
 ## Changesets

package/SECURITY.md

@@ -111,7 +111,7 @@ What we treat as in-scope attacker capabilities, and what we don't.
 | User pasting a Stripe / OpenAI / GitHub PAT into a bug report | ✅ | PII scrubber redacts ~15 vendor token formats client-side before the report leaves the device. Mirrors `packages/core/src/pii-scrubber.ts` across iOS, Android, Flutter, React Native. |
 | Stolen end-user device with the SDK installed | ⚠️ partial | Offline queue is AsyncStorage / Keychain / SharedPreferences — no app-level encryption beyond the OS default. Reports waiting to flush are vulnerable to a forensic attacker. |
 | Compromised Supabase service-role key | ❌ | Treated as a tier-0 incident; would require key rotation and audit-log forensics. Not defendable in software. |
-| Compromise of `kensaurus@gmail.com` | ❌ | Treated as a project-fork event; downstream consumers should pin to the last known-good version and follow the new release channel. |
+| Compromise of `kensaurus@gmail.com` mail account | ❌ | Treated as a project-fork event; downstream consumers should pin to the last known-good version and follow the new release channel. |
 | Physical / OS-level attacker on an end-user device | ❌ | Out of scope. |
 | Malicious fork using the Mushi name to ship malware | ❌ (technical) ✅ (legal) | The MIT / AGPLv3 grant lets the fork exist; the trademark policy (`TRADEMARK.md`) makes shipping it under the Mushi name an infringement we will pursue. |
 
@@ -157,6 +157,29 @@ Structured fields you set explicitly (`metadata.userEmail`,
 opt-in attribution data, and silently rewriting them would break
 support workflows.
 
+### CLI funnel telemetry
+
+The Mushi CLI sends two fire-and-forget signals to `/v1/cli/funnel` on your
+project's endpoint to help us detect where the onboarding wizard drops off:
+
+| Signal | When | What is sent |
+|--------|------|-------------|
+| `wizard_env_written` | After `npx mushi-mushi` writes `.env.local` | `event`, `source: "cli"` |
+| `mcp_setup_done` | After `mushi setup --ide` verifies the MCP key | `event`, `source: "cli"` |
+
+No file contents, stack traces, or identifiers beyond your project ID and API
+key are sent. The key is already on the endpoint — this adds no new disclosure.
+
+**Opt out** by setting `MUSHI_NO_TELEMETRY=1` in your shell or CI environment:
+
+```bash
+MUSHI_NO_TELEMETRY=1 npx mushi-mushi
+MUSHI_NO_TELEMETRY=1 mushi setup --ide cursor
+```
+
+These signals never block or delay the wizard — they time out silently after
+4 seconds and errors are discarded.
+
 ### Where data lives
 
 - **Reports & telemetry** — Supabase Postgres in the `us-west-1` region.

package/dist/{chunk-3JRQN6S4.js → chunk-2ZLYNNA3.js}

@@ -1,4 +1,8 @@
 #!/usr/bin/env node
+import {
+  MUSHI_CLI_VERSION,
+  MUSHI_MCP_PIN_SPEC
+} from "./chunk-6XYPFV23.js";
 import {
   CLOUD_API_ENDPOINT,
   assertEndpoint,
@@ -115,9 +119,6 @@ function tightenDirPermissions(path) {
   }
 }
 
-// src/version.ts
-var MUSHI_CLI_VERSION = true ? "0.25.0" : "0.0.0-dev";
-
 // src/errors.ts
 var EXIT_CODE_MAP = {
   E_AUTH_MISSING: 2,
@@ -1075,7 +1076,7 @@ async function writeMcpServerEntry(opts) {
 function buildMcpServerBlock(opts) {
   return {
     command: "npx",
-    args: ["-y", "@mushi-mushi/mcp@latest"],
+    args: ["-y", MUSHI_MCP_PIN_SPEC],
     env: {
       MUSHI_API_ENDPOINT: opts.endpoint,
       MUSHI_PROJECT_ID: opts.projectId,
@@ -1225,7 +1226,6 @@ async function runConnect(opts, baseConfig = {}) {
 export {
   printAndExit,
   installSignalHandlers,
-  MUSHI_CLI_VERSION,
   loadConfig,
   ensureClientId,
   saveConfig,

