@@ -2,32 +2,42 @@
   <img src="assets/logo.svg" alt="Confidence" width="120" />
 </p>
 
-<h1 align="center">Confidence Quickstart</h1>
+<h1 align="center">Confidence CLI</h1>
 
 <p align="center">
-  Get up and running with <a href="https://confidence.spotify.com">Confidence</a> in minutes. One command sets up authentication, installs the right SDK, connects MCP servers, and onboards your AI assistant — so you can start managing feature flags and experiments without leaving your editor.
+  CLI tools for setting up and managing <a href="https://confidence.spotify.com">Confidence</a> feature flags, experiments, and integrations.
 </p>
 
 <p align="center">
   <a href="https://confidence.spotify.com/docs/introduction"><img alt="Docs" src="https://img.shields.io/badge/docs-confidence.spotify.com-6E56CF"></a>
   <a href="./LICENSE"><img alt="License" src="https://img.shields.io/badge/license-Apache--2.0-blue"></a>
-  <a href="./CHANGELOG.md"><img alt="npm version" src="https://img.shields.io/npm/v/@spotify-confidence/quickstart?color=informational"></a>
 </p>
 
-## Highlights
+## Packages
 
-- **Zero-to-flags in one command** — run `npx @spotify-confidence/quickstart` and the interactive wizard handles the rest
-- **Auto-detects your stack** — React, Next.js, Node, Python, Swift, Kotlin, Java, and Go; installs the matching Confidence SDK
-- **Connects your AI assistant** — configures MCP servers and IDE plugins for Claude Code, Cursor, or Codex so your agent can manage flags inline
-- **Guided onboarding** — generates project context files that teach your AI assistant how your Confidence setup works
-- **Migrating from another platform?** Pair with [Confidence AI Plugins](https://github.com/spotify/confidence-ai-plugins) for one-command migrations from PostHog, Eppo, Statsig, or Optimizely
+This monorepo contains two published packages:
 
-## Quick Start
+| Package | Description | |
+| ------- | ----------- | --- |
+| [`@spotify-confidence/cli`](./packages/cli/) | CLI for managing Confidence — flags, events, recordings, config, MCP | [![npm](https://img.shields.io/npm/v/@spotify-confidence/cli?color=informational)](https://www.npmjs.com/package/@spotify-confidence/cli) |
+| [`@spotify-confidence/quickstart`](./packages/quickstart/) | Interactive TUI wizard for first-time project setup | [![npm](https://img.shields.io/npm/v/@spotify-confidence/quickstart?color=informational)](https://www.npmjs.com/package/@spotify-confidence/quickstart) |
+
+## Get Started
+
+**Set up a new project** with the interactive wizard:
 
 ```bash
 npx @spotify-confidence/quickstart
 ```
 
+**Or install the CLI** for ongoing management:
+
+```bash
+npm install -g @spotify-confidence/cli
+confidence login
+confidence flags setup
+```
+
 Requires Node.js 24+.
 
 ## Confidence AI Plugins
@@ -47,57 +57,6 @@ Found a bug or have a feature request? [Open an issue](https://github.com/spotif
 
 ---
 
-## Usage
-
-```
-confidence-quickstart [command] [options]
-```
-
-### Commands
-
-| Command     | Description                         |
-| ----------- | ----------------------------------- |
-| _(default)_ | Launch the interactive setup wizard |
-| `start`     | Alias for the default command       |
-| `help`      | Show the help message               |
-
-### Options
-
-| Option           | Description                                       |
-| ---------------- | ------------------------------------------------- |
-| `--dir <path>`   | Project directory to run the wizard in            |
-| `--dry-run`      | Run without making real API calls                 |
-| `--debug`        | Enable debug output and preserve terminal history |
-| `--no-telemetry` | Disable anonymous usage telemetry                 |
-
-## Security Note
-
-During the **project onboarding** step, the wizard spawns your chosen AI agent to integrate the Confidence SDK into your project. You will be prompted to confirm before this step begins. Each agent runs with different permissions:
-
-- **Claude Code** — Spawned in non-interactive (`--print`) mode using its standard permission model. It can read files and execute tools within your project directory as allowed by your existing Claude Code settings. No elevated trust flags are applied.
-- **Cursor** — Spawned in agent mode with `--trust`, which grants full read/write access to files in your project directory and allows it to run shell commands (e.g. `npm install`) without individual approval prompts. MCP server connections are also auto-approved (`--approve-mcps`).
-- **Codex** — Spawned in `exec` mode with `--sandbox danger-full-access`, which grants unrestricted filesystem and network access. It can read and write any file, run shell commands, and make network requests without sandboxing restrictions. Full access is required because the onboarding agent needs to install npm packages, modify project configuration files, and download SDK dependencies — operations that Codex's default sandbox would block.
-
-All agents are scoped to your project directory and run with a timeout. The wizard installs a Confidence skill/plugin and connects MCP servers _before_ spawning the agent, so configuration files may already be written to your project at that point.
-
-## Telemetry
-
-The wizard collects anonymous usage data (e.g. which steps you complete) to help improve the experience. No personal or project data is collected.
-
-To opt out:
-
-```bash
-npx @spotify-confidence/quickstart --no-telemetry
-```
-
-Or set the environment variable:
-
-```bash
-CONFIDENCE_TELEMETRY=false npx @spotify-confidence/quickstart
-```
-
-Telemetry is automatically disabled in CI environments and during development.
-
 ## Development
 
 On Windows, clone with symlinks enabled so `CLAUDE.md` is not checked out as a copy (which breaks Prettier):
@@ -109,13 +68,14 @@ git clone -c core.symlinks=true https://github.com/spotify/confidence-cli.git
 If the repo is already cloned, run `git checkout -- CLAUDE.md` after `git config core.symlinks true`.
 
 ```bash
-pnpm install
-pnpm try          # Run the wizard locally via tsx
-pnpm test         # Run vitest
-pnpm lint         # ESLint + Prettier check
-pnpm typecheck    # TypeScript type checking
-pnpm qa           # Run all checks (typecheck + lint + test)
-pnpm build        # Build for distribution
+pnpm install                                          # Install all workspace deps
+pnpm --filter @spotify-confidence/quickstart try      # Run the wizard locally via tsx
+pnpm --filter @spotify-confidence/cli try             # Run the CLI locally via tsx
+pnpm test                                             # Run all tests
+pnpm lint                                             # ESLint + Prettier check
+pnpm typecheck                                        # TypeScript type checking
+pnpm qa                                               # Run all checks (typecheck + lint + test)
+pnpm build                                            # Build all packages
 ```
 