package/dist/chunk-6XYPFV23.js

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+
+// src/version.ts
+var MUSHI_CLI_VERSION = true ? "0.26.1" : "0.0.0-dev";
+var MUSHI_MCP_PIN_SPEC = "@mushi-mushi/mcp@0.19.0";
+
+export {
+  MUSHI_CLI_VERSION,
+  MUSHI_MCP_PIN_SPEC
+};

package/dist/chunk-PCTMFRKN.js

@@ -0,0 +1,8 @@
+// src/version.ts
+var MUSHI_CLI_VERSION = true ? "0.26.1" : "0.0.0-dev";
+var MUSHI_MCP_PIN_SPEC = "@mushi-mushi/mcp@0.19.0";
+
+export {
+  MUSHI_CLI_VERSION,
+  MUSHI_MCP_PIN_SPEC
+};

package/dist/{chunk-2WHQONHK.js → chunk-QOY3DULB.js}

@@ -1,6 +1,6 @@
 import {
   MUSHI_CLI_VERSION
-} from "./chunk-SS42XQ57.js";
+} from "./chunk-PCTMFRKN.js";
 
 // src/config.ts
 import { randomUUID } from "crypto";
@@ -415,6 +415,117 @@ async function apiCall(path, config, options = {}) {
   }
 }
 
+// src/sanitize-config.ts
+var PROJECT_ID_RE = /^(?:proj_[A-Za-z0-9_-]{10,}|[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/i;
+var API_KEY_RE = /^(mushi_|mush_pk_)[A-Za-z0-9_-]{10,}$/;
+function sanitizeApiKey(raw) {
+  const key = raw.replace(/[\r\n\0]/g, "");
+  if (!API_KEY_RE.test(key)) {
+    throw new Error(
+      "Invalid API key in config \u2014 run `mushi login --api-key <key>` to refresh credentials."
+    );
+  }
+  return key;
+}
+function sanitizeProjectId(raw) {
+  const id = raw.trim();
+  if (!PROJECT_ID_RE.test(id)) {
+    throw new Error(
+      "Invalid project ID in config \u2014 expected a UUID or proj_* slug from the admin console."
+    );
+  }
+  return id;
+}
+function sanitizeEndpoint(raw) {
+  return assertEndpoint(normalizeEndpoint(raw));
+}
+function sanitizeCliCredentials(config) {
+  if (!config.endpoint || !config.apiKey || !config.projectId) {
+    throw new Error("Missing endpoint, apiKey, or projectId");
+  }
+  return {
+    endpoint: sanitizeEndpoint(config.endpoint),
+    apiKey: sanitizeApiKey(config.apiKey),
+    projectId: sanitizeProjectId(config.projectId)
+  };
+}
+function apiKeyHeaders(apiKey, projectId) {
+  const headers = {
+    Authorization: `Bearer ${apiKey}`,
+    "X-Mushi-Api-Key": apiKey
+  };
+  if (projectId) headers["X-Mushi-Project"] = projectId;
+  return headers;
+}
+
+// src/heartbeat-wait.ts
+var IngestSetupHttpError = class extends Error {
+  status;
+  constructor(status) {
+    super(`ingest-setup HTTP ${status}`);
+    this.name = "IngestSetupHttpError";
+    this.status = status;
+  }
+};
+var NON_RETRYABLE_STATUSES = /* @__PURE__ */ new Set([401, 403, 404]);
+async function fetchIngestSetup(config, doFetch = globalThis.fetch) {