 ### Troubleshooting
 
@@ -0,0 +1,125 @@
+<p align="center">
+  <img src="../../assets/logo.svg" alt="Confidence" width="120" />
+</p>
+
+<h1 align="center">Confidence CLI</h1>
+
+<p align="center">
+  Manage <a href="https://confidence.spotify.com">Confidence</a> feature flags, events, session recordings, and MCP integrations from the command line.
+</p>
+
+<p align="center">
+  <a href="https://confidence.spotify.com/docs/introduction"><img alt="Docs" src="https://img.shields.io/badge/docs-confidence.spotify.com-6E56CF"></a>
+  <a href="../../LICENSE"><img alt="License" src="https://img.shields.io/badge/license-Apache--2.0-blue"></a>
+  <a href="./CHANGELOG.md"><img alt="npm version" src="https://img.shields.io/npm/v/@spotify-confidence/cli?color=informational"></a>
+</p>
+
+## Install
+
+```bash
+npm install -g @spotify-confidence/cli
+```
+
+Requires Node.js 24+.
+
+## Quick Start
+
+```bash
+confidence login           # Sign in via browser OAuth
+confidence flags setup     # Set up feature flags in your project
+confidence events list     # List all event definitions
+confidence quickstart      # Launch the interactive setup wizard
+```
+
+## Commands
+
+### Authentication
+
+| Command             | Description                                      |
+| ------------------- | ------------------------------------------------ |
+| `confidence login`  | Sign in to Confidence via browser OAuth          |
+| `confidence logout` | Clear stored credentials                         |
+| `confidence whoami` | Show current user, org, region, and token expiry |
+
+### Feature Flags
+
+| Command                  | Description                                            |
+| ------------------------ | ------------------------------------------------------ |
+| `confidence flags setup` | Set up feature flags in your project via guided wizard |
+
+### Events
+
+| Command                                | Description                             |
+| -------------------------------------- | --------------------------------------- |
+| `confidence events list`               | List all event definitions              |
+| `confidence events create --name <id>` | Create a new event definition           |
+| `confidence events update <name>`      | Update an event definition's schema     |
+| `confidence events delete <name>`      | Delete an event definition              |
+| `confidence events usage <name>`       | Show recent event usage statistics      |
+| `confidence events setup`              | Set up event tracking via guided wizard |
+
+### Session Recordings
+
+| Command                                             | Description                         |
+| --------------------------------------------------- | ----------------------------------- |
+| `confidence recordings setup`                       | Set up recordings via guided wizard |
+| `confidence recordings policy list`                 | List recording policies             |
+| `confidence recordings policy create`               | Create a new recording policy       |
+| `confidence recordings policy get <policy>`         | Show policy details with rules      |
+| `confidence recordings rule add`                    | Add a sampling rule to a policy     |
+| `confidence recordings rule enable <rule>`          | Enable a recording rule             |
+| `confidence recordings rule disable <rule>`         | Disable a recording rule            |
+| `confidence recordings targeting-key show <client>` | Show available targeting keys       |
+| `confidence recordings targeting-key add`           | Add a targeting key to a client     |
+
+### MCP Servers
+
+| Command                    | Description                                  |
+| -------------------------- | -------------------------------------------- |
+| `confidence mcp install`   | Install MCP servers for your AI coding agent |
+| `confidence mcp uninstall` | Remove MCP server configuration              |
+| `confidence mcp status`    | Check MCP server connection status           |
+| `confidence mcp list`      | List available MCP servers                   |
+| `confidence mcp auth`      | Refresh MCP server credentials               |
+
+### Configuration
+
+| Command                             | Description                     |
+| ----------------------------------- | ------------------------------- |
+| `confidence config set <key> <val>` | Set a configuration value       |
+| `confidence config get <key>`       | Get a configuration value       |
+| `confidence config list`            | List all configuration values   |
+| `confidence config reset`           | Reset configuration to defaults |
+
+### Other
+
+| Command                 | Description                                    |
+| ----------------------- | ---------------------------------------------- |
+| `confidence quickstart` | Launch the interactive Confidence setup wizard |
+| `confidence update`     | Update the CLI to the latest version           |
+| `confidence --help`     | Show help with examples                        |
+| `confidence --version`  | Show CLI version                               |
+
+## Global Options
+
+| Option      | Description                                |
+| ----------- | ------------------------------------------ |
+| `--json`    | Force JSON output                          |
+| `--output`  | Output format: `json`, `table`, or `plain` |
+| `--profile` | Use a named auth profile                   |
+| `--help`    | Show help                                  |
+| `--version` | Show version number                        |
+
+## Output Formats
+
+The CLI auto-detects the best output format: tables in interactive terminals, JSON when piped. Override with `--json` or `--output`:
+
+```bash
+confidence events list --json              # Force JSON
+confidence whoami --output plain           # Force plain text
+confidence events list | jq '.data[].name' # Pipe-friendly JSON
+```
+
+## License
+
+[Apache License 2.0](../../LICENSE)
@@ -0,0 +1,138 @@
+import {
+  server,
+  registryReturns as registryReturnsHandler,
+  registryFails as registryFailsHandler,
+} from '@spotify-confidence/testing';
+
+import { updateCommand } from '@commands/update.js';
+import { captureOutput } from '../helpers/capture.js';
+import { createRunner } from '../helpers/run-command.js';
+
+const mockExecFile = vi.fn<(...args: unknown[]) => Promise<{ stdout: string; stderr: string }>>();
+const mockDetectPM = vi.fn<() => string>();
+
+vi.mock('@spotify-confidence/core', async (importOriginal) => {
+  const actual = await importOriginal<typeof import('@spotify-confidence/core')>();
+  return { ...actual, execFile: (...args: unknown[]) => mockExecFile(...args) };
+});
+
+vi.mock('../../src/features/update/detect-pm.js', () => ({
+  detectPackageManager: () => mockDetectPM(),
+}));
+
+vi.mock('@meta', () => ({
+  APP_NAME: 'confidence',
+  CLI_VERSION: '1.0.0',
+}));
+
+vi.mock('ora', () => {
+  const spinner = {
+    start: vi.fn().mockReturnThis(),
+    stop: vi.fn().mockReturnThis(),
+    succeed: vi.fn().mockReturnThis(),
+    fail: vi.fn().mockReturnThis(),
+  };
+  return { default: () => spinner };
+});
+
+const run = createRunner(updateCommand);
+
+beforeEach(() => {
+  vi.clearAllMocks();
+  mockDetectPM.mockReturnValue('npm');
+});
+
+function registryReturns(version: string) {
+  server.use(registryReturnsHandler(version));
+}
+
+function registryFails() {
+  server.use(registryFailsHandler());
+}
+
+describe('update', () => {
+  it('reports up to date when versions match', async () => {
+    using output = captureOutput();
+    registryReturns('1.0.0');
+
+    await run(['update']);
+
+    expect(output.stderr).toBe('');
+  });
+
+  it('runs the install command for the detected package manager', async () => {
+    using _output = captureOutput();
+    registryReturns('2.0.0');
+    mockDetectPM.mockReturnValue('npm');
+    mockExecFile.mockResolvedValueOnce({ stdout: '', stderr: '' });
+
+    await run(['update']);
+
+    expect(mockExecFile).toHaveBeenCalledWith('npm', [
+      'install',
+      '-g',
+      '@spotify-confidence/cli@latest',
+    ]);
+  });
+
+  it('advises npx users to run the latest version manually', async () => {
+    using output = captureOutput();
+    registryReturns('2.0.0');
+    mockDetectPM.mockReturnValue('npx');
+
+    await run(['update']);
+
+    expect(output.stdout).toContain('npx');
+    expect(output.stdout).toContain('@latest');
+    expect(mockExecFile).not.toHaveBeenCalled();
+  });
+
+  it('reports a friendly error when the registry is unreachable', async () => {
+    using output = captureOutput();
+    registryFails();
+
+    await run(['update']);
+
+    expect(output.stderr).toContain('npm registry');
+  });
+
+  it('advises Yarn Berry users to reinstall with npm', async () => {
+    using output = captureOutput();
+    registryReturns('2.0.0');
+    mockDetectPM.mockReturnValue('yarn');
+    mockExecFile.mockResolvedValueOnce({ stdout: '4.1.0\n', stderr: '' });
+
+    await run(['update']);
+
+    expect(output.stdout).toContain('Yarn Berry');
+    expect(output.stdout).toContain('npm install -g');
+    expect(mockExecFile).toHaveBeenCalledTimes(1);
+  });
+
+  it('runs yarn global add for Yarn Classic', async () => {
+    using _output = captureOutput();
+    registryReturns('2.0.0');
+    mockDetectPM.mockReturnValue('yarn');
+    mockExecFile.mockResolvedValueOnce({ stdout: '1.22.19\n', stderr: '' });
+    mockExecFile.mockResolvedValueOnce({ stdout: '', stderr: '' });
+
+    await run(['update']);
+
+    expect(mockExecFile).toHaveBeenCalledWith('yarn', [
+      'global',
+      'add',
+      '@spotify-confidence/cli@latest',
+    ]);
+  });
+
+  it('reports permission errors with a link to npm docs', async () => {
+    using output = captureOutput();
+    registryReturns('2.0.0');
+    mockExecFile.mockRejectedValueOnce(new Error('EACCES: permission denied'));
+
+    await run(['update']);
+
+    expect(output.stderr).toContain('Permission denied');
+    expect(output.stderr).toContain('docs.npmjs.com');
+  });
+});