+  const endpoint = sanitizeEndpoint(config.endpoint);
+  const apiKey = sanitizeApiKey(config.apiKey);
+  const projectId = config.projectId ? sanitizeProjectId(config.projectId) : void 0;
+  const res = await doFetch(`${endpoint}/v1/sync/ingest-setup`, {
+    headers: apiKeyHeaders(apiKey, projectId),
+    signal: AbortSignal.timeout(8e3)
+  });
+  if (!res.ok) {
+    if (NON_RETRYABLE_STATUSES.has(res.status)) throw new IngestSetupHttpError(res.status);
+    return null;
+  }
+  const body = await res.json();
+  return body.ok && body.data ? body.data : null;
+}
+async function waitForIngestReady(options) {
+  const doFetch = options.fetch ?? globalThis.fetch;
+  const maxAttempts = options.maxAttempts ?? 40;
+  const intervalMs = options.intervalMs ?? 3e3;
+  let lastPayload = null;
+  for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+    if (options.signal?.aborted) {
+      return { ok: false, payload: lastPayload, attempts: attempt - 1, reason: "aborted" };
+    }
+    try {
+      lastPayload = await fetchIngestSetup(
+        { endpoint: options.endpoint, apiKey: options.apiKey, projectId: options.projectId },
+        doFetch
+      );
+      if (lastPayload) {
+        options.onPoll?.(lastPayload, attempt);
+        if (lastPayload.ready) {
+          return { ok: true, payload: lastPayload, attempts: attempt, reason: "ready" };
+        }
+        const sdkStep = lastPayload.steps.find((s) => s.id === "sdk_installed");
+        if (sdkStep?.complete) {
+          return { ok: true, payload: lastPayload, attempts: attempt, reason: "heartbeat" };
+        }
+      }
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      if (err instanceof IngestSetupHttpError) {
+        return { ok: false, payload: lastPayload, attempts: attempt, reason: "unauthorized", error: msg };
+      }
+      if (options.signal?.aborted) {
+        return { ok: false, payload: lastPayload, attempts: attempt, reason: "aborted", error: msg };
+      }
+      if (attempt === maxAttempts) {
+        return { ok: false, payload: lastPayload, attempts: attempt, reason: "fetch-error", error: msg };
+      }
+    }
+    if (attempt < maxAttempts) {
+      await new Promise((r) => setTimeout(r, intervalMs));
+    }
+  }
+  return { ok: false, payload: lastPayload, attempts: maxAttempts, reason: "timeout" };
+}
+
 export {
   CONFIG_PATH,
   loadConfig,
@@ -433,5 +544,10 @@ export {
   assertEndpoint,
   normalizeEndpoint,
   requireUuid,
-  apiCall
+  apiCall,
+  sanitizeEndpoint,
+  sanitizeCliCredentials,
+  apiKeyHeaders,
+  fetchIngestSetup,
+  waitForIngestReady
 };

package/dist/{connect-22IHGT2L.js → connect-2LCLLN7R.js}

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 import {
   runConnect
-} from "./chunk-3JRQN6S4.js";
+} from "./chunk-2ZLYNNA3.js";
+import "./chunk-6XYPFV23.js";
 import "./chunk-LDPFTQLE.js";
 export {
   runConnect

package/dist/{connect-XFWRSEMW.js → connect-PXLW4D64.js}

@@ -1,122 +1,23 @@
 import {
   CONFIG_PATH,
   assertEndpoint,
-  normalizeEndpoint,
   requireUuid,
-  saveConfig
-} from "./chunk-2WHQONHK.js";
+  saveConfig,
+  waitForIngestReady
+} from "./chunk-QOY3DULB.js";
+import {
+  MUSHI_MCP_PIN_SPEC
+} from "./chunk-PCTMFRKN.js";
 import {
   detectFramework,
   envVarsToWrite,
   readPackageJson
 } from "./chunk-AIZRI665.js";
-import "./chunk-SS42XQ57.js";
 
 // src/connect.ts
 import { appendFile, readFile as readFile2, writeFile as writeFile2 } from "fs/promises";
 import { join, resolve } from "path";
 
-// src/sanitize-config.ts
-var PROJECT_ID_RE = /^(?:proj_[A-Za-z0-9_-]{10,}|[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/i;
-var API_KEY_RE = /^(mushi_|mush_pk_)[A-Za-z0-9_-]{10,}$/;
-function sanitizeApiKey(raw) {
-  const key = raw.replace(/[\r\n\0]/g, "");
-  if (!API_KEY_RE.test(key)) {
-    throw new Error(
-      "Invalid API key in config \u2014 run `mushi login --api-key <key>` to refresh credentials."
-    );
-  }
-  return key;
-}
-function sanitizeProjectId(raw) {
-  const id = raw.trim();
-  if (!PROJECT_ID_RE.test(id)) {
-    throw new Error(
-      "Invalid project ID in config \u2014 expected a UUID or proj_* slug from the admin console."
-    );
-  }
-  return id;
-}
-function sanitizeEndpoint(raw) {
-  return assertEndpoint(normalizeEndpoint(raw));
-}
-function apiKeyHeaders(apiKey, projectId) {
-  const headers = {
-    Authorization: `Bearer ${apiKey}`,
-    "X-Mushi-Api-Key": apiKey
-  };
-  if (projectId) headers["X-Mushi-Project"] = projectId;
-  return headers;
-}
-
-// src/heartbeat-wait.ts
-var IngestSetupHttpError = class extends Error {
-  status;
-  constructor(status) {
-    super(`ingest-setup HTTP ${status}`);
-    this.name = "IngestSetupHttpError";
-    this.status = status;
-  }
-};
-var NON_RETRYABLE_STATUSES = /* @__PURE__ */ new Set([401, 403, 404]);
-async function fetchIngestSetup(config, doFetch = globalThis.fetch) {
-  const endpoint = sanitizeEndpoint(config.endpoint);
-  const apiKey = sanitizeApiKey(config.apiKey);
-  const projectId = config.projectId ? sanitizeProjectId(config.projectId) : void 0;
-  const res = await doFetch(`${endpoint}/v1/sync/ingest-setup`, {
-    headers: apiKeyHeaders(apiKey, projectId),
-    signal: AbortSignal.timeout(8e3)
-  });
-  if (!res.ok) {
-    if (NON_RETRYABLE_STATUSES.has(res.status)) throw new IngestSetupHttpError(res.status);
-    return null;
-  }
-  const body = await res.json();
-  return body.ok && body.data ? body.data : null;
-}
-async function waitForIngestReady(options) {
-  const doFetch = options.fetch ?? globalThis.fetch;
-  const maxAttempts = options.maxAttempts ?? 40;
-  const intervalMs = options.intervalMs ?? 3e3;
-  let lastPayload = null;
-  for (let attempt = 1; attempt <= maxAttempts; attempt++) {
-    if (options.signal?.aborted) {
-      return { ok: false, payload: lastPayload, attempts: attempt - 1, reason: "aborted" };
-    }
-    try {
-      lastPayload = await fetchIngestSetup(
-        { endpoint: options.endpoint, apiKey: options.apiKey, projectId: options.projectId },
-        doFetch
-      );
-      if (lastPayload) {
-        options.onPoll?.(lastPayload, attempt);
-        if (lastPayload.ready) {
-          return { ok: true, payload: lastPayload, attempts: attempt, reason: "ready" };
-        }
-        const sdkStep = lastPayload.steps.find((s) => s.id === "sdk_installed");
-        if (sdkStep?.complete) {
-          return { ok: true, payload: lastPayload, attempts: attempt, reason: "heartbeat" };
-        }
-      }
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      if (err instanceof IngestSetupHttpError) {
-        return { ok: false, payload: lastPayload, attempts: attempt, reason: "unauthorized", error: msg };
-      }
-      if (options.signal?.aborted) {
-        return { ok: false, payload: lastPayload, attempts: attempt, reason: "aborted", error: msg };
-      }
-      if (attempt === maxAttempts) {
-        return { ok: false, payload: lastPayload, attempts: attempt, reason: "fetch-error", error: msg };
-      }
-    }
-    if (attempt < maxAttempts) {
-      await new Promise((r) => setTimeout(r, intervalMs));
-    }
-  }
-  return { ok: false, payload: lastPayload, attempts: maxAttempts, reason: "timeout" };
-}
-
 // src/mcp-config.ts
 import { mkdir, readFile, writeFile } from "fs/promises";
 import { dirname } from "path";
@@ -149,7 +50,7 @@ async function writeMcpServerEntry(opts) {
 function buildMcpServerBlock(opts) {
   return {
     command: "npx",
-    args: ["-y", "@mushi-mushi/mcp@latest"],
+    args: ["-y", MUSHI_MCP_PIN_SPEC],
     env: {
       MUSHI_API_ENDPOINT: opts.endpoint,
       MUSHI_PROJECT_ID: opts.projectId,